Warning: Permanently added '[localhost]:4800' (ECDSA) to the list of known hosts. [ 64.767260][ T39] audit: type=1400 audit(1676520345.440:75): avc: denied { execute } for pid=5128 comm="sh" name="syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 64.785238][ T39] audit: type=1400 audit(1676520345.440:76): avc: denied { execute_no_trans } for pid=5128 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2023/02/16 04:05:45 fuzzer started 2023/02/16 04:05:46 dialing manager at localhost:35699 [ 65.677016][ T39] audit: type=1400 audit(1676520346.350:77): avc: denied { mounton } for pid=5138 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.686676][ T5138] cgroup: Unknown subsys name 'net' [ 65.694081][ T39] audit: type=1400 audit(1676520346.360:78): avc: denied { mount } for pid=5138 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.719699][ T39] audit: type=1400 audit(1676520346.400:79): avc: denied { unmount } for pid=5138 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.875851][ T5138] cgroup: Unknown subsys name 'rlimit' [ 66.053495][ T39] audit: type=1400 audit(1676520346.730:80): avc: denied { mounton } for pid=5138 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 2023/02/16 04:05:46 syscalls: 3859 2023/02/16 04:05:46 code coverage: enabled 2023/02/16 04:05:46 comparison tracing: enabled 2023/02/16 04:05:46 extra coverage: enabled 2023/02/16 04:05:46 delay kcov mmap: enabled 2023/02/16 04:05:46 setuid sandbox: enabled 2023/02/16 04:05:46 namespace sandbox: enabled 2023/02/16 04:05:46 Android sandbox: enabled 2023/02/16 04:05:46 fault injection: enabled 2023/02/16 04:05:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2023/02/16 04:05:46 net packet injection: enabled 2023/02/16 04:05:46 net device setup: enabled 2023/02/16 04:05:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/02/16 04:05:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/02/16 04:05:46 NIC VF setup: PCI device 0000:00:11.0 is not available 2023/02/16 04:05:46 USB emulation: enabled 2023/02/16 04:05:46 hci packet injection: enabled 2023/02/16 04:05:46 wifi device emulation: enabled 2023/02/16 04:05:46 802.15.4 emulation: enabled [ 66.073582][ T39] audit: type=1400 audit(1676520346.730:81): avc: denied { mount } for pid=5138 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.103657][ T39] audit: type=1400 audit(1676520346.740:82): avc: denied { setattr } for pid=5138 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 2023/02/16 04:05:46 fetching corpus: 0, signal 0/2000 (executing program) [ 66.124860][ T39] audit: type=1400 audit(1676520346.740:83): avc: denied { create } for pid=5138 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.142812][ T39] audit: type=1400 audit(1676520346.740:84): avc: denied { write } for pid=5138 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2023/02/16 04:05:47 fetching corpus: 50, signal 49972/53658 (executing program) 2023/02/16 04:05:47 fetching corpus: 100, signal 65252/70627 (executing program) 2023/02/16 04:05:47 fetching corpus: 150, signal 76873/83862 (executing program) 2023/02/16 04:05:47 fetching corpus: 200, signal 84947/93514 (executing program) 2023/02/16 04:05:48 fetching corpus: 250, signal 96300/106360 (executing program) 2023/02/16 04:05:48 fetching corpus: 300, signal 103114/114727 (executing program) 2023/02/16 04:05:48 fetching corpus: 350, signal 109547/122651 (executing program) 2023/02/16 04:05:48 fetching corpus: 400, signal 116852/131332 (executing program) 2023/02/16 04:05:49 fetching corpus: 450, signal 123209/139105 (executing program) 2023/02/16 04:05:49 fetching corpus: 500, signal 129091/146371 (executing program) 2023/02/16 04:05:49 fetching corpus: 550, signal 134064/152706 (executing program) 2023/02/16 04:05:49 fetching corpus: 600, signal 138424/158450 (executing program) 2023/02/16 04:05:49 fetching corpus: 650, signal 142978/164366 (executing program) 2023/02/16 04:05:50 fetching corpus: 700, signal 148670/171324 (executing program) 2023/02/16 04:05:50 fetching corpus: 750, signal 153182/177084 (executing program) 2023/02/16 04:05:50 fetching corpus: 800, signal 156997/182194 (executing program) 2023/02/16 04:05:51 fetching corpus: 850, signal 160886/187362 (executing program) 2023/02/16 04:05:51 fetching corpus: 900, signal 166059/193711 (executing program) 2023/02/16 04:05:51 fetching corpus: 950, signal 170526/199360 (executing program) 2023/02/16 04:05:52 fetching corpus: 1000, signal 174051/204044 (executing program) 2023/02/16 04:05:52 fetching corpus: 1050, signal 178451/209552 (executing program) 2023/02/16 04:05:52 fetching corpus: 1100, signal 181869/214083 (executing program) 2023/02/16 04:05:52 fetching corpus: 1150, signal 185320/218659 (executing program) 2023/02/16 04:05:53 fetching corpus: 1200, signal 188309/222777 (executing program) 2023/02/16 04:05:53 fetching corpus: 1250, signal 192164/227703 (executing program) 2023/02/16 04:05:53 fetching corpus: 1300, signal 194570/231255 (executing program) 2023/02/16 04:05:53 fetching corpus: 1350, signal 199572/237141 (executing program) 2023/02/16 04:05:53 fetching corpus: 1400, signal 202554/241223 (executing program) 2023/02/16 04:05:54 fetching corpus: 1450, signal 204961/244709 (executing program) 2023/02/16 04:05:54 fetching corpus: 1500, signal 207933/248693 (executing program) 2023/02/16 04:05:54 fetching corpus: 1550, signal 210818/252620 (executing program) 2023/02/16 04:05:54 fetching corpus: 1600, signal 214178/256903 (executing program) 2023/02/16 04:05:55 fetching corpus: 1650, signal 216230/260056 (executing program) 2023/02/16 04:05:55 fetching corpus: 1700, signal 218489/263329 (executing program) 2023/02/16 04:05:55 fetching corpus: 1750, signal 221531/267306 (executing program) 2023/02/16 04:05:55 fetching corpus: 1800, signal 225689/272265 (executing program) 2023/02/16 04:05:56 fetching corpus: 1850, signal 228461/275951 (executing program) 2023/02/16 04:05:56 fetching corpus: 1900, signal 230747/279250 (executing program) 2023/02/16 04:05:56 fetching corpus: 1950, signal 234768/283948 (executing program) 2023/02/16 04:05:56 fetching corpus: 2000, signal 238556/288464 (executing program) 2023/02/16 04:05:57 fetching corpus: 2050, signal 240215/291118 (executing program) 2023/02/16 04:05:57 fetching corpus: 2100, signal 242294/294119 (executing program) 2023/02/16 04:05:57 fetching corpus: 2150, signal 245131/297775 (executing program) 2023/02/16 04:05:57 fetching corpus: 2200, signal 246916/300490 (executing program) 2023/02/16 04:05:58 fetching corpus: 2250, signal 248680/303184 (executing program) [ 77.511397][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.516682][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 2023/02/16 04:05:58 fetching corpus: 2300, signal 251074/306419 (executing program) 2023/02/16 04:05:58 fetching corpus: 2350, signal 253053/309260 (executing program) 2023/02/16 04:05:58 fetching corpus: 2400, signal 255251/312311 (executing program) 2023/02/16 04:05:58 fetching corpus: 2450, signal 257481/315342 (executing program) 2023/02/16 04:05:59 fetching corpus: 2500, signal 259026/317838 (executing program) 2023/02/16 04:05:59 fetching corpus: 2550, signal 260722/320415 (executing program) 2023/02/16 04:05:59 fetching corpus: 2600, signal 262753/323278 (executing program) 2023/02/16 04:05:59 fetching corpus: 2650, signal 270816/331048 (executing program) 2023/02/16 04:06:00 fetching corpus: 2700, signal 273115/334059 (executing program) 2023/02/16 04:06:00 fetching corpus: 2750, signal 275706/337300 (executing program) 2023/02/16 04:06:00 fetching corpus: 2800, signal 277688/340031 (executing program) 2023/02/16 04:06:00 fetching corpus: 2850, signal 280165/343141 (executing program) 2023/02/16 04:06:01 fetching corpus: 2900, signal 282358/346006 (executing program) 2023/02/16 04:06:01 fetching corpus: 2950, signal 283425/347930 (executing program) 2023/02/16 04:06:01 fetching corpus: 3000, signal 284988/350221 (executing program) 2023/02/16 04:06:01 fetching corpus: 3050, signal 286835/352750 (executing program) 2023/02/16 04:06:02 fetching corpus: 3100, signal 288188/354948 (executing program) 2023/02/16 04:06:02 fetching corpus: 3150, signal 290519/357836 (executing program) 2023/02/16 04:06:02 fetching corpus: 3200, signal 293116/360955 (executing program) 2023/02/16 04:06:02 fetching corpus: 3250, signal 295914/364143 (executing program) 2023/02/16 04:06:02 fetching corpus: 3300, signal 297311/366256 (executing program) 2023/02/16 04:06:03 fetching corpus: 3350, signal 298958/368586 (executing program) 2023/02/16 04:06:03 fetching corpus: 3400, signal 300566/370886 (executing program) 2023/02/16 04:06:03 fetching corpus: 3450, signal 301737/372803 (executing program) 2023/02/16 04:06:03 fetching corpus: 3500, signal 302672/374535 (executing program) 2023/02/16 04:06:04 fetching corpus: 3550, signal 303556/376228 (executing program) 2023/02/16 04:06:04 fetching corpus: 3600, signal 305453/378689 (executing program) 2023/02/16 04:06:04 fetching corpus: 3650, signal 307133/380962 (executing program) 2023/02/16 04:06:04 fetching corpus: 3700, signal 308410/382983 (executing program) 2023/02/16 04:06:05 fetching corpus: 3750, signal 309919/385102 (executing program) 2023/02/16 04:06:05 fetching corpus: 3800, signal 311027/386900 (executing program) 2023/02/16 04:06:05 fetching corpus: 3850, signal 313107/389381 (executing program) 2023/02/16 04:06:05 fetching corpus: 3900, signal 314285/391197 (executing program) 2023/02/16 04:06:05 fetching corpus: 3950, signal 315108/392768 (executing program) 2023/02/16 04:06:06 fetching corpus: 4000, signal 316712/394861 (executing program) 2023/02/16 04:06:06 fetching corpus: 4050, signal 317820/396612 (executing program) 2023/02/16 04:06:06 fetching corpus: 4100, signal 318693/398230 (executing program) 2023/02/16 04:06:06 fetching corpus: 4150, signal 319794/399991 (executing program) 2023/02/16 04:06:07 fetching corpus: 4200, signal 321636/402277 (executing program) 2023/02/16 04:06:07 fetching corpus: 4250, signal 322445/403825 (executing program) 2023/02/16 04:06:07 fetching corpus: 4300, signal 324150/405962 (executing program) 2023/02/16 04:06:07 fetching corpus: 4350, signal 325874/408146 (executing program) 2023/02/16 04:06:07 fetching corpus: 4400, signal 327430/410211 (executing program) 2023/02/16 04:06:07 fetching corpus: 4450, signal 328487/411810 (executing program) 2023/02/16 04:06:08 fetching corpus: 4500, signal 329877/413745 (executing program) 2023/02/16 04:06:08 fetching corpus: 4550, signal 331477/415781 (executing program) 2023/02/16 04:06:08 fetching corpus: 4600, signal 332547/417442 (executing program) 2023/02/16 04:06:09 fetching corpus: 4650, signal 334203/419474 (executing program) 2023/02/16 04:06:09 fetching corpus: 4700, signal 335462/421243 (executing program) 2023/02/16 04:06:09 fetching corpus: 4750, signal 337298/423359 (executing program) 2023/02/16 04:06:09 fetching corpus: 4800, signal 339533/425730 (executing program) 2023/02/16 04:06:10 fetching corpus: 4850, signal 340786/427466 (executing program) 2023/02/16 04:06:10 fetching corpus: 4900, signal 341874/429070 (executing program) 2023/02/16 04:06:11 fetching corpus: 4950, signal 343328/430942 (executing program) 2023/02/16 04:06:11 fetching corpus: 5000, signal 344081/432329 (executing program) 2023/02/16 04:06:11 fetching corpus: 5050, signal 344880/433726 (executing program) 2023/02/16 04:06:11 fetching corpus: 5100, signal 346106/435345 (executing program) 2023/02/16 04:06:11 fetching corpus: 5150, signal 347341/436981 (executing program) 2023/02/16 04:06:12 fetching corpus: 5200, signal 348184/438418 (executing program) 2023/02/16 04:06:12 fetching corpus: 5250, signal 350829/441004 (executing program) 2023/02/16 04:06:12 fetching corpus: 5300, signal 351758/442449 (executing program) 2023/02/16 04:06:12 fetching corpus: 5350, signal 352287/443648 (executing program) 2023/02/16 04:06:12 fetching corpus: 5400, signal 353084/445019 (executing program) 2023/02/16 04:06:13 fetching corpus: 5450, signal 354287/446599 (executing program) 2023/02/16 04:06:13 fetching corpus: 5500, signal 355298/448094 (executing program) [ 92.874671][ T51] cfg80211: failed to load regulatory.db 2023/02/16 04:06:13 fetching corpus: 5550, signal 356225/449509 (executing program) 2023/02/16 04:06:13 fetching corpus: 5600, signal 357092/450850 (executing program) 2023/02/16 04:06:14 fetching corpus: 5650, signal 359160/452953 (executing program) 2023/02/16 04:06:14 fetching corpus: 5700, signal 360050/454304 (executing program) 2023/02/16 04:06:14 fetching corpus: 5750, signal 360843/455618 (executing program) 2023/02/16 04:06:14 fetching corpus: 5800, signal 362016/457122 (executing program) 2023/02/16 04:06:14 fetching corpus: 5850, signal 363008/458544 (executing program) 2023/02/16 04:06:15 fetching corpus: 5900, signal 363747/459797 (executing program) 2023/02/16 04:06:15 fetching corpus: 5950, signal 365434/461633 (executing program) 2023/02/16 04:06:15 fetching corpus: 6000, signal 366103/462843 (executing program) 2023/02/16 04:06:15 fetching corpus: 6050, signal 367184/464291 (executing program) 2023/02/16 04:06:16 fetching corpus: 6100, signal 368238/465716 (executing program) 2023/02/16 04:06:16 fetching corpus: 6150, signal 369521/467247 (executing program) 2023/02/16 04:06:16 fetching corpus: 6200, signal 370268/468466 (executing program) 2023/02/16 04:06:17 fetching corpus: 6250, signal 371052/469737 (executing program) 2023/02/16 04:06:17 fetching corpus: 6300, signal 371921/471047 (executing program) 2023/02/16 04:06:17 fetching corpus: 6350, signal 373189/472608 (executing program) 2023/02/16 04:06:17 fetching corpus: 6400, signal 374276/474045 (executing program) 2023/02/16 04:06:17 fetching corpus: 6450, signal 375120/475329 (executing program) 2023/02/16 04:06:18 fetching corpus: 6500, signal 376055/476593 (executing program) 2023/02/16 04:06:18 fetching corpus: 6550, signal 376807/477750 (executing program) 2023/02/16 04:06:18 fetching corpus: 6600, signal 377603/478904 (executing program) 2023/02/16 04:06:18 fetching corpus: 6650, signal 378600/480194 (executing program) 2023/02/16 04:06:19 fetching corpus: 6700, signal 379261/481330 (executing program) 2023/02/16 04:06:19 fetching corpus: 6750, signal 379896/482461 (executing program) 2023/02/16 04:06:19 fetching corpus: 6800, signal 380767/483685 (executing program) 2023/02/16 04:06:19 fetching corpus: 6850, signal 381509/484828 (executing program) 2023/02/16 04:06:19 fetching corpus: 6900, signal 382315/485992 (executing program) 2023/02/16 04:06:20 fetching corpus: 6950, signal 383363/487295 (executing program) 2023/02/16 04:06:20 fetching corpus: 7000, signal 384006/488457 (executing program) 2023/02/16 04:06:20 fetching corpus: 7050, signal 384752/489571 (executing program) 2023/02/16 04:06:21 fetching corpus: 7100, signal 385752/490846 (executing program) 2023/02/16 04:06:21 fetching corpus: 7150, signal 386804/492086 (executing program) 2023/02/16 04:06:21 fetching corpus: 7200, signal 387385/493128 (executing program) 2023/02/16 04:06:21 fetching corpus: 7250, signal 388167/494242 (executing program) 2023/02/16 04:06:21 fetching corpus: 7300, signal 389035/495397 (executing program) 2023/02/16 04:06:22 fetching corpus: 7350, signal 389721/496393 (executing program) 2023/02/16 04:06:22 fetching corpus: 7400, signal 390923/497663 (executing program) 2023/02/16 04:06:22 fetching corpus: 7450, signal 392006/498919 (executing program) 2023/02/16 04:06:23 fetching corpus: 7500, signal 392898/500050 (executing program) 2023/02/16 04:06:23 fetching corpus: 7550, signal 393695/501161 (executing program) 2023/02/16 04:06:23 fetching corpus: 7600, signal 394517/502321 (executing program) 2023/02/16 04:06:23 fetching corpus: 7650, signal 395232/503399 (executing program) 2023/02/16 04:06:24 fetching corpus: 7700, signal 395925/504405 (executing program) 2023/02/16 04:06:24 fetching corpus: 7750, signal 396952/505579 (executing program) 2023/02/16 04:06:24 fetching corpus: 7800, signal 397854/506680 (executing program) 2023/02/16 04:06:25 fetching corpus: 7850, signal 398819/507858 (executing program) 2023/02/16 04:06:25 fetching corpus: 7900, signal 400409/509316 (executing program) 2023/02/16 04:06:25 fetching corpus: 7950, signal 401014/510260 (executing program) 2023/02/16 04:06:25 fetching corpus: 8000, signal 401566/511201 (executing program) 2023/02/16 04:06:26 fetching corpus: 8050, signal 402379/512266 (executing program) 2023/02/16 04:06:26 fetching corpus: 8100, signal 403425/513365 (executing program) 2023/02/16 04:06:26 fetching corpus: 8150, signal 404089/514344 (executing program) 2023/02/16 04:06:26 fetching corpus: 8200, signal 404664/515266 (executing program) 2023/02/16 04:06:27 fetching corpus: 8250, signal 405226/516227 (executing program) 2023/02/16 04:06:27 fetching corpus: 8300, signal 405772/517113 (executing program) 2023/02/16 04:06:27 fetching corpus: 8350, signal 406305/518005 (executing program) 2023/02/16 04:06:27 fetching corpus: 8400, signal 406918/518979 (executing program) 2023/02/16 04:06:27 fetching corpus: 8450, signal 407948/520124 (executing program) 2023/02/16 04:06:28 fetching corpus: 8500, signal 408755/521114 (executing program) 2023/02/16 04:06:28 fetching corpus: 8550, signal 409639/522155 (executing program) 2023/02/16 04:06:28 fetching corpus: 8600, signal 410265/523136 (executing program) 2023/02/16 04:06:29 fetching corpus: 8650, signal 411155/524139 (executing program) 2023/02/16 04:06:29 fetching corpus: 8700, signal 411760/525040 (executing program) 2023/02/16 04:06:29 fetching corpus: 8750, signal 412603/526057 (executing program) 2023/02/16 04:06:29 fetching corpus: 8800, signal 413544/527110 (executing program) 2023/02/16 04:06:29 fetching corpus: 8850, signal 414090/527980 (executing program) 2023/02/16 04:06:30 fetching corpus: 8900, signal 415158/529105 (executing program) 2023/02/16 04:06:30 fetching corpus: 8950, signal 415886/530056 (executing program) 2023/02/16 04:06:30 fetching corpus: 9000, signal 416435/530962 (executing program) 2023/02/16 04:06:31 fetching corpus: 9050, signal 417139/531858 (executing program) 2023/02/16 04:06:31 fetching corpus: 9100, signal 417846/532760 (executing program) 2023/02/16 04:06:31 fetching corpus: 9150, signal 418575/533679 (executing program) 2023/02/16 04:06:31 fetching corpus: 9200, signal 419234/534582 (executing program) 2023/02/16 04:06:31 fetching corpus: 9250, signal 419956/535470 (executing program) 2023/02/16 04:06:31 fetching corpus: 9300, signal 420618/536328 (executing program) 2023/02/16 04:06:32 fetching corpus: 9350, signal 421330/537196 (executing program) 2023/02/16 04:06:32 fetching corpus: 9400, signal 421958/538050 (executing program) 2023/02/16 04:06:32 fetching corpus: 9450, signal 422633/538900 (executing program) 2023/02/16 04:06:32 fetching corpus: 9500, signal 423227/539724 (executing program) 2023/02/16 04:06:33 fetching corpus: 9550, signal 423960/540595 (executing program) 2023/02/16 04:06:33 fetching corpus: 9600, signal 424511/541355 (executing program) 2023/02/16 04:06:33 fetching corpus: 9650, signal 425065/542173 (executing program) 2023/02/16 04:06:33 fetching corpus: 9700, signal 425644/542993 (executing program) 2023/02/16 04:06:34 fetching corpus: 9750, signal 426316/543799 (executing program) 2023/02/16 04:06:34 fetching corpus: 9800, signal 426918/544596 (executing program) 2023/02/16 04:06:34 fetching corpus: 9850, signal 427523/545380 (executing program) 2023/02/16 04:06:35 fetching corpus: 9900, signal 428114/546212 (executing program) 2023/02/16 04:06:35 fetching corpus: 9950, signal 429003/547112 (executing program) 2023/02/16 04:06:35 fetching corpus: 10000, signal 429849/547968 (executing program) 2023/02/16 04:06:35 fetching corpus: 10050, signal 430344/548692 (executing program) 2023/02/16 04:06:35 fetching corpus: 10100, signal 430854/549422 (executing program) 2023/02/16 04:06:36 fetching corpus: 10150, signal 431638/550291 (executing program) 2023/02/16 04:06:36 fetching corpus: 10200, signal 432550/551177 (executing program) 2023/02/16 04:06:36 fetching corpus: 10250, signal 433158/551956 (executing program) 2023/02/16 04:06:36 fetching corpus: 10300, signal 433826/552753 (executing program) 2023/02/16 04:06:37 fetching corpus: 10350, signal 434394/553525 (executing program) 2023/02/16 04:06:37 fetching corpus: 10400, signal 435136/554316 (executing program) 2023/02/16 04:06:37 fetching corpus: 10450, signal 436016/555183 (executing program) 2023/02/16 04:06:37 fetching corpus: 10500, signal 436930/556013 (executing program) 2023/02/16 04:06:38 fetching corpus: 10550, signal 437747/556850 (executing program) 2023/02/16 04:06:38 fetching corpus: 10600, signal 438171/557593 (executing program) 2023/02/16 04:06:38 fetching corpus: 10650, signal 438788/558311 (executing program) 2023/02/16 04:06:38 fetching corpus: 10700, signal 439409/559074 (executing program) 2023/02/16 04:06:38 fetching corpus: 10750, signal 440049/559834 (executing program) 2023/02/16 04:06:39 fetching corpus: 10800, signal 440530/560537 (executing program) 2023/02/16 04:06:39 fetching corpus: 10850, signal 441449/561322 (executing program) 2023/02/16 04:06:39 fetching corpus: 10900, signal 442156/562086 (executing program) 2023/02/16 04:06:39 fetching corpus: 10950, signal 443079/562901 (executing program) 2023/02/16 04:06:40 fetching corpus: 11000, signal 443668/563621 (executing program) 2023/02/16 04:06:40 fetching corpus: 11050, signal 444230/564287 (executing program) 2023/02/16 04:06:40 fetching corpus: 11100, signal 444989/565059 (executing program) 2023/02/16 04:06:41 fetching corpus: 11150, signal 445432/565719 (executing program) 2023/02/16 04:06:41 fetching corpus: 11200, signal 446081/566363 (executing program) 2023/02/16 04:06:41 fetching corpus: 11250, signal 446523/567044 (executing program) 2023/02/16 04:06:41 fetching corpus: 11300, signal 447353/567776 (executing program) 2023/02/16 04:06:42 fetching corpus: 11350, signal 447840/568454 (executing program) 2023/02/16 04:06:42 fetching corpus: 11400, signal 448460/569123 (executing program) 2023/02/16 04:06:42 fetching corpus: 11450, signal 449008/569765 (executing program) 2023/02/16 04:06:42 fetching corpus: 11500, signal 450503/570658 (executing program) 2023/02/16 04:06:43 fetching corpus: 11550, signal 451009/571311 (executing program) 2023/02/16 04:06:43 fetching corpus: 11600, signal 451491/571932 (executing program) 2023/02/16 04:06:43 fetching corpus: 11650, signal 452138/572637 (executing program) 2023/02/16 04:06:43 fetching corpus: 11700, signal 452505/573193 (executing program) 2023/02/16 04:06:44 fetching corpus: 11750, signal 452952/573830 (executing program) 2023/02/16 04:06:44 fetching corpus: 11800, signal 453688/574514 (executing program) 2023/02/16 04:06:44 fetching corpus: 11850, signal 454427/575204 (executing program) 2023/02/16 04:06:44 fetching corpus: 11900, signal 454897/575783 (executing program) 2023/02/16 04:06:44 fetching corpus: 11950, signal 455418/576410 (executing program) 2023/02/16 04:06:45 fetching corpus: 12000, signal 455749/577027 (executing program) 2023/02/16 04:06:45 fetching corpus: 12050, signal 456355/577677 (executing program) 2023/02/16 04:06:45 fetching corpus: 12100, signal 456886/578282 (executing program) 2023/02/16 04:06:45 fetching corpus: 12150, signal 457410/578857 (executing program) 2023/02/16 04:06:46 fetching corpus: 12200, signal 457926/579460 (executing program) 2023/02/16 04:06:46 fetching corpus: 12250, signal 458470/580076 (executing program) 2023/02/16 04:06:46 fetching corpus: 12300, signal 459355/580720 (executing program) 2023/02/16 04:06:46 fetching corpus: 12350, signal 459750/581225 (executing program) 2023/02/16 04:06:46 fetching corpus: 12400, signal 460314/581833 (executing program) 2023/02/16 04:06:47 fetching corpus: 12450, signal 460831/582379 (executing program) 2023/02/16 04:06:47 fetching corpus: 12500, signal 461479/582984 (executing program) 2023/02/16 04:06:47 fetching corpus: 12550, signal 462394/583609 (executing program) 2023/02/16 04:06:48 fetching corpus: 12600, signal 463105/584225 (executing program) 2023/02/16 04:06:48 fetching corpus: 12650, signal 463383/584735 (executing program) 2023/02/16 04:06:48 fetching corpus: 12700, signal 463794/585282 (executing program) 2023/02/16 04:06:48 fetching corpus: 12750, signal 464555/585907 (executing program) 2023/02/16 04:06:49 fetching corpus: 12800, signal 464995/586434 (executing program) 2023/02/16 04:06:49 fetching corpus: 12850, signal 465832/587061 (executing program) 2023/02/16 04:06:49 fetching corpus: 12900, signal 466973/587692 (executing program) 2023/02/16 04:06:49 fetching corpus: 12950, signal 467586/588221 (executing program) 2023/02/16 04:06:49 fetching corpus: 13000, signal 468005/588751 (executing program) 2023/02/16 04:06:49 fetching corpus: 13050, signal 468374/589272 (executing program) 2023/02/16 04:06:50 fetching corpus: 13100, signal 469337/589902 (executing program) 2023/02/16 04:06:50 fetching corpus: 13150, signal 469728/590436 (executing program) 2023/02/16 04:06:50 fetching corpus: 13200, signal 470269/590999 (executing program) 2023/02/16 04:06:50 fetching corpus: 13250, signal 470648/591497 (executing program) 2023/02/16 04:06:51 fetching corpus: 13300, signal 471276/592010 (executing program) 2023/02/16 04:06:51 fetching corpus: 13350, signal 471643/592543 (executing program) 2023/02/16 04:06:51 fetching corpus: 13400, signal 472267/593059 (executing program) 2023/02/16 04:06:51 fetching corpus: 13450, signal 472895/593577 (executing program) 2023/02/16 04:06:51 fetching corpus: 13500, signal 473585/594128 (executing program) 2023/02/16 04:06:52 fetching corpus: 13550, signal 474223/594666 (executing program) 2023/02/16 04:06:52 fetching corpus: 13600, signal 474731/595214 (executing program) 2023/02/16 04:06:52 fetching corpus: 13650, signal 475240/595703 (executing program) 2023/02/16 04:06:52 fetching corpus: 13700, signal 475695/596190 (executing program) 2023/02/16 04:06:53 fetching corpus: 13750, signal 476140/596657 (executing program) 2023/02/16 04:06:53 fetching corpus: 13800, signal 476607/597116 (executing program) 2023/02/16 04:06:53 fetching corpus: 13850, signal 477406/597619 (executing program) 2023/02/16 04:06:53 fetching corpus: 13900, signal 477776/598054 (executing program) 2023/02/16 04:06:53 fetching corpus: 13950, signal 478274/598496 (executing program) 2023/02/16 04:06:54 fetching corpus: 14000, signal 478658/598935 (executing program) 2023/02/16 04:06:54 fetching corpus: 14050, signal 479149/599405 (executing program) 2023/02/16 04:06:54 fetching corpus: 14100, signal 479649/599864 (executing program) 2023/02/16 04:06:54 fetching corpus: 14150, signal 480347/600337 (executing program) 2023/02/16 04:06:55 fetching corpus: 14200, signal 480763/600804 (executing program) 2023/02/16 04:06:55 fetching corpus: 14250, signal 481578/601263 (executing program) 2023/02/16 04:06:55 fetching corpus: 14300, signal 482174/601697 (executing program) 2023/02/16 04:06:55 fetching corpus: 14350, signal 482704/602113 (executing program) 2023/02/16 04:06:55 fetching corpus: 14400, signal 483402/602517 (executing program) 2023/02/16 04:06:56 fetching corpus: 14450, signal 484014/602944 (executing program) 2023/02/16 04:06:56 fetching corpus: 14500, signal 484618/603381 (executing program) 2023/02/16 04:06:56 fetching corpus: 14550, signal 485106/603775 (executing program) 2023/02/16 04:06:56 fetching corpus: 14600, signal 485799/604235 (executing program) 2023/02/16 04:06:57 fetching corpus: 14650, signal 486429/604655 (executing program) 2023/02/16 04:06:57 fetching corpus: 14700, signal 486915/605072 (executing program) 2023/02/16 04:06:57 fetching corpus: 14750, signal 487646/605513 (executing program) 2023/02/16 04:06:57 fetching corpus: 14800, signal 488420/605937 (executing program) 2023/02/16 04:06:57 fetching corpus: 14850, signal 488985/606319 (executing program) 2023/02/16 04:06:58 fetching corpus: 14900, signal 489252/606716 (executing program) 2023/02/16 04:06:58 fetching corpus: 14950, signal 490037/607126 (executing program) 2023/02/16 04:06:58 fetching corpus: 15000, signal 490389/607522 (executing program) 2023/02/16 04:06:58 fetching corpus: 15050, signal 490682/607940 (executing program) 2023/02/16 04:06:59 fetching corpus: 15100, signal 491161/608343 (executing program) 2023/02/16 04:06:59 fetching corpus: 15150, signal 491606/608780 (executing program) 2023/02/16 04:06:59 fetching corpus: 15200, signal 492021/608924 (executing program) 2023/02/16 04:06:59 fetching corpus: 15250, signal 492828/608924 (executing program) [ 138.950476][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.955079][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 2023/02/16 04:06:59 fetching corpus: 15300, signal 493182/608924 (executing program) 2023/02/16 04:07:00 fetching corpus: 15350, signal 493662/608925 (executing program) 2023/02/16 04:07:00 fetching corpus: 15400, signal 494198/608925 (executing program) 2023/02/16 04:07:00 fetching corpus: 15450, signal 494553/608925 (executing program) 2023/02/16 04:07:00 fetching corpus: 15500, signal 495252/608925 (executing program) 2023/02/16 04:07:00 fetching corpus: 15550, signal 495868/608925 (executing program) 2023/02/16 04:07:00 fetching corpus: 15600, signal 496434/608925 (executing program) 2023/02/16 04:07:01 fetching corpus: 15650, signal 496970/608931 (executing program) 2023/02/16 04:07:01 fetching corpus: 15700, signal 497321/608931 (executing program) 2023/02/16 04:07:01 fetching corpus: 15750, signal 497720/608931 (executing program) 2023/02/16 04:07:01 fetching corpus: 15800, signal 498229/608931 (executing program) 2023/02/16 04:07:02 fetching corpus: 15850, signal 498755/608931 (executing program) 2023/02/16 04:07:02 fetching corpus: 15900, signal 499271/608931 (executing program) 2023/02/16 04:07:02 fetching corpus: 15950, signal 499686/608931 (executing program) 2023/02/16 04:07:02 fetching corpus: 16000, signal 500032/608931 (executing program) 2023/02/16 04:07:03 fetching corpus: 16050, signal 500848/608931 (executing program) 2023/02/16 04:07:03 fetching corpus: 16100, signal 501405/608931 (executing program) 2023/02/16 04:07:03 fetching corpus: 16150, signal 502021/608931 (executing program) 2023/02/16 04:07:03 fetching corpus: 16200, signal 502554/608931 (executing program) 2023/02/16 04:07:03 fetching corpus: 16250, signal 503049/608931 (executing program) 2023/02/16 04:07:04 fetching corpus: 16300, signal 503606/608931 (executing program) 2023/02/16 04:07:04 fetching corpus: 16350, signal 504074/608931 (executing program) 2023/02/16 04:07:04 fetching corpus: 16400, signal 504633/608931 (executing program) 2023/02/16 04:07:04 fetching corpus: 16450, signal 504882/608933 (executing program) 2023/02/16 04:07:04 fetching corpus: 16500, signal 505490/608933 (executing program) 2023/02/16 04:07:05 fetching corpus: 16550, signal 505957/608933 (executing program) 2023/02/16 04:07:05 fetching corpus: 16600, signal 506312/608933 (executing program) 2023/02/16 04:07:05 fetching corpus: 16650, signal 507010/608933 (executing program) 2023/02/16 04:07:05 fetching corpus: 16700, signal 507463/608933 (executing program) 2023/02/16 04:07:05 fetching corpus: 16750, signal 507786/608933 (executing program) 2023/02/16 04:07:05 fetching corpus: 16800, signal 508371/608933 (executing program) 2023/02/16 04:07:06 fetching corpus: 16850, signal 508709/608933 (executing program) 2023/02/16 04:07:06 fetching corpus: 16900, signal 509324/608933 (executing program) 2023/02/16 04:07:06 fetching corpus: 16950, signal 510035/608933 (executing program) 2023/02/16 04:07:06 fetching corpus: 17000, signal 510464/608933 (executing program) 2023/02/16 04:07:06 fetching corpus: 17050, signal 510790/608933 (executing program) 2023/02/16 04:07:06 fetching corpus: 17100, signal 511227/608933 (executing program) 2023/02/16 04:07:07 fetching corpus: 17150, signal 511555/608933 (executing program) 2023/02/16 04:07:07 fetching corpus: 17200, signal 511952/608933 (executing program) 2023/02/16 04:07:07 fetching corpus: 17250, signal 512353/608933 (executing program) 2023/02/16 04:07:07 fetching corpus: 17300, signal 512784/608933 (executing program) 2023/02/16 04:07:08 fetching corpus: 17350, signal 513157/608933 (executing program) 2023/02/16 04:07:08 fetching corpus: 17400, signal 513400/608933 (executing program) 2023/02/16 04:07:08 fetching corpus: 17450, signal 514396/608933 (executing program) 2023/02/16 04:07:08 fetching corpus: 17500, signal 514940/608933 (executing program) 2023/02/16 04:07:09 fetching corpus: 17550, signal 515309/608933 (executing program) 2023/02/16 04:07:09 fetching corpus: 17600, signal 515814/608933 (executing program) 2023/02/16 04:07:09 fetching corpus: 17650, signal 516289/608933 (executing program) 2023/02/16 04:07:10 fetching corpus: 17700, signal 516703/608933 (executing program) 2023/02/16 04:07:10 fetching corpus: 17750, signal 517206/608933 (executing program) 2023/02/16 04:07:10 fetching corpus: 17800, signal 517541/608933 (executing program) 2023/02/16 04:07:10 fetching corpus: 17850, signal 518153/608933 (executing program) 2023/02/16 04:07:11 fetching corpus: 17900, signal 518717/608933 (executing program) 2023/02/16 04:07:11 fetching corpus: 17950, signal 519345/608933 (executing program) 2023/02/16 04:07:11 fetching corpus: 18000, signal 520216/608933 (executing program) 2023/02/16 04:07:11 fetching corpus: 18050, signal 520595/608933 (executing program) 2023/02/16 04:07:11 fetching corpus: 18100, signal 521102/608933 (executing program) 2023/02/16 04:07:11 fetching corpus: 18150, signal 521512/608933 (executing program) 2023/02/16 04:07:12 fetching corpus: 18200, signal 521976/608933 (executing program) 2023/02/16 04:07:12 fetching corpus: 18250, signal 522276/608933 (executing program) 2023/02/16 04:07:12 fetching corpus: 18300, signal 522688/608933 (executing program) 2023/02/16 04:07:12 fetching corpus: 18350, signal 523021/608933 (executing program) 2023/02/16 04:07:12 fetching corpus: 18400, signal 523539/608933 (executing program) 2023/02/16 04:07:13 fetching corpus: 18450, signal 523942/608933 (executing program) 2023/02/16 04:07:13 fetching corpus: 18500, signal 524389/608933 (executing program) 2023/02/16 04:07:13 fetching corpus: 18550, signal 524789/608933 (executing program) 2023/02/16 04:07:13 fetching corpus: 18600, signal 525613/608933 (executing program) 2023/02/16 04:07:13 fetching corpus: 18650, signal 526003/608933 (executing program) 2023/02/16 04:07:14 fetching corpus: 18700, signal 526414/608934 (executing program) 2023/02/16 04:07:14 fetching corpus: 18750, signal 526801/608934 (executing program) 2023/02/16 04:07:14 fetching corpus: 18800, signal 527287/608934 (executing program) 2023/02/16 04:07:14 fetching corpus: 18850, signal 527624/608934 (executing program) 2023/02/16 04:07:14 fetching corpus: 18900, signal 527971/608934 (executing program) 2023/02/16 04:07:14 fetching corpus: 18950, signal 528281/608934 (executing program) 2023/02/16 04:07:15 fetching corpus: 19000, signal 528607/608934 (executing program) 2023/02/16 04:07:15 fetching corpus: 19050, signal 529513/608934 (executing program) 2023/02/16 04:07:15 fetching corpus: 19099, signal 529827/608934 (executing program) 2023/02/16 04:07:15 fetching corpus: 19149, signal 530416/608934 (executing program) 2023/02/16 04:07:15 fetching corpus: 19199, signal 531101/608934 (executing program) 2023/02/16 04:07:16 fetching corpus: 19249, signal 531540/608934 (executing program) 2023/02/16 04:07:16 fetching corpus: 19299, signal 531956/608934 (executing program) 2023/02/16 04:07:16 fetching corpus: 19349, signal 532419/608934 (executing program) 2023/02/16 04:07:16 fetching corpus: 19399, signal 532941/608934 (executing program) 2023/02/16 04:07:17 fetching corpus: 19449, signal 533343/608939 (executing program) 2023/02/16 04:07:17 fetching corpus: 19499, signal 533725/608939 (executing program) 2023/02/16 04:07:17 fetching corpus: 19549, signal 534253/608939 (executing program) 2023/02/16 04:07:17 fetching corpus: 19599, signal 534606/608939 (executing program) 2023/02/16 04:07:18 fetching corpus: 19649, signal 534938/608939 (executing program) 2023/02/16 04:07:18 fetching corpus: 19699, signal 535211/608939 (executing program) 2023/02/16 04:07:18 fetching corpus: 19749, signal 535787/608939 (executing program) 2023/02/16 04:07:18 fetching corpus: 19799, signal 536144/608939 (executing program) 2023/02/16 04:07:18 fetching corpus: 19849, signal 536497/608939 (executing program) 2023/02/16 04:07:18 fetching corpus: 19899, signal 537115/608939 (executing program) 2023/02/16 04:07:19 fetching corpus: 19949, signal 537595/608939 (executing program) 2023/02/16 04:07:19 fetching corpus: 19999, signal 538055/608939 (executing program) 2023/02/16 04:07:19 fetching corpus: 20049, signal 538705/608939 (executing program) 2023/02/16 04:07:19 fetching corpus: 20099, signal 539046/608939 (executing program) 2023/02/16 04:07:20 fetching corpus: 20149, signal 539777/608939 (executing program) 2023/02/16 04:07:20 fetching corpus: 20199, signal 540272/608939 (executing program) 2023/02/16 04:07:20 fetching corpus: 20249, signal 540558/608939 (executing program) 2023/02/16 04:07:20 fetching corpus: 20299, signal 541070/608939 (executing program) 2023/02/16 04:07:21 fetching corpus: 20349, signal 541507/608939 (executing program) 2023/02/16 04:07:21 fetching corpus: 20399, signal 541825/608939 (executing program) 2023/02/16 04:07:21 fetching corpus: 20449, signal 542245/608939 (executing program) 2023/02/16 04:07:21 fetching corpus: 20499, signal 542838/608939 (executing program) 2023/02/16 04:07:22 fetching corpus: 20549, signal 543086/608939 (executing program) 2023/02/16 04:07:22 fetching corpus: 20599, signal 543706/608939 (executing program) 2023/02/16 04:07:22 fetching corpus: 20649, signal 544215/608939 (executing program) 2023/02/16 04:07:22 fetching corpus: 20699, signal 544779/608941 (executing program) 2023/02/16 04:07:23 fetching corpus: 20749, signal 545003/608941 (executing program) 2023/02/16 04:07:23 fetching corpus: 20799, signal 545308/608941 (executing program) 2023/02/16 04:07:23 fetching corpus: 20849, signal 545683/608941 (executing program) 2023/02/16 04:07:23 fetching corpus: 20899, signal 546330/608941 (executing program) 2023/02/16 04:07:24 fetching corpus: 20949, signal 546770/608941 (executing program) 2023/02/16 04:07:24 fetching corpus: 20999, signal 547284/608941 (executing program) 2023/02/16 04:07:24 fetching corpus: 21049, signal 547590/608941 (executing program) 2023/02/16 04:07:24 fetching corpus: 21099, signal 547861/608947 (executing program) 2023/02/16 04:07:24 fetching corpus: 21149, signal 549220/608947 (executing program) 2023/02/16 04:07:25 fetching corpus: 21199, signal 549487/608947 (executing program) 2023/02/16 04:07:25 fetching corpus: 21249, signal 549771/608947 (executing program) 2023/02/16 04:07:25 fetching corpus: 21299, signal 550017/608947 (executing program) 2023/02/16 04:07:25 fetching corpus: 21349, signal 550493/608947 (executing program) 2023/02/16 04:07:25 fetching corpus: 21399, signal 551044/608947 (executing program) 2023/02/16 04:07:26 fetching corpus: 21449, signal 551497/608947 (executing program) 2023/02/16 04:07:26 fetching corpus: 21499, signal 551812/608947 (executing program) 2023/02/16 04:07:26 fetching corpus: 21549, signal 552288/608947 (executing program) 2023/02/16 04:07:26 fetching corpus: 21599, signal 552530/608947 (executing program) 2023/02/16 04:07:26 fetching corpus: 21649, signal 552865/608947 (executing program) 2023/02/16 04:07:27 fetching corpus: 21699, signal 553231/608947 (executing program) 2023/02/16 04:07:27 fetching corpus: 21749, signal 553746/608948 (executing program) 2023/02/16 04:07:27 fetching corpus: 21799, signal 554175/608948 (executing program) 2023/02/16 04:07:27 fetching corpus: 21849, signal 554593/608948 (executing program) 2023/02/16 04:07:28 fetching corpus: 21899, signal 554998/608948 (executing program) 2023/02/16 04:07:28 fetching corpus: 21949, signal 555411/608948 (executing program) 2023/02/16 04:07:28 fetching corpus: 21999, signal 556837/608963 (executing program) 2023/02/16 04:07:28 fetching corpus: 22049, signal 557855/608963 (executing program) 2023/02/16 04:07:29 fetching corpus: 22099, signal 558149/608963 (executing program) 2023/02/16 04:07:29 fetching corpus: 22149, signal 558509/608963 (executing program) 2023/02/16 04:07:29 fetching corpus: 22199, signal 558870/608963 (executing program) 2023/02/16 04:07:29 fetching corpus: 22249, signal 559173/608963 (executing program) 2023/02/16 04:07:29 fetching corpus: 22299, signal 559559/608963 (executing program) 2023/02/16 04:07:30 fetching corpus: 22349, signal 559851/608963 (executing program) 2023/02/16 04:07:30 fetching corpus: 22399, signal 560174/608963 (executing program) 2023/02/16 04:07:30 fetching corpus: 22449, signal 560508/608963 (executing program) 2023/02/16 04:07:30 fetching corpus: 22499, signal 560828/608963 (executing program) 2023/02/16 04:07:31 fetching corpus: 22549, signal 561493/608963 (executing program) 2023/02/16 04:07:31 fetching corpus: 22599, signal 561912/608963 (executing program) 2023/02/16 04:07:31 fetching corpus: 22649, signal 562314/608963 (executing program) 2023/02/16 04:07:31 fetching corpus: 22699, signal 562561/608963 (executing program) 2023/02/16 04:07:32 fetching corpus: 22749, signal 562969/608963 (executing program) 2023/02/16 04:07:32 fetching corpus: 22799, signal 563292/608963 (executing program) 2023/02/16 04:07:32 fetching corpus: 22849, signal 563602/608963 (executing program) 2023/02/16 04:07:32 fetching corpus: 22899, signal 563825/608963 (executing program) 2023/02/16 04:07:33 fetching corpus: 22949, signal 564150/608963 (executing program) 2023/02/16 04:07:33 fetching corpus: 22999, signal 564456/608963 (executing program) 2023/02/16 04:07:33 fetching corpus: 23049, signal 564967/608963 (executing program) 2023/02/16 04:07:33 fetching corpus: 23099, signal 565387/608963 (executing program) 2023/02/16 04:07:33 fetching corpus: 23149, signal 565656/608963 (executing program) 2023/02/16 04:07:34 fetching corpus: 23199, signal 566112/608963 (executing program) 2023/02/16 04:07:34 fetching corpus: 23249, signal 566385/608963 (executing program) 2023/02/16 04:07:34 fetching corpus: 23299, signal 566769/608963 (executing program) 2023/02/16 04:07:34 fetching corpus: 23349, signal 567108/608963 (executing program) 2023/02/16 04:07:35 fetching corpus: 23399, signal 567378/608963 (executing program) 2023/02/16 04:07:35 fetching corpus: 23449, signal 567719/608963 (executing program) 2023/02/16 04:07:35 fetching corpus: 23499, signal 568134/608963 (executing program) 2023/02/16 04:07:35 fetching corpus: 23549, signal 568394/608968 (executing program) 2023/02/16 04:07:35 fetching corpus: 23599, signal 568702/608968 (executing program) 2023/02/16 04:07:36 fetching corpus: 23649, signal 569319/608968 (executing program) 2023/02/16 04:07:36 fetching corpus: 23699, signal 569632/608968 (executing program) 2023/02/16 04:07:36 fetching corpus: 23749, signal 569983/608968 (executing program) 2023/02/16 04:07:36 fetching corpus: 23799, signal 570366/608968 (executing program) 2023/02/16 04:07:37 fetching corpus: 23849, signal 570775/608968 (executing program) 2023/02/16 04:07:37 fetching corpus: 23899, signal 571065/608968 (executing program) 2023/02/16 04:07:37 fetching corpus: 23949, signal 571343/608968 (executing program) 2023/02/16 04:07:37 fetching corpus: 23999, signal 571872/608968 (executing program) 2023/02/16 04:07:37 fetching corpus: 24049, signal 572143/608968 (executing program) 2023/02/16 04:07:38 fetching corpus: 24099, signal 572436/608968 (executing program) 2023/02/16 04:07:38 fetching corpus: 24149, signal 572708/608968 (executing program) 2023/02/16 04:07:38 fetching corpus: 24199, signal 573260/608968 (executing program) 2023/02/16 04:07:38 fetching corpus: 24249, signal 573572/608968 (executing program) 2023/02/16 04:07:38 fetching corpus: 24299, signal 573954/608968 (executing program) 2023/02/16 04:07:39 fetching corpus: 24349, signal 574451/608968 (executing program) 2023/02/16 04:07:39 fetching corpus: 24399, signal 574888/608968 (executing program) 2023/02/16 04:07:39 fetching corpus: 24449, signal 575274/608968 (executing program) 2023/02/16 04:07:39 fetching corpus: 24499, signal 575574/608971 (executing program) 2023/02/16 04:07:40 fetching corpus: 24549, signal 576005/608971 (executing program) 2023/02/16 04:07:40 fetching corpus: 24599, signal 576322/608971 (executing program) 2023/02/16 04:07:40 fetching corpus: 24649, signal 576570/608971 (executing program) 2023/02/16 04:07:40 fetching corpus: 24699, signal 576869/608971 (executing program) 2023/02/16 04:07:40 fetching corpus: 24749, signal 577312/608971 (executing program) 2023/02/16 04:07:41 fetching corpus: 24799, signal 577633/608971 (executing program) 2023/02/16 04:07:41 fetching corpus: 24849, signal 577876/608971 (executing program) 2023/02/16 04:07:41 fetching corpus: 24899, signal 578078/608971 (executing program) 2023/02/16 04:07:41 fetching corpus: 24949, signal 578383/608971 (executing program) 2023/02/16 04:07:42 fetching corpus: 24999, signal 578683/608971 (executing program) 2023/02/16 04:07:42 fetching corpus: 25049, signal 579032/608971 (executing program) 2023/02/16 04:07:42 fetching corpus: 25099, signal 579499/608994 (executing program) 2023/02/16 04:07:42 fetching corpus: 25149, signal 580128/608994 (executing program) 2023/02/16 04:07:42 fetching corpus: 25199, signal 580377/608994 (executing program) 2023/02/16 04:07:43 fetching corpus: 25248, signal 580711/608994 (executing program) 2023/02/16 04:07:43 fetching corpus: 25298, signal 580928/608994 (executing program) 2023/02/16 04:07:43 fetching corpus: 25348, signal 581269/608994 (executing program) 2023/02/16 04:07:43 fetching corpus: 25398, signal 581615/608994 (executing program) 2023/02/16 04:07:44 fetching corpus: 25448, signal 582384/608994 (executing program) 2023/02/16 04:07:44 fetching corpus: 25498, signal 582696/608994 (executing program) 2023/02/16 04:07:44 fetching corpus: 25548, signal 583125/608994 (executing program) 2023/02/16 04:07:44 fetching corpus: 25598, signal 583584/608994 (executing program) 2023/02/16 04:07:44 fetching corpus: 25648, signal 583801/608994 (executing program) 2023/02/16 04:07:45 fetching corpus: 25698, signal 584215/608994 (executing program) 2023/02/16 04:07:45 fetching corpus: 25748, signal 584533/608994 (executing program) 2023/02/16 04:07:45 fetching corpus: 25798, signal 584812/608994 (executing program) 2023/02/16 04:07:45 fetching corpus: 25848, signal 585045/608994 (executing program) 2023/02/16 04:07:45 fetching corpus: 25898, signal 585314/608994 (executing program) 2023/02/16 04:07:46 fetching corpus: 25948, signal 585692/608994 (executing program) 2023/02/16 04:07:46 fetching corpus: 25998, signal 586067/608994 (executing program) 2023/02/16 04:07:46 fetching corpus: 26048, signal 586408/608994 (executing program) 2023/02/16 04:07:46 fetching corpus: 26098, signal 586861/608994 (executing program) 2023/02/16 04:07:46 fetching corpus: 26148, signal 587146/608994 (executing program) 2023/02/16 04:07:46 fetching corpus: 26198, signal 587357/608994 (executing program) 2023/02/16 04:07:47 fetching corpus: 26248, signal 587816/608994 (executing program) 2023/02/16 04:07:47 fetching corpus: 26298, signal 588060/608994 (executing program) 2023/02/16 04:07:47 fetching corpus: 26348, signal 588292/608994 (executing program) 2023/02/16 04:07:47 fetching corpus: 26398, signal 588502/608994 (executing program) 2023/02/16 04:07:47 fetching corpus: 26448, signal 588906/608994 (executing program) 2023/02/16 04:07:47 fetching corpus: 26498, signal 589227/608994 (executing program) 2023/02/16 04:07:48 fetching corpus: 26548, signal 589667/608994 (executing program) 2023/02/16 04:07:48 fetching corpus: 26598, signal 590026/608994 (executing program) 2023/02/16 04:07:48 fetching corpus: 26648, signal 590481/608994 (executing program) 2023/02/16 04:07:48 fetching corpus: 26698, signal 590823/608994 (executing program) 2023/02/16 04:07:48 fetching corpus: 26748, signal 591078/608994 (executing program) 2023/02/16 04:07:49 fetching corpus: 26798, signal 591383/608994 (executing program) 2023/02/16 04:07:49 fetching corpus: 26848, signal 591663/608994 (executing program) 2023/02/16 04:07:49 fetching corpus: 26898, signal 591906/608994 (executing program) 2023/02/16 04:07:49 fetching corpus: 26948, signal 592207/608994 (executing program) 2023/02/16 04:07:49 fetching corpus: 26998, signal 592471/608994 (executing program) 2023/02/16 04:07:50 fetching corpus: 27048, signal 592763/608994 (executing program) 2023/02/16 04:07:50 fetching corpus: 27098, signal 593190/608994 (executing program) 2023/02/16 04:07:50 fetching corpus: 27148, signal 593534/608994 (executing program) 2023/02/16 04:07:50 fetching corpus: 27198, signal 593854/608994 (executing program) 2023/02/16 04:07:51 fetching corpus: 27248, signal 594069/608994 (executing program) 2023/02/16 04:07:51 fetching corpus: 27298, signal 594258/608994 (executing program) 2023/02/16 04:07:51 fetching corpus: 27348, signal 594584/608994 (executing program) 2023/02/16 04:07:51 fetching corpus: 27398, signal 594819/608994 (executing program) 2023/02/16 04:07:51 fetching corpus: 27448, signal 595111/608994 (executing program) 2023/02/16 04:07:51 fetching corpus: 27498, signal 595319/608994 (executing program) 2023/02/16 04:07:52 fetching corpus: 27548, signal 595603/608994 (executing program) 2023/02/16 04:07:52 fetching corpus: 27598, signal 595838/608994 (executing program) 2023/02/16 04:07:52 fetching corpus: 27648, signal 596435/608994 (executing program) 2023/02/16 04:07:52 fetching corpus: 27698, signal 596874/608994 (executing program) 2023/02/16 04:07:53 fetching corpus: 27748, signal 597108/608994 (executing program) 2023/02/16 04:07:53 fetching corpus: 27798, signal 597349/608994 (executing program) 2023/02/16 04:07:53 fetching corpus: 27848, signal 597502/608994 (executing program) 2023/02/16 04:07:53 fetching corpus: 27898, signal 597803/608994 (executing program) 2023/02/16 04:07:53 fetching corpus: 27948, signal 598128/608994 (executing program) 2023/02/16 04:07:53 fetching corpus: 27998, signal 598380/608994 (executing program) 2023/02/16 04:07:54 fetching corpus: 28048, signal 598626/608994 (executing program) 2023/02/16 04:07:54 fetching corpus: 28068, signal 598802/608994 (executing program) 2023/02/16 04:07:54 fetching corpus: 28068, signal 598802/608994 (executing program) 2023/02/16 04:07:57 starting 4 fuzzer processes 04:07:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 04:07:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:07:57 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)}) 04:07:57 executing program 3: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) [ 197.299063][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 197.299088][ T39] audit: type=1400 audit(1676520477.980:86): avc: denied { execmem } for pid=5163 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 197.609064][ T39] audit: type=1400 audit(1676520478.280:87): avc: denied { mounton } for pid=5166 comm="syz-executor.1" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 197.636470][ T39] audit: type=1400 audit(1676520478.290:88): avc: denied { mount } for pid=5166 comm="syz-executor.1" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 197.669850][ T5169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.669913][ T39] audit: type=1400 audit(1676520478.290:89): avc: denied { create } for pid=5166 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.675173][ T39] audit: type=1400 audit(1676520478.290:90): avc: denied { read write } for pid=5166 comm="syz-executor.1" name="vhci" dev="devtmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 197.689933][ T5169] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.707405][ T39] audit: type=1400 audit(1676520478.290:91): avc: denied { open } for pid=5166 comm="syz-executor.1" path="/dev/vhci" dev="devtmpfs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 197.715670][ T5172] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.726571][ T39] audit: type=1400 audit(1676520478.320:92): avc: denied { ioctl } for pid=5166 comm="syz-executor.1" path="socket:[29416]" dev="sockfs" ino=29416 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.727938][ T5175] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.729240][ T5175] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.729625][ T5175] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 197.729816][ T5175] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.734646][ T5172] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.737317][ T5179] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.739570][ T5179] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.740233][ T5179] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.741027][ T5179] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.741366][ T5179] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 197.741515][ T5179] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.748641][ T5175] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.753518][ T5172] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.757904][ T39] audit: type=1400 audit(1676520478.430:93): avc: denied { read } for pid=5166 comm="syz-executor.1" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 197.757955][ T39] audit: type=1400 audit(1676520478.430:94): avc: denied { open } for pid=5166 comm="syz-executor.1" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 197.757980][ T39] audit: type=1400 audit(1676520478.430:95): avc: denied { mounton } for pid=5166 comm="syz-executor.1" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 197.761590][ T5175] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.765667][ T5180] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.774854][ T5179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.790739][ T5172] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 197.795709][ T5180] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.798939][ T5172] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.803561][ T5180] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 197.885579][ T5180] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.182108][ T5166] chnl_net:caif_netlink_parms(): no params data found [ 198.233975][ T5171] chnl_net:caif_netlink_parms(): no params data found [ 198.385808][ T5170] chnl_net:caif_netlink_parms(): no params data found [ 198.394171][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.399691][ T5166] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.406461][ T5166] device bridge_slave_0 entered promiscuous mode [ 198.462342][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.466564][ T5166] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.473597][ T5166] device bridge_slave_1 entered promiscuous mode [ 198.580625][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.586180][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.594506][ T5171] device bridge_slave_0 entered promiscuous mode [ 198.622631][ T5166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.629512][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.634451][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.640077][ T5171] device bridge_slave_1 entered promiscuous mode [ 198.644848][ T5174] chnl_net:caif_netlink_parms(): no params data found [ 198.677781][ T5166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.828215][ T5171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.848542][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.854787][ T5170] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.860544][ T5170] device bridge_slave_0 entered promiscuous mode [ 198.868890][ T5166] team0: Port device team_slave_0 added [ 198.875562][ T5171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.887832][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.892568][ T5170] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.900081][ T5170] device bridge_slave_1 entered promiscuous mode [ 198.927022][ T5166] team0: Port device team_slave_1 added [ 199.061934][ T5174] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.066863][ T5174] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.073268][ T5174] device bridge_slave_0 entered promiscuous mode [ 199.082760][ T5170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.091520][ T5166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.097172][ T5166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.116807][ T5166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.128241][ T5171] team0: Port device team_slave_0 added [ 199.136053][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.141210][ T5174] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.146571][ T5174] device bridge_slave_1 entered promiscuous mode [ 199.156305][ T5170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.186262][ T5166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.191121][ T5166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.209533][ T5166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.222878][ T5171] team0: Port device team_slave_1 added [ 199.318752][ T5170] team0: Port device team_slave_0 added [ 199.325360][ T5170] team0: Port device team_slave_1 added [ 199.331411][ T5171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.336111][ T5171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.355771][ T5171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.365808][ T5174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.432530][ T5171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.438263][ T5171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.457827][ T5171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.475043][ T5174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.499889][ T5170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.504621][ T5170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.524006][ T5170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.533021][ T5170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.537411][ T5170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.553513][ T5170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.590759][ T5166] device hsr_slave_0 entered promiscuous mode [ 199.597049][ T5166] device hsr_slave_1 entered promiscuous mode [ 199.682160][ T5171] device hsr_slave_0 entered promiscuous mode [ 199.688752][ T5171] device hsr_slave_1 entered promiscuous mode [ 199.694817][ T5171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.701952][ T5171] Cannot create hsr debugfs directory [ 199.732304][ T5174] team0: Port device team_slave_0 added [ 199.748642][ T5178] Bluetooth: hci0: command 0x0409 tx timeout [ 199.765050][ T5174] team0: Port device team_slave_1 added [ 199.828491][ T5180] Bluetooth: hci1: command 0x0409 tx timeout [ 199.837994][ T5180] Bluetooth: hci2: command 0x0409 tx timeout [ 199.893461][ T5170] device hsr_slave_0 entered promiscuous mode [ 199.898368][ T5170] device hsr_slave_1 entered promiscuous mode [ 199.904017][ T5170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.910805][ T5170] Cannot create hsr debugfs directory [ 199.917932][ T5180] Bluetooth: hci3: command 0x0409 tx timeout [ 199.953783][ T5174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.960844][ T5174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.978829][ T5174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.993514][ T5174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.998167][ T5174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.016802][ T5174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.314372][ T5174] device hsr_slave_0 entered promiscuous mode [ 200.319894][ T5174] device hsr_slave_1 entered promiscuous mode [ 200.325410][ T5174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.331559][ T5174] Cannot create hsr debugfs directory [ 200.399984][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.404388][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.539232][ T5166] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.554142][ T5166] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.576534][ T5166] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.588059][ T5166] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 200.646066][ T5171] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 200.655846][ T5171] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 200.669107][ T5171] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 200.682738][ T5171] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 200.770945][ T5170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 200.777544][ T5170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 200.793590][ T5170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 200.825531][ T5170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 200.879282][ T5174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 200.896313][ T5174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 200.920516][ T5174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 200.928391][ T5174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.954544][ T5166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.991671][ T5171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.000192][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.006997][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.017102][ T5166] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.029264][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.036064][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.042161][ T798] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.047142][ T798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.053774][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.079694][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.086090][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.093704][ T799] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.098863][ T799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.103550][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.111511][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.130909][ T5171] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.136105][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.141967][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.162501][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.172673][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.181652][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.217069][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.224240][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.234288][ T5210] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.239902][ T5210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.245401][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.251921][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.268214][ T5170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.291011][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.297067][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.303983][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.311271][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.317319][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.323913][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.328843][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.334122][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.341744][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.348088][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.353879][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.370716][ T5166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.378923][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.385668][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.392223][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.409479][ T5170] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.431735][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.439425][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.446603][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.453584][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.459762][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.469632][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.476729][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.497429][ T5171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.504880][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.519270][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.526614][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.533613][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.538526][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.545333][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.552870][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.564805][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.570313][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.577777][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.585168][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.592759][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.600966][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.609602][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.621579][ T5174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.697355][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.704460][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.710807][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.722631][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.729698][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.734623][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.740896][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.750450][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.755932][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.773787][ T5174] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.780374][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.786281][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.800138][ T5166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.805561][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.812878][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.823513][ T5170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.828862][ T5178] Bluetooth: hci0: command 0x041b tx timeout [ 201.853568][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.860146][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.866747][ T799] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.871336][ T799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.877885][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.883595][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.895679][ T5171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.917534][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.924149][ T5178] Bluetooth: hci2: command 0x041b tx timeout [ 201.928149][ T5180] Bluetooth: hci1: command 0x041b tx timeout [ 201.929555][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.940059][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.946253][ T799] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.951376][ T799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.958090][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.977263][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.983766][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.990361][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.996794][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.997842][ T5178] Bluetooth: hci3: command 0x041b tx timeout [ 202.003448][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.027546][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.033927][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.041737][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.050279][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.056349][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.068620][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.077278][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.103854][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.112329][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.125535][ T5174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.144027][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.152501][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.160477][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.165614][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.175489][ T5166] device veth0_vlan entered promiscuous mode [ 202.197929][ T5170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.205103][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.212779][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.219702][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.225255][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.232370][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.238673][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.244669][ T5171] device veth0_vlan entered promiscuous mode [ 202.262368][ T5166] device veth1_vlan entered promiscuous mode [ 202.273726][ T5171] device veth1_vlan entered promiscuous mode [ 202.290592][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.298348][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.305130][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.315139][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.343049][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.350725][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.358940][ T5170] device veth0_vlan entered promiscuous mode [ 202.373428][ T5170] device veth1_vlan entered promiscuous mode [ 202.381731][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.386900][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.393249][ T5212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.416999][ T5171] device veth0_macvtap entered promiscuous mode [ 202.431699][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 202.438248][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.444845][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.458636][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.464268][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.471317][ T5214] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.479435][ T5166] device veth0_macvtap entered promiscuous mode [ 202.492638][ T5166] device veth1_macvtap entered promiscuous mode [ 202.500128][ T5171] device veth1_macvtap entered promiscuous mode [ 202.522037][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 202.528686][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.535281][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 202.542135][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.549936][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.554727][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.561938][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.572250][ T5170] device veth0_macvtap entered promiscuous mode [ 202.583616][ T5170] device veth1_macvtap entered promiscuous mode [ 202.591408][ T5174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.606463][ T5166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.627448][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.636896][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 202.642787][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.649303][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.660936][ T5166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.685486][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.691903][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.698787][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.705975][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.715867][ T5166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.725201][ T5166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.732465][ T5166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.738990][ T5166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.747373][ T5171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.756325][ T5171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.766367][ T5171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.780947][ T5174] device veth0_vlan entered promiscuous mode [ 202.794874][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.801260][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.807069][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.813153][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.819643][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.825314][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.835832][ T5174] device veth1_vlan entered promiscuous mode [ 202.846570][ T5171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.857321][ T5171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.865890][ T5171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.881005][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.891752][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.902344][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.910789][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.922438][ T5170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.928941][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.935744][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 202.945413][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.953778][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.961986][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.968120][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.979242][ T5171] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.986318][ T5171] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.995369][ T5171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.001438][ T5171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.053283][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.060260][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.066826][ T5170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.073785][ T5170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.082145][ T5170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.104795][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.116895][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.130283][ T5170] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.138114][ T5170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.144911][ T5170] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.152521][ T5170] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.182656][ T5174] device veth0_macvtap entered promiscuous mode [ 203.188576][ T5213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.197421][ T5213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.209129][ T5213] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.239606][ T5174] device veth1_macvtap entered promiscuous mode [ 203.343676][ T5192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.348826][ T798] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.354098][ T5192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.379437][ T5213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.400065][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.408220][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.440615][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.461479][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.471974][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.480535][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.487463][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.495290][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.502687][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.513175][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.530938][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.537299][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.544400][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.553246][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.567999][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.576368][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.585709][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.595272][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.605419][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.613407][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.627109][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.639112][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.647254][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.656023][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.671217][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.688808][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.702556][ T5174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.711231][ T5174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.719292][ T5174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.726563][ T5174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.763837][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.777931][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.790707][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 203.790723][ T39] audit: type=1400 audit(1676520484.470:98): avc: denied { mounton } for pid=5166 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=2387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 203.803271][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.814101][ T39] audit: type=1400 audit(1676520484.480:99): avc: denied { mount } for pid=5166 comm="syz-executor.1" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 203.844772][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.856078][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.856083][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.870139][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.908631][ T5178] Bluetooth: hci0: command 0x040f tx timeout [ 203.929901][ T5207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.936631][ T5207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.950038][ T5215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.960206][ T39] audit: type=1400 audit(1676520484.640:100): avc: denied { read write } for pid=5166 comm="syz-executor.1" name="loop1" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 203.974995][ T39] audit: type=1400 audit(1676520484.640:101): avc: denied { open } for pid=5166 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 203.988996][ T5180] Bluetooth: hci1: command 0x040f tx timeout [ 203.993341][ T5178] Bluetooth: hci2: command 0x040f tx timeout [ 204.000286][ T39] audit: type=1400 audit(1676520484.640:102): avc: denied { ioctl } for pid=5166 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.003874][ T5207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.016546][ T39] audit: type=1400 audit(1676520484.660:103): avc: denied { read } for pid=5236 comm="syz-executor.2" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 204.026467][ T5240] process 'syz-executor.3' launched './file1' with NULL argv: empty string added [ 204.029676][ T5207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.037886][ T39] audit: type=1400 audit(1676520484.660:104): avc: denied { open } for pid=5236 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 204.065101][ T39] audit: type=1400 audit(1676520484.680:105): avc: denied { ioctl } for pid=5236 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 204.071696][ T5180] Bluetooth: hci3: command 0x040f tx timeout [ 204.081927][ T39] audit: type=1400 audit(1676520484.680:106): avc: denied { set_context_mgr } for pid=5236 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 04:08:04 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0x40044102, 0x0) [ 204.095690][ T39] audit: type=1400 audit(1676520484.680:107): avc: denied { map } for pid=5236 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 204.121350][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.122182][ T5237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:08:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1010000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0xff, 0x4eb, &(0x7f0000000a40)="$eJzs3U9oVNsZAPDvThIbNTaxFWrbRUWtsZTMJNGIfyhaXBTaBkqla0mTSRoyyYTMRE3IQltsF110Y7Glq1IoFEo3pUh30r3QgqUV94U+8L2neQsfvMc8ZuZGJc5oHiaZZ+b3g+O9555Mvu84Myf3zLnMDaBtHYqICxHRERHfiIje9HgmLXG9Xqo/9+Txyvjq45XxJCqVS+8lkaTH1n5Xkm73pg/rjogffifix8nLcUtLyzNjhUJ+Ic7X6rny7HyutLQ8MD07NpWfys+dOHlq5PSZ4cGhkU3r6+Lhv925d2v0F3++ODD4r59/eK+aVk/a9mI/NlO96121/4s1nRGxsBXBWqAj7U9XqxMBAGBDquf4X4iIw7Xz/97oqJ3NAQAAADtJ5XxPfJT89n4FAAAA2LEytWtgk0w2vRagJzKZbLZ+De+B2JMpFEvlb04WF+cm6tfK9kVXZnK6kB9MrxXui66kWh+q7T+vD9frF9bqJyJif0Tc6t1dq2fHi4WJVn/4AQAAAG1i77r5/we99fk/AAAAsMP0tToBAAAAYMuZ/wMAAMDOZ/4PAAAAO9oPRkerpbKa3v964srS4kzxysBEvjSTnV0cz44XF+azU8XiVO07+2Zf9/sKxeL8yZhbvJYr50vlXGlp+fJscXGufLl2X+/LefeJBgAAgO23/2t3HyQRcf3s7lqp2pW2mavDzpZpdQJAy3S0OgGgZTpbnQDQMub4QNKsYTB35g8H/tHzoFn7P7csJQAAYJP1f9n6P7Qr6//Qvqz/Q/uy/g/tyxwfaLr+n+pu1mD9HwAA3ho9tZJksulaYE9kMtlsxL7abQG6ksnpQn4wIj4fEf/t7fpctT7U6qQBAAAAAAAAAAAAAAAAAAAAAAAA4C1TqSRRAQAAAHa0iMw7SXr/r/7eoz3rPx/YlTztrW0j4urvLt2+NlYuLwxVj7//7Hj5N+nx4VZ8ggEAAACstzZPX5vHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBmevJ4ZXytNGq/ePXGrmPf//u3Njvuo29HRF89/mpa6i2d0V3bdkdXROxZTaLzhcclEdGxCfGv34iIg436n1TTir40i/XxMxGxu8Xx925CfGhnd6vjz4VG779MHKptG7//OtPyptbGv9WXxr/Ms/Gvo8n4t2+DMf7z13dPN41/I+IrnY3iJ8/iJ03iH9lg/K8O/ephs7bK7yP6o3H8F2PlyrPzudLS8sD07NhUfio/d+LkqZHTZ4YHh0Zyk9OF/GD934YxvnfuZ3Ov6v+eJvH7XtP/oxvs/6Mvffz/L74i/vEjjZ//g6+IX31NfD3No/q34Fi6rdb718VY+eXtpi+VavyJJv1/3fN/fIP9f3jnf083+KMAwDYoLS3PjBUK+QU7duw02fnpH+8fuHnzL6OflXy2Y2f9SHH233/6yblD3/1Ra8YpAADgzT0/6f/0j33w663ICAAAAAAAAAAAAAAAAAAAANrPdnydWKv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwEZ8EAAD//1Sz4gs=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, 0xffffffffffffffff) [ 204.198818][ T5241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.199996][ T5248] loop2: detected capacity change from 0 to 512 04:08:04 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 04:08:04 executing program 3: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) [ 204.258631][ T5241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:08:04 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) [ 204.279618][ T5248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: writeback. [ 204.291234][ T5248] ext4 filesystem being mounted at /syzkaller-testdir262723972/syzkaller.LmEa2E/2/file0 supports timestamps until 2038 (0x7fffffff) [ 204.349678][ T5170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 04:08:05 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 04:08:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1010000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0xff, 0x4eb, &(0x7f0000000a40)="$eJzs3U9oVNsZAPDvThIbNTaxFWrbRUWtsZTMJNGIfyhaXBTaBkqla0mTSRoyyYTMRE3IQltsF110Y7Glq1IoFEo3pUh30r3QgqUV94U+8L2neQsfvMc8ZuZGJc5oHiaZZ+b3g+O9555Mvu84Myf3zLnMDaBtHYqICxHRERHfiIje9HgmLXG9Xqo/9+Txyvjq45XxJCqVS+8lkaTH1n5Xkm73pg/rjogffifix8nLcUtLyzNjhUJ+Ic7X6rny7HyutLQ8MD07NpWfys+dOHlq5PSZ4cGhkU3r6+Lhv925d2v0F3++ODD4r59/eK+aVk/a9mI/NlO96121/4s1nRGxsBXBWqAj7U9XqxMBAGBDquf4X4iIw7Xz/97oqJ3NAQAAADtJ5XxPfJT89n4FAAAA2LEytWtgk0w2vRagJzKZbLZ+De+B2JMpFEvlb04WF+cm6tfK9kVXZnK6kB9MrxXui66kWh+q7T+vD9frF9bqJyJif0Tc6t1dq2fHi4WJVn/4AQAAAG1i77r5/we99fk/AAAAsMP0tToBAAAAYMuZ/wMAAMDOZ/4PAAAAO9oPRkerpbKa3v964srS4kzxysBEvjSTnV0cz44XF+azU8XiVO07+2Zf9/sKxeL8yZhbvJYr50vlXGlp+fJscXGufLl2X+/LefeJBgAAgO23/2t3HyQRcf3s7lqp2pW2mavDzpZpdQJAy3S0OgGgZTpbnQDQMub4QNKsYTB35g8H/tHzoFn7P7csJQAAYJP1f9n6P7Qr6//Qvqz/Q/uy/g/tyxwfaLr+n+pu1mD9HwAA3ho9tZJksulaYE9kMtlsxL7abQG6ksnpQn4wIj4fEf/t7fpctT7U6qQBAAAAAAAAAAAAAAAAAAAAAAAA4C1TqSRRAQAAAHa0iMw7SXr/r/7eoz3rPx/YlTztrW0j4urvLt2+NlYuLwxVj7//7Hj5N+nx4VZ8ggEAAACstzZPX5vHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBmevJ4ZXytNGq/ePXGrmPf//u3Njvuo29HRF89/mpa6i2d0V3bdkdXROxZTaLzhcclEdGxCfGv34iIg436n1TTir40i/XxMxGxu8Xx925CfGhnd6vjz4VG779MHKptG7//OtPyptbGv9WXxr/Ms/Gvo8n4t2+DMf7z13dPN41/I+IrnY3iJ8/iJ03iH9lg/K8O/ephs7bK7yP6o3H8F2PlyrPzudLS8sD07NhUfio/d+LkqZHTZ4YHh0Zyk9OF/GD934YxvnfuZ3Ov6v+eJvH7XtP/oxvs/6Mvffz/L74i/vEjjZ//g6+IX31NfD3No/q34Fi6rdb718VY+eXtpi+VavyJJv1/3fN/fIP9f3jnf083+KMAwDYoLS3PjBUK+QU7duw02fnpH+8fuHnzL6OflXy2Y2f9SHH233/6yblD3/1Ra8YpAADgzT0/6f/0j33w663ICAAAAAAAAAAAAAAAAAAAANrPdnydWKv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwEZ8EAAD//1Sz4gs=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, 0xffffffffffffffff) 04:08:05 executing program 3: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) 04:08:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:08:05 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) [ 204.606646][ T5267] loop2: detected capacity change from 0 to 512 [ 204.649607][ T5273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:08:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 204.683819][ T5267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: writeback. [ 204.694475][ T5267] ext4 filesystem being mounted at /syzkaller-testdir262723972/syzkaller.LmEa2E/3/file0 supports timestamps until 2038 (0x7fffffff) [ 204.723409][ T5273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.754334][ T5278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:08:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1010000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0xff, 0x4eb, &(0x7f0000000a40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, 0xffffffffffffffff) [ 204.769314][ T5170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.782115][ T14] wlan1: authenticate with 08:02:11:00:00:00 04:08:05 executing program 3: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) [ 204.790095][ T14] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 204.795305][ T5273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.798009][ T5209] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 204.812289][ T5209] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 204.817868][ T5278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.824932][ T5209] wlan1: authenticated [ 204.836161][ T14] mac80211_hwsim hwsim9 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 204.859536][ T5209] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 204.861446][ T5286] loop2: detected capacity change from 0 to 512 [ 204.865933][ T5209] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 204.889754][ T5209] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 204.893596][ T5287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.896371][ T5209] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 204.906835][ T5286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: writeback. [ 204.911509][ T5209] wlan1: associated [ 204.921714][ T5286] ext4 filesystem being mounted at /syzkaller-testdir262723972/syzkaller.LmEa2E/4/file0 supports timestamps until 2038 (0x7fffffff) 04:08:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1010000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0xff, 0x4eb, &(0x7f0000000a40)="$eJzs3U9oVNsZAPDvThIbNTaxFWrbRUWtsZTMJNGIfyhaXBTaBkqla0mTSRoyyYTMRE3IQltsF110Y7Glq1IoFEo3pUh30r3QgqUV94U+8L2neQsfvMc8ZuZGJc5oHiaZZ+b3g+O9555Mvu84Myf3zLnMDaBtHYqICxHRERHfiIje9HgmLXG9Xqo/9+Txyvjq45XxJCqVS+8lkaTH1n5Xkm73pg/rjogffifix8nLcUtLyzNjhUJ+Ic7X6rny7HyutLQ8MD07NpWfys+dOHlq5PSZ4cGhkU3r6+Lhv925d2v0F3++ODD4r59/eK+aVk/a9mI/NlO96121/4s1nRGxsBXBWqAj7U9XqxMBAGBDquf4X4iIw7Xz/97oqJ3NAQAAADtJ5XxPfJT89n4FAAAA2LEytWtgk0w2vRagJzKZbLZ+De+B2JMpFEvlb04WF+cm6tfK9kVXZnK6kB9MrxXui66kWh+q7T+vD9frF9bqJyJif0Tc6t1dq2fHi4WJVn/4AQAAAG1i77r5/we99fk/AAAAsMP0tToBAAAAYMuZ/wMAAMDOZ/4PAAAAO9oPRkerpbKa3v964srS4kzxysBEvjSTnV0cz44XF+azU8XiVO07+2Zf9/sKxeL8yZhbvJYr50vlXGlp+fJscXGufLl2X+/LefeJBgAAgO23/2t3HyQRcf3s7lqp2pW2mavDzpZpdQJAy3S0OgGgZTpbnQDQMub4QNKsYTB35g8H/tHzoFn7P7csJQAAYJP1f9n6P7Qr6//Qvqz/Q/uy/g/tyxwfaLr+n+pu1mD9HwAA3ho9tZJksulaYE9kMtlsxL7abQG6ksnpQn4wIj4fEf/t7fpctT7U6qQBAAAAAAAAAAAAAAAAAAAAAAAA4C1TqSRRAQAAAHa0iMw7SXr/r/7eoz3rPx/YlTztrW0j4urvLt2+NlYuLwxVj7//7Hj5N+nx4VZ8ggEAAACstzZPX5vHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBmevJ4ZXytNGq/ePXGrmPf//u3Njvuo29HRF89/mpa6i2d0V3bdkdXROxZTaLzhcclEdGxCfGv34iIg436n1TTir40i/XxMxGxu8Xx925CfGhnd6vjz4VG779MHKptG7//OtPyptbGv9WXxr/Ms/Gvo8n4t2+DMf7z13dPN41/I+IrnY3iJ8/iJ03iH9lg/K8O/ephs7bK7yP6o3H8F2PlyrPzudLS8sD07NhUfio/d+LkqZHTZ4YHh0Zyk9OF/GD934YxvnfuZ3Ov6v+eJvH7XtP/oxvs/6Mvffz/L74i/vEjjZ//g6+IX31NfD3No/q34Fi6rdb718VY+eXtpi+VavyJJv1/3fN/fIP9f3jnf083+KMAwDYoLS3PjBUK+QU7duw02fnpH+8fuHnzL6OflXy2Y2f9SHH233/6yblD3/1Ra8YpAADgzT0/6f/0j33w663ICAAAAAAAAAAAAAAAAAAAANrPdnydWKv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwEZ8EAAD//1Sz4gs=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, 0xffffffffffffffff) [ 204.968205][ T5170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 04:08:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1010000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0xff, 0x4eb, &(0x7f0000000a40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, 0xffffffffffffffff) [ 205.033723][ T5293] loop2: detected capacity change from 0 to 512 [ 205.050136][ T5295] loop3: detected capacity change from 0 to 512 [ 205.057382][ T5293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: writeback. [ 205.071424][ T5293] ext4 filesystem being mounted at /syzkaller-testdir262723972/syzkaller.LmEa2E/5/file0 supports timestamps until 2038 (0x7fffffff) [ 205.100187][ T5295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: writeback. [ 205.119725][ T5295] ext4 filesystem being mounted at /syzkaller-testdir4235127749/syzkaller.FeKCwL/4/file0 supports timestamps until 2038 (0x7fffffff) 04:08:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 205.129531][ T5170] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 04:08:05 executing program 2: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) 04:08:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1010000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0xff, 0x4eb, &(0x7f0000000a40)="$eJzs3U9oVNsZAPDvThIbNTaxFWrbRUWtsZTMJNGIfyhaXBTaBkqla0mTSRoyyYTMRE3IQltsF110Y7Glq1IoFEo3pUh30r3QgqUV94U+8L2neQsfvMc8ZuZGJc5oHiaZZ+b3g+O9555Mvu84Myf3zLnMDaBtHYqICxHRERHfiIje9HgmLXG9Xqo/9+Txyvjq45XxJCqVS+8lkaTH1n5Xkm73pg/rjogffifix8nLcUtLyzNjhUJ+Ic7X6rny7HyutLQ8MD07NpWfys+dOHlq5PSZ4cGhkU3r6+Lhv925d2v0F3++ODD4r59/eK+aVk/a9mI/NlO96121/4s1nRGxsBXBWqAj7U9XqxMBAGBDquf4X4iIw7Xz/97oqJ3NAQAAADtJ5XxPfJT89n4FAAAA2LEytWtgk0w2vRagJzKZbLZ+De+B2JMpFEvlb04WF+cm6tfK9kVXZnK6kB9MrxXui66kWh+q7T+vD9frF9bqJyJif0Tc6t1dq2fHi4WJVn/4AQAAAG1i77r5/we99fk/AAAAsMP0tToBAAAAYMuZ/wMAAMDOZ/4PAAAAO9oPRkerpbKa3v964srS4kzxysBEvjSTnV0cz44XF+azU8XiVO07+2Zf9/sKxeL8yZhbvJYr50vlXGlp+fJscXGufLl2X+/LefeJBgAAgO23/2t3HyQRcf3s7lqp2pW2mavDzpZpdQJAy3S0OgGgZTpbnQDQMub4QNKsYTB35g8H/tHzoFn7P7csJQAAYJP1f9n6P7Qr6//Qvqz/Q/uy/g/tyxwfaLr+n+pu1mD9HwAA3ho9tZJksulaYE9kMtlsxL7abQG6ksnpQn4wIj4fEf/t7fpctT7U6qQBAAAAAAAAAAAAAAAAAAAAAAAA4C1TqSRRAQAAAHa0iMw7SXr/r/7eoz3rPx/YlTztrW0j4urvLt2+NlYuLwxVj7//7Hj5N+nx4VZ8ggEAAACstzZPX5vHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBmevJ4ZXytNGq/ePXGrmPf//u3Njvuo29HRF89/mpa6i2d0V3bdkdXROxZTaLzhcclEdGxCfGv34iIg436n1TTir40i/XxMxGxu8Xx925CfGhnd6vjz4VG779MHKptG7//OtPyptbGv9WXxr/Ms/Gvo8n4t2+DMf7z13dPN41/I+IrnY3iJ8/iJ03iH9lg/K8O/ephs7bK7yP6o3H8F2PlyrPzudLS8sD07NhUfio/d+LkqZHTZ4YHh0Zyk9OF/GD934YxvnfuZ3Ov6v+eJvH7XtP/oxvs/6Mvffz/L74i/vEjjZ//g6+IX31NfD3No/q34Fi6rdb718VY+eXtpi+VavyJJv1/3fN/fIP9f3jnf083+KMAwDYoLS3PjBUK+QU7duw02fnpH+8fuHnzL6OflXy2Y2f9SHH233/6yblD3/1Ra8YpAADgzT0/6f/0j33w663ICAAAAAAAAAAAAAAAAAAAANrPdnydWKv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwEZ8EAAD//1Sz4gs=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, 0xffffffffffffffff) [ 205.159609][ T5301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.171934][ T5171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.217524][ T5306] loop3: detected capacity change from 0 to 512 [ 205.224134][ T5307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:08:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 205.258616][ T5306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: writeback. [ 205.270903][ T5312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.276534][ T5306] ext4 filesystem being mounted at /syzkaller-testdir4235127749/syzkaller.FeKCwL/5/file0 supports timestamps until 2038 (0x7fffffff) [ 205.286682][ T5307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:08:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1010000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0xff, 0x4eb, &(0x7f0000000a40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, 0xffffffffffffffff) [ 205.321430][ T5171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.351315][ T5312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.369763][ T5316] loop3: detected capacity change from 0 to 512 04:08:06 executing program 2: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) [ 205.387531][ T5316] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: writeback. [ 205.395928][ T5316] ext4 filesystem being mounted at /syzkaller-testdir4235127749/syzkaller.FeKCwL/6/file0 supports timestamps until 2038 (0x7fffffff) [ 205.411850][ T5319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.463212][ T5171] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 04:08:06 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) geteuid() 04:08:06 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) geteuid() 04:08:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:08:06 executing program 2: execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01010101", 0x4) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0], 0x0) 04:08:06 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) geteuid() [ 205.633167][ T5333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.693533][ T5336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:08:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 04:08:06 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) geteuid() [ 205.752434][ T5333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 04:08:06 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) geteuid() 04:08:06 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) geteuid() 04:08:06 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x1}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x20000002, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1e06b7e8a1eb013cdf1be03e940099a4058554642325fa2d62cbd33121d1dda1c2cba2ab5ddf84c9a99332a0aa1b88862081812e1b779370bda0e9169bcabd4e5044fbe61e0d1d96fda94cc50ecf6a6b0c703f5d91a0c02bfa16234b30c26bf7bfee3c68682095f32ff2776d2985a81703f634fe3abaa9ac0aeed3b3148b1aef0ec1efb871a8500338e9de6b4ee1e17eb5847937a83b0358ef8ab6692d2b1538741dab7a9f609e75b6e55a120da346312cab143f90ebb6da62d0fc550b733200c75f715ce01bb70bc23e70dd262ef91215822298fee9709e2d1ea327aa8a6a4314e9b91dbf58300a7917cc3e4f26283937694d3a4c146", 0x8056a}, {&(0x7f0000000780)="c18af54e7facd931e259615d3a032b165331b3657a111037325376ecdcd7cdb565e908e3f8ed1619f36e1d9542c99c64220b90530a9af19cdb598be1b47a3270b2a1164ebd669a64db6fe8c93739fd45325fe94f075eb0f9b0e9f9abbc149128d06043eb7600000000865c2d52eae2c88f2a33646df1d8d300ccdb466c2071b66192d92f3b0a3823c6c46f8baa6b50ee5cfc242f73de00027945540700000000fecb1c7b312558b81c0e6f8c1a0d7dc3000000d414e02f4106a8862cdf838527a4", 0xce}, {&(0x7f0000000040)="c39a00bb15b4d145723f765d602ef1e9ee36", 0x80057}, {&(0x7f00000003c0)="5683eb186eaf89d39dcfafa4e796554c67e389d4526f1202ce7e4b2da420d47a58d28c3a80a467f347ab84023a82b4a6d86659d01f5caf15e20c5d8986f18ef00cafe40e866419b00a2dceff7623c1aa9cb838fa3608f48974b4d78fe37fae1e577235d7af3d3b105f0b77a5da237b80615ed4a95fae798adfb3aa15119146bcda665356e91113231ded3948684b39093f3f8031d652fefc1d77fe94e3fccb4c4086e22fe32f63285d5d6f0faa603609e5ed282499a9c13ba06b99f837eb09ca142dec8b3c2a5e3791f0a7e1ac323f8f9dc521b145ad811a6d4fe37f04497d78281a1dcf220fe0526d52a75e0a3c13", 0x86}, {&(0x7f0000000880)="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", 0x2b7}], 0x3}}, {{0x0, 0xffffffffffffff74, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1a000, 0x0) [ 205.804288][ T5341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.875270][ T5348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.936034][ T5341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.997919][ T5178] Bluetooth: hci0: command 0x0419 tx timeout [ 206.078545][ T5180] Bluetooth: hci1: command 0x0419 tx timeout [ 206.079088][ T5178] Bluetooth: hci2: command 0x0419 tx timeout 04:08:06 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) geteuid() 04:08:06 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x1}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x20000002, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1e06b7e8a1eb013cdf1be03e940099a4058554642325fa2d62cbd33121d1dda1c2cba2ab5ddf84c9a99332a0aa1b88862081812e1b779370bda0e9169bcabd4e5044fbe61e0d1d96fda94cc50ecf6a6b0c703f5d91a0c02bfa16234b30c26bf7bfee3c68682095f32ff2776d2985a81703f634fe3abaa9ac0aeed3b3148b1aef0ec1efb871a8500338e9de6b4ee1e17eb5847937a83b0358ef8ab6692d2b1538741dab7a9f609e75b6e55a120da346312cab143f90ebb6da62d0fc550b733200c75f715ce01bb70bc23e70dd262ef91215822298fee9709e2d1ea327aa8a6a4314e9b91dbf58300a7917cc3e4f26283937694d3a4c146", 0x8056a}, {&(0x7f0000000780)="c18af54e7facd931e259615d3a032b165331b3657a111037325376ecdcd7cdb565e908e3f8ed1619f36e1d9542c99c64220b90530a9af19cdb598be1b47a3270b2a1164ebd669a64db6fe8c93739fd45325fe94f075eb0f9b0e9f9abbc149128d06043eb7600000000865c2d52eae2c88f2a33646df1d8d300ccdb466c2071b66192d92f3b0a3823c6c46f8baa6b50ee5cfc242f73de00027945540700000000fecb1c7b312558b81c0e6f8c1a0d7dc3000000d414e02f4106a8862cdf838527a4", 0xce}, {&(0x7f0000000040)="c39a00bb15b4d145723f765d602ef1e9ee36", 0x80057}, {&(0x7f00000003c0)="5683eb186eaf89d39dcfafa4e796554c67e389d4526f1202ce7e4b2da420d47a58d28c3a80a467f347ab84023a82b4a6d86659d01f5caf15e20c5d8986f18ef00cafe40e866419b00a2dceff7623c1aa9cb838fa3608f48974b4d78fe37fae1e577235d7af3d3b105f0b77a5da237b80615ed4a95fae798adfb3aa15119146bcda665356e91113231ded3948684b39093f3f8031d652fefc1d77fe94e3fccb4c4086e22fe32f63285d5d6f0faa603609e5ed282499a9c13ba06b99f837eb09ca142dec8b3c2a5e3791f0a7e1ac323f8f9dc521b145ad811a6d4fe37f04497d78281a1dcf220fe0526d52a75e0a3c13", 0x86}, {&(0x7f0000000880)="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", 0x2b7}], 0x3}}, {{0x0, 0xffffffffffffff74, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1a000, 0x0) 04:08:06 executing program 1: io_setup(0x1, &(0x7f0000000000)) io_setup(0xafdd, &(0x7f00000000c0)=0x0) io_setup(0x0, &(0x7f0000000c00)=0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$eventfd(r2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) io_pgetevents(r1, 0x7fffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000500)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[{}, {}, {}], 0x0, 0x0, '\x00', 0x1, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)) io_destroy(r0) io_setup(0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) [ 206.158190][ T4545] Bluetooth: hci3: command 0x0419 tx timeout 04:08:06 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000006a00020029bd7000fddbdf25617c07000000000000db7a0a00000000000000040059e59fba72c7140cfdcc14ec8b46c0090008000100000000004f6c22daa2", @ANYRES32=0x0, @ANYBLOB="080001000000000004000900"], 0x48}}, 0x8840) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) r4 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) umount2(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettaction={0x1c, 0x32, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdf9f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 04:08:07 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x1}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x20000002, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1e06b7e8a1eb013cdf1be03e940099a4058554642325fa2d62cbd33121d1dda1c2cba2ab5ddf84c9a99332a0aa1b88862081812e1b779370bda0e9169bcabd4e5044fbe61e0d1d96fda94cc50ecf6a6b0c703f5d91a0c02bfa16234b30c26bf7bfee3c68682095f32ff2776d2985a81703f634fe3abaa9ac0aeed3b3148b1aef0ec1efb871a8500338e9de6b4ee1e17eb5847937a83b0358ef8ab6692d2b1538741dab7a9f609e75b6e55a120da346312cab143f90ebb6da62d0fc550b733200c75f715ce01bb70bc23e70dd262ef91215822298fee9709e2d1ea327aa8a6a4314e9b91dbf58300a7917cc3e4f26283937694d3a4c146", 0x8056a}, {&(0x7f0000000780)="c18af54e7facd931e259615d3a032b165331b3657a111037325376ecdcd7cdb565e908e3f8ed1619f36e1d9542c99c64220b90530a9af19cdb598be1b47a3270b2a1164ebd669a64db6fe8c93739fd45325fe94f075eb0f9b0e9f9abbc149128d06043eb7600000000865c2d52eae2c88f2a33646df1d8d300ccdb466c2071b66192d92f3b0a3823c6c46f8baa6b50ee5cfc242f73de00027945540700000000fecb1c7b312558b81c0e6f8c1a0d7dc3000000d414e02f4106a8862cdf838527a4", 0xce}, {&(0x7f0000000040)="c39a00bb15b4d145723f765d602ef1e9ee36", 0x80057}, {&(0x7f00000003c0)="5683eb186eaf89d39dcfafa4e796554c67e389d4526f1202ce7e4b2da420d47a58d28c3a80a467f347ab84023a82b4a6d86659d01f5caf15e20c5d8986f18ef00cafe40e866419b00a2dceff7623c1aa9cb838fa3608f48974b4d78fe37fae1e577235d7af3d3b105f0b77a5da237b80615ed4a95fae798adfb3aa15119146bcda665356e91113231ded3948684b39093f3f8031d652fefc1d77fe94e3fccb4c4086e22fe32f63285d5d6f0faa603609e5ed282499a9c13ba06b99f837eb09ca142dec8b3c2a5e3791f0a7e1ac323f8f9dc521b145ad811a6d4fe37f04497d78281a1dcf220fe0526d52a75e0a3c13", 0x86}, {&(0x7f0000000880)="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", 0x2b7}], 0x3}}, {{0x0, 0xffffffffffffff74, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1a000, 0x0) 04:08:07 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000c00), &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="000d4bb72c1e1cda0e94777ab5fc264780a84b20b4694104e0fd15f2673b4d0332c98654"], 0x1, 0xbee, &(0x7f0000000cc0)="$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") ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c3c42, 0x0) write(r5, &(0x7f0000004200)="74efc4c419fdb8d66b12a7bbf371d056ad6f01e9762d70401d1c9d331b48b925e9e6a7759abb206b9b18bfc3f3f96adb2b37c2121ef21e91bac768dd33df29649da1d82e826a55c4d620b6f502daee26004b741c951d528d806efbe00c439f2df46d3adf8be24e280b948a49afd17d56437c6e752d84f99bf37a88f0c54488dd13b848f2381d7d2aecb68ed16762e4a3c1a847565364b9f1af92c9c89e06e89fe6179cb7078a742cb968a9f09cc690dc473df29d6ad9af5879e9a2618c63702117a3a63d3a4236baee86f5f452e9663a795306dabb97db884348ab437bdc13b7cfb03eff1cf216f09d21078e1852fc7c96413d9d65c5", 0xf6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mknod(&(0x7f00000004c0)='./bus\x00', 0x0, 0x1) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@union={0x3}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000100)=""/145, 0x28, 0x91, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r7, 0x20, &(0x7f0000000440)={0x0, 0x29, 0x0, 0x0}}, 0x10) ftruncate(0xffffffffffffffff, 0x0) write$cgroup_type(r6, &(0x7f0000000200), 0x175d900f) getegid() r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) writev(r8, &(0x7f00000005c0), 0x0) 04:08:07 executing program 1: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0xc00, &(0x7f00000000c0)=ANY=[@ANYBLOB='codepage=850,shortname=win95,nfs,nonumtail=0,iocharset=cp857,shortname=win95,utf8=0,quiet,shortname=win95,uni_xlate=0,uni_xlate=0,shortname=winnt,iocharset=cp95 ,rodir,shortname=lower,\x00'], 0x1, 0x268, &(0x7f0000000600)="$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") [ 206.360895][ T5364] loop1: detected capacity change from 0 to 256 [ 206.471342][ T5368] loop0: detected capacity change from 0 to 2048 [ 206.476784][ T5368] ======================================================= [ 206.476784][ T5368] WARNING: The mand mount option has been deprecated and [ 206.476784][ T5368] and is ignored by this kernel. Remove the mand [ 206.476784][ T5368] option from the mount to silence this warning. [ 206.476784][ T5368] ======================================================= [ 206.509453][ T5368] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.518163][ T5364] FAT-fs (loop1): IO charset cp95 not found 04:08:07 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x1}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x20000002, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1e06b7e8a1eb013cdf1be03e940099a4058554642325fa2d62cbd33121d1dda1c2cba2ab5ddf84c9a99332a0aa1b88862081812e1b779370bda0e9169bcabd4e5044fbe61e0d1d96fda94cc50ecf6a6b0c703f5d91a0c02bfa16234b30c26bf7bfee3c68682095f32ff2776d2985a81703f634fe3abaa9ac0aeed3b3148b1aef0ec1efb871a8500338e9de6b4ee1e17eb5847937a83b0358ef8ab6692d2b1538741dab7a9f609e75b6e55a120da346312cab143f90ebb6da62d0fc550b733200c75f715ce01bb70bc23e70dd262ef91215822298fee9709e2d1ea327aa8a6a4314e9b91dbf58300a7917cc3e4f26283937694d3a4c146", 0x8056a}, {&(0x7f0000000780)="c18af54e7facd931e259615d3a032b165331b3657a111037325376ecdcd7cdb565e908e3f8ed1619f36e1d9542c99c64220b90530a9af19cdb598be1b47a3270b2a1164ebd669a64db6fe8c93739fd45325fe94f075eb0f9b0e9f9abbc149128d06043eb7600000000865c2d52eae2c88f2a33646df1d8d300ccdb466c2071b66192d92f3b0a3823c6c46f8baa6b50ee5cfc242f73de00027945540700000000fecb1c7b312558b81c0e6f8c1a0d7dc3000000d414e02f4106a8862cdf838527a4", 0xce}, {&(0x7f0000000040)="c39a00bb15b4d145723f765d602ef1e9ee36", 0x80057}, {&(0x7f00000003c0)="5683eb186eaf89d39dcfafa4e796554c67e389d4526f1202ce7e4b2da420d47a58d28c3a80a467f347ab84023a82b4a6d86659d01f5caf15e20c5d8986f18ef00cafe40e866419b00a2dceff7623c1aa9cb838fa3608f48974b4d78fe37fae1e577235d7af3d3b105f0b77a5da237b80615ed4a95fae798adfb3aa15119146bcda665356e91113231ded3948684b39093f3f8031d652fefc1d77fe94e3fccb4c4086e22fe32f63285d5d6f0faa603609e5ed282499a9c13ba06b99f837eb09ca142dec8b3c2a5e3791f0a7e1ac323f8f9dc521b145ad811a6d4fe37f04497d78281a1dcf220fe0526d52a75e0a3c13", 0x86}, {&(0x7f0000000880)="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", 0x2b7}], 0x3}}, {{0x0, 0xffffffffffffff74, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1a000, 0x0) [ 206.728789][ T5367] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 04:08:07 executing program 2: set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x4) fsopen(&(0x7f00000051c0)='exfat\x00', 0x0) 04:08:07 executing program 1: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0xc00, &(0x7f00000000c0)=ANY=[@ANYBLOB='codepage=850,shortname=win95,nfs,nonumtail=0,iocharset=cp857,shortname=win95,utf8=0,quiet,shortname=win95,uni_xlate=0,uni_xlate=0,shortname=winnt,iocharset=cp95 ,rodir,shortname=lower,\x00'], 0x1, 0x268, &(0x7f0000000600)="$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") 04:08:07 executing program 2: r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000200)=0x3, 0x4) connect$inet(r0, &(0x7f0000000240)={0x10, 0x2}, 0x10) getsockopt$inet6_tcp_buf(r0, 0x6, 0x23, &(0x7f00000004c0)=""/179, &(0x7f0000000580)=0xb3) [ 206.993620][ T5379] loop1: detected capacity change from 0 to 256 [ 207.057913][ T5379] FAT-fs (loop1): IO charset cp95 not found 04:08:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0xc07}, 0x14}}, 0x0) 04:08:08 executing program 1: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0xc00, &(0x7f00000000c0)=ANY=[@ANYBLOB='codepage=850,shortname=win95,nfs,nonumtail=0,iocharset=cp857,shortname=win95,utf8=0,quiet,shortname=win95,uni_xlate=0,uni_xlate=0,shortname=winnt,iocharset=cp95 ,rodir,shortname=lower,\x00'], 0x1, 0x268, &(0x7f0000000600)="$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") 04:08:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000004", @ANYRESHEX=0xee00, @ANYBLOB=',shortname=lower,uni_xlate=0,rodir,shortname=win95,iocharset=macturkish,\x00'], 0x1, 0x57f, &(0x7f0000000640)="$eJzs2jFrE2EYB/DHtrbF5TI4icOBi1NJu1s8pIViQKjcoJOHTaHkQuECgXawbn4UwY/jR3DwM3QoRJoLMdHoovXU/H4Q3j+8+Yfnlrw3vK/u93tHp4PjT+8/x+bjNNYiYuUyohUrsRq1W5N1ZZzXY9bbAAD+NYeHRdb0DNysqsqK63e4je928g+NDAQAAAAAAAAAAMAvc/8fAJaP+///v6rKivXJ+9s89/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5lyORsnoJ5+m5wMAfj/nPwAsH+c/ACwf5z8ALJ/nL14+zTqdvcM03Yzovxvmw7xe6/3sOE6ijG60I4mriNFUnfcPOnvtdKwVu/2LSf9imK/O97cjidbi/nbdT+f7t+PObH8nkri7uL+zsL8eDx/M9LciiY+v4zTKOIrr7tf+m+00ffKs801/Y/w9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWCZb6VQrHvUvhvkwj7heV+v9rR/t1/3sOE6ijG60I4mriNFUnfcPOnvtyQ/E7mx/Le6tNfvsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLzB2XmvKMtuJQiCMA1N/zMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABNGZyd94qy7FaDpicBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4Wg7PzXlGW3eoGQ9PPCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/3JQAA//9FFu9W") lchown(&(0x7f00000004c0)='./file1\x00', 0xee01, 0x0) 04:08:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000006a00020029bd7000fddbdf25617c07000000000000db7a0a00000000000000040059e59fba72c7140cfdcc14ec8b46c0090008000100000000004f6c22daa2", @ANYRES32=0x0, @ANYBLOB="080001000000000004000900"], 0x48}}, 0x8840) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) r4 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) umount2(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettaction={0x1c, 0x32, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdf9f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) [ 207.377483][ T5386] loop1: detected capacity change from 0 to 256 [ 207.395790][ T5387] loop0: detected capacity change from 0 to 2048 04:08:08 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000006a00020029bd7000fddbdf25617c07000000000000db7a0a00000000000000040059e59fba72c7140cfdcc14ec8b46c0090008000100000000004f6c22daa2", @ANYRES32=0x0, @ANYBLOB="080001000000000004000900"], 0x48}}, 0x8840) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) r4 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) umount2(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettaction={0x1c, 0x32, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdf9f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) [ 207.452904][ T5386] FAT-fs (loop1): IO charset cp95 not found 04:08:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000004", @ANYRESHEX=0xee00, @ANYBLOB=',shortname=lower,uni_xlate=0,rodir,shortname=win95,iocharset=macturkish,\x00'], 0x1, 0x57f, &(0x7f0000000640)="$eJzs2jFrE2EYB/DHtrbF5TI4icOBi1NJu1s8pIViQKjcoJOHTaHkQuECgXawbn4UwY/jR3DwM3QoRJoLMdHoovXU/H4Q3j+8+Yfnlrw3vK/u93tHp4PjT+8/x+bjNNYiYuUyohUrsRq1W5N1ZZzXY9bbAAD+NYeHRdb0DNysqsqK63e4je928g+NDAQAAAAAAAAAAMAvc/8fAJaP+///v6rKivXJ+9s89/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5lyORsnoJ5+m5wMAfj/nPwAsH+c/ACwf5z8ALJ/nL14+zTqdvcM03Yzovxvmw7xe6/3sOE6ijG60I4mriNFUnfcPOnvtdKwVu/2LSf9imK/O97cjidbi/nbdT+f7t+PObH8nkri7uL+zsL8eDx/M9LciiY+v4zTKOIrr7tf+m+00ffKs801/Y/w9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWCZb6VQrHvUvhvkwj7heV+v9rR/t1/3sOE6ijG60I4mriNFUnfcPOnvtyQ/E7mx/Le6tNfvsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLzB2XmvKMtuJQiCMA1N/zMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABNGZyd94qy7FaDpicBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4Wg7PzXlGW3eoGQ9PPCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/3JQAA//9FFu9W") lchown(&(0x7f00000004c0)='./file1\x00', 0xee01, 0x0) 04:08:08 executing program 1: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0xc00, &(0x7f00000000c0)=ANY=[@ANYBLOB='codepage=850,shortname=win95,nfs,nonumtail=0,iocharset=cp857,shortname=win95,utf8=0,quiet,shortname=win95,uni_xlate=0,uni_xlate=0,shortname=winnt,iocharset=cp95 ,rodir,shortname=lower,\x00'], 0x1, 0x268, &(0x7f0000000600)="$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") [ 207.556843][ T5398] loop0: detected capacity change from 0 to 2048 [ 207.556915][ T5402] loop1: detected capacity change from 0 to 256 04:08:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000004", @ANYRESHEX=0xee00, @ANYBLOB=',shortname=lower,uni_xlate=0,rodir,shortname=win95,iocharset=macturkish,\x00'], 0x1, 0x57f, &(0x7f0000000640)="$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") lchown(&(0x7f00000004c0)='./file1\x00', 0xee01, 0x0) [ 207.713123][ T5402] FAT-fs (loop1): IO charset cp95 not found [ 207.754098][ T5410] loop0: detected capacity change from 0 to 2048 04:08:08 executing program 0: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000004", @ANYRESHEX=0xee00, @ANYBLOB=',shortname=lower,uni_xlate=0,rodir,shortname=win95,iocharset=macturkish,\x00'], 0x1, 0x57f, &(0x7f0000000640)="$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") lchown(&(0x7f00000004c0)='./file1\x00', 0xee01, 0x0) 04:08:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000004", @ANYRESHEX=0xee00, @ANYBLOB=',shortname=lower,uni_xlate=0,rodir,shortname=win95,iocharset=macturkish,\x00'], 0x1, 0x57f, &(0x7f0000000640)="$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") lchown(&(0x7f00000004c0)='./file1\x00', 0xee01, 0x0) [ 207.882406][ T5414] loop0: detected capacity change from 0 to 2048 [ 207.921285][ T5416] loop1: detected capacity change from 0 to 2048 04:08:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000006a00020029bd7000fddbdf25617c07000000000000db7a0a00000000000000040059e59fba72c7140cfdcc14ec8b46c0090008000100000000004f6c22daa2", @ANYRES32=0x0, @ANYBLOB="080001000000000004000900"], 0x48}}, 0x8840) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) r4 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) umount2(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettaction={0x1c, 0x32, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdf9f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 04:08:09 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000006a00020029bd7000fddbdf25617c07000000000000db7a0a00000000000000040059e59fba72c7140cfdcc14ec8b46c0090008000100000000004f6c22daa2", @ANYRES32=0x0, @ANYBLOB="080001000000000004000900"], 0x48}}, 0x8840) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) r4 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) umount2(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettaction={0x1c, 0x32, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdf9f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 04:08:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000004", @ANYRESHEX=0xee00, @ANYBLOB=',shortname=lower,uni_xlate=0,rodir,shortname=win95,iocharset=macturkish,\x00'], 0x1, 0x57f, &(0x7f0000000640)="$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") lchown(&(0x7f00000004c0)='./file1\x00', 0xee01, 0x0) 04:08:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000006a00020029bd7000fddbdf25617c07000000000000db7a0a00000000000000040059e59fba72c7140cfdcc14ec8b46c0090008000100000000004f6c22daa2", @ANYRES32=0x0, @ANYBLOB="080001000000000004000900"], 0x48}}, 0x8840) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) r4 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) umount2(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettaction={0x1c, 0x32, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdf9f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) [ 208.701568][ T5432] loop1: detected capacity change from 0 to 2048 04:08:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000004", @ANYRESHEX=0xee00, @ANYBLOB=',shortname=lower,uni_xlate=0,rodir,shortname=win95,iocharset=macturkish,\x00'], 0x1, 0x57f, &(0x7f0000000640)="$eJzs2jFrE2EYB/DHtrbF5TI4icOBi1NJu1s8pIViQKjcoJOHTaHkQuECgXawbn4UwY/jR3DwM3QoRJoLMdHoovXU/H4Q3j+8+Yfnlrw3vK/u93tHp4PjT+8/x+bjNNYiYuUyohUrsRq1W5N1ZZzXY9bbAAD+NYeHRdb0DNysqsqK63e4je928g+NDAQAAAAAAAAAAMAvc/8fAJaP+///v6rKivXJ+9s89/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5lyORsnoJ5+m5wMAfj/nPwAsH+c/ACwf5z8ALJ/nL14+zTqdvcM03Yzovxvmw7xe6/3sOE6ijG60I4mriNFUnfcPOnvtdKwVu/2LSf9imK/O97cjidbi/nbdT+f7t+PObH8nkri7uL+zsL8eDx/M9LciiY+v4zTKOIrr7tf+m+00ffKs801/Y/w9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWCZb6VQrHvUvhvkwj7heV+v9rR/t1/3sOE6ijG60I4mriNFUnfcPOnvtyQ/E7mx/Le6tNfvsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLzB2XmvKMtuJQiCMA1N/zMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABNGZyd94qy7FaDpicBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4Wg7PzXlGW3eoGQ9PPCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/3JQAA//9FFu9W") lchown(&(0x7f00000004c0)='./file1\x00', 0xee01, 0x0) [ 208.783987][ T5440] loop1: detected capacity change from 0 to 2048 04:08:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000006a00020029bd7000fddbdf25617c07000000000000db7a0a00000000000000040059e59fba72c7140cfdcc14ec8b46c0090008000100000000004f6c22daa2", @ANYRES32=0x0, @ANYBLOB="080001000000000004000900"], 0x48}}, 0x8840) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) r4 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) umount2(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettaction={0x1c, 0x32, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdf9f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 04:08:09 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000006a00020029bd7000fddbdf25617c07000000000000db7a0a00000000000000040059e59fba72c7140cfdcc14ec8b46c0090008000100000000004f6c22daa2", @ANYRES32=0x0, @ANYBLOB="080001000000000004000900"], 0x48}}, 0x8840) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) r4 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) umount2(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettaction={0x1c, 0x32, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdf9f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 04:08:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000006a00020029bd7000fddbdf25617c07000000000000db7a0a00000000000000040059e59fba72c7140cfdcc14ec8b46c0090008000100000000004f6c22daa2", @ANYRES32=0x0, @ANYBLOB="080001000000000004000900"], 0x48}}, 0x8840) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) r4 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) umount2(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettaction={0x1c, 0x32, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdf9f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 04:08:10 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000006a00020029bd7000fddbdf25617c07000000000000db7a0a00000000000000040059e59fba72c7140cfdcc14ec8b46c0090008000100000000004f6c22daa2", @ANYRES32=0x0, @ANYBLOB="080001000000000004000900"], 0x48}}, 0x8840) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) r4 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) umount2(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettaction={0x1c, 0x32, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdf9f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 04:08:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000006a00020029bd7000fddbdf25617c07000000000000db7a0a00000000000000040059e59fba72c7140cfdcc14ec8b46c0090008000100000000004f6c22daa2", @ANYRES32=0x0, @ANYBLOB="080001000000000004000900"], 0x48}}, 0x8840) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) r4 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) umount2(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettaction={0x1c, 0x32, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdf9f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 04:08:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000006a00020029bd7000fddbdf25617c07000000000000db7a0a00000000000000040059e59fba72c7140cfdcc14ec8b46c0090008000100000000004f6c22daa2", @ANYRES32=0x0, @ANYBLOB="080001000000000004000900"], 0x48}}, 0x8840) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) r4 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) umount2(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettaction={0x1c, 0x32, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdf9f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 04:08:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000006a00020029bd7000fddbdf25617c07000000000000db7a0a00000000000000040059e59fba72c7140cfdcc14ec8b46c0090008000100000000004f6c22daa2", @ANYRES32=0x0, @ANYBLOB="080001000000000004000900"], 0x48}}, 0x8840) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) r4 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) umount2(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettaction={0x1c, 0x32, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdf9f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 04:08:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000500)={0x6, 'pimreg1\x00', {0x6}, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000340)="57001bbb80d9b269fe5bbfa2647a533e2611a4a043e78c59c5936752328943e42cd4281807af5a0d69fc8f80279f540548d20f3ab7ab16c80abefcad8d42b230a6e0b24247cf133b2041319a56cc70b837fb7a082c12521ac9e23d188f169c6bf6686830f319e90fae44a4a5b4df8e154330693d3ff0b695339a0d832a884e42ef8fc44d41d10ca6cb075553018cd6de4be4a278b4484cf7f35d6e2ea6a560f409e2fc30afa76d695f07f5121dbf49876ed8e50390786d59af29ae624f04628841cb0a9ca39f", 0xc6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) [ 211.145468][ T39] kauditd_printk_skb: 59 callbacks suppressed [ 211.145480][ T39] audit: type=1400 audit(1676520491.820:167): avc: denied { ioctl } for pid=5526 comm="syz-executor.3" path="socket:[32765]" dev="sockfs" ino=32765 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.379807][ T39] audit: type=1804 audit(1676520492.060:168): pid=5531 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir4235127749/syzkaller.FeKCwL/18/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 04:08:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000006a00020029bd7000fddbdf25617c07000000000000db7a0a00000000000000040059e59fba72c7140cfdcc14ec8b46c0090008000100000000004f6c22daa2", @ANYRES32=0x0, @ANYBLOB="080001000000000004000900"], 0x48}}, 0x8840) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) r4 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) umount2(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettaction={0x1c, 0x32, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdf9f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) 04:08:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000500)={0x6, 'pimreg1\x00', {0x6}, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000340)="57001bbb80d9b269fe5bbfa2647a533e2611a4a043e78c59c5936752328943e42cd4281807af5a0d69fc8f80279f540548d20f3ab7ab16c80abefcad8d42b230a6e0b24247cf133b2041319a56cc70b837fb7a082c12521ac9e23d188f169c6bf6686830f319e90fae44a4a5b4df8e154330693d3ff0b695339a0d832a884e42ef8fc44d41d10ca6cb075553018cd6de4be4a278b4484cf7f35d6e2ea6a560f409e2fc30afa76d695f07f5121dbf49876ed8e50390786d59af29ae624f04628841cb0a9ca39f", 0xc6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 04:08:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000006a00020029bd7000fddbdf25617c07000000000000db7a0a00000000000000040059e59fba72c7140cfdcc14ec8b46c0090008000100000000004f6c22daa2", @ANYRES32=0x0, @ANYBLOB="080001000000000004000900"], 0x48}}, 0x8840) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) r4 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) umount2(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettaction={0x1c, 0x32, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdf9f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) [ 212.130258][ T39] audit: type=1804 audit(1676520492.810:169): pid=5538 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir4235127749/syzkaller.FeKCwL/19/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 04:08:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000500)={0x6, 'pimreg1\x00', {0x6}, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000340)="57001bbb80d9b269fe5bbfa2647a533e2611a4a043e78c59c5936752328943e42cd4281807af5a0d69fc8f80279f540548d20f3ab7ab16c80abefcad8d42b230a6e0b24247cf133b2041319a56cc70b837fb7a082c12521ac9e23d188f169c6bf6686830f319e90fae44a4a5b4df8e154330693d3ff0b695339a0d832a884e42ef8fc44d41d10ca6cb075553018cd6de4be4a278b4484cf7f35d6e2ea6a560f409e2fc30afa76d695f07f5121dbf49876ed8e50390786d59af29ae624f04628841cb0a9ca39f", 0xc6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) [ 212.351372][ T39] audit: type=1804 audit(1676520493.020:170): pid=5551 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir4235127749/syzkaller.FeKCwL/20/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 04:08:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000500)={0x6, 'pimreg1\x00', {0x6}, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000340)="57001bbb80d9b269fe5bbfa2647a533e2611a4a043e78c59c5936752328943e42cd4281807af5a0d69fc8f80279f540548d20f3ab7ab16c80abefcad8d42b230a6e0b24247cf133b2041319a56cc70b837fb7a082c12521ac9e23d188f169c6bf6686830f319e90fae44a4a5b4df8e154330693d3ff0b695339a0d832a884e42ef8fc44d41d10ca6cb075553018cd6de4be4a278b4484cf7f35d6e2ea6a560f409e2fc30afa76d695f07f5121dbf49876ed8e50390786d59af29ae624f04628841cb0a9ca39f", 0xc6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) [ 212.606216][ T39] audit: type=1804 audit(1676520493.280:171): pid=5565 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3489564355/syzkaller.r04R1u/16/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 04:08:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000500)={0x6, 'pimreg1\x00', {0x6}, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000340)="57001bbb80d9b269fe5bbfa2647a533e2611a4a043e78c59c5936752328943e42cd4281807af5a0d69fc8f80279f540548d20f3ab7ab16c80abefcad8d42b230a6e0b24247cf133b2041319a56cc70b837fb7a082c12521ac9e23d188f169c6bf6686830f319e90fae44a4a5b4df8e154330693d3ff0b695339a0d832a884e42ef8fc44d41d10ca6cb075553018cd6de4be4a278b4484cf7f35d6e2ea6a560f409e2fc30afa76d695f07f5121dbf49876ed8e50390786d59af29ae624f04628841cb0a9ca39f", 0xc6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 04:08:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000500)={0x6, 'pimreg1\x00', {0x6}, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000340)="57001bbb80d9b269fe5bbfa2647a533e2611a4a043e78c59c5936752328943e42cd4281807af5a0d69fc8f80279f540548d20f3ab7ab16c80abefcad8d42b230a6e0b24247cf133b2041319a56cc70b837fb7a082c12521ac9e23d188f169c6bf6686830f319e90fae44a4a5b4df8e154330693d3ff0b695339a0d832a884e42ef8fc44d41d10ca6cb075553018cd6de4be4a278b4484cf7f35d6e2ea6a560f409e2fc30afa76d695f07f5121dbf49876ed8e50390786d59af29ae624f04628841cb0a9ca39f", 0xc6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) [ 213.068191][ T39] audit: type=1804 audit(1676520493.750:172): pid=5574 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir4235127749/syzkaller.FeKCwL/21/cgroup.controllers" dev="sda1" ino=1154 res=1 errno=0 [ 213.107262][ T39] audit: type=1804 audit(1676520493.780:173): pid=5576 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3489564355/syzkaller.r04R1u/17/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 04:08:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000500)={0x6, 'pimreg1\x00', {0x6}, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000340)="57001bbb80d9b269fe5bbfa2647a533e2611a4a043e78c59c5936752328943e42cd4281807af5a0d69fc8f80279f540548d20f3ab7ab16c80abefcad8d42b230a6e0b24247cf133b2041319a56cc70b837fb7a082c12521ac9e23d188f169c6bf6686830f319e90fae44a4a5b4df8e154330693d3ff0b695339a0d832a884e42ef8fc44d41d10ca6cb075553018cd6de4be4a278b4484cf7f35d6e2ea6a560f409e2fc30afa76d695f07f5121dbf49876ed8e50390786d59af29ae624f04628841cb0a9ca39f", 0xc6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 04:08:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000500)={0x6, 'pimreg1\x00', {0x6}, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000340)="57001bbb80d9b269fe5bbfa2647a533e2611a4a043e78c59c5936752328943e42cd4281807af5a0d69fc8f80279f540548d20f3ab7ab16c80abefcad8d42b230a6e0b24247cf133b2041319a56cc70b837fb7a082c12521ac9e23d188f169c6bf6686830f319e90fae44a4a5b4df8e154330693d3ff0b695339a0d832a884e42ef8fc44d41d10ca6cb075553018cd6de4be4a278b4484cf7f35d6e2ea6a560f409e2fc30afa76d695f07f5121dbf49876ed8e50390786d59af29ae624f04628841cb0a9ca39f", 0xc6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 04:08:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000500)={0x6, 'pimreg1\x00', {0x6}, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000340)="57001bbb80d9b269fe5bbfa2647a533e2611a4a043e78c59c5936752328943e42cd4281807af5a0d69fc8f80279f540548d20f3ab7ab16c80abefcad8d42b230a6e0b24247cf133b2041319a56cc70b837fb7a082c12521ac9e23d188f169c6bf6686830f319e90fae44a4a5b4df8e154330693d3ff0b695339a0d832a884e42ef8fc44d41d10ca6cb075553018cd6de4be4a278b4484cf7f35d6e2ea6a560f409e2fc30afa76d695f07f5121dbf49876ed8e50390786d59af29ae624f04628841cb0a9ca39f", 0xc6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) [ 213.608832][ T39] audit: type=1804 audit(1676520494.290:174): pid=5580 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1189026994/syzkaller.coIWsB/15/cgroup.controllers" dev="sda1" ino=1156 res=1 errno=0 04:08:14 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000006a00020029bd7000fddbdf25617c07000000000000db7a0a00000000000000040059e59fba72c7140cfdcc14ec8b46c0090008000100000000004f6c22daa2", @ANYRES32=0x0, @ANYBLOB="080001000000000004000900"], 0x48}}, 0x8840) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40000) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) r4 = syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) umount2(0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000801) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@gettaction={0x1c, 0x32, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xdf9f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x90) ioctl$KVM_RUN(r8, 0xae80, 0x0) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x2811fdff) [ 213.638022][ T39] audit: type=1804 audit(1676520494.290:175): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3489564355/syzkaller.r04R1u/18/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0 [ 213.736352][ T39] audit: type=1804 audit(1676520494.410:176): pid=5585 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir4235127749/syzkaller.FeKCwL/22/cgroup.controllers" dev="sda1" ino=1154 res=1 errno=0 04:08:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000500)={0x6, 'pimreg1\x00', {0x6}, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000340)="57001bbb80d9b269fe5bbfa2647a533e2611a4a043e78c59c5936752328943e42cd4281807af5a0d69fc8f80279f540548d20f3ab7ab16c80abefcad8d42b230a6e0b24247cf133b2041319a56cc70b837fb7a082c12521ac9e23d188f169c6bf6686830f319e90fae44a4a5b4df8e154330693d3ff0b695339a0d832a884e42ef8fc44d41d10ca6cb075553018cd6de4be4a278b4484cf7f35d6e2ea6a560f409e2fc30afa76d695f07f5121dbf49876ed8e50390786d59af29ae624f04628841cb0a9ca39f", 0xc6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 04:08:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000500)={0x6, 'pimreg1\x00', {0x6}, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000340)="57001bbb80d9b269fe5bbfa2647a533e2611a4a043e78c59c5936752328943e42cd4281807af5a0d69fc8f80279f540548d20f3ab7ab16c80abefcad8d42b230a6e0b24247cf133b2041319a56cc70b837fb7a082c12521ac9e23d188f169c6bf6686830f319e90fae44a4a5b4df8e154330693d3ff0b695339a0d832a884e42ef8fc44d41d10ca6cb075553018cd6de4be4a278b4484cf7f35d6e2ea6a560f409e2fc30afa76d695f07f5121dbf49876ed8e50390786d59af29ae624f04628841cb0a9ca39f", 0xc6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 04:08:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000500)={0x6, 'pimreg1\x00', {0x6}, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000340)="57001bbb80d9b269fe5bbfa2647a533e2611a4a043e78c59c5936752328943e42cd4281807af5a0d69fc8f80279f540548d20f3ab7ab16c80abefcad8d42b230a6e0b24247cf133b2041319a56cc70b837fb7a082c12521ac9e23d188f169c6bf6686830f319e90fae44a4a5b4df8e154330693d3ff0b695339a0d832a884e42ef8fc44d41d10ca6cb075553018cd6de4be4a278b4484cf7f35d6e2ea6a560f409e2fc30afa76d695f07f5121dbf49876ed8e50390786d59af29ae624f04628841cb0a9ca39f", 0xc6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 04:08:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000500)={0x6, 'pimreg1\x00', {0x6}, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000340)="57001bbb80d9b269fe5bbfa2647a533e2611a4a043e78c59c5936752328943e42cd4281807af5a0d69fc8f80279f540548d20f3ab7ab16c80abefcad8d42b230a6e0b24247cf133b2041319a56cc70b837fb7a082c12521ac9e23d188f169c6bf6686830f319e90fae44a4a5b4df8e154330693d3ff0b695339a0d832a884e42ef8fc44d41d10ca6cb075553018cd6de4be4a278b4484cf7f35d6e2ea6a560f409e2fc30afa76d695f07f5121dbf49876ed8e50390786d59af29ae624f04628841cb0a9ca39f", 0xc6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 04:08:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@ipv4_newroute={0x40, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP={0x14, 0x9, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x3, 0x5, "8d5855b1"}}}}, @RTA_GATEWAY={0x8, 0x4, @multicast2=0xc000180}, @RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0x40}}, 0x0) 04:08:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000500)={0x6, 'pimreg1\x00', {0x6}, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000340)="57001bbb80d9b269fe5bbfa2647a533e2611a4a043e78c59c5936752328943e42cd4281807af5a0d69fc8f80279f540548d20f3ab7ab16c80abefcad8d42b230a6e0b24247cf133b2041319a56cc70b837fb7a082c12521ac9e23d188f169c6bf6686830f319e90fae44a4a5b4df8e154330693d3ff0b695339a0d832a884e42ef8fc44d41d10ca6cb075553018cd6de4be4a278b4484cf7f35d6e2ea6a560f409e2fc30afa76d695f07f5121dbf49876ed8e50390786d59af29ae624f04628841cb0a9ca39f", 0xc6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 04:08:15 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$security_ima(r0, &(0x7f0000000240), &(0x7f0000000100)=ANY=[@ANYBLOB="01"], 0x2, 0x0) 04:08:15 executing program 2: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fchmod(r0, 0x0) 04:08:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000500)={0x6, 'pimreg1\x00', {0x6}, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000340)="57001bbb80d9b269fe5bbfa2647a533e2611a4a043e78c59c5936752328943e42cd4281807af5a0d69fc8f80279f540548d20f3ab7ab16c80abefcad8d42b230a6e0b24247cf133b2041319a56cc70b837fb7a082c12521ac9e23d188f169c6bf6686830f319e90fae44a4a5b4df8e154330693d3ff0b695339a0d832a884e42ef8fc44d41d10ca6cb075553018cd6de4be4a278b4484cf7f35d6e2ea6a560f409e2fc30afa76d695f07f5121dbf49876ed8e50390786d59af29ae624f04628841cb0a9ca39f", 0xc6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 04:08:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891c, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x0, @broadcast}}) 04:08:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x200, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4103fe) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000280)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff054) write$binfmt_elf64(r1, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x6de) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) flistxattr(r5, &(0x7f0000000340)=""/123, 0x7b) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r5, &(0x7f0000000140)="51194c65da67afd751f6a8f829a30c696f22cbd6691b7e92549563f7a27a5c30", &(0x7f00000003c0)=""/230}, 0x20) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) 04:08:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000500)={0x6, 'pimreg1\x00', {0x6}, 0x1000}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000480)={0x0, 0x2, 0x6, 0x1}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r4, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r3, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001"], 0x448}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000340)="57001bbb80d9b269fe5bbfa2647a533e2611a4a043e78c59c5936752328943e42cd4281807af5a0d69fc8f80279f540548d20f3ab7ab16c80abefcad8d42b230a6e0b24247cf133b2041319a56cc70b837fb7a082c12521ac9e23d188f169c6bf6686830f319e90fae44a4a5b4df8e154330693d3ff0b695339a0d832a884e42ef8fc44d41d10ca6cb075553018cd6de4be4a278b4484cf7f35d6e2ea6a560f409e2fc30afa76d695f07f5121dbf49876ed8e50390786d59af29ae624f04628841cb0a9ca39f", 0xc6) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r8, r7, 0x0, 0x10000a006) 04:08:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f625050000000000001ca631ea41e905b80000009c388b57a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x6, 0x20}, {0x9, 0xf7, 0x9}, {}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0xb3}, {0x20}, {0x5}, {0x0, 0x0, 0x6}, {0x2, 0x0, 0x6, '\x00', 0x3}, {0x0, 0x0, 0x0, '\x00', 0x1d}, {0x8}, {0x0, 0xff}, {0x0, 0x0, 0x0, '\x00', 0xf7}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:08:16 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x106, 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) 04:08:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x222, &(0x7f0000000300)="$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") [ 215.873194][ T5642] loop2: detected capacity change from 0 to 128 04:08:16 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x106, 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) 04:08:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x222, &(0x7f0000000300)="$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") 04:08:17 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r1, &(0x7f0000005c00), 0x40000000000037b, 0xff6c) [ 216.380884][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 216.381463][ T39] audit: type=1400 audit(1676520497.060:192): avc: denied { create } for pid=5644 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 216.433002][ T5647] loop2: detected capacity change from 0 to 128 04:08:17 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x106, 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) [ 216.448424][ T39] audit: type=1400 audit(1676520497.060:193): avc: denied { connect } for pid=5644 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 04:08:17 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r1, &(0x7f0000005c00), 0x40000000000037b, 0xff6c) [ 216.478701][ T39] audit: type=1400 audit(1676520497.100:194): avc: denied { write } for pid=5644 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 216.509206][ T39] audit: type=1400 audit(1676520497.120:195): avc: denied { read } for pid=5644 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 04:08:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f625050000000000001ca631ea41e905b80000009c388b57a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x6, 0x20}, {0x9, 0xf7, 0x9}, {}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0xb3}, {0x20}, {0x5}, {0x0, 0x0, 0x6}, {0x2, 0x0, 0x6, '\x00', 0x3}, {0x0, 0x0, 0x0, '\x00', 0x1d}, {0x8}, {0x0, 0xff}, {0x0, 0x0, 0x0, '\x00', 0xf7}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:08:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x222, &(0x7f0000000300)="$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") 04:08:17 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r1, &(0x7f0000005c00), 0x40000000000037b, 0xff6c) 04:08:17 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x106, 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) [ 216.694866][ T5662] loop2: detected capacity change from 0 to 128 04:08:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f625050000000000001ca631ea41e905b80000009c388b57a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x6, 0x20}, {0x9, 0xf7, 0x9}, {}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0xb3}, {0x20}, {0x5}, {0x0, 0x0, 0x6}, {0x2, 0x0, 0x6, '\x00', 0x3}, {0x0, 0x0, 0x0, '\x00', 0x1d}, {0x8}, {0x0, 0xff}, {0x0, 0x0, 0x0, '\x00', 0xf7}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:08:17 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r1, &(0x7f0000005c00), 0x40000000000037b, 0xff6c) 04:08:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x222, &(0x7f0000000300)="$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") 04:08:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f625050000000000001ca631ea41e905b80000009c388b57a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x6, 0x20}, {0x9, 0xf7, 0x9}, {}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0xb3}, {0x20}, {0x5}, {0x0, 0x0, 0x6}, {0x2, 0x0, 0x6, '\x00', 0x3}, {0x0, 0x0, 0x0, '\x00', 0x1d}, {0x8}, {0x0, 0xff}, {0x0, 0x0, 0x0, '\x00', 0xf7}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:08:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f625050000000000001ca631ea41e905b80000009c388b57a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x6, 0x20}, {0x9, 0xf7, 0x9}, {}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0xb3}, {0x20}, {0x5}, {0x0, 0x0, 0x6}, {0x2, 0x0, 0x6, '\x00', 0x3}, {0x0, 0x0, 0x0, '\x00', 0x1d}, {0x8}, {0x0, 0xff}, {0x0, 0x0, 0x0, '\x00', 0xf7}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:08:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f625050000000000001ca631ea41e905b80000009c388b57a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x6, 0x20}, {0x9, 0xf7, 0x9}, {}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0xb3}, {0x20}, {0x5}, {0x0, 0x0, 0x6}, {0x2, 0x0, 0x6, '\x00', 0x3}, {0x0, 0x0, 0x0, '\x00', 0x1d}, {0x8}, {0x0, 0xff}, {0x0, 0x0, 0x0, '\x00', 0xf7}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:08:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f625050000000000001ca631ea41e905b80000009c388b57a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x6, 0x20}, {0x9, 0xf7, 0x9}, {}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0xb3}, {0x20}, {0x5}, {0x0, 0x0, 0x6}, {0x2, 0x0, 0x6, '\x00', 0x3}, {0x0, 0x0, 0x0, '\x00', 0x1d}, {0x8}, {0x0, 0xff}, {0x0, 0x0, 0x0, '\x00', 0xf7}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:08:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f625050000000000001ca631ea41e905b80000009c388b57a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x6, 0x20}, {0x9, 0xf7, 0x9}, {}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0xb3}, {0x20}, {0x5}, {0x0, 0x0, 0x6}, {0x2, 0x0, 0x6, '\x00', 0x3}, {0x0, 0x0, 0x0, '\x00', 0x1d}, {0x8}, {0x0, 0xff}, {0x0, 0x0, 0x0, '\x00', 0xf7}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:08:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f625050000000000001ca631ea41e905b80000009c388b57a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x6, 0x20}, {0x9, 0xf7, 0x9}, {}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0xb3}, {0x20}, {0x5}, {0x0, 0x0, 0x6}, {0x2, 0x0, 0x6, '\x00', 0x3}, {0x0, 0x0, 0x0, '\x00', 0x1d}, {0x8}, {0x0, 0xff}, {0x0, 0x0, 0x0, '\x00', 0xf7}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:08:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f625050000000000001ca631ea41e905b80000009c388b57a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x6, 0x20}, {0x9, 0xf7, 0x9}, {}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0xb3}, {0x20}, {0x5}, {0x0, 0x0, 0x6}, {0x2, 0x0, 0x6, '\x00', 0x3}, {0x0, 0x0, 0x0, '\x00', 0x1d}, {0x8}, {0x0, 0xff}, {0x0, 0x0, 0x0, '\x00', 0xf7}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:08:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f625050000000000001ca631ea41e905b80000009c388b57a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x6, 0x20}, {0x9, 0xf7, 0x9}, {}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0xb3}, {0x20}, {0x5}, {0x0, 0x0, 0x6}, {0x2, 0x0, 0x6, '\x00', 0x3}, {0x0, 0x0, 0x0, '\x00', 0x1d}, {0x8}, {0x0, 0xff}, {0x0, 0x0, 0x0, '\x00', 0xf7}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:08:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f625050000000000001ca631ea41e905b80000009c388b57a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x6, 0x20}, {0x9, 0xf7, 0x9}, {}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0xb3}, {0x20}, {0x5}, {0x0, 0x0, 0x6}, {0x2, 0x0, 0x6, '\x00', 0x3}, {0x0, 0x0, 0x0, '\x00', 0x1d}, {0x8}, {0x0, 0xff}, {0x0, 0x0, 0x0, '\x00', 0xf7}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:08:19 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x36e354f1) 04:08:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYBLOB="bae583bd71f625050000000000001ca631ea41e905b80000009c388b57a73843df00009c8428c2"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000800)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x6, 0x20}, {0x9, 0xf7, 0x9}, {}, {}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0xb3}, {0x20}, {0x5}, {0x0, 0x0, 0x6}, {0x2, 0x0, 0x6, '\x00', 0x3}, {0x0, 0x0, 0x0, '\x00', 0x1d}, {0x8}, {0x0, 0xff}, {0x0, 0x0, 0x0, '\x00', 0xf7}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:08:19 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x49, 0x0, 0x0, 0x0, &(0x7f00000ac000/0x1000)=nil, 0x1000, 0x17, 0x1, {0x0, r0}}, 0x77a) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 04:08:19 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x36e354f1) 04:08:20 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x36e354f1) 04:08:20 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="506a0000000000001e9402005d140000003ed294e2ee538100"/35, @ANYRES32, @ANYBLOB="00000002800000e02a000093000083b3f8da8e8136179d8b1e0000000000ff000023fb4624bf00000000000000000000000008000000000000a0654a960ac3c023fa7c95d622c1cee830949f217acac084847e9048084ce548e176faaed00767dee9c4ad9e1600bef35c5f0551dd06777ab90f7c2bdf11cecfe2b5ea00"/134], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') mount(&(0x7f0000000f80)=ANY=[@ANYBLOB="ff070000ecffffff2721f2a749273fb8aef96b020aa5f5b7ee9db9213ccd70bb968064cdda78231c1a40bc0e39af6c88accf00000000000000542d6ff922b69d489f3e84274292be31d339ac1d4fe0f8d670897d"], &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='adfs\x00', 0x100004, &(0x7f0000000640)='/dev/kvm\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000c80)=[@text16={0x10, &(0x7f0000000c00)="0f011c6766c7442400c7b10000676ec7442402b00000006766c744240600000000670f011c24f30fc7320f0dd465f466b9190200000f320f10b40000baa100ed0f7905260f01c4", 0x47}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xe3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 04:08:20 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x36e354f1) [ 219.425358][ T39] audit: type=1400 audit(1676520500.100:196): avc: denied { wake_alarm } for pid=5737 comm="syz-executor.3" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 04:08:20 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x36e354f1) 04:08:20 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x36e354f1) [ 219.525593][ T39] audit: type=1400 audit(1676520500.200:197): avc: denied { mount } for pid=5737 comm="syz-executor.3" name="/" dev="rpc_pipefs" ino=35580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 219.860736][ T39] audit: type=1400 audit(1676520500.540:198): avc: denied { getopt } for pid=5737 comm="syz-executor.3" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.933081][ T5740] x_tables: duplicate underflow at hook 1 04:08:21 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x36e354f1) 04:08:21 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x49, 0x0, 0x0, 0x0, &(0x7f00000ac000/0x1000)=nil, 0x1000, 0x17, 0x1, {0x0, r0}}, 0x77a) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 04:08:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="506a0000000000001e9402005d140000003ed294e2ee538100"/35, @ANYRES32, @ANYBLOB="00000002800000e02a000093000083b3f8da8e8136179d8b1e0000000000ff000023fb4624bf00000000000000000000000008000000000000a0654a960ac3c023fa7c95d622c1cee830949f217acac084847e9048084ce548e176faaed00767dee9c4ad9e1600bef35c5f0551dd06777ab90f7c2bdf11cecfe2b5ea00"/134], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') mount(&(0x7f0000000f80)=ANY=[@ANYBLOB="ff070000ecffffff2721f2a749273fb8aef96b020aa5f5b7ee9db9213ccd70bb968064cdda78231c1a40bc0e39af6c88accf00000000000000542d6ff922b69d489f3e84274292be31d339ac1d4fe0f8d670897d"], &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='adfs\x00', 0x100004, &(0x7f0000000640)='/dev/kvm\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000c80)=[@text16={0x10, &(0x7f0000000c00)="0f011c6766c7442400c7b10000676ec7442402b00000006766c744240600000000670f011c24f30fc7320f0dd465f466b9190200000f320f10b40000baa100ed0f7905260f01c4", 0x47}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xe3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 04:08:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="506a0000000000001e9402005d140000003ed294e2ee538100"/35, @ANYRES32, @ANYBLOB="00000002800000e02a000093000083b3f8da8e8136179d8b1e0000000000ff000023fb4624bf00000000000000000000000008000000000000a0654a960ac3c023fa7c95d622c1cee830949f217acac084847e9048084ce548e176faaed00767dee9c4ad9e1600bef35c5f0551dd06777ab90f7c2bdf11cecfe2b5ea00"/134], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') mount(&(0x7f0000000f80)=ANY=[@ANYBLOB="ff070000ecffffff2721f2a749273fb8aef96b020aa5f5b7ee9db9213ccd70bb968064cdda78231c1a40bc0e39af6c88accf00000000000000542d6ff922b69d489f3e84274292be31d339ac1d4fe0f8d670897d"], &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='adfs\x00', 0x100004, &(0x7f0000000640)='/dev/kvm\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000c80)=[@text16={0x10, &(0x7f0000000c00)="0f011c6766c7442400c7b10000676ec7442402b00000006766c744240600000000670f011c24f30fc7320f0dd465f466b9190200000f320f10b40000baa100ed0f7905260f01c4", 0x47}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xe3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 04:08:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="506a0000000000001e9402005d140000003ed294e2ee538100"/35, @ANYRES32, @ANYBLOB="00000002800000e02a000093000083b3f8da8e8136179d8b1e0000000000ff000023fb4624bf00000000000000000000000008000000000000a0654a960ac3c023fa7c95d622c1cee830949f217acac084847e9048084ce548e176faaed00767dee9c4ad9e1600bef35c5f0551dd06777ab90f7c2bdf11cecfe2b5ea00"/134], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') mount(&(0x7f0000000f80)=ANY=[@ANYBLOB="ff070000ecffffff2721f2a749273fb8aef96b020aa5f5b7ee9db9213ccd70bb968064cdda78231c1a40bc0e39af6c88accf00000000000000542d6ff922b69d489f3e84274292be31d339ac1d4fe0f8d670897d"], &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='adfs\x00', 0x100004, &(0x7f0000000640)='/dev/kvm\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000c80)=[@text16={0x10, &(0x7f0000000c00)="0f011c6766c7442400c7b10000676ec7442402b00000006766c744240600000000670f011c24f30fc7320f0dd465f466b9190200000f320f10b40000baa100ed0f7905260f01c4", 0x47}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xe3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) [ 220.639648][ T5765] x_tables: duplicate underflow at hook 1 04:08:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="506a0000000000001e9402005d140000003ed294e2ee538100"/35, @ANYRES32, @ANYBLOB="00000002800000e02a000093000083b3f8da8e8136179d8b1e0000000000ff000023fb4624bf00000000000000000000000008000000000000a0654a960ac3c023fa7c95d622c1cee830949f217acac084847e9048084ce548e176faaed00767dee9c4ad9e1600bef35c5f0551dd06777ab90f7c2bdf11cecfe2b5ea00"/134], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') mount(&(0x7f0000000f80)=ANY=[@ANYBLOB="ff070000ecffffff2721f2a749273fb8aef96b020aa5f5b7ee9db9213ccd70bb968064cdda78231c1a40bc0e39af6c88accf00000000000000542d6ff922b69d489f3e84274292be31d339ac1d4fe0f8d670897d"], &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='adfs\x00', 0x100004, &(0x7f0000000640)='/dev/kvm\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000c80)=[@text16={0x10, &(0x7f0000000c00)="0f011c6766c7442400c7b10000676ec7442402b00000006766c744240600000000670f011c24f30fc7320f0dd465f466b9190200000f320f10b40000baa100ed0f7905260f01c4", 0x47}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xe3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) [ 220.809562][ T5784] x_tables: duplicate underflow at hook 1 [ 220.960796][ T5776] x_tables: duplicate underflow at hook 1 [ 221.094423][ T5772] x_tables: duplicate underflow at hook 1 04:08:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="506a0000000000001e9402005d140000003ed294e2ee538100"/35, @ANYRES32, @ANYBLOB="00000002800000e02a000093000083b3f8da8e8136179d8b1e0000000000ff000023fb4624bf00000000000000000000000008000000000000a0654a960ac3c023fa7c95d622c1cee830949f217acac084847e9048084ce548e176faaed00767dee9c4ad9e1600bef35c5f0551dd06777ab90f7c2bdf11cecfe2b5ea00"/134], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') mount(&(0x7f0000000f80)=ANY=[@ANYBLOB="ff070000ecffffff2721f2a749273fb8aef96b020aa5f5b7ee9db9213ccd70bb968064cdda78231c1a40bc0e39af6c88accf00000000000000542d6ff922b69d489f3e84274292be31d339ac1d4fe0f8d670897d"], &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='adfs\x00', 0x100004, &(0x7f0000000640)='/dev/kvm\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000c80)=[@text16={0x10, &(0x7f0000000c00)="0f011c6766c7442400c7b10000676ec7442402b00000006766c744240600000000670f011c24f30fc7320f0dd465f466b9190200000f320f10b40000baa100ed0f7905260f01c4", 0x47}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xe3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 04:08:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="506a0000000000001e9402005d140000003ed294e2ee538100"/35, @ANYRES32, @ANYBLOB="00000002800000e02a000093000083b3f8da8e8136179d8b1e0000000000ff000023fb4624bf00000000000000000000000008000000000000a0654a960ac3c023fa7c95d622c1cee830949f217acac084847e9048084ce548e176faaed00767dee9c4ad9e1600bef35c5f0551dd06777ab90f7c2bdf11cecfe2b5ea00"/134], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') mount(&(0x7f0000000f80)=ANY=[@ANYBLOB="ff070000ecffffff2721f2a749273fb8aef96b020aa5f5b7ee9db9213ccd70bb968064cdda78231c1a40bc0e39af6c88accf00000000000000542d6ff922b69d489f3e84274292be31d339ac1d4fe0f8d670897d"], &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='adfs\x00', 0x100004, &(0x7f0000000640)='/dev/kvm\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000c80)=[@text16={0x10, &(0x7f0000000c00)="0f011c6766c7442400c7b10000676ec7442402b00000006766c744240600000000670f011c24f30fc7320f0dd465f466b9190200000f320f10b40000baa100ed0f7905260f01c4", 0x47}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xe3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) [ 221.274338][ T5794] x_tables: duplicate underflow at hook 1 04:08:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="506a0000000000001e9402005d140000003ed294e2ee538100"/35, @ANYRES32, @ANYBLOB="00000002800000e02a000093000083b3f8da8e8136179d8b1e0000000000ff000023fb4624bf00000000000000000000000008000000000000a0654a960ac3c023fa7c95d622c1cee830949f217acac084847e9048084ce548e176faaed00767dee9c4ad9e1600bef35c5f0551dd06777ab90f7c2bdf11cecfe2b5ea00"/134], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') mount(&(0x7f0000000f80)=ANY=[@ANYBLOB="ff070000ecffffff2721f2a749273fb8aef96b020aa5f5b7ee9db9213ccd70bb968064cdda78231c1a40bc0e39af6c88accf00000000000000542d6ff922b69d489f3e84274292be31d339ac1d4fe0f8d670897d"], &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='adfs\x00', 0x100004, &(0x7f0000000640)='/dev/kvm\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000c80)=[@text16={0x10, &(0x7f0000000c00)="0f011c6766c7442400c7b10000676ec7442402b00000006766c744240600000000670f011c24f30fc7320f0dd465f466b9190200000f320f10b40000baa100ed0f7905260f01c4", 0x47}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xe3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) [ 221.384571][ T5796] x_tables: duplicate underflow at hook 1 04:08:22 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x49, 0x0, 0x0, 0x0, &(0x7f00000ac000/0x1000)=nil, 0x1000, 0x17, 0x1, {0x0, r0}}, 0x77a) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) [ 221.446545][ T5800] x_tables: duplicate underflow at hook 1 04:08:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="506a0000000000001e9402005d140000003ed294e2ee538100"/35, @ANYRES32, @ANYBLOB="00000002800000e02a000093000083b3f8da8e8136179d8b1e0000000000ff000023fb4624bf00000000000000000000000008000000000000a0654a960ac3c023fa7c95d622c1cee830949f217acac084847e9048084ce548e176faaed00767dee9c4ad9e1600bef35c5f0551dd06777ab90f7c2bdf11cecfe2b5ea00"/134], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') mount(&(0x7f0000000f80)=ANY=[@ANYBLOB="ff070000ecffffff2721f2a749273fb8aef96b020aa5f5b7ee9db9213ccd70bb968064cdda78231c1a40bc0e39af6c88accf00000000000000542d6ff922b69d489f3e84274292be31d339ac1d4fe0f8d670897d"], &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='adfs\x00', 0x100004, &(0x7f0000000640)='/dev/kvm\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000c80)=[@text16={0x10, &(0x7f0000000c00)="0f011c6766c7442400c7b10000676ec7442402b00000006766c744240600000000670f011c24f30fc7320f0dd465f466b9190200000f320f10b40000baa100ed0f7905260f01c4", 0x47}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xe3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 04:08:22 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="506a0000000000001e9402005d140000003ed294e2ee538100"/35, @ANYRES32, @ANYBLOB="00000002800000e02a000093000083b3f8da8e8136179d8b1e0000000000ff000023fb4624bf00000000000000000000000008000000000000a0654a960ac3c023fa7c95d622c1cee830949f217acac084847e9048084ce548e176faaed00767dee9c4ad9e1600bef35c5f0551dd06777ab90f7c2bdf11cecfe2b5ea00"/134], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') mount(&(0x7f0000000f80)=ANY=[@ANYBLOB="ff070000ecffffff2721f2a749273fb8aef96b020aa5f5b7ee9db9213ccd70bb968064cdda78231c1a40bc0e39af6c88accf00000000000000542d6ff922b69d489f3e84274292be31d339ac1d4fe0f8d670897d"], &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='adfs\x00', 0x100004, &(0x7f0000000640)='/dev/kvm\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000c80)=[@text16={0x10, &(0x7f0000000c00)="0f011c6766c7442400c7b10000676ec7442402b00000006766c744240600000000670f011c24f30fc7320f0dd465f466b9190200000f320f10b40000baa100ed0f7905260f01c4", 0x47}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xe3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) [ 221.603199][ T5810] x_tables: duplicate underflow at hook 1 04:08:22 executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x49, 0x0, 0x0, 0x0, &(0x7f00000ac000/0x1000)=nil, 0x1000, 0x17, 0x1, {0x0, r0}}, 0x77a) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) [ 221.613320][ T5809] x_tables: duplicate underflow at hook 1 04:08:22 executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x49, 0x0, 0x0, 0x0, &(0x7f00000ac000/0x1000)=nil, 0x1000, 0x17, 0x1, {0x0, r0}}, 0x77a) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 04:08:22 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="506a0000000000001e9402005d140000003ed294e2ee538100"/35, @ANYRES32, @ANYBLOB="00000002800000e02a000093000083b3f8da8e8136179d8b1e0000000000ff000023fb4624bf00000000000000000000000008000000000000a0654a960ac3c023fa7c95d622c1cee830949f217acac084847e9048084ce548e176faaed00767dee9c4ad9e1600bef35c5f0551dd06777ab90f7c2bdf11cecfe2b5ea00"/134], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') mount(&(0x7f0000000f80)=ANY=[@ANYBLOB="ff070000ecffffff2721f2a749273fb8aef96b020aa5f5b7ee9db9213ccd70bb968064cdda78231c1a40bc0e39af6c88accf00000000000000542d6ff922b69d489f3e84274292be31d339ac1d4fe0f8d670897d"], &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='adfs\x00', 0x100004, &(0x7f0000000640)='/dev/kvm\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000c80)=[@text16={0x10, &(0x7f0000000c00)="0f011c6766c7442400c7b10000676ec7442402b00000006766c744240600000000670f011c24f30fc7320f0dd465f466b9190200000f320f10b40000baa100ed0f7905260f01c4", 0x47}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xe3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 04:08:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="506a0000000000001e9402005d140000003ed294e2ee538100"/35, @ANYRES32, @ANYBLOB="00000002800000e02a000093000083b3f8da8e8136179d8b1e0000000000ff000023fb4624bf00000000000000000000000008000000000000a0654a960ac3c023fa7c95d622c1cee830949f217acac084847e9048084ce548e176faaed00767dee9c4ad9e1600bef35c5f0551dd06777ab90f7c2bdf11cecfe2b5ea00"/134], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') mount(&(0x7f0000000f80)=ANY=[@ANYBLOB="ff070000ecffffff2721f2a749273fb8aef96b020aa5f5b7ee9db9213ccd70bb968064cdda78231c1a40bc0e39af6c88accf00000000000000542d6ff922b69d489f3e84274292be31d339ac1d4fe0f8d670897d"], &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='adfs\x00', 0x100004, &(0x7f0000000640)='/dev/kvm\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000c80)=[@text16={0x10, &(0x7f0000000c00)="0f011c6766c7442400c7b10000676ec7442402b00000006766c744240600000000670f011c24f30fc7320f0dd465f466b9190200000f320f10b40000baa100ed0f7905260f01c4", 0x47}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xe3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 04:08:22 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="506a0000000000001e9402005d140000003ed294e2ee538100"/35, @ANYRES32, @ANYBLOB="00000002800000e02a000093000083b3f8da8e8136179d8b1e0000000000ff000023fb4624bf00000000000000000000000008000000000000a0654a960ac3c023fa7c95d622c1cee830949f217acac084847e9048084ce548e176faaed00767dee9c4ad9e1600bef35c5f0551dd06777ab90f7c2bdf11cecfe2b5ea00"/134], &(0x7f0000001b00)='GPL\x00', 0x0, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') mount(&(0x7f0000000f80)=ANY=[@ANYBLOB="ff070000ecffffff2721f2a749273fb8aef96b020aa5f5b7ee9db9213ccd70bb968064cdda78231c1a40bc0e39af6c88accf00000000000000542d6ff922b69d489f3e84274292be31d339ac1d4fe0f8d670897d"], &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='adfs\x00', 0x100004, &(0x7f0000000640)='/dev/kvm\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000001c0)={0x6589}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000c80)=[@text16={0x10, &(0x7f0000000c00)="0f011c6766c7442400c7b10000676ec7442402b00000006766c744240600000000670f011c24f30fc7320f0dd465f466b9190200000f320f10b40000baa100ed0f7905260f01c4", 0x47}], 0x1, 0x0, &(0x7f0000000cc0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xe3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r2) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x2, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 04:08:22 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x49, 0x0, 0x0, 0x0, &(0x7f00000ac000/0x1000)=nil, 0x1000, 0x17, 0x1, {0x0, r0}}, 0x77a) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 04:08:22 executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x49, 0x0, 0x0, 0x0, &(0x7f00000ac000/0x1000)=nil, 0x1000, 0x17, 0x1, {0x0, r0}}, 0x77a) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 04:08:23 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x49, 0x0, 0x0, 0x0, &(0x7f00000ac000/0x1000)=nil, 0x1000, 0x17, 0x1, {0x0, r0}}, 0x77a) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 04:08:23 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x49, 0x0, 0x0, 0x0, &(0x7f00000ac000/0x1000)=nil, 0x1000, 0x17, 0x1, {0x0, r0}}, 0x77a) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 04:08:23 executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="626172726965722c6e6f6175746f5f64615f616c6c6f632c64696f726561645f6e6f6c6f636b2c6f6c64616c6c6f632c00f501293add424f5564620d31dee986aff91abc6b72c5b14976ae8b78588d3ba5770ee190db0262b82a3ac96bf8d5dea39cef09030000000000000002898bbb7c4e4b28546219386220177fa31c1169bab68ff80268443c615b5c036e6b39b692fbf13a7ff3e3bb4e4dff4eec118e2954a5fe289294828f4d8dab342c5703875045d660d6063c9927a0db22b43b5dca660491be34af04d4396ef68f94b304432cdd783f0000008000000000000000"], 0x1, 0x77c, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[], 0x14) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) [ 222.731724][ T5855] loop0: detected capacity change from 0 to 2048 [ 222.738298][ T5855] EXT4-fs: Ignoring removed oldalloc option [ 222.755177][ T5855] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.798218][ T5855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 222.813444][ T39] audit: type=1400 audit(1676520503.490:199): avc: denied { write } for pid=5854 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.842077][ T39] audit: type=1400 audit(1676520503.490:200): avc: denied { add_name } for pid=5854 comm="syz-executor.0" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.858932][ T39] audit: type=1400 audit(1676520503.490:201): avc: denied { create } for pid=5854 comm="syz-executor.0" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 222.880113][ T39] audit: type=1400 audit(1676520503.500:202): avc: denied { read append open } for pid=5854 comm="syz-executor.0" path="/syzkaller-testdir3489564355/syzkaller.r04R1u/33/file0/memory.events" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 222.900753][ T39] audit: type=1400 audit(1676520503.530:203): avc: denied { write } for pid=5854 comm="syz-executor.0" name="memory.events" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 222.977234][ T5174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. 04:08:23 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x49, 0x0, 0x0, 0x0, &(0x7f00000ac000/0x1000)=nil, 0x1000, 0x17, 0x1, {0x0, r0}}, 0x77a) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 04:08:23 executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="626172726965722c6e6f6175746f5f64615f616c6c6f632c64696f726561645f6e6f6c6f636b2c6f6c64616c6c6f632c00f501293add424f5564620d31dee986aff91abc6b72c5b14976ae8b78588d3ba5770ee190db0262b82a3ac96bf8d5dea39cef09030000000000000002898bbb7c4e4b28546219386220177fa31c1169bab68ff80268443c615b5c036e6b39b692fbf13a7ff3e3bb4e4dff4eec118e2954a5fe289294828f4d8dab342c5703875045d660d6063c9927a0db22b43b5dca660491be34af04d4396ef68f94b304432cdd783f0000008000000000000000"], 0x1, 0x77c, &(0x7f0000000f80)="$eJzs3d9rW1UcAPDvTZt1dtNWENx8CghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FHSI4IugwwdBX/bsj/nmqz9e9V/QFxHZmNoNJz5I5abJmq5Jl3b9Me3nA6c9596TnPvNvfeck9xLEsCulUv/ZCIORsT7ScRAY3kSEdl6rjfi+FK9WwvzxTQlsbj46u9Jvc7NhflitDwmta9ROBAR374TcSizut3q7NxEoVwuTTfKw7XJc8PV2bnDZycL46Xx0tTRkdHRI8eeOXZ082L984e5/dc+eOnJL47//fajV977Lonjsb+xrjWOzZKLXOM1yaYv4QovbnZjOyzZ6Q1gQ9JTs2fpLI+DMRA99Vx3uq8JANxP3oyIRQBgl0mM/wCwyzQ/B7i5MF9spp39RGJ7XX8hIvYuxd+8vrm0prdxzW5v/Tpo/81kxfWOJCIGN6H9XER88tXrn6Uptug6JEA7b12MiNODudX9f7LqnoX1eqqLOrk7yvo/2D5fp/OfZ9vN/zK35z/RZv7T1+bc3YhcxJ7W8urzP3N1E5rpKJ3/PZ9dvrftVkv8DYM9jdKD9TlfNjlztlxK+7aHImIosn1peWSNNoZu/HNjxYKe5Wzr/O+PS298mraf/l+ukbna27fy+cYKtcK9xt10/WLEY73t4k9u7/+kw/z3ZJdtvPzcux93WpfGn8bbTCvj3/q7yhYvRzwR7eNvSta8P3G4fjgMNw+KNr78+aP+Tu237v80pe033wtsh3T/968d/2DSer9mdf1tfH954JtO6+4ef/vjf0/yWj3f7DwuFGq16ZGIPckrq5cfWX5ss9ysn8Y/9Hj783+t4z99T3i6y/h7r/32+cbj31pp/GPr2v/rz1y5NdHTqf3u9v9oPTfUWNJN/9ftBt7LawcAAAAAAAAAAAAAAAAAAAAAAAAA3cpExP5IMvnb+Uwmn1/6De9Hoj9TrlRrh85UZqbGov5b2YORzTS/6nKg5ftQRxrfh98sH7mj/HREPBwRH/Y9UC/ni5Xy2E4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN+zr8/n/q176d3joAYMvsvWuNG6Vt2RAAYNvcffwHAP5vjP8AsPsY/wFg9zH+A8DuY/wHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgi508cSJNi38tzBfT8tj52ZmJyvnDY6XqRH5yppgvVqbP5ccrlfFyKV+sTLY89Md2z1euVM6NxtTMheFaqVobrs7OnZqszEzVTp2dLIyXTpWy2xYZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHSvOjs3USiXS9MyMvdr5pfDPx1Yq84lh/HmZ3a6ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4b/g3AAD//9LfLIo=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[], 0x14) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) 04:08:23 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x49, 0x0, 0x0, 0x0, &(0x7f00000ac000/0x1000)=nil, 0x1000, 0x17, 0x1, {0x0, r0}}, 0x77a) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) [ 223.090333][ T5867] loop0: detected capacity change from 0 to 2048 [ 223.097079][ T5867] EXT4-fs: Ignoring removed oldalloc option [ 223.109071][ T5867] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE 04:08:23 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400604b83bf9d3ea518000000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10003458c, 0x0) [ 223.156544][ T5867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. 04:08:23 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x49, 0x0, 0x0, 0x0, &(0x7f00000ac000/0x1000)=nil, 0x1000, 0x17, 0x1, {0x0, r0}}, 0x77a) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 04:08:23 executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="626172726965722c6e6f6175746f5f64615f616c6c6f632c64696f726561645f6e6f6c6f636b2c6f6c64616c6c6f632c00f501293add424f5564620d31dee986aff91abc6b72c5b14976ae8b78588d3ba5770ee190db0262b82a3ac96bf8d5dea39cef09030000000000000002898bbb7c4e4b28546219386220177fa31c1169bab68ff80268443c615b5c036e6b39b692fbf13a7ff3e3bb4e4dff4eec118e2954a5fe289294828f4d8dab342c5703875045d660d6063c9927a0db22b43b5dca660491be34af04d4396ef68f94b304432cdd783f0000008000000000000000"], 0x1, 0x77c, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[], 0x14) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) [ 223.228729][ T5174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.302958][ T5880] loop0: detected capacity change from 0 to 2048 [ 223.312972][ T5880] EXT4-fs: Ignoring removed oldalloc option [ 223.324597][ T5880] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.363941][ T5880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. 04:08:24 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x68831, 0xffffffffffffffff, 0x0) getpid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x49, 0x0, 0x0, 0x0, &(0x7f00000ac000/0x1000)=nil, 0x1000, 0x17, 0x1, {0x0, r0}}, 0x77a) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x166, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 04:08:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @in6={0xa, 0x0, 0x0, @dev}], 0x48) [ 223.438791][ T39] audit: type=1400 audit(1676520504.120:204): avc: denied { create } for pid=5885 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 04:08:24 executing program 0: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="626172726965722c6e6f6175746f5f64615f616c6c6f632c64696f726561645f6e6f6c6f636b2c6f6c64616c6c6f632c00f501293add424f5564620d31dee986aff91abc6b72c5b14976ae8b78588d3ba5770ee190db0262b82a3ac96bf8d5dea39cef09030000000000000002898bbb7c4e4b28546219386220177fa31c1169bab68ff80268443c615b5c036e6b39b692fbf13a7ff3e3bb4e4dff4eec118e2954a5fe289294828f4d8dab342c5703875045d660d6063c9927a0db22b43b5dca660491be34af04d4396ef68f94b304432cdd783f0000008000000000000000"], 0x1, 0x77c, &(0x7f0000000f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[], 0x14) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) [ 223.459692][ T5174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. 04:08:24 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) [ 223.463105][ T39] audit: type=1400 audit(1676520504.120:205): avc: denied { setopt } for pid=5885 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 223.481370][ T39] audit: type=1400 audit(1676520504.120:206): avc: denied { connect } for pid=5885 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 04:08:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000700)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000640)=@ccm_128={{0x304}, "ce66fa8400c5bbf5", "33df88a18ea50106c3dbee09d48f4bf2", "9d4aebbe"}, 0x28) [ 223.494971][ T39] audit: type=1400 audit(1676520504.120:207): avc: denied { name_connect } for pid=5885 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 223.543941][ T5892] loop0: detected capacity change from 0 to 2048 [ 223.549899][ T5892] EXT4-fs: Ignoring removed oldalloc option [ 223.563513][ T5892] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 223.603497][ T5892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 223.709758][ T5174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. 04:08:24 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 04:08:24 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400604b83bf9d3ea518000000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10003458c, 0x0) 04:08:24 executing program 0: mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r0, 0x1, 0xd, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) [ 224.020038][ T39] audit: type=1400 audit(1676520504.700:208): avc: denied { create } for pid=5906 comm="syz-executor.3" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 04:08:24 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400604b83bf9d3ea518000000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10003458c, 0x0) 04:08:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000700)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000640)=@ccm_128={{0x304}, "ce66fa8400c5bbf5", "33df88a18ea50106c3dbee09d48f4bf2", "9d4aebbe"}, 0x28) 04:08:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000700)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000640)=@ccm_128={{0x304}, "ce66fa8400c5bbf5", "33df88a18ea50106c3dbee09d48f4bf2", "9d4aebbe"}, 0x28) 04:08:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000700)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000640)=@ccm_128={{0x304}, "ce66fa8400c5bbf5", "33df88a18ea50106c3dbee09d48f4bf2", "9d4aebbe"}, 0x28) 04:08:24 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x6c}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 04:08:25 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)={0x54, 0x13, 0x103, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0d46679f"}]}, 0x54}}, 0x0) 04:08:25 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 04:08:25 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400604b83bf9d3ea518000000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10003458c, 0x0) 04:08:25 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400604b83bf9d3ea518000000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10003458c, 0x0) 04:08:25 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 04:08:26 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 04:08:26 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 04:08:26 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400604b83bf9d3ea518000000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10003458c, 0x0) 04:08:26 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400604b83bf9d3ea518000000", @ANYRES32=0x0, @ANYBLOB="0000000000020000240012800b000100627269646765000014000280080004000000000005002b"], 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10003458c, 0x0) 04:08:27 executing program 3: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 04:08:27 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 04:08:27 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 04:08:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) close(r1) [ 226.728880][ T5966] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 04:08:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) close(r1) [ 226.787849][ T5972] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 04:08:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) close(r1) [ 226.843206][ T5974] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 04:08:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) close(r1) [ 226.914837][ T5976] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 04:08:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@local}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x138}}, 0x0) 04:08:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x804800, &(0x7f00000001c0)=ANY=[@ANYBLOB="0089f2832730bf994f589885cc769fe9ff0f61f47abebbde12c3893a1ac5d0149ba21207000000000000979898c94e056c0850980a0083cfe8b4efdc8ec300000000f2935e176297b1084a51bd8f968f05a5d657832ff1431d562136b4da36a117f775000000000000000000bba7dc7f1fe894c6ca549f3b7a658abea8d9a9774673bebd", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x81, &(0x7f0000000440)={0x5, 0xf, 0x81, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @generic={0x60, 0x10, 0x0, "03e9b34b759aa07227bfd224f02e2e46d1f7f3c9c491616ded86edaa8d16c19fd703dedf609267069b30327e6163f7af00d481eb12271e247209159802b3768018063b7fcf3ec636a9c96c2b88e949abaad0556e5a0c62a5a3c1958790"}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "5f3da0055b1271ddac1020d6217a46a3fd8c7094feeafdb7d61095686a74a26760a630eb82a012e80b67b211f528a22d61a444733da8216fb27fe53f832cb340"}}]}) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc22a3ed77f358f4af87c6dd9c4c5", 0x21}], 0x1, 0x0, 0x40}}], 0x1, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 04:08:28 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 04:08:28 executing program 3: sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x1b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 04:08:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_timeval(r0, 0x1, 0x48, 0x0, &(0x7f0000000680)) 04:08:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="a2", 0x1}], 0x1, &(0x7f0000000140)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x208}}], 0x20}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 04:08:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8}]}, 0x30}}, 0x0) 04:08:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x4, 0x4, 0x136}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=@tcp, 0x700000000000000}, 0x20) 04:08:28 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) 04:08:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x804800, &(0x7f00000001c0)=ANY=[@ANYBLOB="0089f2832730bf994f589885cc769fe9ff0f61f47abebbde12c3893a1ac5d0149ba21207000000000000979898c94e056c0850980a0083cfe8b4efdc8ec300000000f2935e176297b1084a51bd8f968f05a5d657832ff1431d562136b4da36a117f775000000000000000000bba7dc7f1fe894c6ca549f3b7a658abea8d9a9774673bebd", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x81, &(0x7f0000000440)={0x5, 0xf, 0x81, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @generic={0x60, 0x10, 0x0, "03e9b34b759aa07227bfd224f02e2e46d1f7f3c9c491616ded86edaa8d16c19fd703dedf609267069b30327e6163f7af00d481eb12271e247209159802b3768018063b7fcf3ec636a9c96c2b88e949abaad0556e5a0c62a5a3c1958790"}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "5f3da0055b1271ddac1020d6217a46a3fd8c7094feeafdb7d61095686a74a26760a630eb82a012e80b67b211f528a22d61a444733da8216fb27fe53f832cb340"}}]}) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc22a3ed77f358f4af87c6dd9c4c5", 0x21}], 0x1, 0x0, 0x40}}], 0x1, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 04:08:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x4, 0x4, 0x136}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=@tcp, 0x700000000000000}, 0x20) 04:08:29 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x728, 0x0) 04:08:29 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 04:08:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x4, 0x4, 0x136}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=@tcp, 0x700000000000000}, 0x20) 04:08:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x4, 0x4, 0x136}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=@tcp, 0x700000000000000}, 0x20) [ 228.628082][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 228.628101][ T39] audit: type=1800 audit(1676520509.310:226): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1147 res=0 errno=0 04:08:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x804800, &(0x7f00000001c0)=ANY=[@ANYBLOB="0089f2832730bf994f589885cc769fe9ff0f61f47abebbde12c3893a1ac5d0149ba21207000000000000979898c94e056c0850980a0083cfe8b4efdc8ec300000000f2935e176297b1084a51bd8f968f05a5d657832ff1431d562136b4da36a117f775000000000000000000bba7dc7f1fe894c6ca549f3b7a658abea8d9a9774673bebd", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x81, &(0x7f0000000440)={0x5, 0xf, 0x81, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @generic={0x60, 0x10, 0x0, "03e9b34b759aa07227bfd224f02e2e46d1f7f3c9c491616ded86edaa8d16c19fd703dedf609267069b30327e6163f7af00d481eb12271e247209159802b3768018063b7fcf3ec636a9c96c2b88e949abaad0556e5a0c62a5a3c1958790"}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "5f3da0055b1271ddac1020d6217a46a3fd8c7094feeafdb7d61095686a74a26760a630eb82a012e80b67b211f528a22d61a444733da8216fb27fe53f832cb340"}}]}) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc22a3ed77f358f4af87c6dd9c4c5", 0x21}], 0x1, 0x0, 0x40}}], 0x1, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 228.653390][ T39] audit: type=1400 audit(1676520509.330:227): avc: denied { create } for pid=6002 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 228.674562][ T39] audit: type=1400 audit(1676520509.350:228): avc: denied { bind } for pid=6002 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 228.697849][ T39] audit: type=1400 audit(1676520509.350:229): avc: denied { setopt } for pid=6002 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 228.713125][ T39] audit: type=1400 audit(1676520509.350:230): avc: denied { accept } for pid=6002 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 228.727248][ T39] audit: type=1400 audit(1676520509.350:231): avc: denied { write } for pid=6002 comm="syz-executor.1" path="socket:[38297]" dev="sockfs" ino=38297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 228.745224][ T39] audit: type=1800 audit(1676520509.400:232): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1164 res=0 errno=0 04:08:30 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x728, 0x0) 04:08:30 executing program 0: pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000039000100000000000000000001000000040000000c0001"], 0x2c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a006) 04:08:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x804800, &(0x7f00000001c0)=ANY=[@ANYBLOB="0089f2832730bf994f589885cc769fe9ff0f61f47abebbde12c3893a1ac5d0149ba21207000000000000979898c94e056c0850980a0083cfe8b4efdc8ec300000000f2935e176297b1084a51bd8f968f05a5d657832ff1431d562136b4da36a117f775000000000000000000bba7dc7f1fe894c6ca549f3b7a658abea8d9a9774673bebd", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x81, &(0x7f0000000440)={0x5, 0xf, 0x81, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @generic={0x60, 0x10, 0x0, "03e9b34b759aa07227bfd224f02e2e46d1f7f3c9c491616ded86edaa8d16c19fd703dedf609267069b30327e6163f7af00d481eb12271e247209159802b3768018063b7fcf3ec636a9c96c2b88e949abaad0556e5a0c62a5a3c1958790"}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "5f3da0055b1271ddac1020d6217a46a3fd8c7094feeafdb7d61095686a74a26760a630eb82a012e80b67b211f528a22d61a444733da8216fb27fe53f832cb340"}}]}) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc22a3ed77f358f4af87c6dd9c4c5", 0x21}], 0x1, 0x0, 0x40}}], 0x1, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 04:08:30 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x804800, &(0x7f00000001c0)=ANY=[@ANYBLOB="0089f2832730bf994f589885cc769fe9ff0f61f47abebbde12c3893a1ac5d0149ba21207000000000000979898c94e056c0850980a0083cfe8b4efdc8ec300000000f2935e176297b1084a51bd8f968f05a5d657832ff1431d562136b4da36a117f775000000000000000000bba7dc7f1fe894c6ca549f3b7a658abea8d9a9774673bebd", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$eJzs3M9rHHUfB/DPTLP9mefZPPAcnseDCC20UDpJmkt7Ml7ES6FQ8FpDMgkhk2zJbmoTC209C7W5KAiid49ehVL/AG9SUPAuiNZ4EC+R2Wy2bbq7btskK/H1gul+v/Nj39/PdvLNDGQ2gH+s18p/kojhiLgcEdXW+jQiDjdbRyNub+238ejmdLkksbl55eekPCw2Nqvt90paryeieUj8LyIeVCLOvv9sbn11bWGqKPLlVn+0sXhttL66dm5+cWoun8uXxicujl2YmLgwNrFrtZ56++Kxe9+8ub7+7ZeNu68OnUtisll3tGrbtaAnbH0mlZjcsX5pL8IGKOljn6F9GAcAAL2V1/mHWtdmlajGIVdpAAAAcOBsHtkEAAAADrwkBj0CAAAAYG9t/x3A9rO9e/UcbDc/vRERI53yh5rPEEccjUpEHN9InnoyIdk6DF7K7TsRcX+yw/mXtM6/Fze2o9/PM9Lsr/vl/DPZaf5J2/NPdJh/hra/O+EldZ//Hucf6jL/Xe4z46tP/1/pmn8n4pWhTvlJOz/pkv9On/l31z+4123b5ucRpzv+/kmeyurx/RCjs/NFzx+tB3+cedir/uPP5CdJMzXpXf+1Put/b+PXhW5zSZl/5mTv//9O+eU58WFrHGlE3Gu9lv31HRknF7/7+tnk5PZ2/kyXz79z/lvt+j/rs/4fvjhyo89dAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCmNiOFI0qzdTtMsizgREf+N42lRqzfOztZWlmbKbREjUUln54t8LCKqW/2k7I8324/753f0JyLiP98f2wqdL/JsulbMDLp4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2k5ExHAkaRYRaUT8Vk3TLBv0qAAAAIBdNzLoAQAAAAB7zv0/AAAAHHwvev+f7PI4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAPt8qVL5bK58ejmdNmfub66slC7fm4mry9kiyvT2XRt+Vo2V6vNFXk2XVv8q/dLI2L8YqzcGG3k9cZofXXt6mJtZalxdX5xai6/mlf2pSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACe13BzSdIsItJmO02zLOJfETESlWR2vsjHIuLfEfGwWjlS9scHPWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2XX11bWGqKPJlDQ2NfWvcioi/wTB6NAY9MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj11bWFqaLIl+uDHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDlf6YRES5nK6eGt659XDye7X5GhHvfnLloxtTjcbyeLn+l/b6xset9eefOPDWftYAAAAAB97rz7Pz9n369n08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAv+qrawtTRZEv72Ej7gy6SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EX8GQAA//8tc8Xn") syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x81, &(0x7f0000000440)={0x5, 0xf, 0x81, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @generic={0x60, 0x10, 0x0, "03e9b34b759aa07227bfd224f02e2e46d1f7f3c9c491616ded86edaa8d16c19fd703dedf609267069b30327e6163f7af00d481eb12271e247209159802b3768018063b7fcf3ec636a9c96c2b88e949abaad0556e5a0c62a5a3c1958790"}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "5f3da0055b1271ddac1020d6217a46a3fd8c7094feeafdb7d61095686a74a26760a630eb82a012e80b67b211f528a22d61a444733da8216fb27fe53f832cb340"}}]}) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc22a3ed77f358f4af87c6dd9c4c5", 0x21}], 0x1, 0x0, 0x40}}], 0x1, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 230.008555][ T39] audit: type=1800 audit(1676520510.690:233): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1164 res=0 errno=0 [ 230.062741][ T39] audit: type=1800 audit(1676520510.740:234): pid=6025 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1166 res=0 errno=0 [ 230.102129][ T39] audit: type=1804 audit(1676520510.780:235): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3489564355/syzkaller.r04R1u/44/cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 [ 230.105478][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.131338][ T6022] openvswitch: netlink: Flow actions attr not present in new flow. 04:08:31 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x728, 0x0) 04:08:31 executing program 0: pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000039000100000000000000000001000000040000000c0001"], 0x2c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a006) [ 230.747188][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.753516][ T6034] openvswitch: netlink: Flow actions attr not present in new flow. 04:08:31 executing program 0: pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000039000100000000000000000001000000040000000c0001"], 0x2c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a006) [ 231.182923][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.189222][ T6038] openvswitch: netlink: Flow actions attr not present in new flow. 04:08:31 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0xfffffecc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x728, 0x0) 04:08:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x804800, &(0x7f00000001c0)=ANY=[@ANYBLOB="0089f2832730bf994f589885cc769fe9ff0f61f47abebbde12c3893a1ac5d0149ba21207000000000000979898c94e056c0850980a0083cfe8b4efdc8ec300000000f2935e176297b1084a51bd8f968f05a5d657832ff1431d562136b4da36a117f775000000000000000000bba7dc7f1fe894c6ca549f3b7a658abea8d9a9774673bebd", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x81, &(0x7f0000000440)={0x5, 0xf, 0x81, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @generic={0x60, 0x10, 0x0, "03e9b34b759aa07227bfd224f02e2e46d1f7f3c9c491616ded86edaa8d16c19fd703dedf609267069b30327e6163f7af00d481eb12271e247209159802b3768018063b7fcf3ec636a9c96c2b88e949abaad0556e5a0c62a5a3c1958790"}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "5f3da0055b1271ddac1020d6217a46a3fd8c7094feeafdb7d61095686a74a26760a630eb82a012e80b67b211f528a22d61a444733da8216fb27fe53f832cb340"}}]}) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc22a3ed77f358f4af87c6dd9c4c5", 0x21}], 0x1, 0x0, 0x40}}], 0x1, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 04:08:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x804800, &(0x7f00000001c0)=ANY=[@ANYBLOB="0089f2832730bf994f589885cc769fe9ff0f61f47abebbde12c3893a1ac5d0149ba21207000000000000979898c94e056c0850980a0083cfe8b4efdc8ec300000000f2935e176297b1084a51bd8f968f05a5d657832ff1431d562136b4da36a117f775000000000000000000bba7dc7f1fe894c6ca549f3b7a658abea8d9a9774673bebd", @ANYRESDEC], 0x1, 0x750, &(0x7f0000001640)="$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") syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x81, &(0x7f0000000440)={0x5, 0xf, 0x81, 0x2, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @generic={0x60, 0x10, 0x0, "03e9b34b759aa07227bfd224f02e2e46d1f7f3c9c491616ded86edaa8d16c19fd703dedf609267069b30327e6163f7af00d481eb12271e247209159802b3768018063b7fcf3ec636a9c96c2b88e949abaad0556e5a0c62a5a3c1958790"}]}, 0x1, [{0x42, &(0x7f0000000280)=@string={0x42, 0x3, "5f3da0055b1271ddac1020d6217a46a3fd8c7094feeafdb7d61095686a74a26760a630eb82a012e80b67b211f528a22d61a444733da8216fb27fe53f832cb340"}}]}) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x1000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc22a3ed77f358f4af87c6dd9c4c5", 0x21}], 0x1, 0x0, 0x40}}], 0x1, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 04:08:32 executing program 0: pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000039000100000000000000000001000000040000000c0001"], 0x2c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a006) 04:08:32 executing program 1: pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000039000100000000000000000001000000040000000c0001"], 0x2c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a006) [ 232.324827][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 232.334616][ T6051] openvswitch: netlink: Flow actions attr not present in new flow. [ 232.445697][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.454917][ T6054] openvswitch: netlink: Flow actions attr not present in new flow. 04:08:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xff, 0x101}, 0x48) 04:08:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x24}}, 0x0) 04:08:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000022c0)={&(0x7f00000021c0), 0xc, &(0x7f0000002280)={&(0x7f00000001c0)={0x30, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2080}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xb636d5ce8a860556}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x30}}, 0x200089b0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7f}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5fe1}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1ff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000e40)={0x0, @multicast1, 0x0, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 232.682568][ T6062] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 04:08:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x24}}, 0x0) 04:08:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000022c0)={&(0x7f00000021c0), 0xc, &(0x7f0000002280)={&(0x7f00000001c0)={0x30, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2080}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xb636d5ce8a860556}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x30}}, 0x200089b0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7f}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5fe1}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1ff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000e40)={0x0, @multicast1, 0x0, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 232.729744][ T6067] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 04:08:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x24}}, 0x0) 04:08:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000022c0)={&(0x7f00000021c0), 0xc, &(0x7f0000002280)={&(0x7f00000001c0)={0x30, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2080}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xb636d5ce8a860556}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x30}}, 0x200089b0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7f}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5fe1}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1ff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000e40)={0x0, @multicast1, 0x0, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000200), &(0x7f0000000240)=0x4) 04:08:33 executing program 1: pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000039000100000000000000000001000000040000000c0001"], 0x2c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a006) [ 232.857096][ T6071] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 04:08:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x24}}, 0x0) 04:08:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000022c0)={&(0x7f00000021c0), 0xc, &(0x7f0000002280)={&(0x7f00000001c0)={0x30, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2080}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xb636d5ce8a860556}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x30}}, 0x200089b0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x3, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7f}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5fe1}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1ff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x80) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000e40)={0x0, @multicast1, 0x0, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r4, 0x0, 0x5, &(0x7f0000000200), &(0x7f0000000240)=0x4) 04:08:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 232.922658][ T6077] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 04:08:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0xdcf}) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000021e0000090001"], 0x20}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 04:08:33 executing program 0: r0 = socket(0x2, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x2, 0x0, 0x0) 04:08:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x258, 0x4c, 0x200, 0x0, 0x0, 0x330, 0x2e8, 0x2e8, 0x330, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@multicast1}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv6=@mcast1}, {@ipv6=@loopback, [], @ipv6=@private2}]}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast1}, 0x4}}, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 233.035666][ T6089] xt_policy: neither incoming nor outgoing policy selected 04:08:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x258, 0x4c, 0x200, 0x0, 0x0, 0x330, 0x2e8, 0x2e8, 0x330, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@multicast1}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv6=@mcast1}, {@ipv6=@loopback, [], @ipv6=@private2}]}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast1}, 0x4}}, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 233.069697][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.077361][ T6073] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.082016][ T6091] xt_policy: neither incoming nor outgoing policy selected 04:08:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x258, 0x4c, 0x200, 0x0, 0x0, 0x330, 0x2e8, 0x2e8, 0x330, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@multicast1}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv6=@mcast1}, {@ipv6=@loopback, [], @ipv6=@private2}]}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast1}, 0x4}}, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:08:34 executing program 1: pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000039000100000000000000000001000000040000000c0001"], 0x2c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a006) 04:08:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1203]}, 0x8) pipe2(&(0x7f00000016c0)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0x6, 0x0) [ 233.346715][ T6097] xt_policy: neither incoming nor outgoing policy selected [ 233.657527][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 233.657541][ T39] audit: type=1804 audit(1676520514.330:247): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1189026994/syzkaller.coIWsB/58/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 [ 233.665354][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.689679][ T6100] openvswitch: netlink: Flow actions attr not present in new flow. [ 234.012596][ T6129] xt_policy: neither incoming nor outgoing policy selected 04:08:34 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x258, 0x4c, 0x200, 0x0, 0x0, 0x330, 0x2e8, 0x2e8, 0x330, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00'}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@multicast1}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv6=@mcast1}, {@ipv6=@loopback, [], @ipv6=@private2}]}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000001b00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast1}, 0x4}}, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:08:34 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 04:08:34 executing program 0: getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendfile(r2, r2, 0x0, 0xffffffff009) 04:08:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1203]}, 0x8) pipe2(&(0x7f00000016c0)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0x6, 0x0) 04:08:34 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x80, 0x0}, 0x0) 04:08:34 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x541e, 0x0) [ 234.249472][ T39] audit: type=1400 audit(1676520514.930:248): avc: denied { create } for pid=6137 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 234.267319][ T39] audit: type=1400 audit(1676520514.930:249): avc: denied { write } for pid=6137 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 04:08:35 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8840, &(0x7f0000000080)={[{@part}, {@nls={'nls', 0x3d, 'cp860'}}]}, 0x0, 0x64c, &(0x7f0000000840)="$eJzs3U1oHOf9B/DvrOW15D84SmIn+ZdCRQymjaktaZvagULdUooOoRh6yVXYciy8VoKkFCWUdtPXa4855JBS3EMOpfRQSOkhND0XCr37buhdp6rM7OxqZcny6iVaKf18YPZ5Zp9nnuc3P8/L7ixGAf5nzb2R050Umbv8+lq5/vBBq/3wQet+r57kTJJGMtYtUiwlxWfJjXSX/H/5Zj1c8aR5Xn30yYeXPvi41V0bq5eqf2O37bbZsWenXjKV5FRdHsCW8W4deLyiH3eZsIu9xMGobWzTOfDZCJwsRfe+uc1kcjbJeP05oHtX7N6zT7TOqAMAAACAI/DMetazlnOjjgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOkvrv/xf10ujVp1L0/v5/s3qvWXVvjjreg/p01AEAAAAAAAAAwCH4ynrWs5ZzvfWNovrN/+Vq5Xz1+n95JytZyHKuZC3zWc1qljOTZLJqf796ba7Nr64uzzxpy42NjZ/WW872t8zAlrN7jXzjzIF2HAAAAAAAAAC+WH6Wuc3f/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DgoklPdolrO9+qTaYwlGU/SLPt1kr/26ifZp6MOAAAAAI7AM+tZz1rOFf/prm8U1Xf+F6rv/eN5J0tZzWJW085CblfPArrf+hv/7LTaDx+07pfL9nG/8+89hVGNmO6zh51nnq56XKj7d5J8Pz/M5UzlZpazmB9lPqtZyFS+V9XmU2Syfnox2Ytz53hvbFm7+bRYX6oimcidLFaxXcmt/mOQRq/PwGx/biaPzfh+mZ3i27Uhc3S7Lss9+k1dHg+T1Z6f7mdkus59mY1nd8/9Ho+Tx2eaSaP/DOr8bjM19pfzs3VZ5vpXxzrns2n0j74Xds958rV//e3m3fbSvbt3Vi4fn13ap8cz0epnYjwvDp+JznCZOLXTm+MH34vD0Kyz0Y1x82qZzD31avlyte25LOYHeSu3s5Brmc5Mrmc6r2U2rS1H2IXd81qda429nWsXv1pXJpL8ui6PhzKvzw7kdfBKN1m1Db6zmaXnhsjSHq9IY1+qK+UcPx+444ze45mYGcjE87tn4rcb5etKe+ne8t35t4ec71JdlqftL7dem393GPuzf+Xx8lz5j1WtlTkp+kdH2fb8lrbNfDXrX1y6bY1tbRf6bU87U5v1Z7jtI3XbXtyxrVW1vTTQtuVTTt5Ku/8pBIBj7OwrZ5sTjyb+MfHRxC8m7k68Pv7dM9fPfLmZ038f+8upPzZ+3/hW8Uo+yk9ybtSRAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF8HKu+/dm2+3F5aPprLwh+60Q3VO4+gCO7TKa0cyVzFsDg9UKcYOd8A/JTkm/0wqO1UmsvnOqK9MwOft6ur9t6+uvPve1xfvz7+58ObC0uz1a9evtb45842rdxbbC9Pd11FHCXweNu/+o44EAAAAAAAAAAAAGNZR/L+CUe8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLLNvZHTnRSZmb4yXa4/fNBql0uvvtlzLEkjSfHjpPgsuZHuksmB4YonzfPqo08+vPTBx63NTmO9amO37YbTqZdMJTlVl093Zqjxbg2O19hPeEV/D8uEXazK0/sZCA7XfwMAAP//3XsJ/w==") [ 234.310155][ T39] audit: type=1800 audit(1676520514.960:250): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1162 res=0 errno=0 04:08:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 04:08:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 04:08:35 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8840, &(0x7f0000000080)={[{@part}, {@nls={'nls', 0x3d, 'cp860'}}]}, 0x0, 0x64c, &(0x7f0000000840)="$eJzs3U1oHOf9B/DvrOW15D84SmIn+ZdCRQymjaktaZvagULdUooOoRh6yVXYciy8VoKkFCWUdtPXa4855JBS3EMOpfRQSOkhND0XCr37buhdp6rM7OxqZcny6iVaKf18YPZ5Zp9nnuc3P8/L7ixGAf5nzb2R050Umbv8+lq5/vBBq/3wQet+r57kTJJGMtYtUiwlxWfJjXSX/H/5Zj1c8aR5Xn30yYeXPvi41V0bq5eqf2O37bbZsWenXjKV5FRdHsCW8W4deLyiH3eZsIu9xMGobWzTOfDZCJwsRfe+uc1kcjbJeP05oHtX7N6zT7TOqAMAAACAI/DMetazlnOjjgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOkvrv/xf10ujVp1L0/v5/s3qvWXVvjjreg/p01AEAAAAAAAAAwCH4ynrWs5ZzvfWNovrN/+Vq5Xz1+n95JytZyHKuZC3zWc1qljOTZLJqf796ba7Nr64uzzxpy42NjZ/WW872t8zAlrN7jXzjzIF2HAAAAAAAAAC+WH6Wuc3f/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DgoklPdolrO9+qTaYwlGU/SLPt1kr/26ifZp6MOAAAAAI7AM+tZz1rOFf/prm8U1Xf+F6rv/eN5J0tZzWJW085CblfPArrf+hv/7LTaDx+07pfL9nG/8+89hVGNmO6zh51nnq56XKj7d5J8Pz/M5UzlZpazmB9lPqtZyFS+V9XmU2Syfnox2Ytz53hvbFm7+bRYX6oimcidLFaxXcmt/mOQRq/PwGx/biaPzfh+mZ3i27Uhc3S7Lss9+k1dHg+T1Z6f7mdkus59mY1nd8/9Ho+Tx2eaSaP/DOr8bjM19pfzs3VZ5vpXxzrns2n0j74Xds958rV//e3m3fbSvbt3Vi4fn13ap8cz0epnYjwvDp+JznCZOLXTm+MH34vD0Kyz0Y1x82qZzD31avlyte25LOYHeSu3s5Brmc5Mrmc6r2U2rS1H2IXd81qda429nWsXv1pXJpL8ui6PhzKvzw7kdfBKN1m1Db6zmaXnhsjSHq9IY1+qK+UcPx+444ze45mYGcjE87tn4rcb5etKe+ne8t35t4ec71JdlqftL7dem393GPuzf+Xx8lz5j1WtlTkp+kdH2fb8lrbNfDXrX1y6bY1tbRf6bU87U5v1Z7jtI3XbXtyxrVW1vTTQtuVTTt5Ku/8pBIBj7OwrZ5sTjyb+MfHRxC8m7k68Pv7dM9fPfLmZ038f+8upPzZ+3/hW8Uo+yk9ybtSRAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF8HKu+/dm2+3F5aPprLwh+60Q3VO4+gCO7TKa0cyVzFsDg9UKcYOd8A/JTkm/0wqO1UmsvnOqK9MwOft6ur9t6+uvPve1xfvz7+58ObC0uz1a9evtb45842rdxbbC9Pd11FHCXweNu/+o44EAAAAAAAAAAAAGNZR/L+CUe8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLLNvZHTnRSZmb4yXa4/fNBql0uvvtlzLEkjSfHjpPgsuZHuksmB4YonzfPqo08+vPTBx63NTmO9amO37YbTqZdMJTlVl093Zqjxbg2O19hPeEV/D8uEXazK0/sZCA7XfwMAAP//3XsJ/w==") 04:08:35 executing program 0: getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendfile(r2, r2, 0x0, 0xffffffff009) 04:08:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1203]}, 0x8) pipe2(&(0x7f00000016c0)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0x6, 0x0) 04:08:35 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8840, &(0x7f0000000080)={[{@part}, {@nls={'nls', 0x3d, 'cp860'}}]}, 0x0, 0x64c, &(0x7f0000000840)="$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") 04:08:35 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x11c, 0x1, 0x0, 0x20000000) 04:08:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000018000)=0xffff, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e20, @broadcast}], 0x10) 04:08:35 executing program 1: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8840, &(0x7f0000000080)={[{@part}, {@nls={'nls', 0x3d, 'cp860'}}]}, 0x0, 0x64c, &(0x7f0000000840)="$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") [ 235.139138][ T39] audit: type=1800 audit(1676520515.820:251): pid=6176 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1144 res=0 errno=0 [ 235.158204][ T39] audit: type=1400 audit(1676520515.830:252): avc: denied { bind } for pid=6177 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 04:08:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a1e02f4596a8034a9ab3e39597e422ffab456dd963a000000001800000000000000170100000400000006020000000000001800000000000000170100000300000001"], 0x60}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c80)=""/103, 0xf380}], 0x1}, 0x0) [ 235.176524][ T39] audit: type=1400 audit(1676520515.830:253): avc: denied { name_bind } for pid=6177 comm="syz-executor.3" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 235.195897][ T39] audit: type=1400 audit(1676520515.830:254): avc: denied { node_bind } for pid=6177 comm="syz-executor.3" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 04:08:35 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x83, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x18) [ 235.236078][ T39] audit: type=1400 audit(1676520515.880:255): avc: denied { read } for pid=6182 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 235.282232][ T39] audit: type=1400 audit(1676520515.960:256): avc: denied { shutdown } for pid=6199 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 04:08:36 executing program 1: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0xc0049364, 0x7fffffffefff) 04:08:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = syz_io_uring_setup(0x5ad, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r2, 0x40b3, 0x0, 0x0, &(0x7f0000000000)={[0x1203]}, 0x8) pipe2(&(0x7f00000016c0)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r4, 0x6, 0x0) 04:08:36 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x83, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x18) 04:08:36 executing program 0: getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendfile(r2, r2, 0x0, 0xffffffff009) 04:08:36 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x83, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x18) 04:08:36 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x83, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x18) 04:08:36 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x83, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x18) 04:08:36 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x83, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x18) 04:08:36 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x83, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x18) 04:08:37 executing program 0: getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4103fe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendfile(r2, r2, 0x0, 0xffffffff009) 04:08:37 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x83, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x18) 04:08:37 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0xf}}]}, 0x88}}, 0x0) 04:08:37 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@setlink={0x44, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MAP={0x24}]}, 0x44}}, 0x0) 04:08:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8, 0x3, r1}, @void}}}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) 04:08:37 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x83, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x18) 04:08:37 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 04:08:37 executing program 1: bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x205) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = open(0x0, 0x24000, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8052) sendfile(r4, r5, 0x0, 0x10000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x5, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x3, 0x3ff, 0x7fffffff}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}, 0x80) 04:08:38 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x83, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x18) 04:08:38 executing program 1: bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x205) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = open(0x0, 0x24000, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8052) sendfile(r4, r5, 0x0, 0x10000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x5, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x3, 0x3ff, 0x7fffffff}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}, 0x80) 04:08:38 executing program 2: unshare(0x2a000400) setuid(0xee01) mq_open(&(0x7f00005a1ffb)='ev\xe7\xdex', 0x42, 0x0, 0x0) mq_open(&(0x7f0000000140)='ev\xe7\xdex', 0x0, 0x0, 0x0) 04:08:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)="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", 0x122}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005bc0)="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", 0x2c8}, {&(0x7f0000001780)="516799a3ba0a8255bb4eb81ce7bffee3c2c820182ed5b8f67fe9e7e3696d579b632238d339aafeaf5aa7ac2eff2c3689467a4c518b725c323b429253a95dd56cd9eb5bad492adf86fe29ebcc6c4f8da4ae861a7258a9b3a46c6a945754bbb61b19b2c2e19a6b3010ec9a212347171579fcf5d27f26bca94d4563d81f9a70d05a2e9dad590e2a56699613a56a6a39a48bfe7993964d088103b10b7cb35a54a9e98a6827fc6b342d9f0c07cfda0760c8a1145bb05593751aa0f5cc78e98421cc3dac4ca7c4d94edbfab82eed57a32695ead9388ba3879530aa3c86d2839a44abd765bf7b68d5e630c038bf6ea30fc6dcb3", 0xf0}, {&(0x7f0000000580)="89e664e6465ea0454329372a7a91bde07dfc6a68098b61b23c5a2717a1e6cf29c24cae1bb31eb406b48e2a01287aed1b1a165e91a8d0888949a0a45f8f48e8cc8df940e7c156c0ef0200f38665fd41349c47a5a7b76a8ec64220324015a57c16e9aafd54b5582f926da19c329c7b911a259a03ae18ace19a4ca88e8d9e12dec9328dea8a72452314b5d03894804e91bae8662681513eca26d01b79ff0163ac662600858780c9d80418", 0xa9}, {&(0x7f00000002c0)="de92eca7fa57", 0x6}], 0x4}, 0x0) 04:08:38 executing program 3: r0 = syz_io_uring_setup(0xe32, &(0x7f0000000500), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000070c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x18}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x10000000) syz_io_uring_setup(0x2de7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer, 0x10001) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 04:08:38 executing program 2: setresuid(0xee01, 0xee00, 0x0) r0 = geteuid() setresuid(0x0, r0, 0x0) setresuid(0x0, 0x0, 0xee01) 04:08:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)="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", 0x122}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005bc0)="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", 0x2c8}, {&(0x7f0000001780)="516799a3ba0a8255bb4eb81ce7bffee3c2c820182ed5b8f67fe9e7e3696d579b632238d339aafeaf5aa7ac2eff2c3689467a4c518b725c323b429253a95dd56cd9eb5bad492adf86fe29ebcc6c4f8da4ae861a7258a9b3a46c6a945754bbb61b19b2c2e19a6b3010ec9a212347171579fcf5d27f26bca94d4563d81f9a70d05a2e9dad590e2a56699613a56a6a39a48bfe7993964d088103b10b7cb35a54a9e98a6827fc6b342d9f0c07cfda0760c8a1145bb05593751aa0f5cc78e98421cc3dac4ca7c4d94edbfab82eed57a32695ead9388ba3879530aa3c86d2839a44abd765bf7b68d5e630c038bf6ea30fc6dcb3", 0xf0}, {&(0x7f0000000580)="89e664e6465ea0454329372a7a91bde07dfc6a68098b61b23c5a2717a1e6cf29c24cae1bb31eb406b48e2a01287aed1b1a165e91a8d0888949a0a45f8f48e8cc8df940e7c156c0ef0200f38665fd41349c47a5a7b76a8ec64220324015a57c16e9aafd54b5582f926da19c329c7b911a259a03ae18ace19a4ca88e8d9e12dec9328dea8a72452314b5d03894804e91bae8662681513eca26d01b79ff0163ac662600858780c9d80418", 0xa9}, {&(0x7f00000002c0)="de92eca7fa57", 0x6}], 0x4}, 0x0) 04:08:38 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)="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", 0x122}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005bc0)="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", 0x2c8}, {&(0x7f0000001780)="516799a3ba0a8255bb4eb81ce7bffee3c2c820182ed5b8f67fe9e7e3696d579b632238d339aafeaf5aa7ac2eff2c3689467a4c518b725c323b429253a95dd56cd9eb5bad492adf86fe29ebcc6c4f8da4ae861a7258a9b3a46c6a945754bbb61b19b2c2e19a6b3010ec9a212347171579fcf5d27f26bca94d4563d81f9a70d05a2e9dad590e2a56699613a56a6a39a48bfe7993964d088103b10b7cb35a54a9e98a6827fc6b342d9f0c07cfda0760c8a1145bb05593751aa0f5cc78e98421cc3dac4ca7c4d94edbfab82eed57a32695ead9388ba3879530aa3c86d2839a44abd765bf7b68d5e630c038bf6ea30fc6dcb3", 0xf0}, {&(0x7f0000000580)="89e664e6465ea0454329372a7a91bde07dfc6a68098b61b23c5a2717a1e6cf29c24cae1bb31eb406b48e2a01287aed1b1a165e91a8d0888949a0a45f8f48e8cc8df940e7c156c0ef0200f38665fd41349c47a5a7b76a8ec64220324015a57c16e9aafd54b5582f926da19c329c7b911a259a03ae18ace19a4ca88e8d9e12dec9328dea8a72452314b5d03894804e91bae8662681513eca26d01b79ff0163ac662600858780c9d80418", 0xa9}, {&(0x7f00000002c0)="de92eca7fa57", 0x6}], 0x4}, 0x0) 04:08:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) unlink(&(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(r2, &(0x7f0000002580)=ANY=[], 0x16) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x48, &(0x7f0000000000)={0x405, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) sendfile(r2, r2, &(0x7f0000000240), 0x8001) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0xef84) 04:08:39 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)="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", 0x122}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005bc0)="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", 0x2c8}, {&(0x7f0000001780)="516799a3ba0a8255bb4eb81ce7bffee3c2c820182ed5b8f67fe9e7e3696d579b632238d339aafeaf5aa7ac2eff2c3689467a4c518b725c323b429253a95dd56cd9eb5bad492adf86fe29ebcc6c4f8da4ae861a7258a9b3a46c6a945754bbb61b19b2c2e19a6b3010ec9a212347171579fcf5d27f26bca94d4563d81f9a70d05a2e9dad590e2a56699613a56a6a39a48bfe7993964d088103b10b7cb35a54a9e98a6827fc6b342d9f0c07cfda0760c8a1145bb05593751aa0f5cc78e98421cc3dac4ca7c4d94edbfab82eed57a32695ead9388ba3879530aa3c86d2839a44abd765bf7b68d5e630c038bf6ea30fc6dcb3", 0xf0}, {&(0x7f0000000580)="89e664e6465ea0454329372a7a91bde07dfc6a68098b61b23c5a2717a1e6cf29c24cae1bb31eb406b48e2a01287aed1b1a165e91a8d0888949a0a45f8f48e8cc8df940e7c156c0ef0200f38665fd41349c47a5a7b76a8ec64220324015a57c16e9aafd54b5582f926da19c329c7b911a259a03ae18ace19a4ca88e8d9e12dec9328dea8a72452314b5d03894804e91bae8662681513eca26d01b79ff0163ac662600858780c9d80418", 0xa9}, {&(0x7f00000002c0)="de92eca7fa57", 0x6}], 0x4}, 0x0) 04:08:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)="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", 0x122}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005bc0)="d09a0e63c9476288b671afdbd53a5994e137381f62021d1951b627b8dda57a5d17d744648c81c5703ed8146ab1b0171f89091b1dd3238d03dbb686df460963245dedf2973ee555af99499e44ad420dbf65fd46fbc99a1274429e2d5783751815828ec8cb3553110cca66460215353d19f6d8bbd8fb264eddea60b18e16c31aa5e200000491634ac2fd10e2cd30bc1c5843681d3df27916e53ea293f3551b7147c3743da0fc9850d17c3e8d4f162fdebf8ebe11ae6fcd9372c8d8f19556ae091fe94215ae9434da412f6fa4cb6561e5f78ff9707844ee5d573fb294437722d9a06dfa61748c32c73d759933a8dd344c947d3efdbe90d0eb049df5fbb0c19f6785264b619c530d97395d44b04f7e2a280d658c7871ad373b792678c49227999651ef3b2ee1bc2b8f3035db376e8e09aa3837233c8713065a8ad131d24f6c42a3220d0e07c3d3e95d59a5dd10c09716b5f874ecf53aadfa5050ff40f2c3c4a629b6445e5836100afff5a8977583653b40ca316f8f11416e5c1bd5499636ddae25fc4970b37209cf5c0bf8e432160c258d14223baa52798e09858645773dd97e68a95310da713cff077b06000000d4f145e9199c126a7f235e5674a3c7f5c7129ac7c1a3319590249b6d34ef6c3d8b94c6fc7cdcbddb053243053f7bc1f230d3bc7dfc4359e33992d0a3946b914a093287a76ac4a249b5b86cc75476466e409553355fefab75e9268a8751ffc9481fcff1f49c475699595b315e2147ee038b7291600c6b1cf7c8f24d587b9464a67e5ccec17820e711b98f4f7d5053642068a3fff704c3fe26ba862b53e2622d6e8b4a4c815fb2ea90ef63e141209dd292fdf886ee3e64b90f47ce22661c7a21f7bc10df0248079b7be17284eb54e5ab5bde9c6857b3cb184586048f60271a7204e896a69e7741b2d8b5b1a19e99e1834a25959155720c1c0ef84d7b0800e1ba282847d476cef0228b1422aba08e5f3c1cd279bbd1c5303c2e9c16a0da", 0x2c8}, {&(0x7f0000001780)="516799a3ba0a8255bb4eb81ce7bffee3c2c820182ed5b8f67fe9e7e3696d579b632238d339aafeaf5aa7ac2eff2c3689467a4c518b725c323b429253a95dd56cd9eb5bad492adf86fe29ebcc6c4f8da4ae861a7258a9b3a46c6a945754bbb61b19b2c2e19a6b3010ec9a212347171579fcf5d27f26bca94d4563d81f9a70d05a2e9dad590e2a56699613a56a6a39a48bfe7993964d088103b10b7cb35a54a9e98a6827fc6b342d9f0c07cfda0760c8a1145bb05593751aa0f5cc78e98421cc3dac4ca7c4d94edbfab82eed57a32695ead9388ba3879530aa3c86d2839a44abd765bf7b68d5e630c038bf6ea30fc6dcb3", 0xf0}, {&(0x7f0000000580)="89e664e6465ea0454329372a7a91bde07dfc6a68098b61b23c5a2717a1e6cf29c24cae1bb31eb406b48e2a01287aed1b1a165e91a8d0888949a0a45f8f48e8cc8df940e7c156c0ef0200f38665fd41349c47a5a7b76a8ec64220324015a57c16e9aafd54b5582f926da19c329c7b911a259a03ae18ace19a4ca88e8d9e12dec9328dea8a72452314b5d03894804e91bae8662681513eca26d01b79ff0163ac662600858780c9d80418", 0xa9}, {&(0x7f00000002c0)="de92eca7fa57", 0x6}], 0x4}, 0x0) 04:08:39 executing program 1: bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x205) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = open(0x0, 0x24000, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8052) sendfile(r4, r5, 0x0, 0x10000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x5, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x3, 0x3ff, 0x7fffffff}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}, 0x80) 04:08:39 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)="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", 0x122}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005bc0)="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", 0x2c8}, {&(0x7f0000001780)="516799a3ba0a8255bb4eb81ce7bffee3c2c820182ed5b8f67fe9e7e3696d579b632238d339aafeaf5aa7ac2eff2c3689467a4c518b725c323b429253a95dd56cd9eb5bad492adf86fe29ebcc6c4f8da4ae861a7258a9b3a46c6a945754bbb61b19b2c2e19a6b3010ec9a212347171579fcf5d27f26bca94d4563d81f9a70d05a2e9dad590e2a56699613a56a6a39a48bfe7993964d088103b10b7cb35a54a9e98a6827fc6b342d9f0c07cfda0760c8a1145bb05593751aa0f5cc78e98421cc3dac4ca7c4d94edbfab82eed57a32695ead9388ba3879530aa3c86d2839a44abd765bf7b68d5e630c038bf6ea30fc6dcb3", 0xf0}, {&(0x7f0000000580)="89e664e6465ea0454329372a7a91bde07dfc6a68098b61b23c5a2717a1e6cf29c24cae1bb31eb406b48e2a01287aed1b1a165e91a8d0888949a0a45f8f48e8cc8df940e7c156c0ef0200f38665fd41349c47a5a7b76a8ec64220324015a57c16e9aafd54b5582f926da19c329c7b911a259a03ae18ace19a4ca88e8d9e12dec9328dea8a72452314b5d03894804e91bae8662681513eca26d01b79ff0163ac662600858780c9d80418", 0xa9}, {&(0x7f00000002c0)="de92eca7fa57", 0x6}], 0x4}, 0x0) 04:08:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)="2caf275806a2b992998d965c4910ccc3aa6e9481623f60333ee493b657731ef46111d5afb93a2cc79e0e537f81f8eafb22f153f31ec29f5e7b0f1deeb1bbe1c588c15f77dfe1bdbd5c0ffd5702ab2919322ee5c0391ba23a0adf122ed067f7af6e7ab0b39db826c88289e64c68986b8200000000000000000000000011661819d7a25614ad65691f68fbbf509a39b83e69a77180c5499b2648eaf7bc6237a7189654f8625bf4b9dfe45604ddfc4c3015ea3569e245219f099420faae2dd45df9316126377e238a2578df874665f74cf17ece53acaa6d16de9657105c9bbc7f4129081328b461423ade4a68dbee85303a87f137b24b15d6945e48d0fefcdbfd4e7ec31fa1918dab85a36812f5de79d0efe645517cc02e201ff6defb50986c79cdb6ca", 0x122}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005bc0)="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", 0x2c8}, {&(0x7f0000001780)="516799a3ba0a8255bb4eb81ce7bffee3c2c820182ed5b8f67fe9e7e3696d579b632238d339aafeaf5aa7ac2eff2c3689467a4c518b725c323b429253a95dd56cd9eb5bad492adf86fe29ebcc6c4f8da4ae861a7258a9b3a46c6a945754bbb61b19b2c2e19a6b3010ec9a212347171579fcf5d27f26bca94d4563d81f9a70d05a2e9dad590e2a56699613a56a6a39a48bfe7993964d088103b10b7cb35a54a9e98a6827fc6b342d9f0c07cfda0760c8a1145bb05593751aa0f5cc78e98421cc3dac4ca7c4d94edbfab82eed57a32695ead9388ba3879530aa3c86d2839a44abd765bf7b68d5e630c038bf6ea30fc6dcb3", 0xf0}, {&(0x7f0000000580)="89e664e6465ea0454329372a7a91bde07dfc6a68098b61b23c5a2717a1e6cf29c24cae1bb31eb406b48e2a01287aed1b1a165e91a8d0888949a0a45f8f48e8cc8df940e7c156c0ef0200f38665fd41349c47a5a7b76a8ec64220324015a57c16e9aafd54b5582f926da19c329c7b911a259a03ae18ace19a4ca88e8d9e12dec9328dea8a72452314b5d03894804e91bae8662681513eca26d01b79ff0163ac662600858780c9d80418", 0xa9}, {&(0x7f00000002c0)="de92eca7fa57", 0x6}], 0x4}, 0x0) 04:08:39 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0x9, 0x1}) 04:08:39 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) 04:08:39 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0x9, 0x1}) 04:08:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 04:08:39 executing program 3: getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) r0 = socket$tipc(0x1e, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000961000/0x1000)=nil, 0x1000, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) mremap(&(0x7f00009da000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) [ 239.117292][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 239.117304][ T39] audit: type=1804 audit(1676520519.790:276): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir262723972/syzkaller.LmEa2E/67/cgroup.controllers" dev="sda1" ino=1156 res=1 errno=0 04:08:39 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0x9, 0x1}) 04:08:39 executing program 1: bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x205) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = open(0x0, 0x24000, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8052) sendfile(r4, r5, 0x0, 0x10000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x5, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x3, 0x3ff, 0x7fffffff}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}, 0x80) 04:08:39 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0x9, 0x1}) [ 239.231706][ T39] audit: type=1804 audit(1676520519.910:277): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1189026994/syzkaller.coIWsB/74/bus" dev="sda1" ino=1148 res=1 errno=0 [ 239.274090][ T39] audit: type=1800 audit(1676520519.940:278): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1148 res=0 errno=0 04:08:40 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr]}, {0x0, [0x5f]}}, &(0x7f00000001c0)=""/4096, 0x3f, 0x1000, 0x1}, 0x20) 04:08:40 executing program 3: getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) r0 = socket$tipc(0x1e, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000961000/0x1000)=nil, 0x1000, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) mremap(&(0x7f00009da000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 04:08:40 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr]}, {0x0, [0x5f]}}, &(0x7f00000001c0)=""/4096, 0x3f, 0x1000, 0x1}, 0x20) 04:08:40 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr]}, {0x0, [0x5f]}}, &(0x7f00000001c0)=""/4096, 0x3f, 0x1000, 0x1}, 0x20) 04:08:40 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr]}, {0x0, [0x5f]}}, &(0x7f00000001c0)=""/4096, 0x3f, 0x1000, 0x1}, 0x20) 04:08:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 04:08:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 04:08:40 executing program 3: getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) r0 = socket$tipc(0x1e, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000961000/0x1000)=nil, 0x1000, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) mremap(&(0x7f00009da000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 04:08:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) [ 240.146321][ T39] audit: type=1804 audit(1676520520.820:279): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3489564355/syzkaller.r04R1u/74/cgroup.controllers" dev="sda1" ino=1158 res=1 errno=0 [ 240.197947][ T39] audit: type=1804 audit(1676520520.880:280): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir262723972/syzkaller.LmEa2E/68/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 04:08:41 executing program 3: getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3) r0 = socket$tipc(0x1e, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000961000/0x1000)=nil, 0x1000, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) mremap(&(0x7f00009da000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 04:08:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 04:08:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 04:08:41 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) [ 241.013428][ T39] audit: type=1804 audit(1676520521.690:281): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3489564355/syzkaller.r04R1u/75/cgroup.controllers" dev="sda1" ino=1157 res=1 errno=0 [ 241.098542][ T39] audit: type=1804 audit(1676520521.780:282): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir262723972/syzkaller.LmEa2E/69/cgroup.controllers" dev="sda1" ino=1158 res=1 errno=0 [ 241.306369][ T39] audit: type=1804 audit(1676520521.980:283): pid=6376 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir1189026994/syzkaller.coIWsB/76/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 04:08:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 04:08:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 04:08:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 04:08:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) [ 241.930665][ T39] audit: type=1804 audit(1676520522.610:284): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3489564355/syzkaller.r04R1u/76/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0 [ 241.977766][ T39] audit: type=1804 audit(1676520522.630:285): pid=6389 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir4235127749/syzkaller.FeKCwL/75/cgroup.controllers" dev="sda1" ino=1158 res=1 errno=0 04:08:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 04:08:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 04:08:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 04:08:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 04:08:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 04:08:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) 04:08:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000400)=ANY=[@ANYRES16=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x61, &(0x7f00000002c0)=""/97, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x5, 0x4000000b, 0x20}, 0x10}, 0x80) socket(0x10, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f3814fffffffffffff80700000016000000000000000800090016000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000100)=""/9, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYRES16=r6, @ANYBLOB="01ff8dc604baf4bd728f1f"], 0x1c}}, 0x0) sendfile(r5, r4, 0x0, 0x100000007) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r7, 0x100000011, 0x0, 0x2811fdff) syz_clone(0x40900280, 0x0, 0x0, 0x0, &(0x7f0000000a80), 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5606, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) [ 245.334106][ T5207] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.437842][ T5207] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.568001][ T5207] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.604545][ T4545] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.614417][ T4545] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.626151][ T4545] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.633118][ T4545] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.641374][ T4545] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 245.646755][ T4545] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.678830][ T5207] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.730677][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 245.730698][ T39] audit: type=1804 audit(1676520526.410:289): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3489564355/syzkaller.r04R1u/78/cgroup.controllers" dev="sda1" ino=1146 res=1 errno=0 [ 245.768571][ T5178] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.776429][ T5178] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.783615][ T5178] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.791474][ T5178] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.804516][ T5178] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 245.809507][ T5178] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.928556][ T4545] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.940572][ T4545] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.943129][ T39] audit: type=1400 audit(1676520526.620:290): avc: denied { read } for pid=4810 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 245.952392][ T4545] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.970414][ T4545] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.977534][ T4545] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 245.983777][ T4545] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.025878][ T6442] chnl_net:caif_netlink_parms(): no params data found [ 246.137551][ T5207] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.192776][ T5207] ------------[ cut here ]------------ [ 246.196918][ T5207] WARNING: CPU: 2 PID: 5207 at net/core/devlink.c:10331 devl_port_unregister+0x25c/0x2d0 [ 246.204508][ T5207] Modules linked in: [ 246.207300][ T5207] CPU: 2 PID: 5207 Comm: kworker/u16:3 Not tainted 6.2.0-rc8-syzkaller-00027-g033c40a89f55 #0 [ 246.228567][ T5207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 246.235358][ T5207] Workqueue: netns cleanup_net [ 246.239127][ T5207] RIP: 0010:devl_port_unregister+0x25c/0x2d0 [ 246.244057][ T5207] Code: e8 b9 5d 9b f9 85 ed 0f 85 20 fe ff ff e8 fc 60 9b f9 0f 0b e9 14 fe ff ff e8 f0 60 9b f9 0f 0b e9 4b ff ff ff e8 e4 60 9b f9 <0f> 0b e9 3a fe ff ff e8 98 8e ea f9 e9 d8 fe ff ff e8 8e 8e ea f9 [ 246.262653][ T5207] RSP: 0018:ffffc9000337fa00 EFLAGS: 00010293 [ 246.268383][ T5207] RAX: 0000000000000000 RBX: ffff88801b34c010 RCX: 0000000000000000 [ 246.273407][ T5207] RDX: ffff88802657e240 RSI: ffffffff87e4c97c RDI: 0000000000000005 [ 246.273437][ T6446] chnl_net:caif_netlink_parms(): no params data found [ 246.278598][ T5207] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000000 [ 246.289649][ T5207] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88801b34c010 [ 246.297127][ T5207] R13: ffff88801b34c030 R14: ffff888024b8f000 R15: ffff88801b34c000 [ 246.306032][ T5207] FS: 0000000000000000(0000) GS:ffff88802c700000(0000) knlGS:0000000000000000 [ 246.314580][ T5207] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.320807][ T5207] CR2: 000055fab4522238 CR3: 0000000072bed000 CR4: 0000000000150ee0 [ 246.328071][ T5207] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 246.328715][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.334814][ T5207] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 246.347292][ T5207] Call Trace: [ 246.350323][ T5207] [ 246.352765][ T5207] __nsim_dev_port_del+0x1bb/0x240 [ 246.357782][ T5207] nsim_dev_reload_destroy+0x171/0x510 [ 246.358785][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.363685][ T5207] nsim_dev_reload_down+0x6f/0xe0 [ 246.370509][ T6442] device bridge_slave_0 entered promiscuous mode [ 246.373994][ T5207] devlink_reload+0x1ca/0x6f0 [ 246.380360][ T5207] ? devlink_remote_reload_actions_performed+0xa0/0xa0 [ 246.385133][ T5207] ? xa_find+0x330/0x330 [ 246.388481][ T5207] ? devlinks_xa_find_get.constprop.0+0x170/0x260 [ 246.392829][ T5207] devlink_pernet_pre_exit+0x108/0x1d0 [ 246.396103][ T5207] ? devlinks_xa_find_get.constprop.0+0x260/0x260 [ 246.400683][ T5207] ? cttimeout_net_pre_exit+0x10d/0x500 [ 246.404515][ T5207] ? devlinks_xa_find_get.constprop.0+0x260/0x260 [ 246.409080][ T5207] cleanup_net+0x455/0xb10 [ 246.412142][ T5207] ? unregister_pernet_device+0x80/0x80 [ 246.415350][ T5207] process_one_work+0x9bf/0x1710 [ 246.418874][ T5207] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 246.422120][ T5207] ? rwlock_bug.part.0+0x90/0x90 [ 246.425251][ T5207] ? _raw_spin_lock_irq+0x45/0x50 [ 246.428954][ T5207] worker_thread+0x669/0x1090 [ 246.431668][ T5207] ? __kthread_parkme+0x163/0x220 [ 246.435043][ T5207] ? process_one_work+0x1710/0x1710 [ 246.438693][ T5207] kthread+0x2e8/0x3a0 [ 246.441341][ T5207] ? kthread_complete_and_exit+0x40/0x40 [ 246.444730][ T5207] ret_from_fork+0x1f/0x30 [ 246.447550][ T5207] [ 246.449664][ T5207] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 246.454083][ T5207] CPU: 1 PID: 5207 Comm: kworker/u16:3 Not tainted 6.2.0-rc8-syzkaller-00027-g033c40a89f55 #0 [ 246.459891][ T5207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 246.464976][ T5207] Workqueue: netns cleanup_net [ 246.467687][ T5207] Call Trace: [ 246.469711][ T5207] [ 246.471404][ T5207] dump_stack_lvl+0xd1/0x138 [ 246.474404][ T5207] panic+0x2cc/0x626 [ 246.476842][ T5207] ? panic_print_sys_info.part.0+0x110/0x110 [ 246.480510][ T5207] ? devl_port_unregister+0x25c/0x2d0 [ 246.483567][ T5207] check_panic_on_warn.cold+0x19/0x35 [ 246.487069][ T5207] __warn+0xf2/0x1a0 [ 246.489856][ T5207] ? devl_port_unregister+0x25c/0x2d0 [ 246.493273][ T5207] report_bug+0x1c0/0x210 [ 246.496135][ T5207] handle_bug+0x3c/0x70 [ 246.498558][ T5207] exc_invalid_op+0x18/0x50 [ 246.501275][ T5207] asm_exc_invalid_op+0x1a/0x20 [ 246.504219][ T5207] RIP: 0010:devl_port_unregister+0x25c/0x2d0 [ 246.508940][ T5207] Code: e8 b9 5d 9b f9 85 ed 0f 85 20 fe ff ff e8 fc 60 9b f9 0f 0b e9 14 fe ff ff e8 f0 60 9b f9 0f 0b e9 4b ff ff ff e8 e4 60 9b f9 <0f> 0b e9 3a fe ff ff e8 98 8e ea f9 e9 d8 fe ff ff e8 8e 8e ea f9 [ 246.522991][ T5207] RSP: 0018:ffffc9000337fa00 EFLAGS: 00010293 [ 246.527207][ T5207] RAX: 0000000000000000 RBX: ffff88801b34c010 RCX: 0000000000000000 [ 246.533120][ T5207] RDX: ffff88802657e240 RSI: ffffffff87e4c97c RDI: 0000000000000005 [ 246.539261][ T5207] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000000 [ 246.545357][ T5207] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88801b34c010 [ 246.551331][ T5207] R13: ffff88801b34c030 R14: ffff888024b8f000 R15: ffff88801b34c000 [ 246.557525][ T5207] ? devl_port_unregister+0x25c/0x2d0 [ 246.560915][ T5207] __nsim_dev_port_del+0x1bb/0x240 [ 246.564047][ T5207] nsim_dev_reload_destroy+0x171/0x510 [ 246.567586][ T5207] nsim_dev_reload_down+0x6f/0xe0 [ 246.571168][ T5207] devlink_reload+0x1ca/0x6f0 [ 246.574114][ T5207] ? devlink_remote_reload_actions_performed+0xa0/0xa0 [ 246.579033][ T5207] ? xa_find+0x330/0x330 [ 246.582547][ T5207] ? devlinks_xa_find_get.constprop.0+0x170/0x260 [ 246.587096][ T5207] devlink_pernet_pre_exit+0x108/0x1d0 [ 246.591547][ T5207] ? devlinks_xa_find_get.constprop.0+0x260/0x260 [ 246.596262][ T5207] ? cttimeout_net_pre_exit+0x10d/0x500 [ 246.600113][ T5207] ? devlinks_xa_find_get.constprop.0+0x260/0x260 [ 246.604724][ T5207] cleanup_net+0x455/0xb10 [ 246.608128][ T5207] ? unregister_pernet_device+0x80/0x80 [ 246.612642][ T5207] process_one_work+0x9bf/0x1710 [ 246.616554][ T5207] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 246.621037][ T5207] ? rwlock_bug.part.0+0x90/0x90 [ 246.625078][ T5207] ? _raw_spin_lock_irq+0x45/0x50 [ 246.628941][ T5207] worker_thread+0x669/0x1090 [ 246.631784][ T5207] ? __kthread_parkme+0x163/0x220 [ 246.634997][ T5207] ? process_one_work+0x1710/0x1710 [ 246.639508][ T5207] kthread+0x2e8/0x3a0 [ 246.642808][ T5207] ? kthread_complete_and_exit+0x40/0x40 [ 246.647150][ T5207] ret_from_fork+0x1f/0x30 [ 246.650354][ T5207] [ 246.653383][ T5207] Kernel Offset: disabled [ 246.656460][ T5207] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:08:47 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88802c83f5a0 RCX=0000000000000000 RDX=ffff8880130ca100 RSI=ffffffff8175269d RDI=0000000000000005 RBP=0000000000000002 RSP=ffffc9000062f978 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed1005907eb5 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff8175269f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe468794e000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe468794c000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff6a4d969d0 CR3=000000000c48e000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00ff000000000000000000000000ff00 XMM03=2f65726f632f74656e20746120373032 XMM04=00000000000000000000000000000000 XMM05=ffffffffffffffffffffffffffffffff XMM06=00000000000000000000000000000000 XMM07=6370636864223d6d6d6f632030313834 XMM08=2500656c6f736e6f632f7665642f000a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000000f12bf RBX=ffff888013136200 RCX=ffffffff8a0a6475 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=dffffc0000000000 RSP=ffffc9000066fdf8 R8 =0000000000000001 R9 =ffff88802c73602b R10=ffffed10058e6c05 R11=0000000000000001 R12=0000000000000001 R13=0000000000000001 R14=ffffffff8e789190 R15=0000000000000000 RIP=ffffffff8a0d7fff RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c700000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe632f384000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe632f382000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055fab4522238 CR3=0000000072bed000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000072 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff847a4615 RDI=ffffffff91f46400 RBP=ffffffff91f463c0 RSP=ffffc9000337f340 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000072 R14=ffffffff847a45b0 R15=0000000000000000 RIP=ffffffff847a463f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe045fc24000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe045fc22000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7c341b2270 CR3=000000006d978000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000002900000000 XMM02=ffff000000000000ffffffffffffffff XMM03=ffffffffffff00000000000000000000 XMM04=ffff000000000000ffffff0000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=00000000000b6891 RBX=ffff88801313c280 RCX=ffffffff8a0a6475 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=dffffc0000000000 RSP=ffffc9000068fdf8 R8 =0000000000000001 R9 =ffff88802c93602b R10=ffffed1005926c05 R11=0000000000000001 R12=0000000000000003 R13=0000000000000003 R14=ffffffff8e789190 R15=0000000000000000 RIP=ffffffff8a0d7fff RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe2700fb8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe2700fb6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7c341b1300 CR3=0000000076bab000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=5577e83fe02672247ba9717c7eb41960 XMM01=e3c3a6b1773a8706e312a779e325ea24 XMM02=d80f2cfc614b0b9332f4bc37462c3a08 XMM03=9c969f5009279a3355fba04653621a7a XMM04=00000000000000000000000038f755be XMM05=0000000000000000d1e2f5c97f090000 XMM06=000000000000000000000000d1e2f5c9 XMM07=d1e2f5c97f09000038f755bebbbbbb00 XMM08=e40000009c0000009a00000014000000 XMM09=00000000000000000000000000000000 XMM10=6a540cbd923ddc36d6c31b4b9ef2ec64 XMM11=9ac421d4e2ffca802c117722a44a80f7 XMM12=0d0c0f0e09080b0a0504070601000302 XMM13=0c0f0e0d080b0a090407060500030201 XMM14=0000000000000000000000000001c1c0 XMM15=00000000000000000000000000000040