last executing test programs: 21.499515995s ago: executing program 2 (id=29): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@private0, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x401}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}, 0xfffffffffffffe35}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x2, 0x4000, 0x20, [0x1]}}]}, 0x158}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002280)=@bpf_lsm={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000002380)='syzkaller\x00', 0x0, 0x3c, 0x0, 0x0, 0x8}, 0x94) 21.440416403s ago: executing program 2 (id=30): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x20, 0x0, 0x1, 0x5, 0x20}]}}, 0x0, 0x2a}, 0x28) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r1, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x1600, 0x0, 0x8}, 0x4040810) 20.570153673s ago: executing program 2 (id=45): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) setns(0xc9, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14381, 0x18200}, [@IFLA_MTU={0x8}]}, 0x28}, 0x1, 0x7000000, 0x0, 0x20000040}, 0x4000) (async) sendmsg$nl_generic(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="5c0000004100010000000000ecffffff020100000f0000003a00010000112233445566778899aabb86dd2c00001c00ff840001110000010101010253aa58fec3258e00000400028004000380"], 0x5c}}, 0x0) 20.56910726s ago: executing program 2 (id=47): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={0x0, 0x0, 0x43}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r1, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="64010000100001000400000000000000fc010000000000000000000000000000000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2], 0x164}}, 0x0) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xffeffffffffffffa]}, 0x8, 0x0) io_setup(0x206, &(0x7f00000001c0)=0x0) io_submit(r5, 0x47f, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000001080)={@in6={{0xa, 0x0, 0xe, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}}, 0x0, 0x0, 0x3d, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r7, &(0x7f0000001180)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000011c0)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x1, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285852ef69992da867f406182d70f47773434b834940000ad628d62a3b45bb98872fb0200"}, 0xd8) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000540)=[{&(0x7f0000001300)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000", 0x53}, {&(0x7f0000000440)="4cf5da30ecee7948897d41586353a1c1eab10a5ef9a15f611f64215647728fc3447faa0ff182813ac30c61206a53683a53c4a09cdb5038c3e6e7c6fef60d92b9cf88dc28dadcb977e9d896df12ce053b36c88a1f7bf94ad867df8cffc8e9a0694b3ca33369c37aba49d5db8f2008cab1be1471a4624b9eeb4acf2f42ee2a325cce80e9be43eb062f9b5237d25d71c38678bb3050d2a11edb4a56347e4766f46271bb058acccd37a98d409b4edd9a1df65224a46e3d0e31adeee40dec2a3bf7c7e4b1bb", 0xc3}], 0x2) write(r6, &(0x7f0000000800)="522db49c98d3b63ab78fbcfb8f35d8", 0xf) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000840)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffc39, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x7, @mcast1, 0x1000}, @ib={0x1b, 0x9, 0x3, {"14481d83ef0e695e92ef99b868998755"}, 0x4, 0x7, 0x5}}}, 0x118) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_driver\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000a80)={'bridge0\x00'}) 20.21019922s ago: executing program 2 (id=49): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xd, 0x8}]}, @struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x3d, 0x0, 0x1, 0x0, 0x78d8a97e5bfca6ff}, 0x28) r0 = syz_usbip_server_init(0x1) write$usbip_server(r0, &(0x7f00000000c0)=ANY=[], 0xffffff2b) 19.778985418s ago: executing program 2 (id=57): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setns(0xc9, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) r2 = openat(r1, &(0x7f0000000900)='net/atm/vc\x00', 0x0, 0x0) read(r2, &(0x7f0000000940)=""/4096, 0x1000) read$FUSE(r2, &(0x7f0000005700)={0x2020}, 0x2020) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) pipe2$9p(&(0x7f00000007c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x2400, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid}, {@version_L}, {@posixacl}], [{@hash}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}}) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="5308fe8e4c59ee609a5ab268afd855a0af46fd165c3e5d9682cbbf6e9668f0e92983a453b2148163ca78a8f3175179259f8a73fb28eecc49ac09149af80a1bc78c06a568003c63b463856b028f246c7796bf6fe12a23de95141e225d7b575139e6ef96648979cdbd1ea3de097a5726390f1063451b979150a3c829a7580c77629f6687f184d9db9d6789cbddf790504291218d8250e3fe4699643e61cdf7093fc1cf0c71b8ee61", 0xa7}], 0x1, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)=""/166, 0xa6}], 0x1}, 0x60}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/182, 0xb6}], 0x1}, 0x5}], 0x2, 0x102, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xc8d0}, 0x20004881) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = socket(0x1e, 0x4, 0x0) getsockopt$inet6_buf(r8, 0x10f, 0x44, 0x0, &(0x7f0000000100)) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) ioctl$KVM_REINJECT_CONTROL(r6, 0xae71, &(0x7f0000000040)={0x9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 19.711591857s ago: executing program 32 (id=57): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setns(0xc9, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) r2 = openat(r1, &(0x7f0000000900)='net/atm/vc\x00', 0x0, 0x0) read(r2, &(0x7f0000000940)=""/4096, 0x1000) read$FUSE(r2, &(0x7f0000005700)={0x2020}, 0x2020) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) pipe2$9p(&(0x7f00000007c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x2400, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid}, {@version_L}, {@posixacl}], [{@hash}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}}) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="5308fe8e4c59ee609a5ab268afd855a0af46fd165c3e5d9682cbbf6e9668f0e92983a453b2148163ca78a8f3175179259f8a73fb28eecc49ac09149af80a1bc78c06a568003c63b463856b028f246c7796bf6fe12a23de95141e225d7b575139e6ef96648979cdbd1ea3de097a5726390f1063451b979150a3c829a7580c77629f6687f184d9db9d6789cbddf790504291218d8250e3fe4699643e61cdf7093fc1cf0c71b8ee61", 0xa7}], 0x1, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)=""/166, 0xa6}], 0x1}, 0x60}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/182, 0xb6}], 0x1}, 0x5}], 0x2, 0x102, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xc8d0}, 0x20004881) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = socket(0x1e, 0x4, 0x0) getsockopt$inet6_buf(r8, 0x10f, 0x44, 0x0, &(0x7f0000000100)) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) ioctl$KVM_REINJECT_CONTROL(r6, 0xae71, &(0x7f0000000040)={0x9}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10.344947574s ago: executing program 1 (id=172): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x581800, 0x108) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x8}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4810) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x40, 0x7, 0x7, 0x48, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x7, 0x8, 0x5, 0x3ff}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex=r2, 0xf, 0x0, 0xff, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r4, 0x40106e8c, &(0x7f00000003c0)=[0x686e, 0x8]) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000400)={0x1d, r3, 0x1, {0x2, 0x1}, 0xfd}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, r5, {0x8, 0x3}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r4) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000500)={0x1, 0xc, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x9f, 0x1ac96148}) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, r7, 0x4, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r4) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xd8, r9, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x6f, 0xa8, @random="37ac5fd801895819b590e3cffe3870bc01f19d45aeb2f83adac950066f6129dfa7d5e5d40e5a8a6b3fc216d6868e57731c19172dbe9f273197739ed5be8c3f2bb7e9d99f5bde55c7d6f66d16d8a45112f49ea05ed5c1bf99b81f826afaa284a367cd792c4e7a18e4cef560"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x90) ioctl$FITHAW(r5, 0xc0045878) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000009c0)={0x9, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) renameat2(r0, &(0x7f0000000a00)='./file0\x00', r0, &(0x7f0000000a40)='./file0\x00', 0x5) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000e40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000ac0)={0x31c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MEDIA={0x108, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x808}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffd0e4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xad15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x79}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8e72}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x60}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6be5a987}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "654a53632f9518c1eb316441498e830c0928094c0d1e79b739bc9663ac2a064cb2a9"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5509}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd3ef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, &(0x7f0000000e80)) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) signalfd4(r10, &(0x7f00000012c0)={[0x6]}, 0x8, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000001800)={&(0x7f0000001300), 0xc8, &(0x7f0000001340)=[{}, {}, {}, {}, {}, {}], &(0x7f00000017c0)}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r11, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x38, r1, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xa9, 0x43}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x16}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000019c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000001e40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001a00)={0x3ec, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1489}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x138, 0x84, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x77c}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x80000000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x80000000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xffffffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3ff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xe30}, @NL80211_BAND_LC={0x8, 0x5, 0xfc5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffa}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x40}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffffc}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="9d7401012c52"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x402}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x268, 0x84, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x40}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xf}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x18, 0x1, @random="3e3666d6d4508d61db705abb9f34d38a1748ac8f"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xc}, @NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfe57}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x16, 0x1, @random="151619ce51249981addb242ecca6dbe70ed3"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffff9}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x3eb}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7fffffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3efa}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xcf4}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffff}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xc}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2ec}]}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="f2ccfd319cc8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xffffff80}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0xd87a}, @NL80211_BAND_5GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="a57230c144fd"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1b, 0x1, @random="444c66e6d272c7db7f57c56dd4d7fdc24a05df845b03d2"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x80}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x811}, 0x4884) 10.263779231s ago: executing program 1 (id=174): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r4, &(0x7f00000004c0)}, 0x20) socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_dev$sndctrl(&(0x7f0000000200), 0xd, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x52, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES8=r5], 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x810) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, &(0x7f0000000180)={'icmp\x00'}, &(0x7f0000000340)=0x1e) ioctl(r6, 0xc4c85513, &(0x7f0000000300)) close_range(r0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='ceph\x00', 0x4810, &(0x7f00000001c0)='grpquota') lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0xffffffffffffffff) 9.359021562s ago: executing program 1 (id=178): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000200)={0x1, 'dummy0\x00', {}, 0x78b}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in=@multicast2}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100002}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0x4, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x51}, 0x4800) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x20000, 0x0) (async) r5 = getpgid(0xffffffffffffffff) sched_getattr(r5, &(0x7f0000000500)={0x38}, 0x38, 0x0) ioctl$CDROMSTART(r2, 0x5308) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000006, 0x10, r0, 0xec078000) (async) syz_open_dev$evdev(&(0x7f0000000540), 0x10, 0x88100) io_setup(0x5d5, &(0x7f0000000580)=0x0) io_cancel(r6, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x669b, r3, &(0x7f00000005c0)="a71a021f6d0adba0b4fcba011ddea5ef4e7298121e337982de66a1fd1e21af3652c845e942eae44c0c6e8437627716a6c44d54b5741aa2df2cb63615b065c3dceb994ba5427ac24c64a03a09964d7bf91e0d3c3a3d71707983d8c3743e6d0f021710260ec70477f4e23abbe4deef421f88827db7090bebf63947c0f4ce8b09d673c53566ad0b89febe45c0ec532f61eb33f319cc8cca5b4f24bdd75daf3f3bd7b6a45355df2ef1fc1959a0", 0xab, 0xa, 0x0, 0x1}, &(0x7f00000006c0)) (async) ioctl$UBLK_U_IO_COMMIT_AND_FETCH_REQ(r2, 0xc0107521, &(0x7f0000001700)={0x1, 0xb93, 0x8, &(0x7f0000000700)=@buf_4k="b3a9f7b55ec3ee4aeb5c3f1a92eab18c63ee600a755cfa22e15ca7f4cd4ada59652fd912f3ad555e136d80204580b8856b1b6c96af3e18e192bf9759c7310d58978989d08fbe81f90284303c4f862d990df9a5d3da1eaebf59fb3677fe7f4568ceca78f4fc61b66526517b9605b8e9cea09bbf5ce849dcf2f850e6733e2eea5356094058f97669df2883bdf7217dc1803bab2023f6466fdd61684601227e56d766a0511cc6c9bcd92eb6fee49dd576789030983d947a221c5c5ee514dda98a782d23d9a2db8cc677bccaf868ce74affd14d9fc39c82f3082edf1ec4ad5a22589f97ce9a88a52977caa608764539f485890cca7ea8754b48ed80bb6844401e825c5e93f78b4f976be8af32d43ca51c655ea5d0bf8459692238bfef343d726340c61f7050ae36dff2df565a01f0e8745c4a884771ba3a4ccb8e496842284f548ef9327bb877dae5dff0255365b8ca506d82c848b4b720d1f3310293e41133b87a6acac667e129d4a0146773abe7fff6bfe7754490066e629b910cd6b7db672c2c56e5498795e052882e146c37f865d6163d63570e256179718167a4c03e06368a6cd4819a55a59be868326b69bb69699f8b792578732772e80b51a4f4a8adf4f39c4f5d0d2472ac79d167a6c224f1b1afaf1b1fc9c1619f9d67ad4db1e77967926f2f713b81ea71e72a176746a02dead108033c4aa9c58dda1521d26bccb01aad1564f1267d6db8316790cffd051d0cb4475e9a617d66339b29640988099aa80b75104b6ac375e61f189493c2fde3ddd3b82d2cb02f358eb4084cbf100391d1a4cb4a5aa07818191bf053dee0863ffc0152cbc2afb1146f0e2c9725fac5c597db9812439e90e61580b8f4f43d02cc5c7eb940db6dcda0cc02c5ded6b07085a59d12e50673dadbb453c2790eeb1fe6ff72de1dbea47b876e7ba4179a08ab094b5f9ed5f0500a1d7119a9d46b79b890efd759f731bf3c409181781ba9db51afbff67c22f8753e9e8dc54d230b1550273aeefd48352b91c231cbfeefdeeab50396f70043209f61280f8225938cbfc9c3916b5d2131a0aff8e847fdbe87796e858b613b1d2508a7359320c585102c391427a3b01ef8ca7e1f9f8df745f21dc79db49f8684e8b81a49cdbf67d8ea966f549a894904e3d7fdb68e14ee3769311d103c7d7b86c7a55558bd495a00b30459f8276aa195b8f325b350f6acbbcc133094b2585ff6c35dff588057bd6f7b62afe22ae68178d1c7f80a184e30983931af761d129e39a179a49d93ab592fe0d7a8f4e1f0155a56c0be1797429d3acb273a7465e8b559d6268f51675e90f78d52c30b66ce27d78ab780dc00b21c3dc88cad611b4aa2106f12e910e0a5f8fbc781db486fa76bc0c2fed3a12a2ed213eae68c7c4391c446cfdb0bf44a6fe06b17c7508b29d45a675155f0eaa990f9da63cab6004dfe4fdebb87563be1407a592832d2d81516da6085a8301a2dae827a79b8da3e17b3e30d2c2d3d1a9970e5ae18170f893d53aa965eba19a9e7256ca58ad21fd6e709a8ca4075b26fada83c457e096f07f13480a7c1617ae332d27b3c6c7fb474a53cdfa2bc3660ddf4b8976ca8c1204d4909a6ea5830b432e3b9bbc6e7850d47ed9006cce3954dee1920e2c46b27158d49c53fbae9d0bf2341abe8183fe4698a99ad3a700aded8c73397a66c1b41672675c8a48809874afe6f83f5c6f243186ae70ed07b762bad965cc9b7107adb58f9efc49b7d8e2cb3a513b674cfbc481780d5728c72349dda97f4ec97d0fefacd7bff21af72eb4b627a6ffe878a63c2c09beab8aa5ac75b6371f4436565441c5ba5d797f5719de7d7e7cd596c243479e292ce9149c2d5c436cdef6ac19d8fd9d0152d150c2828cdef7ee68850b488cd2aa6704da6db35bfd2293c0cc8e9655495a142342ada7ae06e9aa79b56c3cedc8efa692c41a5b068a71e03f8579b68a593dc18555bd86d2a55f05bfc0e897a705ee4dcdf8e9fa2727a81f24b82a66d56d997c136a4faa4e15bcc0307684c057847420ab54c07603f296c6cabac9b1c99ec80f54b32f373208229bde053628f4bd6297ed5bf67d5f8dfdb461cf37139923543416887b2336e25b5e49d61e0421a41661c8e0e3ce722ba57407cd66597553cf970faccd332e2b571ea92175308396f3354b47b85a97aacc9d900f604dd36ce375a129035024837743410813df1f17d76e079b8548486f8c88db65523a61fc2423a2a520cc1b96550ecb18ebc740c5623a6e15bdc0334b239ded6f3788be948448acaa4f82136aa8bba35d73ca42b64e3af8212d661d12c4feb21f48f0691a4a401438cd75de082c4bc9672d14432e3bb8ffb6277f5aa44ef61419a16a089f98c388775dd49cc2c51b75ef11d788d2db0917a00f5605740f9743f5cd655648038869b6d1d78eb225c3ee7d8191ac10e81cdc4edef29d40e76d2554d0c23bf992f2325c017a89a3bc38501e3daf636ea12e348357b47815c4ee6c751cd1767a78b3b5c38e80d96460bf33885065a00dfd6a6ab7ac7a20ba9e919810e32a47f5fe4fbf93c750cf4790c5ddec7e857e591a5463a8e0650afee943deb20fc094afb6d4b8be73681482c1c7f0276016bcd9097b4b6ac86aaac515a4d84828db7418855455664471765bf22385651573b4c7522fd35157c4394a8aecf1f9b2b490fc13c8b9503b0ce39b8e9a9474638f8e93473354b16629b84ae623f8e2402ab244800c09c239b35e5192b77c20622d3cb3069c9df52ab9d2be5686e804856721e2e6ff4bc547bd5def1f894caf32bb2d45ef964d8412d761ff93654867340ceae9d16e7199d5b198fd46a62e0dec77c7294660ea1c5629a132c2e1f17a84131dfceab598842da5ca35d5f564f1357456ea9b2408753a9273702b2a7afc391a04691c521d99eedf8343567d96ce39d8e8a98decabb61027deccfbf29414ff17a8d38d31dddecc1747655c321afdb73164ab107eb49b8de593baf7c8945781d56a8c701928199df79501e3bfc64e79ab71684dd09c0dc1dc1b42f88232e5b2e8e0983cf359d6a17b48b08dcbf404d8d2cc676b1b643e99837c6f246900e6afc48bb2b6ead9757d82bf0e59b13be4aa81ef147eef22c6826cff82ee7f26b3a820c1c0fbb347ec783d237a79f9e45bcec81d701ddf21782b65d022edd2a995a09cd6788603cf1af9f0e08d4b5ccd767c773a26a2d12498192f55e7f45ac0cf77f5175fedced748f1f2ec674d37d103520ce6f9050255a7da331ad9cc18ea31568bbc5a7204dad94dc94499331aa8fb8de52aec85f9a1fc8c8c206bb17bd1669074d17a9cc048ad309aca9b044c10d2c463854a01c2b43493442c0c54c9a836ce2eacdd5ec642421c664af3792a50e5bd22e368f6dbd0d594bdb134937bcfaa78c0a170b70d64635e9023ab07d66fb06a3142faeda09c393bac7a31f46c7e04c56d82823c23dad7a6ad063d36159160fd6c9e952e0254a1df2847d5b331fa64bf1f997469d4566637f9c7f1a574e43c275ce714f0ce049eb1b188ae676af396105fc43139d62f5d850f015ebd82460c242e2f1dacdab43544b23bc6b0443f0da02fbcba33ab945d4c7781e89e707a22fcb4a81efc8bc40201c3b142ed363b576a74efcdf851c79d653823396319c81cec83d1abf0c088ecb1aec8d8fe7c82dc0778cefc5bf79276ae248a6612df88bede589e18da86dc9fd6d2cc8c7cf6c794e5e15f70009947e2da5d7a0201b8baddaa25194701663b7dd48fd6761ef3278affc18cffbb1475beb5170108b12a4a0882606a2e5d63c3748b3d5d1e9e9cea6fc81304d02cca7f68518312d6630e6936352a189301f0be67bd3a68fe06cb6d133568f80fae561bf199742a2b94798073103187e64505e11743523bc074d85a972507f5240849a5a61af96216795c6fcb69dcc72f4c9d15c9e0017f25c7bd68f6d1b0e1e607855032b803c09477ec28e98e90433baa557117ca4cfa7068c5232242be74a4d143783d40253e2a3cd1920a1f88e50cac1acaf302355a110b0cae68b8c3fc57aebfda81dd913c1434cbf2fe54429e71cd8090aca6040b7ec1d2ae00b4f6b88ce7b2cfcd92c23a1ac44ef919a1cbda657255412115f437461aecea1069677f8c4bdc40884619280a90c6efb46f2aae12f85c11014bd583b2838391db7d54db06efa610f40f55d8626aae6eafd24d5e0593e1ff12ad7e9066a00c443864e10777594333dace082ee12957b02a3519d0efeb7f2cafaf4aa9bda66323f834b1a13ff3a9693fa866fe4396e489c5c86702e2c4a583e153942b5682f8603539eb5f03522674bc76e73fb63b591d666270460fe85b272f5affd974c67250e7082704ad0f00bca810913ea0e44d014b7f29d36473d6e22aeec8d3a5952f68a269e3b91ee2dc774f02039418935219d397e8e0a83263f51e331857ec5873d9932d11fdd21c62dddc2327ecaaee3cf4abb45d14b417abb4d0914305285000a5648e9098d3b639f3a75a382e9b5fe309d7943b126f4cd4c9f1370ff1278712a3f72d3e2609098bd3bf26d53b95910c4270331b6cb68dcc45e7c7dbe255583143539032be5e9fdac3da702780911e5ae9ef5d7d2809dd94c0086aa57e4cd550e1afebc1188b03603ee1c7b0525ae8f16ca6599fe0ffa2b71ef47c05849cdf815351d8cd372ead430dd465656b8e65eb2f965f517e60f3118e32f6dee54581a86c53ce5a80f566034dc0a4842a6ded46e56018900e49b2f117fffb4b52b2783ee42652754edcae187dfc2351df4d0205fbd27e301306bbf8a5585082295cd5fc49eb8478cee72d8295ae22f4adcfd9815d6723714ca7278d79a8291e97556f125e37692901e5f890e8f4f5cf6d41fae30ac4ed739c45ed812cf6ddb5493aa80d4cc29a9092c12f2655a782732326f37a11f839ccaff489993779c33253fd67400cf666eba853685c9ad7a901f5a6a3524be41f6b9730b3e1fcd8cfa86d9b7e096a5356dc0974e51d1d062193af0e13c40551d999d311e8146189b64a63d6dd79cce9fb35a5cfa5b3ab2d495567ef4b4d30269f36d3ca0fad56bb52f5cc0b9baa23947767c8d7a427ec5c3a25c00f9d31d2a16c9f4a6b7492b3fd0a4d42d1d1113e1a12bacf01f31b30c065f98fe8960204ad8e5558128131f9d0904ea86146623a34bdde34652d30b41c3f903865b5f362ab5cca88b64354b2efadfb6873412a69658f281e5ca8e435893a67be7ca2715dde613d8e74bbdabad7bcc9750270628574a8a6927f2265d02ff971cddc8dc2e1e4aa7a39c424254589bfda607c9acc0d3f0a379ecc5667765ba1b0dc41395cebc1537aa0bfff1c2c2b1bae2946a648b6da74b83e4e6aa7895611fd43cd7f87e0fe8e694c5548af0f541513ba3721b7bb329000a2dd9dbbd4875ff2dff4e220e9000567eb329bea9a72092baabf218ea1c1585e9573a5d287c7e2d387eb6584998112a070a66c652f5601b972955f7fe1be63852b4dcbb2737bae5da82ac33eb898b9f2ba72b9110fadc5ea956e69ea54dc7bc58406568f055e36fbdd0d4d75f999853c3e2876bb62abfb25d5ba0e21473106dcc0eeba91155774d86956ba278b81f59d71d14dc0e431d58c1a37bb8797b054af193c8d38d6de289c1677076b3404a5bbad4d77c7bd21b123cea3d8d6ad655c79626647bad3677e6da939fdf73431b056dfc659cf0f9f7939054c54989455eb555f9850e81022fb88f0232ab10da34e11fd2cd0979d660b5a38ecdbcb497a8e212a7c7c9e5691c8393aaeb132b0f5fe40f52c76d53598"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r7, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x80, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x48040) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f00000019c0)={&(0x7f00000018c0), 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x48, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "b06a"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f0000001a00)={0x80}) io_pgetevents(r6, 0x8, 0x2, &(0x7f0000001ac0)=[{}, {}], 0x0, &(0x7f0000001b40)={&(0x7f0000001b00), 0x8}) (async) ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000001b80)={0x3, 0x1}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000001d40)={&(0x7f0000001bc0), 0xc, &(0x7f0000001d00)={&(0x7f0000001c40)={0xb8, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x400}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x74, 0x84, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="1562b3ccaff0"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x2bf}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x53}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xff}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x2d169bab}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x4}]}]}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xf666}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 9.16982571s ago: executing program 1 (id=179): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x147) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x68) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/console\x00', 0x1, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000180)={{0x0, 0x2, 0x400, 0x0, 0x3}}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x545c, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) listen(r2, 0x7) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000300)="4c00000011002914000300020004040002000400200000", 0x17) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$nl_route(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400000000fcdbdf250000ffff", @ANYRES32=0x0, @ANYBLOB="421c0000060c0000142a5deadc92095f3463616e000000000400028008000500", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) 8.296961732s ago: executing program 1 (id=186): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140, 0x0) sendto$inet(r2, &(0x7f0000000640)='pr', 0x2, 0x0, &(0x7f0000000680)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044004}, 0x0) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="bcea"]) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x40, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000140)={0x51, 0xffff, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @period={0x59, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0xb, 0xfffb, 0xa}, 0x0, 0x0}}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x800, 0x800, 0x6, 0x8000001000000000, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x1f, 0x0, 0x381, 0x5, 0x4, 0x9e22, 0x0, 0x100}, &(0x7f00000006c0)={0x0, 0x989680}, 0x0) ptrace$pokeuser(0x6, 0x0, 0x9, 0x629a91fc) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000180)) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00'}) 8.000649924s ago: executing program 1 (id=189): r0 = memfd_secret(0x0) ftruncate(r0, 0x51a9497) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r1, 0x0, 0x15, &(0x7f0000000040)="060000", 0x3) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f0000000200)={0x0, 0x6}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010008506000000000000000000050000c8378425a99275653d2781a3b0b11d4db4e96526d017febe4ac5346ff6bc40ce28bd582b269dc1159367f9200f77df5a057ef330b85a46aaa5417d742cd6227043cceb9db4f3e617246c78d9ee61ba6ad9a320d803e5edb42c6082dbbdffe77b1b9e67d3ca0fdef358c2e16731967205210bc24cd06380f55c619edba5861f3be0c5a31e27626de8cc8b64655662ed82e652458c0c92a400c1d2f316700773f2c6dd09942c646c2b5ff3de65f9c13c5cbc4d131518726aca0000000000000019", @ANYRES64, @ANYBLOB="01000000000000001c0012000c000100626f6e51000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x20044044}, 0xd0) writev(r6, &(0x7f0000000200), 0x2) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4a80400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r4, @ANYBLOB="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"], 0x3c}}, 0x8000) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[], 0x0) unshare(0x80) 8.000410631s ago: executing program 33 (id=189): r0 = memfd_secret(0x0) ftruncate(r0, 0x51a9497) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r1, 0x0, 0x15, &(0x7f0000000040)="060000", 0x3) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(0xffffffffffffffff, 0x19, &(0x7f0000000200)={0x0, 0x6}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010008506000000000000000000050000c8378425a99275653d2781a3b0b11d4db4e96526d017febe4ac5346ff6bc40ce28bd582b269dc1159367f9200f77df5a057ef330b85a46aaa5417d742cd6227043cceb9db4f3e617246c78d9ee61ba6ad9a320d803e5edb42c6082dbbdffe77b1b9e67d3ca0fdef358c2e16731967205210bc24cd06380f55c619edba5861f3be0c5a31e27626de8cc8b64655662ed82e652458c0c92a400c1d2f316700773f2c6dd09942c646c2b5ff3de65f9c13c5cbc4d131518726aca0000000000000019", @ANYRES64, @ANYBLOB="01000000000000001c0012000c000100626f6e51000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x20044044}, 0xd0) writev(r6, &(0x7f0000000200), 0x2) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4a80400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r4, @ANYBLOB="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"], 0x3c}}, 0x8000) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[], 0x0) unshare(0x80) 4.410503979s ago: executing program 5 (id=217): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') (async) r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x1}) (async) r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000280)={0x50, 0x1401, 0x20, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x200c0090}, 0x4000000) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x4) syz_usb_control_io$printer(r1, &(0x7f0000000100)={0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="20425e87d101020f"], 0x0}, &(0x7f0000000180)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(r2, 0x5b06, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000004c0)={0x14, &(0x7f0000000340)={0x40, 0x3, 0xdb, {0xdb, 0x4, "d1f876223d78a42d8605e40cc74fbf2a0543f275ed7d245bcfb0b4c175f0d6e28c6db4299b7f5954231e184e107315adf3f2070ea748f4f90d715986a1c1a729ce458c4124f1fad2ef2afc8c663ad65bf69c1ed4666d3631e296fd511dd75f47f024e67f072165df92d181cda5d0a368c2b5877ee8f43cb11ffa98dc97ad292ca504a48730fd3fddc1fa62621a9dd2d7e28419bf500876a22cfb074af2ab6c17dae7310c5a56d9a5af5751d6bb995e57c50a6688a96e839823633cdc6089cf9875a94edb71c361234bc4c915cbbc16bb37a15e0e5861774ed1"}}, &(0x7f0000000480)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000500)={0x20, 0x7, 0xc6, "788af2a7436fb4ef76a9f8311bf8bd8ce04b3e039f7e839ff06a6954c73a2d74b5aaaec2330272f727c869f4b0b9b33c18436d5f5404674339b4f3255cbd2dc505b51a3981a7a469cbb2dd93079ffd5fa563e357105e75e71fd1e0ef9b4dd14e426bbe82500623d3ef65ea524eb727068864ff4353a4038cd8dbeaef809d8a9a8b594f10785bffc4252155d0dbf1b926408fd77e5f11c44566295ae0bc03959cc0b11fd99603264e640718bd7484b0ded2a650997fdbeed4fd32ee215086901b3952bbdf08f5"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x2}}) (async) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(r0, 0x4068aea3, &(0x7f0000000200)={0xb6, 0x0, 0x1}) 1.420218449s ago: executing program 4 (id=261): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101d42, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000100)={@local, 0x7d}) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0xfffffee2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000005000000000200000101000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="02000000020000000400"/28], 0x50) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x5}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101d42, 0x0) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000100)={@local, 0x7d}) (async) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0xfffffee2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000005000000000200000101000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="02000000020000000400"/28], 0x50) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x5}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) 1.360247935s ago: executing program 5 (id=262): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000), 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x21, 0x3, 0x0, {0x6}}, 0x21) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0x2, 0x7f, 0x7, 0xad32, 0xa5f], 0x7, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000200)=0x83e1, 0x4) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000240)={'veth1_vlan\x00', {0x2, 0x0, @remote}}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000280)={0xd276, 0x7, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$KVM_CAP_X86_GUEST_MODE(r1, 0x4068aea3, &(0x7f0000000340)) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f00000003c0)={0x5b, 0x3, 0x1, 0x100000000, "fd4999f8d1fccab13443dad99752b1cadcf6aa8c71f2b2bc2b61b94b506b944a0e416ed91e956e8219721383941f018e0a1948c8b9ae081e54946e26a9d72625f735f3"}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f00000004c0)=""/101, &(0x7f0000000540)=0x65) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000005c0)={0xa, 0x38, [0x0, 0x6, 0x0, 0x2], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000600)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}}) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000680)) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000a80)) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r1, 0x3b8d, &(0x7f0000000b40)={0x20, r4, &(0x7f0000000b00)=[{0x0, 0x3}, {0x1, 0x2}, {0x0, 0x1}, {0x1, 0x2}], 0xdeadbeef, 0x8, 0x4}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000b80)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000bc0)={0x28, 0x4, r5, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x40}) newfstatat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000502, r6, &(0x7f0000000cc0)) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10c, 0x1, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x40, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000f00), 0x1418c0, 0x0) ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000f40)={0x28, 0x5, r2, r3, 0x9, 0x7}) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000f80)={'pim6reg1\x00', 0x1}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000fc0), 0xc0001, 0x0) r8 = fanotify_init(0x20, 0x101000) fcntl$F_GET_RW_HINT(r8, 0x40b, &(0x7f0000001000)) 1.279648551s ago: executing program 5 (id=264): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x18, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000000000000010006000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(r3) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000001e1000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500050000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000380), 0x1f2, 0x10, &(0x7f00000003c0), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) (async) sendmmsg$inet(r0, &(0x7f0000005180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f0000003480)=[{&(0x7f0000000f40)="7e234be2b2fc69fc", 0x8}], 0x1}}], 0x1, 0x0) 1.180252809s ago: executing program 5 (id=267): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x47e811ec11f6b91c, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000040)) (async, rerun: 32) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='omfs\x00', 0x10008, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) (async) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000200)=0x1c, 0x100000) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000780)={0x4, 0x10, {0xffffffffffffffff}, {0xee00}, 0x8, 0x8c}) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000c00)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) (async) r8 = syz_clone(0x181cb280, &(0x7f0000000dc0)="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", 0x1000, &(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)="57a566f864aeceabac0f6f6146311ba1c51db0996dd7c8d135741b") (async) lstat(&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$netlink(r1, &(0x7f0000002000)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc, &(0x7f0000000d80)=[{&(0x7f0000000240)={0x5c, 0x2a, 0x400, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x2b, 0x0, 0x0, @fd=r0}, @nested={0x1c, 0xf5, 0x0, 0x1, [@typed={0xd, 0x11e, 0x0, 0x0, @str='/dev/loop'}, @nested={0x4, 0xc8}, @nested={0x4, 0x119}]}, @typed={0x8, 0x8, 0x0, 0x0, @pid=r2}, @generic="c1e85f9b223c", @typed={0x8, 0x142, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x64, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x104, 0x0, 0x0, @fd=r0}]}, 0x5c}, {&(0x7f0000000480)={0x2c8, 0x12, 0x300, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x8, 0x61, 0x0, 0x1, [@typed={0x4, 0x6f}]}, @generic="3bf8bb3968abe9b292942f43e8c1f05b01919f5e7b16d9c2d588e9537cfa60a751b4307004d64380a98f4c93ae319b8f82af1608e5a1e4f6c27a1c994ffebf7f5b4b73c659ec7ac6f5a12217b1df38036a5c493624e9042b4c143f961c2ade3ff84a2270a11dfdfc82bc1acea1f04cab89f33f5e5ead99acbaeb107d6148ed8824f474fad1794a1875b7aade59a82bf88e843832c8b46b659bdf8bc4d7e6f4c567", @nested={0xee, 0x143, 0x0, 0x1, [@nested={0x4, 0x11f}, @typed={0x8, 0xec, 0x0, 0x0, @pid=r4}, @typed={0x8, 0x1f, 0x0, 0x0, @ipv4=@multicast1}, @generic="8d174c1310a56c35e44d73d9a48184429b3984ffb90d9a68b0679bdfd5ae57f9fe3ff9b97df3b11ff5ddc9e89e220705dac8d8cb456bc70f35a729e2a354d1e09be2fa55b73a9e4c9a65e2f72e4c38a70a43cded031758521e4d7d593b34d3a2000059fb4751d83c45841ff56fa6c24d9a1edf20cc240aedb9c91aa74dc2f899bc64df7d4417e3e47c6148fc8bd4bcb640ce3f4d81c37eff3485b819a1947d1c6cec750a3eb2c022aaf30d2df00cf8f770ea7de9ebf23e99ab29107284f00fd0b755c287c68952abeb99fe71d905181e3e362a3c40f0"]}, @nested={0x10, 0xe1, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @str='@\xdf-\x00'}, @nested={0x4, 0xe5}]}, @generic="9bbbbf8dd416e442320163656f646d8c0f3ffba33a38aa66029a9356d8d4d02a13c9ee43c534c135db06de6bce5f77fa6acebcfeefd6bd09a6d4c9c866c4f9b28f724676088ffc52c0ec421bc53c9ee61abd7becc8a51f2eab3482e0287b2d2e2c7e76e78936fa57bfbcae671e418b37bfc11b744c48646330c2081cc6272275045ae05727dda425cfd946a98243f77821be605ca509bcc89ff5d278af6f395cfb994a24c9b01a1d1199c161d62a9094f123b2871591bfe93d68463eb15f05158a397a9131e76835fb8b31e59be20f82029c251a57b45b60097b393a8bcbbb4ca140edabc4ac0a723056ac1c5f55c7d925c073240618", @typed={0x6, 0xb6, 0x0, 0x0, @str='^\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x105, 0x0, 0x0, @uid=r5}]}, 0x2c8}, {&(0x7f00000007c0)={0x408, 0x3b, 0x800, 0x70bd2d, 0x25dfdbfd, "", [@generic="78ff13af778b9b41be8701291ee8b9ceea918f160d04dad570e6c92fb4d5b36ecd5dfc0a73d5e1c9214e14202fa89c8917516e500518582bc0f30ad8fadd0a779243e825efa66df70767e9d6aaccb74e2496fded9397306c", @generic="0916656372fda75a4a850498e600213370e0b5617334f77b79ac624d32134e96c7e679136e1561fd2a0b0dd659db5a26f3a9e1ccfa386f1084d4ee36bd0917b12214b0e316cec65263f4ca32b96b95f095e07dc04193660255a5770db1cdd47c2fb3c81c7f4e2a37c5d75a671975dd50c32b0b2761c3665627caf27b72e1265401c79e13e9d198cdea3b593c64dcdcee9cbb95d11056d3d2aebc538cbe63a8db292b9a838d7ebc3f2f32a0c0ea0334e8610e11c6cbc7dc6d9fbfb6873f7bf732682bb87b0fa7bf61b92a", @generic="9ba4a7ff0abab31f3d2cd4f6754192e0b8f80b1ec6047164efdb4b21df77", @nested={0xb8, 0xf5, 0x0, 0x1, [@typed={0xc, 0x6b, 0x0, 0x0, @u64}, @generic="c42b19110e17f6231e22c9d213ca903f329209471f0c32488596a0a2bd7e3a5b1af07e0743a45af1f2bb97bfbfbcf15859754cca6d33ffe517ef939eb445aaa8a96c806e385a87b931ce33ae7245edf857e755187db9cefc54dad349c4fef3f26b17e0def19ee3b43db22b3ef9011a3139bac7747f82712a39b0cca74461ec8f21a3c80bdf26368d30c6311d4a2f49275fa60ffccd616af5d3806abe8f8be99b", @nested={0x4, 0x37}, @nested={0x4, 0x17}]}, @typed={0x30, 0x123, 0x0, 0x0, @binary="87ba45119814ae52f592abb005e702bd991939c358e5660ab7c627791a60a01db716686279ee91e6efee90d8"}, @nested={0x108, 0x12, 0x0, 0x1, [@nested={0x4, 0x51}, @generic="a4013bac3a2806b7d22ff3e77efdc053d3f77c41e0288c49a568eb10415b4769b43f3d2cd5d0a8ac1f08d732039764c9ed98a13752ffd97d481cbac2759be9bcc1bb4bedd9dba7953c04b0db267e51c3473396216fec4843dcebedff7dda026c359034bcf8f66e6c187a2e1105ec797c232b3ead0f62175c45c79ecd5bdd981ee29299a17dd1fd14f591fec8e83de7b04577153418f69b8b547141b539f65b8bb3fd2a0023f2ebf1ab3cd90f1d7e630088a5d8d88ced6309f81af84d6d3d535f4ebebf673d7849722ee7a8f99b6b6699dc4c66df6444", @generic="5cfafdf515b1f5a0fbdcc71cfb4bc81cf4aa767a113ea31a2c6a7d6d4c1857a5d1e1", @typed={0x8, 0x32, 0x0, 0x0, @u32=0x9}]}, @typed={0x8, 0x11c, 0x0, 0x0, @uid=r6}, @generic="61d3b9c77521e1a9bdf43e15822221023e9f0ae26379a0d3af4d13c8d1499d738c1a4761b1ae1eda4c230bf931c65f980dd74db3f654105eeb1fbdd36bf6df3413e3ebfa9e67bb8da90f35d2cc41f587b18147de4c257a699463ca584fa26fb6e3f4e95a22114e83e06deefa83354a355efdc129f3165d02d2892e78f2d2bb152bc69fd9f2bd271dd16c9a7bbf9776042cf5032154cd99ec3a39c7ce2f299c2ccbfa9796288ca425fe1e2a5b67eae9325f5e8b67b0b70111947b44535c4ae51b"]}, 0x408}, {&(0x7f0000000c80)={0xfc, 0x3c, 0x2, 0x70bd26, 0x25dfdbfb, "", [@generic="7cf7f028fc59e08c7d7ac25bd5db080bcb1553d215996d9da076fe632d4228f84c1fa7427a44234cebc83ee47ab981877f601351edc69f3b0399e21ff843f9c6037a4c440b6a307203a23592c5929d706b095b27893ef8c44338344c54792f14d84b0322849f003067c252c16bd0bfcdcdb41b3dfa78e504a964d1ab6db6fdb643fc6e20baf4bbb66e443ef0d7a166b6ea791559466a542a6ecd6c6bd585a280c693baba1f6183757c009b33656b4edf406a74ae3c0a1a6ce56f3af55857b55897c697", @nested={0x28, 0xa7, 0x0, 0x1, [@typed={0x8, 0xf2, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x9a, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xdb, 0x0, 0x0, @u32=0x1fb}, @nested={0x4, 0x4f}, @typed={0x8, 0x8f, 0x0, 0x0, @pid=r7}]}]}, 0xfc}], 0x4, &(0x7f0000001f40)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r9}}}, @rights={{0x1c, 0x1, 0x1, [r10, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, 0xffffffffffffffff, r0, r0]}}], 0xa8, 0x4}, 0x0) (async) r11 = syz_pidfd_open(r4, 0x0) (async, rerun: 64) getsockopt$IP_VS_SO_GET_SERVICE(r10, 0x0, 0x483, &(0x7f0000002040), &(0x7f00000020c0)=0x68) (async, rerun: 64) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', 0x10200, 0x80) mkdirat(r12, &(0x7f0000002140)='./file0\x00', 0xc) (async) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd) (async) r13 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname(r13, &(0x7f0000002180)=@ieee802154={0x24, @short}, &(0x7f0000002200)=0x80) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002280), r11) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000023c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002380)={&(0x7f00000022c0)={0xb8, r14, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6a}, @void, @val={0xc, 0x99, {0xffffffff, 0x32}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "12a47881992b38236ac41a70a575a12d24da4458dfbdc215"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'dummy0\x00'}]}, 0xb8}}, 0x8000) (async) r15 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002400)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r15, &(0x7f0000002440)={0x7fff, 0x20, 0x7fffffff, 0x20, 0x9}, 0x48) (async, rerun: 64) mount(&(0x7f00000024c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000002500)='./file0\x00', &(0x7f0000002540)='qnx4\x00', 0x0, 0x0) (rerun: 64) r16 = accept4$unix(0xffffffffffffffff, &(0x7f0000002580)=@abs, &(0x7f0000002600)=0x6e, 0x80000) getpeername(r16, &(0x7f0000002640)=@xdp, &(0x7f00000026c0)=0x80) setsockopt$inet_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000002700)=@gcm_256={{0x303}, "1aa648fb3f92137e", "503dbb6ae5452d06fab77e89927d79c72f712aded9a0b5d6f257c92d113346f1", "60a1a706", "7859f4bdc32c7773"}, 0x38) lsetxattr$trusted_overlay_redirect(&(0x7f0000002740)='./file0\x00', &(0x7f0000002780), &(0x7f00000027c0)='./file0\x00', 0x8, 0x2) 1.110525252s ago: executing program 5 (id=269): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, r2, 0x315, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x20004804) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008040) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) (async) r4 = socket$kcm(0x2, 0x3, 0x106) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x6000)=nil, 0x6000, &(0x7f0000001900)='skcipher\x00') setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001540)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) (async) sendmsg$inet(r4, &(0x7f0000001840)={&(0x7f0000001880)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) (async) sendmmsg$alg(r3, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) (async) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)=""/68, 0x34000}], 0x1}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}, 0x4}], 0x2, 0x161, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000500)=ANY=[@ANYBLOB="33330000000100112233445586dd60000000001a0040fe800000000000000000000000000001ff0200000000000000000000000000013b0201003110"], 0x0) 1.109557298s ago: executing program 0 (id=270): r0 = socket(0x10, 0x3, 0x0) geteuid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x4}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x2c, 0x24, 0xd0f, 0xffffffff, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0x5}, {0x10, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200001d4}, 0x8840) 1.108893975s ago: executing program 0 (id=271): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cc51be072000000009bc08196f2fe00423a5af937a91c158318b63a649e7a58793aada47fb8e959857e7e71f164bb58d8048468dd8a6963cd90221e4acc15ca638817d0168dfc94f44df7260014ad714b41ce65b5", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.010610019s ago: executing program 0 (id=272): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x38, 0x65]}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000200)='./mnt\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x111000, 0x0) linkat(r1, &(0x7f0000000380)='./dev\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./mnt\x00', 0x1400) fchmodat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xfffffffb) listen(r0, 0x402) syz_emit_ethernet(0x5a, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaff0000000000000086dd60020004002406fffe8000000000000000000000000000aafe8000000000000000000000000000aa4e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90020000907800001e102064080000000000000007000000"], 0x0) 1.009270765s ago: executing program 0 (id=273): socket$netlink(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000005c0)=0x3) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000700), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000740)=""/246) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x44) writev(r1, &(0x7f0000000880)=[{&(0x7f00000008c0)="c021", 0x1720}], 0x1) socket$netlink(0x10, 0x3, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@filename='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000300)='.\x00', 0xa4000021) open(&(0x7f0000000340)='./file0\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='of', 0x8) socket(0x6, 0x803, 0x0) r4 = epoll_create1(0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000480)=@assoc_value={0x0, 0xcfa}, 0x8) bind$inet(r5, &(0x7f00000004c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f0000000500)="ab", 0x34000, 0x0, &(0x7f0000000540)={0x2, 0x4e22, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x100000000000000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f00000003c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r7, 0x0) ptrace(0x10, r6) 890.085631ms ago: executing program 4 (id=275): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x40) r4 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="480100000002010300000000000000000700001034010a800800014000000001500002802c00018014000300fe80000000000000000000000000002114000400000000000000000000000000000000000c"], 0x148}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="88020000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r8, &(0x7f0000000540)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0xda40, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xb, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x17a1, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000009c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000d40)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000d80)='bbr', 0x3) connect$inet(r9, &(0x7f0000000dc0)={0x2, 0x4e20, @loopback}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r10}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)='%pI4 \x00'}, 0x20) ioctl$KVM_CAP_X2APIC_API(r0, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fcfffff1000000007f0000000000090100000000e500fcfff0ffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) 628.899926ms ago: executing program 4 (id=280): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setresuid(0xee01, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) (async) r2 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r2, &(0x7f0000ffc000/0x3000)=nil, 0x4000) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0xfffffffc, 0xffff, {r0}, {0xee01}, 0x2, 0xdd6}) (async, rerun: 32) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() (async) r6 = getegid() shmctl$IPC_SET(r2, 0x1, &(0x7f0000000100)={{0x0, r3, r4, r5, r6, 0x190, 0x5465}, 0x0, 0x6, 0x8, 0x100000000, r0, r0}) (async) setns(r1, 0x24020000) (async, rerun: 64) syz_clone(0x120e111f, 0x0, 0x13, 0x0, 0x0, 0x0) (rerun: 64) 628.569997ms ago: executing program 3 (id=281): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x30008804) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x468) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x40000, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000001580)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd, 0x0, 0x0, 0x71, 0x7, 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0xb5) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001680)={0x0, 0xfc79, &(0x7f00000016c0)=[{&(0x7f0000001700)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@loopback, @multicast1, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001800)={'syztnl2\x00', &(0x7f0000001840)={'syztnl1\x00', r4, 0x7, 0x80, 0x2000001, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @rand_addr=0x3}}}}) 530.589944ms ago: executing program 3 (id=282): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000140)={&(0x7f00000005c0)={{@local, 0x1}, {@my=0x0, 0x40}, 0x400, "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"}, 0x418}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800140601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='<\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) 527.566109ms ago: executing program 3 (id=283): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xd, 0x5, 0x0, 0xd}, {0x7, 0x8, 0x81, 0x5}, {0x3, 0x34, 0x9, 0x4fe}, {0x1, 0x3, 0x9, 0x30}]}) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = dup3(r0, r0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f00000000c0)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) io_setup(0x8, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140)=0x200, 0x4) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f00000002c0)={&(0x7f00000001c0)=""/233, 0xe9}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) io_setup(0x9, &(0x7f0000000340)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_CMAP(r5, 0x4b70, &(0x7f0000000380)) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, r6, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40840}, 0x4008000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x505000, 0x20) r9 = openat$nsim_new_device(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) close_range(r9, r1, 0x0) r10 = syz_open_dev$video(&(0x7f0000000600), 0x8000800000, 0x101800) ioctl$INCFS_IOC_PERMIT_FILL(r10, 0x40046721, &(0x7f0000000640)={r0}) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f0000000680)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000006c0)=0x2, 0x4) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r7) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x174, r11, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x174}}, 0x400c0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS_V2(r4, 0x84, 0x25, &(0x7f0000000980)={0x1, @in6={{0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x34b}}, 0x3b, 0x3, 0x8}, &(0x7f0000000a40)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000a80)={r12, 0x2d4}, 0x8) read$alg(r4, &(0x7f0000000ac0)=""/59, 0x3b) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000b40)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @multicast2}, 0x8, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000b00)='bond_slave_1\x00', 0x7, 0x7, 0x3}) 410.073666ms ago: executing program 3 (id=284): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') pread64(r1, &(0x7f0000000100)=""/185, 0xb9, 0x3c) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) close(0x4) 408.699609ms ago: executing program 3 (id=285): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000000)={{0x0, 0x6, 0xffff, 0x3, 0x6, 0x5, 0x6, 0x8, 0x1, 0xfffffffb, 0x2, 0x5, 0x2, 0xffffffffffffffff, 0x3}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{r1, 0x800, 0x7, 0x9, 0x8ca, 0x101, 0x2, 0x8, 0x5, 0x3ff, 0x9, 0x4000000, 0x80000000, 0x1ff, 0x7}, 0x18, [0x0, 0x0, 0x0]}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) r5 = geteuid() fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getuid() (async) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r10 = getuid() (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xee01, 0x0}}, './file0\x00'}) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) (rerun: 64) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {}, [{0x2, 0x1, r3}, {0x2, 0x1, 0xee00}, {0x2, 0x6, r5}, {0x2, 0x4, r6}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x0, r7}, {0x2, 0x3, r8}, {0x2, 0x2, r9}, {0x2, 0x3, r10}, {0x2, 0x1, r12}], {0x4, 0x3}, [{0x8, 0x0, r14}], {0x10, 0x2}, {0x20, 0x3}}, 0x7c, 0x0) (async) ioctl$VIDIOC_SUBSCRIBE_EVENT(r11, 0x4020565a, &(0x7f0000000580)={0x4, 0x7, 0x1}) (async) read$FUSE(r11, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002600)={r15, r9, r13}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r11, 0x10e, 0x4, &(0x7f0000002640), 0x4) (async) landlock_restrict_self(r2, 0x17) (async) kcmp(r15, r15, 0x4, r0, r2) (async) tee(r0, r2, 0x5, 0x2) (async) socket$netlink(0x10, 0x3, 0x4) read$FUSE(r2, &(0x7f0000002680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(0xffffffffffffffff, &(0x7f00000046c0)={0x130, 0x0, r16, {0x4, 0x4, 0x0, '\x00', {0x100, 0x3ff, 0x3, 0x80000000, r5, r4, 0xc000, '\x00', 0x1b, 0x8ca, 0xfffffffffffffff7, 0x0, {0x0, 0x1}, {0x9, 0x4}, {0xb983}, {0x5, 0xcc}, 0x9, 0x7, 0x4dab, 0x7}}}, 0x130) (async) r18 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000004800)) ioctl$AUTOFS_IOC_EXPIRE(r18, 0x810c9365, &(0x7f0000004840)={{0x9f5, 0xa6}, 0x100, './file0/file0\x00'}) (async) clock_gettime(0x0, &(0x7f00000049c0)={0x0, 0x0}) ppoll(&(0x7f0000004980)=[{r0, 0x2048}], 0x1, &(0x7f0000004a00)={r19, r20+10000000}, &(0x7f0000004a40)={[0x681]}, 0x8) (async) unlink(&(0x7f0000004a80)='./file0\x00') r21 = accept4$inet(r11, &(0x7f0000004ac0)={0x2, 0x0, @multicast1}, &(0x7f0000004b00)=0x10, 0x80800) ioctl$sock_FIOSETOWN(r21, 0x8901, &(0x7f0000004b40)=r17) 290.651542ms ago: executing program 3 (id=286): r0 = semget$private(0x0, 0x2, 0x124) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x10, 0x80, 0x7, 0xb6, {{0xa, 0x4, 0x3, 0x3, 0x28, 0x67, 0x0, 0x9, 0xc8e5340b2531b7c4, 0x0, @multicast2, @multicast1, {[@noop, @noop, @ssrr={0x89, 0xf, 0xf9, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101]}]}}}}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='10', 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000400000000bc45d1d1f4e2d399b8f504000041b90000004000001e9c98be13ccdd69dbbafc7e71833fb4ce4b496039a3820c9f4bbf343bde81704433fc66cb3d535acd54bb17fc60ce74a6d5f5e99a644135ad2944388a804c4563d3885a605f746ad1dca14cd97b997c06ff250acbd53c2c2844b1e1278ca59dff5122fb41bbe9cfc76c6bbfd4b03baa6c6c44a1e1237b5663d8a0350bf6cf47b8f337a372464bbc64b6afa4aa5e62c61e3f080f58cff887cc1806dc2a27e369dc34d10d6969c40348a6907795f7261008c8097c855089c55fafb4589b9d66990f99a535b5d0b4f683935ccf4f5a8de19ec6500b4b4bc4e0ba197e86ae507061b565726c11d79dfe2f7bdb51dd1ac06b59086b673a1d401753c3324a56282f02db419b46ae09", @ANYRES32, @ANYBLOB="01000100"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="00000000000000000500"/28], 0x50) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000280)=""/158) r3 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x3, 'vlan0\x00', {0x4}, 0x5}) r4 = socket(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000200)=0x9, 0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000240)) ftruncate(r3, 0x8800000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) r7 = dup3(r6, r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r8, &(0x7f0000000180)='- - -', 0x5) mprotect(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x3000003) sendfile(r7, r3, 0x0, 0x1000009) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x891}, 0x8098) 290.239463ms ago: executing program 0 (id=287): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0108000000e9f10000000b00000008000300", @ANYRES32=r2, @ANYBLOB="20005080080007000000000011000100a38feb26fd7b61e1cdccdeac55000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000001980)=""/182, &(0x7f0000001a40)=0xb6) write$cgroup_int(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/consoles\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000380)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000013c0)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001a80)=@newqdisc={0xe4, 0x24, 0x4ee4e6a52ff56541, 0x100, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x392, 0x80000001, 0x7, 0x1}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x1, 0x1b7b, 0x3ff, 0x2, 0x8, 0x4, 0x6}}, {0x10, 0x2, [0x2, 0x3ff, 0x2, 0x6d42, 0xc, 0x6ed9]}}, {{0x1c, 0x1, {0xc6, 0x8, 0x2fb, 0x0, 0x1, 0x7, 0x82, 0x6}}, {0x10, 0x2, [0x2e1c, 0x80, 0x2, 0x8001, 0x10, 0x6]}}, {{0x1c, 0x1, {0x9, 0x0, 0x0, 0xfffffffe, 0x2, 0xfffffff7, 0x802, 0x8}}, {0x14, 0x2, [0x401, 0xe5c9, 0x3ff, 0x0, 0x6, 0x1, 0x9, 0x7]}}]}]}, 0xe4}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@bloom_filter={0x1e, 0x4c, 0xffff, 0x4b7c, 0x800, 0xffffffffffffffff, 0xc6f, '\x00', r6, r4, 0x2, 0x4, 0x2}, 0x50) sendmsg$nl_route(r3, &(0x7f0000001600)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)=@dellink={0x30, 0x11, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x24010, 0x100}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x6592}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x15113, 0x3, 0x3, 0x0, 0x0, 0x3}, 0x30, 0x0) landlock_restrict_self(r7, 0x9) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) landlock_restrict_self(r7, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000001680)={0x3, 0x10001, 0xff, 0x1000, 0x0, 0x8}) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001700), 0x802, 0x0) ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x14) ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r10, 0x40045565, 0x65) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000001740)={{0x1, 0xfffd, 0x1, 0x1}, 'syz0\x00', 0x22}) ioctl$UI_DEV_CREATE(r10, 0x5501) write$input_event(r10, &(0x7f00000017c0)={{}, 0x1, 0x65, 0x1}, 0x18) ioctl$UI_DEV_DESTROY(r10, 0x5502) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 230.237099ms ago: executing program 0 (id=288): r0 = socket(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000500)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000540)={0x0, 0x20}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000580)={0x2, 0xfa}, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000200), 0x651, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000280)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) shmctl$IPC_SET(0x0, 0x1, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000080000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000030900010073797a300000000048000000060a0104000000000000000001000000200004801c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xd0}, 0x1, 0x0, 0x0, 0x2404c894}, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0xeafbff3, &(0x7f0000000480)=[{&(0x7f00000004c0)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ID={0x8, 0x6}, @NHA_OIF={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c001}, 0x240048c0) 229.587265ms ago: executing program 5 (id=289): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, "2af0224a920000ffffffffffffff00"}) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r1, 0x0) fsopen(&(0x7f00000001c0)='9p\x00', 0x0) r2 = syz_open_dev$dri(&(0x7f0000000680), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000008c0)={0x0, &(0x7f0000000900)=[0x0], &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000980)={&(0x7f00000009c0)=[r3, r4, r4], 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/kernel/reboot/mode\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/60, 0x3c}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/108, 0x6c}, 0x10001}], 0x3, 0x40000002, 0x0) recvmsg$unix(r5, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x100}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x901800, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000700)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x4, &(0x7f0000000800)=ANY=[@ANYRES16, @ANYRES64=r9], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000880)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0xffffffff}, 0x8) sendto$inet6(r1, &(0x7f0000000140)="bc", 0x1, 0x4, &(0x7f0000000180)={0xa, 0x4e20, 0x8, @loopback, 0xffff7ffc}, 0x1c) close(r1) r10 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000100)=0x13) 180.62804ms ago: executing program 4 (id=290): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') pread64(r0, &(0x7f0000000240)=""/102356, 0x18fd4, 0x37) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x40044160, 0x3) syz_emit_ethernet(0xe, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@generic={0x88f5}}}, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0xffff) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 110.337221ms ago: executing program 4 (id=291): write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r1, 0x0, &(0x7f0000000800)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = socket$inet(0x2, 0x1, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1f7) mount(&(0x7f0000000380)=@filename='mtd0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='jffs2\x00', 0x800000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x1, 0x8, 0x9fd, 0x84, 0x105}, 0x50) chdir(&(0x7f00000004c0)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0xfffffffb) connect(r2, &(0x7f00000002c0)=@in={0x2, 0x15, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa2000000000000073d0000f8ffffffb703000000000000b70400001f000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd67b31d9a000e1101fc00000000f0ffffff00000000000001000000000000000000040000000000004e224e22000c9078016a18b6"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000b00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000680)=@mpls_getroute={0x30, 0x1a, 0x800, 0x70bd26, 0x25dfdbfb, {0x1c, 0x20, 0x10, 0x3, 0xfd, 0x0, 0xc8, 0xa}, [@RTA_VIA={0x14, 0x12, {0x2a, "07eceebb7bcf5b15a97c91434f78"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0xc000) r5 = dup(r4) link(&(0x7f0000000bc0)='mtd0\x00', &(0x7f0000000c00)='./file0\x00') ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) sendmmsg(r6, &(0x7f0000000a00), 0x4000000000001f2, 0xfc) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000e40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10b3aa99957b97b3}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x37}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c80)={0x1c, r7, 0x50dc85624ea6cf59, 0xfffffffe, 0x1, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb0, r7, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x210}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xba}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}]}, 0xb0}}, 0x8000) 0s ago: executing program 4 (id=292): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x4e, 0x0, &(0x7f0000000200)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000240)="010a", 0x0}, 0x50) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000010) (async) sendmsg$nl_generic(r0, 0x0, 0xc010) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu/test\x00', 0x777) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) (async) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000c40)={0x8, {"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", 0x1000}}, 0xfffffe38) (async) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000b80)='10000', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000026000826a2130f7d010126bd7000fcffffff1d00000007000e801cd6b400"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) write(r6, &(0x7f0000000c00)='1', 0x1) (async) openat(r5, &(0x7f0000000000)='./cgroup.cpu/test/memory.limit_in_bytes/file0\x00', 0x402200, 0x80) (async) socket(0x0, 0x80c, 0x0) (async) unshare(0x62040200) kernel console output (not intermixed with test programs): [ 37.828011][ T42] audit: type=1400 audit(1792985797.600:134): avc: denied { noatsecure } for pid=5762 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.830067][ T42] audit: type=1400 audit(1792985797.600:135): avc: denied { write } for pid=5762 comm="sh" path="pipe:[2691]" dev="pipefs" ino=2691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 37.830239][ T42] audit: type=1400 audit(1792985797.600:136): avc: denied { rlimitinh } for pid=5762 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.830398][ T42] audit: type=1400 audit(1792985797.600:137): avc: denied { siginh } for pid=5762 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:35404' (ED25519) to the list of known hosts. [ 39.659538][ T42] audit: type=1400 audit(1792985799.430:138): avc: denied { name_bind } for pid=5770 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.686813][ T42] audit: type=1400 audit(1792985799.450:139): avc: denied { execute } for pid=5771 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.687155][ T42] audit: type=1400 audit(1792985799.450:140): avc: denied { execute_no_trans } for pid=5771 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.913649][ T42] audit: type=1400 audit(1792985801.680:141): avc: denied { mounton } for pid=5771 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.917106][ T42] audit: type=1400 audit(1792985801.680:142): avc: denied { mount } for pid=5771 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.922138][ T5771] cgroup: Unknown subsys name 'net' [ 42.062370][ T5771] cgroup: Unknown subsys name 'cpuset' [ 42.065210][ T5771] cgroup: Unknown subsys name 'rlimit' [ 42.302471][ T5776] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.055206][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.760321][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 46.760339][ T42] audit: type=1400 audit(1792985806.530:154): avc: denied { execmem } for pid=5779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.011337][ T42] audit: type=1400 audit(1792985806.780:155): avc: denied { create } for pid=5782 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.012109][ T42] audit: type=1400 audit(1792985806.780:156): avc: denied { read write } for pid=5782 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.015010][ T42] audit: type=1400 audit(1792985806.780:157): avc: denied { open } for pid=5782 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.020616][ T42] audit: type=1400 audit(1792985806.790:158): avc: denied { ioctl } for pid=5782 comm="syz-executor" path="socket:[2747]" dev="sockfs" ino=2747 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.029122][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.030320][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.030754][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.031565][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.032138][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.033460][ T67] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.035100][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.036272][ T42] audit: type=1400 audit(1792985806.800:159): avc: denied { read } for pid=5782 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.036728][ T42] audit: type=1400 audit(1792985806.800:160): avc: denied { open } for pid=5782 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.038415][ T42] audit: type=1400 audit(1792985806.810:161): avc: denied { mounton } for pid=5782 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.043543][ T42] audit: type=1400 audit(1792985806.810:162): avc: denied { module_request } for pid=5782 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.047770][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.049564][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.050254][ T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.060834][ T42] audit: type=1400 audit(1792985806.820:163): avc: denied { mounton } for pid=5783 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.081962][ T67] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.083291][ T67] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.083760][ T67] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.086222][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.086817][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.097048][ T5142] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.098324][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.098745][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.099909][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.100621][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.283931][ T5793] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.284382][ T5793] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.284963][ T5793] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.313763][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.355664][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.376859][ T5796] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.418602][ T5793] infiniband rxe0: set active [ 47.418620][ T5793] infiniband rxe0: added rxe_eth0 [ 47.432214][ T5793] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 47.432245][ T5793] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 47.432278][ T5793] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 47.442197][ T5209] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.445639][ T5796] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.472725][ T5793] RDS/IB: rxe0: added [ 47.473103][ T5793] smc: adding ib device rxe0 with port count 1 [ 47.473344][ T5793] smc: ib device rxe0 port 1 has no pnetid [ 47.486612][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.539293][ T5209] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.555109][ T50] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.629253][ T5793] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.670246][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.670313][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.670530][ T5782] bridge_slave_0: entered allmulticast mode [ 47.671615][ T5782] bridge_slave_0: entered promiscuous mode [ 47.706821][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.707202][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.707611][ T5782] bridge_slave_1: entered allmulticast mode [ 47.708996][ T5782] bridge_slave_1: entered promiscuous mode [ 47.768362][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.795038][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.804837][ T5793] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.824494][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.824572][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.824826][ T5783] bridge_slave_0: entered allmulticast mode [ 47.826098][ T5783] bridge_slave_0: entered promiscuous mode [ 47.829918][ T5782] team0: Port device team_slave_0 added [ 47.833212][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.833301][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.833452][ T5783] bridge_slave_1: entered allmulticast mode [ 47.834253][ T5783] bridge_slave_1: entered promiscuous mode [ 47.835768][ T5782] team0: Port device team_slave_1 added [ 47.911898][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.911915][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.911934][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.920294][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.921500][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.921513][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.921532][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.937561][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.992991][ T5783] team0: Port device team_slave_0 added [ 48.001317][ T5782] hsr_slave_0: entered promiscuous mode [ 48.002247][ T5782] hsr_slave_1: entered promiscuous mode [ 48.004749][ T5783] team0: Port device team_slave_1 added [ 48.042059][ T5793] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.060404][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.060419][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.060446][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.081301][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.081311][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.081324][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.221712][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.221824][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.221924][ T5796] bridge_slave_0: entered allmulticast mode [ 48.223370][ T5796] bridge_slave_0: entered promiscuous mode [ 48.229575][ T5783] hsr_slave_0: entered promiscuous mode [ 48.230448][ T5783] hsr_slave_1: entered promiscuous mode [ 48.231064][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 48.231146][ T5783] Cannot create hsr debugfs directory [ 48.257669][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.257791][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.259232][ T5796] bridge_slave_1: entered allmulticast mode [ 48.260567][ T5796] bridge_slave_1: entered promiscuous mode [ 48.309582][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.337454][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.385158][ T5796] team0: Port device team_slave_0 added [ 48.399433][ T5796] team0: Port device team_slave_1 added [ 48.453620][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.453636][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.453656][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.475790][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.475806][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.475827][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.556523][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.562412][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.563090][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.566047][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.583273][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.588206][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.608576][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.611945][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.624688][ T5796] hsr_slave_0: entered promiscuous mode [ 48.625483][ T5796] hsr_slave_1: entered promiscuous mode [ 48.626062][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 48.626078][ T5796] Cannot create hsr debugfs directory [ 48.782736][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.782961][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.783231][ T5793] bridge_slave_0: entered allmulticast mode [ 48.784494][ T5793] bridge_slave_0: entered promiscuous mode [ 48.803202][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.803277][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.803526][ T5793] bridge_slave_1: entered allmulticast mode [ 48.804870][ T5793] bridge_slave_1: entered promiscuous mode [ 48.855216][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.874941][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.888803][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.891965][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.896434][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.900119][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.900819][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.905631][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.920767][ T5793] team0: Port device team_slave_0 added [ 48.923613][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.928508][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.930808][ T5793] team0: Port device team_slave_1 added [ 48.983613][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.983624][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.983636][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.985233][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.985241][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.985253][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.014159][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.023466][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.026726][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.030988][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.044135][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.046990][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.047878][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.053140][ T5796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.067945][ T5793] hsr_slave_0: entered promiscuous mode [ 49.068645][ T5793] hsr_slave_1: entered promiscuous mode [ 49.069821][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 49.069837][ T5793] Cannot create hsr debugfs directory [ 49.108031][ T5787] Bluetooth: hci1: command tx timeout [ 49.118321][ T67] Bluetooth: hci2: command tx timeout [ 49.118523][ T5787] Bluetooth: hci0: command tx timeout [ 49.120056][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.173667][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.188249][ T5787] Bluetooth: hci3: command tx timeout [ 49.248380][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.248672][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.274241][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.274326][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.295672][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.298594][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.306399][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.310705][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.313613][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.316642][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.319007][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.322560][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.334770][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.372378][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.392582][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.413977][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.414071][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.422094][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.424218][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.424303][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.431048][ T227] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.431135][ T227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.462224][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.462304][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.542314][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.556422][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.560306][ T498] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.560350][ T498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.565221][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.565262][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.713419][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.732352][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.750136][ T5782] veth0_vlan: entered promiscuous mode [ 49.766709][ T5782] veth1_vlan: entered promiscuous mode [ 49.781128][ T5783] veth0_vlan: entered promiscuous mode [ 49.783012][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.790259][ T5783] veth1_vlan: entered promiscuous mode [ 49.806401][ T5782] veth0_macvtap: entered promiscuous mode [ 49.815664][ T5782] veth1_macvtap: entered promiscuous mode [ 49.839240][ T5783] veth0_macvtap: entered promiscuous mode [ 49.842855][ T5783] veth1_macvtap: entered promiscuous mode [ 49.845224][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.848245][ T5796] veth0_vlan: entered promiscuous mode [ 49.856833][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.858344][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.861326][ T5796] veth1_vlan: entered promiscuous mode [ 49.874606][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.884396][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.903972][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.907788][ T5796] veth0_macvtap: entered promiscuous mode [ 49.915994][ T5796] veth1_macvtap: entered promiscuous mode [ 49.956865][ T498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.956882][ T498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.968471][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.985699][ T5793] veth0_vlan: entered promiscuous mode [ 49.989374][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.998772][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.998872][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.009678][ T5793] veth1_vlan: entered promiscuous mode [ 50.013497][ T221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.013512][ T221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.029643][ T221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.029662][ T221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.064039][ T227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.064057][ T227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.078363][ T5596] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.078489][ T5596] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.087474][ T5793] veth0_macvtap: entered promiscuous mode [ 50.098840][ T5793] veth1_macvtap: entered promiscuous mode [ 50.125664][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.135214][ T5782] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.142775][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.147631][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.147693][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.148609][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.148799][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.149305][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.149320][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.159578][ T5596] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.159796][ T5596] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.159925][ T5596] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.179341][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.179353][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.246063][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.246082][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.270906][ T227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.270919][ T227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.277892][ T5596] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.300014][ T5596] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.368170][ T5596] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.368209][ T5596] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.550691][ T5976] lo: entered promiscuous mode [ 50.557244][ T5973] Zero length message leads to an empty skb [ 50.576977][ T5978] trusted_key: encrypted_key: insufficient parameters specified [ 50.581332][ T5977] trusted_key: encrypted_key: insufficient parameters specified [ 50.581757][ T5978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7'. [ 50.582501][ T5980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7'. [ 50.663712][ T5992] Bluetooth: MGMT ver 1.23 [ 50.663733][ T5992] Bluetooth: hci0: invalid len left 17, exp >= 247 [ 50.697121][ T5994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14'. [ 50.803134][ T6014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6014 comm=syz.2.21 [ 51.003698][ T6024] FAULT_INJECTION: forcing a failure. [ 51.003698][ T6024] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.003721][ T6024] CPU: 2 UID: 0 PID: 6024 Comm: syz.2.24 Not tainted syzkaller #0 PREEMPT(full) [ 51.003732][ T6024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 51.003739][ T6024] Call Trace: [ 51.003743][ T6024] [ 51.003748][ T6024] dump_stack_lvl+0x100/0x190 [ 51.003768][ T6024] should_fail_ex.cold+0x5/0xa [ 51.003785][ T6024] strncpy_from_user+0x3b/0x2d0 [ 51.003802][ T6024] __do_sys_add_key+0xd4/0x460 [ 51.003818][ T6024] ? __pfx___do_sys_add_key+0x10/0x10 [ 51.003830][ T6024] ? ksys_write+0x1ac/0x250 [ 51.003869][ T6024] do_syscall_64+0x123/0x790 [ 51.003889][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.003901][ T6024] RIP: 0033:0x7f796159f559 [ 51.003911][ T6024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.003922][ T6024] RSP: 002b:00007f79623ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 51.003933][ T6024] RAX: ffffffffffffffda RBX: 00007f7961825fa0 RCX: 00007f796159f559 [ 51.003939][ T6024] RDX: 0000200000002a00 RSI: 0000000000000000 RDI: 00002000000029c0 [ 51.003946][ T6024] RBP: 00007f7961636b20 R08: ffffffffffffffff R09: 0000000000000000 [ 51.003952][ T6024] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 51.003958][ T6024] R13: 00007f7961826038 R14: 00007f7961825fa0 R15: 00007ffe9c267748 [ 51.003972][ T6024] [ 51.008343][ T6024] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 51.063608][ T5787] Bluetooth: to_multiplier 0 < 10 [ 51.164472][ T6030] netlink: 40 bytes leftover after parsing attributes in process `syz.3.26'. [ 51.172690][ T6030] bond0: (slave bond_slave_0): Releasing backup interface [ 51.199082][ T5787] Bluetooth: hci0: command tx timeout [ 51.199104][ T5787] Bluetooth: hci2: command tx timeout [ 51.199116][ T5787] Bluetooth: hci1: command tx timeout [ 51.278341][ T67] Bluetooth: hci3: command tx timeout [ 51.390237][ T6047] FAT-fs (nbd3): unable to read boot sector [ 51.482039][ T6049] netlink: 52 bytes leftover after parsing attributes in process `syz.3.32'. [ 51.529219][ T6052] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 51.542723][ T6053] program syz.3.34 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.588643][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 51.588970][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 51.659094][ T36] IPVS: starting estimator thread 0... [ 51.659767][ T6068] IPVS: rr: SCTP 127.0.0.1:20000 - no destination available [ 51.661321][ T6065] program syz.0.37 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.712395][ T6073] batadv_slave_1: entered promiscuous mode [ 51.712844][ T6073] batadv_slave_1: left promiscuous mode [ 51.746228][ T6075] netlink: zone id is out of range [ 51.746267][ T6075] netlink: zone id is out of range [ 51.746271][ T6075] netlink: zone id is out of range [ 51.746274][ T6075] netlink: zone id is out of range [ 51.746278][ T6075] netlink: zone id is out of range [ 51.759405][ T6069] IPVS: using max 27 ests per chain, 64800 per kthread [ 51.785471][ T42] kauditd_printk_skb: 126 callbacks suppressed [ 51.785488][ T42] audit: type=1400 audit(1792985811.550:290): avc: denied { write } for pid=6074 comm="syz.0.39" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.829925][ T42] audit: type=1400 audit(1792985811.600:291): avc: denied { create } for pid=6074 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.829978][ T42] audit: type=1400 audit(1792985811.600:292): avc: denied { ioctl } for pid=6074 comm="syz.0.39" path="socket:[10672]" dev="sockfs" ino=10672 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.830072][ T6075] overlayfs: failed to resolve './file0': -2 [ 52.034619][ T42] audit: type=1400 audit(1792985811.800:293): avc: denied { connect } for pid=6079 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 52.115485][ T42] audit: type=1400 audit(1792985811.880:294): avc: denied { read write } for pid=6081 comm="syz.3.42" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.115883][ T42] audit: type=1400 audit(1792985811.880:295): avc: denied { open } for pid=6081 comm="syz.3.42" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.125374][ T41] cfg80211: failed to load regulatory.db [ 52.204528][ T42] audit: type=1400 audit(1792985811.970:296): avc: denied { read write } for pid=6091 comm="syz.3.46" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 52.204721][ T42] audit: type=1400 audit(1792985811.970:297): avc: denied { open } for pid=6091 comm="syz.3.46" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 52.274188][ T42] audit: type=1400 audit(1792985812.040:298): avc: denied { connect } for pid=6105 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.304028][ T42] audit: type=1400 audit(1792985812.070:299): avc: denied { read } for pid=6105 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.825526][ T6134] netlink: 32 bytes leftover after parsing attributes in process `syz.3.53'. [ 52.899428][ T6138] capability: warning: `syz.3.55' uses 32-bit capabilities (legacy support in use) [ 52.913002][ T6138] 9pnet_fd: p9_fd_create_tcp (6138): problem binding to privport [ 52.961023][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.064686][ T6145] process 'syz.3.58' launched '/dev/fd/4' with NULL argv: empty string added [ 53.069451][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.100529][ T6147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.59'. [ 53.130007][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.152430][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.154760][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.155364][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.159017][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.160320][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.184160][ T6154] netlink: 'syz.3.61': attribute type 10 has an invalid length. [ 53.190084][ T6154] team0: Device wg2 is of different type [ 53.206155][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.267666][ T5787] Bluetooth: hci1: command tx timeout [ 53.267688][ T67] Bluetooth: hci2: command tx timeout [ 53.325839][ T13] bridge_slave_1: left allmulticast mode [ 53.325865][ T13] bridge_slave_1: left promiscuous mode [ 53.326398][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.336927][ T13] bridge_slave_0: left allmulticast mode [ 53.336951][ T13] bridge_slave_0: left promiscuous mode [ 53.337147][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.462678][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.466788][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.466875][ T6173] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.468693][ T13] bond0 (unregistering): Released all slaves [ 53.580498][ T6151] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.643779][ T5497] 8021q: adding VLAN 0 to HW filter on device eth2 [ 53.902268][ T5497] 8021q: adding VLAN 0 to HW filter on device eth3 [ 53.965058][ T13] hsr_slave_0: left promiscuous mode [ 53.966781][ T13] hsr_slave_1: left promiscuous mode [ 53.967183][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.967198][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.970215][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.970225][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.978691][ T13] veth1_macvtap: left promiscuous mode [ 53.978716][ T13] veth0_macvtap: left promiscuous mode [ 53.978760][ T13] veth1_vlan: left promiscuous mode [ 53.978797][ T13] veth0_vlan: left promiscuous mode [ 54.126824][ T13] team0 (unregistering): Port device team_slave_1 removed [ 54.136304][ T13] team0 (unregistering): Port device team_slave_0 removed [ 54.239107][ T5497] 8021q: adding VLAN 0 to HW filter on device eth4 [ 54.301322][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.301402][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.301463][ T6151] bridge_slave_0: entered allmulticast mode [ 54.302238][ T6151] bridge_slave_0: entered promiscuous mode [ 54.303569][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.303611][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.303662][ T6151] bridge_slave_1: entered allmulticast mode [ 54.304403][ T6151] bridge_slave_1: entered promiscuous mode [ 54.322295][ T6151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.323902][ T6151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.349444][ T6151] team0: Port device team_slave_0 added [ 54.355222][ T6151] team0: Port device team_slave_1 added [ 54.376382][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.376397][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.376413][ T6151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.377927][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.377939][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.377959][ T6151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.401391][ T6151] hsr_slave_0: entered promiscuous mode [ 54.401811][ T6151] hsr_slave_1: entered promiscuous mode [ 54.402110][ T6151] debugfs: 'hsr0' already exists in 'hsr' [ 54.402121][ T6151] Cannot create hsr debugfs directory [ 54.485829][ T6240] Unknown cursor 12 [ 54.527022][ T6151] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.530584][ T6151] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.530979][ T6151] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.537203][ T6151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.538527][ T6151] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.545842][ T6151] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.546828][ T6151] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.550487][ T6151] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.577277][ T5497] 8021q: adding VLAN 0 to HW filter on device eth5 [ 54.599078][ T6241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6241 comm=syz.0.77 [ 54.633427][ T6151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.635257][ T6241] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 54.643559][ T6151] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.646324][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.646368][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.650761][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.650835][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.878930][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 54.919676][ T6151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.938417][ T6274] team0: Port device team_slave_0 removed [ 55.080296][ T6288] macvlan2: entered promiscuous mode [ 55.080316][ T6288] macvlan2: entered allmulticast mode [ 55.097658][ T6151] veth0_vlan: entered promiscuous mode [ 55.102179][ T6151] veth1_vlan: entered promiscuous mode [ 55.114979][ T6151] veth0_macvtap: entered promiscuous mode [ 55.117133][ T6151] veth1_macvtap: entered promiscuous mode [ 55.124217][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.129489][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.133697][ T5860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.133727][ T5860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.133744][ T5860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.177607][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.177641][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.188195][ T67] Bluetooth: hci3: command tx timeout [ 55.212112][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.212130][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.218164][ T5596] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.266138][ T6297] FAULT_INJECTION: forcing a failure. [ 55.266138][ T6297] name failslab, interval 1, probability 0, space 0, times 1 [ 55.266157][ T6297] CPU: 1 UID: 0 PID: 6297 Comm: syz.1.86 Not tainted syzkaller #0 PREEMPT(full) [ 55.266169][ T6297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 55.266175][ T6297] Call Trace: [ 55.266179][ T6297] [ 55.266183][ T6297] dump_stack_lvl+0x100/0x190 [ 55.266314][ T6297] should_fail_ex.cold+0x5/0xa [ 55.266340][ T6297] should_failslab+0xc2/0x120 [ 55.266402][ T6297] kmem_cache_alloc_noprof+0x92/0x6a0 [ 55.266417][ T6297] ? security_file_alloc+0x34/0x2c0 [ 55.266453][ T6297] security_file_alloc+0x34/0x2c0 [ 55.266464][ T6297] init_file+0x95/0x480 [ 55.266481][ T6297] alloc_empty_file+0x79/0x1c0 [ 55.266491][ T6297] alloc_file_pseudo+0x17e/0x290 [ 55.266502][ T6297] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 55.266517][ T6297] ioctx_alloc+0x5d6/0x21a0 [ 55.266533][ T6297] ? __might_fault+0xc5/0x140 [ 55.266549][ T6297] ? find_held_lock+0x2b/0x80 [ 55.266568][ T6297] ? __pfx_ioctx_alloc+0x10/0x10 [ 55.266583][ T6297] __x64_sys_io_setup+0xc9/0x220 [ 55.266596][ T6297] do_syscall_64+0x123/0x790 [ 55.266666][ T6297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.266677][ T6297] RIP: 0033:0x7f1370b9f559 [ 55.266687][ T6297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.266696][ T6297] RSP: 002b:00007f1371a9b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 55.266707][ T6297] RAX: ffffffffffffffda RBX: 00007f1370e25fa0 RCX: 00007f1370b9f559 [ 55.266714][ T6297] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 000000000000239f [ 55.266720][ T6297] RBP: 00007f1370c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 55.266726][ T6297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.266732][ T6297] R13: 00007f1370e26038 R14: 00007f1370e25fa0 R15: 00007ffd19a880f8 [ 55.266746][ T6297] [ 55.325768][ T6301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6301 comm=syz.1.86 [ 55.348231][ T67] Bluetooth: hci2: command tx timeout [ 55.348419][ T67] Bluetooth: hci1: command tx timeout [ 55.393804][ T6306] tmpfs: Using encoding : utf8-12.1.0 [ 55.395456][ T6306] overlayfs: missing 'lowerdir' [ 55.421686][ T6308] nfs4: Unknown parameter '#$±]//[:' [ 55.421966][ T6308] trusted_key: encrypted_key: insufficient parameters specified [ 55.511600][ T6315] netlink: 'syz.4.92': attribute type 3 has an invalid length. [ 55.780616][ T6322] overlay: ./file0 is not a directory [ 55.819574][ T6330] __nla_validate_parse: 6 callbacks suppressed [ 55.819586][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 55.819594][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 55.918298][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.937590][ T41] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 56.097538][ T41] usb 6-1: Using ep0 maxpacket: 8 [ 56.099659][ T41] usb 6-1: New USB device found: idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 56.100695][ T41] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 56.100708][ T41] usb 6-1: config 179 has no interface number 0 [ 56.100727][ T41] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 56.100740][ T41] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 56.100752][ T41] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 56.100764][ T41] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 56.100777][ T41] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 56.100795][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.104753][ T6326] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 56.370243][ T5209] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input5 [ 56.485770][ T6341] device-mapper: table: 248:0: crypt: Device size is not multiple of sector_size feature (-EINVAL) [ 56.485786][ T6341] device-mapper: ioctl: error adding target to table [ 56.571876][ T6337] nbd1: detected capacity change from 0 to 63 [ 56.617303][ T6360] FAULT_INJECTION: forcing a failure. [ 56.617303][ T6360] name failslab, interval 1, probability 0, space 0, times 0 [ 56.617323][ T6360] CPU: 3 UID: 0 PID: 6360 Comm: syz.3.102 Not tainted syzkaller #0 PREEMPT(full) [ 56.617339][ T6360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.617348][ T6360] Call Trace: [ 56.617354][ T6360] [ 56.617361][ T6360] dump_stack_lvl+0x100/0x190 [ 56.617410][ T6360] should_fail_ex.cold+0x5/0xa [ 56.617435][ T6360] should_failslab+0xc2/0x120 [ 56.617459][ T6360] __kmalloc_noprof+0xfc/0x840 [ 56.617482][ T6360] ? tomoyo_encode2+0xfb/0x3c0 [ 56.617496][ T6360] tomoyo_encode2+0xfb/0x3c0 [ 56.617508][ T6360] tomoyo_encode+0x29/0x50 [ 56.617518][ T6360] tomoyo_realpath_from_path+0x18c/0x690 [ 56.617532][ T6360] tomoyo_check_open_permission+0x2af/0x3c0 [ 56.617549][ T6360] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 56.617571][ T6360] ? hook_file_open+0x245/0x8e0 [ 56.617583][ T6360] ? avc_has_perm_noaudit+0x11e/0x470 [ 56.617607][ T6360] ? __pfx_selinux_inode_permission+0x10/0x10 [ 56.617627][ T6360] tomoyo_file_open+0x6b/0x90 [ 56.617642][ T6360] security_file_open+0xb5/0x1e0 [ 56.617653][ T6360] do_dentry_open+0x552/0x1470 [ 56.617671][ T6360] vfs_open_consume+0xcc/0x460 [ 56.617689][ T6360] path_openat+0x1547/0x23f0 [ 56.617707][ T6360] ? __pfx_path_openat+0x10/0x10 [ 56.617726][ T6360] do_file_open+0x20e/0x430 [ 56.617743][ T6360] ? __pfx_do_file_open+0x10/0x10 [ 56.617768][ T6360] ? _raw_spin_unlock+0x28/0x50 [ 56.617781][ T6360] ? alloc_fd+0x471/0x7a0 [ 56.617801][ T6360] do_sys_openat2+0x163/0x1d0 [ 56.617811][ T6360] ? __pfx_do_sys_openat2+0x10/0x10 [ 56.617820][ T6360] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 56.617838][ T6360] __x64_sys_openat+0x12d/0x210 [ 56.617848][ T6360] ? __pfx___x64_sys_openat+0x10/0x10 [ 56.617864][ T6360] do_syscall_64+0x123/0x790 [ 56.617880][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.617891][ T6360] RIP: 0033:0x7f08c395fd8e [ 56.617901][ T6360] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 56.617911][ T6360] RSP: 002b:00007f08c4938b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 56.617922][ T6360] RAX: ffffffffffffffda RBX: 00007f08c49396c0 RCX: 00007f08c395fd8e [ 56.617929][ T6360] RDX: 0000000000080002 RSI: 00007f08c4938c00 RDI: ffffffffffffff9c [ 56.617935][ T6360] RBP: 00007f08c4938c00 R08: 0000000000000000 R09: 0000000000000000 [ 56.617941][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 56.617947][ T6360] R13: 00007f08c3c26038 R14: 00007f08c3c25fa0 R15: 00007ffdbb98b288 [ 56.617961][ T6360] [ 56.619738][ T6360] ERROR: Out of memory at tomoyo_realpath_from_path. [ 56.896361][ T42] kauditd_printk_skb: 85 callbacks suppressed [ 56.896436][ T42] audit: type=1400 audit(1792985816.660:385): avc: denied { create } for pid=6364 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 56.896990][ T42] audit: type=1400 audit(1792985816.660:386): avc: denied { create } for pid=6364 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.897737][ T42] audit: type=1400 audit(1792985816.660:387): avc: denied { bind } for pid=6364 comm="syz.3.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.897760][ T42] audit: type=1400 audit(1792985816.670:388): avc: denied { name_bind } for pid=6364 comm="syz.3.104" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 56.898106][ T42] audit: type=1400 audit(1792985816.670:389): avc: denied { node_bind } for pid=6364 comm="syz.3.104" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 56.938509][ T42] audit: type=1400 audit(1792985816.710:390): avc: denied { allowed } for pid=6366 comm="syz.3.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.949817][ T6368] block nbd1: NBD_DISCONNECT [ 56.952323][ T6368] block nbd1: Disconnected due to user request. [ 56.952336][ T6368] block nbd1: shutting down sockets [ 56.957468][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.957565][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 56.957724][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 56.957791][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 56.957812][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 56.957832][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 56.961835][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 56.961913][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 56.962036][ T25] Buffer I/O error on dev nbd1, logical block 1, async page read [ 56.962050][ T25] Buffer I/O error on dev nbd1, logical block 2, async page read [ 56.962061][ T25] Buffer I/O error on dev nbd1, logical block 3, async page read [ 56.962886][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.962907][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 56.962956][ T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.962974][ T25] Buffer I/O error on dev nbd1, logical block 1, async page read [ 56.963041][ T25] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.963123][ T25] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.963181][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.963228][ T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.963273][ T25] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.964042][ T5790] ldm_validate_partition_table(): Disk read failed. [ 56.964105][ T42] audit: type=1400 audit(1792985816.730:391): avc: denied { read } for pid=6324 comm="syz.1.95" name="event4" dev="devtmpfs" ino=2881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.964130][ T42] audit: type=1400 audit(1792985816.730:392): avc: denied { open } for pid=6324 comm="syz.1.95" path="/dev/input/event4" dev="devtmpfs" ino=2881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.964687][ T42] audit: type=1400 audit(1792985816.730:393): avc: denied { ioctl } for pid=6324 comm="syz.1.95" path="/dev/input/event4" dev="devtmpfs" ino=2881 ioctlcmd=0x40304580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.964765][ T5790] Dev nbd1: unable to read RDB block 0 [ 56.965560][ T5790] nbd1: unable to read partition table [ 57.006145][ T42] audit: type=1400 audit(1792985816.770:394): avc: denied { mount } for pid=6372 comm="syz.3.107" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 57.007084][ T6373] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 57.010361][ T6373] x_tables: duplicate underflow at hook 3 [ 57.062475][ T5790] ldm_validate_partition_table(): Disk read failed. [ 57.064913][ T5790] Dev nbd1: unable to read RDB block 0 [ 57.066329][ T5790] nbd1: unable to read partition table [ 57.103322][ T6376] syzkaller0: entered allmulticast mode [ 57.186117][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 57.186101][ T6381] netlink: 'syz.3.109': attribute type 30 has an invalid length. [ 57.186478][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 57.186539][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 57.186594][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 57.186649][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 57.186714][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 57.186769][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 57.186823][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 57.215476][ T6381] netlink: 'syz.3.109': attribute type 30 has an invalid length. [ 57.227282][ T6381] netlink: 'syz.3.109': attribute type 30 has an invalid length. [ 57.249771][ T6381] netlink: 'syz.3.109': attribute type 30 has an invalid length. [ 57.257062][ T6381] netlink: 'syz.3.109': attribute type 30 has an invalid length. [ 57.265110][ T6381] netlink: 'syz.3.109': attribute type 30 has an invalid length. [ 57.267649][ T67] Bluetooth: hci3: command tx timeout [ 57.274701][ T6381] netlink: 'syz.3.109': attribute type 30 has an invalid length. [ 57.290499][ T6381] netlink: 'syz.3.109': attribute type 30 has an invalid length. [ 57.307279][ T6381] netlink: 'syz.3.109': attribute type 30 has an invalid length. [ 57.322123][ T6381] netlink: 'syz.3.109': attribute type 30 has an invalid length. [ 57.896588][ T5884] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.041739][ T5873] logitech-hidpp-device 0005:046D:B012.0002: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 58.083307][ T6482] fido_id[6482]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 58.101968][ T6487] macvlan0: entered promiscuous mode [ 58.192427][ T6504] syz_tun: entered allmulticast mode [ 58.719616][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 58.720024][ T5873] usb 6-1: USB disconnect, device number 2 [ 58.720225][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 58.788960][ T6527] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=280 sclass=netlink_route_socket pid=6527 comm=syz.1.128 [ 58.978484][ T6532] input: syz0 as /devices/virtual/input/input6 [ 59.173471][ T6542] ======================================================= [ 59.173471][ T6542] WARNING: The mand mount option has been deprecated and [ 59.173471][ T6542] and is ignored by this kernel. Remove the mand [ 59.173471][ T6542] option from the mount to silence this warning. [ 59.173471][ T6542] ======================================================= [ 59.173722][ T6542] overlayfs: failed to resolve './file1/file0': -2 [ 59.230539][ T6544] smpboot: CPU 1 is now offline [ 59.507620][ T5787] Bluetooth: hci3: command tx timeout [ 59.659061][ T6565] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 59.659079][ T6565] overlayfs: missing 'lowerdir' [ 60.015429][ T6584] FAULT_INJECTION: forcing a failure. [ 60.015429][ T6584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.015448][ T6584] CPU: 2 UID: 0 PID: 6584 Comm: syz.0.147 Not tainted syzkaller #0 PREEMPT(full) [ 60.015460][ T6584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.015466][ T6584] Call Trace: [ 60.015470][ T6584] [ 60.015475][ T6584] dump_stack_lvl+0x100/0x190 [ 60.015494][ T6584] should_fail_ex.cold+0x5/0xa [ 60.015510][ T6584] _copy_from_user+0x2e/0xd0 [ 60.015525][ T6584] __sys_bpf+0x2f5/0x4b60 [ 60.015545][ T6584] ? __pfx___sys_bpf+0x10/0x10 [ 60.015558][ T6584] ? find_held_lock+0x2b/0x80 [ 60.015568][ T6584] ? futex_wake+0x4ea/0x5e0 [ 60.015591][ T6584] ? rcu_read_lock_any_held+0x6a/0x90 [ 60.015602][ T6584] ? find_held_lock+0x2b/0x80 [ 60.015612][ T6584] ? ksys_write+0x190/0x250 [ 60.015629][ T6584] ? ksys_write+0x190/0x250 [ 60.015649][ T6584] ? __x64_sys_futex+0x34f/0x4d0 [ 60.015659][ T6584] ? __x64_sys_futex+0x358/0x4d0 [ 60.015671][ T6584] ? xfd_validate_state+0x129/0x190 [ 60.015687][ T6584] ? __x64_sys_bpf+0xce/0x140 [ 60.015700][ T6584] __x64_sys_bpf+0xce/0x140 [ 60.015715][ T6584] ? do_syscall_64+0xae/0x790 [ 60.015730][ T6584] do_syscall_64+0x123/0x790 [ 60.015745][ T6584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.015756][ T6584] RIP: 0033:0x7f79c0d9f559 [ 60.015766][ T6584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.015776][ T6584] RSP: 002b:00007f79c1cff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.015786][ T6584] RAX: ffffffffffffffda RBX: 00007f79c1025fa0 RCX: 00007f79c0d9f559 [ 60.015793][ T6584] RDX: 0000000000000094 RSI: 00002000000008c0 RDI: 0000000000000005 [ 60.015799][ T6584] RBP: 00007f79c0e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 60.015830][ T6584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.015838][ T6584] R13: 00007f79c1026038 R14: 00007f79c1025fa0 R15: 00007ffe742fcd98 [ 60.015854][ T6584] [ 60.248510][ T6598] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 60.559326][ T67] Bluetooth: hci2: command 0x0406 tx timeout [ 60.645630][ T6600] fuse: Unknown parameter 'Í1…:hùÚ' [ 60.773104][ T6597] syz.1.150 (6597): drop_caches: 2 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 61.020800][ T6619] __nla_validate_parse: 63 callbacks suppressed [ 61.020816][ T6619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.157'. [ 61.021001][ T6620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.157'. [ 61.028985][ T6611] netlink: 176 bytes leftover after parsing attributes in process `syz.1.155'. [ 61.180036][ T6633] smc: net device lo applied user defined pnetid SYZ2 [ 61.980106][ T6653] trusted_key: encrypted_key: insufficient parameters specified [ 61.980740][ T6654] trusted_key: encrypted_key: insufficient parameters specified [ 61.986801][ T42] kauditd_printk_skb: 69 callbacks suppressed [ 61.986814][ T42] audit: type=1400 audit(1792985821.750:464): avc: denied { bind } for pid=6652 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 62.009840][ T42] audit: type=1400 audit(1792985821.780:465): avc: denied { write } for pid=6652 comm="syz.3.166" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 62.010445][ T6653] sg_write: process 153 (syz.3.166) changed security contexts after opening file descriptor, this is not allowed. [ 62.010746][ T6654] sg_write: data in/out 808464396/251 bytes for SCSI command 0x0-- guessing data in; [ 62.010746][ T6654] program syz.3.166 not setting count and/or reply_len properly [ 62.090976][ T42] audit: type=1400 audit(1792985821.860:466): avc: denied { mount } for pid=6655 comm="syz.4.167" name="/" dev="configfs" ino=2119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 62.091604][ T42] audit: type=1400 audit(1792985821.860:467): avc: denied { search } for pid=6655 comm="syz.4.167" name="/" dev="configfs" ino=2119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.091758][ T42] audit: type=1400 audit(1792985821.860:468): avc: denied { search } for pid=6655 comm="syz.4.167" name="usb_gadget" dev="configfs" ino=5519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.093873][ T42] audit: type=1400 audit(1792985821.860:469): avc: denied { write search } for pid=6655 comm="syz.4.167" name="usb_gadget" dev="configfs" ino=5519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.095099][ T42] audit: type=1400 audit(1792985821.860:470): avc: denied { add_name } for pid=6655 comm="syz.4.167" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.095358][ T42] audit: type=1400 audit(1792985821.860:471): avc: denied { create } for pid=6655 comm="syz.4.167" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 62.097195][ T42] audit: type=1400 audit(1792985821.860:472): avc: denied { search } for pid=6655 comm="syz.4.167" name="/" dev="configfs" ino=2119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.097297][ T42] audit: type=1400 audit(1792985821.860:473): avc: denied { search } for pid=6655 comm="syz.4.167" name="usb_gadget" dev="configfs" ino=5519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.126092][ T6656] configfs-gadget.g1 gadget.0: HOST MAC 26:5c:b8:a2:18:18 [ 62.126107][ T6656] configfs-gadget.g1 gadget.0: MAC b2:d6:fa:81:08:11 [ 62.193619][ T6658] FAULT_INJECTION: forcing a failure. [ 62.193619][ T6658] name failslab, interval 1, probability 0, space 0, times 0 [ 62.193639][ T6658] CPU: 0 UID: 0 PID: 6658 Comm: syz.3.168 Not tainted syzkaller #0 PREEMPT(full) [ 62.193651][ T6658] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.193657][ T6658] Call Trace: [ 62.193661][ T6658] [ 62.193666][ T6658] dump_stack_lvl+0x100/0x190 [ 62.193686][ T6658] should_fail_ex.cold+0x5/0xa [ 62.193702][ T6658] should_failslab+0xc2/0x120 [ 62.193719][ T6658] __kmalloc_noprof+0xfc/0x840 [ 62.193734][ T6658] ? vb2_vmalloc_alloc+0x135/0x410 [ 62.193829][ T6658] ? __vb2_queue_alloc+0x23e/0x1160 [ 62.193851][ T6658] __vb2_queue_alloc+0x23e/0x1160 [ 62.193874][ T6658] vb2_core_reqbufs+0x899/0xf30 [ 62.193892][ T6658] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 62.193912][ T6658] ? __vb2_init_fileio+0x18f/0x1000 [ 62.193930][ T6658] __vb2_init_fileio+0x32d/0x1000 [ 62.193946][ T6658] ? __pfx___futex_wait+0x10/0x10 [ 62.193960][ T6658] ? futex_hash+0x311/0x400 [ 62.193980][ T6658] __vb2_perform_fileio+0x9ba/0x1380 [ 62.193999][ T6658] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 62.194017][ T6658] vb2_fop_read+0x211/0x520 [ 62.194033][ T6658] v4l2_read+0x229/0x2c0 [ 62.194052][ T6658] ? __pfx_v4l2_read+0x10/0x10 [ 62.194064][ T6658] vfs_read+0x1e4/0xb40 [ 62.194091][ T6658] ? lock_acquire+0x1d1/0x380 [ 62.194106][ T6658] ? __fget_files+0x34/0x3d0 [ 62.194123][ T6658] ? __pfx_vfs_read+0x10/0x10 [ 62.194139][ T6658] ? find_held_lock+0x2b/0x80 [ 62.194153][ T6658] ? __fget_files+0x215/0x3d0 [ 62.194173][ T6658] ? __fget_files+0x215/0x3d0 [ 62.194199][ T6658] ? __fget_files+0x21f/0x3d0 [ 62.194230][ T6658] __x64_sys_pread64+0x1eb/0x250 [ 62.194254][ T6658] ? __pfx___x64_sys_pread64+0x10/0x10 [ 62.194284][ T6658] do_syscall_64+0x123/0x790 [ 62.194312][ T6658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.194333][ T6658] RIP: 0033:0x7f08c399f559 [ 62.194347][ T6658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.194358][ T6658] RSP: 002b:00007f08c4939028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 62.194369][ T6658] RAX: ffffffffffffffda RBX: 00007f08c3c25fa0 RCX: 00007f08c399f559 [ 62.194376][ T6658] RDX: 0000000000000048 RSI: 0000200000000540 RDI: 0000000000000006 [ 62.194382][ T6658] RBP: 00007f08c3a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 62.194388][ T6658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.194394][ T6658] R13: 00007f08c3c26038 R14: 00007f08c3c25fa0 R15: 00007ffdbb98b288 [ 62.194408][ T6658] [ 62.378700][ T5873] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.529647][ T5873] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.03 [ 62.530300][ T5873] usb 5-1: Dual-Role OTG device on HNP port [ 62.530641][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.589458][ T5873] cdc_ncm 5-1:1.0: MAC-Address: 26:5c:b8:a2:18:18 [ 62.619652][ T5873] cdc_ncm 5-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 26:5c:b8:a2:18:18 [ 62.642653][ T6688] pim6reg: entered allmulticast mode [ 62.643357][ T6688] team0: entered allmulticast mode [ 62.643374][ T6688] team_slave_0: entered allmulticast mode [ 62.643388][ T6688] team_slave_1: entered allmulticast mode [ 62.643764][ T6688] pim6reg: left allmulticast mode [ 62.662673][ T6691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.175'. [ 62.757577][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.908991][ T10] usb 6-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 62.911833][ T10] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 62.911852][ T10] usb 6-1: config 1 has no interface number 0 [ 62.917070][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.917088][ T10] usb 6-1: Product: syz [ 62.917100][ T10] usb 6-1: Manufacturer: syz [ 62.917111][ T10] usb 6-1: SerialNumber: syz [ 62.917889][ T5884] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 62.944585][ T10] usb 6-1: 3:0 : does not exist [ 62.944598][ T10] usb 6-1: 3:0 : does not exist [ 63.078263][ T5884] usb 8-1: New USB device found: idVendor=06cd, idProduct=010f, bcdDevice=1.00 [ 63.079233][ T5884] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.079254][ T5884] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 63.079266][ T5884] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 63.079277][ T5884] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 63.079288][ T5884] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 63.079299][ T5884] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 63.079310][ T5884] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 63.079321][ T5884] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 63.079333][ T5884] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 63.079344][ T5884] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 63.079355][ T5884] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 63.079366][ T5884] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 63.079377][ T5884] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.079387][ T5884] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 63.079397][ T5884] usb 8-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 63.082932][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.082944][ T5884] usb 8-1: Product: syz [ 63.082950][ T5884] usb 8-1: Manufacturer: syz [ 63.082957][ T5884] usb 8-1: SerialNumber: syz [ 63.088025][ T6694] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.088123][ T6694] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.088168][ T6694] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.088249][ T6694] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.088293][ T6694] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.088336][ T6694] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.088433][ T6694] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.088481][ T6694] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.088561][ T6694] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.088607][ T6694] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.088648][ T6694] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 63.089684][ T5884] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 63.090310][ T5884] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 7 [ 63.124259][ T5884] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 63.127009][ T5884] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 63.131621][ T5884] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 63.279891][ T24] usb 6-1: USB disconnect, device number 3 [ 63.293514][ T5884] usb 8-1: USB disconnect, device number 2 [ 63.333582][ T6686] team0: left allmulticast mode [ 63.333596][ T6686] team_slave_0: left allmulticast mode [ 63.333646][ T6686] team_slave_1: left allmulticast mode [ 63.400735][ T5884] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 63.410239][ T5884] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 63.417240][ T5884] keyspan 8-1:1.0: device disconnected [ 63.449376][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 63.449452][ T6722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.464547][ T6722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.635272][ T6738] Bluetooth: hci0: unsupported parameter 5161 [ 63.635286][ T6738] Bluetooth: hci0: unsupported parameter 8192 [ 63.635329][ T6738] Bluetooth: hci0: unsupported parameter 5161 [ 63.635337][ T6738] Bluetooth: hci0: unsupported parameter 8192 [ 63.636048][ T6738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.179'. [ 63.722528][ T6745] loop4: detected capacity change from 0 to 2640 [ 63.733134][ T6745] buffer_io_error: 138 callbacks suppressed [ 63.733145][ T6745] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 63.736888][ T6745] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 63.738876][ T5790] Buffer I/O error on dev loop4, logical block 3, async page read [ 63.839284][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 63.839348][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 64.547258][ T6768] xt_hashlimit: size too large, truncated to 1048576 [ 64.585497][ T6769] netlink: 128 bytes leftover after parsing attributes in process `syz.0.188'. [ 64.585640][ T6769] netlink: 128 bytes leftover after parsing attributes in process `syz.0.188'. [ 64.642100][ T6768] xt_hashlimit: size too large, truncated to 1048576 [ 64.730937][ T6768] xt_hashlimit: size too large, truncated to 1048576 [ 64.787067][ T6778] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.825196][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.833049][ T6768] xt_hashlimit: size too large, truncated to 1048576 [ 64.833574][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.835543][ T67] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.837999][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.846219][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.936032][ T6768] xt_hashlimit: size too large, truncated to 1048576 [ 65.039088][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.085141][ T5596] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.094467][ T6768] xt_hashlimit: size too large, truncated to 1048576 [ 65.141561][ T5497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.171770][ T6768] xt_hashlimit: size too large, truncated to 1048576 [ 65.181817][ T5596] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.266408][ T5596] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.296411][ T6779] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.300717][ T6812] device-mapper: table: 248:1: flakey: Total (up + down) interval is zero (-EINVAL) [ 65.300736][ T6812] device-mapper: ioctl: error adding target to table [ 65.323985][ T6768] xt_hashlimit: size too large, truncated to 1048576 [ 65.344314][ T5596] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.420458][ T6819] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20002 [ 65.521975][ T5596] bridge_slave_1: left allmulticast mode [ 65.521991][ T5596] bridge_slave_1: left promiscuous mode [ 65.522097][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.524509][ T5596] bridge_slave_0: left allmulticast mode [ 65.524521][ T5596] bridge_slave_0: left promiscuous mode [ 65.525458][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.557551][ T6057] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 65.633272][ T5596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.635649][ T5596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.636576][ T5596] bond0 (unregistering): Released all slaves [ 65.730807][ T6057] usb 9-1: New USB device found: idVendor=a686, idProduct=00f3, bcdDevice=0.00 [ 65.733636][ T6057] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 65.733654][ T6057] usb 9-1: can't read configurations, error -61 [ 65.739344][ T6779] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.739466][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.739523][ T6779] bridge_slave_0: entered allmulticast mode [ 65.740623][ T6779] bridge_slave_0: entered promiscuous mode [ 65.742457][ T6779] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.742513][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.742603][ T6779] bridge_slave_1: entered allmulticast mode [ 65.743763][ T6779] bridge_slave_1: entered promiscuous mode [ 65.791659][ T6779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.794188][ T6779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.816936][ T6779] team0: Port device team_slave_0 added [ 65.832665][ T6779] team0: Port device team_slave_1 added [ 65.869621][ T5497] 8021q: adding VLAN 0 to HW filter on device eth6 [ 65.875527][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.875544][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.875557][ T6779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.876378][ T6779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.876385][ T6779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.876396][ T6779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.878814][ T6057] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 65.938160][ T6779] hsr_slave_0: entered promiscuous mode [ 65.938794][ T6779] hsr_slave_1: entered promiscuous mode [ 65.939253][ T6779] debugfs: 'hsr0' already exists in 'hsr' [ 65.939264][ T6779] Cannot create hsr debugfs directory [ 66.038044][ T6057] usb 9-1: New USB device found: idVendor=a686, idProduct=00f3, bcdDevice=0.00 [ 66.040079][ T6057] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 66.040096][ T6057] usb 9-1: can't read configurations, error -61 [ 66.041525][ T6057] usb usb9-port1: attempt power cycle [ 66.057084][ T5596] hsr_slave_0: left promiscuous mode [ 66.062638][ T5596] hsr_slave_1: left promiscuous mode [ 66.063194][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.063205][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.063959][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.063968][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.070188][ T5596] veth1_macvtap: left promiscuous mode [ 66.070208][ T5596] veth0_macvtap: left promiscuous mode [ 66.070300][ T5596] veth1_vlan: left promiscuous mode [ 66.070331][ T5596] veth0_vlan: left promiscuous mode [ 66.246377][ T5596] team0 (unregistering): Port device team_slave_1 removed [ 66.385368][ T6057] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 66.401886][ T6057] usb 9-1: New USB device found: idVendor=a686, idProduct=00f3, bcdDevice=0.00 [ 66.409482][ T6057] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 66.409501][ T6057] usb 9-1: can't read configurations, error -61 [ 66.498851][ T6779] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.507171][ T6779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.508859][ T6779] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.514662][ T6779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.515222][ T6779] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.521773][ T6779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.522167][ T6779] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.524927][ T6779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.527018][ T5596] IPVS: stop unused estimator thread 0... [ 66.538230][ T6057] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 66.559283][ T6057] usb 9-1: New USB device found: idVendor=a686, idProduct=00f3, bcdDevice=0.00 [ 66.560924][ T6057] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 66.560941][ T6057] usb 9-1: can't read configurations, error -61 [ 66.561129][ T6057] usb usb9-port1: unable to enumerate USB device [ 66.583903][ T5497] 8021q: adding VLAN 0 to HW filter on device eth7 [ 66.586331][ T6779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.591743][ T6875] __nla_validate_parse: 64 callbacks suppressed [ 66.591753][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 66.609670][ T6779] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.612768][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.612815][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.616448][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.616491][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.644796][ T6878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.204'. [ 66.737535][ T9] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 66.784793][ T6891] validate_nla: 56 callbacks suppressed [ 66.784805][ T6891] netlink: 'syz.0.205': attribute type 10 has an invalid length. [ 66.784812][ T6891] netlink: 40 bytes leftover after parsing attributes in process `syz.0.205'. [ 66.785015][ T6891] batadv0: entered promiscuous mode [ 66.785026][ T6891] batadv0: entered allmulticast mode [ 66.785562][ T6891] bridge0: port 3(batadv0) entered blocking state [ 66.785688][ T6891] bridge0: port 3(batadv0) entered disabled state [ 66.790417][ T6891] bridge0: port 3(batadv0) entered blocking state [ 66.790464][ T6891] bridge0: port 3(batadv0) entered forwarding state [ 66.867611][ T67] Bluetooth: hci0: command tx timeout [ 66.889278][ T9] usb 8-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 66.890913][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 66.890934][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 66.890947][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.890958][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 66.890970][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 66.891824][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 66.891843][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 66.891855][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.891868][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 66.891880][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 66.892716][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 66.892736][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 66.892748][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.892759][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 66.892771][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 66.912852][ T6779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.917611][ T9] usb 8-1: string descriptor 0 read error: -22 [ 66.917736][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.978674][ T9] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 66.991128][ T42] kauditd_printk_skb: 95 callbacks suppressed [ 66.991141][ T42] audit: type=1400 audit(1792985826.760:569): avc: denied { write } for pid=6912 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.005725][ T6913] device-mapper: table: 248:2: mirror: Device lookup failure (-ENOENT) [ 67.005750][ T6913] device-mapper: ioctl: error adding target to table [ 67.051889][ T42] audit: type=1400 audit(1792985826.820:570): avc: denied { write } for pid=6918 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.087840][ T5596] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 67.087851][ T5596] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 67.114398][ T5497] 8021q: adding VLAN 0 to HW filter on device eth8 [ 67.136574][ T67] Bluetooth: hci2: unexpected cc 0x042f length: 9 > 7 [ 67.136593][ T67] Bluetooth: hci2: unexpected event for opcode 0x042f [ 67.153182][ T6779] veth0_vlan: entered promiscuous mode [ 67.162847][ T6779] veth1_vlan: entered promiscuous mode [ 67.186973][ T6779] veth0_macvtap: entered promiscuous mode [ 67.194096][ T6779] veth1_macvtap: entered promiscuous mode [ 67.206723][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.214724][ T6779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.232787][ T42] audit: type=1400 audit(1792985827.000:571): avc: denied { write } for pid=6937 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.244280][ T42] audit: type=1400 audit(1792985827.010:572): avc: denied { read } for pid=6864 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.277661][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.277940][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.277960][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.277977][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.301330][ T227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.301342][ T227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.315847][ T42] audit: type=1400 audit(1792985827.080:573): avc: denied { write } for pid=6945 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.337183][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.337197][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.362471][ T5497] 8021q: adding VLAN 0 to HW filter on device eth9 [ 67.397227][ T42] audit: type=1400 audit(1792985827.160:574): avc: denied { write } for pid=6950 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.450103][ T42] audit: type=1400 audit(1792985827.220:575): avc: denied { write } for pid=6957 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.741074][ T42] audit: type=1400 audit(1792985827.510:576): avc: denied { append } for pid=6987 comm="syz.0.211" name="cachefiles" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 67.789763][ T6993] netlink: 'syz.0.212': attribute type 1 has an invalid length. [ 67.810644][ T6993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.835140][ T6993] macvlan2: entered promiscuous mode [ 67.835153][ T6993] macvlan2: entered allmulticast mode [ 67.835666][ T6993] bond1: entered promiscuous mode [ 67.836135][ T6993] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.844093][ T6993] bond1: left promiscuous mode [ 68.049444][ T6057] usb 8-1: USB disconnect, device number 3 [ 68.178734][ T7016] A link change request failed with some changes committed already. Interface dvmr^0 may have been left with an inconsistent configuration, please check. [ 68.183216][ T7016] tap0: tun_chr_ioctl cmd 1074025677 [ 68.183259][ T7016] tap0: linktype set to 1 [ 68.197985][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.344437][ T42] audit: type=1400 audit(1792985828.110:577): avc: denied { mount } for pid=7021 comm="syz.4.218" name="/" dev="ramfs" ino=17921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 68.548248][ T34] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 68.678833][ T34] usb 10-1: device descriptor read/64, error -71 [ 68.857548][ T2351] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 68.917540][ T34] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 68.927254][ T42] audit: type=1400 audit(1792985828.690:578): avc: denied { create } for pid=7039 comm="syz.4.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.948364][ T67] Bluetooth: hci0: command tx timeout [ 69.017555][ T2351] usb 8-1: Using ep0 maxpacket: 8 [ 69.018107][ T2351] usb 8-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 69.019853][ T2351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.019886][ T2351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.023075][ T2351] usb 8-1: config 0 descriptor?? [ 69.048828][ T34] usb 10-1: device descriptor read/64, error -71 [ 69.066691][ T7053] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.125513][ T7048] device-mapper: table: 248:0: crypt: Error allocating crypto tfm (-EINVAL) [ 69.125528][ T7048] device-mapper: ioctl: error adding target to table [ 69.158111][ T34] usb usb10-port1: attempt power cycle [ 69.192487][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.229503][ T2351] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 69.346819][ T7068] netlink: 'syz.0.233': attribute type 2 has an invalid length. [ 69.346838][ T7068] netlink: 244 bytes leftover after parsing attributes in process `syz.0.233'. [ 69.438592][ T5873] usb 8-1: USB disconnect, device number 4 [ 69.508514][ T34] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 69.525345][ T7078] syz.4.235 uses obsolete (PF_INET,SOCK_PACKET) [ 69.528145][ T34] usb 10-1: device descriptor read/8, error -71 [ 69.617046][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.238'. [ 69.633184][ T7084] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.633437][ T7084] block device autoloading is deprecated and will be removed. [ 69.637380][ T7084] netlink: 14 bytes leftover after parsing attributes in process `syz.4.238'. [ 69.767480][ T34] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 69.788210][ T34] usb 10-1: device descriptor read/8, error -71 [ 69.898098][ T34] usb usb10-port1: unable to enumerate USB device [ 70.066672][ T67] Bluetooth: hci1: Malformed Event: 0x2f [ 70.085989][ T7113] set match dimension is over the limit! [ 70.121613][ T6057] hid (null): unknown global tag 0xc [ 70.128296][ T6057] hid-generic 0006:0090:E691.0003: unknown main item tag 0x3 [ 70.128323][ T6057] hid-generic 0006:0090:E691.0003: unknown main item tag 0x3 [ 70.128335][ T6057] hid-generic 0006:0090:E691.0003: unknown global tag 0xc [ 70.128343][ T6057] hid-generic 0006:0090:E691.0003: item 0 4 1 12 parsing failed [ 70.128685][ T6057] hid-generic 0006:0090:E691.0003: probe with driver hid-generic failed with error -22 [ 70.535432][ T7138] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 70.605278][ T7142] netlink: 80 bytes leftover after parsing attributes in process `syz.4.252'. [ 70.630913][ T7145] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 70.642352][ T7144] ip6t_frag: unknown flags 6 [ 70.642570][ T7144] ip6t_frag: unknown flags 6 [ 70.642724][ T7144] ip6t_frag: unknown flags 6 [ 70.642850][ T7144] ip6t_frag: unknown flags 6 [ 70.642983][ T7144] ip6t_frag: unknown flags 6 [ 70.643245][ T7144] ip6t_frag: unknown flags 6 [ 70.643344][ T7144] ip6t_frag: unknown flags 6 [ 70.643482][ T7144] ip6t_frag: unknown flags 6 [ 70.643615][ T7144] ip6t_frag: unknown flags 6 [ 70.643771][ T7144] ip6t_frag: unknown flags 6 [ 70.902754][ T7161] netlink: 'syz.3.257': attribute type 2 has an invalid length. [ 71.037540][ T67] Bluetooth: hci0: command tx timeout [ 71.312031][ T7171] kvm_intel: kvm [7170]: vcpu0, guest rIP: 0x9120 Unhandled WRMSR(0x1d9) = 0x3 [ 71.438346][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.438395][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.579361][ T7196] netlink: 52 bytes leftover after parsing attributes in process `syz.0.268'. [ 71.648524][ T7204] Cannot find set identified by id 0 to match [ 71.674557][ T7209] fuse: Unknown parameter 'Åàr' [ 71.721384][ T7211] tmpfs: User quota inode hardlimit too large. [ 71.839649][ T67] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 72.010585][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'. [ 72.102326][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 72.102338][ T42] audit: type=1400 audit(1792985831.870:611): avc: denied { create } for pid=7237 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 72.105432][ T42] audit: type=1400 audit(1792985831.870:612): avc: denied { sys_admin } for pid=7237 comm="syz.4.280" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 72.240439][ T42] audit: type=1400 audit(1792985832.010:613): avc: denied { create } for pid=7270 comm="syz.3.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.316610][ T42] audit: type=1400 audit(1792985832.080:614): avc: denied { connect } for pid=7285 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.379160][ T42] audit: type=1400 audit(1792985832.150:615): avc: denied { ioctl } for pid=7301 comm="syz.3.285" path="socket:[18664]" dev="sockfs" ino=18664 ioctlcmd=0xc0709411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 72.384691][ T42] audit: type=1400 audit(1792985832.150:616): avc: denied { setopt } for pid=7301 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 72.567946][ T42] audit: type=1400 audit(1792985832.330:617): avc: denied { write } for pid=7333 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.624306][ T7337] jffs2: notice: (7337) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 72.639459][ T42] audit: type=1400 audit(1792985832.410:618): avc: denied { setattr } for pid=7336 comm="syz.4.291" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.684473][ T7337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7337 comm=syz.4.291 [ 72.687205][ T7337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7337 comm=syz.4.291 [ 72.753708][ T7344] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.768823][ T7343] [ 72.769634][ T7343] ============================================ [ 72.769663][ T7345] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.773469][ T7343] WARNING: possible recursive locking detected [ 72.775409][ T7343] syzkaller #0 Tainted: G L [ 72.777474][ T7343] -------------------------------------------- [ 72.779367][ T7343] syz.4.292/7343 is trying to acquire lock: [ 72.781227][ T7343] ffff88802a5e4ce8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0xd12/0x11d0 [ 72.784468][ T7343] [ 72.784468][ T7343] but task is already holding lock: [ 72.786681][ T7343] ffff88802a5e4ce8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0xc5e/0x11d0 [ 72.789855][ T7343] [ 72.789855][ T7343] other info that might help us debug this: [ 72.792298][ T7343] Possible unsafe locking scenario: [ 72.792298][ T7343] [ 72.794550][ T7343] CPU0 [ 72.795597][ T7343] ---- [ 72.796643][ T7343] lock(&sb->s_type->i_mutex_key#9); [ 72.798303][ T7343] lock(&sb->s_type->i_mutex_key#9); [ 72.799975][ T7343] [ 72.799975][ T7343] *** DEADLOCK *** [ 72.799975][ T7343] [ 72.802462][ T7343] May be due to missing lock nesting notation [ 72.802462][ T7343] [ 72.804979][ T7343] locks held by syz.4.292/7343: 1, last CPU#2: [ 72.806795][ T7343] #0: ffff88802a5e4ce8 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: blkdev_write_iter+0xc5e/0x11d0 [ 72.810100][ T7343] [ 72.810100][ T7343] stack backtrace: [ 72.811959][ T7343] CPU: 2 UID: 0 PID: 7343 Comm: syz.4.292 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.815252][ T7343] Tainted: [L]=SOFTLOCKUP [ 72.816618][ T7343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.819718][ T7343] Call Trace: [ 72.820811][ T7343] [ 72.821751][ T7343] dump_stack_lvl+0x100/0x190 [ 72.823257][ T7343] print_deadlock_bug.cold+0xbd/0xca [ 72.824980][ T7343] __lock_acquire+0x13f4/0x1f40 [ 72.826488][ T7343] lock_acquire+0x1d1/0x380 [ 72.827893][ T7343] ? blkdev_write_iter+0xd12/0x11d0 [ 72.829479][ T7343] ? __pfx___might_resched+0x10/0x10 [ 72.831105][ T7343] down_read+0x94/0x4c0 [ 72.832499][ T7343] ? blkdev_write_iter+0xd12/0x11d0 [ 72.834202][ T7343] ? __pfx_down_read+0x10/0x10 [ 72.835707][ T7343] ? filemap_check_errors+0xa9/0x150 [ 72.837396][ T7343] blkdev_write_iter+0xd12/0x11d0 [ 72.838978][ T7343] vfs_write+0x6af/0x1050 [ 72.840366][ T7343] ? __pfx_blkdev_write_iter+0x10/0x10 [ 72.842099][ T7343] ? __pfx_vfs_write+0x10/0x10 [ 72.843601][ T7343] ? find_held_lock+0x2b/0x80 [ 72.845091][ T7343] ksys_write+0x12a/0x250 [ 72.846457][ T7343] ? __pfx_ksys_write+0x10/0x10 [ 72.848007][ T7343] do_syscall_64+0x123/0x790 [ 72.849469][ T7343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.851346][ T7343] RIP: 0033:0x7f19b379f559 [ 72.852769][ T7343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.859951][ T7343] RSP: 002b:00007f19b465d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.863345][ T7343] RAX: ffffffffffffffda RBX: 00007f19b3a25fa0 RCX: 00007f19b379f559 [ 72.866183][ T7343] RDX: 00000000fffffe38 RSI: 0000200000000c40 RDI: 0000000000000007 [ 72.868674][ T7343] RBP: 00007f19b3836b20 R08: 0000000000000000 R09: 0000000000000000 [ 72.871513][ T7343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.874954][ T7343] R13: 00007f19b3a26038 R14: 00007f19b3a25fa0 R15: 00007ffec07ab768 [ 72.877411][ T7343] [ 72.881663][ T1134] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 72.882524][ T1134] ata1.00: configured for UDMA/100 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 72.996133][ T6139] syz_tun (unregistering): left allmulticast mode [ 73.258729][ T42] audit: type=1400 audit(1792985833.020:619): avc: denied { read } for pid=5497 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 73.279162][ T42] audit: type=1400 audit(1792985833.050:620): avc: denied { write } for pid=7349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.325037][ T5596] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.381751][ T5596] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.421525][ T5596] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.488280][ T5596] bridge_slave_1: left allmulticast mode [ 73.488308][ T5596] bridge_slave_1: left promiscuous mode [ 73.488427][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.490878][ T5596] bridge_slave_0: left allmulticast mode [ 73.490895][ T5596] bridge_slave_0: left promiscuous mode [ 73.490991][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.545679][ T5596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.546515][ T5596] bond0 (unregistering): Released all slaves [ 73.548377][ T5596] bond1 (unregistering): Released all slaves [ 73.550768][ T5596] bond2 (unregistering): Released all slaves [ 73.553160][ T5596] bond3 (unregistering): Released all slaves [ 73.555762][ T5596] bond4 (unregistering): Released all slaves [ 73.559055][ T5596] bond5 (unregistering): Released all slaves [ 73.562467][ T5596] bond6 (unregistering): Released all slaves [ 73.566026][ T5596] bond7 (unregistering): Released all slaves [ 73.569444][ T5596] bond8 (unregistering): Released all slaves [ 73.574406][ T5596] bond9 (unregistering): Released all slaves [ 73.579360][ T5596] bond10 (unregistering): Released all slaves [ 73.582788][ T5596] bond11 (unregistering): Released all slaves [ 73.586866][ T5596] bond12 (unregistering): Released all slaves [ 73.591733][ T5596] bond13 (unregistering): Released all slaves [ 73.595574][ T5596] bond14 (unregistering): Released all slaves [ 73.603308][ T5596] bond15 (unregistering): Released all slaves [ 73.606630][ T5596] bond16 (unregistering): Released all slaves [ 73.610194][ T5596] bond17 (unregistering): Released all slaves [ 73.613461][ T5596] bond18 (unregistering): Released all slaves [ 73.616656][ T5596] bond19 (unregistering): Released all slaves [ 73.625402][ T5596] bond20 (unregistering): Released all slaves [ 73.631937][ T5596] bond21 (unregistering): Released all slaves [ 73.635482][ T5596] bond22 (unregistering): Released all slaves [ 73.640227][ T5596] bond23 (unregistering): Released all slaves [ 73.643564][ T5596] bond24 (unregistering): Released all slaves [ 73.647035][ T5596] bond25 (unregistering): Released all slaves [ 73.654569][ T5596] bond26 (unregistering): Released all slaves [ 73.661680][ T5596] bond27 (unregistering): Released all slaves [ 73.665136][ T5596] bond28 (unregistering): Released all slaves [ 73.668625][ T5596] bond29 (unregistering): Released all slaves [ 73.672181][ T5596] bond30 (unregistering): Released all slaves [ 73.681654][ T5596] bond31 (unregistering): Released all slaves [ 73.685192][ T5596] bond32 (unregistering): Released all slaves [ 73.688578][ T5596] bond33 (unregistering): Released all slaves [ 73.691838][ T5596] bond34 (unregistering): Released all slaves [ 73.695089][ T5596] bond35 (unregistering): Released all slaves [ 73.709650][ T5596] bond36 (unregistering): Released all slaves [ 73.711671][ T5596] bond37 (unregistering): Released all slaves [ 73.713538][ T5596] bond38 (unregistering): Released all slaves [ 73.715410][ T5596] bond39 (unregistering): Released all slaves [ 73.717255][ T5596] bond40 (unregistering): Released all slaves [ 73.719143][ T5596] bond41 (unregistering): Released all slaves [ 73.721388][ T5596] bond42 (unregistering): Released all slaves [ 73.723220][ T5596] bond43 (unregistering): Released all slaves [ 73.725075][ T5596] bond44 (unregistering): Released all slaves [ 73.726967][ T5596] bond45 (unregistering): Released all slaves [ 73.729283][ T5596] bond46 (unregistering): Released all slaves [ 73.731900][ T5596] bond47 (unregistering): Released all slaves [ 73.733920][ T5596] bond48 (unregistering): Released all slaves [ 73.735763][ T5596] bond49 (unregistering): Released all slaves [ 73.737683][ T5596] bond50 (unregistering): Released all slaves [ 73.739545][ T5596] bond51 (unregistering): Released all slaves [ 73.741355][ T5596] bond52 (unregistering): Released all slaves [ 73.743490][ T5596] bond53 (unregistering): Released all slaves [ 73.746402][ T5596] bond54 (unregistering): Released all slaves [ 73.749530][ T5596] bond55 (unregistering): Released all slaves [ 73.752116][ T5596] bond56 (unregistering): Released all slaves [ 73.753927][ T5596] bond57 (unregistering): Released all slaves [ 73.755797][ T5596] bond58 (unregistering): Released all slaves [ 73.757664][ T5596] bond59 (unregistering): Released all slaves [ 73.759569][ T5596] bond60 (unregistering): Released all slaves [ 73.762070][ T5596] bond61 (unregistering): Released all slaves [ 73.764571][ T5596] bond62 (unregistering): Released all slaves [ 73.767049][ T5596] bond63 (unregistering): Released all slaves [ 73.769932][ T5596] bond64 (unregistering): Released all slaves [ 73.772428][ T5596] bond65 (unregistering): Released all slaves [ 73.796086][ T5497] 8021q: adding VLAN 0 to HW filter on device eth11 [ 73.912200][ T5497] 8021q: adding VLAN 0 to HW filter on device eth10 [ 74.004198][ T5596] hsr_slave_0: left promiscuous mode [ 74.004664][ T5596] hsr_slave_1: left promiscuous mode [ 74.004938][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.004949][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.005309][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.005318][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.006897][ T5596] veth1_macvtap: left promiscuous mode [ 74.006913][ T5596] veth0_macvtap: left promiscuous mode [ 74.006940][ T5596] veth1_vlan: left promiscuous mode [ 74.006960][ T5596] veth0_vlan: left promiscuous mode [ 74.096705][ T5596] team0 (unregistering): Port device team_slave_1 removed [ 74.100179][ T5596] team0 (unregistering): Port device team_slave_0 removed [ 74.122773][ T5497] 8021q: adding VLAN 0 to HW filter on device eth12 [ 74.334556][ T5497] 8021q: adding VLAN 0 to HW filter on device eth13 [ 74.371931][ T5596] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.413433][ T5596] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.461482][ T5596] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.500706][ T5596] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.560159][ T5596] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.603022][ T5596] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.642929][ T5596] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.673583][ T5497] 8021q: adding VLAN 0 to HW filter on device eth14 [ 74.682367][ T5596] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.777140][ T5497] 8021q: adding VLAN 0 to HW filter on device eth15 [ 74.828418][ T5596] bridge_slave_1: left allmulticast mode [ 74.828434][ T5596] bridge_slave_1: left promiscuous mode [ 74.828502][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.829685][ T5596] bridge_slave_0: left allmulticast mode [ 74.829696][ T5596] bridge_slave_0: left promiscuous mode [ 74.829754][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.838530][ T5596] bridge_slave_1: left allmulticast mode [ 74.838542][ T5596] bridge_slave_1: left promiscuous mode [ 74.838603][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.844019][ T5596] bridge_slave_0: left allmulticast mode [ 74.844036][ T5596] bridge_slave_0: left promiscuous mode [ 74.844142][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.903697][ T5596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.904892][ T5596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.905525][ T5596] bond0 (unregistering): Released all slaves [ 74.932159][ T5596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.933031][ T5596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.933523][ T5596] bond0 (unregistering): Released all slaves [ 75.065452][ T5497] 8021q: adding VLAN 0 to HW filter on device eth16 [ 75.305122][ T5596] hsr_slave_0: left promiscuous mode [ 75.305427][ T5596] hsr_slave_1: left promiscuous mode [ 75.305633][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.305643][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.305969][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.305977][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.315334][ T5596] hsr_slave_0: left promiscuous mode [ 75.318454][ T5596] hsr_slave_1: left promiscuous mode [ 75.318765][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.318775][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.321809][ T5596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.321818][ T5596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.325806][ T5596] veth1_macvtap: left promiscuous mode [ 75.325821][ T5596] veth0_macvtap: left promiscuous mode [ 75.325848][ T5596] veth1_vlan: left promiscuous mode [ 75.325920][ T5596] veth0_vlan: left promiscuous mode [ 75.336551][ T5596] veth1_macvtap: left promiscuous mode [ 75.336566][ T5596] veth0_macvtap: left promiscuous mode [ 75.336687][ T5596] veth1_vlan: left promiscuous mode [ 75.336711][ T5596] veth0_vlan: left promiscuous mode [ 75.426448][ T5596] team0 (unregistering): Port device team_slave_1 removed [ 75.430779][ T5596] team0 (unregistering): Port device team_slave_0 removed [ 75.483977][ T5596] team0 (unregistering): Port device team_slave_1 removed [ 75.485837][ T5596] team0 (unregistering): Port device team_slave_0 removed [ 75.507124][ T5596] smc: removing net device lo with user defined pnetid SYZ2 [ 75.510727][ T5497] 8021q: adding VLAN 0 to HW filter on device eth17 [ 75.612116][ T5497] 8021q: adding VLAN 0 to HW filter on device eth18 [ 75.735159][ T5497] 8021q: adding VLAN 0 to HW filter on device eth19 [ 75.855509][ T5497] 8021q: adding VLAN 0 to HW filter on device eth20 [ 75.956865][ T5497] 8021q: adding VLAN 0 to HW filter on device eth21 [ 77.987610][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 77.987628][ T42] audit: type=1400 audit(1792985837.750:654): avc: denied { write } for pid=7480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.029658][ T42] audit: type=1400 audit(1792985837.800:655): avc: denied { write } for pid=7483 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.104343][ T42] audit: type=1400 audit(1792985837.870:656): avc: denied { write } for pid=7486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.141190][ T42] audit: type=1400 audit(1792985837.910:657): avc: denied { write } for pid=7489 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.297486][ T42] audit: type=1400 audit(1792985838.060:658): avc: denied { write } for pid=7492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.337138][ T42] audit: type=1400 audit(1792985838.100:659): avc: denied { write } for pid=7496 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.880993][ T42] audit: type=1400 audit(1792985838.650:660): avc: denied { write } for pid=7499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.910638][ T42] audit: type=1400 audit(1792985838.680:661): avc: denied { write } for pid=7502 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1