last executing test programs: 1m51.050961651s ago: executing program 2 (id=505): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, &(0x7f0000000000)) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x9, r1, 0xa0000000}, 0xc) 1m51.050018593s ago: executing program 2 (id=506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000480)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 1m50.989580049s ago: executing program 2 (id=507): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x48, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_USERDATA={0x33, 0x6, "832fff172ac24dc2bce6cfcbb2df4b847ffdf7230b9740efc4a411a188785073ba0bfb3d4926dbafa5a11d349ba7bb"}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x11c}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000007000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x2f9, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'pim6reg0\x00', 0x4}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000500)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff, 0x0, 0xfc}, {0x2000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x1000, 0xc, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0xfe, 0x4, 0x4}, {0x16000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c, 0x0, 0x9}, {0x4, 0x0, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x1, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x114, 0x0, 0xf001, 0x0, [0x5, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) 1m50.79138051s ago: executing program 2 (id=508): r0 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000400)="1b", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x101040) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000140)={0x1, 0x1, 0xfa6, 0x10000, 0x1000, 0x8000000000000001, 0xfffffffffffffffa, 0x7, 0x2, 0x40, 0x1}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x300c072, &(0x7f0000002480)=ANY=[@ANYBLOB='stats=glObal,\x00']) add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000400)="1b", 0x1, 0xfffffffffffffffe) (async) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) (async) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x101040) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000140)={0x1, 0x1, 0xfa6, 0x10000, 0x1000, 0x8000000000000001, 0xfffffffffffffffa, 0x7, 0x2, 0x40, 0x1}) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x300c072, &(0x7f0000002480)=ANY=[@ANYBLOB='stats=glObal,\x00']) (async) 1m50.790731794s ago: executing program 2 (id=509): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg/2:0:0:0\x00', 0x8041, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f00000001c0)=0xb5) migrate_pages(r3, 0x3, &(0x7f0000000180)=0x9, &(0x7f0000000080)=0x272) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10000, 0x2, 0x200000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fedbdf251200000008000300", @ANYRES32=r8, @ANYBLOB="0a0006000802110000000000080014"], 0x30}, 0x1, 0x0, 0x0, 0x40050}, 0x40000) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="dbe104", 0x3, 0x20008894, 0x0, 0x0) 1m50.500810585s ago: executing program 2 (id=511): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004628006800000921907864010100ac1414aa820200004e214e2104b1907840740e230d3100000000"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42}, 0x2000400c) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0xa, 0x20, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000000880)={0x1714, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_WOL_MODES={0x10fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "91744ca2ea7b8745bdcd3b9bbc061e38880916d875c78205182ca2dd10b749d322f4091347c720ea1bd11058f2f18ee4613b35af00de5b815a859c8ea2896af155ce38968d7e24969c38df741f5029c51c56bfcf703361fdca1631c384ec3bbd278efead85cee4eff7359585b90f4d94ef7a803adb7eaafe01ae52fce37a5863299141d615def4991f9bab9427421a7b0a7233d24ce24353c779b0015730f0cafa69eae04d3784d7fb5c3b52f848216ad9191587c544"}, @ETHTOOL_A_BITSET_MASK={0x21, 0x5, "a1a9537585288711c112d43dfb6ec4545aa47a6eb340667e322447155c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "a8728a03b68afdb8fb82f7e53852f47de477217f684465d7d2e11e010761b36e97139939257515319dc19e79839c51df2a1f5e429d59237cc71af03f4ddac0ea6015a16f5d9b8598fe64f5a861e8375cf7067797fb36570a1ea8719cc326a0025b1c2587dfaef07e6ecd23a2e80609d1d3d0fa89db094000f5bc1afef7413feff725c29d676be125f0a0101df64dea2d4abe36dde757b2820935280f3f3a6cd069e00f2e54e84b6e7853f919eee42107cbb9e4feef62d93e9c415772b06b2fb70a8bafd3341bdddd2b764d82b576a67d5caec4772092d092691abf83a020c3d80d033305e9f291f90252c794d1110a6b69e4a1b38a1e111a79c4efd7148ac306f2665575c2e5c68d3641648bac8dcda45a6a09583c4019357e5c0156df0046ff1324299e09d90005b807693c823d495ed9555a549bfa2e9255a43eb69021332cdc314895bcb59269dc0a2373dcfb58e39ba7de32fb1ad89eaaacc80bad49a27e484d44ba284e6789f9701893ec103d7dd09730ffc577a4a70fe319c58c648d4f8fa10b9645e2287989fed2f374bfc4450823c79fad1fb5b547e5aa2365bd6ed5481ccf8fd0d8e597e4446bd8101d96ed2aef7d9dd0dd523cc3478b90a76d09b7a30399581e408c9e5af30127e3e3cc2d8220bd735820569b04b974fa08845a967491434a3130e06582e39bf95e1fcac1d9bc5630e8634af42294949da9b006a38a049036dbcd398d24ebf8c124f7ce17cd6b1756cdf2d690889f2b44d8e312a49fb6a55b508462830e9771891b235f2da4347d4640b22c758ae18e7afd951286594719afaf3f749c45960bbde9b56948896626d8d5510a4ab5b8ace6b46cad015626ab95bdf9d2d420a191015ea2c787f669ccacfe8d25396a18721ff59f7fd59069d05674dba84168ad5d9c62dd44b76eede3a8f0695ef0947a3e1fcd34a9255ba993253b33b7b3193d8d0c0b9d1965dcbfb3cbc527e2044055e12effb020f1094f765c4cc15cc109e7e97496b13edc879e8d74625f41825a75f1f96822d3c45245be24de3946473c14d76a48f2b1a555ab6e2ba1e4b3ea9aaaf3da34caef33a2e9ebaa1833d2c3481cae8282cab8d15d6f038098b40cd6ce7c5ea82d54aed8a37d3f4b71abcf0106d522e1ba7f606e52642ec6ed2116cb9dcd1b12a9dffb6c31d7396739d1ab2fc85175608b07007b6bfafba4cec05aee61356e1f47acbb5bafdedbe9be9cdf418c194458748210076b5f7ee7d6d62e513022f77001a5a1daac2007d586fe93de40d354f45d3efe582aebbe6c50a26dfee5a664edbe960a21e9b783a05e83d23bfab8ed1a1b261844cc39dc8f3f13d26260e2493b56ad1c61b3207adc192db0dc7558e9cd3f3d2ef0883a4f3bd4f0686ca423ad75d82400ce7d9334d2578bd8cb812c6866b82d68dbe81ae56b4394ee8e2de6373d27b7c8fac1243a3e03877b982f058303f8cbb81a221f86bb886b70960ad3ac55ef8b825bd5f6c721c1255367c9d0a3418cfa8130f960f0976cc846d3bb7ad02b661515d5ff96ae5ff6cd8698af39c7793174a0d529870721cb84c6cec35cef1f1191ab8b80fb31d771074d7fd959f7921716c489c7c735a8db942c67e1b85e1d3b8627b0bd10bbce6b38593de9a2ac139460d3450e2a664788b3741dc0cf4d52896fc458a0439a6dabc43fb394f0634da328de9487108f59f169cd88f3a69fa286c8276e6a77cf998812e7f203f1e3a7dd1d3512cb7fcd786a3f671af4e878de6cbf12be5a5990c3177d31d01a01c00f531ddb6ebb613c253bb67b6c45bf4c369a6152c3857b3f209efb4807cbbaf243da411da4b975ef0066e68bbced103482b318bcc26a997cd37ce42c797df44842062e6809fa626b298002a8addcbbc90c645fbed475b785cfd1b20f82e892e5191e18bb6b816dc24f44a9b72143a214fc4321a743be143120559e470fea71df71e9c96308fa837cca8c7ddd1cfb380225e7c5ee67070713a654aa95333d049a199c9cf47a15ecd6a8f08203f70b04b556f290cd041d4791a01934e23d6f352fd95a8aea30539be7682e05b2a1e90310abfa5e848e7362f94df5d0aa5aa138ff132497d093cee95fa56fb7641815fb62e44d7ff7e132d2555377fd1ea8ee49dcd51d6b173ca918c5e166857b17777eef7ea55e3ec5253e019aa80ef1762433da685db2a61ffd610a7f33705da8ea15f648f1f6a3d0c43451092d16c20014d7dd74bfe10845fcb9d550c3e450d19d2a6a216607fce69d2f35c2b559cd29da44218239cd3ba7ee5b23c863bf413c691fcf0dd0e6127d90bbacc5d6c041e627c7a50cc7fc3cca6245d0b98bc53452e296c7cffd6c2538ffc1a53defdfe4a7ed9f7a8f1f68f6e7c8f79e7f6f9a7e51ae0e2f002fb271f410c34bcd76761bb330d37de7ca9365f68c25695d24e003a6995f54406a05156a2c8472596f7c858cfbe09627c1bfe84b56a80bd4e121388b1200553a994c488da389b8caddc8f54dbbc20ff74420c4060b991ade06ec1bde773b9b6644e2c3b780438671a5a5381007dacc93a684f2c5d5b597f3037696e51dc3d5603084211197ccfa92921b636199cdbcd46626086e5092acbc489531b7e88db64a33d2a0629f8c7ceccdf5b56bd35d39be3e4275b847d954717930c612e8267bbce48c90c0222e7bc1c4abc70df75c62aa4fed8accf280bc12ac627c2ff65b49592484bea663de184c9eb83fb1462ad9cefe65751f9a6aeb263f988dc062b7abdfefde3d6c9f4dc770327e1d66e393274d18ea1df262d31390772e975e5544cfc10972d6240bbe45befb6befed1879d13e0acd0e10eea84effd64c9880c5fe057dedb027ef53694f5f7f7755768fad19f1d68ec65d797a32a84de1bf0051701802871125e24e9d393413e9298b13a714f5f12f12165367acb477584622141886c7f12a136528ce028cc4aed0381d1cd7faf80017effaf672694af634795cfcb10a535d073b41a6e624b9663d2001c562d3b54b0e4a7b656de271490c2ce9c3dcdf1c7d079bf74973fc7f6ba6eb45c28ed86f8aac8e212caeaf322153b122eea453a0f2bd4f004489ea296e629107d4d0093b2dcaba60382fdc31ef89dddcb14b40d5fb4b134ed02da1800dc167058439e5ac2a852bc7c2162a2f73bb8686b3a1f8332b67adae0e98ea50b815be26fb5197bd453d3969dc78d1842fbdd284df49ceaa2f060dd294e63edebbf38620408d25e6e397f0e6f2e8befafec80384bfae49a44882d721c548a81e6894f0d4cf57e396ed08b108b7fa5d14168fc3ea67e87ffb069a3e9bc6c01b30fce54202aa404786d976690e34a3e4aefc3ae33872577147408ebb78b2c14f323f43ef3c6cf3f62a186413d45c84ec10d444b45c9c2ca6b679038f8e01d71388aa5a1407b65683630e42dc508e3c77721651c4af1b23bf5c909c445a1bbf40cb9682ed7fdfc20a7aa9610ee1ad00d17f5b264b1ebd1e04dcdb8f6947dc25fdd2e75a5d3a166f8a824ab393eca241a7d1461faa8e80401d723deaa75a4383dad6f780b3e2e95ef0e5bdf75a2e6a21444ccde80c1a7054761b7beca01882291689c4e104fc5ead4733204ea078beba25d66b7b563dcc1f7c042350363eae621b3d1865ac97ac0cc733c13ae5aa3456bfd7b5c7ea35a39060556d11146f4d76f5c90304a73cbba5f24d0a1788e7e9c59768c97daa4008272df7adc9c9d25d94225b0472ca9052642eff0d9e0836aa5a0e31f1409560546e7b084ffab2b00e9097d5395f585b71921dd5c88f56f73ab64e6ccfcc6e2c8d7d47ad76746bab531b0026424e6fe086161cc0747f963bcd850a37ff10dfea31e9156881e4a3b4c7d1ba38bc7b27118191d34feb260acfb5bf9746df13442017f58b078ae6aadc609ec0127832656d1d59afa81fcb0cd408f2b6fc2aa9a3a2873cfee2a30df89fb7544bb3af5eefe0ea798fa3e5364cd9485f5a0613a1bdb6489e82427f339d70a65f3a3297d281db76b2cba6894e17f854d9918ff99feb6038a440f29b6fe9f3421fa677ec73ede5863b4ea692a67bf0e81ffb2587d68886868950215317e91dcd27a3525c4f9eeacd2e0d118f9db0bbbb1c8f212408f6893f9b087682e4bfce7e537977c5e21464b83805681001026aaa6ba5ad65fc4ac043f08e2470072b1db855e64b5111cf196dd5032124e082a04e37cafc602687e238f85d5d4f30f849fd1cb74a7bef4c4cdd27142dcd95b9ff38b4e18f7d70d7c43d28474d527ab40ca6c84741a1f31afa769a599a4a66373919d810d7633ce18090ddb640446326289449be4d7e1828826492b7a844b2eea5a089d3a6dafb7dadffee566b334f7d28ff4531426070dcd425d321cdf6131f3fb24d3081524161021c9425089131a95a7c2faf8910ad81d4be288afde9f69d5315876b7460f98e5d39fc56ca9233bffe19ffa8bf068bd2e734cebd7070f390a7d7f3fd0fceb38d6a0a4a323061c6db5e1dd659a786d19fa39606cfcab1678ef4243d2a2e3eaf17b8f5198d727a257150e1a034a9b20c390665363d983bf8ef14e34fbeb0c8fc51d8419accb1ebeeb2df357192ce6f2ab6d94666f86afb5767a3a40c4ea98a104fa1bb582f64287f45c790d08a1befd5cc49575bfe10dda971eec2f434170d1020a877be48d00eb6128a5419fe5325d31d6897ad9d2ac0db9ff3ad9e80bd5d5e02596b7afb388de766b6765ac18f22010cfe3ed23e41913e1f32e8968c1155a490f3cab1daabb4a0f080de7260a9b3b7ae7e5bcc3c44d39d06b14d332bda33b34f0911bd0b2e0ae29555a7603b1bd24fda78d7c99f3c00de0d075d7405bb60c4421b85b6103da30e643606122695e2508e031cd5f1bc7f79bf3037af6653467131d847d6f86a3a9a5bd113cbb517a22b959ef444bf2019f5155970dcc5bb7f3b93bf90b55790b02415bc3b86a21a0066e61f064eac5c4f9baa6dfbc492b7d666b4f5754fdd7a4fbb26e5f71d83138b9f7507d9c0c140652beaf033367eef1739951039e57f6e1708c72944a9408628dd2a8d7d7ae06cb0915661c11f165e79adb55560f50aec5bb9249c0f65e8fcada9aae08180a8c8ce46e79f6b58e93e00fac64a26861f91bb454ac5fb30d72d04709e078d234c2412ebda0958ef4ac4e595383f5b110c80a8f9c59afb0b80aaf35b35b49cc8654fe0f98735de7b07151650fdd9672d35d38c7d070c4c8fb6652c3c9868eea6840751c34d1684379478d74352aa9841de82ed29d43c60e7397600c846f000d2d3e260d8ee71597e3f15113088cf9a4a0e5253d8f32f58189bcb475222c78d4d26c88440ccedaf399670cd8dd1f069387f0e232af9c844556b188876094afc441a8fe2ddaf4a23214bc1c3a3586b2166323b65d77ccb9068df30fc513ffb46777dbb66071caa79025908827ab56b28492bcb5b62718bd254ee85893086fcbc585f0644c25cc8a85d0e730dfd4a6539b1e4d148130e786ff673d814cd431da52496fc3a2d340dba2f47e53e251815c5d5f45ada24752e2357436f9703fdd0edf93ccc5b47ec73397cc9de09f5b5a12e9801f23647b0fd909f0b2917224e3caca66ec611abb0f0a2d8a00c0abd2f6319c95138a741442c89e4e0473085c2ae76d486b220f3db22708bc16c2a4fd257ad0b00dec4f62d96d1949a1265eba95f983a870f3161e051a45dd4fc908a6da77e9e8bc9d6e977d200d6ce78c05c90eec65af4ff88e25b3077aba8b28aba4e5120f4af542a3eafc216d939eeed58414cafe0864b317b31eca856235e6b8f11cfb19d082ee07cc3"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_WOL_SOPASS={0xf0, 0x3, "3e26fc4b9ad3aec16aa853e62b719a1282052326faf149fc330441aeede68b12a9dd7c032592ae05025779b6fab570c268b29590a642a4eb3185374e39b6bc1d4d595ec5f7e6978680e4fcd821787788b4d63721d760cf391ee61c557ade0c23dd6c75c2cb372a0c5b71ab207a06a57da8c4bd8665ee6323824b9d1cd3a9c6dd69c51dbf83552eabe68ed62df036b4c860046e20135be1d84b2c0b11d8aab06263c4118dce0d148c386d2de05bc3003928f25c4e02a5dd8d2400fc09944ea5bc13062930a4dde2285c1fbb17b121a87bd0aa4e23f4d6102d18af084155ef4a1f7527dc97be33da2425ab8905"}, @ETHTOOL_A_WOL_MODES={0x358, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x21, 0x5, "d7668d6eac6a7391c78cebe6415903f439e3c9a55fcd15c2bb7e943bf6"}, @ETHTOOL_A_BITSET_MASK={0xba, 0x5, "8c70b5cb7532ed353d6bee268a5836572179fe94a98d1ee2dc52a523f481e0f9b521acd07b100337eb77d3dbdfbc719e075dbc588b3cbf3feda44915b725fd2a5ae2498c5ae7958574d21a0fe806a8a9e348965512c953f2d966fb129a59c8725841692bda685f45ca96be8a937bc0c88899b06ef45f4340c9db39b216fc50b1769859c752f7cf3faa7e023206220691288949bdab1d01c2d3b19f70b7fc951fc03c290f068168cebe698b0b269f3a4d1fd1518ae1ea"}, @ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "fdb656fdd6037e8f47d91d4cf84d28585a24d39b065aaf819ddb685535c8d5c0161fcd643b04774fe7da40b2f51e35d43da9a13c76e67f6b4960404d47772f205ee8396bac019045c06b6e084e8947a917efba54f43b33cca4af20da8e7eb79e0711a368d25266a6ebcdec8a71ee2256c1fcafc0767979ddec996a73a0"}, @ETHTOOL_A_BITSET_MASK={0x3b, 0x5, "d8a3d8ca0cbe9701ab7d13a095af8bd4bf9502362fb8cc81a70879f6400ada50a5dde7894443f854659cb6e3fe372d08cd74afba1f2690"}, @ETHTOOL_A_BITSET_MASK={0x53, 0x5, "30d520acfa0ed1ffa7aa1b608d223afeaafc94d6315a9532e9cb6e57f380b5230a67f140b00ea59e378a29259f4026623cee26a27b31e8498a0c26e5768226127114035ecf6a6e6d5e8ab0b9e8f19b"}, @ETHTOOL_A_BITSET_VALUE={0xe7, 0x4, "64daac807d8ee6acfcbc486bb505ace63266c159478ccab8f9d9628e24335a9ca93158aaabdb79dae77b83d7e3862e6177e388009806fc604ea15fc43bcb62c8ccbca8f6e214e9d9f8d86b9dedffe76da444752194f93f50b65b4e5d3aecc88e7edc6bea0d399c17c88d3f2d27891e6de1ed0ba4788551b4fa8826c79450dd3871ed8cc83c2b3ca10636e0fbda4160304bceac61a601bf13f6a080984031711fdc7c33d162da31b841d9d77f1727beef2080362f29c8c49981580b0ba2742809b7675c3b67ea0805d738f124a827eeb97ae7f01a7e50e32a0e8f9e2ab211d4884664b8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'mode\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x37a}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ')]}$.&&-\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '))!\b/#$.\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}, @ETHTOOL_A_WOL_SOPASS={0xe2, 0x3, "c8b6aef7374579c6e9af4dd0b52e359c6317735b8281903eca95a7923ca904c385836701bdec4c1fda979ad32ed89e3768fe6dcf999d6949cc0e0992427a1700d3c325f43d13681ca56ce87cf867bdf1f0aaa0bc9c26595d204e99787a58eebc128aa8b0bcf018b96f9a89eec4d2d52f9d0384538b0bff6da8853e8faeded79ac880800de802599ccf214daf122735b6317015f813a6b1b919d2392a5cb2f73ddbce279c0780a9a0a3baa67f85c6be267f0f4344fff8f01c097965b5276f01106e1f5f4f2396002215a4cdf1fb1e1c0640f4dc820ffada09f34abde8951d"}, @ETHTOOL_A_WOL_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1714}, 0x1, 0x0, 0x0, 0x40}, 0x840) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) read$dsp(0xffffffffffffffff, &(0x7f00000003c0)=""/148, 0x94) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c643c, &(0x7f0000000300)) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = fsopen(&(0x7f0000000380)='udf\x00', 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) setsockopt$rose(r12, 0x104, 0x3, &(0x7f0000000040)=0x9, 0x4) mmap(&(0x7f0000597000/0x3000)=nil, 0x3000, 0x9, 0x28011, r10, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8008001, 0x4, 0x2, 0x4, 0x1, 0xcc7, 0x108, 0x7, 0x4, 0x7ffe, 0x60, 0x40000001, 0x8, 0x40000002, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000002, 0x89, 0x10d, 0xf27, 0x54, 0xc, 0x8, 0x5, 0x40000006, 0x3, 0x10000, 0xfffffff4, 0x4]}) 1m34.521495716s ago: executing program 32 (id=511): socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004628006800000921907864010100ac1414aa820200004e214e2104b1907840740e230d3100000000"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42}, 0x2000400c) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0xa, 0x20, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000000880)={0x1714, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_WOL_MODES={0x10fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "91744ca2ea7b8745bdcd3b9bbc061e38880916d875c78205182ca2dd10b749d322f4091347c720ea1bd11058f2f18ee4613b35af00de5b815a859c8ea2896af155ce38968d7e24969c38df741f5029c51c56bfcf703361fdca1631c384ec3bbd278efead85cee4eff7359585b90f4d94ef7a803adb7eaafe01ae52fce37a5863299141d615def4991f9bab9427421a7b0a7233d24ce24353c779b0015730f0cafa69eae04d3784d7fb5c3b52f848216ad9191587c544"}, @ETHTOOL_A_BITSET_MASK={0x21, 0x5, "a1a9537585288711c112d43dfb6ec4545aa47a6eb340667e322447155c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_WOL_SOPASS={0xf0, 0x3, "3e26fc4b9ad3aec16aa853e62b719a1282052326faf149fc330441aeede68b12a9dd7c032592ae05025779b6fab570c268b29590a642a4eb3185374e39b6bc1d4d595ec5f7e6978680e4fcd821787788b4d63721d760cf391ee61c557ade0c23dd6c75c2cb372a0c5b71ab207a06a57da8c4bd8665ee6323824b9d1cd3a9c6dd69c51dbf83552eabe68ed62df036b4c860046e20135be1d84b2c0b11d8aab06263c4118dce0d148c386d2de05bc3003928f25c4e02a5dd8d2400fc09944ea5bc13062930a4dde2285c1fbb17b121a87bd0aa4e23f4d6102d18af084155ef4a1f7527dc97be33da2425ab8905"}, @ETHTOOL_A_WOL_MODES={0x358, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x21, 0x5, "d7668d6eac6a7391c78cebe6415903f439e3c9a55fcd15c2bb7e943bf6"}, @ETHTOOL_A_BITSET_MASK={0xba, 0x5, "8c70b5cb7532ed353d6bee268a5836572179fe94a98d1ee2dc52a523f481e0f9b521acd07b100337eb77d3dbdfbc719e075dbc588b3cbf3feda44915b725fd2a5ae2498c5ae7958574d21a0fe806a8a9e348965512c953f2d966fb129a59c8725841692bda685f45ca96be8a937bc0c88899b06ef45f4340c9db39b216fc50b1769859c752f7cf3faa7e023206220691288949bdab1d01c2d3b19f70b7fc951fc03c290f068168cebe698b0b269f3a4d1fd1518ae1ea"}, @ETHTOOL_A_BITSET_VALUE={0x81, 0x4, "fdb656fdd6037e8f47d91d4cf84d28585a24d39b065aaf819ddb685535c8d5c0161fcd643b04774fe7da40b2f51e35d43da9a13c76e67f6b4960404d47772f205ee8396bac019045c06b6e084e8947a917efba54f43b33cca4af20da8e7eb79e0711a368d25266a6ebcdec8a71ee2256c1fcafc0767979ddec996a73a0"}, @ETHTOOL_A_BITSET_MASK={0x3b, 0x5, "d8a3d8ca0cbe9701ab7d13a095af8bd4bf9502362fb8cc81a70879f6400ada50a5dde7894443f854659cb6e3fe372d08cd74afba1f2690"}, @ETHTOOL_A_BITSET_MASK={0x53, 0x5, "30d520acfa0ed1ffa7aa1b608d223afeaafc94d6315a9532e9cb6e57f380b5230a67f140b00ea59e378a29259f4026623cee26a27b31e8498a0c26e5768226127114035ecf6a6e6d5e8ab0b9e8f19b"}, @ETHTOOL_A_BITSET_VALUE={0xe7, 0x4, "64daac807d8ee6acfcbc486bb505ace63266c159478ccab8f9d9628e24335a9ca93158aaabdb79dae77b83d7e3862e6177e388009806fc604ea15fc43bcb62c8ccbca8f6e214e9d9f8d86b9dedffe76da444752194f93f50b65b4e5d3aecc88e7edc6bea0d399c17c88d3f2d27891e6de1ed0ba4788551b4fa8826c79450dd3871ed8cc83c2b3ca10636e0fbda4160304bceac61a601bf13f6a080984031711fdc7c33d162da31b841d9d77f1727beef2080362f29c8c49981580b0ba2742809b7675c3b67ea0805d738f124a827eeb97ae7f01a7e50e32a0e8f9e2ab211d4884664b8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'mode\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x37a}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ')]}$.&&-\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '))!\b/#$.\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}, @ETHTOOL_A_WOL_SOPASS={0xe2, 0x3, "c8b6aef7374579c6e9af4dd0b52e359c6317735b8281903eca95a7923ca904c385836701bdec4c1fda979ad32ed89e3768fe6dcf999d6949cc0e0992427a1700d3c325f43d13681ca56ce87cf867bdf1f0aaa0bc9c26595d204e99787a58eebc128aa8b0bcf018b96f9a89eec4d2d52f9d0384538b0bff6da8853e8faeded79ac880800de802599ccf214daf122735b6317015f813a6b1b919d2392a5cb2f73ddbce279c0780a9a0a3baa67f85c6be267f0f4344fff8f01c097965b5276f01106e1f5f4f2396002215a4cdf1fb1e1c0640f4dc820ffada09f34abde8951d"}, @ETHTOOL_A_WOL_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1714}, 0x1, 0x0, 0x0, 0x40}, 0x840) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) read$dsp(0xffffffffffffffff, &(0x7f00000003c0)=""/148, 0x94) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c643c, &(0x7f0000000300)) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = fsopen(&(0x7f0000000380)='udf\x00', 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) setsockopt$rose(r12, 0x104, 0x3, &(0x7f0000000040)=0x9, 0x4) mmap(&(0x7f0000597000/0x3000)=nil, 0x3000, 0x9, 0x28011, r10, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8008001, 0x4, 0x2, 0x4, 0x1, 0xcc7, 0x108, 0x7, 0x4, 0x7ffe, 0x60, 0x40000001, 0x8, 0x40000002, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000002, 0x89, 0x10d, 0xf27, 0x54, 0xc, 0x8, 0x5, 0x40000006, 0x3, 0x10000, 0xfffffff4, 0x4]}) 39.340840053s ago: executing program 4 (id=1650): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xf4101, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd0) ioctl$BSG_IO(r2, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffeac, 0x0, 0x0, &(0x7f0000000c00)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4}) ioctl$EXT4_IOC_MIGRATE(r1, 0xff07) 39.234296449s ago: executing program 4 (id=1651): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x38}, @void, @val={0xc, 0x99, {0x2861, 0x6f}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x40080) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x2, 0x3697eb, 0x3c789a}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 39.143668334s ago: executing program 4 (id=1654): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@ptr={0x2, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x41, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000340)=""/9, 0x2e, 0x9, 0x1, 0x7, 0x10000, @value=r0}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x1b, &(0x7f0000000500)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xd0, &(0x7f0000000240)=""/208, 0x0, 0x48, '\x00', 0x0, @fallback, r1, 0x6}, 0x94) r3 = syz_open_dev$dvb_dvr(&(0x7f00000000c0), 0x1677, 0x80) write$bt_hci(r0, &(0x7f0000000180)={0x1, @read_local_ext_features={{0x1004, 0x1}, {0x9}}}, 0x5) ioctl$DVB_DVR_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000000100)={0x1fd, 0x80000, r2}) 39.082740197s ago: executing program 4 (id=1655): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) syz_emit_ethernet(0x1f, &(0x7f0000001100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="e955f5ea6ade", @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, '/', "a74338", 0x88e7, "840f767ab0bdfcb9cc"}}}}}, 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]}) r0 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) chroot(&(0x7f0000000300)='.\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x72) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000100)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000040)={0x0, r5}) openat(r5, &(0x7f0000000000)='./file0\x00', 0x88442, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/address_bits', 0x220a43, 0x20) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffa}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e21, 0x79a, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x44b6}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @private=0xa010102}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e22, @multicast2}], 0xc4) 39.020479089s ago: executing program 4 (id=1658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)=0x1) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @authinfo={0x12, 0x84, 0x6, {0x3e4}}], 0x30, 0x4}, 0x4040814) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES16=r5], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r3, &(0x7f0000000600)="05d9", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001900110027bf7000060000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000070000142c00fe8000000000000000000000000000bbfc01000000000000000000000000000111000003", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="090023856e41608d"], 0x0) ioctl$LOOP_SET_STATUS(r8, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x4221, 0x12, 0x1d, 0x12, "debecf4e27375b388b4ca2bed5b8c910b17ce2029ba4d3387dd60c8ad1db08e3311ece111cbbe41c70937612766467093df946e7c3707b139f81e70b1e92d1ac", "7f0b89aa85742ddc182ae5396a9be140e423bc3affd3e301446c0a35a3205589", [0x4, 0x400]}) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000225bd700001dcdf2505000000080001007063690011000200303030303a30303a31302e30000000000800030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x2400c851) r10 = accept(r6, 0x0, 0x0) recvmmsg$unix(r10, &(0x7f000000a000)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000340)=""/39, 0x27}], 0x1, &(0x7f00000003c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000480)=""/157, 0x9d}], 0x1, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000003100)=[{&(0x7f0000000740)=""/59, 0x3b}, {&(0x7f0000000780)=""/64, 0x40}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x3, &(0x7f0000003140)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000003200)=@abs, 0x6e, &(0x7f0000007380)=[{&(0x7f0000003280)=""/44, 0x2c}, {&(0x7f00000032c0)=""/64, 0x40}, {&(0x7f0000003300)=""/222, 0xde}, {&(0x7f0000003400)=""/37, 0x25}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/206, 0xce}, {&(0x7f0000007280)=""/215, 0xd7}], 0x7, &(0x7f0000007400)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000008680)=[{&(0x7f00000074c0)=""/4096, 0x1000}, {&(0x7f00000084c0)=""/238, 0xee}, {&(0x7f00000085c0)=""/188, 0xbc}], 0x3, &(0x7f00000086c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000008740), 0x6e, &(0x7f0000008940)=[{&(0x7f00000087c0)=""/161, 0xa1}, {&(0x7f0000008880)=""/175, 0xaf}], 0x2}}, {{&(0x7f0000008980), 0x6e, &(0x7f0000008ac0)=[{&(0x7f0000008a00)=""/129, 0x81}], 0x1, &(0x7f0000008b00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000008b40)=@abs, 0x6e, &(0x7f0000008d00)=[{&(0x7f0000008bc0)=""/70, 0x46}, {&(0x7f0000008c40)=""/137, 0x89}], 0x2, &(0x7f0000008d40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000008d80), 0x6e, &(0x7f0000009f80)=[{&(0x7f0000008e00)=""/4096, 0x1000}, {&(0x7f0000009e00)=""/105, 0x69}, {&(0x7f0000009e80)=""/238, 0xee}], 0x3, &(0x7f0000009fc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}], 0x9, 0x20, &(0x7f000000a240)) read$FUSE(r8, &(0x7f0000004140)={0x2020}, 0xfffffffffffffcde) 38.849062616s ago: executing program 4 (id=1660): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x105082, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000180)={r1, 0x1, &(0x7f00000000c0)=[0x40], &(0x7f0000000100)=[0x8, 0x7fff], &(0x7f0000000140)=[0xff9a, 0x8, 0x7, 0x1, 0x3, 0x3, 0x2, 0x5]}) (async, rerun: 64) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000001c0)=""/180) (async, rerun: 64) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000000280)={r0, 0x5}) (async) connect$pppoe(r2, &(0x7f00000002c0)={0x18, 0x0, {0x2, @multicast, 'nr0\x00'}}, 0x1e) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f00000003c0)={0xa6, &(0x7f0000000300)=""/166}) (async, rerun: 64) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x282000, 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x80000001}}, './file0\x00'}) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xdc, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x6e, 0xa8, @random="2910d3b0e9665c92cdfdbbf8336a3d0c53fbee1faedf1ddc9cacfd88b22fce58505cae9f0d53b58a2a8ce60231b436ef01806b7667b3af9fdee49eb2ff9a3d79b084acfc9f7d2169809a0e3a01e30409d101e3fd9315ef99248d2ee49ed671e1bcf0b3c7dd7e3ff4778f"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x11}, 0x81) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000680)={0x0, 0x4}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000006c0)={0x8, 0x400, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000700)={r6}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@fallback=r3, 0xc, 0x1, 0x7, &(0x7f0000000740)=[0x0], 0x1, 0x0, &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000000880)={0x0, 0x1, r4}) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r7, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) (async, rerun: 32) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x7) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000940)=[r3, r3, r2, r3, r0, r0, r4, r2], 0x8) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000980)={0x0, 0x0, r4}) (async) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000009c0), 0x200100) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r9, 0xc0305302, &(0x7f0000000a00)={0x5, 0x8, 0x5, 0xfffffff8, 0xe8f, 0xf}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000c40)=0xe8) (async) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000c80)={0x8001, 0xff, {}, {0xee00}, 0x9, 0x4}) mount$9p_tcp(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x8000, &(0x7f0000000cc0)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_none}, {@noextend}, {@uname={'uname', 0x3d, '/dev/snd/seq\x00'}}], [{@fowner_gt={'fowner>', r10}}, {@subj_role}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@dont_measure}, {@euid_lt={'euid<', r11}}, {@context={'context', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, '0000:00:10.0\x00'}}, {@uid_gt={'uid>', r12}}]}}) (async) pidfd_getfd(r4, r8, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000000dc0)=@x25, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000e40)=""/188, 0xbc}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/183, 0xb7}, {&(0x7f0000001fc0)=""/134, 0x86}, {&(0x7f0000002080)=""/77, 0x4d}, {&(0x7f0000002100)=""/143, 0x8f}, {&(0x7f00000021c0)=""/35, 0x23}, {&(0x7f0000002200)=""/165, 0xa5}], 0x8, &(0x7f0000002340)=""/236, 0xec}, 0x2) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002540)={0x0, 0x65}, 0x8) 38.791094993s ago: executing program 33 (id=1660): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x105082, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000180)={r1, 0x1, &(0x7f00000000c0)=[0x40], &(0x7f0000000100)=[0x8, 0x7fff], &(0x7f0000000140)=[0xff9a, 0x8, 0x7, 0x1, 0x3, 0x3, 0x2, 0x5]}) (async, rerun: 64) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000001c0)=""/180) (async, rerun: 64) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000000280)={r0, 0x5}) (async) connect$pppoe(r2, &(0x7f00000002c0)={0x18, 0x0, {0x2, @multicast, 'nr0\x00'}}, 0x1e) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f00000003c0)={0xa6, &(0x7f0000000300)=""/166}) (async, rerun: 64) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x282000, 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x80000001}}, './file0\x00'}) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xdc, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x6e, 0xa8, @random="2910d3b0e9665c92cdfdbbf8336a3d0c53fbee1faedf1ddc9cacfd88b22fce58505cae9f0d53b58a2a8ce60231b436ef01806b7667b3af9fdee49eb2ff9a3d79b084acfc9f7d2169809a0e3a01e30409d101e3fd9315ef99248d2ee49ed671e1bcf0b3c7dd7e3ff4778f"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x11}, 0x81) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000680)={0x0, 0x4}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000006c0)={0x8, 0x400, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000700)={r6}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@fallback=r3, 0xc, 0x1, 0x7, &(0x7f0000000740)=[0x0], 0x1, 0x0, &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000000880)={0x0, 0x1, r4}) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r7, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) (async, rerun: 32) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x7) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000940)=[r3, r3, r2, r3, r0, r0, r4, r2], 0x8) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000980)={0x0, 0x0, r4}) (async) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000009c0), 0x200100) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r9, 0xc0305302, &(0x7f0000000a00)={0x5, 0x8, 0x5, 0xfffffff8, 0xe8f, 0xf}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000c40)=0xe8) (async) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000c80)={0x8001, 0xff, {}, {0xee00}, 0x9, 0x4}) mount$9p_tcp(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x8000, &(0x7f0000000cc0)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@cache_none}, {@noextend}, {@uname={'uname', 0x3d, '/dev/snd/seq\x00'}}], [{@fowner_gt={'fowner>', r10}}, {@subj_role}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@dont_measure}, {@euid_lt={'euid<', r11}}, {@context={'context', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, '0000:00:10.0\x00'}}, {@uid_gt={'uid>', r12}}]}}) (async) pidfd_getfd(r4, r8, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000000dc0)=@x25, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000e40)=""/188, 0xbc}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/183, 0xb7}, {&(0x7f0000001fc0)=""/134, 0x86}, {&(0x7f0000002080)=""/77, 0x4d}, {&(0x7f0000002100)=""/143, 0x8f}, {&(0x7f00000021c0)=""/35, 0x23}, {&(0x7f0000002200)=""/165, 0xa5}], 0x8, &(0x7f0000002340)=""/236, 0xec}, 0x2) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002540)={0x0, 0x65}, 0x8) 14.60225608s ago: executing program 3 (id=1929): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES32=r4], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000004c40)=[{{0x0, 0x0, 0x0}, 0x200003}], 0x1, 0x12140, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x62, 0x5, 0x3e0, 0xe0, 0x0, 0xffffffff, 0x0, 0x2a0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0xfe, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x100}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @empty, @remote, @port=0x4e20, @gre_key=0xf5a4}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @private=0xa010101, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES32=r4], 0x1c}}, 0x0) (async) recvmmsg(r0, &(0x7f0000004c40)=[{{0x0, 0x0, 0x0}, 0x200003}], 0x1, 0x12140, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x62, 0x5, 0x3e0, 0xe0, 0x0, 0xffffffff, 0x0, 0x2a0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0xfe, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}, {0x100}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @empty, @remote, @port=0x4e20, @gre_key=0xf5a4}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @private=0xa010101, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) (async) 14.421466887s ago: executing program 3 (id=1930): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x88081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) utime(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x20040000) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg(r2, &(0x7f0000002bc0)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x3, 0x4, 0x1, 0x4, {0xa, 0x4e23, 0x9, @local, 0x100}}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="1af486a5f526f64f983134ffc7aaff50", 0x10}, {&(0x7f0000001780)="788c12dcb9f972ad4fc25a5fc8fa0c8d8c15665c67b1173e805da1de1bf309496838883bca78a6e234c9abe56d9da0fdf1c7a1eca21c5a3407", 0x39}, {&(0x7f00000017c0)="497f588ccd5108f2f64f51bb76fa91e311739f983b0f32a3c757c9d7987d8e162effbee9d107d56ae6a74b0e756e47cfc4b7cc3b76a1a9e59e9bf3d090effc6e20f7f4a4667b0087f13312c6f306c4caf124c266903bf27aa2f5", 0x5a}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="03b2a34b211b72ed3ee2da16a0e8a19349bc681ba6a5277899110d1478101603117618ed91e071a923a91ca7683d78a423f12ec87ddc09e5840d8f435770ffac0dee22af437145bf881a8921799b5de164b02d9601fc8627101eb99fd0fcfed8bbe3c9f3d15b58516277", 0x6a}, {&(0x7f00000028c0)="21cd5678ff6e6943be1abfafcb367fc99de988724d5a18cbc311de36b5460364d61a9d5b4f80ad04b39d7d1421aa48645b7466a93a6b51979d37ee474ad6c1c47c43c34ea609019043", 0x49}], 0x7, &(0x7f00000029c0)=[{0x108, 0x0, 0x0, "d7f14c76f26d5dc707db0ba7c07ce8d63597c983e0600e2c85a3d943e3cea5c5a4395461fc0db701c7586b87acf5243ac0d94c05f03e9238841fca53960af586042d8e6443f099a25de242fefd2d6e456f4bd271b4163696403499d3c9b8e683c2420e7863c0ccfc9c4081a2beea0a5072c7a305b4f91cd031984fba19c44d5ef5436382b49bdbdb65e81f70136bb2aaf5b431d0731f56ad99b3c1661be0640537d486da467bec350558e53c5941d80c730e80c637aba57927bc7a3817809d9480c06e6608ebff87c96705a64bf901690768682932d43c7202a9bf8dd1d62316d3a9da2d3e3c8c2f553dbe2f01bb7bea9c27"}, {0x90, 0x115, 0x9ca7, "17ecc5cd6982da9cbb18492317a39c92e0c00affc5da447e5f350be74d031fb469c0f843b9a1c7c367da3778cbf02aba5b86894c4a76900143bd73fd308007e194e21836c49800d32cc5ab9d0acf5fbfce6ce4bfedc8c974cfb4f0dfa3bc7110cce2811363de27ecbeea7309b4838d2b8ccdb1be45ee2e00fe05e03b"}, {0x48, 0x110, 0x2, "51b7d5a59bccefd80d12514de873e64bb339c61fd865da161e55f517d0a3beb20230c3399b63f9649ccd20dd79ad53e08df949"}], 0x1e0}, 0x44000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002c00)="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", 0x318}], 0x1}, 0x0) 14.420535907s ago: executing program 3 (id=1932): r0 = syz_usb_connect(0x1, 0x3d, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0a00000109022b00010000f2ff08043700022ee5cd0009058010ff037f7902090500f70000090705ab0b782696229be4df59b7606888987d8a9e94e36996aa00000000000000001369f5ee6cf9672a668afb539f1be4728eff6e448eb0d0f26f4abedf786c69e7563a2cea0d6da2797749b0361c9474440707b0ebf9e8ea42c50cc29c9e0c8471ae343f081c487f64b33ae3c775f527dd00c11409ee8385fa3b6fad822d81042bbe2933fbd387bfc49db92d0277000000000000000000", @ANYRES64=0x0], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x72, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201500202000008250587a44000010203010902600038b08100080904000902020600030824060000f4ec7905240037000d240f0104000000000008000f05241502000c24079900ff08000500ff7f08241c000006ff0f09058103100003ed0509058202080034008109050302080078000070c0db"], &(0x7f0000000500)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x4, 0xe0, 0x4, 0x8, 0x4}, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRESHEX], 0x4, [{0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="32038f0fbd297e68e9fc257634b8e074702d7dd6e349b4169feb36d2d49bbd75ff7f000000000000ffb2c800f22fc032f54b"]}, {0x66, &(0x7f0000000640)=ANY=[@ANYBLOB="180388902ece33493bc15022be08000000699b07a458e9cc"]}, {0x12, &(0x7f0000000480)=ANY=[@ANYBLOB="1203010400000000276b1ed1eaf300000000"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44a}}]}) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB="3d000000794a04615178085c47a144b9c50800000000000000be039035fb6e8d0d8c86b6b29c965c0bc57ab55bb42086a567b1cfda849cfa5ee6ade36091da541867069fc73e0934d2938caa9b0a54b523027fc995853c", @ANYRES32=r0, @ANYBLOB="010000000000fcffffff1000000008000600020000001800018014000200776c616e3000000000000000000000000800070002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x4044880) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x200, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x4, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000440)='qnx4\x00', 0x200013, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@deltaction={0x34, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x8d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9ba}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000680)=[{&(0x7f0000000580)="77690efdddcfbe1fbb66fcb1abb15d0a80cc066cf2f78e7b06deaca5748001d7a199fa32614fdb9bda7e081a", 0x2c}, {&(0x7f0000000780)="e0a6923f187055dc350a588b4d53f56b0df249d6e1a90bea0cc0e1e99d880ac3dca4e0a0c6901370f3eb5eb0e66ea14dd9f9c6d95504bc1b4798af85e14998851a23a7c78b5afb4c2b8a7d406204ff93aa5f03b2598fa6b2ac3b26ed70ab6446edbe30c67f8cbf7a96312dc9764ffc9489bce3cdb0818c4019cd2cabb80137247f45dce396156c8494d77562e23387ab76aed46e06a1b48c0598132fedd4f5239260f2445c566a213ec2068edcd980cdb561ee76db12004213c28f07ff012834329fac6f", 0xc4}], 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0xac4002, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c8046}, 0x2000400c) chdir(&(0x7f0000000140)='./file0\x00') r8 = openat$cgroup_ro(r6, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0xc0189436, &(0x7f0000000740)={0x0, 0x3, 0x5, 0x5f, 0x3}) ioctl$UFFDIO_POISON(r7, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r9, 0x0, r7, 0x0, 0x10000008ebc, 0x0) splice(r9, 0x0, r5, 0x0, 0x25a3, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7fec}]}) r11 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000080)={0x7}) close_range(r10, 0xffffffffffffffff, 0x200000000000000) 11.117914973s ago: executing program 3 (id=1951): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x10036, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x100, 0xee, 0x80000001, 0x3, 0x1000045, 0xfffc, 0x9, 0xf, 0xfffffffffffffffd, 0x0, 0xab], 0x8000000, 0x3c4210}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) (async) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000100)={'wlan1\x00', @random="0a0000000100"}) (async) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x7, 0x2012, r3, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 10.797471968s ago: executing program 3 (id=1953): unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_io_uring_setup(0xf82, &(0x7f0000000080)={0x0, 0x80000002, 0x400, 0x3, 0x380}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x60, 0x4004, @fd, 0x7fff, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/64, 0x40}], 0x1, 0xa, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x106, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) write$P9_RREADDIR(r7, &(0x7f00000001c0)={0x2a, 0x29, 0x2, {0x8, [{{0x20, 0x3, 0x2}, 0x9, 0x6, 0x7, './file0'}]}}, 0x2a) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x400100, 0x0) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x7, r7, &(0x7f0000000000)="f61827422abf96c2dbd6645a42095a0e88abcf58a6d0ea9ae5bded17101010f6e9432f4679b28baa90fda0c9e5d71688fd71b91cb3fd45e6a6e1bf535f3aa57d04f86de3a21f46b399033f429754badcadc9ec63aea206f1e51eb197aeed1409fc182069f57181608dcad6d6d968b85da80fae11bc239f2c70544aeb287e4b6483b84f3e2d9a6b7a496cd01e74e45a3e071e67f150d6f49b0b5dd249854ab8cec8d7602ff39419b8d166c878ee746fb4a877f77a56f98ed81e9eb1133818494fd96f82aa320ef034575967d5e3a238217925f4b6e38463c575edaca2ea882c125912a14bc89ebc5ee8ee0e85122a4157f469d3e0afb6", 0xf6, 0x48, 0x0, 0x3, r8}]) fanotify_mark(r7, 0x400, 0x1011, r7, &(0x7f0000000200)='./file0\x00') 10.604827121s ago: executing program 3 (id=1954): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x2e, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000100)=@attr_other={0x0, 0x400, 0x5, &(0x7f0000000040)=0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.158428556s ago: executing program 5 (id=2003): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2084) writev(r2, &(0x7f00000021c0)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f0000002300)="08b5b2c0caf6337a3cabd4830ba9a93fc8cb47b98d0bf44c71e4e4b5f9f3bf4688a45e5b0e157505385d401cec3dad", 0x2f}], 0x2) (async) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) r4 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000149000/0x1000)=nil) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000080)=""/49) (async) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000380)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) sendto$netrom(r6, 0x0, 0xffffff45, 0x0, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) (async) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000080)=0x200, 0x2) (async) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r1, 0x30b}, 0x14}, 0x1, 0x0, 0x0, 0x50000}, 0x2000c891) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1100000004020000040000000a00000000000000828c647f031a879e478f3648f1722e827795146b14edb2865079e01ac11c6c0b970ceb5148a9d647a9c49f2795cb680a220bd2239672aed06570da65047a338d357fe0042a8af83bbb44064e244a58cd0f8bf554a07d86df06e723af08bd25210d0d9309b6f94ed8427d3f38f59eef7f9053a04592d0e4e3f5ab11493339a799ed9470df2bcd0d615cedf6e80ab06dbdbbae7026a53d235fa14fc1d36a5958aa22db1105a036ec4cddc164a8b909097bd277cf801d1e05ac11613ef93d97c133a97ebb04d8072f3020aff80864aed4e818ab036e055cee78ec32a005b0387ccfdff1598219b6d739d0b81e37d0d17e0d9901668f82ac3d5d5ec1f68719a1deecac98186fbae4465a8348f99537009646d7efae62b90a9e7e312ddbe17ffd163d5ebe6605209dd6ecc7680c8ad63f392be6fe145009bfb6ef1b9ab2427f7c1342b5c96accc2c5ee638e1417335831c0271fa337da73151ac636aefe20bc95d1575cf19f8139f311b3f115b5b4b5271a832485a4d2023dc993751789a50bf2e4319ff578be67d32d70ec6fec31814f0d9083a77247f596c3bde7073d9f64ab02d910e2e474794335707865ee0d34a22fdf73211afd4f65e705b06d649ea6810a226d0f7b46eafde3d6d4bd56d12b323b1b432d1738ef9996d5fde78f6effec64ca2a959a99307fd494", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x72bd27, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7, 0x8}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e24}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x2c, 0x0, 0x0, 0x77, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000ffdbdf252d0000000c000500000000000000000008002f000500000005002e000900000006000400a0aa000006bb192394519300"], 0x40}, 0x1, 0x0, 0x0, 0x2c000801}, 0xc0) 4.074076863s ago: executing program 5 (id=2005): msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/37) 4.072625906s ago: executing program 5 (id=2007): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000000c0), 0x4) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r1, 0x309, &(0x7f0000000080)={0xa1, 0x3, 0xfe, 0x5}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e721a23b1}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450200b00000000000019078ac1e0001ac1414aa0300900600000000000000000000000000890000ac141400ac14142a01860dc045d45768dc37efa00000000000ffffffffffffffff444c3d01000000002a42760000000000000000000000000000000000000000ac1414aa000000007f000001000000000000005fb395e800e000000200000000ffffffff00000000ffcdab6dfb000000440800000000000000000000000000000000000000000000000000d00776dacb4bc808dfd4e11a7f9d01d14fdad45da53cfe7e64e8d7b87e414bbe2c67934715b0868ddc6a54da0127a74e46c612eda1def7d4bd571fda2dd44ddf63b6d6519cdbc1fcb9824842ee"], 0x0) 3.816509534s ago: executing program 1 (id=2010): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xf2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @NDA_VLAN={0x6, 0x5, 0x6}]}, 0x30}, 0x1, 0x1000000}, 0x0) recvmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003380)=""/4082, 0xff2}, 0xfffffffc}], 0x1, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 3.759969613s ago: executing program 1 (id=2013): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2200c0d5}, 0x80) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @private}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x80, 0x700, 0xfffffffd, 0x4639cda8, {{0x29, 0x4, 0x2, 0x9, 0xa4, 0x65, 0x0, 0x6, 0x4, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@noop, @ssrr={0x89, 0x13, 0xae, [@rand_addr=0x64010101, @rand_addr=0x401, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x24}]}, @noop, @timestamp_prespec={0x44, 0x24, 0xd4, 0x3, 0x1, [{@local, 0x5}, {@remote, 0x1}, {@loopback}, {@loopback, 0x3}]}, @timestamp_prespec={0x44, 0xc, 0xe5, 0x3, 0x4, [{@empty, 0xff}]}, @timestamp={0x44, 0x1c, 0x5, 0x0, 0xc, [0x4, 0x0, 0x3c9, 0x2, 0x80, 0x6b4c]}, @lsrr={0x83, 0x7, 0xf7, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x7, 0xf1, [@dev={0xac, 0x14, 0x14, 0x34}]}, @ssrr={0x89, 0x1f, 0x62, [@rand_addr=0x64010102, @private=0xa010100, @local, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x3e}, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000380)={@private0, 0x0}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x7, 0x10, 0x2, 0x3, {{0x8, 0x4, 0x3, 0x3, 0x20, 0x65, 0x0, 0x3, 0x2f, 0x0, @private=0xa010101, @remote, {[@end, @timestamp={0x44, 0x8, 0xbd, 0x0, 0x6, [0x7]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x5, 0x6, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@ssrr={0x89, 0x13, 0x83, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @rand_addr=0x64010102]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x12c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) 3.688302341s ago: executing program 5 (id=2015): syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x30, 0x0, @in={0x2, 0x4e23, @local}}}, 0xa0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) open(&(0x7f0000000280)='.\x00', 0x0, 0xc) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 3.686648773s ago: executing program 1 (id=2016): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x9) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000300)="86b362bdacd9ddb236563a8264e7da919e3a380bf4b283fecbdb9e11b05c1444a9a6817ef0a3a717beb9fba66c051f32ab97edf8eac32981b997c9cf5db38bb31de8cf7f94707098d416e0c7334dff89fee9d40071efe6717468d29c8b4fccf21fffc7054a054f9cb6ec203011b01761d3e1531d42fd6a5c5496975ecf6bf1d8fd756e955d5179b3", 0x88}, {&(0x7f0000000480)="7b7faba4c14c032eeca42ed547318d0ec7ec1104a0303597eb3ef98186bd95687c4b5093282d8ef529c4a00207fcfbd7edbabc8cfb43e9d8e69e55b79d0a7cdeac9a99b3b4f5749baa39420966f4421dd11ca13d14cd4ad309039c5972e3909efaeeece6cd04831b39844ae0699cc03c91902db17a9a34b8bac445b3ba03bbe68cb881600599ae1fe136a08182d69d86a1d7fa1dc252fd3b9d8aca40dad8799d83938a5d6127f0cb57b8966a944ec59ed46bdc4d8a", 0xb5}, {&(0x7f0000000540)="079c3f7cc74140ea55c11c0ee029981d254dd5564e3ce8ce2df24fbf7e7007ea973313c5cf5d930d5723dc2e5fc67e7b50232ab912293417a4cd211b3f4b3b4a13af0bb497f089c877ce35bbfb746a001766ecdd9f3454247125a6fd28f9154a8584c5e9fb16e66834f5e773a58d0c260687559124f9f695", 0x78}, {&(0x7f00000005c0)="b8582a4ba769bdf2bf7abe7e7868c538b3f5930eded99659bbaa6a4037ca4abf065d8d8322", 0x25}, {&(0x7f0000000600)="647c72b9d766c01d49583a12532b0825e9aaf83637917fe31f8f8d4d363ea1f2fc51049e316a2276eba657900f6a53402fa88c7b504d4f1eeb23c6e24d06d2a416746b6fa8bc5a91b80561fbb6454ddf7becdc8254a0331128968148ec36383221133a7f3596643ab87ba1ad52b4087465e81f631c9583f2a595938c56caff2b888ca4776a3215cde15db9a913df49b61190aafba5bdb33821d70648fc6cf4cb4278cb", 0xa3}, {&(0x7f0000000700)="aaec53c6d7393335d7d98d6d2fb959252b59e8d8e344e99488d784b2b6141b57be252ffc11cd15bb746a375e63e982f484c1da93a45412710cd6f247101927a61fe1868b397e69e967274e131156dc48d3b710b06b01a43c2b100d5c9120bbb675ee815260bb70c727c2ea960a8080c378c4bd798ed2fe92248aaca74061b383e2120c4c", 0x84}], 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) r5 = socket$rxrpc(0x21, 0x2, 0x2) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r10, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x32162) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r12, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], 0x400000000000005c}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000040)={r13, r8, r9, 0x0, 0x40000, 0x7, 0x2, 0x0, 0x0, 0x0, 0x800, 0x2000000}) 3.249186621s ago: executing program 1 (id=2019): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x1c0, 0x118, 0xffffffff, 0x1c0, 0x268, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0xe0, 0x118, 0x48, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x101}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @icmp_id=0x67, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x7a00, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@rand_addr=0x64010100, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x3, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @gre_key=0xc1c, @port=0x4e23}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x30}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 3.248022544s ago: executing program 1 (id=2021): syz_usb_connect$uac2(0x2, 0xfc, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x499, 0x5009, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x3, 0x1, 0x0, 0xf0, 0x0, {0x8, 0xb, 0x2, 0x2, 0x1, 0xc, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x5, 0x22, 0xa}, [@input_terminal={0x10, 0x24, 0x2, 0x5, 0x101, 0x3, 0x10, 0x2, 0x6270e664, 0xf, 0xc, 0x7}, @selector_unit={0x9, 0x24, 0xb, 0x81, 0x4, "b681ccbb"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xe, 0x4, 0x0, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x10, 0x2, 0xbb, 0x4, 0x9}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xcbb, 0x6, 0x5, "22705a9bf7d5a094"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x800, 0x5, 0x0, 0x10}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x1, 0x7, 0x1, "51e84896"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x63, 0xc1, 0x40, {0x8, 0x25, 0x1, 0x40, 0x0, 0x7, 0x53b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x6, 0x0, 0x9}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x88, 0x7, 0xb8, 0xc6}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x4, 0x8, 0x9, "341ec4fb21f470f028"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x4, 0x8, 0x38, "", "530c89"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x4, 0x8, {0x8, 0x25, 0x1, 0x2, 0x30, 0x40, 0x4}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x110, 0x7a, 0x6, 0x8, 0x20, 0x3}, 0x113, &(0x7f0000000440)={0x5, 0xf, 0x113, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x4407ef3, 0xf0f, 0x5, [0xffc0ff, 0x6000, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x17, 0x1, 0x3, 0x401}, @generic={0xe9, 0x10, 0x3, "5deabf6efdc106bcecbcc85ad34cc1214fa266c682ee11f04b07407a75efa454a80630d325214986531455a37e62e26fad44b30641e04a34d87462df66ec9448a8feead2e90210c30e13265c787926d8a5d9a68ee1a6164dde49de3504c2511c9be12923bf3ae5e42fd68c84dd5b93ff3a2e8183d924ce48d1e84f2175550b0dd877653a57bb333bd134f67fdc46e1d1f1847e2c506ce1470558d53e733b56f3547eefb9b28532996f8b22ac99c76d58db875c942313ab4db955514e472532a2f524838ea32614394d5881d0336653ed40251cc8e243ca041b5aa32f332bcf4daa1014556b95"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3401}}, {0x4e, &(0x7f00000005c0)=@string={0x4e, 0x3, "3d875fc137f8037cee5aeef132dd87709144402f37bb7ca725525959953f09666fc217f9f0078940b0f06b09b734a35ef33eaa16fe2c91c8142c7f29c1b4298086e67bfa293c36d4e0162492"}}]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000100)=[@nested_load_code={0x12e, 0x6a, {0x2, "f3400f09460f1858752e470f2807f23edef1b8010000000f01c16741d955cbf3470fc7b3005000000fc73475396bb9dcc744240000000000c744240289ea0000c7442406000000000f011c24c4e1532a7f02"}}], 0x6a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$key(0xf, 0x3, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000d0a0108"], 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0xa8d4}}, './file0\x00'}) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x1900, [@sadb_key={0x2, 0x8, 0x8, 0x0, "d6"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x8, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x10, 0x17, 0x0, 0x2d92119, 0xfc, 0x2, 0x4, 0xff, 0x0, 0x6, 0x1, 0x0, 0x7, 0x7, 0x4, 0x7, 0x6, 0xfa, '\x00', 0x3, 0x1ff}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3.078350118s ago: executing program 0 (id=2025): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8, 0x7, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_START(r2, 0x5402) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) syz_emit_ethernet(0x14, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863, "5aa772f37902"}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000000a0000010900010073797a3100000000140004801000018008000100666962000400028009f603d524f4784600000000140000001100010000000000000000000100000a60"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00Z\x00\n']) 2.981959381s ago: executing program 0 (id=2026): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001b00)="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", 0x2000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8500, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="650fbae8e0b9a20a00000f32c744240000380000c744240200000000c7442406000000000f011c240f01cbb9800000c00f3235000100000f300f3266b821008ed80f78b1fc3700000f01cac4e17c29b10f000000", 0x54}], 0x1, 0x42, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0xa, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 2.779117362s ago: executing program 0 (id=2027): mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000000)=0x1, 0x6c3, 0x5) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) (async) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x9, &(0x7f0000ffb000/0x2000)=nil, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x1010, 0xffffffffffffffff, 0x10000000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd) (async) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x52]}, 0x8) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xc0800, 0x0) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000240)={'\x00', 0x9, 0x3, 0x5}) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x10010, r0, 0xf8f) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000002c0)={0x2, 0xd}) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00') ioctl$LOOP_CLR_FD(r0, 0x4c01) (async) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000380)=""/101) (async) sendto$inet(r0, &(0x7f0000000400)="e6a2d4e5", 0x4, 0x4004, &(0x7f0000000440)={0x2, 0x4e24, @multicast2}, 0x10) (async) uname(&(0x7f0000000480)=""/119) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000680)={0x0, 0xdee, 0x1, [0x0, 0x5, 0xfff, 0x10000, 0x4], [0x763e, 0x9, 0x9, 0x10000, 0x4, 0x8, 0xb88d, 0xfb, 0x7, 0x7, 0x9, 0xe, 0x10, 0x9, 0x800, 0x10001, 0x6, 0x4, 0x3, 0x3, 0x1, 0x1, 0xf00, 0x8, 0x78, 0x1, 0xf, 0x1d47, 0x6, 0xffffffffffffffcc, 0x0, 0xfffffffffffffffe, 0x33b, 0x22b, 0x1, 0x2, 0x4, 0x5a8, 0xfffffffffffffff8, 0x1, 0x0, 0x80000001, 0x2, 0x3ab, 0x6b, 0x101, 0x400, 0x21, 0xa26, 0x6, 0x8, 0x487b, 0x3, 0xff, 0x8000, 0x10000, 0xad8, 0x8000000000000000, 0x0, 0x3ff, 0x141738a5, 0x4, 0xfffffffffffffffb, 0x3ff, 0x2, 0x2, 0xfffffffffffffffa, 0x8, 0x7, 0x5, 0x400, 0xc3a4, 0x15, 0x2, 0x7fffffffffffffff, 0x7ff, 0x5, 0x9, 0x0, 0x6, 0x21, 0x1, 0x5, 0x8, 0x8, 0x261, 0xa66, 0x1d, 0x7fffffffffffffff, 0x400, 0x3ff, 0xfffffffffffffff4, 0x0, 0x5, 0x35, 0x7fffffffffffffff, 0x0, 0x5, 0xce, 0x296, 0x7fffffffffffffff, 0xe, 0xfffffffffffff0b4, 0x0, 0x80, 0x7, 0x2c, 0x7, 0x8001, 0x8, 0xa7, 0x2b, 0x4, 0x7fff, 0x1, 0x6, 0x6, 0x6, 0x1, 0x7f, 0xfff]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000ac0)={r3, 0x8, 0xdd3, 0x1}) (async) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000ec0)={0x0, {}, 0x0, {}, 0x4, 0x2, 0xb, 0x0, "aa2526356f17c30b3fb3b0c143c3be4b492874bbf7cedf120d5e6f924c8bae0e82479a30d1d9e27501377741e3fe70b2883ede0c1277bcd56c4ebb7a9735fa0d", "e3e34a7522f96b42d26258474fcd9a1d1ffea7639287aff539bb67a021f64fcf", [0x88a1, 0x4]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000f80)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001000)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000fc0)="2f9d7ba77826993ca98748d1e56bb7de17679ff06460f52a3d942df4294f873d041a1c6553c918d19437371d6e", 0x2d, r1}, 0x68) syz_io_uring_setup(0x2534, &(0x7f0000001080)={0x0, 0x77fc, 0x1, 0x3, 0x124, 0x0, r0}, &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)) r4 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000011c0), 0x101040, 0x0) ioctl$XFS_IOC_FSCOUNTS(r4, 0x80205871, &(0x7f0000001200)) openat$kvm(0xffffffffffffff9c, &(0x7f0000001240), 0xc1, 0x0) 2.778858165s ago: executing program 0 (id=2028): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f00000000c0)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@mmap={0xfff, 0xb, 0x4, 0x4000, 0x3, {0x0, 0x2710}, {0x0, 0x8, 0x6, 0x6, 0x3, 0x9, "9b676369"}, 0xc, 0x1, {}, 0x3, 0x0, r1}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2240, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 489.904857ms ago: executing program 0 (id=2029): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x1c0, 0x118, 0xffffffff, 0x1c0, 0x268, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0xe0, 0x118, 0x48, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x101}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @icmp_id=0x67, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xff0, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@rand_addr=0x64010100, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x3, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @gre_key=0xc1c, @port=0x4e23}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x30}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 478.420061ms ago: executing program 0 (id=2030): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x2}, 0x18, 0x0) read$FUSE(r1, 0x0, 0x0) shutdown(r0, 0x2) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x60, &(0x7f0000000500)=ANY=[@ANYRESDEC=r3, @ANYBLOB="8f5fcc22b0d3ba67661f6cff9902caee5782e44b1656df33cc5e458363f775338edfffe0fd22c422e0bd44fa192bf4cabb156a10cb8af4c30ede6713c48b26b7ad48196ad2a9d69566a7104aaca2ab692560b878f018055476114e69c5fc3897c07eaead73ed81f994ec96fda0a202f0379e399cce5b267d7a83ede990c04beb1d1c91e1e4232eafea84213e1da7e80f21bc2a9c7c95dc24f341d0647a495c1116f8ed36ad69ed0ab313a7", @ANYRESOCT=r1], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40e00, 0x1c, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r4) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="04010000", @ANYRES16=r6, @ANYBLOB="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"], 0x104}}, 0x24000080) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_out(r7, 0x5460, 0x0) write$P9_RSTATu(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="8f6d0000"], 0x18f) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000280)=@ethtool_regs={0x4, 0x9}}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18) mknod(&(0x7f0000000140)='./file0\x00', 0x800, 0xff7ffff8) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x10080, &(0x7f00000000c0)='norecovery') r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x75e9, 0x0, 0xf, 0xd, "0062007d82000000000000002240f7ffffff00"}) r9 = syz_open_pts(r8, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$sock_SIOCINQ(r10, 0x541b, &(0x7f0000000000)) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f00000001c0)=r10) 478.203071ms ago: executing program 5 (id=2031): pipe2(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r5, @ANYBLOB="000828bd7000fbdbdf25020000009c0005800800010077647000240002800801000b0000000800020001000000080002003d00000008000100150000000c0002800800020007000000080001007564700008000100756470b7fb6acadba0a0be167c6cb82c8c003400028008000400ff000000080004000700000008000100030000000800030006000000080002000900000008000100bd644f94a802631c55ab8c0d000000070001006962000014000280080003000b000000080001000500000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x30000040) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1\x00', 0x0}) shmctl$SHM_UNLOCK(0x0, 0xc) r9 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r10 = dup(r9) write$sysctl(r10, &(0x7f0000000400)='0\x00', 0x2) r11 = fanotify_init(0x8, 0x80000) fanotify_mark(r11, 0x1, 0x8001021, r10, 0x0) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r12, 0x84, 0x17, 0x0, 0x9) r13 = socket(0x11, 0x2, 0x0) setsockopt(r13, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000110001002bbd700000dcdf2500000000", @ANYRES32=r8, @ANYBLOB], 0x20}}, 0x2000e844) 267.106375ms ago: executing program 5 (id=2032): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000340)=0x30, &(0x7f0000000380)=0x1) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101000) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000440)) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8000) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x3, [@union={0x1, 0x5, 0x0, 0x5, 0x1, 0x7, [{0x2000006, 0x1, 0xfffffff9}, {0xa, 0x4, 0x5}, {0x0, 0x3, 0x3ff}, {0xb, 0x5, 0x4}, {0x7, 0x4, 0x88}]}]}, {0x0, [0x30]}}, &(0x7f0000000180)=""/18, 0x63, 0x12, 0x0, 0x5, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x4, 0xfff, 0x80, 0x0, 0x100, r2, 0x5, '\x00', 0x0, r3, 0x1, 0x1, 0x4}, 0x50) 0s ago: executing program 1 (id=2033): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) file_getattr(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x18, 0x1000) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x54, r1, 0x1, 0xffffbffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c1937}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffd}]}, 0x54}}, 0x2400c0d0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async) read(r5, &(0x7f0000000100)=""/41, 0x29) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0xfffffffffffffd2d}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x16, 0x20000000, 0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) kernel console output (not intermixed with test programs): an invalid length. [ 138.095162][T10017] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 138.098237][T10017] team0: Failed to send options change via netlink (err -105) [ 138.100600][T10017] team0: Port device netdevsim0 added [ 138.222637][T10052] netlink: 'syz.0.1193': attribute type 11 has an invalid length. [ 138.227416][T10051] program syz.3.1192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.255084][T10054] overlayfs: failed to clone upperpath [ 138.295803][T10059] netlink: 'syz.0.1196': attribute type 6 has an invalid length. [ 138.419596][T10083] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20000 [ 138.524652][T10092] nbd: must specify a device to reconfigure [ 138.638327][T10108] netlink: 'syz.3.1209': attribute type 1 has an invalid length. [ 138.654622][T10108] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.040550][ T40] kauditd_printk_skb: 295 callbacks suppressed [ 139.040565][ T40] audit: type=1400 audit(1775683954.677:3477): avc: denied { ioctl } for pid=10124 comm="syz.3.1215" path="/dev/dlm-monitor" dev="devtmpfs" ino=101 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.051206][ T40] audit: type=1400 audit(1775683954.686:3478): avc: denied { allowed } for pid=10124 comm="syz.3.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 139.057634][ T40] audit: type=1400 audit(1775683954.686:3479): avc: denied { create } for pid=10124 comm="syz.3.1215" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 139.065738][ T40] audit: type=1400 audit(1775683954.686:3480): avc: denied { map } for pid=10124 comm="syz.3.1215" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 139.074520][ T40] audit: type=1400 audit(1775683954.686:3481): avc: denied { read write } for pid=10124 comm="syz.3.1215" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 139.082858][ T40] audit: type=1400 audit(1775683954.695:3482): avc: denied { accept } for pid=10129 comm="syz.0.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 139.091565][ T40] audit: type=1400 audit(1775683954.714:3483): avc: denied { perfmon } for pid=10135 comm="syz.3.1217" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.098999][ T40] audit: type=1400 audit(1775683954.733:3484): avc: denied { write } for pid=10135 comm="syz.3.1217" name="swradio6" dev="devtmpfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.150765][ T40] audit: type=1400 audit(1775683954.779:3485): avc: denied { prog_load } for pid=10144 comm="syz.0.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 139.157594][ T40] audit: type=1400 audit(1775683954.779:3486): avc: denied { bpf } for pid=10144 comm="syz.0.1220" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.174401][T10145] netlink: 'syz.0.1220': attribute type 13 has an invalid length. [ 139.228444][T10145] 9pnet_fd: p9_fd_create_unix (10145): problem connecting socket: ./file0: -111 [ 139.273818][T10147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.277350][T10147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.374389][T10161] xt_nfacct: accounting object `syz1' does not exist [ 139.404194][T10162] netlink: 'syz.3.1227': attribute type 20 has an invalid length. [ 139.416807][T10162] overlay: Unknown parameter 'permit_directio' [ 139.474695][T10173] netlink: 'syz.3.1232': attribute type 1 has an invalid length. [ 139.662547][T10189] xt_nfacct: accounting object `syz1' does not exist [ 139.801691][T10204] GUP no longer grows the stack in syz.0.1242 (10204): 200000007000-20000000a000 (200000004000) [ 139.806349][T10204] CPU: 2 UID: 0 PID: 10204 Comm: syz.0.1242 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.806371][T10204] Tainted: [L]=SOFTLOCKUP [ 139.806375][T10204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 139.806383][T10204] Call Trace: [ 139.806389][T10204] [ 139.806394][T10204] dump_stack_lvl+0x100/0x190 [ 139.806421][T10204] gup_vma_lookup.cold+0x83/0x96 [ 139.806441][T10204] __get_user_pages+0x241/0x34d0 [ 139.806461][T10204] ? xdp_umem_create+0x648/0x11e0 [ 139.806525][T10204] ? xsk_setsockopt+0x7d8/0xab0 [ 139.806539][T10204] ? do_sock_setsockopt+0xf3/0x1d0 [ 139.806554][T10204] ? __pfx___get_user_pages+0x10/0x10 [ 139.806568][T10204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.806585][T10204] __gup_longterm_locked+0x279/0x16f0 [ 139.806601][T10204] ? __lock_acquire+0x400/0x2630 [ 139.806616][T10204] ? __pfx___gup_longterm_locked+0x10/0x10 [ 139.806636][T10204] pin_user_pages+0x13c/0x160 [ 139.806650][T10204] ? __pfx_pin_user_pages+0x10/0x10 [ 139.806665][T10204] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 139.806686][T10204] ? security_capable+0x60/0x260 [ 139.806703][T10204] xdp_umem_create+0x723/0x11e0 [ 139.806727][T10204] xsk_setsockopt+0x7d8/0xab0 [ 139.806744][T10204] ? __pfx_xsk_setsockopt+0x10/0x10 [ 139.806760][T10204] ? find_held_lock+0x2b/0x80 [ 139.806776][T10204] ? __fget_files+0x215/0x3d0 [ 139.806794][T10204] ? selinux_socket_setsockopt+0x6a/0x80 [ 139.806880][T10204] ? __pfx_xsk_setsockopt+0x10/0x10 [ 139.806897][T10204] do_sock_setsockopt+0xf3/0x1d0 [ 139.806911][T10204] __sys_setsockopt+0x195/0x220 [ 139.806933][T10204] __x64_sys_setsockopt+0xbd/0x160 [ 139.806950][T10204] ? do_syscall_64+0x95/0xf80 [ 139.806963][T10204] ? lockdep_hardirqs_on+0x78/0x100 [ 139.806984][T10204] do_syscall_64+0x106/0xf80 [ 139.806995][T10204] ? clear_bhb_loop+0x40/0x90 [ 139.807010][T10204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.807022][T10204] RIP: 0033:0x7fb5d6b9c819 [ 139.807033][T10204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.807043][T10204] RSP: 002b:00007fb5d79b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 139.807055][T10204] RAX: ffffffffffffffda RBX: 00007fb5d6e15fa0 RCX: 00007fb5d6b9c819 [ 139.807062][T10204] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 139.807069][T10204] RBP: 00007fb5d6c32c91 R08: 0000000000000020 R09: 0000000000000000 [ 139.807075][T10204] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 139.807081][T10204] R13: 00007fb5d6e16038 R14: 00007fb5d6e15fa0 R15: 00007ffeadd5c0d8 [ 139.807095][T10204] [ 139.953173][T10211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.958904][T10211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.982694][T10213] sp0: Synchronizing with TNC [ 140.038041][T10216] xt_nfacct: accounting object `syz1' does not exist [ 140.066704][ T5933] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 140.070229][ T5933] Bluetooth: hci2: unexpected event for opcode 0x080c [ 140.224989][T10240] batadv_slave_0: Caught tx_queue_len zero misconfig [ 140.269073][T10242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.272583][T10242] batadv_slave_0: entered promiscuous mode [ 140.316055][T10244] netlink: 'syz.0.1256': attribute type 11 has an invalid length. [ 140.318644][T10244] __nla_validate_parse: 9 callbacks suppressed [ 140.318654][T10244] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1256'. [ 140.328081][ T5933] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 140.331688][ T5933] Bluetooth: hci3: unexpected event for opcode 0x080c [ 140.718224][T10261] XFS (loop3): SB validate failed with error -5. [ 140.905796][T10274] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1266'. [ 140.908385][T10274] openvswitch: netlink: Flow key attr not present in new flow. [ 141.067997][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 141.071130][ T5933] Bluetooth: hci1: unexpected event for opcode 0x080c [ 141.233625][T10288] bridge0: entered promiscuous mode [ 141.235608][T10288] bridge0: entered allmulticast mode [ 141.329499][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.331891][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.601531][T10292] netlink: 'syz.0.1274': attribute type 2 has an invalid length. [ 141.693371][T10296] overlayfs: failed to clone upperpath [ 141.761708][T10300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10300 comm=syz.0.1278 [ 141.917804][ T5933] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 141.922339][ T5933] Bluetooth: hci2: unexpected event for opcode 0x080c [ 142.086652][T10309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1282'. [ 142.090295][T10313] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 142.115759][T10316] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1284'. [ 142.178198][T10324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1286'. [ 142.300327][T10331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1288'. [ 142.337999][T10333] netlink: 'syz.3.1289': attribute type 29 has an invalid length. [ 142.373297][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1288'. [ 142.376471][T10331] openvswitch: netlink: Flow actions attr not present in new flow. [ 142.407133][T10334] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1289'. [ 142.417495][T10290] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 142.428348][ T5933] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 142.430867][ T5933] Bluetooth: hci2: unexpected event for opcode 0x080c [ 142.461498][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1292'. [ 142.466086][T10340] capability: warning: `syz.1.1291' uses 32-bit capabilities (legacy support in use) [ 142.490237][T10342] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1293'. [ 142.828739][ T5933] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 142.831346][ T5933] Bluetooth: hci2: unexpected event for opcode 0x080c [ 142.963566][ T5983] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 143.100951][ T5983] usb 6-1: device descriptor read/64, error -71 [ 143.195952][T10381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.201194][T10381] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 143.212480][T10382] dummy0: entered allmulticast mode [ 143.358254][ T5983] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 143.496798][ T5983] usb 6-1: device descriptor read/64, error -71 [ 143.570470][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 143.573865][ T5933] Bluetooth: hci1: unexpected event for opcode 0x080c [ 143.616117][ T5983] usb usb6-port1: attempt power cycle [ 143.622235][T10407] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 143.721144][ T5933] Bluetooth: hci0: command 0x080f tx timeout [ 143.744204][T10413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.747551][T10413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.998992][ T5983] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 144.021032][ T5983] usb 6-1: device descriptor read/8, error -71 [ 144.128333][ T6014] Process accounting resumed [ 144.151057][T10428] Process accounting resumed [ 144.287775][ T5983] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 144.310555][ T5983] usb 6-1: device descriptor read/8, error -71 [ 144.438369][ T5983] usb usb6-port1: unable to enumerate USB device [ 144.447427][T10448] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 144.448056][T10450] SET target dimension over the limit! [ 144.457770][T10448] bond1 (unregistering): Released all slaves [ 144.483918][T10452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10452 comm=syz.0.1327 [ 144.509567][T10453] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 144.515136][T10453] bond1 (unregistering): Released all slaves [ 144.547423][T10456] validate_nla: 3 callbacks suppressed [ 144.547438][T10456] netlink: 'syz.0.1327': attribute type 1 has an invalid length. [ 144.569294][T10456] bond4: (slave bridge5): making interface the new active one [ 144.572201][T10456] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 144.638327][ T40] kauditd_printk_skb: 196 callbacks suppressed [ 144.638340][ T40] audit: type=1326 audit(1775683959.905:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.3.1330" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7c99c819 code=0x7fc00000 [ 144.647183][T10468] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.650098][ T40] audit: type=1400 audit(1775683959.905:3684): avc: denied { read } for pid=10465 comm="syz.4.1329" dev="nsfs" ino=4026533854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 144.652459][T10468] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 144.659786][ T40] audit: type=1400 audit(1775683959.905:3685): avc: denied { open } for pid=10465 comm="syz.4.1329" path="net:[4026533854]" dev="nsfs" ino=4026533854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 144.662792][T10468] audit: backlog limit exceeded [ 144.670383][ T40] audit: type=1400 audit(1775683959.905:3686): avc: denied { create } for pid=10465 comm="syz.4.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.679112][ T40] audit: type=1326 audit(1775683959.905:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10463 comm="syz.3.1330" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7c99c819 code=0x7fc00000 [ 144.687325][T10464] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.690127][T10464] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 145.576695][T10497] netfs: Couldn't get user pages (rc=-14) [ 145.579040][T10497] netfs: Zero-sized read [R=3] [ 145.693762][T10500] netlink: 'syz.4.1340': attribute type 322 has an invalid length. [ 145.762038][T10505] xt_nfacct: accounting object `syz1' does not exist [ 145.775174][T10497] set match dimension is over the limit! [ 145.887131][T10511] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 145.891693][T10511] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 145.892318][T10513] __nla_validate_parse: 11 callbacks suppressed [ 145.892330][T10513] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1345'. [ 145.895709][T10511] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 146.100082][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1347'. [ 146.300050][T10538] xt_nfacct: accounting object `syz1' does not exist [ 146.501992][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1357'. [ 146.505107][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1357'. [ 146.523863][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1357'. [ 146.541391][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1357'. [ 146.604813][T10553] infiniband syz0: set active [ 146.625330][T10553] infiniband syz0: added veth0_vlan [ 146.679012][T10560] SELinux: policydb string does not match my string SE Linux [ 146.688545][T10560] SELinux: failed to load policy [ 146.705621][T10553] RDS/IB: syz0: added [ 146.728960][T10553] smc: adding ib device syz0 with port count 1 [ 146.737190][T10553] smc: ib device syz0 port 1 has no pnetid [ 147.061198][T10569] xt_nfacct: accounting object `syz1' does not exist [ 147.137183][T10572] lo: Caught tx_queue_len zero misconfig [ 147.167803][T10572] fuse: Bad value for 'fd' [ 147.211921][ T5933] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1 [ 147.212043][ T5933] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 147.236147][ T5933] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 147.241642][ T5933] Bluetooth: hci2: unexpected event for opcode 0x080c [ 147.273116][T10581] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 147.289525][T10586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=10586 comm=syz.4.1367 [ 147.293942][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1367'. [ 147.402057][T10598] netlink: zone id is out of range [ 147.404062][T10598] netlink: set zone limit has 4 unknown bytes [ 147.406321][ T92] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.406366][ T92] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.636089][T10621] sp0: Synchronizing with TNC [ 147.697949][T10621] SELinux: failed to load policy [ 148.110162][T10664] xt_hashlimit: size too large, truncated to 1048576 [ 148.157275][T10661] netlink: 'syz.0.1389': attribute type 2 has an invalid length. [ 148.168259][T10661] netlink: 'syz.0.1389': attribute type 1 has an invalid length. [ 148.172468][T10661] netlink: 'syz.0.1389': attribute type 1 has an invalid length. [ 148.272418][T10674] overlayfs: workdir and upperdir must be separate subtrees [ 148.372776][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.377557][T10680] cramfs: wrong magic [ 148.380096][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.404104][T10680] cramfs: wrong magic [ 148.406979][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.413102][T10680] cramfs: wrong magic [ 148.416491][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.418926][T10680] cramfs: wrong magic [ 148.420809][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.423218][T10680] cramfs: wrong magic [ 148.425729][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.428617][T10680] cramfs: wrong magic [ 148.430550][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1395'. [ 148.430787][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.437836][T10680] cramfs: wrong magic [ 148.440048][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.442638][T10680] cramfs: wrong magic [ 148.444499][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.448189][T10680] cramfs: wrong magic [ 148.450451][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.452962][T10680] cramfs: wrong magic [ 148.455149][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.460918][T10680] cramfs: wrong magic [ 148.464107][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.466513][T10680] cramfs: wrong magic [ 148.480139][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.482823][T10680] cramfs: wrong magic [ 148.485072][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.489267][T10680] cramfs: wrong magic [ 148.495263][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.497994][T10680] cramfs: wrong magic [ 148.500992][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.503452][T10680] cramfs: wrong magic [ 148.506183][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.508618][T10680] cramfs: wrong magic [ 148.511440][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.514019][T10680] cramfs: wrong magic [ 148.516381][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.519445][T10680] cramfs: wrong magic [ 148.523994][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.526408][T10680] cramfs: wrong magic [ 148.528485][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.531024][T10680] cramfs: wrong magic [ 148.534269][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.536661][T10680] cramfs: wrong magic [ 148.538439][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.540984][T10680] cramfs: wrong magic [ 148.544574][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.547111][T10680] cramfs: wrong magic [ 148.548868][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.551318][T10680] cramfs: wrong magic [ 148.553540][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.555981][T10680] cramfs: wrong magic [ 148.557821][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.560449][T10680] cramfs: wrong magic [ 148.562516][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.565891][T10680] cramfs: wrong magic [ 148.567693][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.570162][T10680] cramfs: wrong magic [ 148.572015][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.576330][T10680] cramfs: wrong magic [ 148.578215][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.580923][T10680] cramfs: wrong magic [ 148.583811][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.587424][T10680] cramfs: wrong magic [ 148.589673][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.592250][T10680] cramfs: wrong magic [ 148.594052][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.601117][T10680] cramfs: wrong magic [ 148.603613][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.607986][T10680] cramfs: wrong magic [ 148.610460][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.613624][T10680] cramfs: wrong magic [ 148.615990][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.619365][T10680] cramfs: wrong magic [ 148.621908][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.625425][T10680] cramfs: wrong magic [ 148.628047][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.631225][T10680] cramfs: wrong magic [ 148.633641][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.636850][T10680] cramfs: wrong magic [ 148.639711][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.643282][T10680] cramfs: wrong magic [ 148.645687][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.648855][T10680] cramfs: wrong magic [ 148.653127][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.656573][T10680] cramfs: wrong magic [ 148.659253][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.663021][T10680] cramfs: wrong magic [ 148.665398][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.668507][T10680] cramfs: wrong magic [ 148.671225][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.674576][T10680] cramfs: wrong magic [ 148.677743][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.681551][T10680] cramfs: wrong magic [ 148.683922][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.687060][T10680] cramfs: wrong magic [ 148.689478][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.694206][T10680] cramfs: wrong magic [ 148.696638][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.699818][T10680] cramfs: wrong magic [ 148.702250][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.705792][T10680] cramfs: wrong magic [ 148.708369][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.711610][T10680] cramfs: wrong magic [ 148.716382][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.719226][T10680] cramfs: wrong magic [ 148.721627][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.727213][T10680] cramfs: wrong magic [ 148.729607][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.732958][T10680] cramfs: wrong magic [ 148.736375][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.739518][T10680] cramfs: wrong magic [ 148.741937][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.745363][T10680] cramfs: wrong magic [ 148.748198][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.751566][T10680] cramfs: wrong magic [ 148.753964][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.757396][T10680] cramfs: wrong magic [ 148.759830][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.763279][T10680] cramfs: wrong magic [ 148.765878][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.771862][T10680] cramfs: wrong magic [ 148.774274][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.777504][T10680] cramfs: wrong magic [ 148.784815][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.789692][T10680] cramfs: wrong magic [ 148.792147][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.795395][T10680] cramfs: wrong magic [ 148.797936][T10680] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 148.801673][T10680] cramfs: wrong magic [ 149.068248][T10700] tmpfs: Bad value for 'mpol' [ 149.134402][T10700] cdrom: dropping to single frame dma [ 149.611354][T10717] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1406'. [ 149.662761][T10722] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1408'. [ 149.985735][ T40] kauditd_printk_skb: 9176 callbacks suppressed [ 149.985751][ T40] audit: type=1400 audit(1775683964.910:12863): avc: denied { read write } for pid=8493 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.998402][ T40] audit: type=1400 audit(1775683964.910:12864): avc: denied { open } for pid=8493 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 150.006120][ T40] audit: type=1400 audit(1775683964.910:12865): avc: denied { ioctl } for pid=8493 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 150.018353][ T40] audit: type=1400 audit(1775683964.929:12866): avc: denied { read } for pid=10730 comm="syz.3.1412" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 150.025844][ T40] audit: type=1400 audit(1775683964.929:12867): avc: denied { open } for pid=10730 comm="syz.3.1412" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 150.097928][ T40] audit: type=1400 audit(1775683965.022:12868): avc: denied { read write } for pid=10742 comm="syz.4.1415" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.101971][T10743] 9p: Unknown uid 00000000004294967295 [ 150.124684][ T40] audit: type=1400 audit(1775683965.022:12869): avc: denied { open } for pid=10742 comm="syz.4.1415" path="/dev/dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 150.132734][ T40] audit: type=1400 audit(1775683965.022:12870): avc: denied { create } for pid=10742 comm="syz.4.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 150.141975][ T40] audit: type=1400 audit(1775683965.022:12871): avc: denied { getopt } for pid=10742 comm="syz.4.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 150.178880][ T40] audit: type=1400 audit(1775683965.022:12872): avc: denied { mounton } for pid=10742 comm="syz.4.1415" path="/118/file0" dev="tmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.384300][T10760] ptrace attach of "/syz-executor exec"[10763] was attempted by "/syz-executor exec"[10760] [ 150.687127][ T5933] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 150.691778][ T5933] Bluetooth: hci2: unexpected event for opcode 0x080c [ 150.740645][T10781] hsr_slave_1 (unregistering): left promiscuous mode [ 150.852310][T10784] bond5: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 150.857107][T10784] bond5: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 150.861703][T10785] bond5: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 150.947908][ T6024] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 151.134790][ T6024] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 151.138902][ T6024] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.143691][ T6024] usb 8-1: Product: syz [ 151.145652][ T6024] usb 8-1: Manufacturer: syz [ 151.147680][ T6024] usb 8-1: SerialNumber: syz [ 151.152122][T10801] netlink: 'syz.4.1433': attribute type 1 has an invalid length. [ 151.163731][ T6024] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 151.178602][T10801] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 151.182498][T10801] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 151.193263][T10801] bond1: (slave ip6gre1): making interface the new active one [ 151.198928][T10801] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 151.205560][ T6000] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 151.286987][T10810] xt_nfacct: accounting object `syz1' does not exist [ 151.366514][T10817] __nla_validate_parse: 9 callbacks suppressed [ 151.366528][T10817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1439'. [ 151.374817][T10817] gtp0: entered promiscuous mode [ 151.571532][ T5933] Bluetooth: hci0: unexpected event for opcode 0x080c [ 151.652979][T10776] [U] [ 151.655401][ T6024] usb 8-1: USB disconnect, device number 9 [ 151.759387][T10839] xt_nfacct: accounting object `syz1' does not exist [ 152.219709][T10844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.223550][T10844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.331113][ T5933] Bluetooth: hci1: unexpected event for opcode 0x080c [ 152.387296][T10863] xt_nfacct: accounting object `syz1' does not exist [ 152.415982][T10865] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 152.419894][T10865] qnx6: wrong signature (magic) in superblock #1. [ 152.422223][T10865] qnx6: unable to read the first superblock [ 152.440854][T10865] binder: 10864:10865 unknown command 0 [ 152.440854][T10869] binder: 10864:10869 unknown command 0 [ 152.440875][T10869] binder: 10864:10869 ioctl c0306201 200000000080 returned -22 [ 152.443294][T10865] binder: 10864:10865 ioctl c0306201 200000000080 returned -22 [ 152.444137][T10870] netlink: 'syz.1.1459': attribute type 30 has an invalid length. [ 152.457808][T10870] bond8: option arp_missed_max: invalid value (0) [ 152.460372][T10870] bond8: option arp_missed_max: allowed values 1 - 255 [ 152.475413][T10870] bond8 (unregistering): Released all slaves [ 152.540739][ T6000] usb 8-1: Service connection timeout for: 256 [ 152.543066][ T6000] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 152.548828][ T6000] ath9k_htc: Failed to initialize the device [ 152.553764][ T6024] usb 8-1: ath9k_htc: USB layer deinitialized [ 152.609144][T10887] syzkaller0: entered promiscuous mode [ 152.611141][T10887] syzkaller0: entered allmulticast mode [ 152.639232][ T5933] Bluetooth: hci1: unexpected event for opcode 0x080c [ 152.772081][T10900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1466'. [ 152.810122][T10901] 9p: Bad value for 'version' [ 152.854102][T10905] xt_nfacct: accounting object `syz1' does not exist [ 152.990868][T10917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.040318][ T5933] Bluetooth: hci3: unexpected event for opcode 0x080c [ 153.347368][T10930] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1477'. [ 153.654110][T10944] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 153.886024][T10966] netlink: 'syz.3.1490': attribute type 3 has an invalid length. [ 153.964893][T10978] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1492'. [ 153.972617][T10978] openvswitch: netlink: IP tunnel dst address not specified [ 154.124397][T10978] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1492'. [ 154.231248][ T5983] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 154.233009][ T5933] Bluetooth: hci2: unexpected event for opcode 0x080c [ 154.401447][ T5983] usb 8-1: Using ep0 maxpacket: 32 [ 154.407138][ T5983] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 154.409847][ T5983] usb 8-1: config 0 has no interface number 0 [ 154.412781][ T5983] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 154.416825][ T5983] usb 8-1: config 0 interface 196 has no altsetting 0 [ 154.428784][ T5983] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 154.432689][ T5983] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.437456][ T5983] usb 8-1: Product: syz [ 154.439434][ T5983] usb 8-1: Manufacturer: syz [ 154.441487][ T5983] usb 8-1: SerialNumber: syz [ 154.447011][ T5983] usb 8-1: config 0 descriptor?? [ 154.450632][T10966] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 154.530435][T11008] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.1502'. [ 154.536764][T11008] netlink: 'syz.0.1502': attribute type 1 has an invalid length. [ 154.669747][T11016] Bluetooth: MGMT ver 1.23 [ 154.711365][ T5933] Bluetooth: hci0: unexpected event for opcode 0x080c [ 154.811622][T11025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1508'. [ 154.891513][ T5983] ipheth 8-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 154.895074][ T5983] ipheth 8-1:0.196: probe with driver ipheth failed with error -71 [ 154.902194][ T5983] usb 8-1: USB disconnect, device number 10 [ 155.050574][T11030] qrtr: Invalid version 138 [ 155.349206][ T40] kauditd_printk_skb: 844 callbacks suppressed [ 155.349226][ T40] audit: type=1400 audit(1775683969.933:13717): avc: denied { read write } for pid=11039 comm="syz.4.1514" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.360168][T11041] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1514'. [ 155.363157][ T40] audit: type=1400 audit(1775683969.933:13718): avc: denied { open } for pid=11039 comm="syz.4.1514" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.364404][T11042] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1514'. [ 155.380043][ T40] audit: type=1400 audit(1775683969.933:13719): avc: denied { ioctl } for pid=11039 comm="syz.4.1514" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.390512][ T40] audit: type=1400 audit(1775683969.933:13720): avc: denied { create } for pid=11039 comm="syz.4.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.399234][ T40] audit: type=1400 audit(1775683969.933:13721): avc: denied { write } for pid=11039 comm="syz.4.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.408210][ T40] audit: type=1400 audit(1775683969.933:13722): avc: denied { read } for pid=11039 comm="syz.4.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.414881][ T40] audit: type=1400 audit(1775683969.942:13723): avc: denied { ioctl } for pid=11039 comm="syz.4.1514" path="socket:[35337]" dev="sockfs" ino=35337 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.423992][ T40] audit: type=1400 audit(1775683969.942:13724): avc: denied { ioctl } for pid=11039 comm="syz.4.1514" path="socket:[34544]" dev="sockfs" ino=34544 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.451521][ T40] audit: type=1400 audit(1775683970.026:13725): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.460365][ T40] audit: type=1400 audit(1775683970.026:13726): avc: denied { open } for pid=5935 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 156.315823][ T5933] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 156.382137][ T5933] Bluetooth: hci0: SCO packet for unknown connection handle 3799 [ 156.382408][ T5933] Bluetooth: hci0: unexpected event for opcode 0x0404 [ 156.554035][T11055] binder: 11054:11055 ioctl c0306201 2000000001c0 returned -14 [ 156.589138][T11057] xt_nfacct: accounting object `syz1' does not exist [ 156.639112][T11059] netlink: 'syz.1.1521': attribute type 1 has an invalid length. [ 156.653718][T11059] 8021q: adding VLAN 0 to HW filter on device bond8 [ 156.664741][T11059] vlan2: entered allmulticast mode [ 156.666533][T11059] bond8: entered allmulticast mode [ 156.686777][T11059] bond8: (slave geneve3): making interface the new active one [ 156.699448][T11059] geneve3: entered allmulticast mode [ 156.702761][T11059] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 156.730458][ T5933] Bluetooth: hci0: unexpected event for opcode 0x080c [ 156.763510][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1522'. [ 157.011250][ T5933] Bluetooth: hci3: unexpected event for opcode 0x080c [ 157.298215][T11107] xt_nfacct: accounting object `syz1' does not exist [ 157.414966][T11113] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 157.744808][T11144] xt_nfacct: accounting object `syz1' does not exist [ 157.768920][T11145] 9p: Bad value for 'rfdno' [ 157.781618][T11146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=11146 comm=syz.0.1546 [ 157.831766][T11152] openvswitch: netlink: IP tunnel dst address not specified [ 157.862858][T11153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.867902][T11140] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1546'. [ 158.011792][T11159] xfrm0: Caught tx_queue_len zero misconfig [ 158.261403][T11174] team0 (unregistering): Port device team_slave_0 removed [ 158.270593][T11174] team0 (unregistering): Port device team_slave_1 removed [ 158.281760][T11174] team0 (unregistering): Port device netdevsim0 removed [ 158.356521][ T5976] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 158.387524][T11179] syz.4.1557 (11179) used obsolete PPPIOCDETACH ioctl [ 158.527540][ T5976] usb 6-1: Using ep0 maxpacket: 8 [ 158.540358][ T5976] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 158.543133][ T5976] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.546199][ T5976] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.550136][ T5976] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.553907][ T5976] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.558548][ T5976] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 158.565657][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.729388][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1561'. [ 158.768603][T11191] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.795311][ T5976] usb 6-1: usb_control_msg returned -32 [ 158.797302][ T5976] usbtmc 6-1:16.0: can't read capabilities [ 159.016224][T11200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1563'. [ 159.284335][T11205] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1565'. [ 159.527335][T11209] netlink: 'syz.4.1566': attribute type 2 has an invalid length. [ 159.531271][T11209] netlink: 'syz.4.1566': attribute type 1 has an invalid length. [ 159.534751][T11209] netlink: 'syz.4.1566': attribute type 1 has an invalid length. [ 160.204350][T11223] No source specified [ 160.400104][ T5933] Bluetooth: hci0: unexpected event for opcode 0x080c [ 160.701346][ T40] kauditd_printk_skb: 603 callbacks suppressed [ 160.701360][ T40] audit: type=1400 audit(1775683974.937:14330): avc: denied { create } for pid=11248 comm="syz.3.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.703914][T11249] nfs: Unknown parameter './file0' [ 160.710894][ T40] audit: type=1400 audit(1775683974.937:14331): avc: denied { mounton } for pid=11248 comm="syz.3.1581" path="/398" dev="tmpfs" ino=2147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 160.720056][ T40] audit: type=1400 audit(1775683974.947:14332): avc: denied { write } for pid=11248 comm="syz.3.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.727072][ T40] audit: type=1400 audit(1775683974.947:14333): avc: denied { read write } for pid=11248 comm="syz.3.1581" name="vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 160.736517][ T40] audit: type=1400 audit(1775683974.947:14334): avc: denied { open } for pid=11248 comm="syz.3.1581" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 160.745555][ T40] audit: type=1400 audit(1775683974.947:14335): avc: denied { ioctl } for pid=11248 comm="syz.3.1581" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 160.754468][ T40] audit: type=1400 audit(1775683974.947:14336): avc: denied { ioctl } for pid=11248 comm="syz.3.1581" path="socket:[37221]" dev="sockfs" ino=37221 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.764014][ T40] audit: type=1400 audit(1775683974.947:14337): avc: denied { write } for pid=11248 comm="syz.3.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 160.774827][ T40] audit: type=1400 audit(1775683974.956:14338): avc: denied { search } for pid=11247 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.781862][ T40] audit: type=1400 audit(1775683974.975:14339): avc: denied { read write } for pid=8493 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.817215][T11256] bond2: Unable to set down delay as MII monitoring is disabled [ 160.821980][T11256] bond2 (unregistering): Released all slaves [ 161.066663][T11274] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 161.154219][ T5933] Bluetooth: hci1: unexpected event for opcode 0x080c [ 161.174777][T11287] netlink: 'syz.4.1591': attribute type 4 has an invalid length. [ 161.177638][T11287] netlink: 'syz.4.1591': attribute type 4 has an invalid length. [ 161.181885][T11287] netlink: 'syz.4.1591': attribute type 4 has an invalid length. [ 161.333500][T11302] syzkaller0: entered promiscuous mode [ 161.335449][T11302] syzkaller0: entered allmulticast mode [ 161.351986][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1596'. [ 161.461262][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 161.464272][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1600'. [ 161.591223][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1603'. [ 161.594085][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1603'. [ 161.597595][T11325] netlink: 'syz.4.1603': attribute type 15 has an invalid length. [ 162.509890][T11342] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 162.514812][T11342] ip6gretap2: entered promiscuous mode [ 162.625328][T11349] SET target dimension over the limit! [ 162.791916][T11354] ip6tnl0: Caught tx_queue_len zero misconfig [ 162.806203][T11359] netlink: 'syz.4.1614': attribute type 29 has an invalid length. [ 162.809738][T11359] netlink: 'syz.4.1614': attribute type 29 has an invalid length. [ 162.813266][T11359] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1614'. [ 163.073474][T11371] bond0: Caught tx_queue_len zero misconfig [ 163.406676][T11390] sp0: Synchronizing with TNC [ 163.418414][T11390] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 163.541091][T11394] netlink: 'syz.0.1626': attribute type 1 has an invalid length. [ 163.589331][T11394] fuse: Bad value for 'fd' [ 163.674240][T11406] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 164.261418][T11431] xt_nfacct: accounting object `syz1' does not exist [ 164.470876][T11440] netlink: 'syz.0.1641': attribute type 1 has an invalid length. [ 164.485938][T11440] bond6: entered promiscuous mode [ 164.488334][T11440] 8021q: adding VLAN 0 to HW filter on device bond6 [ 164.496466][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1641'. [ 164.499398][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1641'. [ 164.510295][T11440] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1641'. [ 164.527508][T11440] bond6: (slave bridge6): making interface the new active one [ 164.531081][T11440] bridge6: entered promiscuous mode [ 164.535169][T11440] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 164.555810][T11446] netlink: 'syz.3.1644': attribute type 64 has an invalid length. [ 164.558737][T11446] netlink: 'syz.3.1644': attribute type 4 has an invalid length. [ 164.561829][T11446] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1644'. [ 164.650430][T11457] FAT-fs (sr0): bogus number of reserved sectors [ 164.653729][T11457] FAT-fs (sr0): Can't find a valid FAT filesystem [ 165.019483][T11210] usbtmc 6-1:16.0: usb_control_msg returned -110 [ 165.030777][ T886] usb 6-1: USB disconnect, device number 13 [ 165.065011][T11483] tmpfs: Cannot disable swap on remount [ 165.100406][T11485] program syz.1.1656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.241702][ T5976] usb 9-1: USB disconnect, device number 6 [ 165.428913][T11495] dlm: no locking on control device [ 165.450160][T11495] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1661'. [ 165.476689][ T58] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 165.489577][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.494282][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.498445][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.501887][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.504735][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.649249][ T58] usb 8-1: config 0 has no interfaces? [ 165.651712][ T58] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.655098][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.672236][ T58] usb 8-1: config 0 descriptor?? [ 165.684579][T11502] netlink: 'syz.1.1663': attribute type 33 has an invalid length. [ 165.687250][T11502] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1663'. [ 165.724316][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1663'. [ 165.727255][T11502] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1663'. [ 165.730658][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1663'. [ 165.753520][T11496] chnl_net:caif_netlink_parms(): no params data found [ 165.833831][T11496] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.836226][T11496] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.839070][T11496] bridge_slave_0: entered allmulticast mode [ 165.844219][T11496] bridge_slave_0: entered promiscuous mode [ 165.849842][T11496] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.853489][T11496] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.855848][T11496] bridge_slave_1: entered allmulticast mode [ 165.858475][T11496] bridge_slave_1: entered promiscuous mode [ 165.875329][T11496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.879936][T11496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.892651][ T58] usb 8-1: USB disconnect, device number 11 [ 165.906898][T11496] team0: Port device team_slave_0 added [ 165.910510][T11496] team0: Port device team_slave_1 added [ 165.948631][T11525] 8021q: adding VLAN 0 to HW filter on device bond10 [ 165.954380][T11496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.958295][T11496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.967043][T11496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.974258][T11525] ipvlan2: entered allmulticast mode [ 165.976164][T11525] bond10: entered allmulticast mode [ 165.979598][T11496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.982076][T11496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.991131][T11496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.008778][T11525] bridge5: entered allmulticast mode [ 166.012278][T11525] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 166.016724][ T5933] Bluetooth: hci3: unexpected event 0x2c length: 8 < 17 [ 166.041029][T11496] hsr_slave_0: entered promiscuous mode [ 166.043772][T11496] hsr_slave_1: entered promiscuous mode [ 166.046372][T11496] debugfs: 'hsr0' already exists in 'hsr' [ 166.048375][T11496] Cannot create hsr debugfs directory [ 166.055500][ T40] kauditd_printk_skb: 846 callbacks suppressed [ 166.055513][ T40] audit: type=1400 audit(1775683979.951:15186): avc: denied { read } for pid=11527 comm="syz.1.1670" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.065770][ T40] audit: type=1400 audit(1775683979.951:15187): avc: denied { open } for pid=11527 comm="syz.1.1670" path="/dev/ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.074497][ T40] audit: type=1400 audit(1775683979.951:15188): avc: denied { ioctl } for pid=11527 comm="syz.1.1670" path="/dev/ptp1" dev="devtmpfs" ino=1288 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 166.084089][ T40] audit: type=1400 audit(1775683979.951:15189): avc: denied { prog_load } for pid=11527 comm="syz.1.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 166.091993][ T40] audit: type=1400 audit(1775683979.951:15190): avc: denied { bpf } for pid=11527 comm="syz.1.1670" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.100831][ T40] audit: type=1400 audit(1775683979.951:15191): avc: denied { prog_load } for pid=11527 comm="syz.1.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 166.107956][ T40] audit: type=1400 audit(1775683979.951:15192): avc: denied { perfmon } for pid=11527 comm="syz.1.1670" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.114612][ T40] audit: type=1400 audit(1775683979.951:15193): avc: denied { bpf } for pid=11527 comm="syz.1.1670" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.122044][ T40] audit: type=1400 audit(1775683979.951:15194): avc: denied { prog_run } for pid=11527 comm="syz.1.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 166.129084][ T40] audit: type=1400 audit(1775683979.951:15195): avc: denied { read write } for pid=11527 comm="syz.1.1670" name="v4l-subdev3" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 166.160209][T11496] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.165727][T11496] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 166.169850][T11496] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 166.175555][T11496] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 166.196081][T11496] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.198463][T11496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.201192][T11496] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.204643][T11496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.251735][T11496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.262379][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.265413][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.271140][T11496] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.277792][ T7519] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.280209][ T7519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.289537][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.291976][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.350299][T11543] netlink: 'syz.1.1673': attribute type 12 has an invalid length. [ 166.465886][T11496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.497089][T11549] binder: 11548:11549 ioctl 703 300 returned -22 [ 166.511410][T11549] netlink: 'syz.3.1674': attribute type 1 has an invalid length. [ 166.560468][T11553] xt_nfacct: accounting object `syz1' does not exist [ 166.620603][ T886] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 166.668969][T11496] veth0_vlan: entered promiscuous mode [ 166.675547][T11496] veth1_vlan: entered promiscuous mode [ 166.696923][T11496] veth0_macvtap: entered promiscuous mode [ 166.702044][T11496] veth1_macvtap: entered promiscuous mode [ 166.714460][T11496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.723874][T11496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.736306][ T7511] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.743819][ T7511] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.757762][ T7511] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.761592][ T7511] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.814466][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.817742][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.823663][ T886] usb 6-1: Using ep0 maxpacket: 8 [ 166.830815][ T886] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.865253][ T886] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.886061][ T886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.918856][ T886] usb 6-1: config 0 descriptor?? [ 166.947178][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.950536][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.148952][ T886] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 167.193093][ T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.199923][ T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.202826][ T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.206200][ T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.331787][T11572] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3642988519 (466302530432 ns) > initial count (459226025088 ns). Using initial count to start timer. [ 167.424277][ T39] usb 6-1: USB disconnect, device number 14 [ 167.424295][ C0] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 167.509965][T11577] dns_resolver: Unsupported server list version (0) [ 167.680995][ T5933] Bluetooth: hci0: command tx timeout [ 167.734802][ T6000] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 167.916301][ T6000] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 167.919695][ T6000] usb 10-1: config 1 has no interface number 0 [ 167.922545][ T6000] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 167.946299][ T6000] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64 [ 167.949444][ T6000] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 167.954169][T11591] tipc: Enabling of bearer rejected, failed to enable media [ 167.954922][ T6000] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 167.961279][ T6000] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.963898][ T6000] usb 10-1: Product: syz [ 167.965249][ T6000] usb 10-1: Manufacturer: syz [ 167.966731][ T6000] usb 10-1: SerialNumber: syz [ 167.973282][T11575] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 167.976396][T11575] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 167.984463][ T6000] usb 10-1: Error in usbnet_get_endpoints (-22) [ 168.015923][T11591] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 168.166849][T11600] __nla_validate_parse: 5 callbacks suppressed [ 168.166865][T11600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1689'. [ 168.549454][T11622] evm: overlay not supported [ 168.554185][T11622] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 168.559100][T11622] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 168.585035][T11624] comedi comedi3: dt2817: I/O port conflict (0x20d00,5) [ 168.591390][T11624] syzkaller0: entered promiscuous mode [ 168.593530][T11624] syzkaller0: entered allmulticast mode [ 168.600421][T11624] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1681'. [ 168.711961][T11631] vlan3: entered promiscuous mode [ 168.713902][T11631] bridge0: entered promiscuous mode [ 168.854153][T11641] program syz.1.1700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.894232][T11648] xt_nfacct: accounting object `syz1' does not exist [ 168.918177][T11650] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 168.921849][T11650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.993677][T11599] 9pnet_fd: p9_fd_create_tcp (11599): problem connecting socket to 127.0.0.1 [ 169.145071][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.147586][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.150455][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.153009][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.165976][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.169491][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.172974][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.176832][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.180574][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.183860][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.187278][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.190534][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.193831][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.197554][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.202458][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.205655][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.209995][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.211255][T11679] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1711'. [ 169.214115][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.222635][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.226228][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.229859][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.233151][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.237058][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.239859][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.242364][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.245480][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.249017][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.252212][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.255124][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.258126][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.260378][T11685] xt_nfacct: accounting object `syz1' does not exist [ 169.261947][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.266197][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.269499][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.272512][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.275652][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.278498][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.281678][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.284839][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.288437][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.291509][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.295905][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.299164][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.302351][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.305973][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.308737][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.311835][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.314852][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.318092][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.321049][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.324222][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.327447][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.330293][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.333662][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.336889][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.340339][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.343618][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.347354][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.350057][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.353425][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.356527][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.359853][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.362919][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.365779][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.369232][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.372383][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.375405][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.378515][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.381689][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.384448][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.387883][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.390734][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.393912][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.396543][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.399674][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.403009][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.406050][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.408962][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.412028][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.415331][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.418461][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.421953][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.424730][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.427957][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.430747][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.434397][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.437725][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.441033][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.444318][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.447644][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.450938][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.454313][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.477744][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.480719][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.483433][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.486092][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.488715][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.491481][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.494027][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.496664][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.499532][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.502166][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.504752][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.507306][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.510064][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.512697][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.516513][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.519543][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.522197][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.524787][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.527316][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.530266][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.532735][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.535195][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.537651][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.540737][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.543724][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.546268][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.548669][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.551249][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.552973][T11699] vcan1: entered allmulticast mode [ 169.553834][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.557952][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.560571][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.563172][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.565839][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.568705][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.571259][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.573715][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.576113][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.578598][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.580339][T11699] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 169.581165][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.588256][ T5933] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 169.588409][T11699] SELinux: failed to load policy [ 169.891627][ T5933] Bluetooth: hci0: command tx timeout [ 170.672922][ T60] usb 10-1: USB disconnect, device number 2 [ 170.717231][T11724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1723'. [ 170.829573][T11728] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1724'. [ 170.941108][T11732] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1725'. [ 171.078366][T11743] netlink: 'syz.1.1730': attribute type 39 has an invalid length. [ 171.180034][T11751] netlink: 'syz.0.1733': attribute type 2 has an invalid length. [ 171.182645][T11751] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1733'. [ 171.547847][ T40] kauditd_printk_skb: 872 callbacks suppressed [ 171.547936][ T40] audit: type=1400 audit(1775683985.077:16068): avc: denied { name_bind } for pid=11782 comm="syz.0.1743" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 171.557261][ T40] audit: type=1400 audit(1775683985.077:16069): avc: denied { node_bind } for pid=11782 comm="syz.0.1743" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 171.565734][ T40] audit: type=1400 audit(1775683985.086:16070): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.574420][ T40] audit: type=1400 audit(1775683985.086:16071): avc: denied { open } for pid=5935 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.583384][ T40] audit: type=1400 audit(1775683985.086:16072): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.587317][T11785] xt_hashlimit: invalid interval [ 171.591806][ T40] audit: type=1400 audit(1775683985.114:16073): avc: denied { write } for pid=11784 comm="syz.3.1744" name="demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 171.591839][ T40] audit: type=1400 audit(1775683985.114:16074): avc: denied { open } for pid=11784 comm="syz.3.1744" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 171.591862][ T40] audit: type=1400 audit(1775683985.114:16075): avc: denied { ioctl } for pid=11784 comm="syz.3.1744" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=952 ioctlcmd=0x6f2c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 171.591887][ T40] audit: type=1400 audit(1775683985.114:16076): avc: denied { read } for pid=11784 comm="syz.3.1744" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 171.591909][ T40] audit: type=1400 audit(1775683985.114:16077): avc: denied { open } for pid=11784 comm="syz.3.1744" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 171.783244][T11794] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 172.028312][T11803] Bluetooth: MGMT ver 1.23 [ 172.031932][T11803] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1747'. [ 172.348979][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'. [ 172.352716][T11806] netlink: 'syz.1.1748': attribute type 15 has an invalid length. [ 172.355416][T11806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1748'. [ 172.376077][T11806] netlink: 'syz.1.1748': attribute type 15 has an invalid length. [ 172.376338][ T12] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 172.382390][ T12] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 172.387620][ T12] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 172.393265][ T12] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 172.492207][ T5933] Bluetooth: hci2: unexpected event for opcode 0x080c [ 172.782625][T11831] xt_nfacct: accounting object `syz1' does not exist [ 172.928583][T11836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11836 comm=syz.5.1759 [ 173.054537][T11843] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 173.076189][T11844] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 173.079069][T11844] UDF-fs: Scanning with blocksize 2048 failed [ 173.082779][T11844] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 173.085239][T11844] UDF-fs: Scanning with blocksize 4096 failed [ 173.098104][T11836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11836 comm=syz.5.1759 [ 173.104427][T11836] netlink: 'syz.5.1759': attribute type 1 has an invalid length. [ 173.227149][ T5933] Bluetooth: hci0: command tx timeout [ 173.297740][T11863] xt_nfacct: accounting object `syz1' does not exist [ 173.455949][T11882] netlink: 'syz.1.1773': attribute type 1 has an invalid length. [ 173.466709][T11882] netlink: 'syz.1.1773': attribute type 4 has an invalid length. [ 173.469380][T11882] netlink: 'syz.1.1773': attribute type 1 has an invalid length. [ 173.473049][T11882] vlan0: entered allmulticast mode [ 173.474759][T11882] veth0_vlan: entered allmulticast mode [ 173.555589][T11885] __nla_validate_parse: 9 callbacks suppressed [ 173.556021][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 173.562247][T11885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 173.671104][T11894] xt_nfacct: accounting object `syz1' does not exist [ 173.812790][T11909] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 173.911360][ T886] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 174.061359][ T886] usb 8-1: device descriptor read/64, error -71 [ 174.114453][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 174.191194][T11922] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1787'. [ 174.296594][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 174.304570][ T9] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 174.309606][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.317769][ T886] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 174.326935][ T9] usb 6-1: config 0 descriptor?? [ 174.338341][ T9] as10x_usb: device has been detected [ 174.343626][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 174.372213][ T9] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 174.393568][ T9] as10x_usb: error during firmware upload part1 [ 174.395915][ T9] Registered device nBox DVB-T Dongle [ 174.467181][ T886] usb 8-1: device descriptor read/64, error -71 [ 174.558629][ T9] usb 6-1: USB disconnect, device number 15 [ 174.568226][T11946] uprobe: syz.0.1793:11946 failed to unregister, leaking uprobe [ 174.577204][ T9] Unregistered device nBox DVB-T Dongle [ 174.578668][ T9] as10x_usb: device has been disconnected [ 174.596083][ T886] usb usb8-port1: attempt power cycle [ 174.781907][T11950] xt_cgroup: path and classid specified [ 174.785963][T11950] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 174.790620][T11950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1794'. [ 174.892968][T11955] netlink: 'syz.0.1796': attribute type 1 has an invalid length. [ 174.925287][T11955] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 174.933109][T11955] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 174.969730][ T886] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 174.981888][T11957] bond7: (slave gretap1): making interface the new active one [ 174.986549][T11957] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 174.992670][ T886] usb 8-1: device descriptor read/8, error -71 [ 174.998779][T11957] macvlan2: entered promiscuous mode [ 175.000648][T11957] macvlan2: entered allmulticast mode [ 175.003040][T11957] bond7: entered promiscuous mode [ 175.004682][T11957] gretap1: entered promiscuous mode [ 175.006957][T11957] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.011384][T11957] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 175.015899][T11957] bond7: left promiscuous mode [ 175.017478][T11957] gretap1: left promiscuous mode [ 175.212192][T11964] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 175.258327][ T886] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 175.282197][ T886] usb 8-1: device descriptor read/8, error -71 [ 175.398941][ T886] usb usb8-port1: unable to enumerate USB device [ 175.792859][ T9] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 175.956278][ T9] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 175.960374][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 175.965979][ T9] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 175.969909][ T9] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 175.973742][ T9] usb 10-1: Product: syz [ 175.975869][ T9] usb 10-1: Manufacturer: syz [ 175.977932][ T9] usb 10-1: SerialNumber: syz [ 175.985982][ T9] usb 10-1: config 0 descriptor?? [ 175.994757][ T9] usb 10-1: selecting invalid altsetting 0 [ 176.072545][T11987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20228 sclass=netlink_route_socket pid=11987 comm=syz.0.1806 [ 176.192163][T12001] xt_cgroup: path and classid specified [ 176.207068][T12003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1808 sclass=netlink_route_socket pid=12003 comm=syz.1.1810 [ 176.250174][ T60] usb 5-1: USB disconnect, device number 7 [ 176.325892][ T6013] usb 10-1: USB disconnect, device number 3 [ 176.332893][ T5943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.338635][ T5943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.343836][ T5943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.347330][ T5943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.350442][ T5943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.565286][T12008] chnl_net:caif_netlink_parms(): no params data found [ 176.613075][T12008] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.615554][T12008] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.618837][T12008] bridge_slave_0: entered allmulticast mode [ 176.622373][T12008] bridge_slave_0: entered promiscuous mode [ 176.625768][T12008] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.628187][T12008] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.630518][T12008] bridge_slave_1: entered allmulticast mode [ 176.633448][T12008] bridge_slave_1: entered promiscuous mode [ 176.662699][T12008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.669658][T12008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.698920][T12008] team0: Port device team_slave_0 added [ 176.704633][T12008] team0: Port device team_slave_1 added [ 176.726164][T12008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.729404][T12008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.739712][T12008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.744346][T12008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.746817][T12008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.755960][T12008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.780635][T12008] hsr_slave_0: entered promiscuous mode [ 176.783114][T12008] hsr_slave_1: entered promiscuous mode [ 176.785409][T12008] debugfs: 'hsr0' already exists in 'hsr' [ 176.787622][T12008] Cannot create hsr debugfs directory [ 176.905960][T12008] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.909513][T12008] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.914234][ T40] kauditd_printk_skb: 618 callbacks suppressed [ 176.914247][ T40] audit: type=1400 audit(1775683990.100:16696): avc: denied { create } for pid=12020 comm="syz.3.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.926965][ T40] audit: type=1400 audit(1775683990.100:16697): avc: denied { write } for pid=12020 comm="syz.3.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.934090][ T40] audit: type=1400 audit(1775683990.100:16698): avc: denied { read } for pid=12020 comm="syz.3.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.946061][ T40] audit: type=1400 audit(1775683990.109:16699): avc: denied { read write } for pid=11496 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.954749][ T40] audit: type=1400 audit(1775683990.109:16700): avc: denied { open } for pid=11496 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.963472][ T40] audit: type=1400 audit(1775683990.109:16701): avc: denied { ioctl } for pid=11496 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.972410][ T40] audit: type=1400 audit(1775683990.128:16702): avc: denied { create } for pid=12024 comm="syz.5.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.979205][ T40] audit: type=1400 audit(1775683990.138:16703): avc: denied { create } for pid=12024 comm="syz.5.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.986985][ T40] audit: type=1400 audit(1775683990.138:16704): avc: denied { write } for pid=12024 comm="syz.5.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.993756][ T40] audit: type=1400 audit(1775683990.138:16705): avc: denied { read } for pid=12024 comm="syz.5.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.022827][T12008] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.026260][T12008] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.100429][T12008] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.104057][T12008] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.116926][ T6013] hid_parser_main: 28 callbacks suppressed [ 177.116982][ T6013] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 177.126484][ T6013] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 177.130134][ T6013] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 177.132725][ T6013] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 177.135305][ T6013] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 177.137812][ T6013] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 177.149963][ T6013] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 177.154455][ T6013] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 177.160735][ T6013] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 177.163459][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1818'. [ 177.167646][ T6013] hid-generic 0006:0004:0009.0009: unknown main item tag 0x0 [ 177.178885][ T6013] hid-generic 0006:0004:0009.0009: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 177.205951][T12008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.209688][T12008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.248413][T12032] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 177.253107][T12035] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.159881][T12062] syz_tun: entered allmulticast mode [ 178.169765][T12062] dvmrp8: entered allmulticast mode [ 178.175671][T12061] syz_tun: left allmulticast mode [ 178.330676][T12074] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 178.372516][T12076] xt_nfacct: accounting object `syz1' does not exist [ 178.409043][T12078] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 178.536905][ T5943] Bluetooth: hci4: command tx timeout [ 178.772141][T12089] kvm_intel: kvm [12088]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x420e [ 178.787671][T12089] kvm: kvm [12088]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xff09 [ 178.802386][T12089] kvm: kvm [12088]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x7f2f [ 178.966442][T12092] ptrace attach of "/syz-executor exec"[12093] was attempted by "/syz-executor exec"[12092] [ 180.360802][T12044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.373117][T12008] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.393135][T12008] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.403917][T12008] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.428906][T12008] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.468643][T12111] xt_nfacct: accounting object `syz1' does not exist [ 180.533958][T12008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.552654][T12008] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.558997][ T7521] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.561762][ T7521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.584470][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.587121][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.676461][T12127] CIFS mount error: No usable UNC path provided in device string! [ 180.676461][T12127] [ 180.680615][T12127] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 180.753687][ T5943] Bluetooth: hci4: command tx timeout [ 180.770844][T12137] xt_nfacct: accounting object `syz1' does not exist [ 180.778271][T12008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.859525][T12008] veth0_vlan: entered promiscuous mode [ 180.867068][T12008] veth1_vlan: entered promiscuous mode [ 180.894704][T12145] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 180.895234][T12008] veth0_macvtap: entered promiscuous mode [ 180.904252][T12008] veth1_macvtap: entered promiscuous mode [ 180.927839][T12008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.945977][T12008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.964470][ T1175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.967951][T12148] sp0: Synchronizing with TNC [ 180.969014][ T8485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.973224][ T8485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.977235][ T8485] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.996797][T12148] [U] [ 181.067983][ T8485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.071319][ T8485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.116035][ T8470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.122984][ T8470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.532451][T12191] syz_tun: left promiscuous mode [ 181.567941][ T6013] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 181.689394][T12191] veth0_macvtap: entered promiscuous mode [ 181.724764][T12191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.731285][ T6013] usb 5-1: config 0 has no interfaces? [ 181.735343][T12191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.740071][ T6013] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 181.745038][ T6013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.746103][T12191] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.749029][ T6013] usb 5-1: Product: syz [ 181.752807][ T6013] usb 5-1: Manufacturer: syz [ 181.755055][ T6013] usb 5-1: SerialNumber: syz [ 181.771151][ T6013] usb 5-1: config 0 descriptor?? [ 181.802530][T12199] Failed to get privilege flags for destination (handle=0x2:0x80) [ 181.810035][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1860'. [ 181.849976][T12201] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 181.853271][T12201] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 181.868932][T12201] overlayfs: overlapping lowerdir path [ 181.913802][ T5943] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 181.915300][T12206] Cannot find set identified by id 3 to match [ 181.995092][T12217] usb usb8: usbfs: process 12217 (syz.1.1866) did not claim interface 0 before use [ 182.022716][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1853'. [ 182.029127][ T6013] usb 5-1: USB disconnect, device number 8 [ 182.108264][T12223] MTD: Couldn't look up '/dev/sg0': -15 [ 182.110341][T12223] /dev/sg0: Can't lookup blockdev [ 182.172600][T12228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1869'. [ 182.189793][T12228] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.203321][T12228] ipvlan2: entered allmulticast mode [ 182.205069][T12228] bond5: entered allmulticast mode [ 182.222392][T12228] bridge0: entered allmulticast mode [ 182.224812][T12228] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 182.361802][T12232] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1870'. [ 182.368419][T12232] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1870'. [ 182.434715][ T40] kauditd_printk_skb: 595 callbacks suppressed [ 182.434741][ T40] audit: type=1400 audit(1775683995.273:17301): avc: denied { read } for pid=12233 comm="syz.1.1871" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 182.455111][ T40] audit: type=1400 audit(1775683995.273:17302): avc: denied { open } for pid=12233 comm="syz.1.1871" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 182.462119][T12234] overlayfs: failed to resolve './bus': -2 [ 182.463154][ T40] audit: type=1400 audit(1775683995.273:17303): avc: denied { ioctl } for pid=12233 comm="syz.1.1871" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 182.479667][ T40] audit: type=1400 audit(1775683995.273:17304): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.488964][ T40] audit: type=1400 audit(1775683995.273:17305): avc: denied { open } for pid=5935 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.498180][ T40] audit: type=1400 audit(1775683995.273:17306): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.507589][ T40] audit: type=1400 audit(1775683995.292:17307): avc: denied { create } for pid=12235 comm="syz.3.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 182.514051][ T40] audit: type=1400 audit(1775683995.292:17308): avc: denied { mounton } for pid=12233 comm="syz.1.1871" path="/420/file0" dev="tmpfs" ino=2221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 182.522252][ T40] audit: type=1400 audit(1775683995.301:17309): avc: denied { write } for pid=12235 comm="syz.3.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 182.530214][ T40] audit: type=1400 audit(1775683995.301:17310): avc: denied { read } for pid=12235 comm="syz.3.1872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 182.761293][T12250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.768148][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1877'. [ 182.776400][T12250] gfs2: Unknown parameter 'discard' [ 182.809946][ T5976] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 182.843263][T12259] xt_nfacct: accounting object `syz1' does not exist [ 182.978023][ T5943] Bluetooth: hci4: command tx timeout [ 182.984422][ T5976] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.990011][ T5976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 182.994676][ T5976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 182.998803][ T5976] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.000052][T12263] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 183.004144][ T5976] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.004169][ T5976] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.020973][ T5976] usb 8-1: config 0 descriptor?? [ 183.091642][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1883'. [ 183.201040][T12266] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 183.290137][T12267] team0 (unregistering): Port device team_slave_0 removed [ 183.299942][T12267] team0 (unregistering): Port device team_slave_1 removed [ 183.427698][T12274] Device name not specified. [ 183.427698][T12274] [ 183.438557][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1887'. [ 183.465017][ T5976] usbhid 8-1:0.0: can't add hid device: -71 [ 183.471844][ T5976] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 183.481052][ T5976] usb 8-1: USB disconnect, device number 16 [ 183.813900][T12284] overlay: Bad value for 'workdir' [ 183.988350][T12291] team0: Port device vlan2 added [ 184.276357][T12301] ieee802154 phy0 wpan0: encryption failed: -22 [ 184.348436][T12303] xt_nfacct: accounting object `syz1' does not exist [ 184.874296][T12326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1900'. [ 184.934886][T12324] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 184.939795][T12324] bond11 (unregistering): Released all slaves [ 184.984085][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1901'. [ 185.172368][ T58] IPVS: starting estimator thread 0... [ 185.211483][ T5943] Bluetooth: hci4: command tx timeout [ 185.249282][T12353] tmpfs: Bad value for 'mpol' [ 185.254022][ T1027] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 185.288743][T12344] IPVS: using max 46 ests per chain, 110400 per kthread [ 185.353423][T12359] netlink: 'syz.5.1910': attribute type 1 has an invalid length. [ 185.355941][T12359] netlink: 'syz.5.1910': attribute type 1 has an invalid length. [ 185.425726][ T1027] usb 5-1: not running at top speed; connect to a high speed hub [ 185.426498][T12366] fuse: Bad value for 'rootmode' [ 185.428965][ T1027] usb 5-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 185.433050][ T1027] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 185.438347][ T1027] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 185.441983][ T1027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.444839][ T1027] usb 5-1: Product: syz [ 185.446244][ T1027] usb 5-1: Manufacturer: syz [ 185.448121][ T1027] usb 5-1: SerialNumber: syz [ 185.675056][ T1027] usb 5-1: USB disconnect, device number 9 [ 185.683105][T12376] tipc: Can't bind to reserved service type 2 [ 186.248045][T12380] xt_nfacct: accounting object `syz1' does not exist [ 186.673278][ T12] bridge_slave_1: left allmulticast mode [ 186.676269][ T12] bridge_slave_1: left promiscuous mode [ 186.679096][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.684429][ T12] bridge_slave_0: left allmulticast mode [ 186.686663][ T12] bridge_slave_0: left promiscuous mode [ 186.688810][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.818905][ T1027] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 186.876939][ T12] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 187.057718][ T1027] usb 10-1: Using ep0 maxpacket: 32 [ 187.058158][ T12] bond7 (unregistering): (slave gretap1): Releasing active interface [ 187.069073][ T1027] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.073645][ T1027] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 187.079370][ T1027] usb 10-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 187.085720][ T1027] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.089492][ T1027] usb 10-1: Product: syz [ 187.091387][ T1027] usb 10-1: Manufacturer: syz [ 187.093996][ T1027] usb 10-1: SerialNumber: syz [ 187.098795][ T1027] usb 10-1: config 0 descriptor?? [ 187.643743][ T12] bond4 (unregistering): (slave bridge5): Releasing active interface [ 187.738637][ T12] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 187.742266][ T12] bridge6 (unregistering): left promiscuous mode [ 187.878260][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.883360][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.887899][ T12] bond0 (unregistering): Released all slaves [ 187.892823][ T12] bond1 (unregistering): Released all slaves [ 187.899928][ T12] bond2 (unregistering): Released all slaves [ 187.906670][ T12] bond3 (unregistering): Released all slaves [ 187.913468][ T12] bond4 (unregistering): Released all slaves [ 187.922481][ T12] bond5 (unregistering): Released all slaves [ 187.941998][ T12] bond6 (unregistering): Released all slaves [ 187.958950][ T12] bond7 (unregistering): Released all slaves [ 187.964876][T12387] Set syz1 is full, maxelem 65536 reached [ 188.082666][ T12] : left promiscuous mode [ 188.672270][ T12] hsr_slave_0: left promiscuous mode [ 188.674831][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.686987][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.689428][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.700612][ T12] veth0_macvtap: left promiscuous mode [ 188.702596][ T12] veth1_vlan: left promiscuous mode [ 188.704486][ T12] veth0_vlan: left promiscuous mode [ 188.726315][T12370] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 188.739947][ T40] kauditd_printk_skb: 444 callbacks suppressed [ 188.739962][ T40] audit: type=1400 audit(1775684001.166:17755): avc: denied { read } for pid=12386 comm="syz.5.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 188.768176][ T60] usb 10-1: USB disconnect, device number 4 [ 188.799409][ T40] audit: type=1400 audit(1775684001.222:17756): avc: denied { create } for pid=12392 comm="syz.0.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.821537][ T40] audit: type=1400 audit(1775684001.222:17757): avc: denied { write } for pid=12392 comm="syz.0.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.831100][ T40] audit: type=1400 audit(1775684001.222:17758): avc: denied { nlmsg_write } for pid=12392 comm="syz.0.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 188.841191][ T40] audit: type=1400 audit(1775684001.231:17759): avc: denied { module_request } for pid=12392 comm="syz.0.1920" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 188.851281][ T40] audit: type=1400 audit(1775684001.250:17760): avc: denied { sys_module } for pid=12392 comm="syz.0.1920" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 188.867472][ T40] audit: type=1400 audit(1775684001.250:17761): avc: denied { module_request } for pid=12392 comm="syz.0.1920" kmod="syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 188.874448][ T40] audit: type=1400 audit(1775684001.278:17762): avc: denied { read } for pid=12392 comm="syz.0.1920" dev="nsfs" ino=4026534157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 188.885040][ T40] audit: type=1400 audit(1775684001.278:17763): avc: denied { open } for pid=12392 comm="syz.0.1920" path="net:[4026534157]" dev="nsfs" ino=4026534157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 188.886335][T12395] __nla_validate_parse: 5 callbacks suppressed [ 188.886352][T12395] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1920'. [ 188.893729][ T40] audit: type=1400 audit(1775684001.278:17764): avc: denied { create } for pid=12392 comm="syz.0.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.105024][T12401] netlink: 'syz.1.1921': attribute type 1 has an invalid length. [ 189.138544][ T12] team0 (unregistering): Port device team_slave_1 removed [ 189.165675][ T12] team0 (unregistering): Port device team_slave_0 removed [ 189.231310][T12411] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1921'. [ 189.276571][T12413] netlink: 'syz.0.1923': attribute type 2 has an invalid length. [ 189.388419][T12424] xt_hashlimit: size too large, truncated to 1048576 [ 189.453942][T12431] xt_nfacct: accounting object `syz1' does not exist [ 189.638779][T12442] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 189.648032][ T1027] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 189.722060][T12446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8394 sclass=netlink_route_socket pid=12446 comm=syz.3.1930 [ 189.726987][T12446] netlink: 'syz.3.1930': attribute type 21 has an invalid length. [ 189.765263][T12451] 9pnet_virtio: no channels available for device syz [ 189.776877][T12454] overlayfs: failed to resolve './file0': -2 [ 189.791171][T12453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1931'. [ 189.808329][ T1027] usb 6-1: device descriptor read/64, error -71 [ 189.811601][ T12] IPVS: stop unused estimator thread 0... [ 190.032740][ T58] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 190.065029][ T1027] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 190.155347][T12468] SELinux: policydb magic number 0x7875ff8c does not match expected magic number 0xf97cff8c [ 190.159447][T12468] SELinux: failed to load policy [ 190.207259][ T58] usb 8-1: config 0 has an invalid interface descriptor of length 8, skipping [ 190.210998][ T58] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.215905][ T1027] usb 6-1: device descriptor read/64, error -71 [ 190.218792][ T58] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 190.332891][ T1027] usb usb6-port1: attempt power cycle [ 190.706362][ T1027] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 190.728933][ T1027] usb 6-1: device descriptor read/8, error -71 [ 190.900776][T12473] syzkaller0: entered promiscuous mode [ 190.902822][T12473] syzkaller0: entered allmulticast mode [ 190.984206][ T1027] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 191.006707][ T1027] usb 6-1: device descriptor read/8, error -71 [ 191.123705][ T1027] usb usb6-port1: unable to enumerate USB device [ 191.227548][T12480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1940'. [ 191.289305][T12481] netlink: 'syz.0.1940': attribute type 4 has an invalid length. [ 191.292023][T12481] netlink: 'syz.0.1940': attribute type 8 has an invalid length. [ 191.295282][T12481] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1940'. [ 192.403020][T12483] xt_connbytes: Forcing CT accounting to be enabled [ 192.405175][T12483] Cannot find set identified by id 0 to match [ 192.671042][T12498] xt_nfacct: accounting object `syz1' does not exist [ 192.711897][T12500] atomic_op ffff888057875998 conn xmit_atomic 0000000000000000 [ 192.986653][ T58] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 192.989636][ T58] usb 8-1: New USB device strings: Mfr=10, Product=0, SerialNumber=0 [ 193.010193][ T58] usb 8-1: rejected 1 configuration due to insufficient available bus power [ 193.013564][ T58] usb 8-1: no configuration chosen from 1 choice [ 193.017182][ T58] usb 8-1: USB disconnect, device number 17 [ 193.026090][ T29] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 193.105638][T12520] kvm: kvm [12519]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 193.109827][T12520] kvm: kvm [12519]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 193.211834][ T29] usb 10-1: No LPM exit latency info found, disabling LPM. [ 193.216155][ T29] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 193.220597][ T29] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 193.227139][ T29] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.230772][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.234368][ T29] usb 10-1: Product: ч [ 193.236052][ T29] usb 10-1: Manufacturer: 浂垰⇪爎輕걫騡曠뫝싦켂붙螛򚻐剋ᙋ碧곴蠃衳巓삄焋䒬묘ᘤ狴榾볼苼嵩㮙⣟䍭펖뿠ỵ홖嫠流䥝ᶆỬ촯걿두趡亀ﯪ膣쁻𢡄䇓ఆ颷鳦轈䌾ᵔ䅛뾙㡃ᙞ⢉䃛ꪉ온え㒧ꨗ䵠쐗魬鶖狷凍緩⇮緷袭∉몓汷ꂀ儫 [ 193.248403][ T29] usb 10-1: SerialNumber: Ь [ 193.704056][T12504] 8021q: VLANs not supported on ip6gre0 [ 193.718918][ T29] usb 10-1: low speed audio streaming not supported [ 193.723974][ T29] usb 10-1: low speed audio streaming not supported [ 193.770076][ T29] usb 10-1: USB disconnect, device number 5 [ 193.793181][ T5934] udevd[5934]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.895605][T12530] xt_nfacct: accounting object `syz1' does not exist [ 194.172097][ T40] kauditd_printk_skb: 339 callbacks suppressed [ 194.172112][ T40] audit: type=1400 audit(1775684006.245:18104): avc: denied { create } for pid=12534 comm="syz.1.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 194.184257][ T40] audit: type=1400 audit(1775684006.254:18105): avc: denied { setopt } for pid=12534 comm="syz.1.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 194.192193][ T40] audit: type=1400 audit(1775684006.254:18106): avc: denied { execute } for pid=12534 comm="syz.1.1957" dev="tmpfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 194.200830][ T40] audit: type=1400 audit(1775684006.254:18107): avc: denied { nosuid_transition } for pid=12534 comm="syz.1.1957" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 194.230267][ T40] audit: type=1400 audit(1775684006.254:18108): avc: denied { transition } for pid=12534 comm="syz.1.1957" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 194.242320][ T40] audit: type=1400 audit(1775684006.254:18109): avc: denied { entrypoint } for pid=12534 comm="syz.1.1957" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2094 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 194.254774][ T40] audit: type=1400 audit(1775684006.254:18110): avc: denied { share } for pid=12534 comm="syz.1.1957" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 194.263075][ T40] audit: type=1400 audit(1775684006.254:18111): avc: denied { noatsecure } for pid=12534 comm="syz.1.1957" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 194.271710][ T40] audit: type=1400 audit(1775684006.264:18112): avc: denied { create } for pid=12534 comm="syz.1.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 194.287568][ T40] audit: type=1400 audit(1775684006.264:18113): avc: denied { bind } for pid=12534 comm="syz.1.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 194.329600][T12542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1958'. [ 195.165896][T12557] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1962'. [ 195.183039][T12557] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 195.185386][T12557] overlayfs: failed to set xattr on upper [ 195.188437][T12557] overlayfs: ...falling back to redirect_dir=nofollow. [ 195.190772][T12557] overlayfs: ...falling back to index=off. [ 195.192938][T12557] overlayfs: ...falling back to uuid=null. [ 196.364056][T12562] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.367176][T12562] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.470766][T12562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.480586][T12562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.570870][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.599043][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.601966][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.604746][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.997267][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 197.001865][T12589] netlink: 'syz.1.1972': attribute type 30 has an invalid length. [ 197.008434][T12589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1972'. [ 197.077887][ T5931] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 197.167637][T12600] binder: 12599:12600 ioctl 40309439 200000000040 returned -22 [ 197.251995][ T5931] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 197.255233][ T5931] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.265321][ T5931] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.268780][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 197.272388][ T5931] usb 5-1: Product: syz [ 197.274100][ T5931] usb 5-1: Manufacturer: syz [ 197.275880][ T5931] usb 5-1: SerialNumber: syz [ 197.281865][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1979'. [ 197.283363][ T5931] usb 5-1: config 0 descriptor?? [ 197.285042][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1979'. [ 197.289876][T12604] tipc: Started in network mode [ 197.291225][ T5931] usb 5-1: selecting invalid altsetting 0 [ 197.291604][T12604] tipc: Node identity 4, cluster identity 4711 [ 197.291614][T12604] tipc: Node number set to 4 [ 197.299578][T12604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12604 comm=syz.5.1978 [ 197.562243][ T8470] bridge_slave_0: left allmulticast mode [ 197.564117][ T8470] bridge_slave_0: left promiscuous mode [ 197.566081][ T8470] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.598464][ T8470] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 197.841002][ T8470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.845177][ T8470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.849838][ T8470] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 197.855363][ T8470] bond0 (unregistering): Released all slaves [ 197.860571][ T8470] bond1 (unregistering): Released all slaves [ 197.963926][ T8470] tipc: Left network mode [ 198.459741][ T8470] hsr_slave_0: left promiscuous mode [ 198.462245][ T8470] hsr_slave_1: left promiscuous mode [ 198.464534][ T8470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.492863][ T8470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.742616][T12662] netlink: 'syz.1.1989': attribute type 1 has an invalid length. [ 198.745408][T12662] netlink: 'syz.1.1989': attribute type 1 has an invalid length. [ 198.751648][T12662] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.1989'. [ 198.841869][ T5931] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 199.017413][ T5931] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.036919][ T5931] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.042491][ T5931] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 199.047571][ T5931] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.061043][ T5931] usb 10-1: config 0 descriptor?? [ 199.076789][ T5931] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 199.470886][T12692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.584133][ T40] kauditd_printk_skb: 596 callbacks suppressed [ 199.584155][ T40] audit: type=1400 audit(1775684011.306:18710): avc: denied { ioctl } for pid=12691 comm="syz.1.1996" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 199.739841][ T6024] usb 10-1: USB disconnect, device number 6 [ 199.749704][ T40] audit: type=1400 audit(1775684011.455:18711): avc: denied { read write } for pid=11496 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.762394][ T40] audit: type=1400 audit(1775684011.455:18712): avc: denied { create } for pid=12695 comm="syz.1.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.770525][ T40] audit: type=1400 audit(1775684011.455:18713): avc: denied { create } for pid=12695 comm="syz.1.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.795509][ T40] audit: type=1400 audit(1775684011.465:18714): avc: denied { write } for pid=12695 comm="syz.1.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.802742][ T40] audit: type=1400 audit(1775684011.465:18715): avc: denied { read } for pid=12695 comm="syz.1.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.823536][ T40] audit: type=1400 audit(1775684011.465:18717): avc: denied { read } for pid=12695 comm="syz.1.1997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 199.829272][T12709] xt_nfacct: accounting object `syz1' does not exist [ 199.837683][ T40] audit: type=1400 audit(1775684011.465:18716): avc: denied { open } for pid=12695 comm="syz.1.1997" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 199.857981][ T40] audit: type=1400 audit(1775684011.465:18718): avc: denied { read write open } for pid=11496 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.867929][ T40] audit: type=1400 audit(1775684011.465:18719): avc: denied { ioctl } for pid=11496 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.052025][ T6014] usb 5-1: USB disconnect, device number 10 [ 200.299996][T12744] xt_nfacct: accounting object `syz1' does not exist [ 200.324131][T12746] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 200.332339][T12748] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2011'. [ 200.341338][T12748] program syz.0.2011 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.723417][ T6023] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 200.879938][T12776] xt_nfacct: accounting object `syz1' does not exist [ 200.918329][T12778] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2020'. [ 200.919558][ T6023] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 200.925860][ T6023] usb 10-1: config 0 interface 0 has no altsetting 0 [ 200.938686][ T6023] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 200.942557][ T6023] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 200.946000][ T6023] usb 10-1: Product: syz [ 200.948485][ T6023] usb 10-1: Manufacturer: syz [ 200.950617][ T6023] usb 10-1: SerialNumber: syz [ 200.956000][ T6023] usb 10-1: config 0 descriptor?? [ 200.972503][ T6023] usb 10-1: selecting invalid altsetting 0 [ 201.113801][T12790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2025'. [ 201.117695][T12790] program syz.0.2025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.161881][ T29] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 201.311356][ T29] usb 6-1: device descriptor read/64, error -71 [ 201.568044][ T29] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 201.706978][ T29] usb 6-1: device descriptor read/64, error -71 [ 201.824814][ T29] usb usb6-port1: attempt power cycle [ 202.188020][ T29] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 202.220897][ T29] usb 6-1: device descriptor read/8, error -71 [ 202.498078][ T29] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 202.520650][ T29] usb 6-1: device descriptor read/8, error -71 [ 202.637449][ T29] usb usb6-port1: unable to enumerate USB device [ 203.588531][ T5943] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 203.588560][ T5933] Bluetooth: hci2: command 0x1003 tx timeout [ 203.635270][T12803] xt_nfacct: accounting object `syz1' does not exist [ 203.651433][ T6023] usb 10-1: USB disconnect, device number 7 [ 203.735493][T12811] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 203.736779][T12805] XFS (nbd0): no-recovery mounts must be read-only. [ 204.582689][T12817] nbd0: detected capacity change from 0 to 127 [ 204.588151][ T5934] [ 204.589004][ T5934] ====================================================== [ 204.591273][ T5934] WARNING: possible circular locking dependency detected [ 204.593548][ T5934] syzkaller #0 Tainted: G L [ 204.595607][ T5934] ------------------------------------------------------ [ 204.597860][ T5934] udevd/5934 is trying to acquire lock: [ 204.599630][ T5934] ffff88803fbec870 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x428/0x1080 [ 204.603184][ T5934] [ 204.603184][ T5934] but task is already holding lock: [ 204.605534][ T5934] ffff8880566d8180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 204.608168][ T5934] [ 204.608168][ T5934] which lock already depends on the new lock. [ 204.608168][ T5934] [ 204.611504][ T5934] [ 204.611504][ T5934] the existing dependency chain (in reverse order) is: [ 204.614378][ T5934] [ 204.614378][ T5934] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 204.616639][ T5934] __mutex_lock+0x1a2/0x1b90 [ 204.618719][ T5934] nbd_queue_rq+0xba/0x1080 [ 204.620441][ T5934] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 204.622736][ T5934] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 204.624915][ T5934] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 204.627019][ T5934] blk_mq_run_hw_queue+0x23c/0x670 [ 204.628804][ T5934] blk_mq_dispatch_list+0x51d/0x1360 [ 204.630657][ T5934] blk_mq_flush_plug_list+0x130/0x600 [ 204.632552][ T5934] __blk_flush_plug+0x2c4/0x4b0 [ 204.634270][ T5934] __submit_bio+0x584/0x6c0 [ 204.636014][ T5934] submit_bio_noacct_nocheck+0x562/0xc10 [ 204.638112][ T5934] submit_bio_noacct+0xd17/0x2010 [ 204.639901][ T5934] submit_bh_wbc+0x59c/0x770 [ 204.641890][ T5934] block_read_full_folio+0x264/0x8e0 [ 204.643790][ T5934] filemap_read_folio+0xfc/0x3b0 [ 204.645602][ T5934] do_read_cache_folio+0x2d7/0x6b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 204.647456][ T5934] read_part_sector+0xd1/0x370 [ 204.649418][ T5934] adfspart_check_ICS+0x93/0x910 [ 204.651179][ T5934] bdev_disk_changed+0x7f8/0xc80 [ 204.652940][ T5934] blkdev_get_whole+0x187/0x290 [ 204.654732][ T5934] bdev_open+0x2c7/0xe40 [ 204.656283][ T5934] blkdev_open+0x34e/0x4f0 [ 204.657908][ T5934] do_dentry_open+0x6d8/0x1660 [ 204.659604][ T5934] vfs_open+0x82/0x3f0 [ 204.661115][ T5934] path_openat+0x208c/0x31a0 [ 204.662767][ T5934] do_file_open+0x20e/0x430 [ 204.664365][ T5934] do_sys_openat2+0x10d/0x1e0 [ 204.666013][ T5934] __x64_sys_openat+0x12d/0x210 [ 204.667675][ T5934] do_syscall_64+0x106/0xf80 [ 204.669267][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.671484][ T5934] [ 204.671484][ T5934] -> #5 (set->srcu){.+.+}-{0:0}: [ 204.673791][ T5934] __synchronize_srcu+0xa2/0x300 [ 204.675591][ T5934] blk_mq_quiesce_queue+0x149/0x1c0 [ 204.677375][ T5934] elevator_switch+0x17b/0x7e0 [ 204.679041][ T5934] elevator_change+0x352/0x530 [ 204.680717][ T5934] elevator_set_default+0x29e/0x360 [ 204.682555][ T5934] blk_register_queue+0x412/0x590 [ 204.684321][ T5934] __add_disk+0x73f/0xe40 [ 204.685941][ T5934] add_disk_fwnode+0x118/0x5c0 [ 204.687648][ T5934] nbd_dev_add+0x77a/0xb10 [ 204.689276][ T5934] nbd_init+0x291/0x2b0 [ 204.691107][ T5934] do_one_initcall+0x11d/0x760 [ 204.692908][ T5934] kernel_init_freeable+0x6e5/0x7a0 [ 204.694786][ T5934] kernel_init+0x1f/0x1e0 [ 204.696358][ T5934] ret_from_fork+0x754/0xd80 [ 204.697996][ T5934] ret_from_fork_asm+0x1a/0x30 [ 204.699689][ T5934] [ 204.699689][ T5934] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 204.702214][ T5934] __mutex_lock+0x1a2/0x1b90 [ 204.703864][ T5934] elevator_change+0x1bc/0x530 [ 204.705571][ T5934] elevator_set_none+0x92/0xf0 [ 204.707308][ T5934] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 204.709350][ T5934] nbd_start_device+0x1a6/0xbd0 [ 204.711101][ T5934] nbd_genl_connect+0xff2/0x1a40 [ 204.712872][ T5934] genl_family_rcv_msg_doit+0x214/0x300 [ 204.715082][ T5934] genl_rcv_msg+0x560/0x800 [ 204.716704][ T5934] netlink_rcv_skb+0x159/0x420 [ 204.718465][ T5934] genl_rcv+0x28/0x40 [ 204.719953][ T5934] netlink_unicast+0x5aa/0x870 [ 204.721670][ T5934] netlink_sendmsg+0x8b0/0xda0 [ 204.723369][ T5934] ____sys_sendmsg+0x9e1/0xb70 [ 204.725134][ T5934] ___sys_sendmsg+0x190/0x1e0 [ 204.726822][ T5934] __sys_sendmsg+0x170/0x220 [ 204.728470][ T5934] do_syscall_64+0x106/0xf80 [ 204.730123][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.732205][ T5934] [ 204.732205][ T5934] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 204.734974][ T5934] blk_alloc_queue+0x610/0x790 [ 204.736687][ T5934] blk_mq_alloc_queue+0x174/0x290 [ 204.738462][ T5934] __blk_mq_alloc_disk+0x29/0x120 [ 204.740214][ T5934] nbd_dev_add+0x492/0xb10 [ 204.741837][ T5934] nbd_init+0x291/0x2b0 [ 204.743381][ T5934] do_one_initcall+0x11d/0x760 [ 204.745075][ T5934] kernel_init_freeable+0x6e5/0x7a0 [ 204.746900][ T5934] kernel_init+0x1f/0x1e0 [ 204.748468][ T5934] ret_from_fork+0x754/0xd80 [ 204.750122][ T5934] ret_from_fork_asm+0x1a/0x30 [ 204.751882][ T5934] [ 204.751882][ T5934] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 204.754210][ T5934] fs_reclaim_acquire+0xc4/0x100 [ 204.755983][ T5934] kmem_cache_alloc_node_noprof+0x53/0x6f0 [ 204.758021][ T5934] __alloc_skb+0x140/0x710 [ 204.759628][ T5934] tcp_stream_alloc_skb+0x34/0x660 [ 204.761590][ T5934] tcp_sendmsg_locked+0x1396/0x45e0 [ 204.763420][ T5934] tcp_sendmsg+0x2e/0x50 [ 204.765017][ T5934] inet_sendmsg+0xb9/0x140 [ 204.766787][ T5934] sock_write_iter+0x4ea/0x5a0 [ 204.768503][ T5934] vfs_write+0x6ac/0x1070 [ 204.770077][ T5934] ksys_write+0x1f8/0x250 [ 204.771692][ T5934] do_syscall_64+0x106/0xf80 [ 204.773372][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.775440][ T5934] [ 204.775440][ T5934] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 204.777932][ T5934] lock_sock_nested+0x41/0xf0 [ 204.779635][ T5934] inet_shutdown+0x67/0x410 [ 204.781300][ T5934] nbd_mark_nsock_dead+0xae/0x5c0 [ 204.783090][ T5934] sock_shutdown+0x16b/0x200 [ 204.784737][ T5934] nbd_config_put+0x1eb/0x750 [ 204.786459][ T5934] nbd_release+0xb7/0x190 [ 204.788027][ T5934] blkdev_put_whole+0xb0/0xf0 [ 204.789712][ T5934] bdev_release+0x47f/0x6d0 [ 204.791332][ T5934] blkdev_release+0x15/0x20 [ 204.792903][ T5934] __fput+0x3ff/0xb40 [ 204.794302][ T5934] task_work_run+0x150/0x240 [ 204.795903][ T5934] do_exit+0x8b8/0x2b60 [ 204.797362][ T5934] do_group_exit+0xd5/0x2a0 [ 204.798949][ T5934] get_signal+0x1ec7/0x21e0 [ 204.800572][ T5934] arch_do_signal_or_restart+0x91/0x7a0 [ 204.802460][ T5934] exit_to_user_mode_loop+0x86/0x4a0 [ 204.804300][ T5934] do_syscall_64+0x67c/0xf80 [ 204.805978][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.808039][ T5934] [ 204.808039][ T5934] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 204.810519][ T5934] __lock_acquire+0x14b8/0x2630 [ 204.812254][ T5934] lock_acquire+0x1cf/0x380 [ 204.813920][ T5934] __mutex_lock+0x1a2/0x1b90 [ 204.815589][ T5934] nbd_queue_rq+0x428/0x1080 [ 204.817181][ T5934] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 204.819113][ T5934] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 204.821278][ T5934] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 204.823289][ T5934] blk_mq_run_hw_queue+0x23c/0x670 [ 204.825116][ T5934] blk_mq_dispatch_list+0x51d/0x1360 [ 204.827064][ T5934] blk_mq_flush_plug_list+0x130/0x600 [ 204.828978][ T5934] __blk_flush_plug+0x2c4/0x4b0 [ 204.830748][ T5934] __submit_bio+0x584/0x6c0 [ 204.832405][ T5934] submit_bio_noacct_nocheck+0x562/0xc10 [ 204.834387][ T5934] submit_bio_noacct+0xd17/0x2010 [ 204.836155][ T5934] submit_bh_wbc+0x59c/0x770 [ 204.837847][ T5934] block_read_full_folio+0x264/0x8e0 [ 204.839722][ T5934] filemap_read_folio+0xfc/0x3b0 [ 204.841498][ T5934] do_read_cache_folio+0x2d7/0x6b0 [ 204.843317][ T5934] read_part_sector+0xd1/0x370 [ 204.845023][ T5934] adfspart_check_ICS+0x93/0x910 [ 204.846788][ T5934] bdev_disk_changed+0x7f8/0xc80 [ 204.848540][ T5934] blkdev_get_whole+0x187/0x290 [ 204.850295][ T5934] bdev_open+0x2c7/0xe40 [ 204.851860][ T5934] blkdev_open+0x34e/0x4f0 [ 204.853473][ T5934] do_dentry_open+0x6d8/0x1660 [ 204.855121][ T5934] vfs_open+0x82/0x3f0 [ 204.856613][ T5934] path_openat+0x208c/0x31a0 [ 204.858277][ T5934] do_file_open+0x20e/0x430 [ 204.859899][ T5934] do_sys_openat2+0x10d/0x1e0 [ 204.861617][ T5934] __x64_sys_openat+0x12d/0x210 [ 204.863297][ T5934] do_syscall_64+0x106/0xf80 [ 204.864942][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.867015][ T5934] [ 204.867015][ T5934] other info that might help us debug this: [ 204.867015][ T5934] [ 204.870238][ T5934] Chain exists of: [ 204.870238][ T5934] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 204.870238][ T5934] [ 204.874065][ T5934] Possible unsafe locking scenario: [ 204.874065][ T5934] [ 204.876391][ T5934] CPU0 CPU1 [ 204.878143][ T5934] ---- ---- [ 204.879833][ T5934] lock(&cmd->lock); [ 204.881187][ T5934] lock(set->srcu); [ 204.883190][ T5934] lock(&cmd->lock); [ 204.885441][ T5934] lock(&nsock->tx_lock); [ 204.886909][ T5934] [ 204.886909][ T5934] *** DEADLOCK *** [ 204.886909][ T5934] [ 204.889536][ T5934] 3 locks held by udevd/5934: [ 204.891108][ T5934] #0: ffff888029b22358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 204.894180][ T5934] #1: ffff888029a4f118 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22e/0x670 [ 204.897222][ T5934] #2: ffff8880566d8180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xba/0x1080 [ 204.900091][ T5934] [ 204.900091][ T5934] stack backtrace: [ 204.902117][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 204.902133][ T5934] Tainted: [L]=SOFTLOCKUP [ 204.902137][ T5934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 204.902144][ T5934] Call Trace: [ 204.902152][ T5934] [ 204.902158][ T5934] dump_stack_lvl+0x100/0x190 [ 204.902180][ T5934] print_circular_bug.cold+0x178/0x1c7 [ 204.902198][ T5934] check_noncircular+0x146/0x160 [ 204.902220][ T5934] __lock_acquire+0x14b8/0x2630 [ 204.902232][ T5934] lock_acquire+0x1cf/0x380 [ 204.902242][ T5934] ? nbd_queue_rq+0x428/0x1080 [ 204.902253][ T5934] ? __pfx___might_resched+0x10/0x10 [ 204.902268][ T5934] __mutex_lock+0x1a2/0x1b90 [ 204.902282][ T5934] ? nbd_queue_rq+0x428/0x1080 [ 204.902293][ T5934] ? nbd_queue_rq+0x428/0x1080 [ 204.902303][ T5934] ? is_bpf_text_address+0x8a/0x1a0 [ 204.902320][ T5934] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 204.902340][ T5934] ? __pfx___mutex_lock+0x10/0x10 [ 204.902351][ T5934] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 204.902366][ T5934] ? is_bpf_text_address+0x94/0x1a0 [ 204.902382][ T5934] ? kernel_text_address+0x8d/0x100 [ 204.902395][ T5934] ? arch_stack_walk+0xa6/0xf0 [ 204.902410][ T5934] ? nbd_queue_rq+0x428/0x1080 [ 204.902420][ T5934] nbd_queue_rq+0x428/0x1080 [ 204.902431][ T5934] ? stack_trace_save+0x8e/0xc0 [ 204.902446][ T5934] ? __pfx_nbd_queue_rq+0x10/0x10 [ 204.902458][ T5934] ? add_lock_to_list+0x99/0x110 [ 204.902473][ T5934] ? lockdep_unlock+0x5a/0xc0 [ 204.902486][ T5934] ? __lock_acquire+0xd73/0x2630 [ 204.902497][ T5934] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 204.902516][ T5934] ? sbitmap_get+0x1d7/0x360 [ 204.902635][ T5934] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 204.902650][ T5934] ? __blk_mq_alloc_driver_tag+0x27a/0x7a0 [ 204.902665][ T5934] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 204.902682][ T5934] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 204.902699][ T5934] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 204.902713][ T5934] blk_mq_run_hw_queue+0x23c/0x670 [ 204.902726][ T5934] ? blk_mq_run_hw_queue+0x22e/0x670 [ 204.902738][ T5934] blk_mq_dispatch_list+0x51d/0x1360 [ 204.902754][ T5934] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 204.902769][ T5934] ? blk_add_trace_plug+0xf5/0x290 [ 204.902782][ T5934] blk_mq_flush_plug_list+0x130/0x600 [ 204.902797][ T5934] ? trace_block_plug+0x6e/0x240 [ 204.902807][ T5934] ? blk_add_rq_to_plug+0x30a/0x540 [ 204.902822][ T5934] ? __pfx_wbt_track+0x10/0x10 [ 204.902834][ T5934] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 204.902849][ T5934] ? blk_mq_submit_bio+0x9aa/0x2bf0 [ 204.902865][ T5934] __blk_flush_plug+0x2c4/0x4b0 [ 204.902881][ T5934] ? __pfx___blk_flush_plug+0x10/0x10 [ 204.902893][ T5934] ? vfs_open+0x82/0x3f0 [ 204.902907][ T5934] ? path_openat+0x208c/0x31a0 [ 204.902917][ T5934] ? do_file_open+0x20e/0x430 [ 204.902928][ T5934] ? do_sys_openat2+0x10d/0x1e0 [ 204.902941][ T5934] ? __x64_sys_openat+0x12d/0x210 [ 204.902954][ T5934] ? do_syscall_64+0x106/0xf80 [ 204.902966][ T5934] __submit_bio+0x584/0x6c0 [ 204.902985][ T5934] ? __pfx___submit_bio+0x10/0x10 [ 204.903007][ T5934] ? submit_bio_noacct_nocheck+0x562/0xc10 [ 204.903026][ T5934] submit_bio_noacct_nocheck+0x562/0xc10 [ 204.903047][ T5934] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 204.903068][ T5934] ? __pfx___might_resched+0x10/0x10 [ 204.903087][ T5934] ? bio_alloc_bioset+0x309/0x850 [ 204.903099][ T5934] submit_bio_noacct+0xd17/0x2010 [ 204.903114][ T5934] submit_bh_wbc+0x59c/0x770 [ 204.903129][ T5934] block_read_full_folio+0x264/0x8e0 [ 204.903146][ T5934] ? __pfx_blkdev_get_block+0x10/0x10 [ 204.903160][ T5934] ? __pfx_blkdev_read_folio+0x10/0x10 [ 204.903174][ T5934] filemap_read_folio+0xfc/0x3b0 [ 204.903190][ T5934] ? __pfx_filemap_read_folio+0x10/0x10 [ 204.903206][ T5934] do_read_cache_folio+0x2d7/0x6b0 [ 204.903222][ T5934] ? __pfx_blkdev_read_folio+0x10/0x10 [ 204.903237][ T5934] read_part_sector+0xd1/0x370 [ 204.903250][ T5934] adfspart_check_ICS+0x93/0x910 [ 204.903262][ T5934] ? snprintf+0xc7/0x100 [ 204.903328][ T5934] ? __pfx_snprintf+0x10/0x10 [ 204.903346][ T5934] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 204.903358][ T5934] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 204.903372][ T5934] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 204.903385][ T5934] bdev_disk_changed+0x7f8/0xc80 [ 204.903399][ T5934] ? __pfx_bdev_disk_changed+0x10/0x10 [ 204.903413][ T5934] blkdev_get_whole+0x187/0x290 [ 204.903426][ T5934] bdev_open+0x2c7/0xe40 [ 204.903439][ T5934] blkdev_open+0x34e/0x4f0 [ 204.903454][ T5934] do_dentry_open+0x6d8/0x1660 [ 204.903465][ T5934] ? __pfx_blkdev_open+0x10/0x10 [ 204.903481][ T5934] vfs_open+0x82/0x3f0 [ 204.903494][ T5934] path_openat+0x208c/0x31a0 [ 204.903508][ T5934] ? __pfx_path_openat+0x10/0x10 [ 204.903521][ T5934] do_file_open+0x20e/0x430 [ 204.903533][ T5934] ? __pfx_do_file_open+0x10/0x10 [ 204.903549][ T5934] ? alloc_fd+0x476/0x790 [ 204.903562][ T5934] ? do_getname+0x191/0x390 [ 204.903576][ T5934] do_sys_openat2+0x10d/0x1e0 [ 204.903590][ T5934] ? __pfx_do_sys_openat2+0x10/0x10 [ 204.903604][ T5934] ? __sys_recvmsg+0x18c/0x220 [ 204.903620][ T5934] ? __pfx___sys_recvmsg+0x10/0x10 [ 204.903636][ T5934] __x64_sys_openat+0x12d/0x210 [ 204.903650][ T5934] ? __pfx___x64_sys_openat+0x10/0x10 [ 204.903666][ T5934] do_syscall_64+0x106/0xf80 [ 204.903676][ T5934] ? clear_bhb_loop+0x40/0x90 [ 204.903688][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.903700][ T5934] RIP: 0033:0x7f90d3ea7407 [ 204.903711][ T5934] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 204.903722][ T5934] RSP: 002b:00007ffc0b069890 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 204.903733][ T5934] RAX: ffffffffffffffda RBX: 00007f90d4567880 RCX: 00007f90d3ea7407 [ 204.903741][ T5934] RDX: 00000000000a0800 RSI: 0000559610f59a20 RDI: ffffffffffffff9c [ 204.903747][ T5934] RBP: 0000559610d1d2c0 R08: 0000000000000000 R09: 0000000000000000 [ 204.903753][ T5934] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559610f6c150 [ 204.903759][ T5934] R13: 0000559610f588d0 R14: 0000000000000000 R15: 0000559610f6c150 [ 204.903769][ T5934] [ 204.912212][ T63] block nbd0: Receive control failed (result -32) [ 204.913403][ T5933] block nbd0: Receive control failed (result -32) [ 204.935670][ T5934] block nbd0: Send control failed (result -32) [ 204.956783][ T5943] block nbd0: Receive control failed (result -32) [ 204.957566][ T5934] block nbd0: Request send failed, requeueing [ 205.110369][ T25] block nbd0: Dead connection, failed to find a fallback [ 205.112724][ T25] block nbd0: shutting down sockets [ 205.115268][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.117184][ T5934] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.120681][ T25] buffer_io_error: 42 callbacks suppressed [ 205.120692][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 205.121383][ T5934] Buffer I/O error on dev nbd0, logical block 1, async page read [ 205.128287][ T5934] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.131355][ T5934] Buffer I/O error on dev nbd0, logical block 2, async page read [ 205.133966][ T5934] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.136957][ T5934] Buffer I/O error on dev nbd0, logical block 3, async page read [ 205.139754][ T5934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.143198][ T5934] Buffer I/O error on dev nbd0, logical block 0, async page read [ 205.145917][ T5934] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.148861][ T5934] Buffer I/O error on dev nbd0, logical block 1, async page read [ 205.151458][ T5934] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.154625][ T5934] Buffer I/O error on dev nbd0, logical block 2, async page read [ 205.157138][ T5934] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.163557][ T5934] Buffer I/O error on dev nbd0, logical block 3, async page read [ 205.166224][ T5934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.169224][ T5934] Buffer I/O error on dev nbd0, logical block 0, async page read [ 205.172189][ T5934] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 205.176408][ T5934] Buffer I/O error on dev nbd0, logical block 1, async page read [ 205.184390][ T5934] ldm_validate_partition_table(): Disk read failed. [ 205.188809][ T5934] Dev nbd0: unable to read RDB block 0 [ 205.190886][ T5934] nbd0: unable to read partition table [ 205.202587][ T5934] ldm_validate_partition_table(): Disk read failed. [ 205.205087][ T5934] Dev nbd0: unable to read RDB block 0 [ 205.207113][ T5934] nbd0: unable to read partition table [ 205.290923][ T9711] .`: (slave syz_tun): Releasing backup interface [ 205.634534][ T40] kauditd_printk_skb: 289 callbacks suppressed [ 205.634547][ T40] audit: type=1400 audit(1775684016.965:19009): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 205.645601][ T1175] bridge_slave_1: left allmulticast mode [ 205.645743][ T40] audit: type=1400 audit(1775684016.965:19010): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 205.647427][ T1175] bridge_slave_1: left promiscuous mode [ 205.656779][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.657371][ T40] audit: type=1400 audit(1775684016.984:19011): avc: denied { read } for pid=5644 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 205.665736][ T40] audit: type=1400 audit(1775684016.984:19012): avc: denied { search } for pid=5644 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.672378][ T40] audit: type=1400 audit(1775684016.984:19013): avc: denied { search } for pid=5644 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.672598][ T1175] bridge_slave_0: left allmulticast mode [ 205.679147][ T40] audit: type=1400 audit(1775684016.984:19014): avc: denied { search } for pid=5644 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.680998][ T1175] bridge_slave_0: left promiscuous mode [ 205.688196][ T40] audit: type=1400 audit(1775684016.984:19015): avc: denied { read } for pid=5644 comm="dhcpcd" name="n122" dev="tmpfs" ino=7490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.690034][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.696771][ T40] audit: type=1400 audit(1775684016.984:19016): avc: denied { read open } for pid=5644 comm="dhcpcd" path="/run/udev/data/n122" dev="tmpfs" ino=7490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.706317][ T40] audit: type=1400 audit(1775684016.984:19017): avc: denied { getattr } for pid=5644 comm="dhcpcd" path="/run/udev/data/n122" dev="tmpfs" ino=7490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 205.837519][ T1175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.840863][ T1175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.844169][ T1175] bond0 (unregistering): Released all slaves [ 205.863834][ T40] audit: type=1400 audit(1775684017.180:19018): avc: denied { search } for pid=12827 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.984303][ T1175] IPVS: stopping backup sync thread 12811 ... [ 206.193240][ T1175] hsr_slave_0: left promiscuous mode [ 206.195833][ T1175] hsr_slave_1: left promiscuous mode [ 206.199699][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.202404][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.853168][ T1175] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.856726][ T1175] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.959825][ T1175] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.963303][ T1175] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.011076][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.013462][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.034715][ T1175] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.039098][ T1175] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.098320][ T1175] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.101619][ T1175] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.197133][ T1175] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.200366][ T1175] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.275124][ T1175] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.278634][ T1175] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.341885][ T1175] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.345493][ T1175] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.523375][ T1175] bridge_slave_1: left allmulticast mode [ 207.525469][ T1175] bridge_slave_1: left promiscuous mode [ 207.527347][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.530981][ T1175] bridge_slave_0: left allmulticast mode [ 207.532815][ T1175] bridge_slave_0: left promiscuous mode [ 207.536203][ T1175] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.803501][ T1175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.807287][ T1175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.810680][ T1175] bond0 (unregistering): Released all slaves [ 207.914913][ T1175] dvmrp8 (unregistering): left allmulticast mode [ 208.358281][ T1175] bond5 (unregistering): (slave bridge0): Releasing backup interface [ 208.361358][ T1175] bridge0 (unregistering): left allmulticast mode [ 208.411581][ T1175] .` (unregistering): Released all slaves [ 208.414991][ T1175] bond0 (unregistering): Released all slaves [ 208.419174][ T1175] bond1 (unregistering): Released all slaves [ 208.423473][ T1175] bond2 (unregistering): Released all slaves [ 208.427651][ T1175] bond3 (unregistering): Released all slaves [ 208.438899][ T1175] bond4 (unregistering): Released all slaves [ 208.445695][ T1175] bond5 (unregistering): Released all slaves [ 208.527678][ T1175] : left promiscuous mode [ 208.609728][ T1175] tipc: Left network mode [ 208.618744][ T1175] tipc: Left network mode [ 209.158748][ T1175] hsr_slave_0: left promiscuous mode [ 209.161373][ T1175] hsr_slave_1: left promiscuous mode [ 209.163723][ T1175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.166662][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.189804][ T1175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.193858][ T1175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.211497][ T1175] hsr_slave_0: left promiscuous mode [ 209.214347][ T1175] hsr_slave_1: left promiscuous mode [ 209.219198][ T1175] veth1_macvtap: left promiscuous mode [ 209.221071][ T1175] veth0_macvtap: left promiscuous mode [ 209.223264][ T1175] veth1_vlan: left promiscuous mode [ 209.225282][ T1175] veth0_vlan: left promiscuous mode [ 209.228027][ T1175] veth1_macvtap: left promiscuous mode [ 209.230151][ T1175] veth0_macvtap: left promiscuous mode [ 209.232367][ T1175] veth1_vlan: left promiscuous mode [ 209.234608][ T1175] veth0_vlan: left promiscuous mode [ 209.289854][ T1175] team0 (unregistering): Port device vlan2 removed [ 209.334698][ T1175] team0 (unregistering): Port device team_slave_1 removed [ 209.339718][ T1175] team0 (unregistering): Port device team_slave_0 removed [ 209.412788][ T7516] smc: removing ib device syz0 [ 209.509479][ T29] syz0: Port: 1 Link DOWN [ 210.109322][ T1175] IPVS: stop unused estimator thread 0... [ 212.411466][ T40] kauditd_printk_skb: 536 callbacks suppressed [ 212.411480][ T40] audit: type=1400 audit(1775684023.307:19555): avc: denied { search } for pid=12947 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.420378][ T40] audit: type=1400 audit(1775684023.316:19556): avc: denied { search } for pid=12947 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.427383][ T40] audit: type=1400 audit(1775684023.316:19557): avc: denied { search } for pid=12947 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.434674][ T40] audit: type=1400 audit(1775684023.316:19558): avc: denied { search } for pid=12947 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.442546][ T40] audit: type=1400 audit(1775684023.316:19559): avc: denied { search } for pid=12948 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.449369][ T40] audit: type=1400 audit(1775684023.316:19560): avc: denied { search } for pid=12948 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.456850][ T40] audit: type=1400 audit(1775684023.316:19561): avc: denied { search } for pid=12948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.464195][ T40] audit: type=1400 audit(1775684023.316:19562): avc: denied { read open } for pid=12948 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.472104][ T40] audit: type=1400 audit(1775684023.316:19563): avc: denied { getattr } for pid=12948 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.480057][ T40] audit: type=1400 audit(1775684023.316:19564): avc: denied { add_name } for pid=12947 comm="dhcpcd-run-hook" name="resolv.conf.eth7.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1