syzkaller login: [ 304.214652][ T1860] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 311.565408][ T1860] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 311.618802][ T1860] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 311.658014][ T1860] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 311.717933][ T1860] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:49273' (ECDSA) to the list of known hosts. 1970/01/01 00:06:16 fuzzer started 1970/01/01 00:06:26 dialing manager at localhost:40615 [ 390.903210][ T2027] cgroup: Unknown subsys name 'net' [ 391.565105][ T2027] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:06:31 syscalls: 2918 1970/01/01 00:06:31 code coverage: enabled 1970/01/01 00:06:31 comparison tracing: enabled 1970/01/01 00:06:31 extra coverage: enabled 1970/01/01 00:06:31 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:06:31 setuid sandbox: enabled 1970/01/01 00:06:31 namespace sandbox: enabled 1970/01/01 00:06:31 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:06:31 fault injection: enabled 1970/01/01 00:06:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:06:31 net packet injection: enabled 1970/01/01 00:06:31 net device setup: enabled 1970/01/01 00:06:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:06:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:06:31 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:06:31 USB emulation: enabled 1970/01/01 00:06:31 hci packet injection: /dev/vhci does not exist 1970/01/01 00:06:31 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:06:31 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:06:31 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:06:36 fetching corpus: 49, signal 34187/35253 (executing program) 1970/01/01 00:06:38 fetching corpus: 83, signal 42133/42780 (executing program) 1970/01/01 00:06:38 fetching corpus: 83, signal 42133/42995 (executing program) 1970/01/01 00:06:38 fetching corpus: 83, signal 42133/43232 (executing program) 1970/01/01 00:06:39 fetching corpus: 83, signal 42133/43459 (executing program) 1970/01/01 00:06:39 fetching corpus: 83, signal 42133/43670 (executing program) 1970/01/01 00:06:39 fetching corpus: 83, signal 42133/43902 (executing program) 1970/01/01 00:06:39 fetching corpus: 84, signal 43134/44847 (executing program) 1970/01/01 00:06:39 fetching corpus: 84, signal 43134/45051 (executing program) 1970/01/01 00:06:39 fetching corpus: 84, signal 43134/45219 (executing program) 1970/01/01 00:06:39 fetching corpus: 84, signal 43134/45411 (executing program) 1970/01/01 00:06:40 fetching corpus: 84, signal 43134/45603 (executing program) 1970/01/01 00:06:40 fetching corpus: 84, signal 43134/45801 (executing program) 1970/01/01 00:06:40 fetching corpus: 84, signal 43134/45976 (executing program) 1970/01/01 00:06:40 fetching corpus: 84, signal 43134/46171 (executing program) 1970/01/01 00:06:40 fetching corpus: 84, signal 43185/46381 (executing program) 1970/01/01 00:06:40 fetching corpus: 84, signal 43185/46562 (executing program) 1970/01/01 00:06:40 fetching corpus: 84, signal 43185/46735 (executing program) 1970/01/01 00:06:41 fetching corpus: 84, signal 43185/46930 (executing program) 1970/01/01 00:06:41 fetching corpus: 84, signal 43185/47108 (executing program) 1970/01/01 00:06:41 fetching corpus: 84, signal 43185/47272 (executing program) 1970/01/01 00:06:41 fetching corpus: 84, signal 43185/47452 (executing program) 1970/01/01 00:06:41 fetching corpus: 84, signal 43185/47580 (executing program) 1970/01/01 00:06:41 fetching corpus: 84, signal 43185/47580 (executing program) 1970/01/01 00:08:28 starting 2 fuzzer processes 00:08:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x8, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x0, 0x370, 0xffffffff, 0x370, 0x0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@dev, @ipv6=@dev, @gre_key}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'team_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8e6fc44ef8bc575cef1aaacbcde81d6860771e108363089da9e7fc84fe69"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 00:08:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002d00)=[{{&(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast2}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xb, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}], 0x48}}], 0x1, 0x0) [ 533.367876][ T2032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.429425][ T2031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.490514][ T2032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.900367][ T2031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.933375][ T2032] device hsr_slave_0 entered promiscuous mode [ 544.960486][ T2032] device hsr_slave_1 entered promiscuous mode [ 545.205979][ T2031] device hsr_slave_0 entered promiscuous mode [ 545.363669][ T2031] device hsr_slave_1 entered promiscuous mode [ 545.385516][ T2031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.390149][ T2031] Cannot create hsr debugfs directory [ 552.159403][ T2032] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 552.305392][ T2032] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 552.574344][ T2032] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 552.804586][ T2032] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 553.669646][ T2031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 553.873805][ T2031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 553.955884][ T2031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 554.059621][ T2031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 563.448212][ T2031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.307400][ T2032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.798543][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 564.863135][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 565.077977][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 565.136093][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 571.262371][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 571.290902][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 571.577314][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 571.639964][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 572.056989][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 572.140226][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 572.333984][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 572.377661][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 572.619501][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 572.960640][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 574.327059][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 574.390612][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 575.139844][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 575.250746][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 576.295147][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 576.348185][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 576.567491][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 576.650730][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 576.727939][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 576.806725][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 577.145451][ T2031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 588.533439][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 588.536791][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 589.110614][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 589.118026][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 614.382981][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 614.490050][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 614.893336][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 614.980719][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 623.659929][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 623.757078][ T2646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 623.960524][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 623.995194][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 624.080231][ T2031] device veth0_vlan entered promiscuous mode [ 624.257574][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 624.287797][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 624.485944][ T2032] device veth0_vlan entered promiscuous mode [ 624.738228][ T2031] device veth1_vlan entered promiscuous mode [ 625.014343][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 625.027952][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 625.076520][ T2032] device veth1_vlan entered promiscuous mode [ 626.803702][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 626.818997][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 626.847803][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 626.869066][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 626.939078][ T2031] device veth0_macvtap entered promiscuous mode [ 627.167725][ T2032] device veth0_macvtap entered promiscuous mode [ 627.360904][ T2031] device veth1_macvtap entered promiscuous mode [ 627.562994][ T2032] device veth1_macvtap entered promiscuous mode [ 628.385933][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 628.407075][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 628.420367][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 628.480095][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 629.036636][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 629.096160][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 629.115764][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 629.133385][ T2635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 629.310728][ T2031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.315980][ T2031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.317172][ T2031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.318252][ T2031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.905820][ T2032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.907675][ T2032] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.909286][ T2032] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.910919][ T2032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.218857][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 630.269607][ T1848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:10:36 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x8, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x0, 0x370, 0xffffffff, 0x370, 0x0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@dev, @ipv6=@dev, @gre_key}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'team_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8e6fc44ef8bc575cef1aaacbcde81d6860771e108363089da9e7fc84fe69"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 00:10:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002d00)=[{{&(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast2}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xb, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}], 0x48}}], 0x1, 0x0) 00:10:39 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x8, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x0, 0x370, 0xffffffff, 0x370, 0x0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@dev, @ipv6=@dev, @gre_key}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'team_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8e6fc44ef8bc575cef1aaacbcde81d6860771e108363089da9e7fc84fe69"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 00:10:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002d00)=[{{&(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast2}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xb, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}], 0x48}}], 0x1, 0x0) 00:10:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x8, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x0, 0x370, 0xffffffff, 0x370, 0x0, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @gre_key}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'macvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@dev, @ipv6=@dev, @gre_key}}}, {{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'team_slave_1\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@dev, @ipv6=@remote, @port, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8e6fc44ef8bc575cef1aaacbcde81d6860771e108363089da9e7fc84fe69"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 00:10:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002d00)=[{{&(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @multicast2}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xb, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}], 0x48}}], 0x1, 0x0) 00:10:45 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000001680)=ANY=[@ANYBLOB='i'], 0x0, 0x0, 0x0) 00:10:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1b) 00:10:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1b) 00:10:49 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000001680)=ANY=[@ANYBLOB='i'], 0x0, 0x0, 0x0) 00:10:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1b) 00:10:53 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000001680)=ANY=[@ANYBLOB='i'], 0x0, 0x0, 0x0) 00:10:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1b) 00:10:57 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000001680)=ANY=[@ANYBLOB='i'], 0x0, 0x0, 0x0) 00:10:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1b) 00:11:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1b) 00:11:02 executing program 0: r0 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 00:11:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1b) 00:11:04 executing program 0: r0 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 00:11:07 executing program 1: r0 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 00:11:08 executing program 0: r0 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 00:11:09 executing program 1: r0 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 00:11:10 executing program 0: r0 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 00:11:12 executing program 1: r0 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 00:11:14 executing program 0: r0 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 00:11:16 executing program 1: r0 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 00:11:16 executing program 0: r0 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 00:11:18 executing program 1: r0 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 00:11:19 executing program 0: r0 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 00:11:21 executing program 1: r0 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 00:11:24 executing program 0: syz_io_uring_setup(0x881, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) 00:11:25 executing program 1: prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000815000/0x3000)=nil) [ 687.609337][ T26] audit: type=1800 audit(686.750:2): pid=2794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=644 res=0 errno=0 [ 687.767721][ T26] audit: type=1800 audit(686.930:3): pid=2794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=644 res=0 errno=0 00:11:27 executing program 1: prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000815000/0x3000)=nil) 00:11:28 executing program 0: syz_io_uring_setup(0x881, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) 00:11:30 executing program 1: prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000815000/0x3000)=nil) [ 692.983465][ T26] audit: type=1800 audit(692.140:4): pid=2800 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=643 res=0 errno=0 [ 693.549399][ T26] audit: type=1800 audit(692.660:5): pid=2798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=643 res=0 errno=0 00:11:35 executing program 1: prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000815000/0x3000)=nil) 00:11:36 executing program 0: syz_io_uring_setup(0x881, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) [ 701.133869][ T26] audit: type=1800 audit(700.290:6): pid=2805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=644 res=0 errno=0 [ 701.955610][ T26] audit: type=1800 audit(701.120:7): pid=2805 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=644 res=0 errno=0 00:11:41 executing program 1: syz_io_uring_setup(0x881, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) 00:11:42 executing program 0: syz_io_uring_setup(0x881, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) [ 704.233578][ T26] audit: type=1800 audit(703.390:8): pid=2807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=640 res=0 errno=0 [ 704.388008][ T26] audit: type=1800 audit(703.550:9): pid=2807 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=640 res=0 errno=0 [ 705.949823][ T26] audit: type=1800 audit(705.110:10): pid=2810 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=645 res=0 errno=0 00:11:45 executing program 1: syz_io_uring_setup(0x881, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) [ 706.365882][ T26] audit: type=1800 audit(705.530:11): pid=2809 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=645 res=0 errno=0 [ 708.603314][ T26] audit: type=1800 audit(707.760:12): pid=2812 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=640 res=0 errno=0 [ 708.988418][ T26] audit: type=1800 audit(708.100:13): pid=2812 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=640 res=0 errno=0 00:11:48 executing program 0: syz_io_uring_setup(0x881, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) 00:11:49 executing program 1: syz_io_uring_setup(0x881, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) [ 710.740663][ T26] audit: type=1800 audit(709.880:14): pid=2814 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=645 res=0 errno=0 [ 710.994319][ T26] audit: type=1800 audit(710.150:15): pid=2814 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=645 res=0 errno=0 00:11:51 executing program 0: syz_io_uring_setup(0x881, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) [ 712.492267][ T26] audit: type=1800 audit(711.650:16): pid=2816 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=640 res=0 errno=0 [ 712.609571][ T26] audit: type=1800 audit(711.770:17): pid=2816 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=640 res=0 errno=0 [ 714.730744][ T26] audit: type=1800 audit(713.890:18): pid=2818 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=636 res=0 errno=0 00:11:53 executing program 1: syz_io_uring_setup(0x881, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) [ 714.986808][ T26] audit: type=1800 audit(714.150:19): pid=2818 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=636 res=0 errno=0 [ 716.009823][ T26] audit: type=1800 audit(715.170:20): pid=2820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 [ 716.137607][ T26] audit: type=1800 audit(715.300:21): pid=2820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 00:11:55 executing program 0: syz_io_uring_setup(0x881, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) 00:11:56 executing program 1: syz_io_uring_setup(0x881, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) [ 718.617351][ T26] audit: type=1800 audit(717.730:22): pid=2822 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=637 res=0 errno=0 [ 718.714812][ T26] audit: type=1800 audit(717.880:23): pid=2822 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=637 res=0 errno=0 [ 720.000509][ T26] audit: type=1800 audit(719.160:24): pid=2824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 [ 720.297719][ T26] audit: type=1800 audit(719.460:25): pid=2824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 00:12:00 executing program 0: syz_io_uring_setup(0x881, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) 00:12:00 executing program 1: syz_io_uring_setup(0x881, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) [ 723.120606][ T26] audit: type=1800 audit(722.280:26): pid=2826 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=640 res=0 errno=0 [ 723.380042][ T26] audit: type=1800 audit(722.520:27): pid=2826 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=640 res=0 errno=0 [ 723.968822][ T26] audit: type=1800 audit(723.130:28): pid=2828 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 [ 724.089070][ T26] audit: type=1800 audit(723.250:29): pid=2828 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 00:12:04 executing program 0: syz_io_uring_setup(0x881, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) [ 727.578859][ T26] audit: type=1800 audit(726.740:30): pid=2830 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=640 res=0 errno=0 [ 727.766596][ T26] audit: type=1800 audit(726.890:31): pid=2830 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=640 res=0 errno=0 00:12:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001440)=@ipv6_delrule={0x1c, 0x21, 0xa03, 0x0, 0x0, {0xa, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) 00:12:08 executing program 0: syz_io_uring_setup(0x881, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000007, 0x13, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) 00:12:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001440)=@ipv6_delrule={0x1c, 0x21, 0xa03, 0x0, 0x0, {0xa, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) [ 731.567713][ T26] audit: type=1800 audit(730.730:32): pid=2834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=636 res=0 errno=0 [ 732.006318][ T26] audit: type=1800 audit(731.160:33): pid=2834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=636 res=0 errno=0 00:12:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001440)=@ipv6_delrule={0x1c, 0x21, 0xa03, 0x0, 0x0, {0xa, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) 00:12:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001440)=@ipv6_delrule={0x1c, 0x21, 0xa03, 0x0, 0x0, {0xa, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) 00:12:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001440)=@ipv6_delrule={0x1c, 0x21, 0xa03, 0x0, 0x0, {0xa, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) 00:12:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001440)=@ipv6_delrule={0x1c, 0x21, 0xa03, 0x0, 0x0, {0xa, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) 00:12:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001440)=@ipv6_delrule={0x1c, 0x21, 0xa03, 0x0, 0x0, {0xa, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) 00:12:20 executing program 1: setrlimit(0x7, &(0x7f0000000040)) socket$can_raw(0x1d, 0x3, 0x1) 00:12:23 executing program 0: r0 = syz_io_uring_setup(0x76ab, &(0x7f0000000280), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:12:24 executing program 1: setrlimit(0x7, &(0x7f0000000040)) socket$can_raw(0x1d, 0x3, 0x1) 00:12:26 executing program 0: r0 = syz_io_uring_setup(0x76ab, &(0x7f0000000280), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:12:28 executing program 1: setrlimit(0x7, &(0x7f0000000040)) socket$can_raw(0x1d, 0x3, 0x1) 00:12:30 executing program 1: setrlimit(0x7, &(0x7f0000000040)) socket$can_raw(0x1d, 0x3, 0x1) 00:12:31 executing program 0: r0 = syz_io_uring_setup(0x76ab, &(0x7f0000000280), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:12:34 executing program 0: r0 = syz_io_uring_setup(0x76ab, &(0x7f0000000280), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:12:35 executing program 1: r0 = syz_io_uring_setup(0x76ab, &(0x7f0000000280), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:12:38 executing program 0: setrlimit(0x7, &(0x7f0000000040)) socket$can_raw(0x1d, 0x3, 0x1) 00:12:39 executing program 1: r0 = syz_io_uring_setup(0x76ab, &(0x7f0000000280), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:12:42 executing program 0: setrlimit(0x7, &(0x7f0000000040)) socket$can_raw(0x1d, 0x3, 0x1) 00:12:44 executing program 1: r0 = syz_io_uring_setup(0x76ab, &(0x7f0000000280), &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:12:45 executing program 0: setrlimit(0x7, &(0x7f0000000040)) socket$can_raw(0x1d, 0x3, 0x1) 00:12:49 executing program 1: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = getpid() ioprio_get$pid(0x1, r1) 00:12:50 executing program 0: fanotify_mark(0xffffffffffffffff, 0x0, 0x75e5a4066890e8b2, 0xffffffffffffffff, 0x0) 00:12:51 executing program 1: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = getpid() ioprio_get$pid(0x1, r1) 00:12:53 executing program 0: fanotify_mark(0xffffffffffffffff, 0x0, 0x75e5a4066890e8b2, 0xffffffffffffffff, 0x0) 00:12:55 executing program 1: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = getpid() ioprio_get$pid(0x1, r1) 00:12:56 executing program 0: fanotify_mark(0xffffffffffffffff, 0x0, 0x75e5a4066890e8b2, 0xffffffffffffffff, 0x0) 00:12:58 executing program 1: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = getpid() ioprio_get$pid(0x1, r1) 00:12:59 executing program 0: fanotify_mark(0xffffffffffffffff, 0x0, 0x75e5a4066890e8b2, 0xffffffffffffffff, 0x0) 00:13:00 executing program 1: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = getpid() ioprio_get$pid(0x1, r1) 00:13:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) 00:13:02 executing program 1: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = getpid() ioprio_get$pid(0x1, r1) 00:13:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) 00:13:05 executing program 1: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = getpid() ioprio_get$pid(0x1, r1) 00:13:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) 00:13:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) 00:13:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) 00:13:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) 00:13:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 00:13:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) [ 798.590054][ T2911] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:13:24 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc05c5340, &(0x7f0000000000)) 00:13:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 807.409518][ T2951] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:13:26 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc05c5340, &(0x7f0000000000)) 00:13:30 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc05c5340, &(0x7f0000000000)) 00:13:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 00:13:34 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc05c5340, &(0x7f0000000000)) [ 817.114459][ T2991] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:13:40 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc05c5340, &(0x7f0000000000)) 00:13:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 00:13:45 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc05c5340, &(0x7f0000000000)) [ 827.708189][ T3032] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:13:49 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc05c5340, &(0x7f0000000000)) 00:13:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 836.305661][ T3071] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:13:58 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex=r2, @private}, 0x10) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, @vifc_lcl_addr, @dev}, 0x10) 00:14:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 00:14:05 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex=r2, @private}, 0x10) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, @vifc_lcl_addr, @dev}, 0x10) [ 847.615703][ T3116] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:14:14 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex=r2, @private}, 0x10) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, @vifc_lcl_addr, @dev}, 0x10) 00:14:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 857.957841][ T3160] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:14:27 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex=r2, @private}, 0x10) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, @vifc_lcl_addr, @dev}, 0x10) 00:14:28 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex=r2, @private}, 0x10) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, @vifc_lcl_addr, @dev}, 0x10) 00:14:36 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex=r2, @private}, 0x10) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, @vifc_lcl_addr, @dev}, 0x10) 00:14:37 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 00:14:39 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 00:14:43 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 00:14:43 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex=r2, @private}, 0x10) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x0, @vifc_lcl_addr, @dev}, 0x10) 00:14:45 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 00:14:49 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 00:14:51 executing program 1: r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100}, 0x0) 00:14:52 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 00:14:53 executing program 1: r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100}, 0x0) 00:14:55 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 00:14:55 executing program 1: r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100}, 0x0) 00:14:58 executing program 1: r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100}, 0x0) 00:14:58 executing program 0: r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100}, 0x0) 00:15:02 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 00:15:03 executing program 0: r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100}, 0x0) 00:15:06 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 00:15:06 executing program 0: r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100}, 0x0) 00:15:10 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 00:15:11 executing program 0: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 00:15:14 executing program 0: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 00:15:14 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 00:15:18 executing program 0: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 00:15:18 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 00:15:22 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 00:15:22 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x44689aa7ff25fab0, 0x0) 00:15:25 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x44689aa7ff25fab0, 0x0) 00:15:26 executing program 1: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 00:15:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x44689aa7ff25fab0, 0x0) 00:15:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r1, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x22}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r4, 0x22}, 0x18) [ 932.192931][ T26] audit: type=1800 audit(931.350:34): pid=3285 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=643 res=0 errno=0 00:15:33 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x44689aa7ff25fab0, 0x0) 00:15:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r1, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x22}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r4, 0x22}, 0x18) [ 938.158166][ T26] audit: type=1800 audit(937.320:35): pid=3289 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=644 res=0 errno=0 00:15:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r1, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x22}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r4, 0x22}, 0x18) 00:15:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r1, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x22}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r4, 0x22}, 0x18) [ 942.675040][ T26] audit: type=1800 audit(941.840:36): pid=3293 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=643 res=0 errno=0 [ 943.260617][ T26] audit: type=1800 audit(942.390:37): pid=3294 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=645 res=0 errno=0 00:15:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r1, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x22}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r4, 0x22}, 0x18) 00:15:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r1, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x22}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r4, 0x22}, 0x18) [ 946.010972][ T26] audit: type=1800 audit(945.160:38): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=643 res=0 errno=0 [ 946.208938][ T26] audit: type=1800 audit(945.360:39): pid=3298 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 00:15:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r1, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x22}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r4, 0x22}, 0x18) 00:15:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r1, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x22}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r4, 0x22}, 0x18) [ 949.656580][ T26] audit: type=1800 audit(948.810:40): pid=3301 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=642 res=0 errno=0 [ 950.170607][ T26] audit: type=1800 audit(949.330:41): pid=3302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 00:15:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r1, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x22}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r4, 0x22}, 0x18) 00:15:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r1, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x22}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r4, 0x22}, 0x18) [ 953.493451][ T26] audit: type=1800 audit(952.650:42): pid=3306 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=644 res=0 errno=0 [ 953.510785][ T26] audit: type=1800 audit(952.670:43): pid=3305 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=645 res=0 errno=0 00:15:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r1, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x22}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r4, 0x22}, 0x18) 00:15:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r1, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x22}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r4, 0x22}, 0x18) [ 956.862268][ T26] audit: type=1800 audit(956.020:44): pid=3309 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=643 res=0 errno=0 [ 957.203589][ T26] audit: type=1800 audit(956.360:45): pid=3310 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=645 res=0 errno=0 00:15:58 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:15:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4c1c2, 0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind(r1, &(0x7f0000000100)=@xdp={0x2c, 0x0, r3, 0x22}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r4, 0x22}, 0x18) [ 961.730507][ T26] audit: type=1800 audit(960.890:46): pid=3314 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=644 res=0 errno=0 00:16:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:16:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:16:05 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:16:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:16:08 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:16:11 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:16:11 executing program 1: setrlimit(0x7, &(0x7f0000000040)) syz_io_uring_setup(0x76a9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000100)) 00:16:14 executing program 1: setrlimit(0x7, &(0x7f0000000040)) syz_io_uring_setup(0x76a9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000100)) 00:16:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000001140)) 00:16:17 executing program 1: setrlimit(0x7, &(0x7f0000000040)) syz_io_uring_setup(0x76a9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000100)) 00:16:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000001140)) 00:16:20 executing program 1: setrlimit(0x7, &(0x7f0000000040)) syz_io_uring_setup(0x76a9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000100)) 00:16:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000001140)) 00:16:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000001140)) 00:16:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000001140)) 00:16:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000001140)) 00:16:27 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x178, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, '\x00', 'veth0_to_bridge\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'vlan0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) [ 990.439232][ T3349] xt_ecn: cannot match TCP bits for non-tcp packets 00:16:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000001140)) 00:16:30 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x178, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, '\x00', 'veth0_to_bridge\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'vlan0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) [ 993.244420][ T3353] xt_ecn: cannot match TCP bits for non-tcp packets 00:16:33 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x178, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, '\x00', 'veth0_to_bridge\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'vlan0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 00:16:33 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x178, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, '\x00', 'veth0_to_bridge\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'vlan0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) [ 995.665965][ T3355] xt_ecn: cannot match TCP bits for non-tcp packets [ 996.223586][ T3357] xt_ecn: cannot match TCP bits for non-tcp packets 00:16:36 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x178, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, '\x00', 'veth0_to_bridge\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'vlan0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 00:16:36 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x178, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, '\x00', 'veth0_to_bridge\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'vlan0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) [ 998.434796][ T3360] xt_ecn: cannot match TCP bits for non-tcp packets [ 998.960679][ T3361] xt_ecn: cannot match TCP bits for non-tcp packets 00:16:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) 00:16:39 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x178, 0xffffffff, 0xffffffff, 0x178, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, '\x00', 'veth0_to_bridge\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth1_to_bridge\x00', 'vlan0\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) [ 1001.634173][ T26] audit: type=1804 audit(1000.760:47): pid=3363 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/85/file1" dev="vda" ino=640 res=1 errno=0 [ 1001.684681][ T3365] xt_ecn: cannot match TCP bits for non-tcp packets [ 1002.026859][ T26] audit: type=1804 audit(1001.190:48): pid=3363 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/85/file1" dev="vda" ino=640 res=1 errno=0 00:16:43 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x4000}, 0x90) 00:16:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) [ 1006.738762][ T26] audit: type=1804 audit(1005.900:49): pid=3369 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/86/file1" dev="vda" ino=644 res=1 errno=0 00:16:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x4000}, 0x90) [ 1007.489212][ T26] audit: type=1804 audit(1006.650:50): pid=3369 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/86/file1" dev="vda" ino=644 res=1 errno=0 00:16:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) 00:16:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x4000}, 0x90) [ 1011.461012][ T26] audit: type=1804 audit(1010.620:51): pid=3374 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/87/file1" dev="vda" ino=640 res=1 errno=0 [ 1012.000275][ T26] audit: type=1804 audit(1011.160:52): pid=3374 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/87/file1" dev="vda" ino=640 res=1 errno=0 00:16:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x4000}, 0x90) 00:16:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) 00:16:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x4000}, 0x90) [ 1016.284421][ T26] audit: type=1804 audit(1015.450:53): pid=3379 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/88/file1" dev="vda" ino=640 res=1 errno=0 [ 1016.597590][ T26] audit: type=1804 audit(1015.760:54): pid=3379 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/88/file1" dev="vda" ino=640 res=1 errno=0 00:16:57 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x4000}, 0x90) 00:16:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) 00:17:00 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x0, 0x4000}, 0x90) [ 1021.399172][ T26] audit: type=1804 audit(1020.530:55): pid=3385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/89/file1" dev="vda" ino=644 res=1 errno=0 [ 1022.084558][ T26] audit: type=1804 audit(1021.240:56): pid=3385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/89/file1" dev="vda" ino=644 res=1 errno=0 00:17:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) 00:17:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) [ 1025.849413][ T26] audit: type=1804 audit(1025.010:57): pid=3390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/90/file1" dev="vda" ino=644 res=1 errno=0 [ 1026.046960][ T26] audit: type=1804 audit(1025.190:58): pid=3391 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/100/file1" dev="vda" ino=645 res=1 errno=0 [ 1026.341030][ T26] audit: type=1804 audit(1025.500:59): pid=3390 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/90/file1" dev="vda" ino=644 res=1 errno=0 [ 1026.546460][ T26] audit: type=1804 audit(1025.710:60): pid=3391 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/100/file1" dev="vda" ino=645 res=1 errno=0 00:17:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) 00:17:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) [ 1029.857455][ T26] audit: type=1804 audit(1029.000:61): pid=3394 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/101/file1" dev="vda" ino=644 res=1 errno=0 [ 1030.358565][ T26] audit: type=1804 audit(1029.520:62): pid=3395 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/91/file1" dev="vda" ino=645 res=1 errno=0 [ 1030.664655][ T26] audit: type=1804 audit(1029.830:63): pid=3396 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/101/file1" dev="vda" ino=644 res=1 errno=0 [ 1030.959535][ T26] audit: type=1804 audit(1030.120:64): pid=3395 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/91/file1" dev="vda" ino=645 res=1 errno=0 00:17:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) 00:17:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) [ 1034.045482][ T26] audit: type=1804 audit(1033.200:65): pid=3398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/102/file1" dev="vda" ino=640 res=1 errno=0 [ 1034.854207][ T26] audit: type=1804 audit(1033.980:66): pid=3398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/102/file1" dev="vda" ino=640 res=1 errno=0 [ 1035.633820][ T26] audit: type=1804 audit(1034.790:67): pid=3400 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/92/file1" dev="vda" ino=645 res=1 errno=0 [ 1036.380539][ T26] audit: type=1804 audit(1035.540:68): pid=3401 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/92/file1" dev="vda" ino=645 res=1 errno=0 00:17:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) 00:17:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) [ 1039.527697][ T26] audit: type=1804 audit(1038.690:69): pid=3403 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/103/file1" dev="vda" ino=640 res=1 errno=0 [ 1040.052759][ T26] audit: type=1804 audit(1039.210:70): pid=3403 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/103/file1" dev="vda" ino=640 res=1 errno=0 [ 1041.775401][ T26] audit: type=1804 audit(1040.940:71): pid=3405 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/93/file1" dev="vda" ino=645 res=1 errno=0 00:17:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) [ 1042.180684][ T26] audit: type=1804 audit(1041.340:72): pid=3405 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/93/file1" dev="vda" ino=645 res=1 errno=0 00:17:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) [ 1044.492795][ T26] audit: type=1804 audit(1043.650:73): pid=3407 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/104/file1" dev="vda" ino=640 res=1 errno=0 [ 1045.320691][ T26] audit: type=1804 audit(1044.480:74): pid=3407 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/104/file1" dev="vda" ino=640 res=1 errno=0 [ 1045.930616][ T26] audit: type=1804 audit(1045.090:75): pid=3409 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/94/file1" dev="vda" ino=645 res=1 errno=0 [ 1046.528282][ T26] audit: type=1804 audit(1045.690:76): pid=3409 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/94/file1" dev="vda" ino=645 res=1 errno=0 00:17:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) [ 1049.852710][ T26] audit: type=1804 audit(1049.010:77): pid=3411 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/105/file1" dev="vda" ino=640 res=1 errno=0 00:17:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) [ 1050.620606][ T26] audit: type=1804 audit(1049.780:78): pid=3411 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/105/file1" dev="vda" ino=640 res=1 errno=0 [ 1051.517662][ T26] audit: type=1804 audit(1050.680:79): pid=3413 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/95/file1" dev="vda" ino=645 res=1 errno=0 [ 1052.140414][ T26] audit: type=1804 audit(1051.300:80): pid=3413 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/95/file1" dev="vda" ino=645 res=1 errno=0 00:17:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) 00:17:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) [ 1056.003713][ T26] audit: type=1804 audit(1055.160:81): pid=3415 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/106/file1" dev="vda" ino=640 res=1 errno=0 [ 1057.353053][ T26] audit: type=1804 audit(1056.480:82): pid=3417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/106/file1" dev="vda" ino=640 res=1 errno=0 [ 1060.096718][ T26] audit: type=1804 audit(1059.260:83): pid=3419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/96/file1" dev="vda" ino=645 res=1 errno=0 00:17:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) [ 1061.143456][ T26] audit: type=1804 audit(1060.220:84): pid=3419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/96/file1" dev="vda" ino=645 res=1 errno=0 00:17:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) [ 1065.497447][ T26] audit: type=1804 audit(1064.650:85): pid=3422 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/107/file1" dev="vda" ino=640 res=1 errno=0 [ 1066.519925][ T26] audit: type=1804 audit(1065.660:86): pid=3422 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/107/file1" dev="vda" ino=640 res=1 errno=0 00:17:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) [ 1068.602815][ T26] audit: type=1804 audit(1067.760:87): pid=3424 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/97/file1" dev="vda" ino=645 res=1 errno=0 [ 1069.135291][ T26] audit: type=1804 audit(1068.290:88): pid=3424 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/97/file1" dev="vda" ino=645 res=1 errno=0 [ 1071.699940][ T26] audit: type=1804 audit(1070.860:89): pid=3427 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/108/file1" dev="vda" ino=640 res=1 errno=0 00:17:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) [ 1072.587045][ T26] audit: type=1804 audit(1071.740:90): pid=3426 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1249163060/syzkaller.2gY3nC/108/file1" dev="vda" ino=640 res=1 errno=0 [ 1074.126638][ T26] audit: type=1804 audit(1073.250:91): pid=3429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/98/file1" dev="vda" ino=645 res=1 errno=0 [ 1074.913886][ T26] audit: type=1804 audit(1074.070:92): pid=3429 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/98/file1" dev="vda" ino=645 res=1 errno=0 00:17:55 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "88"}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000240), 0x4) write(0xffffffffffffffff, 0x0, 0x0) 00:17:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) [ 1078.059054][ T5] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 00:17:59 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "88"}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000240), 0x4) write(0xffffffffffffffff, 0x0, 0x0) [ 1080.969924][ T26] audit: type=1804 audit(1080.130:93): pid=3440 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/99/file1" dev="vda" ino=644 res=1 errno=0 [ 1081.623167][ T26] audit: type=1804 audit(1080.780:94): pid=3440 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/99/file1" dev="vda" ino=644 res=1 errno=0 [ 1082.894691][ T2722] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 00:18:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, 0x100bfaa, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) sendfile(r2, r1, 0x0, 0xb10b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) sendfile(r4, r3, 0x0, 0x2fff2) 00:18:04 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "88"}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000240), 0x4) write(0xffffffffffffffff, 0x0, 0x0) [ 1087.622406][ T26] audit: type=1804 audit(1086.780:95): pid=3452 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/100/file1" dev="vda" ino=643 res=1 errno=0 [ 1087.763912][ T2724] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1088.524580][ T26] audit: type=1804 audit(1087.620:96): pid=3460 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir1675475358/syzkaller.ktvWfy/100/file1" dev="vda" ino=643 res=1 errno=0 00:18:08 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "88"}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000240), 0x4) write(0xffffffffffffffff, 0x0, 0x0) 00:18:12 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "88"}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000240), 0x4) write(0xffffffffffffffff, 0x0, 0x0) 00:18:15 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "88"}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000240), 0x4) write(0xffffffffffffffff, 0x0, 0x0) 00:18:15 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "88"}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000240), 0x4) write(0xffffffffffffffff, 0x0, 0x0) [ 1097.018257][ T2635] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1098.356037][ T828] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 00:18:17 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "88"}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000240), 0x4) write(0xffffffffffffffff, 0x0, 0x0) 00:18:19 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "88"}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000240), 0x4) write(0xffffffffffffffff, 0x0, 0x0) 00:18:20 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "88"}}, 0x119) write$UHID_DESTROY(r0, &(0x7f0000000240), 0x4) write(0xffffffffffffffff, 0x0, 0x0) 00:18:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/139, 0x8b}], 0x1) [ 1103.946405][ T828] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 00:18:25 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/139, 0x8b}], 0x1) 00:18:26 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/139, 0x8b}], 0x1) 00:18:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/139, 0x8b}], 0x1) 00:18:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/139, 0x8b}], 0x1) 00:18:30 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/139, 0x8b}], 0x1) 00:18:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/139, 0x8b}], 0x1) 00:18:33 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/139, 0x8b}], 0x1) 00:18:34 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884113, 0x0) 00:18:36 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/139, 0x8b}], 0x1) 00:18:38 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884113, 0x0) 00:18:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/139, 0x8b}], 0x1) 00:18:42 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884113, 0x0) 00:18:44 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884113, 0x0) 00:18:46 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884113, 0x0) 00:18:47 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884113, 0x0) 00:18:51 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000002100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884113, 0x0) 00:18:52 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 00:18:54 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 00:18:56 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 00:18:58 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 00:18:58 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 00:19:01 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 00:19:01 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 00:19:05 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 00:19:06 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4c8, 0x320, 0x0, 0xffffffff, 0x0, 0x320, 0x4e8, 0x4e8, 0xffffffff, 0x4e8, 0x4e8, 0x5, 0x0, {[{{@uncond, 0x0, 0x200, 0x238, 0x0, {}, [@common=@set={{0x15}}, @common=@inet=@hashlimit2={{0x150}, {'vlan0\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @rand_addr, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @rand_addr, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) 00:19:08 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 00:19:08 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4c8, 0x320, 0x0, 0xffffffff, 0x0, 0x320, 0x4e8, 0x4e8, 0xffffffff, 0x4e8, 0x4e8, 0x5, 0x0, {[{{@uncond, 0x0, 0x200, 0x238, 0x0, {}, [@common=@set={{0x15}}, @common=@inet=@hashlimit2={{0x150}, {'vlan0\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @rand_addr, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @rand_addr, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) 00:19:11 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 00:19:11 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4c8, 0x320, 0x0, 0xffffffff, 0x0, 0x320, 0x4e8, 0x4e8, 0xffffffff, 0x4e8, 0x4e8, 0x5, 0x0, {[{{@uncond, 0x0, 0x200, 0x238, 0x0, {}, [@common=@set={{0x15}}, @common=@inet=@hashlimit2={{0x150}, {'vlan0\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @rand_addr, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @rand_addr, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) 00:19:14 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4c8, 0x320, 0x0, 0xffffffff, 0x0, 0x320, 0x4e8, 0x4e8, 0xffffffff, 0x4e8, 0x4e8, 0x5, 0x0, {[{{@uncond, 0x0, 0x200, 0x238, 0x0, {}, [@common=@set={{0x15}}, @common=@inet=@hashlimit2={{0x150}, {'vlan0\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @rand_addr, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @rand_addr, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) 00:19:15 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4c8, 0x320, 0x0, 0xffffffff, 0x0, 0x320, 0x4e8, 0x4e8, 0xffffffff, 0x4e8, 0x4e8, 0x5, 0x0, {[{{@uncond, 0x0, 0x200, 0x238, 0x0, {}, [@common=@set={{0x15}}, @common=@inet=@hashlimit2={{0x150}, {'vlan0\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @rand_addr, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @rand_addr, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) 00:19:17 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4c8, 0x320, 0x0, 0xffffffff, 0x0, 0x320, 0x4e8, 0x4e8, 0xffffffff, 0x4e8, 0x4e8, 0x5, 0x0, {[{{@uncond, 0x0, 0x200, 0x238, 0x0, {}, [@common=@set={{0x15}}, @common=@inet=@hashlimit2={{0x150}, {'vlan0\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @rand_addr, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @rand_addr, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) 00:19:18 executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x76e, &(0x7f0000000800)="$eJzs3c9rHFUcAPDvzOZX22hSKdWKYMBDBXXTxMZfp7SKQhURFc8N6baUbpuSRDCxh9SjBxEUPKr/RcFLL+JR8FD1Wk8KRao9WFEiM9lkQ7KTrmGzg+7nA7N9b9427/vNJHnzZpZ5AfSssewljTgSEaeTiJHG/iQi+vNSX8T02vvu3r4y++ftK7NJrK6+9WuSvyfbF5v+T+ZAozIUEd+dTOKByvZ+F5aWL8zU67X5Rn188eLl8YWl5afOX5w5VztXuzR5fGri2annnjn+fMdyPXzqydcPf/Dija9W33zlpW+nVpKYjuFG20YeLWLdrbEY2/iebNYXES93rptSVRr5bM4z6SsxIP6VdNMxPBwjUYnmwRuJr78vNTgAYE+sViJWAYAekxj/AaDHrF8HuHv7yuz6Vu4Vie66dSLyG5Xb8++L6fzfofw+6P7fk9h8WyuJiNEO9D8WEdfuvHMj22LL/dRuWLkaEQ+1yj/J8x/N7+Juz78SEcc60P/Ylvp/Kf/pDvTfXv5pB3oCgKbrJ9YGsu3jX7px/hMtxr+hFmPXbpQ9/hef/zXzrxSc/73RZh9ffPTIg0Vtm8//si3rf/1csBtuXY14uK/4/CfLPynI/3SbfVz7+f2Zoray81/9MuJoy/lP8xNtyc6fTxw/e75eO7b22rKPT8ZPfVjUf9n5Z8d/f0H+9zr+l9vs4+9DN08Wtd07//SXgeTtvDTQ2PPezOLi/ETEQPLa9v1T3+wYS/6eyebXyPJ//LGdf/9b5Z/NCVfazP/zV3/7bPf57+TmZJshFMryP7PL4/9xm338NffTUFFb2T//AAAAAAAAAAAAAAAAAAAAAAAAANANaUQMR5JWN8ppWq2ureF9KPan9bmFxSfOzr176Uzka2WPRn+6/qTLkbV6ktUnGs/DX69Pbqk/HREHI+LTwX15vTo7Vz9TdvIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HBgy/r/dwbX1v8HAP7nhsoOAADoup3H/6RrcQAA3WP+DwC9x/gPAL3H+A8Avadw/O/rbhwAQPeY/wMAAAAAAAAAAAAAAAAAAAAAQFcdfPT6j0lErLywL98yA422/lIjA/ZaWnYAQGkqZQcAlMYTvqF3meMDSbPY8pJA4SPCV8wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoHUePWP8felUaEX+UHQRQCqt3Qu+y/j/0LnN8ILlHu/X/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgYjjfkrTaWAt8ONK0Wo24LyJGoz85e75eOxYR90fED4P9g1l9ouygAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDFpaWL8zU67V5BQUFhY1C2X+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoPuai36XHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABlWlhavjBTr9fm97BQdo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfRPAAAA///P7i30") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) 00:19:21 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x4c8, 0x320, 0x0, 0xffffffff, 0x0, 0x320, 0x4e8, 0x4e8, 0xffffffff, 0x4e8, 0x4e8, 0x5, 0x0, {[{{@uncond, 0x0, 0x200, 0x238, 0x0, {}, [@common=@set={{0x15}}, @common=@inet=@hashlimit2={{0x150}, {'vlan0\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @rand_addr, @icmp_id, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @rand_addr, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) [ 1163.277283][ T3567] loop0: detected capacity change from 0 to 2048 [ 1164.440657][ T3567] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1164.976259][ T3567] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 1165.046304][ T3567] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 00:19:24 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x541b, 0x0) 00:19:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x76e, &(0x7f0000000800)="$eJzs3c9rHFUcAPDvzOZX22hSKdWKYMBDBXXTxMZfp7SKQhURFc8N6baUbpuSRDCxh9SjBxEUPKr/RcFLL+JR8FD1Wk8KRao9WFEiM9lkQ7KTrmGzg+7nA7N9b9427/vNJHnzZpZ5AfSssewljTgSEaeTiJHG/iQi+vNSX8T02vvu3r4y++ftK7NJrK6+9WuSvyfbF5v+T+ZAozIUEd+dTOKByvZ+F5aWL8zU67X5Rn188eLl8YWl5afOX5w5VztXuzR5fGri2annnjn+fMdyPXzqydcPf/Dija9W33zlpW+nVpKYjuFG20YeLWLdrbEY2/iebNYXES93rptSVRr5bM4z6SsxIP6VdNMxPBwjUYnmwRuJr78vNTgAYE+sViJWAYAekxj/AaDHrF8HuHv7yuz6Vu4Vie66dSLyG5Xb8++L6fzfofw+6P7fk9h8WyuJiNEO9D8WEdfuvHMj22LL/dRuWLkaEQ+1yj/J8x/N7+Juz78SEcc60P/Ylvp/Kf/pDvTfXv5pB3oCgKbrJ9YGsu3jX7px/hMtxr+hFmPXbpQ9/hef/zXzrxSc/73RZh9ffPTIg0Vtm8//si3rf/1csBtuXY14uK/4/CfLPynI/3SbfVz7+f2Zoray81/9MuJoy/lP8xNtyc6fTxw/e75eO7b22rKPT8ZPfVjUf9n5Z8d/f0H+9zr+l9vs4+9DN08Wtd07//SXgeTtvDTQ2PPezOLi/ETEQPLa9v1T3+wYS/6eyebXyPJ//LGdf/9b5Z/NCVfazP/zV3/7bPf57+TmZJshFMryP7PL4/9xm338NffTUFFb2T//AAAAAAAAAAAAAAAAAAAAAAAAANANaUQMR5JWN8ppWq2ureF9KPan9bmFxSfOzr176Uzka2WPRn+6/qTLkbV6ktUnGs/DX69Pbqk/HREHI+LTwX15vTo7Vz9TdvIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HBgy/r/dwbX1v8HAP7nhsoOAADoup3H/6RrcQAA3WP+DwC9x/gPAL3H+A8Avadw/O/rbhwAQPeY/wMAAAAAAAAAAAAAAAAAAAAAQFcdfPT6j0lErLywL98yA422/lIjA/ZaWnYAQGkqZQcAlMYTvqF3meMDSbPY8pJA4SPCV8wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoHUePWP8felUaEX+UHQRQCqt3Qu+y/j/0LnN8ILlHu/X/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgYjjfkrTaWAt8ONK0Wo24LyJGoz85e75eOxYR90fED4P9g1l9ouygAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDFpaWL8zU67V5BQUFhY1C2X+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoPuai36XHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABlWlhavjBTr9fm97BQdo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfRPAAAA///P7i30") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) 00:19:27 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x541b, 0x0) 00:19:31 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x541b, 0x0) [ 1172.260018][ T3581] loop0: detected capacity change from 0 to 2048 [ 1172.927285][ T3581] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1173.853002][ T3581] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 1173.857250][ T3581] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 00:19:34 executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x76e, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) 00:19:36 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x541b, 0x0) 00:19:41 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x541b, 0x0) [ 1184.370189][ T3593] loop0: detected capacity change from 0 to 2048 [ 1186.195195][ T3593] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. 00:19:45 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x541b, 0x0) [ 1186.758648][ T3593] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 1186.764885][ T3593] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 00:19:47 executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x76e, &(0x7f0000000800)="$eJzs3c9rHFUcAPDvzOZX22hSKdWKYMBDBXXTxMZfp7SKQhURFc8N6baUbpuSRDCxh9SjBxEUPKr/RcFLL+JR8FD1Wk8KRao9WFEiM9lkQ7KTrmGzg+7nA7N9b9427/vNJHnzZpZ5AfSssewljTgSEaeTiJHG/iQi+vNSX8T02vvu3r4y++ftK7NJrK6+9WuSvyfbF5v+T+ZAozIUEd+dTOKByvZ+F5aWL8zU67X5Rn188eLl8YWl5afOX5w5VztXuzR5fGri2annnjn+fMdyPXzqydcPf/Dija9W33zlpW+nVpKYjuFG20YeLWLdrbEY2/iebNYXES93rptSVRr5bM4z6SsxIP6VdNMxPBwjUYnmwRuJr78vNTgAYE+sViJWAYAekxj/AaDHrF8HuHv7yuz6Vu4Vie66dSLyG5Xb8++L6fzfofw+6P7fk9h8WyuJiNEO9D8WEdfuvHMj22LL/dRuWLkaEQ+1yj/J8x/N7+Juz78SEcc60P/Ylvp/Kf/pDvTfXv5pB3oCgKbrJ9YGsu3jX7px/hMtxr+hFmPXbpQ9/hef/zXzrxSc/73RZh9ffPTIg0Vtm8//si3rf/1csBtuXY14uK/4/CfLPynI/3SbfVz7+f2Zoray81/9MuJoy/lP8xNtyc6fTxw/e75eO7b22rKPT8ZPfVjUf9n5Z8d/f0H+9zr+l9vs4+9DN08Wtd07//SXgeTtvDTQ2PPezOLi/ETEQPLa9v1T3+wYS/6eyebXyPJ//LGdf/9b5Z/NCVfazP/zV3/7bPf57+TmZJshFMryP7PL4/9xm338NffTUFFb2T//AAAAAAAAAAAAAAAAAAAAAAAAANANaUQMR5JWN8ppWq2ureF9KPan9bmFxSfOzr176Uzka2WPRn+6/qTLkbV6ktUnGs/DX69Pbqk/HREHI+LTwX15vTo7Vz9TdvIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HBgy/r/dwbX1v8HAP7nhsoOAADoup3H/6RrcQAA3WP+DwC9x/gPAL3H+A8Avadw/O/rbhwAQPeY/wMAAAAAAAAAAAAAAAAAAAAAQFcdfPT6j0lErLywL98yA422/lIjA/ZaWnYAQGkqZQcAlMYTvqF3meMDSbPY8pJA4SPCV8wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoHUePWP8felUaEX+UHQRQCqt3Qu+y/j/0LnN8ILlHu/X/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgYjjfkrTaWAt8ONK0Wo24LyJGoz85e75eOxYR90fED4P9g1l9ouygAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDFpaWL8zU67V5BQUFhY1C2X+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoPuai36XHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABlWlhavjBTr9fm97BQdo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfRPAAAA///P7i30") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) 00:19:48 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x541b, 0x0) [ 1192.710031][ T3607] loop0: detected capacity change from 0 to 2048 [ 1194.006827][ T3607] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. 00:19:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x76e, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) [ 1194.878877][ T3607] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 1194.907849][ T3607] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1197.870560][ T3614] loop1: detected capacity change from 0 to 2048 00:19:57 executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x76e, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) [ 1198.968239][ T3614] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1199.344208][ T3614] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 1199.346183][ T3614] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 00:19:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x76e, &(0x7f0000000800)="$eJzs3c9rHFUcAPDvzOZX22hSKdWKYMBDBXXTxMZfp7SKQhURFc8N6baUbpuSRDCxh9SjBxEUPKr/RcFLL+JR8FD1Wk8KRao9WFEiM9lkQ7KTrmGzg+7nA7N9b9427/vNJHnzZpZ5AfSssewljTgSEaeTiJHG/iQi+vNSX8T02vvu3r4y++ftK7NJrK6+9WuSvyfbF5v+T+ZAozIUEd+dTOKByvZ+F5aWL8zU67X5Rn188eLl8YWl5afOX5w5VztXuzR5fGri2annnjn+fMdyPXzqydcPf/Dija9W33zlpW+nVpKYjuFG20YeLWLdrbEY2/iebNYXES93rptSVRr5bM4z6SsxIP6VdNMxPBwjUYnmwRuJr78vNTgAYE+sViJWAYAekxj/AaDHrF8HuHv7yuz6Vu4Vie66dSLyG5Xb8++L6fzfofw+6P7fk9h8WyuJiNEO9D8WEdfuvHMj22LL/dRuWLkaEQ+1yj/J8x/N7+Juz78SEcc60P/Ylvp/Kf/pDvTfXv5pB3oCgKbrJ9YGsu3jX7px/hMtxr+hFmPXbpQ9/hef/zXzrxSc/73RZh9ffPTIg0Vtm8//si3rf/1csBtuXY14uK/4/CfLPynI/3SbfVz7+f2Zoray81/9MuJoy/lP8xNtyc6fTxw/e75eO7b22rKPT8ZPfVjUf9n5Z8d/f0H+9zr+l9vs4+9DN08Wtd07//SXgeTtvDTQ2PPezOLi/ETEQPLa9v1T3+wYS/6eyebXyPJ//LGdf/9b5Z/NCVfazP/zV3/7bPf57+TmZJshFMryP7PL4/9xm338NffTUFFb2T//AAAAAAAAAAAAAAAAAAAAAAAAANANaUQMR5JWN8ppWq2ureF9KPan9bmFxSfOzr176Uzka2WPRn+6/qTLkbV6ktUnGs/DX69Pbqk/HREHI+LTwX15vTo7Vz9TdvIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HBgy/r/dwbX1v8HAP7nhsoOAADoup3H/6RrcQAA3WP+DwC9x/gPAL3H+A8Avadw/O/rbhwAQPeY/wMAAAAAAAAAAAAAAAAAAAAAQFcdfPT6j0lErLywL98yA422/lIjA/ZaWnYAQGkqZQcAlMYTvqF3meMDSbPY8pJA4SPCV8wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoHUePWP8felUaEX+UHQRQCqt3Qu+y/j/0LnN8ILlHu/X/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgYjjfkrTaWAt8ONK0Wo24LyJGoz85e75eOxYR90fED4P9g1l9ouygAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDFpaWL8zU67V5BQUFhY1C2X+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoPuai36XHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABlWlhavjBTr9fm97BQdo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfRPAAAA///P7i30") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) [ 1202.356023][ T3623] loop0: detected capacity change from 0 to 2048 [ 1203.233086][ T3623] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1203.930745][ T3623] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 1203.944988][ T3623] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 00:20:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x76e, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) [ 1206.976791][ T3631] loop1: detected capacity change from 0 to 2048 [ 1208.068829][ T3631] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1209.197055][ T3631] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 1209.199785][ T3631] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 00:20:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x76e, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) [ 1209.950250][ T3637] loop0: detected capacity change from 0 to 2048 [ 1210.522819][ T3637] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1211.444028][ T3637] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 1211.446354][ T3637] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 00:20:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x76e, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x0) [ 1215.635950][ T3648] loop1: detected capacity change from 0 to 2048 [ 1216.655562][ T3648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1217.029671][ T3652] loop0: detected capacity change from 0 to 2048 [ 1217.406073][ T3648] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 1217.408591][ T3648] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1218.326400][ T3652] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1218.934812][ T3652] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 1218.957565][ T3652] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 00:20:22 executing program 1: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000001140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:20:27 executing program 1: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000001140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:20:28 executing program 0: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000001140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:20:30 executing program 0: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000001140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:20:31 executing program 1: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000001140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:20:34 executing program 1: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000001140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:20:34 executing program 0: r0 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000001140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:20:39 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x10000000, 0x0, 0xff, 0x1}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000000, 0x0, 0x1}, 0x20) 00:20:39 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:20:42 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x10000000, 0x0, 0xff, 0x1}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000000, 0x0, 0x1}, 0x20) 00:20:46 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x10000000, 0x0, 0xff, 0x1}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000000, 0x0, 0x1}, 0x20) 00:20:48 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:20:50 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x10000000, 0x0, 0xff, 0x1}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000000, 0x0, 0x1}, 0x20) 00:20:54 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:20:57 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1259.739956][ T3698] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 [ 1259.746824][ T3698] [ 1259.747524][ T3698] ====================================================== [ 1259.748823][ T3698] WARNING: possible circular locking dependency detected [ 1259.749732][ T3698] 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 Not tainted [ 1259.750736][ T3698] ------------------------------------------------------ [ 1259.752863][ T3698] syz-executor.1/3698 is trying to acquire lock: [ 1259.754734][ T3698] ffffffff84fc0408 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_close+0x28/0x58 [ 1259.757335][ T3698] [ 1259.757335][ T3698] but task is already holding lock: [ 1259.758227][ T3698] ffffaf80101cc350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x52/0x1de [ 1259.761260][ T3698] [ 1259.761260][ T3698] which lock already depends on the new lock. [ 1259.761260][ T3698] [ 1259.763374][ T3698] [ 1259.763374][ T3698] the existing dependency chain (in reverse order) is: [ 1259.765290][ T3698] [ 1259.765290][ T3698] -> #3 (&ndev->req_lock){+.+.}-{3:3}: [ 1259.767176][ T3698] lock_acquire.part.0+0x1d0/0x424 [ 1259.768536][ T3698] lock_acquire+0x54/0x6a [ 1259.769410][ T3698] __mutex_lock+0x114/0xade [ 1259.770350][ T3698] mutex_lock_nested+0x14/0x1c [ 1259.771981][ T3698] nci_start_poll+0x4de/0x6b8 [ 1259.773003][ T3698] nfc_start_poll+0x10c/0x1e8 [ 1259.773939][ T3698] nfc_genl_start_poll+0xfe/0x252 [ 1259.774965][ T3698] genl_family_rcv_msg_doit+0x19a/0x23c [ 1259.775910][ T3698] genl_rcv_msg+0x236/0x3ba [ 1259.776836][ T3698] netlink_rcv_skb+0xf8/0x2be [ 1259.777742][ T3698] genl_rcv+0x36/0x4c [ 1259.778540][ T3698] netlink_unicast+0x40e/0x5fe [ 1259.779460][ T3698] netlink_sendmsg+0x4e0/0x994 [ 1259.780365][ T3698] sock_sendmsg+0xa0/0xc4 [ 1259.781741][ T3698] ____sys_sendmsg+0x46e/0x484 [ 1259.782786][ T3698] ___sys_sendmsg+0x16c/0x1f6 [ 1259.783636][ T3698] __sys_sendmsg+0xba/0x150 [ 1259.784602][ T3698] sys_sendmsg+0x2c/0x3a [ 1259.785600][ T3698] ret_from_syscall+0x0/0x2 [ 1259.786641][ T3698] [ 1259.786641][ T3698] -> #2 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 1259.788097][ T3698] lock_acquire.part.0+0x1d0/0x424 [ 1259.789610][ T3698] lock_acquire+0x54/0x6a [ 1259.790552][ T3698] __mutex_lock+0x114/0xade [ 1259.791982][ T3698] mutex_lock_nested+0x14/0x1c [ 1259.793560][ T3698] nfc_urelease_event_work+0x126/0x218 [ 1259.794717][ T3698] process_one_work+0x654/0xffe [ 1259.795665][ T3698] worker_thread+0x360/0x8fa [ 1259.797218][ T3698] kthread+0x19e/0x1fa [ 1259.798203][ T3698] ret_from_exception+0x0/0x10 [ 1259.798937][ T3698] [ 1259.798937][ T3698] -> #1 (nfc_devlist_mutex){+.+.}-{3:3}: [ 1259.800198][ T3698] lock_acquire.part.0+0x1d0/0x424 [ 1259.801104][ T3698] lock_acquire+0x54/0x6a [ 1259.802256][ T3698] __mutex_lock+0x114/0xade [ 1259.803320][ T3698] mutex_lock_nested+0x14/0x1c [ 1259.804238][ T3698] nfc_register_device+0x44/0x29e [ 1259.805942][ T3698] nci_register_device+0x538/0x612 [ 1259.806944][ T3698] virtual_ncidev_open+0x82/0x12c [ 1259.807894][ T3698] misc_open+0x272/0x2c8 [ 1259.809271][ T3698] chrdev_open+0x1d4/0x478 [ 1259.810323][ T3698] do_dentry_open+0x2a4/0x7d4 [ 1259.811729][ T3698] vfs_open+0x52/0x5e [ 1259.813026][ T3698] path_openat+0x12b6/0x189e [ 1259.813923][ T3698] do_filp_open+0x10e/0x22a [ 1259.814818][ T3698] do_sys_openat2+0x174/0x31e [ 1259.815783][ T3698] sys_openat+0xdc/0x164 [ 1259.816726][ T3698] ret_from_syscall+0x0/0x2 [ 1259.817985][ T3698] [ 1259.817985][ T3698] -> #0 (nci_mutex){+.+.}-{3:3}: [ 1259.819404][ T3698] check_noncircular+0x1de/0x1fe [ 1259.820374][ T3698] __lock_acquire+0x19a4/0x333e [ 1259.821753][ T3698] lock_acquire.part.0+0x1d0/0x424 [ 1259.823341][ T3698] lock_acquire+0x54/0x6a [ 1259.824298][ T3698] __mutex_lock+0x114/0xade [ 1259.825248][ T3698] mutex_lock_nested+0x14/0x1c [ 1259.827082][ T3698] virtual_nci_close+0x28/0x58 [ 1259.828127][ T3698] nci_close_device+0x12e/0x1de [ 1259.829122][ T3698] nci_unregister_device+0x34/0x182 [ 1259.830775][ T3698] virtual_ncidev_close+0x9c/0xbc [ 1259.832358][ T3698] __fput+0x164/0x502 [ 1259.833251][ T3698] ____fput+0x1a/0x24 [ 1259.834331][ T3698] task_work_run+0xdc/0x154 [ 1259.835857][ T3698] do_notify_resume+0x894/0xa56 [ 1259.836844][ T3698] ret_from_exception+0x0/0x10 [ 1259.837834][ T3698] [ 1259.837834][ T3698] other info that might help us debug this: [ 1259.837834][ T3698] [ 1259.839714][ T3698] Chain exists of: [ 1259.839714][ T3698] nci_mutex --> &genl_data->genl_data_mutex --> &ndev->req_lock [ 1259.839714][ T3698] [ 1259.843406][ T3698] Possible unsafe locking scenario: [ 1259.843406][ T3698] [ 1259.844953][ T3698] CPU0 CPU1 [ 1259.846131][ T3698] ---- ---- [ 1259.847418][ T3698] lock(&ndev->req_lock); [ 1259.848291][ T3698] lock(&genl_data->genl_data_mutex); [ 1259.849577][ T3698] lock(&ndev->req_lock); [ 1259.850585][ T3698] lock(nci_mutex); [ 1259.851817][ T3698] [ 1259.851817][ T3698] *** DEADLOCK *** [ 1259.851817][ T3698] [ 1259.853321][ T3698] 1 lock held by syz-executor.1/3698: [ 1259.854312][ T3698] #0: ffffaf80101cc350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_close_device+0x52/0x1de [ 1259.857599][ T3698] [ 1259.857599][ T3698] stack backtrace: [ 1259.859237][ T3698] CPU: 0 PID: 3698 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1259.860588][ T3698] Hardware name: riscv-virtio,qemu (DT) [ 1259.862201][ T3698] Call Trace: [ 1259.863134][ T3698] [] dump_backtrace+0x2e/0x3c [ 1259.864209][ T3698] [] show_stack+0x34/0x40 [ 1259.865163][ T3698] [] dump_stack_lvl+0xe4/0x150 [ 1259.866226][ T3698] [] dump_stack+0x1c/0x24 [ 1259.867256][ T3698] [] print_circular_bug+0x34e/0x3d8 [ 1259.868281][ T3698] [] check_noncircular+0x1de/0x1fe [ 1259.869350][ T3698] [] __lock_acquire+0x19a4/0x333e [ 1259.870477][ T3698] [] lock_acquire.part.0+0x1d0/0x424 [ 1259.873399][ T3698] [] lock_acquire+0x54/0x6a [ 1259.874697][ T3698] [] __mutex_lock+0x114/0xade [ 1259.875762][ T3698] [] mutex_lock_nested+0x14/0x1c [ 1259.876880][ T3698] [] virtual_nci_close+0x28/0x58 [ 1259.877928][ T3698] [] nci_close_device+0x12e/0x1de [ 1259.879528][ T3698] [] nci_unregister_device+0x34/0x182 [ 1259.880626][ T3698] [] virtual_ncidev_close+0x9c/0xbc [ 1259.882495][ T3698] [] __fput+0x164/0x502 [ 1259.884073][ T3698] [] ____fput+0x1a/0x24 [ 1259.885027][ T3698] [] task_work_run+0xdc/0x154 [ 1259.886255][ T3698] [] do_notify_resume+0x894/0xa56 [ 1259.888049][ T3698] [] ret_from_exception+0x0/0x10 00:21:00 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:00 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:02 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:03 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1268.595006][ T3715] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 00:21:07 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:07 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:10 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:11 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:12 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1276.358327][ T3732] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 00:21:15 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:15 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:17 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:18 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) [ 1283.954072][ T3751] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0 00:21:23 executing program 0: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:23 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:26 executing program 1: r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) write$nci(r0, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r0, &(0x7f0000000840)=""/100, 0x64) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 00:21:27 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x10000000, 0x0, 0xff, 0x1}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000000, 0x0, 0x1}, 0x20) VM DIAGNOSIS: 01:01:38 Registers: info registers vcpu 0 pc ffffffff80475986 mhartid 0000000000000000 mstatus 00000000000000a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff80dcc32e sepc ffffffff8011f054 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80dc3394 x2/sp ffffaf802217afc0 x3/gp ffffffff85863ac0 x4/tp ffffaf800bcb0000 x5/t0 ffffffff86bcb657 x6/t1 fffffffef0d796ca x7/t2 0000000000000000 x8/s0 ffffaf802217aff0 x9/s1 ffffffff86e58900 x10/a0 ffffaf800bcb0020 x11/a1 ffff8f800066c000 x12/a2 1ffffffff0dcb129 x13/a3 ffffffff80dc337e x14/a4 0000000000000000 x15/a5 ffffffff86e58948 x16/a6 ffffffff86e589f1 x17/a7 ffffffff86bcb656 x18/s2 ffffaf800bcb0000 x19/s3 000000000000002d x20/s4 ffffffff86e58900 x21/s5 ffffffff80dc333e x22/s6 0000000000000000 x23/s7 ffffffff86bcb68e x24/s8 0000000000000010 x25/s9 ffffffff86e58958 x26/s10 0000000000000010 x27/s11 0000000000000000 x28/t3 000000000000002d x29/t4 fffffffef0d796c8 x30/t5 fffffffef0d796cb x31/t6 ffffffff86bcb657 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff831afd1a mhartid 0000000000000001 mstatus 00000000000001a0 mip 00000000000000a0 mie 000000000000020a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff80119b94 sepc ffffffff80119b94 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff831afd14 x2/sp ffffaf80225c71d0 x3/gp ffffffff85863ac0 x4/tp ffffaf800e23c8c0 x5/t0 0000000000046000 x6/t1 fffffffef0b187a1 x7/t2 00007fffc42861b7 x8/s0 ffffaf80225c71f0 x9/s1 0000000000000000 x10/a0 ffffffff86dfbe30 x11/a1 0000000000000003 x12/a2 1ffffffff0dbf7c6 x13/a3 ffffffff80119e02 x14/a4 0000000000000000 x15/a5 0000000000000120 x16/a6 ffffffff80b09d26 x17/a7 ffffffff858c3d0b x18/s2 ffffffff86dfbe30 x19/s3 ffffaf805a9e7d18 x20/s4 1ffff5f0044b8e40 x21/s5 ffffaf80225c72a0 x22/s6 ffffffff85889780 x23/s7 ffffffff83643480 x24/s8 ffffffff8586fde0 x25/s9 ffffffff86dfbe30 x26/s10 0000000000000120 x27/s11 0000000000010001 x28/t3 fffffffff3f30000 x29/t4 fffffffef0b187a1 x30/t5 fffffffef0b187a2 x31/t6 fffffffff204f201 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000