last executing test programs: 15.607177371s ago: executing program 1 (id=203): socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x101040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX], 0x40}, 0x1, 0x0, 0x0, 0x2010}, 0x8000) pread64(r0, &(0x7f00000000c0)=""/70, 0x46, 0x4) 15.516907133s ago: executing program 1 (id=206): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=@hopopts={0x3c, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @private2}, @ra={0x5, 0x2, 0x7610}]}, 0x28) (async) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000100)='\x00', 0x0, r0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000140)=0x8001, 0x4) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10) (async) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f00000001c0)={0x18, 0x5c1c8fb2097adc93, 0xe, 0x401, 0x5}) (async) open$dir(&(0x7f0000000200)='./file0\x00', 0x80, 0x91) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r2, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x16}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008890}, 0x40001) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x244, r3, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff801}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xea}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8da2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}]}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ae2fceb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc823}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @loopback, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x40}, 0x400c800) (async) syz_io_uring_setup(0x4fd5, &(0x7f0000000700)={0x0, 0xfd3e, 0x2, 0x0, 0x55, 0x0, r0}, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x74, r2, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "4f60b50e6f"}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7465d24332c9161b492dd5401d"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "129f1fb309ff5488d234dd85a2"}]}, 0x74}, 0x1, 0x0, 0x0, 0x8001}, 0x40815) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001040)={r0, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000dc0)=[0x0, 0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0], 0x0, 0xcb, &(0x7f0000000e40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000e80), &(0x7f0000000ec0), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000f00)}}, 0x10) sendmsg$inet6(r0, &(0x7f0000001440)={&(0x7f00000009c0)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000a00)="78a51a08ec12fe8cd981b4ef10554217f06cadf2aca33905646ba3118f18ac1de30695b3b328081905bd31acccf0fab13d4a9cddaf8ce4381a8ae2", 0x3b}, {&(0x7f0000000a40)="d4f30f621ae0c65f79dbd61683f6d83fadf4cd8459e5acbd02c43294121dd53674fb92c3f615bd2cfa5e6767fc0ca465bb060bfb6b05bb92baed557543c3b16a7e24458d2775cc22bf595c8ae530951e57ea437657b3c060c4068d3db76a5c9aa33e85c40f46e77ba51509884112503e613ae09d1851cb332a092a4ffaaebc1a7d1361570372684a907d7eee1691151959af59bcfaf422907acd9a43c8d0362731d8f2ce8b5a8085b6111a70d1ac9ab8eeea091e76837b9ba174", 0xba}, {&(0x7f0000000b00)="83ad02d630deb78a693a6daf8d09e33406495c8e1ecad8fdf059a49bc9abd35d527f6f81229d2e240a1e7bd8e197f9b03488d6516ebea9f5f7ddf9431f517bd9891dbfa2acd97fe0c53e7815f8df4ddeb2d81fcaa1f12d76000c5744ea68b18aaf", 0x61}, {&(0x7f0000000b80)="b9049c6b1abaa1236c54303cd24fda127eea1d1bdfb5", 0x16}, {&(0x7f0000000bc0)="4fb9def4230d16018e74fac79b0b53e07c0df5c027e0e0dd08ed392a5288a84d48d7687011", 0x25}, {&(0x7f0000000c00)="ffc4cfaeae5436d6333608c02fa93e8899a1", 0x12}, {&(0x7f0000000c40)="812f195e79d8a2c75ead1a8efc4e8b69df4abac453d860d7081e54aa07d1000e0e0ad89af253e8d548e270cba2e9d0353f4f2cd5500b324548c7518cfbcedfe253b99397bd7d7a4961c68fcbb293a900f9fb2f6a012dc3a0", 0x58}, {&(0x7f0000000cc0)="b0089af28143e2b6d5844d82e6c1208bd285", 0x12}], 0x8, &(0x7f0000001080)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @loopback}, r5}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x21, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5c9}}, @hopopts_2292={{0x188, 0x29, 0x36, {0x2f, 0x2d, '\x00', [@hao={0xc9, 0x10, @remote}, @generic={0x4, 0xf7, "42cbebfbf7f6847fd1ce07bd5529e38066aae41dbe534b2a51a9547f436d6b5eb05e7bfbd3ef4022cdff8acb637f63cbce40b0bea1749758a97b6cb019686a4553def7a3a5d04c8fb7d09c52df97815a867c078365b816fa02091d24cd9f2f071689ca562d64e2d17d9d22ce6767627f22e9062d3326e72356aa30f946dc6a8cbb67cde8864c159c42b65b8868c21cd8cfceb9ab9ba62de4045edc2a03267f64afeade1dca556ab37b033c12c060a4ec16639c3f707947cd797edf545fe351de3bba3d72d01cd272dc27b537aa901ccef2e00bca4fdade30bad46bf9b878631e3cd10b7c7f339e42aac99214cd9543c92aee999e4f251a"}, @jumbo={0xc2, 0x4, 0x7}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0x4a, "bcae9496d53e81882ccba13c69b6a07977aec84bdda7a5bc09846987ca98d32bef8f216a7722bb4910887e459cc51db723da57ceb6cb30ed7bb93bc778a5110373641c8f1d6d99a718a3"}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3ba}}, @dstopts={{0x28, 0x29, 0x37, {0x87, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x3b, 0xe, 0x2, 0xc, 0x0, [@mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @mcast2, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @local]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @dstopts={{0x58, 0x29, 0x37, {0x2c, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0xa}, @ra={0x5, 0x2, 0x7}, @pad1, @calipso={0x7, 0x30, {0x0, 0xa, 0x2, 0x101, [0x8, 0x40, 0x3, 0xe, 0xca]}}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x33, 0xa, 0x1, 0x10, 0x0, [@remote, @loopback, @local, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0x388}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x19, 0x5, 0x5a, 0x7, 0x20090, r0, 0xffff, '\x00', r5, r0, 0x2, 0x1, 0x2}, 0x50) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000001500)={0x42, 0x0, 0x3}, 0x10) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001540)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x2, '\x00', r5, r0, 0x2, 0x5, 0x3}, 0x50) ioctl$XFS_IOC_SCRUBV_METADATA(r8, 0xc0285840, &(0x7f0000001600)={0x4, 0x1, 0x116, 0x0, 0x6, 0x4, 0x0, &(0x7f00000015c0)=[{0x1c, 0x1ff, 0x2}, {0x1a, 0xfe, 0x8}, {0x5, 0x10f8e3e585e4fdca, 0x2}, {0x10, 0x101, 0x10001}]}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001640)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmsg$inet6(r9, &(0x7f0000001a40)={&(0x7f0000001680)={0xa, 0x4e20, 0x2, @loopback, 0x1}, 0x1c, &(0x7f0000001880)=[{&(0x7f00000016c0)="47ca261d12066764467383716cfba09e864cebe6439afe9654733998ce4b391056b26f41aafea27428ec18cbaa78895911904d3177dc35787e1e5d0dd9d6eadba93f0204f48e38eaaa6ddc95b59668ac071c036efe0ddecb9907ff4baf6ebd6cc8b13597424db929282968641c9f68005d4fa48bd3b3a0adb5696cd8b53323e6476afefbcb7e9e3f32e9f9e9b2e9b82e9ad94c2c649b1cf1cdd30f9b7a22d1bb802d45fbaf395836405d9d218100d9ea", 0xb0}, {&(0x7f0000001780)="baa60575a2a3c553cd080ac8916f2de0645296ba09ff866059", 0x19}, {&(0x7f00000017c0)="3d2b569a6a555fe0daa16a57dc690e312915baa74b63dc894aa1c2fc40da9edb10b8d30b47b3dfad41753d4cf577ae94370936d5f72f5012e6c8ec4454dba8bc4f57568a5c923c6951bff52b8ca53444116ea4caa5fc60f3dd05fdd1bedc0787d385afd28ac74587edf3a4f9246d9cb0ad309d257f702cf504b33d85af51678ec69957e5fbace0", 0x87}], 0x3, &(0x7f00000018c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x7}}, @rthdr={{0x98, 0x29, 0x39, {0x29, 0x10, 0x3, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0xb}, @empty, @rand_addr=' \x01\x00', @local, @empty, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x3c}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x8, 0x4, 0x1, 0xf, 0x0, [@private1, @mcast2]}}}, @tclass={{0x14, 0x29, 0x43, 0xff}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r5}}}, @rthdr={{0x18, 0x29, 0x39, {0x32, 0x0, 0x0, 0xff}}}, @flowinfo={{0x14, 0x29, 0xb, 0x86f}}], 0x158}, 0x20000000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001a80)=0x1, 0x4) (async) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000001ac0)=0x3, 0x4) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000001b00)={0x8, 0x1, 0x5}) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r10, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x3c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd7d74ed0c484250e}, 0x1) 15.44864956s ago: executing program 1 (id=208): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r0 = socket$unix(0x1, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) execve(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) (async) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x151) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x21c, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x4}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) r4 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) fcntl$setlease(r2, 0x400, 0x0) (async) close(r4) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) (async) r7 = getgid() write$FUSE_CREATE_OPEN(r6, &(0x7f00000003c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x4, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x170b, 0xfffffffe, 0x8000, 0x40002, 0x0, r7, 0x3ff, 0x1}}, {0x0, 0x7}}}, 0xa0) open$dir(&(0x7f0000000040)='./file0/file1\x00', 0x20482, 0x20) (async) getsockopt$packet_buf(r5, 0x107, 0x6, 0x0, &(0x7f0000000000)) (async) socket$unix(0x1, 0x5, 0x0) 15.397695778s ago: executing program 1 (id=209): r0 = fanotify_init(0x0, 0x101000) fanotify_mark(r0, 0x39, 0x1a, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0xde) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000740)="0067c05b0cd6540fd6e9f50a5cb95d97bd64ffa8cf8017d1a25bd57d2275ffde7c70ffcdaa10dde2e78bc197e953153aa1e1c64615dd1985afba1cdfad366e67d5707861f523cd0cf72dd6255256aeb2541639314c626ccd0bcb56dad4c38c1762f89f0c6cc1686ebf4014c51c79ae521af49c64a007187b7b9e5a921072ae55a89b5869be3072125e62c084de1f93952f374d144068295d951492fd0c266d7ced024345ff4d839746599f785db7722dccb0ae422bfe8f291b1bab5fa8e1315d45758d97a29012fca1942e4954532b26ecf24c6e3ac6fa504dab8073942458893e3382c2cbb0d2174e84", 0xea, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYRES16, @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) open(&(0x7f0000000240)='./file0/../file0\x00', 0x200000, 0x96) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="0100"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$EVIOCGKEYCODE_V2(r9, 0x80284504, &(0x7f0000000080)=""/150) r10 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000002f000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000007ea7a22539ca947f38000000000000000000000700005ecc00000000000000000000008000"/146]}, 0x10a) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000fafffffffbdbdf250b00000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0xd5, &(0x7f0000000940)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0004aa006423bb897300038084048e0393857be67e4c1571f0551687e59ac630167c612695b3d332d288b5c46f0887b0c0750957f0d80c934742420f3c9028b283d5c4554303613d2ac189a03e44ec70d8b27ec526a72cb935088f2a7d44578da4b616b76200b1ce485740f6c0a5b47a8b7dc15f0daafaa37fce2335566d08000000b40257af388393b71faf30da8e3da3a6f2eae7a673def653beb103dbb50090315391d56392992d1857bbd65ff50cc70175cd9dd27ac405daed2df776268601a933266203a1134a86d636455b1f24fe272ee3b407c069d459fe004bdaf87b911895c4fa6cde9ec2ac5c7641e66d21070500000000000000aec8c36181d8800d1c3f82de48c8d0c84c38e80ebf4cabc1c0d6330e1e4dba10a7fcbb2a5c415e9d49e5eb4e521c2c35ae38b9d8361dc9bece3c118288d167"], 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0/file0\x00'}) mkdir(&(0x7f0000000100)='./file0\x00', 0x11c) 14.848194239s ago: executing program 2 (id=216): r0 = userfaultfd(0x801) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x110}) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000140), 0x400000000000140, 0x24008050) close(r2) lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@v2={0x3, 0x3, 0x7, 0x7}, 0x9, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000000)={0x8}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="78000000020601080000000000000000000000400e0003006269746d61703a697000000011000300686173683a69702c706f7274000000000500050002000000050005000500e30080000005000100000013000300686173683a6e65742c00000900020073797a3100000000050001000700000000000002"], 0x78}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000240)="3f000000010000", 0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$binderfs(&(0x7f0000000200), &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000300), 0x2000000, &(0x7f0000000400)=ANY=[@ANYBLOB='max=00000000000000000000003,mask=MAY_WRITE,smackfshat=security.evm\x00,uid=', @ANYRESDEC=r8, @ANYBLOB='\x00'/10]) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 14.840274713s ago: executing program 2 (id=217): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)={0x28c, r0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2b}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x575}, @NL80211_ATTR_VENDOR_DATA={0xaa, 0xc5, "c97f560b9b3263bed98251b66c1ef42f1eda8c31aeb611aa1facdf3080813b9b77deddee3725713e954287d5cb8f14c33bd8bdbbfa9dc4f5243ae8ee5898aa0353ce811e9470e5ffb238108610650edf75185d4f8a1596aaa0714ee3aacaeeb1ea00bf99e8481e5ba71720d1db34e0cccf31f806ad6d6ec866851b89cc7af23b31f310d906212abb7cc0f6ecd0556a9300a9a570f1ef1904995edeab601d14f1999291e25b9c"}, @NL80211_ATTR_VENDOR_DATA={0x94, 0xc5, "8a6f3bfbf5181eb48d46edc492e89c18fe873dc4e274af9d72793b9948f2344be092baa076bb83125fbb293183e15bb3894204904fed8f65be7149d38fc8a34e6368258862deecc9192227e9488abe249ae3e504d559fc03e26db8cd1ff5c9f9ca2973bed4c531c907f205a55ff664c0f9962ec70279dbfe1a8edee8e698015fdf867528e35477110222694d06e9d183"}, @NL80211_ATTR_VENDOR_DATA={0x80, 0xc5, "8ba03edfffe5db7e83bc14dcbecfa3a35438569ffce4a4387fa3101d0861c0fab887578ddad65954f9b4df68afbb87f6f3590a645145ebeca12aaa5c4b5b1a82a4b52facbe82288078bc919c9bfc16f1b6d64123068c906fc68507b844207d785017983a22fac0e93f44201df254214ea391f793be8f6a16f12a2ff8"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xf}, @NL80211_ATTR_VENDOR_DATA={0x90, 0xc5, "b317c7168e2a1340c4e6241a24e3667876cb06df2722c91794249ddf2d3076c9e50f604121f5f8e8d48f767b376e0d19d243d7ef8542a02cdb57b1702f3c667ea7cfbcc1379ee58435728e6b2c7e60eee2947c494306ec9957bfe29d4f0a92f4a18f3d6d961951b4ca7a9919952d305a377b8ebc7ec3756fd8cec35d82c8a1ea31231eba254e0d3735483b11"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}]}, 0x28c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0x1, 0xfffffffe, 0x212a1, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x7}, 0x50) pread64(r4, &(0x7f0000000180)=""/159, 0x9f, 0xfffffffffffffffe) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580)="06", 0x2000cc0, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/30, &(0x7f0000000280), &(0x7f00000005c0), 0x1, r5}, 0x38) r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x44, r7, 0x1, 0x70bd24, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x44}}, 0x4004810) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x804) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r10, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB='5'], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r8) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2f) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)={0xfffffffffffffe3c, r12, 0x100, 0x70bd32, 0xfff7fffb, {0x1e}}, 0x54}, 0x1, 0x0, 0x0, 0x4004081}, 0x44001) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000000c0)={0xf0f044, 0x7ff}) 14.687553981s ago: executing program 0 (id=218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async, rerun: 64) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0xc}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x7, 0x4, 0x2, 0x8, 0x6, 0x6, 0x1, 0x7, 0x4, 0x10, 0x4], 0x3, [0x2, 0x5, 0x7fff, 0x56, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x3, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x1, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@gettaction={0x9c, 0x32, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf4}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffbffd}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="140a0000160001877638494375a80324bd7000fcbcc622e8eda42b2ef24a653cfd3d3d43a05b2b07127920433ebf52ed57e6f4916b5ae8c2ef156e97a29ee8dc9ab5b13761"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x90) (async) r9 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) ioctl$BLKCRYPTOPREPAREKEY(0xffffffffffffffff, 0xc040128b, &(0x7f0000000100)={&(0x7f0000000000)="247c1546d5160b578a2b620434cd458216748980470da8fea13f293c3a86daf2792e8bc170288628f5976aa152768eee780ba178bfcc20013e1f28c5915a3c30dc1b8d1f27", 0x45, &(0x7f0000000080)=""/87, 0x57}) (rerun: 32) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb910021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000040012000a00ff150048035c3b61c1d67f6f94007134cf6efb80073f6a5aa8457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001252c330f973f4953d2a6823a45", 0xd8}], 0x1}, 0x4000044) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async, rerun: 32) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000017c0088dd76e2800c0001"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async) r12 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x204000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r12, 0xc0184800, &(0x7f0000000140)={0x9, r9, 0x80000}) close_range(r11, r11, 0x2) bind$alg(r9, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) 14.685967058s ago: executing program 2 (id=219): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/vendor\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/100, 0x64) (async) read(r0, &(0x7f0000000500)=""/100, 0x64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_sys/bus/pci/devices/0000:00:01.0/device\x00', 0x0, 0x0) read(r1, &(0x7f0000000700)=""/100, 0x64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="100000000400000004000002010000000000000023ad75bf6d92615ceaa996824a745555a4a3ad7405981c3d979512c8b0385e96cb9889e4923d632f4b5b59c80ef85bdcff56a8e3471468a7ad108467d2abed6b0f1affe4f331f96d4f7a35e6d2da8b2db0c9dba730e175e322a067be3644d0542563aba76ae3c190b06b7678ec56f41e659edf10f11be2f94c672fc9d96352d1abe0b29be825e3124a68800d64bd1f62f25f29ac74a3dd0106c996fa63c4f3c1389d47aea9696428ba4ea094d431ddfe2207258e206ce9b8201055a8679b272084609b47b6", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, &(0x7f0000000ac0)="f7", &(0x7f0000000080)=""/71}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, &(0x7f0000000ac0)="f7", &(0x7f0000000080)=""/71}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./my_sys/bus/pci/drivers/dwc3-pci/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000900)='8086 7000\x00', 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) (async) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000000140)='\')\x00', 0x3) (async) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000000140)='\')\x00', 0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x14, 0x1, 0x800001, 0x0, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x144}]}]}, 0x1c}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x64848}, [@IFLA_WEIGHT={0x8, 0xf, 0x9bb}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}]}, 0x3c}}, 0x840) 14.627725622s ago: executing program 2 (id=220): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) 14.625360513s ago: executing program 0 (id=222): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x81, 0x4, 0x60001000, 0x1, 0x1fd, 0x7db, 0x25}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r1, 0x8949, &(0x7f0000000000)) mmap(&(0x7f0000002000/0x7000)=nil, 0x7000, 0x200000d, 0x11, r0, 0x100000000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4b000) setns(0xc9, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x0, &(0x7f00000004c0)=""/201) capset(&(0x7f0000001b00)={0x20071026, r3}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xce8d28bf250267dd}, 0x0) 682.547531ms ago: executing program 3 (id=224): prctl$PR_SET_UNALIGN(0x6, 0x2) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x5) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f00000001c0)=0x1, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffd, @empty}, 0x1c) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0xfff2, 0x800, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x4d0, 0x0, 0x2}]}) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYBLOB="66696c7c5772004000002f5c70fa9c5cc011bf11560b00000014494f10c61cb1b4dd42536e1d60"], &(0x7f0000000180)=0x2c) (async) r6 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r6, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) (async) cachestat(r6, &(0x7f0000000100)={0x8005, 0x6d4}, &(0x7f0000000080), 0x0) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$clear(0x7, r7) (async) tkill(0x0, 0x40000024) (async) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) splice(r9, 0x0, r10, 0x0, 0x4ffe6, 0x0) (async) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x0, 0xa95a, 0x0, 0x0, r9}]) (async) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x18, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x49, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}, 0x0) 682.199816ms ago: executing program 3 (id=225): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) setns(0xc9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x24}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="49aa259e0312df8ac7f7a8", 0xb}, {&(0x7f0000000c00)="ebe3a0e9796cf91647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfeb55b5bb9fa6935849e6098ed880500000000000000b37b4fe035bbb0958730487e49f48456d3fa99da6e0509aecc95aa0812ac33246a8be0ce726af2c958d59e8aa97c70151375a467", 0x75}], 0x2, 0x0, 0x0, 0x40001}], 0x1, 0x40810) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/85, 0x55}, {&(0x7f0000000400)=""/81, 0x8e}], 0x2}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) accept4(r1, 0x0, 0x0, 0x800) (async) setns(0xc9, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x24}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="49aa259e0312df8ac7f7a8", 0xb}, {&(0x7f0000000c00)="ebe3a0e9796cf91647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfeb55b5bb9fa6935849e6098ed880500000000000000b37b4fe035bbb0958730487e49f48456d3fa99da6e0509aecc95aa0812ac33246a8be0ce726af2c958d59e8aa97c70151375a467", 0x75}], 0x2, 0x0, 0x0, 0x40001}], 0x1, 0x40810) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/85, 0x55}, {&(0x7f0000000400)=""/81, 0x8e}], 0x2}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) 680.617281ms ago: executing program 0 (id=226): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, {&(0x7f0000000040)=""/112, 0x70}, &(0x7f0000000100), 0x4c}, 0xa0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x21, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) (async) r1 = open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9fe}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file3\x00') (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x0, 0x9, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 677.893771ms ago: executing program 2 (id=227): r0 = socket$inet(0x2, 0x1, 0x100) listen(r0, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000280)={0x7, "86332264c387c289ad22ee4f9fd8afcd6837c5b16a939593cedb08c0c565adda", 0x1, 0x4, 0x483, 0x0, 0x8, 0x1, 0x4, 0x7}) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@tipc=@name, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/190, 0xbe}], 0x1}, 0x40010000) r3 = io_uring_setup(0x5013, &(0x7f0000000140)={0x0, 0xfffffffc, 0x3681, 0x0, 0x273}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x804) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB='5'], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) io_uring_enter(r3, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400090000bd7000fcdbdb25021f00ff", @ANYRES32, @ANYBLOB="14000600ff0f000010000000d1010000000000000800080030000000080002000a01"], 0x54}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 677.594744ms ago: executing program 3 (id=228): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r0}) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000200)={0xc, r0}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000fc0)={0x48}) 676.741958ms ago: executing program 3 (id=229): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x70bd28, 0x4, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24044890) (async) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000440)={"0e20da00", 0x0, 0x6, 0x2, 0x0, 0x1, "f70000000000000000deffffff00", '\x00\x00\a\x00', "0300", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0cdd42000000000000c20d00"]}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) (async) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000080)={0x4, 0x86, 0xe, 0x800052d, 0x80000001, 0xfffffff9, "6bf59546e4b36fb5f6f45ceb55b2fcc4", 0x1, 0x6, 0x1, 0xfd, 0x2, 0x7f, 0x80}) (async) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) 675.935426ms ago: executing program 0 (id=230): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) 108.711902ms ago: executing program 0 (id=231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) syz_emit_ethernet(0xac, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void}, {@mpls_mc={0x8848, {[{0x1, 0x0, 0x1}], @ipv4=@tipc={{0x1a, 0x4, 0x0, 0x2a, 0x96, 0x66, 0x0, 0x6, 0x6, 0x0, @local, @empty, {[@generic={0xb651bb3c19d33085, 0x6, "4a8999b1"}, @lsrr={0x83, 0x1b, 0xb7, [@local, @rand_addr=0x64010100, @private=0xa010101, @rand_addr=0x64010102, @multicast2, @multicast1]}, @rr={0x7, 0x13, 0x45, [@rand_addr=0x64010100, @broadcast, @local, @empty]}, @generic={0x83, 0x10, "83231c05da0b240402863bc435bf"}, @timestamp_prespec={0x44, 0x4, 0xdc, 0x3, 0xa}, @lsrr={0x83, 0x7, 0xea, [@local]}, @ra={0x94, 0x4, 0x1}]}}, @payload_mcast={{{{{{0x2e, 0x0, 0x1, 0x0, 0x0, 0xb, 0x3, 0x2, 0x5, 0x0, 0x2, 0x9, 0x5, 0x1, 0xff01, 0x2a56, 0x3, 0x4e23, 0x4e21}, 0x1, 0x1}, 0x1, 0x2}, 0x2}}, [0x0, 0x0]}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000e0fb917b48baf5b3e404360ccd3c278193e4fb66b4ca2f165177b3ffff000092cfb2eb68299c9b8246e87898888d3208799bfa4f2fa7508b6ed3a3cbe5b18825bf5c5e67e661b0b717d700ea5dbf034a0913a06f6e862d9906ac3dedd53251df69a0a0834a288960e40b7b41209bef377b956ea3eda1e5", @ANYRES16=r4, @ANYBLOB="01072cbd7000fcdbdf250600000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='noacl']) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) 108.378032ms ago: executing program 1 (id=232): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000300)={0x28, 0x2, r1, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000002c0)}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000fc0)={0x48}) 91.123446ms ago: executing program 2 (id=233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f0000000d80)=ANY=[@ANYBLOB="68000000000000001701000002000000500000fbbc19a432ebf20eb0a0ee39d001000100000000009c92be0054aa20f9dbfeb8e59fa49c486a1a51c44c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f400000000600964e6f37374e5159e0800000078181c8d92ca49757a8357d3399e6a9b9742a7aa361144b8fe905f4fd2e1d51c5e26b769a8bd46a7fcc1c460830d4cc4a4a99c3bdbf5c3ce3ace7faf43064264b2b5bb46f36d5930e7c4c14afd8ea36fa69e198a3312ffff09879f00"/227], 0x68, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc62", 0x7d}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) (async) r2 = socket$alg(0x26, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x5, &(0x7f0000000340)=[{0x4, 0xf5, 0x9, 0x5}, {0x8001, 0x7, 0x7, 0x80000001}, {0x0, 0x5, 0xa, 0xe}, {0x8, 0x0, 0x5, 0x3}, {0x1, 0x2, 0x7, 0x10000}]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000016e707002cbd7000fbdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x20002005}, 0x40000) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000003c0)="e8700e444d32a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000001c0)="926753719c68bc1e82a40199f64e6f24c224ec9a160dbd5d1c963630458a11", 0x1f}, {&(0x7f0000000580)="4180e18a627da5b1318bc70ffd06eb7ea62978da4cf88bf7b4c044c45142fd61ab3290486c7ae88634826a168f75314978ceb3c35c162d3d210a", 0x3a}, {&(0x7f0000000940)="f5ff2ba6c599d4bd2ac85b8c46d99d5802b4c863695eaa58685b917a3b93aa729f95", 0x22}, {&(0x7f0000000980)="91d431e4690b71f0d50992ac59c62a06c6703018c19ce64fbf30f2002c972c8f1627476d77cb66ca57a282", 0x2b}, {&(0x7f00000009c0)="c8ea963566da2d60b3fcbfe48bdd607a5e4f5f16881fd926ea3142a7cdbeecd8168f5b622adea7584855b96d2a7ced09c8a5127209f961ae67ebbea597eff6debdb8ab7d5b4410b459e68fb1ef1a12737629172283ad5b2aa51ca5de52d5fdf8b17b101465042a13", 0x68}, {&(0x7f0000000a40)="8e235c53b6bec8855821617bd02a16c27da4d38e4d4d8d4f0ead9d439a79d1e1a0643a3c5dec70e3e0e84af5c606d728a208fca181a76ea9ea592d6b7bf403a41a8fd09718a3b4c4f461", 0x4a}, {&(0x7f0000000c00)="47821f5a4eaaaa5d4142670aab569a5b9edf215fcd0a5d0df6c795302ddcdcc399d9830923a584197b9626a5b0dad5e27bdde3feb4cb259f3cccd362eade6b88a6765384832b2d730495de6d7a4b1df038a75ffcdb97ec69832ac3f5ca25ef6c299b355c2c9726587b7792c03f91c9ea1fba3c8e75b8853c40d1339af41e5fa4853cf4b8548713797a45d100f58ec91c6d1fc8f9f64ba8061bcc28c94145eb1cca4e8662b68f2950f56160824a29", 0xae}], 0xa, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/80, 0x50}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000600)=""/68, 0x44}], 0x3}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x1, 0x25000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async) connect$bt_l2cap(r6, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108) (async, rerun: 64) getsockopt$inet6_buf(r8, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) (rerun: 64) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x4, 0x1, 0x3, 0x4, {0xa, 0x4e24, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xae}}}, 0x3a) (async) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r10, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) 90.405439ms ago: executing program 3 (id=234): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffedf, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000059d955cd5c8100000008004500001c000000000073907800000000ffffffff0000000000089078"], 0x0) (async, rerun: 32) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {0x6}, @addr={0x7, 0x3}}, {0xd, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0xc}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x3, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbde, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40006}, 0x4048801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x400d050}, 0x240c881c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000e1000"/20, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0x902c0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x4040011}, 0xc000) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/psched\x00') (async) r6 = getpid() syz_open_procfs(r6, &(0x7f00000000c0)='net/wireless\x00') preadv(r5, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, 0x180, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 26.232854ms ago: executing program 1 (id=235): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x800, &(0x7f00000003c0)=0x0) io_getevents(r2, 0x1, 0x1, &(0x7f0000000400)=[{}], 0x0) io_submit(r2, 0x2, &(0x7f0000000180)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x400, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x1, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f00000000c0)="a66070ed559ae7923fdc072482ce6fe5f5c6367e3342745e6e2b8e5fa9ab332358459c1f300b31a10e11c34373c2247b3a9b45c4cea9c3c1c5e2557bb328fcb0a71cea09462fbdc0ab210c15fae77715edd226eb3e3f6a", 0x57, 0x4, 0x0, 0x1, r0}]) 411.083µs ago: executing program 0 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040990a0100000001020001090219000101008032090400"], 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/ttyUSB0\x00', 0x802, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x1}}, 0x20) syz_ublk_setup_io_uring(0x6d0a, &(0x7f0000000140)={0x0, 0x594e, 0x10000, 0x1, 0x2ef, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)) close(r1) 0s ago: executing program 3 (id=237): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000ca27e3d228dfab935f01b67a2feaf20000000000000000000000000000000000000000f24228fd"], 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x14) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f00000003c0)=@svm={0x204, 0x1, 0x1080, {0xfec00000}, {"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"}}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) r6 = socket$tipc(0x1e, 0x2, 0x0) mount(&(0x7f0000000080)=@md0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='smb3\x00', 0x208001, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r7) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r8, 0x401, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f00000000c0)={0x9, @raw_data="8ff1418bc959a937387ca5d16ed0adafe8a9513a164056db534f8bcb568ad5a35b260b1db29d654acadb3455fb663fbbfc7263c1eb2ba445ebb087ffba37a02841427bc9e919941f2b8521bbae541da8e154303a0111e433c6de4b5c795340940baab0f63819c73f0dd71a8e307a98cc91692dd08c6b72b89c29e5651d69937e788207a17a1192d58353de293dbc831b2e6a2e90cddc38929c41ba04581f445e7b449d346e83ab266811ea5a9208ca5c55f43800bb52d20be08ec35b9648160fe09410a0ff02527c"}) sendmsg$tipc(r6, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x3}}, 0x10, 0x0}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r10) r11 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r11, 0xc040565f, &(0x7f00000005c0)={0x4, 0x100, 0x8, {0x22, 0x800, 0x6, 0x8e8ba9df}}) r12 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r12, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r13}, &(0x7f0000000000), &(0x7f0000000080)=r10}, 0x20) recvmsg$kcm(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/33, 0x21}], 0x4}, 0x10000) kernel console output (not intermixed with test programs): [ 38.596126][ T42] audit: type=1400 audit(1785338195.985:116): avc: denied { write } for pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.650747][ T42] audit: type=1400 audit(1785338196.035:117): avc: denied { write } for pid=5651 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.568876][ T42] audit: type=1400 audit(1785338196.955:118): avc: denied { write } for pid=5654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.615446][ T42] audit: type=1400 audit(1785338197.005:119): avc: denied { write } for pid=5657 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.887521][ T42] audit: type=1400 audit(1785338197.275:120): avc: denied { write } for pid=5660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:37325' (ED25519) to the list of known hosts. [ 42.581008][ T5669] cgroup: Unknown subsys name 'net' [ 42.756367][ T5669] cgroup: Unknown subsys name 'cpuset' [ 42.762513][ T5669] cgroup: Unknown subsys name 'rlimit' [ 42.991614][ T5724] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.753778][ T5669] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.480679][ T42] kauditd_printk_skb: 37 callbacks suppressed [ 47.480698][ T42] audit: type=1400 audit(1785338204.865:158): avc: denied { execmem } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.675326][ T42] audit: type=1400 audit(1785338205.065:159): avc: denied { create } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.688764][ T42] audit: type=1400 audit(1785338205.065:160): avc: denied { read write } for pid=5737 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.698593][ T42] audit: type=1400 audit(1785338205.065:161): avc: denied { open } for pid=5737 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.705927][ T42] audit: type=1400 audit(1785338205.075:162): avc: denied { ioctl } for pid=5737 comm="syz-executor" path="socket:[2672]" dev="sockfs" ino=2672 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.708651][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.716916][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.722797][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.723155][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.726754][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.729949][ T5748] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.734693][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.737544][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.738036][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.741342][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.742891][ T5753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.743606][ T5748] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.745472][ T5752] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.746781][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.747235][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.749696][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.755391][ T5752] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.756684][ T42] audit: type=1400 audit(1785338205.145:163): avc: denied { read } for pid=5737 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.758353][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.760462][ T5752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.770628][ T42] audit: type=1400 audit(1785338205.145:164): avc: denied { open } for pid=5737 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 47.772916][ T5752] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.774487][ T42] audit: type=1400 audit(1785338205.145:165): avc: denied { mounton } for pid=5737 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 47.790236][ T42] audit: type=1400 audit(1785338205.145:166): avc: denied { module_request } for pid=5737 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.798366][ T42] audit: type=1400 audit(1785338205.175:167): avc: denied { sys_module } for pid=5737 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.271572][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.275048][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.278216][ T5737] bridge_slave_0: entered allmulticast mode [ 48.281347][ T5737] bridge_slave_0: entered promiscuous mode [ 48.286504][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.289367][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.292153][ T5737] bridge_slave_1: entered allmulticast mode [ 48.295398][ T5737] bridge_slave_1: entered promiscuous mode [ 48.340231][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.359613][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.399193][ T5737] team0: Port device team_slave_0 added [ 48.402613][ T5737] team0: Port device team_slave_1 added [ 48.404569][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.406903][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.409283][ T5738] bridge_slave_0: entered allmulticast mode [ 48.412165][ T5738] bridge_slave_0: entered promiscuous mode [ 48.415397][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.417689][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.420132][ T5738] bridge_slave_1: entered allmulticast mode [ 48.422992][ T5738] bridge_slave_1: entered promiscuous mode [ 48.498867][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.501033][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.509375][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.524166][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.528237][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.531335][ T5744] bridge_slave_0: entered allmulticast mode [ 48.535044][ T5744] bridge_slave_0: entered promiscuous mode [ 48.544395][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.546770][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.554649][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.564865][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.568923][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.572045][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.575042][ T5744] bridge_slave_1: entered allmulticast mode [ 48.578993][ T5744] bridge_slave_1: entered promiscuous mode [ 48.604146][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.644344][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.668388][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.690282][ T5738] team0: Port device team_slave_0 added [ 48.711888][ T5737] hsr_slave_0: entered promiscuous mode [ 48.714385][ T5737] hsr_slave_1: entered promiscuous mode [ 48.726969][ T5738] team0: Port device team_slave_1 added [ 48.731157][ T5744] team0: Port device team_slave_0 added [ 48.742679][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.745040][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.748062][ T5745] bridge_slave_0: entered allmulticast mode [ 48.752149][ T5745] bridge_slave_0: entered promiscuous mode [ 48.756925][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.759849][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.763476][ T5745] bridge_slave_1: entered allmulticast mode [ 48.767357][ T5745] bridge_slave_1: entered promiscuous mode [ 48.797501][ T5744] team0: Port device team_slave_1 added [ 48.814735][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.817005][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.826021][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.832257][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.834969][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.845019][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.893260][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.895421][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.903551][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.907932][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.910120][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.918135][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.924114][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.932752][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.987524][ T5745] team0: Port device team_slave_0 added [ 48.992932][ T5738] hsr_slave_0: entered promiscuous mode [ 48.996014][ T5738] hsr_slave_1: entered promiscuous mode [ 48.998218][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 49.000432][ T5738] Cannot create hsr debugfs directory [ 49.009450][ T5745] team0: Port device team_slave_1 added [ 49.082176][ T5744] hsr_slave_0: entered promiscuous mode [ 49.085419][ T5744] hsr_slave_1: entered promiscuous mode [ 49.088089][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 49.090522][ T5744] Cannot create hsr debugfs directory [ 49.107197][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.109459][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.117651][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.169126][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.171414][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.179679][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.287656][ T5745] hsr_slave_0: entered promiscuous mode [ 49.289918][ T5745] hsr_slave_1: entered promiscuous mode [ 49.292061][ T5745] debugfs: 'hsr0' already exists in 'hsr' [ 49.293921][ T5745] Cannot create hsr debugfs directory [ 49.402617][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.411427][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.429879][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.435901][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.447906][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.452728][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.475323][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.480461][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.535199][ T5738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.541154][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.543838][ T5738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.548397][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.551480][ T5738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.556010][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.558866][ T5738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.563036][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.637839][ T5744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.642509][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.649859][ T5744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.654242][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.656720][ T5744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.660543][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.668618][ T5744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.673000][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.756892][ T5741] Bluetooth: hci0: command tx timeout [ 49.767285][ T5745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.773797][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.777639][ T5745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.783880][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.786998][ T5745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.794029][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.805965][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.808370][ T5745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.814566][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.825324][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.832109][ T5741] Bluetooth: hci2: command tx timeout [ 49.833039][ T5752] Bluetooth: hci1: command tx timeout [ 49.842422][ T5752] Bluetooth: hci3: command tx timeout [ 49.872752][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.880741][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.896274][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.899767][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.914066][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.916591][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.934509][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.936753][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.941123][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.943401][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.992501][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.034790][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.051025][ T533] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.053600][ T533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.064054][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.067660][ T533] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.070193][ T533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.091822][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.108923][ T533] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.111361][ T533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.122590][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.125646][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.272837][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.301301][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.325384][ T5738] veth0_vlan: entered promiscuous mode [ 50.340406][ T5738] veth1_vlan: entered promiscuous mode [ 50.385892][ T5738] veth0_macvtap: entered promiscuous mode [ 50.390614][ T5737] veth0_vlan: entered promiscuous mode [ 50.397737][ T5738] veth1_macvtap: entered promiscuous mode [ 50.406741][ T5737] veth1_vlan: entered promiscuous mode [ 50.416203][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.430313][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.438656][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.444086][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.461000][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.466611][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.475905][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.479519][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.522874][ T5737] veth0_macvtap: entered promiscuous mode [ 50.540513][ T5737] veth1_macvtap: entered promiscuous mode [ 50.586461][ T5745] veth0_vlan: entered promiscuous mode [ 50.591005][ T244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.594358][ T244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.614100][ T5745] veth1_vlan: entered promiscuous mode [ 50.620806][ T5744] veth0_vlan: entered promiscuous mode [ 50.625843][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.639303][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.643194][ T244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.647949][ T244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.651478][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.654582][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.660985][ T5744] veth1_vlan: entered promiscuous mode [ 50.664874][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.668022][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.696424][ T5745] veth0_macvtap: entered promiscuous mode [ 50.719033][ T5738] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.719189][ T5745] veth1_macvtap: entered promiscuous mode [ 50.752494][ T244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.755826][ T244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.756520][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.771623][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.776587][ T5744] veth0_macvtap: entered promiscuous mode [ 50.809570][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.815240][ T5744] veth1_macvtap: entered promiscuous mode [ 50.821168][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.824519][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.831649][ T533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.834337][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.837184][ T533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.854010][ T5889] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.867135][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.886276][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.902530][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.910564][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.938553][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.945915][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.955505][ T244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.960840][ T244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.003113][ T533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.009739][ T533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.031667][ T5894] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 51.049946][ T244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.063276][ T244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.086945][ T244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.093928][ T244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.233112][ T5898] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 51.275474][ T5903] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6'. [ 51.293517][ T5904] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 51.347443][ T5908] coredump: 9(syz.0.6): Core dump to core aborted: cannot preserve file permissions [ 51.431251][ T5912] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 51.472531][ T5914] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 51.546108][ T5924] program syz.1.13 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.708655][ T5936] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 51.791852][ T1045] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.842350][ T5752] Bluetooth: hci0: command tx timeout [ 51.913795][ T5752] Bluetooth: hci1: command tx timeout [ 51.913825][ T5748] Bluetooth: hci2: command tx timeout [ 51.914010][ T5741] Bluetooth: hci3: command tx timeout [ 51.941858][ T1045] usb 5-1: Using ep0 maxpacket: 32 [ 51.948945][ T1045] usb 5-1: unable to get BOS descriptor or descriptor too short [ 51.957023][ T1045] usb 5-1: string descriptor 0 read error: -22 [ 51.959430][ T1045] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 51.963600][ T1045] usb 5-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 51.984741][ T1045] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 51.988276][ T1045] dw2102: su3000_power_ctrl: 1, initialized 0 [ 51.990973][ T1045] dvb-usb: bulk message failed: -22 (2/0) [ 52.002309][ T1045] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 52.006816][ T1045] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 52.010099][ T1045] usb 5-1: media controller created [ 52.012623][ T1045] dvb-usb: bulk message failed: -22 (6/0) [ 52.014911][ T1045] dw2102: i2c transfer failed. [ 52.016884][ T1045] dvb-usb: bulk message failed: -22 (6/0) [ 52.018769][ T1045] dw2102: i2c transfer failed. [ 52.020487][ T1045] dvb-usb: bulk message failed: -22 (6/0) [ 52.023375][ T1045] dw2102: i2c transfer failed. [ 52.025064][ T1045] dvb-usb: bulk message failed: -22 (6/0) [ 52.027002][ T1045] dw2102: i2c transfer failed. [ 52.028592][ T1045] dvb-usb: bulk message failed: -22 (6/0) [ 52.030678][ T1045] dw2102: i2c transfer failed. [ 52.033419][ T1045] dvb-usb: bulk message failed: -22 (6/0) [ 52.035239][ T1045] dw2102: i2c transfer failed. [ 52.036749][ T1045] dvb-usb: MAC address: 02:02:02:02:02:02 [ 52.046554][ T1045] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 52.060960][ T1045] dvb-usb: bulk message failed: -22 (3/0) [ 52.063310][ T1045] dw2102: command 0x0e transfer failed. [ 52.065384][ T1045] dvb-usb: bulk message failed: -22 (3/0) [ 52.067437][ T1045] dw2102: command 0x0e transfer failed. [ 52.373204][ T1045] dvb-usb: bulk message failed: -22 (3/0) [ 52.376392][ T1045] dw2102: command 0x0e transfer failed. [ 52.379219][ T1045] dvb-usb: bulk message failed: -22 (3/0) [ 52.381611][ T1045] dw2102: command 0x0e transfer failed. [ 52.384334][ T1045] dvb-usb: bulk message failed: -22 (1/0) [ 52.386217][ T1045] dw2102: command 0x51 transfer failed. [ 52.390647][ T5926] dvb-usb: bulk message failed: -22 (5/0) [ 52.408773][ T5926] dw2102: i2c transfer failed. [ 52.430689][ T1045] DVB: Unable to find symbol ds3000_attach() [ 52.434439][ T1045] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 52.443383][ T5946] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 52.491839][ T1045] rc_core: IR keymap rc-su3000 not found [ 52.494091][ T1045] Registered IR keymap rc-empty [ 52.505253][ T1045] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 52.516069][ T1045] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input5 [ 52.532353][ T5949] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 52.562958][ T1045] dvb-usb: schedule remote query interval to 150 msecs. [ 52.565443][ T1045] dw2102: su3000_power_ctrl: 0, initialized 1 [ 52.567428][ T1045] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 52.577655][ T1045] usb 5-1: USB disconnect, device number 2 [ 52.616286][ T5952] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 52.630328][ T5954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21'. [ 52.676066][ T1045] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 52.704369][ T5957] coredump: 19(syz.2.21): Core dump to core aborted: cannot preserve file permissions [ 52.726282][ T42] kauditd_printk_skb: 79 callbacks suppressed [ 52.726296][ T42] audit: type=1400 audit(1785338210.115:247): avc: denied { create } for pid=5959 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.735751][ T42] audit: type=1400 audit(1785338210.125:248): avc: denied { shutdown } for pid=5959 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.743473][ T42] audit: type=1400 audit(1785338210.125:249): avc: denied { getopt } for pid=5959 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.749228][ T42] audit: type=1400 audit(1785338210.125:250): avc: denied { connect } for pid=5959 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.850820][ T5965] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 52.891439][ T42] audit: type=1400 audit(1785338210.275:251): avc: denied { listen } for pid=5966 comm="syz.1.28" lport=38787 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.898573][ T42] audit: type=1400 audit(1785338210.285:252): avc: denied { write } for pid=5967 comm="syz.2.29" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.905817][ T42] audit: type=1400 audit(1785338210.285:253): avc: denied { accept } for pid=5966 comm="syz.1.28" lport=38787 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.922754][ T42] audit: type=1400 audit(1785338210.315:254): avc: denied { bind } for pid=5970 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.941819][ T42] audit: type=1400 audit(1785338210.315:255): avc: denied { mounton } for pid=5967 comm="syz.2.29" path="/proc/22/task" dev="proc" ino=10733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 52.991142][ T42] audit: type=1400 audit(1785338210.375:256): avc: denied { ioctl } for pid=5979 comm="syz.0.32" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11293 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.048837][ T5988] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 53.242735][ T5997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.35'. [ 53.327728][ T6004] coredump: 28(syz.1.35): Core dump to core aborted: cannot preserve file permissions [ 53.353550][ T6006] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 53.529555][ T6015] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 53.530154][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 53.532881][ T6013] /dev/sr0: Can't open blockdev [ 53.575948][ T6021] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 53.912508][ T5748] Bluetooth: hci0: command tx timeout [ 53.975580][ T6037] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 53.991862][ T5748] Bluetooth: hci3: command tx timeout [ 53.992209][ T5752] Bluetooth: hci1: command tx timeout [ 54.002190][ T5752] Bluetooth: hci2: command tx timeout [ 54.086224][ T6046] veth0_vlan: entered allmulticast mode [ 54.148437][ T6048] netlink: 'syz.2.53': attribute type 12 has an invalid length. [ 54.151323][ T6048] netlink: 132 bytes leftover after parsing attributes in process `syz.2.53'. [ 54.228478][ T6052] syz.0.55 uses obsolete (PF_INET,SOCK_PACKET) [ 54.229077][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.54'. [ 54.230555][ T6053] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 54.230601][ T6053] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 54.231659][ T6053] vhci_hcd vhci_hcd.0: Device attached [ 54.245898][ T6054] usbip_core: unknown command [ 54.248145][ T6054] vhci_hcd: unknown pdu 795108726 [ 54.257778][ T6054] usbip_core: unknown command [ 54.258144][ T6052] SELinux: Context system_u:object_r:dbusd_etc_t:s0 is not valid (left unmapped). [ 54.263656][ T13] vhci_hcd vhci_hcd.0: stop threads [ 54.265481][ T13] vhci_hcd vhci_hcd.0: release socket [ 54.269686][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 54.294684][ T6053] input: syz0 as /devices/virtual/input/input6 [ 54.308131][ T6058] vlan2: entered promiscuous mode [ 54.309842][ T6058] bridge0: entered promiscuous mode [ 54.334253][ T6058] bond1: entered promiscuous mode [ 54.338237][ T6058] fuse: Bad value for 'fd' [ 54.435974][ T6064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6064 comm=syz.1.58 [ 54.456222][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 54.468836][ T6064] netlink: 'syz.1.58': attribute type 2 has an invalid length. [ 55.001026][ T6127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 55.107448][ T6131] capability: warning: `syz.1.76' uses deprecated v2 capabilities in a way that may be insecure [ 55.311286][ T6151] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 55.411127][ T5752] Bluetooth: hci3: Malformed LE Event: 0x0b [ 55.417770][ T6161] xt_TCPMSS: Only works on TCP SYN packets [ 55.418906][ T6165] xt_TCPMSS: Only works on TCP SYN packets [ 55.419526][ T6163] tmpfs: Bad value for 'mpol' [ 55.456609][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.85'. [ 55.555416][ T6175] overlayfs: missing 'workdir' [ 55.619478][ T6177] cgroup: Unknown subsys name 'uid<00000000000000000000' [ 55.627576][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 55.683513][ T6182] syzkaller0: entered promiscuous mode [ 55.685896][ T6182] syzkaller0: entered allmulticast mode [ 55.704764][ T6182] bond2 (unregistering): Released all slaves [ 55.891952][ T6189] overlayfs: failed to resolve './file0': -2 [ 55.967372][ T6192] bond2: entered promiscuous mode [ 55.972099][ T6192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.012479][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.021643][ T6195] smpboot: CPU 1 is now offline [ 56.032744][ T5752] Bluetooth: hci1: command tx timeout [ 56.059728][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.075581][ T5752] Bluetooth: hci3: command tx timeout [ 56.075982][ T5748] Bluetooth: hci2: command tx timeout [ 56.097653][ T6195] smpboot: CPU 3 is now offline [ 56.174300][ T6195] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 56.214181][ T6195] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 56.369171][ T6219] comedi comedi0: Minor 3 could not be opened [ 56.396626][ T10] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 56.462736][ T6225] netlink: 'syz.3.104': attribute type 1 has an invalid length. [ 56.494891][ T6225] bond1: entered promiscuous mode [ 56.498008][ T6225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.514625][ T6225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.517645][ T6225] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 56.522507][ T6225] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 56.529937][ T6225] bond1: (slave ip6gre1): making interface the new active one [ 56.533460][ T6225] ip6gre1: entered promiscuous mode [ 56.537560][ T6225] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 56.563802][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.567340][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 56.570298][ T10] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 56.575593][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.581408][ T10] usb 7-1: config 0 descriptor?? [ 56.586806][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 56.589641][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 56.597340][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 56.601494][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 56.604870][ T10] usb 7-1: media controller created [ 56.608703][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 56.623405][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 56.627899][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 56.638184][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input7 [ 56.647505][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 56.650267][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 56.788782][ T6200] Bluetooth: MGMT ver 1.23 [ 56.798336][ T10] usb 7-1: USB disconnect, device number 3 [ 56.826035][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 57.038398][ T6245] Zero length message leads to an empty skb [ 57.122372][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 57.156883][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.115'. [ 57.180601][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.116'. [ 57.191120][ T6259] gfs2: error -5 reading superblock [ 57.192569][ T6261] random: crng reseeded on system resumption [ 57.370260][ T6267] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 57.482928][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.123'. [ 57.518326][ T6288] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 57.535867][ T6292] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 (while UP) [ 57.611284][ T6301] net2280 0000:00:00.0: unbind [ 57.616062][ T6301] net2280 0000:00:00.0: probe with driver net2280 failed with error -16 [ 57.626208][ T6301] exFAT-fs (nbd3): unable to read boot sector [ 57.629309][ T6301] exFAT-fs (nbd3): failed to read boot sector [ 57.632102][ T6301] exFAT-fs (nbd3): failed to recognize exfat type [ 57.731686][ T6310] Illegal XDP return value 4294967274 on prog (id 12) dev N/A, expect packet loss! [ 57.754233][ T42] kauditd_printk_skb: 158 callbacks suppressed [ 57.754260][ T42] audit: type=1400 audit(1785338215.145:415): avc: denied { create } for pid=6320 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.785595][ T6326] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 57.838469][ T42] audit: type=1400 audit(1785338215.225:416): avc: denied { ioctl } for pid=6327 comm="syz.0.137" path="socket:[12671]" dev="sockfs" ino=12671 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.918614][ T6310] kvm: pic: non byte write [ 57.999483][ T6340] trusted_key: encrypted_key: keyword 'u' not recognized [ 58.081562][ T42] audit: type=1400 audit(1785338215.465:417): avc: denied { setattr } for pid=6341 comm="syz.0.140" name="video1" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 58.091867][ T6342] raw_sendmsg: syz.0.140 forgot to set AF_INET. Fix it! [ 58.144388][ T42] audit: type=1400 audit(1785338215.535:418): avc: denied { create } for pid=6345 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.153423][ T42] audit: type=1400 audit(1785338215.545:419): avc: denied { setopt } for pid=6345 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.163014][ T42] audit: type=1400 audit(1785338215.545:420): avc: denied { write } for pid=6345 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.170762][ T42] audit: type=1400 audit(1785338215.555:421): avc: denied { read } for pid=6345 comm="syz.1.141" lport=55570 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.181192][ T42] audit: type=1400 audit(1785338215.565:422): avc: denied { create } for pid=6343 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 58.218811][ T42] audit: type=1400 audit(1785338215.605:423): avc: denied { write } for pid=6345 comm="syz.1.141" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.234527][ T42] audit: type=1400 audit(1785338215.615:424): avc: denied { listen } for pid=6345 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 58.276852][ T6353] dummy_hcd dummy_hcd.0: remove, state 4 [ 58.280225][ T6353] usb usb5: USB disconnect, device number 1 [ 58.304813][ T6353] dummy_hcd dummy_hcd.0: stopped [ 58.307059][ T6353] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 58.633698][ T5748] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 58.637005][ T5748] Bluetooth: hci0: Injecting HCI hardware error event [ 58.640146][ T5748] Bluetooth: hci0: hardware error 0x00 [ 58.697114][ T6364] process 'syz.3.148' launched './file0' with NULL argv: empty string added [ 58.771846][ T5819] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 58.951796][ T5819] usb 7-1: Using ep0 maxpacket: 16 [ 58.955301][ T5819] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 58.958423][ T5819] usb 7-1: config 0 has no interface number 0 [ 58.963974][ T5819] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 58.967632][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.970960][ T5819] usb 7-1: Product: syz [ 58.972916][ T5819] usb 7-1: Manufacturer: syz [ 58.974620][ T5819] usb 7-1: SerialNumber: syz [ 58.979613][ T5819] usb 7-1: config 0 descriptor?? [ 58.988506][ T5819] hub 7-1:0.132: bad descriptor, ignoring hub [ 58.991540][ T5819] hub 7-1:0.132: probe with driver hub failed with error -5 [ 58.996616][ T5819] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.132/input/input8 [ 59.241148][ T6385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.247883][ T6385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.343036][ T6400] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 59.518167][ T6407] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 59.746808][ T6425] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 59.856442][ T6429] syzkaller0: entered promiscuous mode [ 59.858739][ T6429] syzkaller0: entered allmulticast mode [ 59.876101][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'. [ 60.037684][ T6446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6446 comm=syz.2.175 [ 60.037888][ T6445] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 60.049827][ T6446] sit1: entered allmulticast mode [ 60.099824][ T6450] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 60.317989][ T6462] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 60.330557][ T6472] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 60.381503][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 60.476264][ T6482] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 60.500754][ T6484] syzkaller1: entered promiscuous mode [ 60.503618][ T6484] syzkaller1: entered allmulticast mode [ 60.533692][ T6484] overlayfs: invalid origin (0000) [ 60.576171][ T6491] netlink: 'syz.0.194': attribute type 2 has an invalid length. [ 60.579375][ T6491] netlink: 40 bytes leftover after parsing attributes in process `syz.0.194'. [ 60.588101][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 60.592113][ T6493] openvswitch: netlink: Flow actions attr not present in new flow. [ 60.598213][ T6491] : entered promiscuous mode [ 60.643629][ T6495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.196'. [ 60.714990][ T5748] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 60.736483][ T6508] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 61.059201][ T6536] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 61.161155][ T6473] orangefs_mount: mount request failed with -4 [ 61.341839][ T24] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 61.493610][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.498661][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 61.503617][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 61.512514][ T24] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 61.516696][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.520268][ T24] usb 6-1: Product: syz [ 61.522492][ T24] usb 6-1: Manufacturer: syz [ 61.524835][ T24] usb 6-1: SerialNumber: syz [ 61.529555][ T24] usb 6-1: config 0 descriptor?? [ 61.533594][ T6540] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 61.569271][ T6556] netlink: 48 bytes leftover after parsing attributes in process `syz.2.216'. [ 61.577548][ T6556] binder: Unknown parameter 'mask' [ 61.591935][ T24] rc_core: IR keymap rc-streamzap not found [ 61.595216][ T24] Registered IR keymap rc-empty [ 61.606103][ T24] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 61.612689][ T24] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input9 [ 61.830683][ T6573] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 61.953870][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 62.055123][ T6593] netlink: 'syz.3.225': attribute type 21 has an invalid length. [ 62.102487][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 62.115751][ T6590] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=58 sclass=netlink_tcpdiag_socket pid=6590 comm=syz.0.226 [ 62.575177][ T1045] usb 7-1: USB disconnect, device number 4 [ 62.588392][ T5819] usb 6-1: USB disconnect, device number 2 [ 62.823699][ T42] kauditd_printk_skb: 77 callbacks suppressed [ 62.823720][ T42] audit: type=1400 audit(1785338220.215:502): avc: denied { write } for pid=6612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.885113][ T42] audit: type=1400 audit(1785338220.275:503): avc: denied { write } for pid=6615 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.977275][ T42] audit: type=1400 audit(1785338220.365:504): avc: denied { write } for pid=6617 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.042345][ T42] audit: type=1400 audit(1785338220.435:505): avc: denied { write } for pid=6620 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.313855][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 68.195566][ T42] audit: type=1400 audit(1785338225.585:506): avc: denied { write } for pid=6625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.256970][ T42] audit: type=1400 audit(1785338225.645:507): avc: denied { write } for pid=6628 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.492833][ T42] audit: type=1400 audit(1785338227.885:508): avc: denied { write } for pid=6630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.567772][ T42] audit: type=1400 audit(1785338227.955:509): avc: denied { write } for pid=6633 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.276513][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.280934][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.350432][ T6643] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.352010][ T6637] ip6gre1: entered promiscuous mode [ 76.356010][ T6637] ip6gre1: entered allmulticast mode [ 76.358640][ T42] audit: type=1400 audit(1785338233.745:510): avc: denied { setopt } for pid=6640 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.380844][ T42] audit: type=1400 audit(1785338233.745:511): avc: denied { connect } for pid=6640 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.448095][ T42] audit: type=1400 audit(1785338233.835:512): avc: denied { mount } for pid=6655 comm="syz.0.236" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 76.448767][ T6656] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 76.460904][ T6656] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 76.463633][ T6656] CPU: 3 UID: 0 PID: 6656 Comm: syz.0.236 Not tainted syzkaller #0 PREEMPT(full) [ 76.463867][ T42] audit: type=1400 audit(1785338233.855:513): avc: denied { read } for pid=5131 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 76.466547][ T6656] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 76.466558][ T6656] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 76.475850][ T42] audit: type=1400 audit(1785338233.855:514): avc: denied { search } for pid=5131 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.479440][ T6656] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 76.479466][ T6656] RSP: 0018:ffffc9000d537b48 EFLAGS: 00010246 [ 76.479484][ T6656] RAX: dffffc0000000000 RBX: ffff88802af80c00 RCX: ffffc900042b2000 [ 76.479497][ T6656] RDX: 0000000000000000 RSI: ffffffff87d0cf47 RDI: ffff88802af81290 [ 76.482498][ T42] audit: type=1400 audit(1785338233.855:515): avc: denied { write search } for pid=5131 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.490530][ T6656] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 76.490550][ T6656] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802626c050 [ 76.490565][ T6656] R13: 0000000000000000 R14: ffff88802da4a4f1 R15: ffff88802da4a008 [ 76.490579][ T6656] FS: 00007f329405d6c0(0000) GS:ffff8880d60dc000(0000) knlGS:0000000000000000 [ 76.490611][ T6656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.498811][ T42] audit: type=1400 audit(1785338233.855:516): avc: denied { add_name } for pid=5131 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.500954][ T6656] CR2: 00007f32931874c0 CR3: 000000005f3ce000 CR4: 0000000000352ef0 [ 76.500972][ T6656] Call Trace: [ 76.507557][ T42] audit: type=1400 audit(1785338233.855:517): avc: denied { create } for pid=5131 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.507621][ T6656] [ 76.516722][ T42] audit: type=1400 audit(1785338233.855:518): avc: denied { append open } for pid=5131 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.519068][ T6656] gadget_bind_driver+0x4ac/0xbf0 [ 76.522688][ T42] audit: type=1400 audit(1785338233.855:519): avc: denied { getattr } for pid=5131 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.524968][ T6656] ? __pfx_gadget_bind_driver+0x10/0x10 [ 76.524991][ T6656] really_probe+0x241/0xa60 [ 76.525014][ T6656] __driver_probe_device+0x20e/0x450 [ 76.568549][ T6656] driver_probe_device+0x4a/0x140 [ 76.570182][ T6656] __driver_attach+0x21f/0x5b0 [ 76.571708][ T6656] ? __pfx___driver_attach+0x10/0x10 [ 76.573377][ T6656] bus_for_each_dev+0x13e/0x1d0 [ 76.574993][ T6656] ? __pfx_bus_for_each_dev+0x10/0x10 [ 76.576699][ T6656] ? bus_add_driver+0x2b5/0x5b0 [ 76.578243][ T6656] bus_add_driver+0x305/0x5b0 [ 76.580045][ T6656] driver_register+0x1e2/0x360 [ 76.582070][ T6656] ? rcu_is_watching+0x12/0xc0 [ 76.584047][ T6656] usb_gadget_register_driver_owner+0x132/0x210 [ 76.586612][ T6656] raw_ioctl+0x1a85/0x2b80 [ 76.588288][ T6656] ? __pfx_raw_ioctl+0x10/0x10 [ 76.589835][ T6656] ? selinux_file_ioctl+0x13b/0x290 [ 76.591481][ T6656] ? selinux_file_ioctl+0xb6/0x290 [ 76.593100][ T6656] ? __pfx_raw_ioctl+0x10/0x10 [ 76.594647][ T6656] __x64_sys_ioctl+0x18e/0x210 [ 76.596150][ T6656] do_syscall_64+0x115/0x870 [ 76.597640][ T6656] ? clear_bhb_loop+0x40/0x90 [ 76.599113][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.600984][ T6656] RIP: 0033:0x7f329319db2b [ 76.602386][ T6656] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 76.608345][ T6656] RSP: 002b:00007f329405af00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.610951][ T6656] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f329319db2b [ 76.613405][ T6656] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 76.615915][ T6656] RBP: 00007f329405bfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 76.618379][ T6656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.620872][ T6656] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 76.623338][ T6656] [ 76.624395][ T6656] Modules linked in: [ 76.626064][ T6656] ---[ end trace 0000000000000000 ]--- [ 76.629210][ T6656] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 76.631127][ T6656] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 76.638452][ T6656] RSP: 0018:ffffc9000d537b48 EFLAGS: 00010246 [ 76.641135][ T6656] RAX: dffffc0000000000 RBX: ffff88802af80c00 RCX: ffffc900042b2000 [ 76.645423][ T6656] RDX: 0000000000000000 RSI: ffffffff87d0cf47 RDI: ffff88802af81290 [ 76.648533][ T6656] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 76.652052][ T6656] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88802626c050 [ 76.655377][ T6656] R13: 0000000000000000 R14: ffff88802da4a4f1 R15: ffff88802da4a008 [ 76.658716][ T6656] FS: 00007f329405d6c0(0000) GS:ffff8880d5ddc000(0000) knlGS:0000000000000000 [ 76.662363][ T6656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.665151][ T6656] CR2: 00007ffd65691d94 CR3: 000000005f3ce000 CR4: 0000000000352ef0 [ 76.668470][ T6656] Kernel panic - not syncing: Fatal exception [ 76.671657][ T6656] Kernel Offset: disabled [ 76.673465][ T6656] Rebooting in 86400 seconds..