last executing test programs: 2m52.920164525s ago: executing program 0 (id=519): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000700)=@newtaction={0x44c, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x2, 0x0, 0x10, 0x0, 0x9, 0xc, 0x4, 0x3, 0x5, 0xa7f, 0x80000000, 0x8000, 0x101, 0x61, 0x747a, 0x2, 0x0, 0xa67, 0x4, 0xd7a3, 0xa82, 0x8, 0x6, 0xa, 0x1fae, 0x3ff, 0x1, 0x6, 0x7, 0x7d9, 0x9, 0x2, 0x4, 0x2, 0x200, 0x2312, 0xf6, 0x7fff, 0xdc, 0x6, 0xe, 0x5, 0x0, 0x7, 0x4, 0xff, 0xbe2, 0xcf3, 0x2, 0x8, 0xfd85, 0x6, 0xfffffff9, 0x80, 0x2, 0x701bff4d, 0x3, 0x1, 0x401, 0x1, 0x0, 0x3, 0x3, 0xbc8, 0x401, 0x81, 0xff, 0x3, 0x9, 0x80000001, 0x7, 0xffffff53, 0xc4d, 0x7, 0x6, 0xe, 0x8, 0xb, 0xb, 0xc0000000, 0xbb, 0x6, 0x4, 0x10000, 0x1000, 0x2, 0x6, 0x1, 0x5, 0xfffffffd, 0x80, 0x1, 0x80000001, 0x23b899da, 0x3, 0x6, 0x1000, 0x91a, 0x72, 0x6, 0x4, 0x0, 0x40, 0x1, 0x8a, 0x10000, 0x3, 0x7, 0x7, 0x3, 0x8, 0x5, 0x6, 0x4, 0xd, 0x10, 0x10001, 0x45, 0x3, 0x1ff000, 0x8001, 0x10001, 0xffff, 0x4, 0x4, 0x6, 0x5, 0x869, 0x4, 0x4, 0x3, 0xff, 0x2, 0x1, 0x1, 0x35b3, 0x7, 0x6, 0xffffffff, 0x67, 0x8, 0x800000, 0xdf2, 0x0, 0xff, 0x1f785a30, 0x8, 0xf, 0x5, 0x6, 0x55, 0x1, 0x5, 0x5b2, 0xb7, 0x4, 0x4, 0x3, 0x5, 0xd, 0x5, 0xd2da, 0x219, 0x5, 0x3, 0x7, 0xb0, 0x4, 0x81, 0x1000, 0x8, 0x7, 0x5, 0x7fff, 0x8a, 0xffff, 0x9, 0x5, 0x0, 0x1, 0xfa, 0x7fc00000, 0x2, 0x8, 0x1, 0x2, 0x8, 0x8, 0x7, 0x5, 0x40, 0x1, 0x5, 0x2, 0x9, 0x7ff, 0x8ea5, 0xa2, 0x4, 0x6, 0x1, 0x6, 0x4, 0x80000001, 0xa82, 0xa59d, 0x55, 0x4, 0x9, 0xe, 0xffffffff, 0x7, 0x8773, 0xdc, 0x7, 0x7f, 0x1, 0x4179, 0x5c, 0x9, 0x3, 0x6, 0xa, 0x99, 0x7, 0x7, 0x9, 0xfffffff9, 0xd97, 0x37, 0x8, 0x1, 0x6, 0x1000, 0x6, 0x699, 0x4, 0x720a, 0x1, 0x4, 0x7f, 0x3, 0x9, 0x1, 0x7fff, 0x1, 0x6, 0x7ff, 0x8, 0x7f, 0x7fff, 0x2, 0x2, 0x7fffffff, 0xfffffffb]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3f}}}}]}]}, 0x44c}}, 0x0) syz_usb_connect$uac1(0x3, 0xffffffffffffff2f, &(0x7f0000000400)={{0x12, 0x1, 0xc2c837444fab22da, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x3, 0x1, 0xf9, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xe}, [@selector_unit={0x0, 0x24, 0x5, 0x3, 0x80, "5295"}, @output_terminal={0x0, 0x24, 0x3, 0x4, 0x303, 0x6, 0x6, 0x9}, @input_terminal={0x0, 0x24, 0x2, 0x5, 0x206, 0x5, 0x5, 0x3, 0x9, 0x34}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x61, 0xff, {0x7, 0x25, 0x1, 0x2, 0x3, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xfffe, 0x2, 0x1, "e66a31fe"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x8, 0x4, 0x7, 0xe8}]}, {{0x9, 0x5, 0x82, 0x9, 0x28, 0x1, 0x65, 0xac, {0x7, 0x25, 0x1, 0x80, 0x50, 0x7ff}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x52a9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0xf4, 0x80, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "d8bb67"}, {0x5, 0x24, 0x0, 0xcc94}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x7, 0x0, 0xd}, {0x6, 0x24, 0x1a, 0xfffb, 0xc06245002bb9dd04}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}, @acm={0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfd, 0x6, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xa, 0x10, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xfb, 0x7, 0x4}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x0, 0x3c, 0x4, 0x50, 0x4}, 0xbb, &(0x7f0000000280)={0x5, 0xf, 0xbb, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x36e92a1, 0x11f0f, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0x5, 0xf00f, 0x96, [0xf, 0xc0f0]}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x10, 0x2, 0x0, 0xf0f, 0xb2, [0xffc0cf, 0x5f0f]}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x5, 0x780, 0x5}, @generic={0x73, 0x10, 0x6, "5de02aeab7b3ba05658821bb1b08dd0c5ae44cee0e8cca970ada8ca53b1768b15ee76704842c9ad2436013af1c8a6e0333a55a1d46063479efd3f5f6d54d0187103c18a4126eb0fb26c71aabe532eb49899ab0a67691934ff109a09538f3ac17069c6695f66f438c1e05c3cd055325b4"}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x429}}]}) 2m49.878846112s ago: executing program 0 (id=545): ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x440000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, {[@ssrr={0x89, 0x7, 0xce, [@broadcast]}, @generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m49.876205692s ago: executing program 0 (id=546): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x3) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) listen(r1, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) close(0x3) 2m49.781366001s ago: executing program 0 (id=547): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9ee}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0x5, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48880}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f00000003c0)="c42c934c365941ddc4fe4c9aa7766db0d25f8a9fc11800a9afc73f5d155686159fb18f0993a49d8114c232faf1620a00000000200100002fc4b5dc810cd807e1572f01110b67518746700000000000000000000000001328461fc59d017ce930fe88d66b90d8655417bb7a1c7f71bb6fe4da8910ca1bf8c4597cdf02f384018bde4300148de57b4c5032650aecfbfceada5012ade657c8eb5e7a914bc88bfb8ef095d2bfee5e5d", 0xa7) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) setns(r5, 0x8000000) 2m48.926488625s ago: executing program 0 (id=563): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x79f441, 0x91) umount2(&(0x7f0000000000)='./file0\x00', 0x9) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x8004}, 0x20008010) fcntl$lock(r4, 0x7, &(0x7f0000002000)={0x1, 0x3}) mount(&(0x7f0000000300)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x200013, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r4, 0x26, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) mq_notify(r0, &(0x7f0000000200)={0x0, 0x39, 0x2, @thr={&(0x7f00000000c0)="ad6ace", &(0x7f0000000140)="1949f713824c1dd7e966c36e1b9e3552a6969662e18f587c8b1abf2cc5334c3485"}}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000240)=0xfffffffe) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000500)=ANY=[@ANYBLOB="c633adf1ede0c5bf551e50de8e064e7dcedb2efa71f23a40ba18ba9aae520ee1b5943bcb4729d009b7d9c1fca3f23924beef225c7ff5da793ab02a48dfd5627e3ad5f9da34c7cc26b618b66f6aa5cf6eee9898393a3ac57a84001764aae32f59bc45c509d4af61f9329dc0a9c51caa8bedd73119aeec9c5e7e918644d1cf961bf30e99c4a77b87a317f97e66fef6ca3203746add7908c3aadfe98f9ee601cc9f5d94c299962fa400d7", @ANYRES32=r8, @ANYRESOCT=r2, @ANYRES16=r2]) 2m48.703954976s ago: executing program 0 (id=568): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000060015000400000014001680100008800c0003"], 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="500800000000000014001a80100004800c00088008"], 0x34}}, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0xfffffdd8, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x88, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000804}, 0x24000000) (async) sendto$packet(r0, &(0x7f0000000080)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 2m33.600583335s ago: executing program 32 (id=568): r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000060015000400000014001680100008800c0003"], 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="500800000000000014001a80100004800c00088008"], 0x34}}, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0xfffffdd8, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x88, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000804}, 0x24000000) (async) sendto$packet(r0, &(0x7f0000000080)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 2m10.111051387s ago: executing program 1 (id=1097): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r0, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4094, 0xffe}], 0x1, 0xbfd, 0x0, 0x1c) ppoll(&(0x7f0000000140)=[{r0}, {r0, 0xd081}, {r0, 0x206}, {r0, 0x5000}], 0x4, &(0x7f0000000180), &(0x7f00000001c0)={[0x6]}, 0x8) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30, 0x2d, 0x31, 0x3a, 0x31, 0x2f]}}}, 0x4e}]}) 2m10.106054685s ago: executing program 1 (id=1099): pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @multicast}) ioctl(r1, 0x8b2a, &(0x7f0000000040)) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000780)={0x1, r3}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x14002, 0x0) syz_clone3(&(0x7f0000000080)={0x201a00000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0xfffffffffffffcb6, 0x0, 0x0, 0x0, {r4}}, 0x58) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES8=0x0, @ANYRES32, @ANYRES16, @ANYRESDEC=r4, @ANYRESOCT=r4], 0x0) 2m10.011049763s ago: executing program 1 (id=1100): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'gretap0\x00', 0x2}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000500)=ANY=[@ANYBLOB="c633adf1ede0c5bf551e50de8e064e7dcedb2efa71f23a40ba18ba9aae520ee1b5943bcb4729d009b7d9c1fca3f23924beef225c7f"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0x0}}, './file0\x00'}) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@gid={'gid', 0x3d, r4}}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)=""/4096, 0x1000}, 0x10000) 2m9.15806324s ago: executing program 1 (id=1118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {0x4, 0x4}, [], {}, {0x20, 0x5}}, 0x24, 0x2) (async) rmdir(&(0x7f0000000000)='./file0\x00') (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000090603000000000000000000050000406994eba3e2e04083bcb68bd0b4aa58390959a72b3c8141f04a5031e66c2337eef1dc7e4ceccd429df472fdf4b3a862604e55c779a6037636bbeecc68246076df91a8f36fca5b0cc9e90ea0"], 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) (async) read(r1, &(0x7f0000000140)=""/250, 0xfdef) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000040)=0x1f) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) 2m9.101084858s ago: executing program 1 (id=1120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x34}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async) socketpair(0x2b, 0x1, 0x1, &(0x7f0000000080)) 2m8.930897886s ago: executing program 1 (id=1124): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000804) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 2m1.400697382s ago: executing program 2 (id=1213): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000000080)={&(0x7f0000000040)={0xa, 0xa, 0x80004, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x2c}}}], 0x18}, 0x0) 2m1.295983432s ago: executing program 2 (id=1214): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002080)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x81, 0x8c4b, 0x800, 0xa1, 0x4, 0x8, 0x3, 0x7, 0x1, 0x3, 0x8, 0x1000003, 0x7, 0xfffffe01, 0x1, 0x2, 0x4, 0x81, 0x9, 0x1, 0xb3b0, 0x5, 0x69, 0x8, 0x1000, 0x5, 0x8c0, 0x2, 0x75, 0x9, 0x7f, 0x4, 0x9, 0x0, 0xce, 0x1, 0xb, 0x0, 0xc4ff, 0x9436, 0x8, 0x3, 0x1, 0xa3f, 0x9, 0x200, 0xaaa, 0x2, 0x9, 0x200, 0x2, 0x86, 0x1, 0x100, 0x0, 0x3, 0xfffffffe, 0x6, 0x6, 0xd, 0xfd1, 0x8, 0x6, 0xff, 0x0, 0x7, 0x235, 0x1, 0x10001, 0xeec, 0x0, 0x4, 0xdbdf, 0x8, 0x5, 0x6, 0xee3a, 0x9a, 0x0, 0xffff, 0x9, 0x10001, 0x4, 0x5, 0x8001, 0x4, 0x0, 0x7, 0x1, 0x6, 0x200, 0x101, 0x0, 0x4, 0x7, 0x1000, 0x1, 0x4, 0x1, 0xfffffffa, 0x8, 0xd27, 0xf6, 0x4, 0xe48, 0x100, 0x9, 0x6, 0xfffffff7, 0xa6, 0x9, 0x59, 0x8, 0x5, 0x9, 0x9, 0xfffffff7, 0x723, 0xbc6, 0x4, 0x7, 0x10000, 0x7, 0xffff, 0x1, 0x0, 0xbb8, 0x3, 0xb, 0x2, 0xffffffff, 0x9, 0x5, 0x9, 0x1, 0x80000001, 0x80000000, 0x8800000, 0x4, 0x40, 0x0, 0x6789, 0x40, 0xdd9, 0x7ff, 0x800, 0xe, 0x1, 0x2, 0x5347, 0x5, 0x9, 0x9, 0x8, 0x5, 0x101, 0x8, 0x3, 0x3, 0x1ff, 0x8004, 0x7, 0x1, 0x9, 0x801, 0x9, 0x54aa3579, 0x1, 0xfffffffe, 0x4, 0xdbdd, 0x4, 0x8000, 0x4, 0x4, 0x4, 0x3, 0xfffffff8, 0x1000, 0x200005, 0x400, 0xb, 0x0, 0x8, 0x6, 0x3f800000, 0x8, 0x810a, 0x6f5334a4, 0x29ad, 0xffffffff, 0x4822, 0x4, 0x4, 0xff, 0x368, 0x0, 0x9, 0x7f, 0xfffffffe, 0xac9, 0x8, 0x4, 0x5, 0x5, 0x3, 0x30000000, 0xb5000000, 0x4, 0x3, 0x4, 0x0, 0x3, 0xeb4, 0x8, 0x3, 0x5, 0x1, 0x7f, 0x7, 0x6, 0x3ff, 0x1, 0x1, 0x1, 0xfff, 0x3, 0x4, 0x3ff, 0x8000, 0x8, 0x9, 0x7, 0xa, 0xfff, 0x4, 0x6, 0x1, 0x8, 0x2, 0x10001, 0x4, 0x9, 0x0, 0x1, 0x25, 0x0, 0x6, 0x40, 0x6, 0x6, 0x6, 0x13, 0x6, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x1, 0x7ff, 0x7, {0x5, 0x1, 0xfffe, 0x0, 0x3, 0x6}, {0x3, 0x1, 0xff, 0x2, 0x7, 0x239c}, 0x5, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x6, 0x1, 0xffff000, 0xfd, 0x3, 0x4d, 0x3, 0x9, 0x4, 0xffffff15, 0x2, 0x48, 0x9, 0x100, 0x6, 0x0, 0xfffff943, 0x4, 0x7ff, 0x8, 0x5, 0x40, 0x400, 0x0, 0x2, 0x6, 0x8, 0x7fffffff, 0x6, 0x401, 0x8, 0x3, 0x0, 0x7, 0xfffff1b2, 0x3af6, 0xb, 0x8, 0x6, 0x8, 0x2, 0x6, 0x6942, 0x54740000, 0xbd, 0x0, 0x1, 0x8, 0x1, 0x7fff, 0xca, 0x2, 0x0, 0x9, 0x8, 0x81, 0x3, 0x5, 0x3, 0x9, 0x77e, 0xb95, 0x8, 0x0, 0x0, 0xdcb, 0xfffffff7, 0x1, 0xffffffff, 0x800, 0x3, 0x38e, 0xfffffffd, 0x4, 0x7fffffff, 0x5, 0x8000, 0xa, 0x6, 0x4, 0xdffffff8, 0xd2, 0x4, 0x9, 0x2, 0xa170, 0x81, 0x8000, 0x1687, 0x8, 0x4, 0xb, 0x0, 0xffffffff, 0x7ff, 0x4, 0x7b, 0x183cf332, 0x8, 0x7f, 0x80000001, 0x8, 0xf41849fd, 0xfffffffd, 0x7, 0x6c, 0x5, 0x6, 0x3, 0x6, 0xfffffff9, 0x9, 0x6, 0x0, 0x0, 0x2, 0x80000000, 0x2, 0xf3, 0x8, 0x1, 0x7fffffff, 0x6, 0xd0c9, 0xa6d, 0x0, 0x3, 0xd6, 0x4, 0x7bf6, 0xffffffa1, 0x73c, 0x6, 0x6, 0x5, 0x200, 0x5, 0x2, 0xe2df, 0xfffffff6, 0x100, 0x1000, 0xa1d4, 0xd4, 0xd, 0x5, 0x1, 0x5, 0x0, 0x3, 0x0, 0x401, 0xd53, 0xfff, 0x10, 0x4, 0x8, 0x6, 0x1f1, 0x9, 0xfffffffe, 0x0, 0x1, 0x5, 0x8, 0x1, 0x5, 0xa, 0x5, 0x5, 0xffffff35, 0x8, 0xd, 0x101, 0xffffffff, 0x8, 0xc24, 0xd84, 0x6, 0x3, 0xa, 0x10001, 0x3, 0x1, 0xfffffffa, 0x7, 0xc8, 0x8, 0x5, 0xffffffff, 0xb, 0x6, 0x4, 0xfffffff7, 0x20e, 0x7, 0x7fffffff, 0x10001, 0x4, 0x400, 0x8, 0x2, 0x9, 0x6, 0x5, 0xfffffff9, 0x5, 0x1, 0xe, 0x0, 0x4, 0x9, 0x8, 0x8, 0x1, 0x72, 0x1, 0x8, 0xf, 0x80, 0x6, 0x3, 0x8, 0xda4, 0x81e, 0x1, 0x3, 0x1, 0x1, 0x7, 0x9, 0x4, 0xa, 0x81, 0xeb1, 0xfff, 0x80000001, 0x5, 0x7, 0x0, 0x3, 0x1, 0x9, 0x1, 0xe7, 0xfffffff5, 0x4, 0x3, 0xccb4, 0x400, 0xa51, 0x8, 0x3, 0x4155, 0xedb]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x894}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x40}, [@NDA_DST_MAC={0xa, 0x1, @random='\b\x00'}]}, 0x28}}, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @local, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @empty, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0xd, 0x0, [{0x0, 0x7, "4289b015b1"}]}]}}, "8a62004849dc"}}}}}, 0x0) 2m1.288535414s ago: executing program 2 (id=1215): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'ipvlan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x37}}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000940)={{0x1, 0x9192, 0x2, 0xffff}, 'syz0\x00', 0x4f}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x4) ioctl$UI_DEV_CREATE(r2, 0x5501) read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0xfcdd) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000300)=0x5, 0x4) r5 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r6, 0x602, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x59}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000801}, 0x400c05c) open(&(0x7f0000000100)='.\x00', 0x5d5481, 0x0) 2m1.201597302s ago: executing program 2 (id=1216): mmap(&(0x7f000000e000/0x2000)=nil, 0x2000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.self_freezing\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xd0, &(0x7f00000000c0)=""/208, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 2m1.198842916s ago: executing program 2 (id=1217): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x800038, 0x7, 0x3, 0x180, 0x6, 0x10, 0xf1, 0x100000001, 0x1, 0xca0, 0xffffffffffffffff, 0x2000000002c, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x43100}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x8, 0xa7c, 0x68ff, 0x7, 0x100008000000009, 0x803, 0x3, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x9, 0x75, 0x6, 0x36, 0x0, 0x2, 0xb4}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x1, 0x1, 0xa4, 0x5, 0x5}, {0x8000000, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe, 0x7}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x6, 0xa0, 0xb, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x89, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0xa1}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x39, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x101100, 0x0) read$proc_mixer(r4, &(0x7f00000002c0)=""/254, 0xfe) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$getflags(r5, 0x401) fstat(r0, &(0x7f00000000c0)) 2m0.817457978s ago: executing program 2 (id=1220): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000000000000000000000fe00", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) 1m53.859561468s ago: executing program 33 (id=1124): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000804) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 1m49.199899499s ago: executing program 3 (id=1321): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000000180)="2cd889f0253e14f3d5ac", 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0xffffffce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x2, 0x0) (async) waitid(0x0, 0x0, 0x0, 0x2, 0x0) tkill(r3, 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 1m48.965122927s ago: executing program 3 (id=1322): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x4, 0x4) (async, rerun: 32) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x10d040, 0x0) (rerun: 32) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000002240)={'\x00', 0x3c24, 0x5, 0x8, 0x7, 0xe, 0x0}) (async) statx(r2, &(0x7f0000002440)='./file0\x00', 0x800, 0x20, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000002600)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000002800)={0x3, 0x775, {0xffffffffffffffff}, {0xee00}, 0xffffffffffffff01, 0x3}) (async, rerun: 64) getresgid(&(0x7f0000002840), &(0x7f0000002880), &(0x7f00000028c0)=0x0) (async, rerun: 64) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002900)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000002a00)=0xe8) (async) r11 = geteuid() statx(r1, &(0x7f0000002bc0)='./file0\x00', 0x0, 0x80, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000002e00)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000002f00)=0xe8) (async, rerun: 32) r14 = getgid() (rerun: 32) syz_fuse_handle_req(r1, &(0x7f00000000c0)="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", 0x2000, &(0x7f0000003080)={&(0x7f00000020c0)={0x50, 0x0, 0xc6, {0x7, 0x2b, 0x6, 0xffffffff80000040, 0x9, 0x3d9, 0x2, 0x0, 0x0, 0x0, 0x80, 0x2}}, &(0x7f0000002140)={0x18, 0x0, 0x3, {0x6}}, &(0x7f0000002180)={0x18, 0x0, 0x20000000, {0x6}}, &(0x7f00000021c0)={0x18, 0x0, 0x4433, {0x6}}, &(0x7f0000002200)={0x18, 0x0, 0x1, {0x4fdb}}, &(0x7f00000022c0)={0x28, 0x0, 0x0, {{0x4, 0xfffffffffffffffc, 0x1, r3}}}, &(0x7f0000002300)={0x60, 0xfffffffffffffffe, 0x549b, {{0xffff, 0x7, 0x8, 0x8, 0x4, 0x9, 0x1, 0x8}}}, &(0x7f0000002380)={0x18, 0x0, 0xbd, {0x4}}, &(0x7f00000023c0)={0x12, 0x0, 0x5, {'D\x00'}}, &(0x7f0000002400)={0x20, 0x0, 0x7fff, {0x0, 0x4}}, &(0x7f0000002580)={0x78, 0x0, 0x9, {0x8, 0x6, 0x0, {0x3, 0x100000001, 0x0, 0x81, 0x7575e278, 0x0, 0x80000001, 0x8, 0xb9, 0x8000, 0x1, 0xffffffffffffffff, r4, 0x100, 0x1}}}, &(0x7f0000002640)={0x90, 0x0, 0x5, {0x0, 0x1, 0x1, 0x7, 0xdc, 0x196, {0x5, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0xaa, 0xff, 0x8000, 0xffffffff, r6, 0xee01, 0x8, 0x7}}}, &(0x7f0000002700)={0xc8, 0x2f, 0x8, [{0x3, 0x7, 0xb, 0x9, '/dev/vsock\x00'}, {0x0, 0x6, 0x6, 0x401, '+,/}}['}, {0x4, 0x0, 0xb, 0x1010000, '/dev/vsock\x00'}, {0x4, 0x3, 0x2, 0x9, '--'}, {0x6, 0x9, 0xb, 0x100, '/dev/vsock\x00'}]}, &(0x7f0000002a40)={0x150, 0xfffffffffffffff5, 0x4, [{{0x0, 0x0, 0x5, 0x8, 0xfffffff9, 0x4, {0x4, 0x4, 0x1, 0x9, 0x1, 0x0, 0x8, 0xd55c, 0x8, 0x7000, 0x6, r8, r9, 0x1, 0x37}}, {0x1, 0x2, 0x5, 0xebe, '&[^*.'}}, {{0x2, 0x2, 0x1d, 0x3, 0x8, 0x2, {0x3, 0x7fffffffffffffff, 0x1, 0xd390, 0x7, 0x8001, 0x6d1, 0x2, 0x101, 0xc000, 0x80000000, r10, 0xee01, 0x0, 0x80000000}}, {0x4, 0x3ff, 0x2, 0xe2e2, '*%'}}]}, &(0x7f0000002d00)={0xa0, 0x0, 0x6, {{0x4, 0x2, 0xffff, 0x2, 0xfffffff9, 0x3e, {0x1, 0x2, 0x54d5, 0x3ff, 0x1, 0xfffffffffffff4b9, 0x1, 0x8, 0x0, 0x4000, 0x4, r11, r12, 0x8001, 0xc60}}, {0x0, 0x6}}}, &(0x7f0000002dc0)={0x20, 0xffffffffffffffda, 0x2, {0x5, 0x4, 0x8001}}, &(0x7f0000002f40)={0x130, 0x0, 0x4, {0x7ff, 0x3, 0x0, '\x00', {0x1000, 0x35, 0x9, 0x8, r13, r14, 0x8000, '\x00', 0x6, 0x34184956, 0x6, 0x4, {0x3, 0x2}, {0xfffffffffffffffc, 0x9}, {0x7, 0xfff}, {0xffff, 0x7}, 0x231, 0x2, 0xf880, 0x2}}}}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003140)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f0000003240)=0xe8) (async) bind$802154_dgram(r2, &(0x7f0000003280)={0x24, @none={0x0, 0xffff}}, 0x14) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003300)={{{@in6=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000003400)=0xe8) sendmsg$nl_xfrm(r5, &(0x7f0000003540)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003500)={&(0x7f0000003440)=@newpolicy={0xc0, 0x13, 0x200, 0x70bd2d, 0x25dfdbfb, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x401, 0x4e22, 0x0, 0x2, 0x0, 0x7b394802860832c4, 0x0, r15, r16}, {0x4, 0x338, 0x2, 0xed1e, 0x6, 0x9, 0x5}, {0x666de78b, 0x401, 0x2, 0x5}, 0xffffff83, 0x6e6bb0, 0x2, 0x0, 0x0, 0x3}, [@etimer_thresh={0x8, 0xc, 0x3}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000003580)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000003600)={0x1, 'netdevsim0\x00', 0x1}, 0x18) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000003640)={0x0, 0x3}, &(0x7f0000003680)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000036c0)={r17, 0x83}, 0x8) (async) r18 = syz_open_dev$media(&(0x7f0000003700), 0x5, 0x2a2200) fadvise64(r18, 0x3, 0xffffffff00000000, 0x0) r19 = epoll_create(0x4) kcmp$KCMP_EPOLL_TFD(r3, r7, 0x7, r5, &(0x7f0000003740)={r19, r2, 0x5}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000004780)={{0x0, 0x3, 0x5, 0x5, 0x7, 0x9, 0x0, 0x0, 0x8, 0x4, 0x5, 0x8, 0x6, 0x100, 0x4}}) 1m48.964674074s ago: executing program 3 (id=1323): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="0407000000370000000049df63811d39a5303e206d0e13"], 0x7) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x80) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c8d0}, 0x14) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4b, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x80}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m48.010220057s ago: executing program 3 (id=1329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000240)='./file0/file0\x00', 0x272) r3 = dup(r1) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'caif0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9001c2f8db0049d90491c3248040000f858dbb8a1", 0x2a}, {&(0x7f0000000200)="c082b44eb524", 0x6}, {&(0x7f0000000280)="0b6d16df3ce972afa911719571a7", 0xe}], 0x3) 1m47.930521751s ago: executing program 3 (id=1332): r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f0000006180)={0x2020}, 0x2020) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@l2={0x1f, 0xb5ff, @any, 0xc52a, 0x2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)="4762a77a8b624b681c5927fee31df3bd7a61c90f", 0x14}], 0x1}, 0x490c1) 1m47.828076253s ago: executing program 3 (id=1335): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='pim6reg0\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x10, '\x00', 0x5, 0x40000003, 0x200, 0x8001}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4005820) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, 0x0, 0x0) 1m47.727175767s ago: executing program 34 (id=1335): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='pim6reg0\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x10, '\x00', 0x5, 0x40000003, 0x200, 0x8001}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4005820) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, 0x0, 0x0) 1m45.819065426s ago: executing program 35 (id=1220): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000000000000000000000fe00", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) 33.764999667s ago: executing program 4 (id=3305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000080000100000a34000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a30000000000700074350111e0014000000110001"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xf5}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 33.707218041s ago: executing program 4 (id=3308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000100)={@id={0x2, 0x0, @c}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x5, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x40}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x235b375a37c9d20d}) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_mq={0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) readv(r2, &(0x7f0000000900)=[{&(0x7f0000000240)=""/64, 0x40}], 0x1) r6 = socket$kcm(0x2, 0xa, 0x2) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000500)={'filter\x00', 0x0, 0x0, 0x0, [0x7fff, 0xff, 0xffffffff80000000, 0x2, 0x9, 0x80000001]}, &(0x7f00000002c0)=0x78) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000080000100000a34000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a30000000000700074350111e0014000000110001"], 0x5c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x8, 0x0, 0x0, 0x0, {0x400000000000000, 0x0, 0x413, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x3ff, 0x6000, 0x0, r10, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, r10, &(0x7f00000003c0)) 33.457898861s ago: executing program 4 (id=3315): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000380)}, {0x0}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b43795", 0x25}], 0x4, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 33.457462169s ago: executing program 4 (id=3317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000007030000000000000000e60a0000090900010073797a30"], 0x20}, 0x1, 0x0, 0x0, 0x4044040}, 0x8000) (async) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x20, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x1010, r0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8982) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x1, "f700000000000000000500", '\x00', "0200", "fcffffff", ["5089986400005cacf10000b6", "8e1500", "0c436d743c97c443084000", "ff81000000008000"]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) (async) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r2, &(0x7f0000000240)='./file0\x00') 33.386792472s ago: executing program 4 (id=3318): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000380)}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b437951913173b3187878dc29f77c7a9ec2bf03cada5b063cb819d7f8bf1dd40a6db89c1a2955a4cdde24c64c76d6020", 0x52}], 0x3, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 33.037682761s ago: executing program 4 (id=3330): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x2085098, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001200)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x13c7200, 0x6, 0x8c, 0x0, 0x8001, 0x34d, 0xfff, 0x0, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3e}, @private1, [0xffffffff, 0xffffff, 0xff000000, 0xffffff00], [0xffffff00, 0x0, 0xfffe01, 0xffffff00], 'sit0\x00', 'macvlan1\x00', {}, {0xff}, 0x11, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffff00], [0xff000000, 0xd226f19627fbe51f, 0xffffff00, 0xffffffff], 'dvmrp0\x00', 'netpci0\x00', {0xff}, {0xff}, 0x67, 0x2, 0x5, 0x50}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@local, @remote, [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'syz_tun\x00', 'tunl0\x00', {}, {}, 0x84, 0x87, 0x0, 0x36}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 32.979562773s ago: executing program 36 (id=3330): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x2085098, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001200)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x13c7200, 0x6, 0x8c, 0x0, 0x8001, 0x34d, 0xfff, 0x0, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3e}, @private1, [0xffffffff, 0xffffff, 0xff000000, 0xffffff00], [0xffffff00, 0x0, 0xfffe01, 0xffffff00], 'sit0\x00', 'macvlan1\x00', {}, {0xff}, 0x11, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffff00], [0xff000000, 0xd226f19627fbe51f, 0xffffff00, 0xffffffff], 'dvmrp0\x00', 'netpci0\x00', {0xff}, {0xff}, 0x67, 0x2, 0x5, 0x50}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@local, @remote, [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'syz_tun\x00', 'tunl0\x00', {}, {}, 0x84, 0x87, 0x0, 0x36}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 7.562109147s ago: executing program 5 (id=3659): capset(&(0x7f0000001680)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x6}, 0xc) syz_usb_connect$cdc_ecm(0x1, 0x4e, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c, 0x1, 0x1, 0x8, 0x10, 0x5e, [{{0x9, 0x4, 0x0, 0x7d, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x6, 0x24, 0x6, 0x0, 0x0, ','}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xc954, 0x9, 0x4, 0x5}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0xa, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x9, 0x7, 0x6}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xd9, 0x1, 0x2, 0xff}, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x455}}]}) 4.550849912s ago: executing program 5 (id=3684): bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, 0xffffffffffffffff}, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x91, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @local, @val={@void, {0x8100, 0x6, 0x1, 0x2}}, {@generic={0x5e43, "b337350ace9c0416a09c332797d24124b4b6034afc21364a60a0527468e6af027b4638ed3a3dace6c90eaf410c681929d35edd9c47c985f8a81e81d6f9dd2774cbf5b25203fbc9d12e04ecec3876f2cb9b563db54ed9430f7101722ecd41e20301111e24bc08d33e22ff36e76bc14b3b8d0faf8852e54cbeffd87b6283d9a7"}}}, &(0x7f00000002c0)={0x1, 0x1, [0xd82, 0xd7f, 0xd28, 0x733]}) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000340)={0x8, 0x2, {0x9, @usage=0x6, 0x0, 0x1, 0x80000001, 0x3, 0x6, 0x100000001, 0x40, @usage=0xd, 0x56, 0x9, [0x7f, 0x81, 0x0, 0x1, 0x10000, 0x8001]}, {0x6, @struct={0x3}, 0x0, 0x4, 0x1e, 0x800, 0x5, 0x7, 0x5a, @usage=0x3, 0x8, 0x0, [0x7, 0x565a, 0x0, 0x3, 0x5, 0x4]}, {0x8, @usage=0x9, 0x0, 0xf7d, 0x2, 0x5, 0x6, 0x295, 0x46, @struct={0x9, 0x9}, 0xc, 0x1, [0x4, 0x0, 0x10001, 0x0, 0x8, 0x100000001]}, {0x4, 0x9, 0x3}}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000740)={0x1, 0xffffffff, @start={r2, 0x0, "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", "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"}, [0x100000000, 0x6, 0xfffffffffffffe01, 0x3, 0xc, 0x10000, 0x2, 0x5, 0x4, 0x0, 0x8, 0xb, 0xfffffffffffffff8, 0xf9db, 0x7, 0x1, 0x1ff, 0x5, 0xffffffff, 0xfe, 0x0, 0x4, 0x800, 0x81, 0xffffffffffffb67f, 0x6, 0x7, 0x7, 0x10001, 0x5, 0x2fd10082, 0x7fff, 0x2, 0xfff, 0x7fffffff, 0x2, 0x3, 0x0, 0x4, 0xd49, 0x0, 0xf75e, 0x6, 0x2, 0x7ff, 0x5, 0x6a, 0x5, 0x7, 0x7, 0x100000000, 0xfffffffffffffff9, 0x80000000, 0xbb3, 0x5, 0x8, 0x7, 0x7d790b00, 0x4, 0x83b6850, 0x7, 0xa, 0x3, 0xb9a]}) getsockname$llc(0xffffffffffffffff, &(0x7f0000001180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000011c0)=0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000001200), 0x4) umount2(&(0x7f0000001240)='./file0\x00', 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000001280), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f00000012c0), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000001300), 0x4) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000001340), &(0x7f00000013c0)=0x60, 0x80400) sendmsg$inet(r3, &(0x7f0000001900)={&(0x7f0000001400)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001700)=[{&(0x7f0000001440)="5c42e3ab29cf1b7fd88e9def", 0xc}, {&(0x7f0000001480)="01f349795051c9b9dcfd4edf999aa08b1f91a2e7c9d68014dbdd9ad17dd3e9f5776e46ceddda7a20182346a671d843a50933d5f69635c6303f8fb42fbd48cf0af6c2eea22720e2c88877e7f5681f1ccff6a118db12a08c00d6f0b0ece895135c23b3", 0x62}, {&(0x7f0000001500)="426e225a970ff637152d1df739b9cd3876133830559341b2de30645a574ea6e3ce906e6eb0f1197c8d7be73d5ab708e1d62c319875b9651d879fe433ce8584b037c8dfc2ebd73b5a36b558db58f23cbdacb69c85a399fb8d09de98015d074ace31", 0x61}, {&(0x7f0000001580)="09e27371a2f4e443587199b5", 0xc}, {&(0x7f00000015c0)="2026f4b8237fa21143c4c466e53d66a9a1600ad07c1bf0c9027dd0488b22fb956c9c18a71e09534eef6fd32317cc813963415f9194a7", 0x36}, {&(0x7f0000001600)="7c82acab897fc2f7dbc2c38577ce327ae545830f74bb8c6d1b3af9ed33bee1a3e2fbbc65520946fde4e0516166f21e8f569ea75687df21355c888fb74ffa3c7b1dec54cb07aea66b4e943480109e6ef64deb7e07819f90329deb326349596e5e3fdd9dbee5fffa66a349fce53114b861a43ee80c1170fb96dabb667db86afe368c7aa979e4822e4fe5d8f7347bf0484466fcad44b2aac4c419ec51bd46ac4bbd216a6926c90b3b9b07674675ab46ed5c185a5ed1c25268fe0bee01d393d697a6a103151d3f7a8a2d3c8e759da5", 0xcd}], 0x6, &(0x7f0000001780)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x88, 0x0, 0x7, {[@rr={0x7, 0x27, 0x84, [@local, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @remote]}, @timestamp_addr={0x44, 0x24, 0x6a, 0x1, 0x3, [{@empty, 0x1ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8b}, {@remote, 0x8}, {@multicast2, 0x1910}]}, @ra={0x94, 0x4}, @end, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x9d, 0x1, 0xc, [{@empty, 0x1}, {@rand_addr=0x64010102, 0xffffffff}, {@multicast2, 0x7}, {@multicast2, 0x5}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010100}}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@rr={0x7, 0x17, 0x8c, [@loopback, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x2e}]}, @lsrr={0x83, 0x7, 0xef, [@broadcast]}, @timestamp={0x44, 0x28, 0x1, 0x0, 0x9, [0x100, 0x3, 0x6ffc, 0x2, 0x1, 0x9, 0x9, 0xb, 0xfffffffb]}, @cipso={0x86, 0x10, 0x3, [{0x5, 0x5, "c42f32"}, {0x2, 0x5, "a64bb5"}]}, @rr={0x7, 0x17, 0x50, [@multicast1, @private=0xa010100, @multicast1, @remote, @broadcast]}, @rr={0x7, 0xb, 0xea, [@remote, @rand_addr=0x64010101]}, @ssrr={0x89, 0x13, 0x56, [@local, @multicast2, @multicast1, @rand_addr=0x64010102]}]}}}], 0x160}, 0x8e4) socketpair(0x29, 0x80000, 0x6, &(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001b00)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x4c, r6, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffbff, 0x65}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x274}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x13, 0x13, [{}, {0x12}, {0x12}, {0x9}, {0x5, 0x1}, {0x1}, {0xc, 0x1}, {0x4}, {0x2}, {0x9, 0x1}, {0x48}, {0x9, 0x1}, {0xc}, {0x4, 0x1}, {0xb}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000802}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001b80), r4) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x40, r8, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xacb}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xe0}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001d00)={'syztnl2\x00', &(0x7f0000001c80)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x4, 0xbc000000, 0x0, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x1, 0x7, 0x10}}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000001d40)={@remote, 0xf, r9}) pipe2$watch_queue(&(0x7f0000001d80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f40)={r10, 0x0, 0x9d, 0x34, &(0x7f0000001dc0)="63511ed3ff34001ae982b83beedc9e108bc9dcc535df19fe3497a32da37f95adc8f55608f15c3273e441defecd350f2d00ea047805fb479094acccf9f91f6e7757b044e5236a0f4f390dd5ce051503f8aeb340e42cfe7778e9a673e63ec4f50890a464f5b9bfab0000f844510d03d03f70981ab95e037db628bc53a25c2a71cce7b5e22191cbbd9e03a7e19a140e1f09386bb966a8e1d9e9bd65d5e58c", &(0x7f0000001e80)=""/52, 0x1, 0x0, 0x17, 0x7, &(0x7f0000001ec0)="8f3445bd5c21318ad83124d3cd4288e8175f9360ea1b7c", &(0x7f0000001f00)="f5a036356f7114", 0x6, 0x0, 0x2}, 0x50) 4.512327636s ago: executing program 5 (id=3688): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000380)}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce898bd7e628ae1242068c2e81985e9ee753e1d02319449f6c878bb5726dbc4eda9097bc6315fec72ff234fb9f26512af7b647069e3415c0338618c7adb1ac5b2f77a9effa9b33193a6da989be1900ce5158f956fcb9510d3850911ba77", 0x8e}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b43795", 0x25}], 0x4, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.451826587s ago: executing program 5 (id=3690): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x498}) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f00000001c0)={0x980903, 0x8081, @value=0x7}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x517, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}]}}]}, 0x8c}}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="2000000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000cb6b48b62c5e5134db7514990707070deca84038d4d6a098bede06016a33caab5a9021ce43c38e8511fc076d9d5460ca3cbe940c9cd062cbafa6c78f1762265aabb42b12647d02b264b5bf2aa71e7d1000ab5f113029391b37108b17f837ebbe566dc0e73c9a61a6186dcae88467c412c87a11674f426c0f21b2f806717ffd73357ca73424e6dce08fa30c50cae10b11b68c1517070c2e95d784078425d7738d29e68d2873cae8a943efee986618b3953498ac822fe7288f2189102665046037797e98965a48791fee31b5cb1aa514dc4f9fae1b661312b1c526f6c612a5a1e00fd9924253", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff0600"/28], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) r8 = syz_clone(0x15a7f4a53d941632, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, 0x0, 0x25, 0x4, @val=@uprobe_multi={&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=[0x4, 0x4, 0x4, 0x0, 0x1, 0x5], 0xffff, 0x0, 0x1, r5}}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) connect$can_j1939(r6, &(0x7f0000000340)={0x1d, r10, 0x1, {0x1, 0x1, 0x3}, 0xff}, 0x18) syz_usb_connect(0x3, 0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000000000000000705e3"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000800000000000000004000000180100002020702500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008001000b703000000000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x1}, 0x94) syz_open_dev$evdev(&(0x7f0000000380), 0xd0, 0x1e5742) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x5b1200) ptrace$peekuser(0x3, r8, 0x368) mmap(&(0x7f0000436000/0x2000)=nil, 0x2000, 0x1000002, 0x8c012, r6, 0xf1fb7000) 3.096803124s ago: executing program 5 (id=3732): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc9, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x40, 0x1, 0x2, 0x7ff, {{0x38, 0x4, 0x1, 0x4, 0xe0, 0x65, 0x0, 0x73, 0x0, 0x0, @loopback, @empty, {[@cipso={0x86, 0x2a, 0x3, [{0x2, 0xb, "80aa88ea0f7d0ad01e"}, {0x7, 0x2}, {0x5, 0xe, "c350ce9dcf260794caab7b25"}, {0x1, 0x5, "b24fa3"}, {0x7, 0x4, "7087"}]}, @lsrr={0x83, 0x2b, 0x1b, [@multicast1, @private=0xa010101, @empty, @multicast1, @rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x1, 0x2}, {0x1, 0xc, "47ef42e841078348e92e"}]}, @generic={0x86, 0xf, "c723a6ef0bd7caf293285b328d"}, @ssrr={0x89, 0xf, 0x54, [@local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x44, 0xa4, 0x1, 0x1, [{@rand_addr=0x64010100, 0x1}, {@multicast1, 0x8}, {@multicast1, 0x5}, {@loopback, 0xffff70f0}, {@dev={0xac, 0x14, 0x14, 0x1b}}, {@local, 0x3}, {@broadcast, 0x9}, {@local, 0x75b}]}]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000580)=@assoc_value={0x0}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000600)={r4, 0x5, 0x63cf, 0x1, 0x0, 0x200}, 0x14) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000600)={r4, 0x5, 0x63cf, 0x1, 0x0, 0x200}, 0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f0000000640)={'tunl0\x00', r1, 0x40, 0x80, 0xfffffffc, 0x7, {{0x2e, 0x4, 0x0, 0x1, 0xb8, 0x67, 0x0, 0x89, 0x2f, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x5d, 0x3, [{0x7, 0x9, "ce2b15f09de5d7"}, {0x1, 0x12, "bb6a9795257ca77ebbc3c885c0dd829c"}, {0x6, 0x10, "2e42c13cfb5938aeb91dd844fde6"}, {0x4, 0x11, "901f90880d9c999573bbaa9997c38d"}, {0x5, 0xd, "f9b8ad25d2777f0436ce87"}, {0x0, 0x2}, {0x5, 0x5, ')Q_'}, {0x4, 0x3, "b0"}, {0x0, 0x4, "c368"}]}, @end, @timestamp_addr={0x44, 0x24, 0x86, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x8}, {@multicast1, 0x9}, {@multicast1, 0x80}, {@rand_addr=0x64010102, 0x1}]}, @rr={0x7, 0x1f, 0x17, [@loopback, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000740)={'ip_vti0\x00', &(0x7f0000000640)={'tunl0\x00', r1, 0x40, 0x80, 0xfffffffc, 0x7, {{0x2e, 0x4, 0x0, 0x1, 0xb8, 0x67, 0x0, 0x89, 0x2f, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x5d, 0x3, [{0x7, 0x9, "ce2b15f09de5d7"}, {0x1, 0x12, "bb6a9795257ca77ebbc3c885c0dd829c"}, {0x6, 0x10, "2e42c13cfb5938aeb91dd844fde6"}, {0x4, 0x11, "901f90880d9c999573bbaa9997c38d"}, {0x5, 0xd, "f9b8ad25d2777f0436ce87"}, {0x0, 0x2}, {0x5, 0x5, ')Q_'}, {0x4, 0x3, "b0"}, {0x0, 0x4, "c368"}]}, @end, @timestamp_addr={0x44, 0x24, 0x86, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x8}, {@multicast1, 0x9}, {@multicast1, 0x80}, {@rand_addr=0x64010102, 0x1}]}, @rr={0x7, 0x1f, 0x17, [@loopback, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, &(0x7f0000000780)=[0x1ff, 0x2f4]) read(r0, &(0x7f00000007c0), 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x50, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3b9, 0x7b}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x14}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1a}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x6) read(r0, &(0x7f00000009c0)=""/226, 0xe2) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000ac0)) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000ac0)) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000b40)={r3, 0x2d56, 0x2, 0x7fffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r8) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000b80)={0x57, 0xa0, 0x1, {0xfff7, 0xc}, {0x2, 0x4}, @ramp={0x101, 0x101, {0x5, 0x9, 0x3, 0x7fff}}}) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x58, 0x17, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r8) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r8) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, r9, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000800}, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r8, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x46}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NL80211_CMD_SET_PMKSA(r8, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x46}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) getsockname$inet(r3, &(0x7f0000000f80)={0x2, 0x0, @broadcast}, &(0x7f0000000fc0)=0x10) (async) getsockname$inet(r3, &(0x7f0000000f80)={0x2, 0x0, @broadcast}, &(0x7f0000000fc0)=0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r8, 0x0, 0xf0, 0xe2, &(0x7f0000001000)="b0ae3dbc730066f11be24dd9f75916c35d38065f9587c6e5d7ab0d2bebddcb4cf155e81856287f62765aee436b4026b036f345f16ab1a90f99f6d8057d5a00b08edc795641a1f5b9088109e072f66bfabce47b010c463a7fb55a471c493c3f92bd13b519262e4c6e5cb4854a4bc0d6e1912181b3a8b17fecc150db39e8e9b6f640ec6dced2c2686857041d5e572f39e01c7550c8fa49935b8be56cde0dc31aa2c757e7594c6162a0d71d47e537a19e99da0a0254063ef088ba489c2fff4e7925bb74dba65b96b9d50c2feb19d80066ad924a5629e66a5fa217c72761a9c7db61cb5d769ed14365464a6e478f881f4d8a", &(0x7f0000001100)=""/226, 0x90bb, 0x0, 0xe3, 0x5d, &(0x7f0000001200)="558d833d0fae0757570048e65a8bd81e0dcdeb671ea252ca692a6bc418ff85235c30493300e0e3c4bb885f5309c4cb357a1390ca0f10bc306c1efca6eaf42f553678e149195c06625afddb31e929a47264c4af6eee8d5c98a2337bf54db30ddced3b84679e810b488f91c61f0da92511adba0b98a33de8ce512577442ee8ee17b2cf255e3170e01fadc48c778be731052e16810d7e8b408da6a488e88fb871afcde4a6421e7ceff4d1379ad616f2c0feea9cb6fdca85d8bd66a2bdcfe0ff01fca4ac74e2ccd81edc57a2f09087fd30035997023c5a23dc327ac65110dba37a6a763708", &(0x7f0000001300)="716e06d2623d809e228ffc3665cf8a3177fbbbe100c34eed26dc95aa2a5151bd23a583b26bd7fc2a2ffc8670d7251a9f7f67218ecfc3aca600f900a91168ebd5f4dbf7a249d590e2399819e57a3031c74f8075cd857227f9fb4262d2a9", 0x0, 0x0, 0xfffffff7}, 0x50) syncfs(r3) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet_sctp(r10, &(0x7f0000001fc0)=[{&(0x7f0000001400)=@in6={0xa, 0x4e20, 0xa0000000, @remote, 0x6}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000001440)="879a2915c7e8c26b509c22892f46ba657c094131b5bcf3fb64c02c3647af2591c902aeddaa8ac822442bc22a748791e1f3602e0090a7b06b17f0b4242cc256431a2cbfd8de35cdf695758a9dc818f3cbca6fe6e7f99a83700b2de6449ad1ca6e6e32d2b44b92", 0x66}, {&(0x7f00000014c0)="cda705c991b7cf1c8e623c31c38e4c29d692da9c92ff47a8868fc47570b42da558fb142e3efa0807fb79a92241e4b2cb7635393c2ebdbbdd85a667a792f36891d23f537e0f69713739aa15f9e442f0cf030ab5c6c03bcd02b01848cd5bdb8bca572a16eaa5e31abc417534109f7bdbb8518d99c2251573a7837fa6e34e7d918f7d2cf7eef5822ec855686955e97e746baaf8c35a8db94698162e0204ee691f046d2ad2852d6e695ab7ef608ea932dbc857fe7c870a78a48e217ca6f5652be288c058cf69c2a57344d7de9b18", 0xcc}, {&(0x7f00000015c0)="a3507351bb3aa69f8b1872dcbb9c4054a9ffbe064aa406842c094472a70494fe6775943761548f7fb3fb7414fe7ba802fb4bba8de823ba5a26e0e2a098f1d5cbd5bcc1793c6468cec1dc8c4cd9e7c158d20194f87c5a62e047aa833370ea528106c43452b71fcf", 0x67}], 0x3, &(0x7f0000001680)=[@authinfo={0x18, 0x84, 0x6, {0x6}}, @sndinfo={0x20, 0x84, 0x2, {0xd, 0x0, 0x4, 0x5, r4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x12b4}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0xe80}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0xc, 0x8008, 0xfffffff8, 0x8, 0x2, 0x3, 0x8020, r4}}], 0xb0, 0x48000}, {&(0x7f0000001740)=@in6={0xa, 0x4e22, 0x59d4, @mcast2, 0xa}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000001780)="6970e49a89ffc37e1cba0c89f52c2ad0f1760cc22882023c0eb4845dd5bd8c2a611319f698e63600cd455b2ff0dd1df48a53d9488726c0bad39d7d0c068261683de0e8f69162fd6aabea99f2ec1ff86dc494896cbcec4381cafbad", 0x5b}, {&(0x7f0000001800)="3baf4b0963926d080ad7deb0", 0xc}, {&(0x7f0000001840)="96fa69d9acdea3b4229b58960f2b1049ec021ea725538544022becc35f84dabe955f3d899a910cb071f4dde44dc647bf0f2412445d483ba6d7d63303a9014cbb17e76791c0e9b34570f12eccad019158dc26ecb03999b34037e6f700bf1602716d4aac19346dcca0a3db02c113cea684ce1a", 0x72}], 0x3, &(0x7f0000001900)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @dstaddrv6={0x20, 0x84, 0x8, @private1}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @authinfo={0x18, 0x84, 0x6, {0x10}}, @init={0x18, 0x84, 0x0, {0x64c7, 0x2, 0x4686, 0xfffc}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}], 0xb0, 0x4040000}, {&(0x7f00000019c0)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000001a00)="c157c98651782966fd3c475d8ac8c352fa2b9e9466001d7316c690d52749d4663c24228daed1a42c8416df2054e6446f3fac724504be70e22b317fdf38ad9ef5ba7656d6937c5cec70292b17ba97ba4abb4564bdd991d684bcc87139b46070811c7dab1e", 0x64}, {&(0x7f0000001a80)="d4a90a234b7cecfdb780edb95b156163471b5fe231b20b07b8b156672a1d07cf1e99dc8287b0ee003d75e00402406d123272b0afa5844fca6deb832c7623031e0fe4a260642c94a7aaa123bf54b8a20a2183153ae08e02005e2e527f3a6057eabb8c4001b65acaff9276ff2f9e7f1b53056a0957425575b226f51ac66f64e4588be152171652fd866a4e57394b58bb576075d563628c0ca19b7f9704e47d71476449262c0c40f65d3a6e4f761fa4", 0xae}, {&(0x7f0000001b40)="d6e1d6d15d4e47e00c06b493c191d10eea2389b8572986e21ac182f84b3bfc063f9e0c77068be612b59adb622321b3fb36047a0606f868719338835d59f5e59acd591fbc79b7026535543751dcd2ff9a1845352e26f7e23a7dca49dd2a728bf9de0c9c915387c3db68e9662bf110cb3cf3f90397534e639dc7dd67b11620257743ec62c789dbdac39cf9bac298a0aa9bcd04bc", 0x93}, {&(0x7f0000001c00)="2dafbab2caec864715626d2ddd063b03c7aa54a3707a6b9f099be16cc880507f30cd0b30e3d81686439af525f341ed41c200518c02a00bc9c76d3ad7d6f8e63077743ac3c04a3e7f129285c2268723c5d49718a1215a06a923bd5f9a38f7d10a3b12db259fcbf98b2f2c4fde84a5ef2e139b6ed39584d45113", 0x79}, {&(0x7f0000001c80)="1d6fd8e31d3ea05433b92fe421cde2", 0xf}, {&(0x7f0000001cc0)="b043ed6963141dbe6920f619cef6087761a9fb8d7f860e7c2fbbdbe8da33dd8194765c29c95dbed5d6835be2d614b6aa853d09fc90d3e99e51f9451561a91b5d78fa5d1f5fa058f7afcf9e100fbd2cf17898f60287da2f6ae961f3f76e73d93b45f2441e141db4fb2d730d96a06e031c5e4325950901b794546e2467633e3d71c088fa4a2c66d102c8351cbe6c907859f239ba47980dff86dccee725fac39e7b8b5837e224", 0xa5}, {&(0x7f0000001d80)="df", 0x1}, {&(0x7f0000001dc0)="7777aca32fed7e37e0558f420d1dfb3a1de97d5b48b09d63f7663ae34e5c8ff734e527521bcb7076bbd7f5d9fc10caa6d29a7bc6f9d26869645a5f0022e447bb6d5194df6fefc08a9b9d7114a028577e6a305173e58a0a125866c4989e886f021ff9ff43a237ae3cc09d5f7579c1806bee3258958302447b25846b8cee771f240e073f1e78f1b0cb793f7c6332aa1632c4ade513f9cd1d16024467aa3023082f39ea627386ffdd78e0e198a332abd5deae1c35337c5faaab9d633c528c9d5d29fbe979e033ad63d756987b0df0120ddaefc02b7dd360a95ae9415293", 0xdc}, {&(0x7f0000001ec0)="3dad996d6468a3c278", 0x9}], 0x9, 0x0, 0x0, 0x1}], 0x3, 0x0) 3.019687382s ago: executing program 5 (id=3738): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo/3\x00') (async) r2 = syz_open_dev$dri(&(0x7f0000000780), 0x2, 0x8000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) (rerun: 64) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x8, 0x0, 0x0, {0x40, 0x3, 0x6, 0xffff, 0x1000, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) (rerun: 64) sysfs$1(0x1, &(0x7f0000000100)='/dev/hwrng\x00') (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write$FUSE_GETXATTR(r5, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0x6}) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x4001, 0x3, 0x1c8, 0x98, 0x700001b, 0x148, 0x0, 0x148, 0x130, 0x206, 0x240, 0x130, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x70, 0x98, 0x0, {0x390, 0x8f00}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x90}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) pread64(r1, &(0x7f0000000080)=""/237, 0xed, 0x0) 740.637723ms ago: executing program 8 (id=3768): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000040)={0x5, [0x8000, 0xf, 0x3, 0x0, 0x5, 0xf69e, 0xfffc, 0x1, 0x3, 0xff6, 0x5, 0xb, 0xbc6e, 0x3, 0xf, 0xd, 0xfe, 0x6, 0xfffb, 0x10, 0x8, 0x99, 0x81, 0x7, 0x2, 0x5, 0x6, 0x2f5, 0x5b, 0x5, 0x6, 0x9, 0xa2, 0xfe01, 0x0, 0xe, 0x1000, 0x200, 0x4, 0x6, 0x21a, 0x3d, 0x81, 0x2, 0x3bb, 0x143a, 0x7, 0x9], 0x8}) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000000c0)={0x0, "8df7d1ccabb8fca94b90508440d7ca34"}) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000010c0)={0x0, 0x2, 0x3}) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000014c0)={0x0, 0x4, 0xf8a, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000018c0)={0xc, 0x1, {0x1, @usage=0x3, r1, 0xa0a, 0x1, 0x5, 0x8, 0x44ff8c00, 0x6, @struct={0x4, 0x2}, 0x10000, 0x8, [0x7fffffff, 0xa, 0x8, 0x0, 0xf9, 0xfffffffffffffe00]}, {0x0, @usage=0x6, r2, 0xda, 0x4, 0x7, 0x9, 0x6, 0x59, @usage=0x1, 0x80000000, 0x2, [0x81, 0xc0000000000, 0xecd, 0x8001, 0xf, 0x7]}, {0x8000000000000000, @struct={0x8}, r3, 0x3, 0x3, 0x1a96, 0x8000, 0x1, 0x9, @usage=0x37c3, 0x0, 0x6, [0x7, 0xfffffffffffffff8, 0x5, 0x4, 0xccca, 0xd992]}, {0x2, 0xffff, 0x8}}) (async) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) (async) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000001cc0)) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000001d00), 0x101002, 0x0) ioctl$FS_IOC_GETFSUUID(r4, 0x80111500, &(0x7f0000001d40)) (async) r5 = fsopen(&(0x7f0000001d80)='ubifs\x00', 0x1) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000001dc0)={r4, 0x6, 0x5, 0xfffffffffffffff7}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001e00), 0x101800, 0x0) sendfile(r6, r7, 0x0, 0x8000) (async) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000001e40)) (async) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000001e80)=0x8) io_setup(0xf374, &(0x7f0000001ec0)=0x0) r9 = ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece) io_submit(r8, 0x2, &(0x7f00000020c0)=[&(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x9, r9, &(0x7f0000001f00)="3ce5f835db75d044d67f4185a596c3e471a9c87a36d6cbf41e7b587831f6741ab04010f23134afc924e9a97cf11805a1da78d6d99bfc7a728c6994649405f07b1ced978b8af3f65487782d66b9367413e3581ee500229d042decd00f6d5192835e73926e890d50dc541ff23aa78b01335c1d91fae499c299c946bd9f6914215b94d49208ba18cdf06bb6414e46", 0x8d, 0x9}, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x2, 0x400, r5, &(0x7f0000002000)="89ecd20d39abe6a82eda7d3aa1b22d3a153eddd5fecff0ac217307ec10b05e53d1c5998709a47437bad39da449db963d41813025a6936ef7177c5714e378b132cfda7b51d34732f063f84ce6403a6800f016d7ccdd20313a4fa6d92e5a1cbee200999b0412da8dfc77eb51c454", 0x6d, 0x6, 0x0, 0x2, r4}]) read$FUSE(r4, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000004140)={0x0, 0x5}, &(0x7f0000004180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000004200)={r11, 0x2c, &(0x7f00000041c0)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e22, 0x8, @empty, 0x80000000}]}, &(0x7f0000004240)=0x10) (async) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000902, r10, &(0x7f0000004280)) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000004300), 0xffffffffffffffff, 0x500c0) (async) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000004340)={0x1, 0x0, [{0x32e, 0x0, 0x3}]}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000004380), 0x200000, 0x0) fsync(r7) 651.58058ms ago: executing program 6 (id=3772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r1, 0xacf5e67dd0b583a1, 0xffffffff, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x4c044) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x60, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8fa, 0x76}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5c634e129128735d1ad1320c7f"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b9c072e79bb16b4707f6ad1498"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "e9516e94"}]}, 0x60}, 0x1, 0x0, 0x0, 0x488d}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 601.949705ms ago: executing program 7 (id=3773): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000006c0), 0x442, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x13, r0, 0x85b48000) 601.747686ms ago: executing program 6 (id=3774): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read(r2, &(0x7f0000000100)=""/157, 0x9d) read(r2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r4], 0x5c}}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 542.238969ms ago: executing program 7 (id=3775): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000380)}, {0x0}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b437951913173b3187878dc29f77c7a9ec2bf03cada5b063cb819d7f8bf1dd40a6db89c1a2955a4cdde24c64c76d6020de2dd053d020203535947f", 0x5d}], 0x4, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 542.040403ms ago: executing program 8 (id=3776): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000380)}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce898bd7e628ae1242068c2e81985e9ee753e1d02319449f6c878bb5726dbc4eda9097bc6315fec72ff234fb9f26512af7b647069e3415c0338618c7adb1ac5b2f77a9effa9b33193a6da989be1900ce5158f956fcb9510d3850911ba77", 0x8e}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b43795", 0x25}], 0x4, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 489.481412ms ago: executing program 7 (id=3777): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 449.667795ms ago: executing program 8 (id=3778): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xe000003, 0xf, &(0x7f0000000080)=[0x3, 0x1ff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0xfffffffa, 0x0, 0xfffffffc, 0x6], 0x0, 0x4}) (fail_nth: 4) 449.439254ms ago: executing program 8 (id=3779): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6572, 0x10000009}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) 449.144991ms ago: executing program 7 (id=3780): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000380)}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce898bd7e628ae1242068c2e81985e9ee753e1d02319449f6c878bb5726dbc4eda9097bc6315fec72ff234fb9f26512af7b647069e3415c0338618c7adb1ac5b2f77a9effa9b33193a6da989be1900ce5158f956fcb9510d3850911ba", 0x8d}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b437951913173b3187878dc29f77c7a9ec2bf03cada5b063cb819d7f8bf1dd40a6db89c1a2955a4cdde24c64", 0x4e}], 0x4, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 291.196529ms ago: executing program 7 (id=3781): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0xfffffffffffffe1f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe01, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000500)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x300, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff1000040000000000000dabeffff00", "2809e8dbe10804000000af8e0e3dc11d875397bdb22d0000b420a1a93e527d3d458d080000000000000000000000000000000000000000004300", "f4bd00000080190000efffca0000000000001a000000ff00", [0x2]}}) 291.006832ms ago: executing program 6 (id=3782): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)}, {0x0}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b437951913173b3187878dc29f77c7a9ec2bf03cada5b063cb819d7f8bf1dd40a6db89c1a2955a4cdde24c64c76d6020de2dd053d020203535947f6c", 0x5e}], 0x3}}], 0x1, 0x40004) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 290.77788ms ago: executing program 7 (id=3783): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) connect$rose(r0, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14020000100001000000000000000000fe880000000000000000000000000001fe80000000000000000000000000000000000000000000000a0020005c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="6401010100000000000000000000000000000000330000007f0000010000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000002000000000000000000000000000a000480000000000000000024011400736d3300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c006"], 0x214}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r2, 0x8926, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getcwd(&(0x7f0000000000)=""/204, 0xcc) connect$rose(r0, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) getcwd(&(0x7f0000000100)=""/18, 0x12) 231.035872ms ago: executing program 6 (id=3784): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10100, 0x0) r1 = getpid() syz_clone3(&(0x7f0000001280)={0x0, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x12}, &(0x7f0000000140)=""/251, 0xfb, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=[0x0, 0x0, r1, 0xffffffffffffffff], 0x4}, 0x58) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001300)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001600)) open$dir(&(0x7f00000016c0)='./file0\x00', 0x480, 0x3) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001700)={{0x1, 0x1, 0x18}, './file2\x00'}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x89) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f000077e000/0x3000)=nil, 0x3000, 0x17) pipe2$9p(&(0x7f0000000400), 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x8301, 0x1000, 0x8, 0x18040be, 0x0, r0}) splice(r0, &(0x7f0000001380)=0x5, r2, &(0x7f00000013c0)=0x2, 0xbf, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(r3, &(0x7f0000000140)='./file2\x00', 0x101) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) setreuid(0x0, 0xee00) ioctl$IOC_PR_CLEAR(r5, 0x401070cd, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x5, 0x8f}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001340)='./bus\x00', &(0x7f0000001480), 0x400) 171.900028ms ago: executing program 8 (id=3785): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @local}, {0x17, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}}}}}, 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x3ec0) close_range(r0, 0xffffffffffffffff, 0x0) 121.931488ms ago: executing program 8 (id=3786): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000380)}, {&(0x7f0000000440)="b9c8ea7741e24130b11e66fa8118a2cda01b3f0acd758075e1c9d7949dcabe424ea007a38ff2c228d330852a68f81c6d7ce898bd7e628ae1242068c2e81985e9ee753e1d02319449f6c878bb5726dbc4eda9097bc6315fec72ff234fb9f26512af7b647069e3415c0338618c7adb1ac5b2f77a9effa9b33193a6da989be1900ce5158f956fcb9510d3850911ba77", 0x8e}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b43795", 0x25}], 0x4, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.072049ms ago: executing program 6 (id=3787): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xe000003, 0xf, &(0x7f0000000080)=[0x3, 0x1ff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0xfffffffa, 0x0, 0xfffffffc, 0x6], 0x0, 0x4}) (fail_nth: 5) 0s ago: executing program 6 (id=3788): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000380)}, {0x0}, {&(0x7f0000000140)="6b7a240a296a37fa753082010bbab360f5b4702580e51f24741ca0e156030aea99d1b437951913173b3187878dc29f77c7a9ec2bf03cada5b063cb819d7f8bf1dd40a6db89c1a2955a4cdde24c64c76d6020de2dd053d020203535947f", 0x5d}], 0x4, &(0x7f00000005c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}], 0x18}}], 0x1, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): type=1326 audit(1768426854.944:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13400 comm="syz.5.2541" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a2f8f7c9 code=0x7ffc0000 [ 212.819102][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2543'. [ 212.908446][T13410] syzkaller0: entered promiscuous mode [ 212.912743][T13410] syzkaller0: entered allmulticast mode [ 213.067446][T13414] loop2: detected capacity change from 0 to 7 [ 213.077339][T13414] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 213.081807][T13414] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 213.093645][T13414] Dev loop2: unable to read RDB block 7 [ 213.096284][T13414] loop2: unable to read partition table [ 213.099319][T13414] loop2: partition table beyond EOD, truncated [ 213.101771][T13414] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 213.124097][T13416] bpq0: entered promiscuous mode [ 213.126534][T13416] bpq0: entered allmulticast mode [ 214.020437][T13426] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2551'. [ 214.078386][T13432] syzkaller0: entered promiscuous mode [ 214.081627][T13432] syzkaller0: entered allmulticast mode [ 214.247980][T13445] 9pnet_virtio: no channels available for device syz [ 214.253432][T13447] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2561'. [ 215.130157][T13461] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2567'. [ 215.286743][T13475] syzkaller0: entered promiscuous mode [ 215.289495][T13475] syzkaller0: entered allmulticast mode [ 215.344057][T13483] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2577'. [ 215.472652][T13499] loop2: detected capacity change from 0 to 7 [ 215.475305][T13499] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 215.478495][T13499] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 215.482492][T13499] Dev loop2: unable to read RDB block 7 [ 215.484601][T13499] loop2: unable to read partition table [ 215.487242][T13499] loop2: partition table beyond EOD, truncated [ 215.492077][T13499] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 215.714858][T13522] netlink: 'syz.4.2594': attribute type 7 has an invalid length. [ 215.717922][T13522] netlink: 'syz.4.2594': attribute type 7 has an invalid length. [ 215.739816][ T73] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 215.849944][ T6040] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 215.891342][ T73] usb 11-1: config index 0 descriptor too short (expected 23569, got 27) [ 215.911181][ T73] usb 11-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 215.924432][ T73] usb 11-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 215.927737][ T73] usb 11-1: Manufacturer: syz [ 215.934481][ T73] usb 11-1: config 0 descriptor?? [ 215.990334][ T73] rc_core: IR keymap rc-hauppauge not found [ 215.993178][ T73] Registered IR keymap rc-empty [ 215.996433][ T73] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 216.002445][ T73] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input37 [ 216.010366][ T6040] usb 10-1: Using ep0 maxpacket: 8 [ 216.018635][ T6040] usb 10-1: config 0 has no interfaces? [ 216.023227][ T6040] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 216.027013][ T6040] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.031379][ T6040] usb 10-1: Product: syz [ 216.033437][ T6040] usb 10-1: Manufacturer: syz [ 216.035653][ T6040] usb 10-1: SerialNumber: syz [ 216.039824][ T6040] usb 10-1: config 0 descriptor?? [ 216.140937][T13502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.145540][T13502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.152086][T13502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.160351][T13502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.169610][T13502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.174682][T13502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.179780][T13502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.183913][T13502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.187910][T13502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.192762][T13502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.205009][ T34] usb 11-1: USB disconnect, device number 7 [ 216.245713][T13491] __nla_validate_parse: 3 callbacks suppressed [ 216.245730][T13491] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2581'. [ 216.256880][ T6040] usb 10-1: USB disconnect, device number 9 [ 216.264931][T13557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2609'. [ 216.435780][T13563] syzkaller0: entered promiscuous mode [ 216.438330][T13563] syzkaller0: entered allmulticast mode [ 216.667079][T13575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2618'. [ 216.762809][T13581] max out of range [ 216.768507][T13581] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2621'. [ 216.853361][T13587] loop2: detected capacity change from 0 to 7 [ 216.856811][T13587] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 216.861153][T13587] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 216.864619][T13587] Dev loop2: unable to read RDB block 7 [ 216.867163][T13587] loop2: unable to read partition table [ 216.869473][T13587] loop2: partition table beyond EOD, truncated [ 216.872606][T13587] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 216.995630][T13602] loop2: detected capacity change from 0 to 1 [ 216.998751][T13602] ldm_validate_privheads(): Disk read failed. [ 217.001033][T13602] Dev loop2: unable to read RDB block 1 [ 217.010759][T13602] loop2: unable to read partition table [ 217.014780][T13602] loop2: partition table beyond EOD, truncated [ 217.017439][T13602] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 217.161977][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.178502][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.180898][T13619] netlink: 'syz.7.2637': attribute type 1 has an invalid length. [ 217.184032][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.190157][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.200902][T13619] netlink: 'syz.7.2637': attribute type 3 has an invalid length. [ 217.202178][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.205954][T13619] netlink: 212 bytes leftover after parsing attributes in process `syz.7.2637'. [ 217.359882][T13615] lo speed is unknown, defaulting to 1000 [ 217.498147][T13615] lo speed is unknown, defaulting to 1000 [ 217.523467][ T6006] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 217.609776][T13615] chnl_net:caif_netlink_parms(): no params data found [ 217.634546][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2645'. [ 217.675204][T13615] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.678200][T13615] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.681439][T13615] bridge_slave_0: entered allmulticast mode [ 217.685489][T13615] bridge_slave_0: entered promiscuous mode [ 217.689724][T13615] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.692633][T13615] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.699308][T13615] bridge_slave_1: entered allmulticast mode [ 217.702640][T13615] bridge_slave_1: entered promiscuous mode [ 217.703775][ T6006] usb 12-1: Using ep0 maxpacket: 32 [ 217.704943][ T1114] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 217.708720][ T6006] usb 12-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 217.709687][ T1114] ata1: failed to read log page 10h (errno=-5) [ 217.714259][ T6006] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.716318][ T1114] ata1.00: exception Emask 0x1 SAct 0x80 SErr 0x0 action 0x0 [ 217.721301][ T6006] usb 12-1: config 0 descriptor?? [ 217.723529][ T1114] ata1.00: irq_stat 0x40000000 [ 217.727287][ T1114] ata1.00: failed command: WRITE FPDMA QUEUED [ 217.729021][ T6006] as10x_usb: device has been detected [ 217.729999][ T1114] ata1.00: cmd 61/58:38:d6:0b:10/00:00:00:00:00/40 tag 7 ncq dma 45056 out [ 217.729999][ T1114] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 217.735079][ T6006] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 217.741613][ T1114] ata1.00: status: { DRDY } [ 217.744696][T13615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.746998][ T1114] ata1.00: configured for UDMA/100 [ 217.752279][ T6006] usb 12-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 217.752612][ T1114] ata1: EH complete [ 217.756682][T13615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.774870][T13648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2647'. [ 217.777912][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 217.777929][ T40] audit: type=1400 audit(1768426859.973:851): avc: denied { write } for pid=13645 comm="syz.5.2646" name="file0" dev="tmpfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 217.793930][ T40] audit: type=1400 audit(1768426859.973:852): avc: denied { open } for pid=13645 comm="syz.5.2646" path="/283/file0" dev="tmpfs" ino=1464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 217.830617][ T6006] as10x_usb: error during firmware upload part1 [ 217.833110][ T6006] Registered device nBox DVB-T Dongle [ 217.841884][T13615] team0: Port device team_slave_0 added [ 217.847851][T13615] team0: Port device team_slave_1 added [ 217.868314][T13615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.870755][T13615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.882014][T13615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.890144][T13615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.893343][T13615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.904997][T13615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.932597][ T6006] usb 12-1: USB disconnect, device number 7 [ 217.941686][T13615] hsr_slave_0: entered promiscuous mode [ 217.945637][T13615] hsr_slave_1: entered promiscuous mode [ 217.954668][ T6006] Unregistered device nBox DVB-T Dongle [ 217.961446][ T6006] as10x_usb: device has been disconnected [ 218.073270][T13662] syzkaller0: entered promiscuous mode [ 218.075901][T13662] syzkaller0: entered allmulticast mode [ 218.098761][T13615] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.105332][T13615] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.202392][T13615] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.208550][T13615] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.260693][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2656'. [ 218.273534][T13615] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.278534][T13615] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.369747][T13615] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.374479][T13615] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.480643][T13686] loop2: detected capacity change from 0 to 1 [ 218.484277][T13686] ldm_validate_privheads(): Disk read failed. [ 218.488236][T13686] Dev loop2: unable to read RDB block 1 [ 218.490436][T13686] loop2: unable to read partition table [ 218.492442][T13686] loop2: partition table beyond EOD, truncated [ 218.494504][T13686] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 218.547875][T13615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.557067][T13615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.567024][T13615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.568564][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2667'. [ 218.577747][T13615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.628894][T13615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.647111][T13615] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.653223][T10467] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.656526][T10467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.667449][T10467] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.671326][T10467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.734799][T13709] IPVS: set_ctl: invalid protocol: 44 172.20.20.12:21 [ 218.797584][ T73] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 218.802890][ T73] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 218.807069][ T73] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 218.810470][ T73] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 218.810913][T13615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.813433][ T73] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 218.819925][ T73] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 218.823751][ T73] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 218.828573][ T73] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 218.831302][ T73] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 218.833919][ T73] hid-generic 0005:00B6:0009.0005: unknown main item tag 0x0 [ 218.837657][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2674'. [ 218.870322][ T73] hid-generic 0005:00B6:0009.0005: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 218.908579][T13728] loop2: detected capacity change from 0 to 1 [ 218.912091][T13728] ldm_validate_privheads(): Disk read failed. [ 218.915035][T13728] Dev loop2: unable to read RDB block 1 [ 218.919361][T13728] loop2: unable to read partition table [ 218.922884][T13728] loop2: partition table beyond EOD, truncated [ 218.925712][T13728] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 219.002073][T13615] veth0_vlan: entered promiscuous mode [ 219.009524][T13615] veth1_vlan: entered promiscuous mode [ 219.039449][T13615] veth0_macvtap: entered promiscuous mode [ 219.045390][T13615] veth1_macvtap: entered promiscuous mode [ 219.063846][T13615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.076564][T13615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.085184][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.090041][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.095286][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.100535][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.152284][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.155641][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.175373][T10467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.182738][T10467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.258123][ T5940] Bluetooth: hci2: command tx timeout [ 219.260076][T13743] loop2: detected capacity change from 0 to 7 [ 219.266739][T13743] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 219.270743][T13743] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 219.273503][T13743] Dev loop2: unable to read RDB block 7 [ 219.275816][T13743] loop2: unable to read partition table [ 219.278524][T13743] loop2: partition table beyond EOD, truncated [ 219.280922][T13743] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 219.352113][T13751] syzkaller0: entered promiscuous mode [ 219.354129][T13751] syzkaller0: entered allmulticast mode [ 219.357812][T13751] FAULT_INJECTION: forcing a failure. [ 219.357812][T13751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.362209][T13751] CPU: 0 UID: 0 PID: 13751 Comm: syz.6.2687 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.362248][T13751] Tainted: [L]=SOFTLOCKUP [ 219.362253][T13751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 219.362260][T13751] Call Trace: [ 219.362264][T13751] [ 219.362269][T13751] dump_stack_lvl+0x16c/0x1f0 [ 219.362310][T13751] should_fail_ex+0x512/0x640 [ 219.362336][T13751] _copy_from_iter+0x2a4/0x16c0 [ 219.362357][T13751] ? __pfx__copy_from_iter+0x10/0x10 [ 219.362374][T13751] ? __lock_acquire+0x436/0x2890 [ 219.362386][T13751] ? _parse_integer_limit+0x17f/0x1d0 [ 219.362472][T13751] ? _kstrtoull+0x145/0x200 [ 219.362486][T13751] tun_get_user+0x26d/0x3cc0 [ 219.362509][T13751] ? __lock_acquire+0x436/0x2890 [ 219.362526][T13751] ? __pfx_tun_get_user+0x10/0x10 [ 219.362543][T13751] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 219.362559][T13751] ? find_held_lock+0x2b/0x80 [ 219.362577][T13751] ? tun_get+0x191/0x370 [ 219.362594][T13751] tun_chr_write_iter+0xdc/0x210 [ 219.362612][T13751] vfs_write+0x7d3/0x11d0 [ 219.362628][T13751] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 219.362646][T13751] ? __pfx_vfs_write+0x10/0x10 [ 219.362659][T13751] ? find_held_lock+0x2b/0x80 [ 219.362683][T13751] ksys_write+0x12a/0x250 [ 219.362697][T13751] ? __pfx_ksys_write+0x10/0x10 [ 219.362715][T13751] do_syscall_64+0xcd/0xf80 [ 219.362733][T13751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.362744][T13751] RIP: 0033:0x7ff5b8d8f7c9 [ 219.362756][T13751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.362767][T13751] RSP: 002b:00007ff5b6ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.362779][T13751] RAX: ffffffffffffffda RBX: 00007ff5b8fe5fa0 RCX: 00007ff5b8d8f7c9 [ 219.362786][T13751] RDX: 000000000000ffdd RSI: 0000200000000200 RDI: 0000000000000003 [ 219.362793][T13751] RBP: 00007ff5b6ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 219.362799][T13751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.362806][T13751] R13: 00007ff5b8fe6038 R14: 00007ff5b8fe5fa0 R15: 00007ffc7981aa58 [ 219.362821][T13751] [ 219.580040][T13767] loop2: detected capacity change from 0 to 7 [ 219.582927][T13767] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 219.586393][T13767] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 219.588962][T13767] Dev loop2: unable to read RDB block 7 [ 219.591968][T13767] loop2: unable to read partition table [ 219.594925][T13767] loop2: partition table beyond EOD, truncated [ 219.597634][T13767] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 219.664015][T13771] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.859603][T13791] netlink: 'syz.5.2704': attribute type 10 has an invalid length. [ 219.871929][T13791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.877222][T13791] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 219.926752][T13795] loop2: detected capacity change from 0 to 1 [ 219.930363][T13795] ldm_validate_privheads(): Disk read failed. [ 219.933090][T13795] Dev loop2: unable to read RDB block 1 [ 219.935460][T13795] loop2: unable to read partition table [ 219.938211][T13795] loop2: partition table beyond EOD, truncated [ 219.941047][T13795] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 219.988819][T13799] syzkaller0: entered promiscuous mode [ 219.991067][T13799] syzkaller0: entered allmulticast mode [ 220.139531][T13812] xt_TPROXY: Can be used only with -p tcp or -p udp [ 220.358714][T13830] loop2: detected capacity change from 0 to 1 [ 220.362052][T13830] ldm_validate_privheads(): Disk read failed. [ 220.364623][T13830] Dev loop2: unable to read RDB block 1 [ 220.369847][T13830] loop2: unable to read partition table [ 220.372506][T13830] loop2: partition table beyond EOD, truncated [ 220.375352][T13830] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 220.454558][T13843] loop6: detected capacity change from 0 to 2640 [ 220.457939][T13843] buffer_io_error: 5 callbacks suppressed [ 220.457959][T13843] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.465570][T13843] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.469013][T13843] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.472411][T13843] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.475752][T13843] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.479815][T13843] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.483125][T13843] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.486400][T13843] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.491759][T13843] ldm_validate_partition_table(): Disk read failed. [ 220.494965][T13843] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.499625][T13843] Buffer I/O error on dev loop6, logical block 0, async page read [ 220.503371][T13843] Dev loop6: unable to read RDB block 0 [ 220.505638][T13843] loop6: unable to read partition table [ 220.508745][T13843] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 220.541546][T13860] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 220.651719][T13874] netlink: 'syz.6.2740': attribute type 1 has an invalid length. [ 220.672352][T13874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.686088][T13874] vlan2: entered promiscuous mode [ 220.688097][T13874] bond2: entered promiscuous mode [ 220.698013][T13880] tmpfs: Unknown parameter '$áDô–RLŠ…0x000000000000000300000000000000000000000' [ 220.701785][T13874] gretap2: entered promiscuous mode [ 220.703962][T13879] i2c i2c-1: Invalid block write size 34 [ 220.704432][T13879] netlink: 'syz.5.2742': attribute type 1 has an invalid length. [ 220.708912][T13874] bond2: (slave gretap2): making interface the new active one [ 220.712276][T13874] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 220.745255][T13879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.766617][T13874] lo speed is unknown, defaulting to 1000 [ 220.829221][ T34] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 220.851304][T13893] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 220.882478][T13874] lo speed is unknown, defaulting to 1000 [ 220.990939][ T34] usb 9-1: config 0 has no interfaces? [ 220.993861][ T34] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 220.998039][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.004416][ T34] usb 9-1: config 0 descriptor?? [ 221.227457][T13867] Bluetooth: MGMT ver 1.23 [ 221.233018][ T73] usb 9-1: USB disconnect, device number 17 [ 221.315241][T13908] __nla_validate_parse: 6 callbacks suppressed [ 221.315263][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2750'. [ 221.339867][ T5940] Bluetooth: hci2: command tx timeout [ 221.796754][T13910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2752'. [ 223.036227][T13915] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2755'. [ 223.046656][T13917] program syz.4.2756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.084434][T13920] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2757'. [ 223.214550][T13931] netlink: 'syz.6.2763': attribute type 1 has an invalid length. [ 223.234314][T13935] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2764'. [ 223.413138][ T5940] Bluetooth: hci2: command tx timeout [ 223.539151][T13966] fuse: Bad value for 'fd' [ 223.747867][T13975] netlink: 'syz.6.2779': attribute type 1 has an invalid length. [ 223.771339][T13975] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2779'. [ 223.777978][T13981] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2779'. [ 223.783032][T13975] bond3: (slave bridge1): making interface the new active one [ 223.788218][T13975] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 223.791539][T13975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13975 comm=syz.6.2779 [ 223.791675][T13982] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2780'. [ 223.796753][T13975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13975 comm=syz.6.2779 [ 223.796820][T13975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13975 comm=syz.6.2779 [ 223.796878][T13975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13975 comm=syz.6.2779 [ 223.796931][T13975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13975 comm=syz.6.2779 [ 223.796986][T13975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13975 comm=syz.6.2779 [ 223.797063][T13975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13975 comm=syz.6.2779 [ 223.797149][T13975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13975 comm=syz.6.2779 [ 223.833963][T13975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13975 comm=syz.6.2779 [ 223.838861][T13975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13975 comm=syz.6.2779 [ 223.839257][T13984] geneve2: entered allmulticast mode [ 223.856205][T13984] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.2782'. [ 224.038966][T14020] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 224.048477][T14014] sp0: Synchronizing with TNC [ 224.063653][T14016] netlink: 'syz.6.2788': attribute type 32 has an invalid length. [ 224.112314][T14032] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2799'. [ 224.115536][T14032] 0·: renamed from hsr0 (while UP) [ 224.117373][T14011] [U] è [ 224.125354][T14032] 0·: entered allmulticast mode [ 224.127180][T14032] hsr_slave_0: entered allmulticast mode [ 224.129350][T14032] hsr_slave_1: entered allmulticast mode [ 224.132907][T14032] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 224.564724][T14064] misc userio: Invalid payload size [ 224.607454][T14067] loop2: detected capacity change from 0 to 7 [ 224.611257][T14067] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 224.619024][T14067] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 224.622132][T14067] Dev loop2: unable to read RDB block 7 [ 224.635179][T14067] loop2: unable to read partition table [ 224.638095][T14067] loop2: partition table beyond EOD, truncated [ 224.640949][T14067] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.014946][T14098] netlink: 'syz.7.2826': attribute type 3 has an invalid length. [ 225.017498][T14098] netlink: 'syz.7.2826': attribute type 1 has an invalid length. [ 225.082504][T14094] netlink: 'syz.5.2824': attribute type 1 has an invalid length. [ 225.095832][T14104] loop2: detected capacity change from 0 to 1 [ 225.105541][T14104] ldm_validate_privheads(): Disk read failed. [ 225.111262][T14104] Dev loop2: unable to read RDB block 1 [ 225.113038][T14104] loop2: unable to read partition table [ 225.115179][T14104] loop2: partition table beyond EOD, truncated [ 225.117286][T14104] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.168697][T14111] loop2: detected capacity change from 0 to 7 [ 225.172308][T14111] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 225.178718][T14111] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 225.181726][T14111] Dev loop2: unable to read RDB block 7 [ 225.184394][T14111] loop2: unable to read partition table [ 225.187455][T14111] loop2: partition table beyond EOD, truncated [ 225.190018][T14111] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.287372][T14123] 9pnet_virtio: no channels available for device syz [ 225.292373][T14131] tmpfs: Unknown parameter 'grpquotaýÜó‘˜Úý‹ÓòjAv2¨Å®Å0àˆ«~' [ 225.298136][ T40] audit: type=1400 audit(1768426867.491:853): avc: denied { connect } for pid=14128 comm="syz.7.2839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.331186][T14135] loop2: detected capacity change from 0 to 1 [ 225.333649][T14135] ldm_validate_privheads(): Disk read failed. [ 225.339566][T14135] Dev loop2: unable to read RDB block 1 [ 225.341785][T14135] loop2: unable to read partition table [ 225.343741][T14135] loop2: partition table beyond EOD, truncated [ 225.346642][T14135] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.428057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.480568][T14150] loop2: detected capacity change from 0 to 7 [ 225.483483][T14150] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 225.488039][T14150] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 225.490716][T14150] Dev loop2: unable to read RDB block 7 [ 225.492711][T14150] loop2: unable to read partition table [ 225.495306][T14150] loop2: partition table beyond EOD, truncated [ 225.495963][ T5940] Bluetooth: hci2: command tx timeout [ 225.497724][T14150] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.522666][T14155] openvswitch: netlink: Duplicate key (type 1). [ 225.668507][ T40] audit: type=1400 audit(1768426867.861:854): avc: denied { mounton } for pid=14178 comm="syz.5.2856" path="/356/file0" dev="hugetlbfs" ino=56108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 225.678305][T14180] overlayfs: maximum fs stacking depth exceeded [ 225.704077][T14183] loop2: detected capacity change from 0 to 7 [ 225.707463][T14183] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 225.710713][T14183] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 225.713237][T14183] Dev loop2: unable to read RDB block 7 [ 225.715344][T14183] loop2: unable to read partition table [ 225.721301][T14183] loop2: partition table beyond EOD, truncated [ 225.724121][T14183] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 226.029020][T14203] ip6t_srh: unknown srh match flags 4000 [ 226.126127][ T6110] usb 11-1: new low-speed USB device number 8 using dummy_hcd [ 226.136422][T14207] loop2: detected capacity change from 0 to 7 [ 226.139023][T14207] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 226.143072][T14207] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 226.145473][T14207] Dev loop2: unable to read RDB block 7 [ 226.148287][T14207] loop2: unable to read partition table [ 226.150344][T14207] loop2: partition table beyond EOD, truncated [ 226.152477][T14207] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 226.210082][ T40] audit: type=1400 audit(1768426868.400:855): avc: denied { unmount } for pid=10103 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 226.250809][T14213] syzkaller0: entered promiscuous mode [ 226.253579][T14213] syzkaller0: entered allmulticast mode [ 226.256952][ T6110] usb 11-1: device descriptor read/64, error -71 [ 226.452791][T14226] loop2: detected capacity change from 0 to 1 [ 226.456007][T14226] ldm_validate_privheads(): Disk read failed. [ 226.459123][T14226] Dev loop2: unable to read RDB block 1 [ 226.461014][T14226] loop2: unable to read partition table [ 226.463076][T14226] loop2: partition table beyond EOD, truncated [ 226.465711][T14226] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 226.497137][ T6110] usb 11-1: new low-speed USB device number 9 using dummy_hcd [ 226.556707][T14233] __nla_validate_parse: 9 callbacks suppressed [ 226.556723][T14233] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2884'. [ 226.626665][ T6110] usb 11-1: device descriptor read/64, error -71 [ 226.726913][ T40] audit: type=1400 audit(1768426868.920:856): avc: denied { map } for pid=14246 comm="syz.7.2889" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 226.746868][ T6110] usb usb11-port1: attempt power cycle [ 226.803000][T14257] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 226.850271][T14263] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2895'. [ 226.933638][T14271] FAULT_INJECTION: forcing a failure. [ 226.933638][T14271] name failslab, interval 1, probability 0, space 0, times 0 [ 226.940778][T14271] CPU: 3 UID: 0 PID: 14271 Comm: syz.5.2898 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.940808][T14271] Tainted: [L]=SOFTLOCKUP [ 226.940816][T14271] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 226.940827][T14271] Call Trace: [ 226.940833][T14271] [ 226.940840][T14271] dump_stack_lvl+0x16c/0x1f0 [ 226.940868][T14271] should_fail_ex+0x512/0x640 [ 226.940895][T14271] ? __kmalloc_noprof+0xca/0x910 [ 226.940927][T14271] should_failslab+0xc2/0x120 [ 226.940952][T14271] __kmalloc_noprof+0xeb/0x910 [ 226.940981][T14271] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 226.941015][T14271] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 226.941042][T14271] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 226.941074][T14271] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 226.941101][T14271] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 226.941134][T14271] ? bpf_lsm_capable+0x9/0x10 [ 226.941154][T14271] ? security_capable+0x7e/0x260 [ 226.941175][T14271] ? ns_capable+0xd7/0x110 [ 226.941202][T14271] genl_rcv_msg+0x55c/0x800 [ 226.941230][T14271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.941255][T14271] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 226.941273][T14271] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 226.941296][T14271] ? __pfx_nl80211_post_doit+0x10/0x10 [ 226.941326][T14271] netlink_rcv_skb+0x158/0x420 [ 226.941348][T14271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.941375][T14271] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.941408][T14271] ? netlink_deliver_tap+0x1ae/0xd30 [ 226.941439][T14271] genl_rcv+0x28/0x40 [ 226.941461][T14271] netlink_unicast+0x5aa/0x870 [ 226.941486][T14271] ? __pfx_netlink_unicast+0x10/0x10 [ 226.941518][T14271] netlink_sendmsg+0x8c8/0xdd0 [ 226.941545][T14271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.941577][T14271] ____sys_sendmsg+0xa5d/0xc30 [ 226.941603][T14271] ? copy_msghdr_from_user+0x10a/0x160 [ 226.941622][T14271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.941658][T14271] ___sys_sendmsg+0x134/0x1d0 [ 226.941678][T14271] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.941730][T14271] __sys_sendmsg+0x16d/0x220 [ 226.941750][T14271] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.941778][T14271] ? fput+0x70/0xf0 [ 226.941798][T14271] do_syscall_64+0xcd/0xf80 [ 226.941824][T14271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.941841][T14271] RIP: 0033:0x7fa3a2f8f7c9 [ 226.941858][T14271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.941875][T14271] RSP: 002b:00007fa3a3f07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.941894][T14271] RAX: ffffffffffffffda RBX: 00007fa3a31e5fa0 RCX: 00007fa3a2f8f7c9 [ 226.941906][T14271] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 226.941917][T14271] RBP: 00007fa3a3f07090 R08: 0000000000000000 R09: 0000000000000000 [ 226.941928][T14271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.941939][T14271] R13: 00007fa3a31e6038 R14: 00007fa3a31e5fa0 R15: 00007ffd555e2038 [ 226.941966][T14271] [ 227.093665][T14273] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2899'. [ 227.127081][ T6110] usb 11-1: new low-speed USB device number 10 using dummy_hcd [ 227.157970][ T6110] usb 11-1: device descriptor read/8, error -71 [ 227.275364][T14286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2902'. [ 227.397317][ T6110] usb 11-1: new low-speed USB device number 11 using dummy_hcd [ 227.428788][ T6110] usb 11-1: device descriptor read/8, error -71 [ 227.442708][T14309] loop2: detected capacity change from 0 to 1 [ 227.445117][T14309] ldm_validate_privheads(): Disk read failed. [ 227.447980][T14309] Dev loop2: unable to read RDB block 1 [ 227.449859][T14309] loop2: unable to read partition table [ 227.452011][T14309] loop2: partition table beyond EOD, truncated [ 227.454034][T14309] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 227.459462][T14303] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2909'. [ 227.516411][T14315] tipc: Started in network mode [ 227.522856][T14315] tipc: Node identity 9209a5bace1f, cluster identity 4711 [ 227.525927][T14315] tipc: Enabled bearer , priority 0 [ 227.529079][T14316] syzkaller0: entered promiscuous mode [ 227.530852][T14316] syzkaller0: entered allmulticast mode [ 227.538703][T14315] tipc: Resetting bearer [ 227.548269][ T6110] usb usb11-port1: unable to enumerate USB device [ 227.590525][T14331] siw: device registration error -23 [ 227.603807][T14314] tipc: Resetting bearer [ 227.614556][T14314] tipc: Disabling bearer [ 227.728283][T14337] bond2: option arp_validate: invalid value (2048) [ 227.731571][T14337] bond2 (unregistering): Released all slaves [ 227.843493][T14345] C: entered promiscuous mode [ 227.845673][T14345] team_slave_1: entered promiscuous mode [ 227.848650][T14345] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 227.997984][ T9] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 228.090040][ T40] audit: type=1400 audit(1768426870.278:857): avc: denied { write } for pid=14353 comm="syz.5.2926" name="usbmon1" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 228.093497][T14354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2926'. [ 228.101589][T14354] nbd: illegal input index 1879048192 [ 228.159687][ T9] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 228.162546][ T9] usb 12-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 228.165804][ T9] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 228.169126][ T9] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 52820, setting to 64 [ 228.175882][ T9] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 228.180446][ T9] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 228.184175][ T9] usb 12-1: Product: syz [ 228.185773][ T9] usb 12-1: Manufacturer: syz [ 228.193641][ T9] cdc_wdm 12-1:1.0: skipping garbage [ 228.196001][ T9] cdc_wdm 12-1:1.0: skipping garbage [ 228.198420][ T9] cdc_wdm 12-1:1.0: probe with driver cdc_wdm failed with error -22 [ 228.441238][T14374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2934'. [ 228.514970][ T5940] Bluetooth: hci5: adv larger than maximum supported [ 228.531404][ T40] audit: type=1400 audit(1768426870.718:858): avc: denied { listen } for pid=14388 comm="syz.4.2937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 228.542714][ T40] audit: type=1400 audit(1768426870.718:859): avc: denied { accept } for pid=14388 comm="syz.4.2937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 228.554671][T14392] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 228.557569][ T40] audit: type=1400 audit(1768426870.738:860): avc: denied { write } for pid=14341 comm="syz.7.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.567788][ T54] usb 12-1: USB disconnect, device number 8 [ 228.612790][T14385] could not allocate digest TFM handle cryptd(blake2b-160) [ 228.819795][ T9] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 228.858532][T14418] loop2: detected capacity change from 0 to 7 [ 228.861635][T14418] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 228.864814][T14418] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 228.867327][T14418] Dev loop2: unable to read RDB block 7 [ 228.869501][T14418] loop2: unable to read partition table [ 228.871822][T14418] loop2: partition table beyond EOD, truncated [ 228.873989][T14418] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 228.980308][ T9] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 228.983799][ T9] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 228.985390][T14426] ldm_validate_privheads(): Disk read failed. [ 228.987963][ T9] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 228.993871][T14426] Dev loop2: unable to read RDB block 1 [ 228.993965][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 229.000392][T14426] loop2: unable to read partition table [ 229.000990][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 229.002407][T14426] loop2: partition table beyond EOD, truncated [ 229.007138][ T9] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.008010][T14426] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 229.011622][ T9] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.016722][ T9] usb 10-1: Product: syz [ 229.018097][ T9] usb 10-1: Manufacturer: syz [ 229.024064][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 229.025834][ T9] cdc_wdm 10-1:1.0: skipping garbage [ 229.028567][ T9] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 229.031213][ T9] cdc_wdm 10-1:1.0: Unknown control protocol [ 229.070259][T14432] syzkaller0: entered promiscuous mode [ 229.072086][T14432] syzkaller0: entered allmulticast mode [ 229.170722][T14443] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2956'. [ 229.229176][ T9] usb 10-1: USB disconnect, device number 10 [ 229.379716][T14457] netlink: 'syz.5.2961': attribute type 39 has an invalid length. [ 229.398481][ T40] audit: type=1400 audit(1768426871.577:861): avc: denied { ioctl } for pid=14462 comm="syz.6.2964" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 ioctlcmd=0xaece scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 229.438316][T14468] vlan2: entered allmulticast mode [ 229.440597][T14468] bond0: entered allmulticast mode [ 229.442843][T14468] bond_slave_0: entered allmulticast mode [ 229.444740][T14468] bond_slave_1: entered allmulticast mode [ 229.446925][T14468] batadv0: entered allmulticast mode [ 229.547075][T14481] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2970'. [ 229.902979][T14513] netlink: zone id is out of range [ 229.904712][T14513] netlink: zone id is out of range [ 229.906746][T14513] netlink: set zone limit has 8 unknown bytes [ 229.939529][T14535] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2992'. [ 229.995748][T14539] selinux_netlink_send: 22 callbacks suppressed [ 229.995765][T14539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14539 comm=syz.7.2994 [ 230.253498][T14555] syzkaller0: entered promiscuous mode [ 230.256524][T14555] syzkaller0: entered allmulticast mode [ 230.435305][T14573] fuse: Bad value for 'fd' [ 230.595450][T14583] set_capacity_and_notify: 1 callbacks suppressed [ 230.595464][T14583] loop2: detected capacity change from 0 to 7 [ 230.604304][T14583] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 230.607633][T14583] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 230.609859][T14583] Dev loop2: unable to read RDB block 7 [ 230.612325][T14583] loop2: unable to read partition table [ 230.614574][T14583] loop2: partition table beyond EOD, truncated [ 230.616978][T14583] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 230.695457][T14591] netlink: 'syz.4.3016': attribute type 6 has an invalid length. [ 230.713609][T14591] netlink: 'syz.4.3016': attribute type 4 has an invalid length. [ 230.787636][T14601] loop2: detected capacity change from 0 to 1 [ 230.791654][T14601] ldm_validate_privheads(): Disk read failed. [ 230.794346][T14601] Dev loop2: unable to read RDB block 1 [ 230.797035][T14601] loop2: unable to read partition table [ 230.799920][T14601] loop2: partition table beyond EOD, truncated [ 230.802654][T14601] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 230.806800][T14603] syzkaller0: entered promiscuous mode [ 230.809194][T14603] syzkaller0: entered allmulticast mode [ 230.816253][ T40] audit: type=1800 audit(1768426872.996:862): pid=14603 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3022" name="bus" dev="tmpfs" ino=2100 res=0 errno=0 [ 230.870077][T14610] netlink: 'syz.7.3024': attribute type 2 has an invalid length. [ 231.066342][T14633] Sensor A: ================= START STATUS ================= [ 231.069135][T14633] Sensor A: Test Pattern: 75% Colorbar [ 231.074330][T14633] Sensor A: Show Information: All [ 231.076266][T14633] Sensor A: Vertical Flip: true [ 231.078083][T14633] Sensor A: Horizontal Flip: true [ 231.080501][T14635] loop2: detected capacity change from 0 to 7 [ 231.081762][T14633] Sensor A: Brightness: 128 [ 231.084227][T14635] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 231.085999][T14633] Sensor A: Contrast: [ 231.089341][T14635] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 231.089350][T14633] 128 [ 231.089436][T14635] Dev loop2: unable to read RDB block 7 [ 231.089472][T14635] loop2: unable to read partition table [ 231.095082][T14633] [ 231.095899][T14635] loop2: partition table beyond EOD, [ 231.097820][T14633] Sensor A: Hue: [ 231.099543][T14635] truncated [ 231.099552][T14635] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 231.109759][T14633] 0 [ 231.111420][T14633] Sensor A: Saturation: 128 [ 231.113378][T14633] Sensor A: ================== END STATUS ================== [ 231.169648][ T40] audit: type=1326 audit(1768426873.346:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.4.3037" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f4d4f786667 code=0x0 [ 231.194777][T14644] syzkaller0: entered promiscuous mode [ 231.196681][T14644] syzkaller0: entered allmulticast mode [ 231.223811][T14647] netlink: 'syz.4.3037': attribute type 21 has an invalid length. [ 231.358399][T14659] loop2: detected capacity change from 0 to 7 [ 231.361309][T14659] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 231.365043][T14659] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 231.367835][T14659] Dev loop2: unable to read RDB block 7 [ 231.370232][T14659] loop2: unable to read partition table [ 231.374860][T14659] loop2: partition table beyond EOD, truncated [ 231.378207][T14659] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 231.418079][T14665] loop2: detected capacity change from 0 to 1 [ 231.425231][T14665] ldm_validate_privheads(): Disk read failed. [ 231.427745][T14665] Dev loop2: unable to read RDB block 1 [ 231.430296][T14665] loop2: unable to read partition table [ 231.433163][T14665] loop2: partition table beyond EOD, truncated [ 231.435784][T14665] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 231.462897][T14664] Invalid source name [ 231.464221][T14664] UBIFS error (pid: 14664): cannot open "./file0", error -22 [ 231.615106][T14687] __nla_validate_parse: 7 callbacks suppressed [ 231.615119][T14687] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3054'. [ 231.616657][T14684] overlay: ./file1 is not a directory [ 231.652554][T14689] loop2: detected capacity change from 0 to 1 [ 231.655044][T14689] ldm_validate_privheads(): Disk read failed. [ 231.657366][T14689] Dev loop2: unable to read RDB block 1 [ 231.659301][T14689] loop2: unable to read partition table [ 231.662196][T14689] loop2: partition table beyond EOD, truncated [ 231.664694][T14689] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 231.856482][T14710] loop2: detected capacity change from 0 to 7 [ 231.859107][T14710] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 231.863078][T14710] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 231.865460][T14710] Dev loop2: unable to read RDB block 7 [ 231.867342][T14710] loop2: unable to read partition table [ 231.869337][T14710] loop2: partition table beyond EOD, truncated [ 231.873084][T14710] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 231.888148][T14713] vivid-000: ================= START STATUS ================= [ 231.890810][T14713] vivid-000: Radio HW Seek Mode: Bounded [ 231.895587][T14713] vivid-000: Radio Programmable HW Seek: false [ 231.897921][T14713] vivid-000: RDS Rx I/O Mode: Block I/O [ 231.900573][T14713] vivid-000: Generate RBDS Instead of RDS: false [ 231.903181][T14713] vivid-000: RDS Reception: true [ 231.905086][T14713] vivid-000: RDS Program Type: 0 inactive [ 231.907245][T14713] vivid-000: RDS PS Name: inactive [ 231.909345][T14713] vivid-000: RDS Radio Text: inactive [ 231.911916][T14713] vivid-000: RDS Traffic Announcement: false inactive [ 231.914143][T14713] vivid-000: RDS Traffic Program: false inactive [ 231.916565][T14713] vivid-000: RDS Music: false inactive [ 231.918872][T14713] vivid-000: ================== END STATUS ================== [ 231.956499][T14720] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3069'. [ 231.981078][T14720] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14720 comm=syz.7.3069 [ 232.082967][T14732] xt_hashlimit: size too large, truncated to 1048576 [ 232.188690][T14749] bond0: (slave wg0): Error: Device can not be enslaved while up [ 232.247529][ T5940] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 232.500247][T14787] lo speed is unknown, defaulting to 1000 [ 232.593992][T14787] lo speed is unknown, defaulting to 1000 [ 232.605655][T14797] loop2: detected capacity change from 0 to 7 [ 232.611279][T14797] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 232.625494][T14797] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 232.627945][T14797] Dev loop2: unable to read RDB block 7 [ 232.629943][T14797] loop2: unable to read partition table [ 232.632699][T14797] loop2: partition table beyond EOD, truncated [ 232.634873][T14797] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 232.755716][ T54] usb 12-1: new full-speed USB device number 9 using dummy_hcd [ 232.914191][ T54] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 232.917029][ T54] usb 12-1: config 0 has no interface number 0 [ 232.919171][ T54] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 232.924699][ T54] usb 12-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 232.928105][ T54] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.931268][ T54] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.936217][ T54] usb 12-1: config 0 descriptor?? [ 232.943816][ T54] iowarrior 12-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 233.075265][T14822] FAULT_INJECTION: forcing a failure. [ 233.075265][T14822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.079911][T14822] CPU: 3 UID: 0 PID: 14822 Comm: syz.6.3105 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.079931][T14822] Tainted: [L]=SOFTLOCKUP [ 233.079935][T14822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 233.079942][T14822] Call Trace: [ 233.079947][T14822] [ 233.079953][T14822] dump_stack_lvl+0x16c/0x1f0 [ 233.079972][T14822] should_fail_ex+0x512/0x640 [ 233.079992][T14822] _copy_from_user+0x2e/0xd0 [ 233.080010][T14822] copy_msghdr_from_user+0x98/0x160 [ 233.080023][T14822] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 233.080041][T14822] ___sys_sendmsg+0xfe/0x1d0 [ 233.080053][T14822] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.080081][T14822] __sys_sendmsg+0x16d/0x220 [ 233.080093][T14822] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.080113][T14822] do_syscall_64+0xcd/0xf80 [ 233.080129][T14822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.080140][T14822] RIP: 0033:0x7ff5b8d8f7c9 [ 233.080151][T14822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.080162][T14822] RSP: 002b:00007ff5b6ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.080173][T14822] RAX: ffffffffffffffda RBX: 00007ff5b8fe5fa0 RCX: 00007ff5b8d8f7c9 [ 233.080179][T14822] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 233.080186][T14822] RBP: 00007ff5b6ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 233.080192][T14822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.080199][T14822] R13: 00007ff5b8fe6038 R14: 00007ff5b8fe5fa0 R15: 00007ffc7981aa58 [ 233.080213][T14822] [ 233.145759][ T54] usb 12-1: USB disconnect, device number 9 [ 233.280947][T14838] loop2: detected capacity change from 0 to 1 [ 233.284169][T14838] ldm_validate_privheads(): Disk read failed. [ 233.286812][T14838] Dev loop2: unable to read RDB block 1 [ 233.289051][T14838] loop2: unable to read partition table [ 233.291633][T14838] loop2: partition table beyond EOD, truncated [ 233.294037][T14838] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 233.314499][T14836] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3112'. [ 233.325494][T14841] overlayfs: missing 'workdir' [ 233.376786][T14847] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3116'. [ 233.400420][T14847] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3116'. [ 233.566263][ T40] audit: type=1400 audit(1768426875.744:864): avc: denied { map } for pid=14874 comm="syz.4.3127" path="/dev/sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 233.574547][ T40] audit: type=1400 audit(1768426875.744:865): avc: denied { execute } for pid=14874 comm="syz.4.3127" path="/dev/sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 233.597579][T14879] comedi comedi0: Cannot bond this driver to itself! [ 233.636161][T14877] lo speed is unknown, defaulting to 1000 [ 233.652721][ T54] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 233.722418][T14877] lo speed is unknown, defaulting to 1000 [ 233.792876][ T54] usb 11-1: device descriptor read/64, error -71 [ 233.806888][T14900] x_tables: ip_tables: osf match: only valid for protocol 6 [ 233.896121][T14877] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 233.986197][T14883] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3128'. [ 234.033780][ T54] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 234.173062][ T54] usb 11-1: device descriptor read/64, error -71 [ 234.293026][ T54] usb usb11-port1: attempt power cycle [ 234.420618][T14924] binder: 14922:14924 ioctl c0306201 200000000640 returned -22 [ 234.628092][T14928] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3148'. [ 234.663383][ T54] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 234.696611][ T54] usb 11-1: device descriptor read/8, error -71 [ 234.698876][T14932] vlan3: entered promiscuous mode [ 234.700653][T14932] bridge0: entered promiscuous mode [ 234.915863][T14939] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3153'. [ 234.933978][ T54] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 234.954334][ T54] usb 11-1: device descriptor read/8, error -71 [ 235.056423][T14943] loop2: detected capacity change from 0 to 1 [ 235.059778][T14943] ldm_validate_privheads(): Disk read failed. [ 235.062632][T14943] Dev loop2: unable to read RDB block 1 [ 235.064084][ T54] usb usb11-port1: unable to enumerate USB device [ 235.065619][T14943] loop2: unable to read partition table [ 235.069869][T14943] loop2: partition table beyond EOD, truncated [ 235.072816][T14943] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 235.303472][T14953] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3160'. [ 235.378436][T14960] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3163'. [ 235.390893][ T40] audit: type=1800 audit(1768426877.563:866): pid=14960 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.3163" name="file0" dev="overlay" ino=2 res=0 errno=0 [ 235.756421][T14986] loop2: detected capacity change from 0 to 1 [ 235.759144][T14986] ldm_validate_privheads(): Disk read failed. [ 235.761700][T14986] Dev loop2: unable to read RDB block 1 [ 235.762354][T14988] afs: Unknown parameter 'EÚúÞe' [ 235.764308][T14986] loop2: unable to read partition table [ 235.764456][T14986] loop2: partition table beyond EOD, truncated [ 235.770289][T14986] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 235.777166][T14988] afs: Unknown parameter 'floc+' [ 236.334442][ T6110] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 236.496301][ T6110] usb 12-1: Using ep0 maxpacket: 8 [ 236.500499][ T6110] usb 12-1: config 0 interface 0 has no altsetting 0 [ 236.503353][ T6110] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 236.507659][ T6110] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.513702][ T6110] usb 12-1: config 0 descriptor?? [ 236.587219][T15024] FAULT_INJECTION: forcing a failure. [ 236.587219][T15024] name failslab, interval 1, probability 0, space 0, times 0 [ 236.592400][T15024] CPU: 3 UID: 0 PID: 15024 Comm: syz.6.3189 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.592430][T15024] Tainted: [L]=SOFTLOCKUP [ 236.592436][T15024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 236.592448][T15024] Call Trace: [ 236.592455][T15024] [ 236.592463][T15024] dump_stack_lvl+0x16c/0x1f0 [ 236.592493][T15024] should_fail_ex+0x512/0x640 [ 236.592519][T15024] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 236.592541][T15024] should_failslab+0xc2/0x120 [ 236.592565][T15024] kmem_cache_alloc_node_noprof+0x86/0x800 [ 236.592583][T15024] ? __alloc_skb+0x156/0x410 [ 236.592614][T15024] ? __alloc_skb+0x156/0x410 [ 236.592638][T15024] __alloc_skb+0x156/0x410 [ 236.592664][T15024] ? __alloc_skb+0x35d/0x410 [ 236.592688][T15024] ? __pfx___alloc_skb+0x10/0x10 [ 236.592713][T15024] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 236.592736][T15024] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 236.592764][T15024] netlink_alloc_large_skb+0x69/0x140 [ 236.592788][T15024] netlink_sendmsg+0x698/0xdd0 [ 236.592814][T15024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.592845][T15024] ____sys_sendmsg+0xa5d/0xc30 [ 236.592869][T15024] ? copy_msghdr_from_user+0x10a/0x160 [ 236.592888][T15024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.592923][T15024] ___sys_sendmsg+0x134/0x1d0 [ 236.592943][T15024] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.592992][T15024] __sys_sendmsg+0x16d/0x220 [ 236.593011][T15024] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.593039][T15024] ? fput+0x70/0xf0 [ 236.593058][T15024] do_syscall_64+0xcd/0xf80 [ 236.593083][T15024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.593101][T15024] RIP: 0033:0x7ff5b8d8f7c9 [ 236.593116][T15024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.593133][T15024] RSP: 002b:00007ff5b6ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.593150][T15024] RAX: ffffffffffffffda RBX: 00007ff5b8fe5fa0 RCX: 00007ff5b8d8f7c9 [ 236.593161][T15024] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 236.593171][T15024] RBP: 00007ff5b6ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 236.593181][T15024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.593191][T15024] R13: 00007ff5b8fe6038 R14: 00007ff5b8fe5fa0 R15: 00007ffc7981aa58 [ 236.593216][T15024] [ 237.056821][T15051] __nla_validate_parse: 5 callbacks suppressed [ 237.056836][T15051] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3202'. [ 237.063274][T15051] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.144297][T15053] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 237.281343][T15065] loop2: detected capacity change from 0 to 7 [ 237.285439][T15065] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 237.288694][T15065] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 237.291322][T15065] Dev loop2: unable to read RDB block 7 [ 237.293214][T15065] loop2: unable to read partition table [ 237.297386][T15065] loop2: partition table beyond EOD, truncated [ 237.299649][T15065] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 237.514441][T15072] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3209'. [ 237.565505][ T40] audit: type=1400 audit(1768426879.751:867): avc: denied { connect } for pid=15073 comm="syz.6.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 237.571635][ T40] audit: type=1400 audit(1768426879.751:868): avc: denied { bind } for pid=15073 comm="syz.6.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 237.578882][ T40] audit: type=1326 audit(1768426879.761:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15073 comm="syz.6.3210" exe="/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7ff5b8d8f7c9 code=0x0 [ 237.651726][T15085] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3214'. [ 237.661665][T15085] loop4: detected capacity change from 0 to 7 [ 237.673220][T15085] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 237.675195][T15085] loop4: partition table partially beyond EOD, truncated [ 237.677583][T15085] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 237.989324][T15108] binder: 15105:15108 ioctl 40946400 2000000001c0 returned -22 [ 238.856496][T15128] loop2: detected capacity change from 0 to 7 [ 238.859582][T15128] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 238.863516][T15128] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 238.867005][T15128] Dev loop2: unable to read RDB block 7 [ 238.869410][T15128] loop2: unable to read partition table [ 238.871910][T15128] loop2: partition table beyond EOD, truncated [ 238.874585][T15128] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 239.018640][T15143] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3234'. [ 239.021809][T15143] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3234'. [ 239.088817][ T9] usb 12-1: USB disconnect, device number 10 [ 239.148058][T15147] loop2: detected capacity change from 0 to 1 [ 239.151045][T15147] ldm_validate_privheads(): Disk read failed. [ 239.153547][T15147] Dev loop2: unable to read RDB block 1 [ 239.157059][T15147] loop2: unable to read partition table [ 239.159869][T15147] loop2: partition table beyond EOD, truncated [ 239.162198][T15147] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 239.376567][T15172] loop2: detected capacity change from 0 to 1 [ 239.379903][T15172] ldm_validate_privheads(): Disk read failed. [ 239.382601][T15172] Dev loop2: unable to read RDB block 1 [ 239.384883][T15172] loop2: unable to read partition table [ 239.387558][T15172] loop2: partition table beyond EOD, truncated [ 239.390164][T15172] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 239.492893][T15183] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3253'. [ 239.496776][T15183] netem: invalid attributes len -22 [ 239.499157][T15183] netem: change failed [ 239.560148][T15193] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3256'. [ 239.732089][T15218] loop2: detected capacity change from 0 to 1 [ 239.734470][T15218] ldm_validate_privheads(): Disk read failed. [ 239.736710][T15218] Dev loop2: unable to read RDB block 1 [ 239.739058][T15218] loop2: unable to read partition table [ 239.741063][T15218] loop2: partition table beyond EOD, truncated [ 239.743262][T15218] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 239.795586][ T40] audit: type=1326 audit(1768426881.970:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.5.3270" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa3a2f8f7c9 code=0x7ffc0000 [ 239.879076][ T40] audit: type=1400 audit(1768426882.060:871): avc: denied { map } for pid=15243 comm="syz.5.3278" path="socket:[62700]" dev="sockfs" ino=62700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.884909][T15245] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 239.895063][ T40] audit: type=1400 audit(1768426882.070:872): avc: denied { read accept } for pid=15243 comm="syz.5.3278" path="socket:[62700]" dev="sockfs" ino=62700 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 239.904933][ T40] audit: type=1400 audit(1768426882.070:873): avc: denied { map } for pid=15243 comm="syz.5.3278" path="socket:[62699]" dev="sockfs" ino=62699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 239.911723][ T40] audit: type=1400 audit(1768426882.090:874): avc: denied { setopt } for pid=15242 comm="syz.4.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 239.917100][T15251] loop2: detected capacity change from 0 to 1 [ 239.927991][T15251] ldm_validate_privheads(): Disk read failed. [ 239.930325][T15251] Dev loop2: unable to read RDB block 1 [ 239.934063][T15251] loop2: unable to read partition table [ 239.937020][T15251] loop2: partition table beyond EOD, truncated [ 239.939011][T15251] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 240.118471][T15280] loop2: detected capacity change from 0 to 1 [ 240.121267][T15280] ldm_validate_privheads(): Disk read failed. [ 240.123590][T15280] Dev loop2: unable to read RDB block 1 [ 240.123770][ T40] audit: type=1400 audit(1768426882.300:875): avc: denied { accept } for pid=15284 comm="syz.4.3291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 240.125624][T15280] loop2: unable to read partition table [ 240.125743][T15280] loop2: partition table beyond EOD, truncated [ 240.136601][T15280] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 240.245626][T15300] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3296'. [ 240.250276][T15300] tipc: Can't bind to reserved service type 2 [ 240.342494][T15314] loop2: detected capacity change from 0 to 1 [ 240.349653][T15314] ldm_validate_privheads(): Disk read failed. [ 240.351739][T15314] Dev loop2: unable to read RDB block 1 [ 240.353704][T15314] loop2: unable to read partition table [ 240.358104][T15314] loop2: partition table beyond EOD, truncated [ 240.360569][T15314] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 240.411200][T15320] netlink: 'syz.6.3307': attribute type 6 has an invalid length. [ 240.415734][T15320] netlink: 'syz.6.3307': attribute type 6 has an invalid length. [ 240.509436][T15323] netlink: 158592 bytes leftover after parsing attributes in process `syz.4.3308'. [ 240.726557][ T40] audit: type=1400 audit(1768426882.910:876): avc: denied { map } for pid=15344 comm="syz.4.3317" path="socket:[61903]" dev="sockfs" ino=61903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 240.751752][T15348] netlink: 'syz.6.3319': attribute type 1 has an invalid length. [ 240.798828][T15348] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 240.802633][T15348] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 240.817097][T15350] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3319'. [ 240.828092][T15350] macvlan2: entered promiscuous mode [ 240.830552][T15350] macvlan2: entered allmulticast mode [ 240.833398][T15350] bond4: entered promiscuous mode [ 240.840856][T15350] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 240.877485][T15350] bond4: left promiscuous mode [ 241.105666][T15370] loop2: detected capacity change from 0 to 1 [ 241.117886][T15370] ldm_validate_privheads(): Disk read failed. [ 241.120396][T15370] Dev loop2: unable to read RDB block 1 [ 241.122726][T15370] loop2: unable to read partition table [ 241.124769][T15370] loop2: partition table beyond EOD, truncated [ 241.130509][T15370] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 241.268955][ T5950] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.273823][ T5950] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.280134][ T5950] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.283829][ T5950] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.287066][ T5950] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.494959][T10067] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.515759][T15382] lo speed is unknown, defaulting to 1000 [ 241.560069][ T5940] Bluetooth: hci5: unexpected cc 0x040e length: 3 < 7 [ 241.613458][T10067] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.623625][T15382] lo speed is unknown, defaulting to 1000 [ 241.642177][T15396] loop2: detected capacity change from 0 to 1 [ 241.644923][T15396] ldm_validate_privheads(): Disk read failed. [ 241.647933][T15396] Dev loop2: unable to read RDB block 1 [ 241.650155][T15396] loop2: unable to read partition table [ 241.652514][T15396] loop2: partition table beyond EOD, truncated [ 241.654686][T15396] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 241.697991][T10067] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.774713][T10067] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.785965][T15382] chnl_net:caif_netlink_parms(): no params data found [ 241.792240][T15416] loop2: detected capacity change from 0 to 7 [ 241.795940][T15416] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 241.803060][T15416] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 241.806380][T15416] Dev loop2: unable to read RDB block 7 [ 241.809235][T15416] loop2: unable to read partition table [ 241.811770][T15416] loop2: partition table beyond EOD, truncated [ 241.814014][T15416] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 241.860683][T15382] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.863481][T15382] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.866127][T15382] bridge_slave_0: entered allmulticast mode [ 241.869178][T15382] bridge_slave_0: entered promiscuous mode [ 241.872554][T15382] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.875149][T15382] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.878768][T15382] bridge_slave_1: entered allmulticast mode [ 241.881930][T15382] bridge_slave_1: entered promiscuous mode [ 241.908343][T15427] bond5: option xmit_hash_policy: invalid value (6) [ 241.912079][T15427] bond5 (unregistering): Released all slaves [ 241.939645][T15428] bond5: option xmit_hash_policy: invalid value (6) [ 241.943738][T15428] bond5 (unregistering): Released all slaves [ 241.977209][T15382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.982368][T15382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.001729][T15382] team0: Port device team_slave_0 added [ 242.005245][T15382] team0: Port device team_slave_1 added [ 242.049666][T15382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.052458][T15382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.064484][T15382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.077384][T15382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.080564][T15382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.092331][T15382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.113546][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3357'. [ 242.144566][T15382] hsr_slave_0: entered promiscuous mode [ 242.147738][T15382] hsr_slave_1: entered promiscuous mode [ 242.150547][T10067] bridge_slave_1: left allmulticast mode [ 242.151986][T15454] loop2: detected capacity change from 0 to 7 [ 242.152351][T10067] bridge_slave_1: left promiscuous mode [ 242.154942][T15454] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 242.156445][T10067] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.159900][T15454] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 242.165566][T15454] Dev loop2: unable to read RDB block 7 [ 242.169247][T15454] loop2: unable to read partition table [ 242.171196][T10067] bridge_slave_0: left allmulticast mode [ 242.171616][T15454] loop2: partition table beyond EOD, truncated [ 242.173324][T10067] bridge_slave_0: left promiscuous mode [ 242.173458][T10067] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.175284][T15454] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 242.316168][T15459] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3363'. [ 242.547983][T10067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.579822][T10067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.629828][T10067] bond0 (unregistering): Released all slaves [ 242.799795][T15382] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 242.812955][T15382] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 242.819903][T15382] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 242.868010][T15382] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 242.986549][T15382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.998231][T15382] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.035997][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3377'. [ 243.049628][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.051964][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.070214][T10467] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.072996][T10467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.097743][T15516] loop2: detected capacity change from 0 to 7 [ 243.100193][T15516] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 243.103625][T15516] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 243.105732][T15516] Dev loop2: unable to read RDB block 7 [ 243.110065][T15516] loop2: unable to read partition table [ 243.112298][T15516] loop2: partition table beyond EOD, truncated [ 243.114448][T15516] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 243.153407][T15527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3386'. [ 243.155183][T15524] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3385'. [ 243.181321][T15524] Mount JFS Failure: -5 [ 243.182803][T15524] jfs_mount failed w/return code = -5 [ 243.232869][T10067] hsr_slave_0: left promiscuous mode [ 243.236909][T10067] hsr_slave_1: left promiscuous mode [ 243.239993][T10067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.242604][T10067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.246081][T10067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.249203][T10067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.276567][T10067] veth1_macvtap: left promiscuous mode [ 243.280424][T10067] veth0_macvtap: left promiscuous mode [ 243.282379][T10067] veth1_vlan: left promiscuous mode [ 243.284056][T10067] veth0_vlan: left promiscuous mode [ 243.349648][ T5940] Bluetooth: hci2: command tx timeout [ 243.429704][ T1026] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 243.584132][ T1026] usb 12-1: Using ep0 maxpacket: 8 [ 243.588649][ T1026] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 243.592139][ T1026] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.596159][ T1026] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.602917][ T1026] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.607048][ T1026] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.612001][ T1026] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 243.616200][ T1026] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.698240][T10067] team0 (unregistering): Port device team_slave_1 removed [ 243.728648][T10067] team0 (unregistering): Port device team_slave_0 removed [ 243.825092][ T1026] usb 12-1: usb_control_msg returned -32 [ 243.827154][ T1026] usbtmc 12-1:16.0: can't read capabilities [ 244.071852][T15382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.285433][T15382] veth0_vlan: entered promiscuous mode [ 244.290856][T15382] veth1_vlan: entered promiscuous mode [ 244.315271][T15382] veth0_macvtap: entered promiscuous mode [ 244.320284][T15382] veth1_macvtap: entered promiscuous mode [ 244.343911][T15382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.352812][T15382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.361533][T10073] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.364633][T10073] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.368294][T10073] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.371647][T10073] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.413124][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.415589][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.433191][T10073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.439505][T10073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.484753][T15560] loop2: detected capacity change from 0 to 1 [ 244.487153][T15560] ldm_validate_privheads(): Disk read failed. [ 244.491096][T15560] Dev loop2: unable to read RDB block 1 [ 244.492937][T15560] loop2: unable to read partition table [ 244.494958][T15560] loop2: partition table beyond EOD, truncated [ 244.496979][T15560] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 244.612437][T15571] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3400'. [ 244.659064][T15575] cgroup: none used incorrectly [ 244.775959][T15584] loop2: detected capacity change from 0 to 1 [ 244.780901][T15584] ldm_validate_privheads(): Disk read failed. [ 244.783130][T15584] Dev loop2: unable to read RDB block 1 [ 244.785475][T15584] loop2: unable to read partition table [ 244.788094][T15584] loop2: partition table beyond EOD, truncated [ 244.790729][T15584] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 244.801966][T15582] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3403'. [ 244.976001][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3409'. [ 244.976739][T15597] bond0: Error: Cannot enslave bond to itself. [ 244.979444][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3409'. [ 244.984635][T15599] IPv6: Can't replace route, no match found [ 245.357330][T15625] tmpfs: Unknown parameter 'ÊÝuÖ' [ 245.367752][T15624] loop2: detected capacity change from 0 to 1 [ 245.389700][T15624] ldm_validate_privheads(): Disk read failed. [ 245.392259][T15624] Dev loop2: unable to read RDB block 1 [ 245.395489][T15625] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3419'. [ 245.400502][T15624] loop2: unable to read partition table [ 245.403609][T15624] loop2: partition table beyond EOD, truncated [ 245.405777][T15624] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 245.409272][T15625] block nbd0: Unsupported socket: should be TCP or UNIX. [ 245.438408][ T5940] Bluetooth: hci2: command tx timeout [ 245.571410][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 245.571423][ T40] audit: type=1400 audit(1768426887.748:878): avc: denied { ioctl } for pid=15644 comm="syz.8.3428" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 245.578497][T15643] netlink: 'syz.5.3423': attribute type 142 has an invalid length. [ 245.581738][T15645] random: crng reseeded on system resumption [ 245.629932][ T40] audit: type=1400 audit(1768426887.808:879): avc: denied { read } for pid=15652 comm="syz.8.3430" dev="nsfs" ino=4026534350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 245.637177][ T40] audit: type=1400 audit(1768426887.808:880): avc: denied { open } for pid=15652 comm="syz.8.3430" path="net:[4026534350]" dev="nsfs" ino=4026534350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 245.659418][T15656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.663527][T15659] loop2: detected capacity change from 0 to 1 [ 245.665218][T15656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.666259][T15659] ldm_validate_privheads(): Disk read failed. [ 245.688026][T15659] Dev loop2: unable to read RDB block 1 [ 245.690366][T15659] loop2: unable to read partition table [ 245.692860][T15659] loop2: partition table beyond EOD, truncated [ 245.695466][T15659] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 245.797657][ T40] audit: type=1400 audit(1768426887.968:881): avc: denied { ioctl } for pid=15671 comm="syz.5.3439" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 246.070801][ T40] audit: type=1400 audit(1768426888.248:882): avc: denied { accept } for pid=15693 comm="syz.8.3449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 246.142576][ T10] usb 12-1: USB disconnect, device number 11 [ 246.148472][ T6110] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 246.184201][T15699] dvmrp1: tun_chr_ioctl cmd 1074025678 [ 246.186759][T15699] dvmrp1: group set to 0 [ 246.192628][T15699] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 246.192628][T15699] program syz.7.3450 not setting count and/or reply_len properly [ 246.308464][ T6110] usb 10-1: Using ep0 maxpacket: 16 [ 246.315568][ T6110] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 246.318526][ T6110] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 246.321180][ T6110] usb 10-1: Product: syz [ 246.322544][ T6110] usb 10-1: Manufacturer: syz [ 246.324153][ T6110] usb 10-1: SerialNumber: syz [ 246.326874][ T6110] usb 10-1: config 0 descriptor?? [ 246.494721][T15719] netlink: 'syz.6.3460': attribute type 1 has an invalid length. [ 246.593466][T15725] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 246.596926][T15725] block device autoloading is deprecated and will be removed. [ 246.602895][ T1026] usb 10-1: USB disconnect, device number 11 [ 246.770479][T15730] netlink: 'syz.6.3464': attribute type 2 has an invalid length. [ 246.770480][T15729] netlink: 'syz.6.3464': attribute type 2 has an invalid length. [ 246.984743][T15737] syz.6.3467 (15737): drop_caches: 2 [ 247.135117][T15749] loop2: detected capacity change from 0 to 7 [ 247.137591][T15749] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 247.141292][T15749] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 247.143428][T15749] Dev loop2: unable to read RDB block 7 [ 247.145277][T15749] loop2: unable to read partition table [ 247.147192][T15749] loop2: partition table beyond EOD, truncated [ 247.149868][T15749] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 247.243431][ T40] audit: type=1400 audit(1768426889.418:883): avc: denied { name_bind } for pid=15757 comm="syz.5.3476" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 247.268891][ T55] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 247.271756][T15751] program syz.8.3473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.428907][ T55] usb 11-1: Using ep0 maxpacket: 16 [ 247.431767][ T55] usb 11-1: too many configurations: 123, using maximum allowed: 8 [ 247.436152][ T55] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.442316][ T55] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.447734][ T55] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.452952][ T55] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.469625][ T55] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.474550][ T55] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.480012][ T55] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.489247][ T55] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.493348][ T55] usb 11-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 247.498849][ T55] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 247.501333][ T55] usb 11-1: SerialNumber: syz [ 247.507053][ T55] usb 11-1: config 0 descriptor?? [ 247.508841][ T5940] Bluetooth: hci2: command tx timeout [ 247.512936][ T55] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input39 [ 247.523508][T15787] (syz.7.3487,15787,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 247.527277][T15787] (syz.7.3487,15787,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 247.532780][T15787] (syz.7.3487,15787,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 247.535839][T15787] (syz.7.3487,15787,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 247.644895][T15804] geneve2: entered promiscuous mode [ 247.647019][T15804] geneve2: entered allmulticast mode [ 247.674261][T15811] __nla_validate_parse: 2 callbacks suppressed [ 247.674273][T15811] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3496'. [ 247.720702][T15741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3468'. [ 247.725940][ T40] audit: type=1400 audit(1768426889.898:884): avc: denied { append } for pid=15814 comm="syz.8.3498" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 247.739760][ T40] audit: type=1400 audit(1768426889.898:885): avc: denied { map } for pid=15814 comm="syz.8.3498" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 247.747149][ T40] audit: type=1400 audit(1768426889.898:886): avc: denied { write execute } for pid=15814 comm="syz.8.3498" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 247.749112][T15741] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3468'. [ 247.759520][ T5330] bcm5974 11-1:0.0: could not read from device [ 247.781038][T15826] openvswitch: netlink: IP tunnel dst address not specified [ 247.790584][ T55] usb 11-1: USB disconnect, device number 16 [ 248.040635][ T40] audit: type=1400 audit(1768426890.217:887): avc: denied { create } for pid=15859 comm="syz.7.3516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 248.088272][T15863] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3517'. [ 248.166275][T15870] loop2: detected capacity change from 0 to 7 [ 248.169305][T15870] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 248.172794][T15870] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 248.175253][T15870] Dev loop2: unable to read RDB block 7 [ 248.177079][T15870] loop2: unable to read partition table [ 248.179179][T15870] loop2: partition table beyond EOD, truncated [ 248.181242][T15870] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 248.262194][T15869] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3516'. [ 248.406223][ T1026] IPVS: starting estimator thread 0... [ 248.410124][T15898] loop2: detected capacity change from 0 to 7 [ 248.411545][T15901] IPVS: sh: FWM 3 0x00000003 - no destination available [ 248.411957][T15902] IPVS: sh: FWM 3 0x00000003 - no destination available [ 248.413018][T15898] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 248.422127][T15898] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 248.425049][T15898] Dev loop2: unable to read RDB block 7 [ 248.427521][T15898] loop2: unable to read partition table [ 248.430112][T15898] loop2: partition table beyond EOD, truncated [ 248.432830][T15898] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 248.499340][T15900] IPVS: using max 45 ests per chain, 108000 per kthread [ 248.534499][T15914] netlink: 'syz.7.3538': attribute type 4 has an invalid length. [ 248.535451][T15913] netlink: 'syz.7.3538': attribute type 4 has an invalid length. [ 248.589092][ T55] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 248.749160][ T55] usb 11-1: Using ep0 maxpacket: 8 [ 248.752859][ T55] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 248.756897][ T55] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.763284][ T55] pvrusb2: Hardware description: Terratec Grabster AV400 [ 248.766155][ T55] pvrusb2: ********** [ 248.767672][ T55] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 248.772399][ T55] pvrusb2: Important functionality might not be entirely working. [ 248.775287][ T55] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 248.779398][ T55] pvrusb2: ********** [ 248.963369][ T2492] pvrusb2: Invalid write control endpoint [ 248.992114][ T2492] pvrusb2: Invalid write control endpoint [ 248.994008][ T2492] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 248.997070][ T2492] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 249.000186][ T2492] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 249.003540][ T2492] pvrusb2: Device being rendered inoperable [ 249.005456][ T2492] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 249.007701][ T2492] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 249.010744][ T2492] pvrusb2: Attached sub-driver cx25840 [ 249.012549][ T2492] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 249.016067][ T2492] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 249.164086][T15889] pvrusb2: Attempted to execute control transfer when device not ok [ 249.219581][T15889] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3527'. [ 249.223529][T15889] block nbd0: Unsupported socket: should be TCP or UNIX. [ 249.259808][ T10] usb 11-1: USB disconnect, device number 17 [ 249.397122][T15949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32017 sclass=netlink_route_socket pid=15949 comm=syz.8.3548 [ 249.589557][ T5940] Bluetooth: hci2: command tx timeout [ 249.744146][T15952] loop2: detected capacity change from 0 to 7 [ 249.747392][T15952] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 249.751668][T15952] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 249.754386][T15952] Dev loop2: unable to read RDB block 7 [ 249.756600][T15952] loop2: unable to read partition table [ 249.758600][T15952] loop2: partition table beyond EOD, truncated [ 249.761311][T15952] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 250.187118][T15969] loop2: detected capacity change from 0 to 1 [ 250.190760][T15969] ldm_validate_privheads(): Disk read failed. [ 250.192883][T15969] Dev loop2: unable to read RDB block 1 [ 250.195026][T15969] loop2: unable to read partition table [ 250.197068][T15969] loop2: partition table beyond EOD, truncated [ 250.199070][T15969] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 250.305033][T15975] loop2: detected capacity change from 0 to 7 [ 250.308401][T15975] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 250.311967][T15975] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 250.314249][T15975] Dev loop2: unable to read RDB block 7 [ 250.316153][T15975] loop2: unable to read partition table [ 250.318237][T15975] loop2: partition table beyond EOD, truncated [ 250.320631][T15975] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 250.355010][T15977] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3559'. [ 250.398361][T15977] binder: 15976:15977 ioctl 800442d3 2000000000c0 returned -22 [ 250.921486][T15998] loop2: detected capacity change from 0 to 1 [ 250.924387][T15998] ldm_validate_privheads(): Disk read failed. [ 250.926718][T15998] Dev loop2: unable to read RDB block 1 [ 250.928752][T15998] loop2: unable to read partition table [ 250.931782][T15998] loop2: partition table beyond EOD, truncated [ 250.934507][T15998] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 251.108757][T16018] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3572'. [ 251.690673][T16023] netlink: 'syz.5.3574': attribute type 2 has an invalid length. [ 251.754060][T16029] loop2: detected capacity change from 0 to 1 [ 251.756765][T16029] ldm_validate_privheads(): Disk read failed. [ 251.759169][T16029] Dev loop2: unable to read RDB block 1 [ 251.761477][T16029] loop2: unable to read partition table [ 251.763604][T16029] loop2: partition table beyond EOD, truncated [ 251.765837][T16029] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 251.991913][T16044] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3584'. [ 251.995612][T16044] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 252.193017][T16049] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3585'. [ 252.460745][T16086] loop2: detected capacity change from 0 to 7 [ 252.463414][T16086] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 252.466126][T10467] Bluetooth: hci3: Frame reassembly failed (-84) [ 252.466802][T16086] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 252.469799][T16084] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 252.471631][T16086] Dev loop2: unable to read RDB block 7 [ 252.482109][T16086] loop2: unable to read partition table [ 252.484293][T16086] loop2: partition table beyond EOD, truncated [ 252.486509][T16086] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 252.548877][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 252.548899][ T40] audit: type=1400 audit(1768426894.716:891): avc: denied { listen } for pid=16090 comm="syz.7.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 252.562690][ T40] audit: type=1400 audit(1768426894.726:892): avc: denied { accept } for pid=16090 comm="syz.7.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 253.465887][T16118] loop2: detected capacity change from 0 to 7 [ 253.469064][T16118] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 253.472776][T16118] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 253.475207][T16118] Dev loop2: unable to read RDB block 7 [ 253.477015][T16118] loop2: unable to read partition table [ 253.479027][T16118] loop2: partition table beyond EOD, truncated [ 253.481448][T16118] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 253.558724][T16122] sit0: entered promiscuous mode [ 253.563972][T16122] netlink: 'syz.5.3613': attribute type 1 has an invalid length. [ 253.566467][T16122] __nla_validate_parse: 1 callbacks suppressed [ 253.566476][T16122] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3613'. [ 253.715200][T16133] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3618'. [ 253.828083][T16135] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.3619'. [ 253.926401][T16139] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 254.014254][T16150] lo: entered allmulticast mode [ 254.017163][T16150] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1280 [ 254.024593][T16149] lo: left allmulticast mode [ 254.079778][T16157] loop2: detected capacity change from 0 to 7 [ 254.083790][T16157] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 254.088249][T16157] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 254.091062][T16157] Dev loop2: unable to read RDB block 7 [ 254.092907][T16157] loop2: unable to read partition table [ 254.094900][T16157] loop2: partition table beyond EOD, truncated [ 254.096956][T16157] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 254.382923][T16176] pimreg3: entered allmulticast mode [ 254.480504][ T5940] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 254.480530][ T5950] Bluetooth: hci3: command 0x1003 tx timeout [ 254.595695][T16182] overlayfs: missing 'workdir' [ 254.598348][T16182] overlayfs: overlapping lowerdir path [ 261.273908][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.110741][T16197] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3642'. [ 266.116415][T16197] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.119976][T16197] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.136677][T16197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16197 comm=syz.8.3642 [ 266.140732][T16197] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3642'. [ 266.145166][T16197] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.147413][T16197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.150059][T16197] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.152622][T16197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.157898][T16197] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3642'. [ 266.163197][T16197] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.166618][T16197] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.182229][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3647'. [ 266.187204][T16207] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3647'. [ 266.277764][T16221] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3652'. [ 266.792158][ T34] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 266.822109][ T10] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 266.953555][ T34] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 266.958025][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.962002][ T34] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.962350][ T10] usb 10-1: device descriptor read/64, error -71 [ 266.965732][ T34] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 266.974620][ T34] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 266.977808][ T34] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 266.980503][ T34] usb 12-1: Manufacturer: syz [ 266.985082][ T34] usb 12-1: config 0 descriptor?? [ 267.004589][T16248] syz_tun: entered allmulticast mode [ 267.007526][T16247] syz_tun: left allmulticast mode [ 267.202096][ T10] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 267.341990][ T10] usb 10-1: device descriptor read/64, error -71 [ 267.392819][ T34] hid_parser_main: 4086 callbacks suppressed [ 267.392837][ T34] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 267.462253][ T10] usb usb10-port1: attempt power cycle [ 267.543652][ T34] appleir 0003:05AC:8243.0006: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 267.710193][T16232] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3656'. [ 267.811995][ T10] usb 10-1: new low-speed USB device number 14 using dummy_hcd [ 267.833020][ T10] usb 10-1: device descriptor read/8, error -71 [ 268.092059][ T10] usb 10-1: new low-speed USB device number 15 using dummy_hcd [ 268.112760][ T10] usb 10-1: device descriptor read/8, error -71 [ 268.234481][ T10] usb usb10-port1: unable to enumerate USB device [ 269.009631][ T34] usb 12-1: reset high-speed USB device number 12 using dummy_hcd [ 269.235436][T16273] netlink: 'syz.6.3672': attribute type 7 has an invalid length. [ 269.247816][ T161] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.247930][T16273] netlink: 'syz.6.3672': attribute type 7 has an invalid length. [ 269.251871][ T161] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.260885][ T161] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.265403][ T161] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.277244][T16278] netlink: 'syz.8.3675': attribute type 3 has an invalid length. [ 269.279448][T16278] netlink: 'syz.8.3675': attribute type 1 has an invalid length. [ 269.288933][T16278] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3675'. [ 269.292920][T16278] NCSI netlink: No device for ifindex 0 [ 269.376682][T16279] pimreg: entered allmulticast mode [ 269.392928][T16279] Malformed UNC in devname [ 269.392928][T16279] [ 269.396188][T16279] CIFS: VFS: Malformed UNC in devname [ 269.627646][T16303] loop2: detected capacity change from 0 to 1 [ 269.631528][T16303] ldm_validate_privheads(): Disk read failed. [ 269.634901][T16303] Dev loop2: unable to read RDB block 1 [ 269.637377][T16303] loop2: unable to read partition table [ 269.640018][T16303] loop2: partition table beyond EOD, truncated [ 269.640526][ T40] audit: type=1400 audit(1768426911.814:893): avc: denied { wake_alarm } for pid=16302 comm="syz.7.3686" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 269.644357][T16303] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 269.684879][T16306] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3687'. [ 269.687740][T16306] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3687'. [ 269.691583][T16304] netlink: 'syz.7.3686': attribute type 4 has an invalid length. [ 269.839557][T16316] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3394018074 (6788036148 ns) > initial count (6222627426 ns). Using initial count to start timer. [ 269.923004][ T6110] usb 12-1: USB disconnect, device number 12 [ 270.062637][ T9] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 270.222122][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 270.226787][ T9] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 270.230229][ T9] usb 10-1: config 0 has no interface number 0 [ 270.233391][ T9] usb 10-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.237867][ T9] usb 10-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 270.244276][ T9] usb 10-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 270.249237][ T9] usb 10-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 270.256680][ T9] usb 10-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.266188][ T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 270.270019][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.273749][ T9] usb 10-1: Product: syz [ 270.275621][ T9] usb 10-1: Manufacturer: syz [ 270.277629][ T9] usb 10-1: SerialNumber: syz [ 270.281891][ T9] usb 10-1: config 0 descriptor?? [ 270.288909][ T9] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.119/input/input41 [ 270.294194][T16349] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.297720][T16349] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.299908][ T6040] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 270.300773][T16349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.305057][ T6040] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 270.313274][ T6040] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 270.316142][ T6040] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 270.318897][ T6040] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 270.321605][ T6040] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 270.328612][ T6040] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 270.331124][ T6040] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 270.334070][ T6040] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 270.337644][ T6040] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [sy] on syz0 [ 270.389634][T16364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=16364 comm=syz.8.3707 [ 270.439750][T16369] sock: sock_set_timeout: `syz.7.3709' (pid 16369) tries to set negative timeout [ 270.489018][ T24] usb 10-1: USB disconnect, device number 16 [ 270.564031][T16375] usb usb4: usbfs: process 16375 (syz.7.3711) did not claim interface 0 before use [ 270.745291][T16396] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 270.748406][T16396] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 270.753896][T16396] netlink: 'syz.6.3721': attribute type 10 has an invalid length. [ 270.764054][T16396] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 270.876641][T16409] loop2: detected capacity change from 0 to 7 [ 270.879157][T16409] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 270.883139][T16409] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 270.886114][T16409] Dev loop2: unable to read RDB block 7 [ 270.888546][T16409] loop2: unable to read partition table [ 270.890690][T16409] loop2: partition table beyond EOD, truncated [ 270.893093][T16409] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 270.942851][T16411] geneve1: entered allmulticast mode [ 271.176918][T16442] loop2: detected capacity change from 0 to 7 [ 271.179544][T16442] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 271.183441][T16442] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 271.186739][T16442] Dev loop2: unable to read RDB block 7 [ 271.188815][T16442] loop2: unable to read partition table [ 271.191137][T16442] loop2: partition table beyond EOD, truncated [ 271.195372][T16442] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 271.240534][T16447] bond_slave_0: Device is already in use. [ 271.327776][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.332905][ T1026] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 271.335333][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.343665][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.351863][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.355949][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.390521][T16452] lo speed is unknown, defaulting to 1000 [ 271.486754][ T1026] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 271.489775][ T1026] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.493389][ T1026] usb 11-1: Product: syz [ 271.495401][ T1026] usb 11-1: Manufacturer: syz [ 271.496438][T16452] lo speed is unknown, defaulting to 1000 [ 271.497056][ T1026] usb 11-1: SerialNumber: syz [ 271.507643][ T1026] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 271.519862][ T40] audit: type=1400 audit(1768427169.684:894): avc: denied { bind } for pid=16470 comm="syz.8.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 271.533731][ T6006] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 271.569062][T16471] binder: 16470:16471 ioctl 4004af61 200000000040 returned -22 [ 271.579772][T16471] __nla_validate_parse: 6 callbacks suppressed [ 271.579789][T16471] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3749'. [ 271.582856][ T40] audit: type=1400 audit(1768427169.744:895): avc: denied { listen } for pid=16470 comm="syz.8.3749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 271.959952][T10068] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.016145][T16452] chnl_net:caif_netlink_parms(): no params data found [ 272.064539][T10068] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.157278][T10068] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.164006][T16452] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.167097][T16452] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.171195][T16452] bridge_slave_0: entered allmulticast mode [ 272.176276][T16452] bridge_slave_0: entered promiscuous mode [ 272.182240][T16452] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.185156][T16452] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.187636][T16452] bridge_slave_1: entered allmulticast mode [ 272.191059][T16452] bridge_slave_1: entered promiscuous mode [ 272.209381][T16452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.216903][T16452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.282513][T10068] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.291383][T16452] team0: Port device team_slave_0 added [ 272.296247][T16452] team0: Port device team_slave_1 added [ 272.314059][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3754'. [ 272.319177][T16452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.322154][T16452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.331043][T16452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.337228][T16452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.339554][T16452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.349736][T16452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.358452][T16493] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3754'. [ 272.415147][T16452] hsr_slave_0: entered promiscuous mode [ 272.418024][T16452] hsr_slave_1: entered promiscuous mode [ 272.420135][T16452] debugfs: 'hsr0' already exists in 'hsr' [ 272.423230][T16452] Cannot create hsr debugfs directory [ 272.532478][T10068] bridge_slave_1: left allmulticast mode [ 272.534268][T10068] bridge_slave_1: left promiscuous mode [ 272.536154][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.540710][T10068] bridge_slave_0: left allmulticast mode [ 272.542982][T10068] bridge_slave_0: left promiscuous mode [ 272.544856][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.554162][ T6006] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive [ 272.562241][ T6006] ath9k_htc: Failed to initialize the device [ 272.586769][ T6006] usb 11-1: ath9k_htc: USB layer deinitialized [ 272.597311][ T34] usb 11-1: USB disconnect, device number 18 [ 272.961860][T10068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.002447][T10068] bond_slave_0: left allmulticast mode [ 273.005855][T10068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.042939][T10068] bond_slave_1: left allmulticast mode [ 273.047679][T10068] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 273.072631][T10068] batadv0: left allmulticast mode [ 273.076853][T10068] bond0 (unregistering): Released all slaves [ 273.112160][ T10] page_pool_release_retry() stalled pool shutdown: id 31, 32 inflight 181 sec [ 273.207755][T10068] bond1 (unregistering): Released all slaves [ 273.222952][T16504] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3759'. [ 273.378481][T16521] loop2: detected capacity change from 0 to 7 [ 273.381683][T16521] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 273.388484][T16521] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 273.391343][T16521] Dev loop2: unable to read RDB block 7 [ 273.393928][T16521] loop2: unable to read partition table [ 273.396452][T16521] loop2: partition table beyond EOD, truncated [ 273.398830][T16521] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 273.443220][ T5950] Bluetooth: hci3: command tx timeout [ 273.451654][T16529] netlink: 'syz.7.3769': attribute type 1 has an invalid length. [ 273.456711][T16529] netlink: 'syz.7.3769': attribute type 1 has an invalid length. [ 273.465917][T16534] loop2: detected capacity change from 0 to 1 [ 273.468362][T16534] ldm_validate_privheads(): Disk read failed. [ 273.470548][T16534] Dev loop2: unable to read RDB block 1 [ 273.473685][T16534] loop2: unable to read partition table [ 273.476120][T16534] loop2: partition table beyond EOD, truncated [ 273.478866][T16534] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 273.595608][T16542] netlink: 'syz.6.3774': attribute type 1 has an invalid length. [ 273.655478][T16542] 8021q: adding VLAN 0 to HW filter on device bond7 [ 273.662529][T16542] bond6: (slave bond7): making interface the new active one [ 273.665330][T16542] bond6: (slave bond7): Enslaving as an active interface with an up link [ 273.679161][T16552] FAULT_INJECTION: forcing a failure. [ 273.679161][T16552] name failslab, interval 1, probability 0, space 0, times 0 [ 273.686583][T16552] CPU: 1 UID: 0 PID: 16552 Comm: syz.8.3778 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.686609][T16552] Tainted: [L]=SOFTLOCKUP [ 273.686615][T16552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 273.686626][T16552] Call Trace: [ 273.686631][T16552] [ 273.686638][T16552] dump_stack_lvl+0x16c/0x1f0 [ 273.686694][T16552] should_fail_ex+0x512/0x640 [ 273.686736][T16552] ? __kmalloc_noprof+0xca/0x910 [ 273.686767][T16552] should_failslab+0xc2/0x120 [ 273.686792][T16552] __kmalloc_noprof+0xeb/0x910 [ 273.686817][T16552] ? __might_fault+0xe3/0x190 [ 273.686835][T16552] ? do_insn_ioctl+0xda/0x4e0 [ 273.686863][T16552] ? do_insn_ioctl+0xda/0x4e0 [ 273.686885][T16552] do_insn_ioctl+0xda/0x4e0 [ 273.686912][T16552] comedi_unlocked_ioctl+0x153d/0x2eb0 [ 273.686944][T16552] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 273.686975][T16552] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 273.687076][T16552] ? do_vfs_ioctl+0x128/0x14f0 [ 273.687100][T16552] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 273.687120][T16552] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 273.687157][T16552] ? hook_file_ioctl_common+0x144/0x410 [ 273.687193][T16552] ? selinux_file_ioctl+0x180/0x270 [ 273.687216][T16552] ? selinux_file_ioctl+0xb4/0x270 [ 273.687242][T16552] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 273.687268][T16552] __x64_sys_ioctl+0x18e/0x210 [ 273.687292][T16552] do_syscall_64+0xcd/0xf80 [ 273.687318][T16552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.687338][T16552] RIP: 0033:0x7f512078f7c9 [ 273.687356][T16552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.687374][T16552] RSP: 002b:00007f5121630038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.687394][T16552] RAX: ffffffffffffffda RBX: 00007f51209e5fa0 RCX: 00007f512078f7c9 [ 273.687406][T16552] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 273.687418][T16552] RBP: 00007f5121630090 R08: 0000000000000000 R09: 0000000000000000 [ 273.687429][T16552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.687440][T16552] R13: 00007f51209e6038 R14: 00007f51209e5fa0 R15: 00007ffd0f197298 [ 273.687467][T16552] [ 273.722210][T16553] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3774'. [ 273.747696][T16542] bond6: (slave gretap3): Enslaving as a backup interface with an up link [ 273.796271][T16553] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.844111][T16559] loop2: detected capacity change from 0 to 1 [ 273.846890][T16559] ldm_validate_privheads(): Disk read failed. [ 273.849363][T16559] Dev loop2: unable to read RDB block 1 [ 273.852507][T16559] loop2: unable to read partition table [ 273.855030][T16559] loop2: partition table beyond EOD, truncated [ 273.857324][T16559] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 274.030696][T10068] hsr_slave_0: left promiscuous mode [ 274.036343][T10068] hsr_slave_1: left promiscuous mode [ 274.038555][T10068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.041032][T10068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.044590][T10068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.047711][T10068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.075682][T10068] C: left promiscuous mode [ 274.078621][T10068] team_slave_1: left promiscuous mode [ 274.081289][T10068] veth1_macvtap: left promiscuous mode [ 274.084515][T10068] veth0_macvtap: left promiscuous mode [ 274.086933][T10068] veth1_vlan: left promiscuous mode [ 274.092139][T10068] veth0_vlan: left promiscuous mode [ 274.153463][T16579] FAULT_INJECTION: forcing a failure. [ 274.153463][T16579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.158214][T16579] CPU: 2 UID: 0 PID: 16579 Comm: syz.6.3787 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.158234][T16579] Tainted: [L]=SOFTLOCKUP [ 274.158238][T16579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 274.158246][T16579] Call Trace: [ 274.158251][T16579] [ 274.158257][T16579] dump_stack_lvl+0x16c/0x1f0 [ 274.158276][T16579] should_fail_ex+0x512/0x640 [ 274.158296][T16579] _copy_from_user+0x2e/0xd0 [ 274.158315][T16579] do_insn_ioctl+0x337/0x4e0 [ 274.158333][T16579] comedi_unlocked_ioctl+0x153d/0x2eb0 [ 274.158353][T16579] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 274.158372][T16579] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 274.158387][T16579] ? do_vfs_ioctl+0x128/0x14f0 [ 274.158402][T16579] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 274.158415][T16579] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 274.158437][T16579] ? hook_file_ioctl_common+0x144/0x410 [ 274.158459][T16579] ? selinux_file_ioctl+0x180/0x270 [ 274.158473][T16579] ? selinux_file_ioctl+0xb4/0x270 [ 274.158490][T16579] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 274.158509][T16579] __x64_sys_ioctl+0x18e/0x210 [ 274.158529][T16579] do_syscall_64+0xcd/0xf80 [ 274.158552][T16579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.158572][T16579] RIP: 0033:0x7ff5b8d8f7c9 [ 274.158587][T16579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.158603][T16579] RSP: 002b:00007ff5b6ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.158620][T16579] RAX: ffffffffffffffda RBX: 00007ff5b8fe5fa0 RCX: 00007ff5b8d8f7c9 [ 274.158634][T16579] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 274.158644][T16579] RBP: 00007ff5b6ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 274.158653][T16579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.158659][T16579] R13: 00007ff5b8fe6038 R14: 00007ff5b8fe5fa0 R15: 00007ffc7981aa58 [ 274.158689][T16579] [ 274.159185][T10068] pimreg3 (unregistering): left allmulticast mode [ 274.668846][T10068] team0 (unregistering): Port device team_slave_1 removed [ 274.708701][T10068] team0 (unregistering): Port device C removed [ 274.738850][T16562] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI [ 274.742796][T16562] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 274.746167][T16562] CPU: 0 UID: 0 PID: 16562 Comm: syz.7.3783 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.749882][T16562] Tainted: [L]=SOFTLOCKUP [ 274.751464][T16562] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 274.755843][T16562] RIP: 0010:rose_transmit_link+0x32/0x5f0 [ 274.757856][T16562] Code: 41 55 41 54 55 48 89 fd 53 48 89 f3 48 83 ec 08 e8 53 52 5b f7 48 8d 7b 36 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 d8 04 00 00 [ 274.764947][T16562] RSP: 0018:ffffc900035d7bf8 EFLAGS: 00010207 [ 274.767247][T16562] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8a643758 [ 274.769983][T16562] RDX: 0000000000000006 RSI: ffffffff8a63965d RDI: 0000000000000036 [ 274.772872][T16562] RBP: ffff888026da5680 R08: 0000000000000005 R09: 000000000000001f [ 274.775524][T16562] R10: 0000000000000013 R11: 0000000000000000 R12: ffff88805e8e1000 [ 274.778411][T16562] R13: 0000000000000010 R14: 0000000000000013 R15: ffff88803574345a SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 274.781088][T16562] FS: 0000555567751500(0000) GS:ffff8880d68f5000(0000) knlGS:0000000000000000 [ 274.784801][T16562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.787241][T16562] CR2: 0000001b2cc63fff CR3: 0000000055050000 CR4: 0000000000352ef0 [ 274.790067][T16562] DR0: 0000000000000000 DR1: 0000000000000f80 DR2: 0000000000000000 [ 274.793225][T16562] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 274.795959][T16562] Call Trace: [ 274.797339][T16562] [ 274.798385][T16562] rose_write_internal+0x2f6/0x1850 [ 274.800240][T16562] ? __timer_delete+0xf5/0x1c0 [ 274.801932][T16562] ? __pfx___timer_delete+0x10/0x10 [ 274.803781][T16562] ? __pfx_rose_write_internal+0x10/0x10 [ 274.805860][T16562] rose_release+0x1f1/0x740 [ 274.807370][T16562] ? locks_remove_file+0x1/0x5c0 [ 274.808947][T16562] __sock_release+0xb3/0x270 [ 274.810599][T16562] ? __pfx_sock_close+0x10/0x10 [ 274.812557][T16562] sock_close+0x1c/0x30 [ 274.814460][T16562] __fput+0x402/0xb70 [ 274.815972][T16562] task_work_run+0x150/0x240 [ 274.817540][T16562] ? __pfx_task_work_run+0x10/0x10 [ 274.819323][T16562] ? __do_sys_close_range+0x278/0x730 [ 274.821190][T16562] exit_to_user_mode_loop+0xfb/0x540 [ 274.823066][T16562] do_syscall_64+0x4ee/0xf80 [ 274.824621][T16562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.826554][T16562] RIP: 0033:0x7fc2d1d8f7c9 [ 274.827999][T16562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.834390][T16562] RSP: 002b:00007ffdc93d3508 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 274.837130][T16562] RAX: 0000000000000000 RBX: 00007fc2d1fe7da0 RCX: 00007fc2d1d8f7c9 [ 274.840293][T16562] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 274.843526][T16562] RBP: 00007fc2d1fe7da0 R08: 00000000000000ec R09: 0000000dc93d37ff [ 274.846252][T16562] R10: 00007fc2d1fe7cb0 R11: 0000000000000246 R12: 0000000000042eaf [ 274.848835][T16562] R13: 00007fc2d1fe6270 R14: ffffffffffffffff R15: 00007ffdc93d3620 [ 274.851451][T16562] [ 274.852509][T16562] Modules linked in: [ 274.854374][T16562] ---[ end trace 0000000000000000 ]--- [ 274.859531][ T40] audit: type=1400 audit(1768427173.024:896): avc: denied { read } for pid=5327 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 274.866919][ T40] audit: type=1400 audit(1768427173.024:897): avc: denied { search } for pid=5327 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.874900][ T40] audit: type=1400 audit(1768427173.024:898): avc: denied { search } for pid=5327 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.883229][T16562] RIP: 0010:rose_transmit_link+0x32/0x5f0 [ 274.886567][ T40] audit: type=1400 audit(1768427173.024:899): avc: denied { add_name } for pid=5327 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.894395][T16562] Code: 41 55 41 54 55 48 89 fd 53 48 89 f3 48 83 ec 08 e8 53 52 5b f7 48 8d 7b 36 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 d8 04 00 00 [ 274.901522][ T40] audit: type=1400 audit(1768427173.024:900): avc: denied { create } for pid=5327 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 274.908226][T16562] RSP: 0018:ffffc900035d7bf8 EFLAGS: 00010207 [ 274.908244][T16562] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff8a643758 [ 274.908252][T16562] RDX: 0000000000000006 RSI: ffffffff8a63965d RDI: 0000000000000036 [ 274.910654][ T40] audit: type=1400 audit(1768427173.024:901): avc: denied { append open } for pid=5327 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 274.913252][T16562] RBP: ffff888026da5680 R08: 0000000000000005 R09: 000000000000001f [ 274.916143][ T40] audit: type=1400 audit(1768427173.024:902): avc: denied { getattr } for pid=5327 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 274.924701][T16562] R10: 0000000000000013 R11: 0000000000000000 R12: ffff88805e8e1000 [ 274.939599][T16562] R13: 0000000000000010 R14: 0000000000000013 R15: ffff88803574345a [ 274.943332][T16562] FS: 0000555567751500(0000) GS:ffff8880d6bf5000(0000) knlGS:0000000000000000 [ 274.947291][T16562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.950020][T16562] CR2: 00007fcc2a117d60 CR3: 0000000055050000 CR4: 0000000000352ef0 [ 274.953942][T16562] Kernel panic - not syncing: Fatal exception [ 274.956778][T16562] Kernel Offset: disabled [ 274.958341][T16562] Rebooting in 86400 seconds..