last executing test programs: 12.672218208s ago: executing program 3 (id=267): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x0, 0x0, 0x2d, 0x0, "1f3d42500cc09b03943e381da96a56a9d40b10e2d79d7aa446b5c15d0fd728a2098e7d1f73fba604ea5bedd7044ebf05d5cc7ac2e79be8104f89a051ed8d648c67fc31b3f34bd0deebc63f92473475a5"}, 0xd8) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x3472, 0x40000060, 0x100007f, 0x6, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 12.42274737s ago: executing program 3 (id=273): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) getrandom(&(0x7f0000000380)=""/221, 0xdd, 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = userfaultfd(0x801) getrandom(&(0x7f0000000080)=""/62, 0x3e, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 10.230945324s ago: executing program 3 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000100)={0x0, 0x0, 0x1}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000005000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x30a040f, 0x4f) 10.102096619s ago: executing program 3 (id=290): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000480)={&(0x7f0000bdc000/0x4000)=nil, 0x4000}) mlock2(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x0) syz_clone(0x3c0ad280, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000004a00000429bd7000fbdbdf250a003f00", @ANYRES32=r2, @ANYBLOB="2dd0b80900170000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000002) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@gettaction={0x34, 0x32, 0x89910f7975f42df, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0xffffffffffffff38, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x34}}, 0x0) munlockall() munlockall() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x200, 0x0) ioctl$COMEDI_RANGEINFO(r8, 0x80106408, &(0x7f0000000440)={0x3, &(0x7f00000002c0)=[{}, {}]}) syz_clone(0x100000, &(0x7f0000000180)="27cdcc8b36ee44ea8f9cec7da89c60258d3e7dee9f17dd5ccbca0cc83fc7f8b26785d1c64d6884245a4edc62949d5f387e3e31ce6fe1eaf3a44bb3442787c9d9e1e4c090806fbd4739820c578bf268bbaf652098b054347ea17b7b5e17849cf75b425a48fdca9cef6bf2a06eb3ca1ab09842538386502db39124c45d424d241d9176621f822c7bf16167d842a890c9e3505efc3e81d2a3e5660a00881a1033dc8d38721e8b1fdae96a7d388617dfc385e4bd69e4385cb32c31bdbe", 0xbb, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000500)="ee5b47b7f46a067e478d46cd2f5febecb515bc0070500187715a87e9cb85fcfc18805de85c353e0c0a459ab8bf00573cb61c9f27fef12f247f9fcfdaccbfce79b8bb430fc008b674bea2a9170323f2bccd656cf4c458a1d0bb26d131fb7bd5fc842c00232ddffa569a8ed00d06d51c429d0b0ae838cf418a3871f9af840f42299d4487260cab6305f5d20352a1cf48579e9d0f3e0039e4460a550dc2dc04281166ea5b6ca28e11525538772b7d3a2fbd5fbe8502c51fada2fddbce30bd252251") r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r9, &(0x7f0000000400)=[{0x0}, {&(0x7f00000007c0)="85a5", 0x2}], 0x2, 0x2ffffc, 0x7) 9.942560595s ago: executing program 3 (id=293): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x408007}, 0x8) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x2000f, 0x4) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0xfdef, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@routing={0x84}], "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"}}}}}, 0x0) 9.641643535s ago: executing program 3 (id=297): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}}, "00186371ae9b1c03"}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x20000000, 0x181421) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r5}) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x29766d28c43626d}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x685f4723}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4008004) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) pidfd_getfd(r6, r7, 0x0) 9.581991576s ago: executing program 32 (id=297): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}}, "00186371ae9b1c03"}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x20000000, 0x181421) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r5}) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x29766d28c43626d}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x685f4723}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x100}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4008004) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x20800, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) pidfd_getfd(r6, r7, 0x0) 2.210338627s ago: executing program 1 (id=376): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x1, {0x0, 0x1, 0x2}}, 0x18) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xb, 0x0, 0xfffffffe}, 0x14}}, 0x10000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e046f0620"], 0x7) (async) sendmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xf5}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async) fcntl$dupfd(r0, 0x406, r0) 2.140752623s ago: executing program 1 (id=377): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCSETA(r1, 0x8925, &(0x7f0000000100)={0x2, 0x7, 0x1, 0x0, 0x13, "ec0038f7ece2f400"}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.901341287s ago: executing program 1 (id=378): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f00000000c0)) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0xb0, 0x4, {0x77359400}, {r2, r3/1000+60000}, {0x2, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x0, 0x1}, 0x2e, 0x2, 0x0, 0x0, "0ba079577da10093cef2e9168c69e60ca4fa1ee97187e05d27578264c3abfe4a994b01870aa7fc4b4f6b2d5f9e962936bb0c6bb305693313cb1102265e25bb10"}}, 0x80}, 0x1, 0x0, 0x0, 0x2000c065}, 0x1) (async) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0xb0, 0x4, {0x77359400}, {r2, r3/1000+60000}, {0x2, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x0, 0x1}, 0x2e, 0x2, 0x0, 0x0, "0ba079577da10093cef2e9168c69e60ca4fa1ee97187e05d27578264c3abfe4a994b01870aa7fc4b4f6b2d5f9e962936bb0c6bb305693313cb1102265e25bb10"}}, 0x80}, 0x1, 0x0, 0x0, 0x2000c065}, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000240)) sendmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x2, @remote, 'pim6reg0\x00'}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000300)="2f50bfc9f57874cc6e7555fc5945f26f58acbe3dcadfc4efcf7e0bf0d44701a01d5516a1117e001c083d982f0e30f677b102b2b6bc493bd96d437173cacbf070192c2e19", 0x44}, {&(0x7f0000000380)="571e922d07d612569d21ad52c029e25ab5bca6b3f02cc513ef94351bc2c3ddb513683ac74de7ee0417707fbfa94596", 0x2f}, {&(0x7f00000003c0)="a92a089815a53864166e86e840fdf6b4f3689d36d4a98079893d5438124394f3fb221d6a85ecc00c6a70a4fe2bd968da12649a0c50bc9b02a89f02d1ac115894c93c822ed3175350b473235b433e7c0dcff1b06b5c6e47865f76c8fcdcb1e76b6f3ca83167650ba61e5630c8924a85fa89927fca03807bd884a4cda995f3d1af88e7233eac7bebea03d8baef87838b5950ccea5cc5f9b4892f94ba5a97057f49cac55be13348f3d48d6c916cf368d3e2358604e795ecca641e1cdf93bf45ef448cfd456b02939439126766662ca679edf8933503aee94e4577bccbcaca192b3c4f5c4525ee08a3c48f4fae7e30677887aef3aadd3b", 0xf5}, {&(0x7f00000004c0)="1cae29fc2c60fe7f3d9df097cb3bf7d0881b9295475744ed2cf8d4f9ec2389499d4531c8c396cfab6353d37a9c467866a6f2b8e2892b3e2ed1149c8b4c01163ecb5cd738bc972041ab97655534a3c4c1b01e27aa28cfe5e00557842f7b3722f4c90cf0c55bd70d6ef6e67d1952691242a548e84fdc39d93feed4005430b1ff56a7", 0x81}, {&(0x7f0000000580)="c5de9af128e93015f3393c884437a936dca9bee3b2af4648fabd77ed3603240765cb946e34af81dfe37b5fc6bf413cd784b80a063bbda6c2d522481f60fbb4dc171430537f94ab0b041d27aa37df72e42b52386f5a5453ce4311488f2e0ef7d49589998a0e5e3cc2c0f3199f0541b2443e9787a1924cb68a175d615082cd1a8d432037f6929ec8f2dedbea4098bec0a8fd48683b176cab208e42edf9823ed8dcd121c4875ea0c29fe95c3db577b77aaef81bb561d86b29e6d13a6826b9661b9a3d3ee8e5e2c140629f3c954c5a8d1fb4eecf005b08f97f", 0xd7}, {&(0x7f0000000680)="1344805a63bd5de7c48e0a0eef99d5b39c396250f531c3518b01d7941c51c2d2e29b7ff981fa93702dd4610b3e8640f0bd69c74ca48cb02eb9ad55c2f581d28e3ce52746085548353d871f34", 0x4c}], 0x6, &(0x7f0000000780)=[{0x78, 0x114, 0xfffffffc, "5fe41bde4d2a02be3c873e19896c237a43e3ee0e28e1c9677690c447269c0fb9e6fe5eae8c80f5ab4e058808d8fc02c1577d93ff4a2efb4c68e9fe7f5821e2e956f8bb02bb747c4933bf9b4949bee05266ed2de9d30a32eebc14390df616026c7d97865d"}], 0x78}, 0x24004040) (async) sendmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x2, @remote, 'pim6reg0\x00'}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000300)="2f50bfc9f57874cc6e7555fc5945f26f58acbe3dcadfc4efcf7e0bf0d44701a01d5516a1117e001c083d982f0e30f677b102b2b6bc493bd96d437173cacbf070192c2e19", 0x44}, {&(0x7f0000000380)="571e922d07d612569d21ad52c029e25ab5bca6b3f02cc513ef94351bc2c3ddb513683ac74de7ee0417707fbfa94596", 0x2f}, {&(0x7f00000003c0)="a92a089815a53864166e86e840fdf6b4f3689d36d4a98079893d5438124394f3fb221d6a85ecc00c6a70a4fe2bd968da12649a0c50bc9b02a89f02d1ac115894c93c822ed3175350b473235b433e7c0dcff1b06b5c6e47865f76c8fcdcb1e76b6f3ca83167650ba61e5630c8924a85fa89927fca03807bd884a4cda995f3d1af88e7233eac7bebea03d8baef87838b5950ccea5cc5f9b4892f94ba5a97057f49cac55be13348f3d48d6c916cf368d3e2358604e795ecca641e1cdf93bf45ef448cfd456b02939439126766662ca679edf8933503aee94e4577bccbcaca192b3c4f5c4525ee08a3c48f4fae7e30677887aef3aadd3b", 0xf5}, {&(0x7f00000004c0)="1cae29fc2c60fe7f3d9df097cb3bf7d0881b9295475744ed2cf8d4f9ec2389499d4531c8c396cfab6353d37a9c467866a6f2b8e2892b3e2ed1149c8b4c01163ecb5cd738bc972041ab97655534a3c4c1b01e27aa28cfe5e00557842f7b3722f4c90cf0c55bd70d6ef6e67d1952691242a548e84fdc39d93feed4005430b1ff56a7", 0x81}, {&(0x7f0000000580)="c5de9af128e93015f3393c884437a936dca9bee3b2af4648fabd77ed3603240765cb946e34af81dfe37b5fc6bf413cd784b80a063bbda6c2d522481f60fbb4dc171430537f94ab0b041d27aa37df72e42b52386f5a5453ce4311488f2e0ef7d49589998a0e5e3cc2c0f3199f0541b2443e9787a1924cb68a175d615082cd1a8d432037f6929ec8f2dedbea4098bec0a8fd48683b176cab208e42edf9823ed8dcd121c4875ea0c29fe95c3db577b77aaef81bb561d86b29e6d13a6826b9661b9a3d3ee8e5e2c140629f3c954c5a8d1fb4eecf005b08f97f", 0xd7}, {&(0x7f0000000680)="1344805a63bd5de7c48e0a0eef99d5b39c396250f531c3518b01d7941c51c2d2e29b7ff981fa93702dd4610b3e8640f0bd69c74ca48cb02eb9ad55c2f581d28e3ce52746085548353d871f34", 0x4c}], 0x6, &(0x7f0000000780)=[{0x78, 0x114, 0xfffffffc, "5fe41bde4d2a02be3c873e19896c237a43e3ee0e28e1c9677690c447269c0fb9e6fe5eae8c80f5ab4e058808d8fc02c1577d93ff4a2efb4c68e9fe7f5821e2e956f8bb02bb747c4933bf9b4949bee05266ed2de9d30a32eebc14390df616026c7d97865d"}], 0x78}, 0x24004040) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000840)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f00000008c0)) r5 = accept$unix(r0, &(0x7f0000000900), &(0x7f0000000980)=0x6e) sendmsg(r5, &(0x7f00000022c0)={&(0x7f00000009c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @local}, 0x4, 0x3, 0x3, 0x3}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000a40)="8a87562e89c59e846124d16f6444bb172a259650ec034ff131252d1543dfa46459518242d738511fba3f5450cf4adcfd6d475f6da70725d71a5362ab124e43371ebf2738710dd7688925c18d37a2171451e7c80839e2f83c64b196dfb5709ec68dbdc21c324f8df0634aec8f1799d8d79e7d1b3a3c8b6f97200153c51c0f0db0020c1c2a92ea70f05022266a820128a28a7b065377e8d0", 0x97}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="fe9abb9d5e68972dfdef5598822bb4a8d7e9aa49a6db21668e02c60866ffcc87354287cbb15152a73af676ac50977b6c7b82a74b0d42306d69d3201ef8f6978952e2f7f6c2b8b6c76b9141b51cc082a492acd9c2e8242ce1599e9892a5ef04e81a8415699d5f85860b7e08c8941d61529fdb43c6fb23d8d7ec4dec667032e587", 0x80}, {&(0x7f0000001b80)="c633f9cd2436533ca4f420ee25c19598645b4d110d0f5bc6e602ee5e4490d94148397d1d16471585fcb954fe417d96db4b93c79f1aa26d30891f849ba56f3f5a6b83f0d5c58ce908540213f8e5bafe702ffe55416bbb4a3020ec6b178f57809ddb08b8e4f88a8f70fb1d1f2db909baaafd749204c52877cb25baa8176c0284c414e7758d6f853bf4028e35f98d6e7af83d", 0x91}, {&(0x7f0000001c40)="e6985c3c559776f008501431456cebd991d1473db6c4a455a44002eaf737323f4c0d7030d2c146bfa3f1da654f8e80151fb68691aea5546c5b86f8376f6d49bdd3ab5d0a56a8a3e9aaf471ef03fede0c3aef42fbef82ef258cf2567aa0838f48641b7327bd5d58c9ab1d18705f760ba7ea2b545aae839bc8a8b07d0308ebdbfa4d583ecb88d4c79a7dd4eb166451cb", 0x8f}, {&(0x7f0000001d00)="940c417ae2eb17fd1840a89a21fc5ac03db69db1efe2607c8377cdd13dce8c2fabef93a645eb172a48b24f44c5c241e0f39150e6716b874d5cfe6165aa45b724806c3c7ca9525d6e2bfb47a5b3cf956b182e44ba332b448359bec5921c1e98e7e8d9da076f727806e7652e803799e08564dc60ab49b1d283d235642713e547b07f69567f8e1162c242595541314962c5dfd5baf6d67f2cbb06ca5f60b8107071857af2c4ed2a020782a3fb6d17bef2a6d3bca4c430d46bf5419695d70576bac201f68d815d4bc0949fba95de20459a3cb54b61ef4e775bcf7a222cf1d636835b92207855d9c5452dc5647da2a779", 0xee}, {&(0x7f0000001e00)="7253a41a241a8ba874c6c0a2a366df9af4e748566b2c29aeadff897eacf9ff8727b2307fcb059b1281de0720a708d9c9054bba1341823bc04a72f0aa14bbda1b115fc68bcc5ae0bc0ee649", 0x4b}], 0x7, &(0x7f0000001f00)=[{0xd8, 0x107, 0xfffffffc, "5aaf76b85513ea676f2bdaede336b07435c4c2ca17aaf015e798b874a8db5ea4518c3137c1051771f95fa214e2b86053e81f55fd25c98eb9df74a42e6cd0f30234ba697ea091e0a055c2961d68e2601d620d262ad3f136dbf3d9238f88e666033ff1647e38e83dab359adb5a2c86cb968a71fa87432d9bd64adabebd43e5ed7f1a7d66eb0f17ff568d0472669cd5c5e42780b7b217e2796b100545f3b85eb971595f312344f48b64e2bf147db71f9314f2fdb7c730974ff918a71175aa13c217e1"}, {0x28, 0x108, 0xb29e, "b1acdd96b89c3cfa77a9a2560cbd5c16b2056d5084c27c00"}, {0xd8, 0x16, 0xf1b, "445f433760a56c4c0b536c19334a13254fd7a6ea1f2ce15216f2ebfb77580e57c11d8b54618dc6d67b18f02b532b768e5abe666cf4aa183e4bb93f2a6bb097aee197dd185bdf9f51e02b7cc9cf5467deff20a321fe1d1cff15f48b94dea7c316ddbc95ec207a9526056813e1a42b955c10fd6521c218b3a40d546013ecfa17c20ada0da80afc81948b9140161b52a62d62ae9c8e8055d51b15d528de2e1b2659ca1977f6b73462e68571aebe2918d2116fa295ca6f7e28d0e9168439c38e810abca9"}, {0x100, 0x103, 0x2, "a958efe786383850b97672fad6f295ff58ae8fcd2331f551875c66f819b2db387e43a4dca4d4df559d79db3c69c9eb24ff28c268f7a8528b82886eaf1ea9c0264cab859c65aa3edd2c48edc3b8377d1ac632d392d249d72e11d15c611d1c8dfd7d55602efec9f65459ad48d918fd53b075c51c21a31699827d5370a40ba59afc3852faa899d92dfab1e05074e80e48618a2904de9755348e886e49f7edf82a3c08146c86e0f467860108124e9aad447186f5b7c793d2027d92bb7755b9ef0dc167d5196dbf30a49c61e97025c2f86234184f0c0fac03407d2fd5186c397eb888fc91294c839e0badd1ab0e85"}, {0xb8, 0x0, 0x0, "8ad275a418042b159d50d04d007c9100d709d99fce7d06c062586bc3d555d2955037a7467be46072c85be37f2f477f3a136fbd9762abecd21094a9d8a2d6ffe8c86bb97f38f0b921e97e38f226792f2840a1859a307f24c8bd823e2eba0312b46d28cec9d320c418d596cc730f694b6e85d2a5bb74b36ddb78a4af82c2b1b3c145f7dabd51cc977798fed13644b4b6e325ce4d124effd8897d7ec133143e08dd118d9f1d2d5bc854"}], 0x390}, 0x4) clock_gettime(0x0, &(0x7f0000002300)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000002340)={{r6, r7+10000000}, {0x0, 0x989680}}, &(0x7f0000002380)) (async) timerfd_settime(r0, 0x1, &(0x7f0000002340)={{r6, r7+10000000}, {0x0, 0x989680}}, &(0x7f0000002380)) r8 = accept$inet6(r0, &(0x7f00000023c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000002400)=0x1c) recvmsg(r8, &(0x7f00000029c0)={&(0x7f0000002440)=@alg, 0x80, &(0x7f0000002940)=[{&(0x7f00000024c0)=""/80, 0x50}, {&(0x7f0000002540)=""/193, 0xc1}, {&(0x7f0000002640)=""/128, 0x80}, {&(0x7f00000026c0)=""/48, 0x30}, {&(0x7f0000002700)=""/62, 0x3e}, {&(0x7f0000002740)=""/213, 0xd5}, {&(0x7f0000002840)=""/197, 0xc5}], 0x7}, 0x102) gettid() (async) r9 = gettid() fcntl$setown(r8, 0x8, r9) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002a00), 0x105c00, 0x0) ioctl$TIOCGSERIAL(r10, 0x541e, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002a40)=""/250}) sendmsg$nl_route_sched(r0, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)=@gettfilter={0x44, 0x2e, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x3, 0xf}, {0x10, 0xf}, {0xd, 0x3}}, [{0x8, 0xb, 0x804}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x10000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)=@gettfilter={0x44, 0x2e, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x3, 0xf}, {0x10, 0xf}, {0xd, 0x3}}, [{0x8, 0xb, 0x804}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x10000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r11 = accept$inet6(r8, &(0x7f0000002d00)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000002d40)=0x1c) getsockopt$IP6T_SO_GET_ENTRIES(r11, 0x29, 0x41, &(0x7f0000002d80)={'nat\x00', 0x1f, "7cbc4b984e0668a9f552ca6ba71dd53197fae0cc75235e99a04b5a8d5fc561"}, &(0x7f0000002e00)=0x43) syz_genetlink_get_family_id$ethtool(&(0x7f0000002e80), r0) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002e80), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000002f80)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x50, r12, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40014}, 0x4000091) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003000), r0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000003040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000003100)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x1c, r13, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20010000) ioctl$KVM_SET_SREGS2(r0, 0x4140aecd, &(0x7f0000003140)={{0xffff1000, 0x4000, 0xe, 0x8, 0x2, 0x5, 0x4, 0x3, 0x5, 0x8, 0x3, 0xfa}, {0x4000, 0x30000, 0x0, 0x7, 0x2, 0x1, 0x0, 0xda, 0xfe, 0xf8, 0x5, 0x1}, {0x7000, 0x9000, 0xf, 0x6, 0x3, 0x7, 0x4, 0x4, 0x80, 0x6, 0x7f, 0x10}, {0x1, 0x60000, 0xc, 0x1, 0x80, 0x5, 0x5, 0x9, 0x4c, 0x0, 0xef, 0x65}, {0xdddd1000, 0x40000, 0xa, 0x2, 0x2, 0x35, 0x3, 0x2, 0xd, 0x0, 0x7f, 0x3}, {0x41000, 0xffff1000, 0xc, 0x6, 0x8, 0x6, 0x3, 0xab, 0x7f, 0xfc, 0x7, 0x3}, {0x7000, 0xeeeeb000, 0x5, 0xb, 0x3, 0x81, 0x1, 0x9, 0xff, 0xf7, 0x4, 0xe4}, {0x3000, 0xeeee0000, 0xc, 0x8, 0x3e, 0xaf, 0x2, 0x8, 0xc, 0x7, 0xa3, 0x2}, {0xb000}, {0x70000, 0xff}, 0x18, 0x0, 0x0, 0x102220, 0x4, 0x801, 0x3000, 0x0, [0x1f, 0xffffffffffffff56, 0x0, 0x1]}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000003280)={{r5}, 0x6, 0x1, 0x56d}) (async) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000003280)={{r5}, 0x6, 0x1, 0x56d}) syz_emit_vhci(&(0x7f00000032c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@none}}}, 0x9) 1.900718017s ago: executing program 1 (id=379): pipe(&(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@local, 0x0}, &(0x7f0000000100)=0x14) r2 = socket(0x1f, 0x1, 0xb) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) (async) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, 0x0, &(0x7f00000000c0)) (async) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x125000, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f0000000500)={r2, &(0x7f0000000340)='#%\\\x00', 0xc00, &(0x7f0000000440)={@align=0x8, {0x4, 0x101, 0x7fff, 0x9}}, 0x6, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x5ddc51d0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_GET_MSRS_sys(r7, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x491, 0x0, 0xcd}]}) (async) r8 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@getnexthop={0xffffff39, 0x6a, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_GROUPS={0x4}, @NHA_OIF={0x0, 0x5, r9}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, r4}]}, 0x4c}}, 0x40000) 1.832346097s ago: executing program 1 (id=380): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0xfffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00000005c0)=0x7, 0x4) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fed5df2563000000080003000eb9ae294094834e39bd0885ab89466a45e156013e8943d29cd26f0f7969671a4912", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x4040000) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000025bd7000fedbdf252500000008000300", @ANYRES32=r7, @ANYBLOB="0c00990000000000160000000d0034008bbbee6a7e13833e0b000000080026006c09000008009f00030000000800a10006000000050019010f000000080026006c090000"], 0x60}, 0x1, 0x0, 0x0, 0x4000045}, 0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000180)=0x84) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getpeername$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) timer_getoverrun(r0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000500)={'sit0\x00', r8, 0x1, 0x8000, 0x6, 0xffffffff, {{0x13, 0x4, 0x2, 0x3, 0x4c, 0x67, 0x0, 0x2, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp_addr={0x44, 0x34, 0xd9, 0x1, 0x5, [{@multicast1, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private=0xa010101, 0x1}, {@empty, 0x1}, {@private=0xa010101, 0x1}, {@rand_addr=0x64010101, 0x8}]}, @noop]}}}}}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r9, 0x0) (async, rerun: 32) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r10 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r10, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) (async, rerun: 32) pwritev(r9, &(0x7f0000000040)=[{&(0x7f00000000c0)="72e057be5c3df3c986b992c4f7326c1182a5bdda35491638f1da981169af136aa08e7721e02df85e9680aad9226083a69f0ffd0289d7f0cb051cffb0bec3d05cd1399dc11db5666e062d58f2610a81fed43d1b39bc2ca7be2d9c135551b3a9942eda929f435cb5d35d92c5043e8ad8f9ef3348c39a8eeaf3787cf9e3d2b51d93759a8f4f732eea3684701e082346df0141ae7d49fa6d9096749cc32c64621c2acc98896bfb1d29d1cc8ed99d", 0xac}], 0x1, 0xffff0000, 0x1b3566b5) (rerun: 32) 1.128658008s ago: executing program 0 (id=392): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r3, &(0x7f0000000000)=ANY=[], 0x6) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) write$P9_RGETLOCK(r5, &(0x7f0000000800)=ANY=[], 0x1f) (async) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x40000025, r5, 0x0) (async) splice(r4, 0x0, r6, 0x0, 0x80, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4) (async) bind$inet6(r6, &(0x7f0000000780)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="708500", @ANYRES32=r8, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r8, @ANYBLOB='\b\x00\r'], 0x70}}, 0x80) (async) sendto$packet(r1, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r8, 0x1, 0x0, 0x6, @multicast}, 0x6e) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r9, &(0x7f00000000c0)=""/55, 0x37) (async) getdents64(r9, &(0x7f0000002f40)=""/4098, 0x1002) (async) ioctl$SIOCGIFMTU(r9, 0x8921, &(0x7f0000000700)={'vlan1\x00'}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x14, r11, 0x301, 0x703d28, 0x0, {0x34}}, 0x14}}, 0x0) (async) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000300)={0xd, 0x6, 0x5, 0x2, 0x79d5, 0x100000000, 0x5, 0xfff}, &(0x7f0000000340)={0x8000, 0x1000, 0x5, 0x9, 0x7ff, 0x7fffffffffffffff, 0x401, 0x8}, &(0x7f0000000480)={0x4, 0xffffffffffffffff, 0x4, 0x7, 0x4, 0x13, 0x7, 0xc5d1}, &(0x7f0000000580)={r12, r13+10000000}, &(0x7f00000006c0)={&(0x7f00000005c0)={[0x5]}, 0x8}) 1.020462888s ago: executing program 0 (id=395): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x3, 0x1, 0x10, 0x7, 0x10, 0x81, 0x100, {0x0, @in6={{0xa, 0x4e23, 0x4, @mcast2, 0xe}}, 0x4, 0x8001, 0x400, 0x2, 0x7}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000640)={r1, 0xfd, "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"}, &(0x7f0000000540)=0x105) r2 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x20) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r6, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x2, 0x0, 0x1, 0x8001}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000140)={r3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0xc, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) read$char_usb(r8, &(0x7f0000000000), 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000300)) 952.533198ms ago: executing program 2 (id=397): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf, 0x7fff7ffc}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf, 0x7fff7ffc}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={r3, 0x1, r0, 0x8, 0x80000}) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r4 = accept$ax25(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={r4}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, &(0x7f0000000100)={0xfffffffffffffff8}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, 0x1402, 0x1, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x48800) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x200000000000000) (async) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 952.182347ms ago: executing program 4 (id=398): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = fanotify_init(0x1, 0x400) symlink(&(0x7f0000002040)='./file0\x00', &(0x7f0000000080)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="67a52a8e24d34d7a7cfd00a933ceb12dca70d19df9e03cc25119f1953bd1fb9287b2fe06b15f5d3a569aca8ebcc0b3aa0a84d0228482bfee0017eb21a63310be1d0a127a5a75360232e213728e1829f9bef5346a0910b389b0fe97200055587593a3cf48c8bd5949b3c77093a0bec0debc73a41267987fbd2a2d80dc8401a9474995b3667ea62f6baf65681a41aec021cfcbdf3844e7ad6ec23449a4c0d296c5bdba6a2f2a98fb453dd106183e56f3fbbe7c0f8f0e2b79b200cbc5e62bec", 0xbe}, {&(0x7f00000001c0)="8b745297e8408bd9f17e2a7bb98b63827650945c4cbe2ff2d89d98f3ddc67e1ecc8d037e09d48b658dde3af82d606664f040f585c24f1ad4d7786457025ab4a1fdf7cfb7b1ed8a3dd625d8e281b70e530e645a943646", 0x56}, {&(0x7f00000002c0)="7a976c0e8c11cf143d41218c5194845693e29c0441bb8c0861d79384c6e04b6a701f75cf840cf4998c61114e898951fb39611008eb2076c5e468ee02096e7531f5c55aaf95e603d59dd6c4994f9f05bac4a30b4a2b9b228f0519e38d43210b49c146aa8bcb5d6252c104b8b2a0b2ae1e5baccb8e0cb767f0668aa76f2f9b39783c59ee3574c0de0a85dd2e74e6cf669fe463aadc50c24a0f496e1871a9bcfa5000f50e5e10ee884a057dbb610d1048c65d8b3c038a1ca6f10336a63b052e3afb49d95be81454e9dee09ece4abd39d530", 0xd0}, {&(0x7f0000000000)="e065386478cfbcf3de3444636bab23ff3ccda3791c6cb7fb4ae52eafa7dd079f000471cb0b5f9560bdd8e57529e6b8bcb84995c485890d2901d9ba", 0x3b}, {&(0x7f00000003c0)="8534764c1dd11e94bbcfd7cab80bb816b55403ecc1b75a5b5ea10e6d14cca7090d03deaf23e58f18946cc595ed014773ddb0d1c652c6a054093c3c7d866c76db29930cdd5f57d47296b6005ba1b8f74f007507dcb34e2195b67840c899bcd6d77d075d36d5e13375468777a0a1c99a4002e0dc4d2ac17a6ac000de72627d4cebca72182f32b613748fede1fd96cefec0e5b90251e3651958112c72bb5c846ae3a0b3ce3ccd622c5d6d163a1e383dc9a2e28de64ad3b1595882dcd5a6b593a3158b881b09", 0xc4}, {&(0x7f00000005c0)="1724857cb9806d1fd5898bd1a623f2cea8f955ee2472156984ea79f3388c1f89ac7be375fde6f9758d09f48e435afc3f5df77da148b1d7f4546171481bcb0b1419e659e831cb9278d4b863fbf46be95e2112c5a3632f46e9f30fe2b46951b2f84fe020f02941ec440b61105d935121dd5ecf465950d2c4261f555f67df1a602bfbe94082eacd57e60d4737201ead74941694230795e0f74cd9ec05b6c369bcaff8293b3f2013032cf54c4d8b692b6f6d9486951101f29d03fb500acbfdc3f0a6e259c3094de8937311", 0xc9}], 0x6, 0x4) 892.383784ms ago: executing program 2 (id=399): prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='\\%@\x00') r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x4fa7, 0x102, 0x2, 0x10000421, 0x1, 0xcc7, 0x7ffffffe, 0xa, 0x5, 0x3ff, 0x0, 0x300, 0x81, 0x1, 0x9, 0x1, 0x40400, 0x8, 0x4, 0x1fe, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3b, 0x8, 0x4, 0x7ffffff]}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000000)="2200000809809a85", 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r4, &(0x7f0000003340)={0x2020}, 0x2020) 780.155696ms ago: executing program 2 (id=400): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0x3}, [], {0x4, 0x4}, [], {0x10, 0x5}}, 0x24, 0x0) 702.26521ms ago: executing program 0 (id=401): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000080)={'trans=virtio,', {[{@access_any}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7", 0x73}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e", 0x68}], 0x4}}, {{0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a", 0xdb}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca", 0x89}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 701.710926ms ago: executing program 4 (id=402): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000100)) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x7000000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x20000, 0x4}) pipe2$watch_queue(&(0x7f00000002c0), 0x80) (async) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000100), 0xfef0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x5e) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$unix(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)='M', 0x1}], 0x1, &(0x7f0000001500)=ANY=[], 0x98, 0x20000000}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) 700.873587ms ago: executing program 2 (id=403): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002076d93848180f2e00090027bd7000000000000400000004000e80"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 592.410896ms ago: executing program 2 (id=404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r4, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r0, 0x1f, 0x1, 0x94, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0}, 0x40) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100)) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x17b}]}) (async) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r13 = dup3(r12, r8, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x8, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r13, r5, 0x1a, 0x2034, r5, @void, @void, @value=r14, @void, r7}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0x10, r6, 0xdd773000) 590.667591ms ago: executing program 4 (id=405): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xf) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000040)=0xf2, 0x4) 461.30337ms ago: executing program 0 (id=406): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x4, 0x2, 0x8}, {0xa0, 0x2, 0x7a}, {0x7, 0x40, 0x9, 0xed5}, {0x3, 0x9, 0xbf, 0x6}, {0x401, 0xa4, 0x9, 0xfffffff7}, {0x3, 0xe5, 0x7, 0x83}]}) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'dvmrp0\x00', {0x2, 0x4e23, @multicast1}}) r2 = syz_io_uring_complete(0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x81, 0x81f, 0x20, @loopback, @loopback, 0x8000, 0x1, 0x2, 0xf9ba}}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x22, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @tail_call, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @printk={@ld}, @call={0x85, 0x0, 0x0, 0x7e}, @jmp={0x5, 0x1, 0x5, 0x3, 0x6, 0xfffffffffffffffe, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0xc8, &(0x7f0000000340)=""/200, 0x41100, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xf, 0x7ff, 0xc0000000}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x3, 0x5, 0x6, 0x6}, {0x4, 0x1, 0x7, 0x6}, {0x1, 0x4, 0xc, 0xb}]}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r3, 0x25, 0x4, @val=@netkit={@void, @value=r4}}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000640)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f00000006c0)={0x8, r6}) ioctl$BLKGETNRZONES(r2, 0x80041285, &(0x7f0000000700)=0xfffffffa) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000740)={0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = accept4$nfc_llcp(r5, &(0x7f0000000780)={0x27, 0x0}, &(0x7f0000000800)=0x60, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) r10 = syz_genetlink_get_family_id$fou(&(0x7f00000008c0), r2) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r10, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044051) connect$nfc_llcp(r8, &(0x7f00000009c0)={0x27, r9, 0xffffffffffffffff, 0x2, 0x4, 0x2, "73e49aa977d503e982949884ac2646439a23240fab135c8264739eb73427aff2df61017c81c80741813d382d7609699dbe03f8a6331372250e4e80a42bb1a8", 0x38}, 0x60) r11 = openat$cgroup(r5, &(0x7f0000000a40)='syz1\x00', 0x200002, 0x0) openat$cgroup(r11, &(0x7f0000000a80)='syz1\x00', 0x200002, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000ac0)=r5, 0x4) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000b00)={0x0, 0x0, "047caa5b538804c872fb7f79ed84e593"}) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000b40)={0x8001, {{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xc}}}, 0x88) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), r7) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000010}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r12, 0x200, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c001}, 0x800) write$char_usb(r2, &(0x7f0000000d40)="bd", 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000d80)=r4, 0x4) ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000dc0)) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000e00), 0x80800, 0x0) 391.515108ms ago: executing program 2 (id=407): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0xe0942) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r2, 0x2004, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000180)={0x0, 0xa, 0x5, &(0x7f0000000100)={0xb, "b6f5eac76e436afb93e063ed9db4f9bf42fd27e6a154034b28a38d7b6ef7ffe7e6"}}) fallocate(r0, 0x11, 0x0, 0x5345) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) read$dsp(r4, &(0x7f00000000c0)=""/219, 0xdb) 262.369949ms ago: executing program 4 (id=408): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0xd0, 0x1a0, 0x0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0x0, 0x0, 0xff000000], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0xbc529153b073ce1e, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x40}, @empty, [0x0, 0xffffff00], [0x0, 0xff], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000340)={0x5, 0x1, 0x2}) (async) close(r2) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) (async, rerun: 32) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (rerun: 32) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000180)={@my=0x1, 0x1}) (async) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r6, 0x7ac, &(0x7f0000000100)={0x0, 0x0, 0x1}) (async) r7 = syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x20000) ioctl$IOC_PR_PREEMPT(r7, 0x401870cb, 0x0) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7782ae1b", @ANYRES16=r8, @ANYBLOB="000126bd7000fcdbdf2508000000400001800600010002000000050002000300000008000300ac14141905000200040000001400040000000000000000000000000000000001060001000200000008000200060000000800040005000000080004004b7000001c000180060001000200000005000200ff00000008000600080000000500050039000000050005000700000048000680080003006401010108000300e000000208000300ac1414bb080006000a00000014000400ff0100000000000000000000000000010800060003000000060005004e240000"], 0xe0}, 0x1, 0x0, 0x0, 0x8005}, 0x20000000) (async) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, &(0x7f0000000100)='barrier') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a1c000000090a010100000000000000000200000208000340000000101c000000080a010800000000000000000100000108000b40000000028c000000140a010100000000000000000700000a0900010073797a31000000000900020073797a3100000000490008003dfffaf805028bec8c8dba722f8ca1cb8fdcde29665c60c0acc3a83e08549029a40a43576aad92137bb95305a95d19830da32c1f78e9162617e6dcfb4cd455b0562b57f6a73488407620b94d6dd790001484e50000000c0006400000000000000004080003400000000738010000000a01020000000000000000000000056f0006001f0dc04605876c8ccd80a8b470399aff1369574c1dee070eabe7018169346b1834dbe88506544400576918db38f64272a31917eae256cd263ff559258e2a755176fc58d038cf8038a04b7ae639264ded99eeffe60ed8c254f6f0ce3e028ec92c11686576addb5163a2198b000900010073797a30000000000900010073797a30000000008e000600385fd695630775e85ba410e755bd06033ff14f618e1d99d597ee93cdba5f861bb7c595048ddc891d41a8a941be3f6dcedb54f73b98ef1bbc5454e1987c113ae422363c902dcba229103d562e97ad0ca11e03bdcbe38fa66e8328a5909c90273b6c857abda3eeb570a4a0153ee31935eb5e07d09698edc07a92e03770197bf3ab5822c809dfe84059c74900000c000440000000000000000160000000140a010300000000000000000a0000080900020073797a32000000000900020073797a30000000000900010073797a310000000020000800072a2ac245d9ca833d2a36bd87ae70c76b3474d7394a72a08cf2fdc3080003400000000220000000120a00000000000000000000070000090900010073797a3000000000140000001100010000000000000000000500000a"], 0x2a4}, 0x1, 0x0, 0x0, 0x44000}, 0x20000084) (async, rerun: 64) ioctl$SNDCTL_SEQ_RESETSAMPLES(r5, 0x40045109, &(0x7f0000000580)=0x7fff) (async, rerun: 64) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) openat$incfs(r5, &(0x7f0000000600)='.log\x00', 0x2, 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000000)={{0x0, 0x2, 0x400, 0x0, 0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r9, 0x54a3) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000c04356b57c949b1919270a8eb1ca010000000000000000000500f30a140000001100010000000000000000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000040) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 261.464074ms ago: executing program 0 (id=409): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000", @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB="00000000000037f8000000000000000000000000f2"], 0x50) (rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) connect$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x4e24, 0x3, @remote, 0xffff}, 0x1c) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async, rerun: 64) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000000)={0x30a32c1, 0x1, @qam={0x1, 0x0, 0xe}}) (async, rerun: 64) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000000180)=0x58, 0x3fffff) (async) r8 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r8, 0x40085400, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 200.166618ms ago: executing program 4 (id=410): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) r2 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='utf8', &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x80u\x00x@\x19\x14\xfb\x05\xd5#\xfe\xff\xed+\x12\xc9\n\x87D&Q\xc6\x122\x1a\x8ap\xd7%\xb6XN\x8e\x00\xe2\xff\x1c\xfct\xe71\x12\xcb1m5\x96[\xf8q\x7f\xcd\xd5Z\x8d\xa6P\x05)\xec}\xb2\xb5\xe8\x92\xad\xe9\xd1\xb8Q\xab\xc2AoRs\x0fh\x80Wt\xf2\xb5\x14\xb3\xa5\xf2uP\xc3%U\xece\x11YF&T\x88\xe1\xd7?\x04\x1a\x06K\xb1\xfb\xf6\x81\xc8{>\x7fp\xe7\xc70\xf6\x13\x8c~\xc5\xa6\xf6n$%I)\xd7-\x93\xb6\x9c~\x83\xf5wz\x7f\xb6\x02\xd4\xfc\x00\xe4\x1a4?\x03\xfd\xeb\x84\xf2v\xbb\x94u9dg>J\xe6\x8c\x13\xd0\xb6O}\xf3\x13\xdc\xae\xb7\x0f8(\x94\xf9\x86\x7fyEq\xfa\xe3\xa2\x84\xf0\xb5\xf5\xab\b\xf1c\x98\xcbf\x1e/\xe2\x01\xd1\xfc6\xe4\xdd\x14\r\xd3\xd1\x1a0x0}) sendmsg$NL80211_CMD_SET_BSS(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r13, 0x1, 0x270bd2e, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40000) r15 = syz_open_procfs(0x0, &(0x7f00000190c0)='syscall\x00') pread64(r15, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_clone3(&(0x7f0000000080)={0x100100, 0x0, 0x0, 0x0, {0x400020}, 0x0, 0x0, 0x0, 0x0, 0x0, {r15}}, 0x58) 409.761µs ago: executing program 1 (id=412): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = syz_io_uring_setup(0x1094, &(0x7f0000000000)={0x0, 0x7f36, 0x800, 0x1, 0x2c3, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x4034, 0x0, 0x0, 0x2}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=413): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x60001, 0x108) open$dir(&(0x7f00000001c0)='./file0\x00', 0x189440, 0x40) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0xa8, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x8}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x40, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x16, 0x6, "da314ac9cf12acc75b0fb19693f4d70796c6"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa8}}, 0x0) inotify_init1(0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000600)={0xf77d, 0x9e2f}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x24010) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012143, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000002c0)=0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) readv(r2, &(0x7f0000000680)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1) memfd_create(0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) read(r3, &(0x7f0000001180)=""/4083, 0xff3) pread64(r3, &(0x7f0000000380)=""/195, 0xc3, 0x400b) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000046f1b49ab6afa3882842d140fe616b2218f3a4f39952447e91e71d49c0fbee38acfc97fe76a6a5a06ffd01eb8f8ff3d62f9fec8a00fd69c3b3ec50e055f5b3dbba7e68062cbe9f7db7fe275068c09dc4c1baea90e3522ce037655d11949e1992a14396ca", @ANYRES16=r5, @ANYBLOB="210327bd7000fcdbdf2504000000"], 0x14}}, 0x4000000) unshare(0x48020200) kernel console output (not intermixed with test programs): [ 52.984066][ T40] audit: type=1400 audit(1774471774.575:58): avc: denied { noatsecure } for pid=5905 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 52.994328][ T40] audit: type=1400 audit(1774471774.575:59): avc: denied { write } for pid=5905 comm="sh" path="pipe:[2897]" dev="pipefs" ino=2897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 53.004068][ T40] audit: type=1400 audit(1774471774.585:60): avc: denied { rlimitinh } for pid=5905 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.012347][ T40] audit: type=1400 audit(1774471774.585:61): avc: denied { siginh } for pid=5905 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:53064' (ED25519) to the list of known hosts. [ 55.083584][ T40] audit: type=1400 audit(1774471776.695:62): avc: denied { name_bind } for pid=5917 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 55.130660][ T40] audit: type=1400 audit(1774471776.735:63): avc: denied { execute } for pid=5918 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 55.141088][ T40] audit: type=1400 audit(1774471776.735:64): avc: denied { execute_no_trans } for pid=5918 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 57.757716][ T40] audit: type=1400 audit(1774471779.365:65): avc: denied { mounton } for pid=5918 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 57.769184][ T40] audit: type=1400 audit(1774471779.375:66): avc: denied { mount } for pid=5918 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 57.772868][ T5918] cgroup: Unknown subsys name 'net' [ 57.926034][ T5918] cgroup: Unknown subsys name 'cpuset' [ 57.932767][ T5918] cgroup: Unknown subsys name 'rlimit' [ 58.089246][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 58.089264][ T40] audit: type=1400 audit(1774471779.695:68): avc: denied { setattr } for pid=5918 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.102743][ T40] audit: type=1400 audit(1774471779.695:69): avc: denied { create } for pid=5918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.111718][ T40] audit: type=1400 audit(1774471779.695:70): avc: denied { write } for pid=5918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.120313][ T40] audit: type=1400 audit(1774471779.695:71): avc: denied { read } for pid=5918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.129236][ T40] audit: type=1400 audit(1774471779.705:72): avc: denied { mounton } for pid=5918 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 58.140392][ T40] audit: type=1400 audit(1774471779.715:73): avc: denied { mount } for pid=5918 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 58.150302][ T40] audit: type=1400 audit(1774471779.735:74): avc: denied { read } for pid=5642 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 58.160112][ T40] audit: type=1400 audit(1774471779.755:75): avc: denied { read } for pid=5642 comm="dhcpcd" name="n102" dev="tmpfs" ino=1965 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.169653][ T40] audit: type=1400 audit(1774471779.755:76): avc: denied { open } for pid=5642 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1965 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.180280][ T40] audit: type=1400 audit(1774471779.755:77): avc: denied { getattr } for pid=5642 comm="dhcpcd" path="/run/udev/data/n102" dev="tmpfs" ino=1965 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.183279][ T5923] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 58.893990][ T5918] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.933564][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.937676][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.938634][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.940417][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.940427][ T5947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.942536][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.943440][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.943670][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.945045][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.945547][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.946333][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.947140][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.947372][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.948656][ T5947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.950195][ T5948] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.951608][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.952525][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.952662][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.958976][ T5939] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.984101][ T5939] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.236853][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 63.236868][ T40] audit: type=1400 audit(1774471784.845:90): avc: denied { module_request } for pid=5931 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 63.274816][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 63.307781][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 63.328024][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 63.337400][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 63.535680][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.538932][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.541706][ T5933] bridge_slave_0: entered allmulticast mode [ 63.546062][ T5933] bridge_slave_0: entered promiscuous mode [ 63.563375][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.566779][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.569540][ T5932] bridge_slave_0: entered allmulticast mode [ 63.573351][ T5932] bridge_slave_0: entered promiscuous mode [ 63.598045][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.600869][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.603971][ T5933] bridge_slave_1: entered allmulticast mode [ 63.607575][ T5933] bridge_slave_1: entered promiscuous mode [ 63.611602][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.614549][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.618350][ T5932] bridge_slave_1: entered allmulticast mode [ 63.623584][ T5932] bridge_slave_1: entered promiscuous mode [ 63.637574][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.640613][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.644272][ T5936] bridge_slave_0: entered allmulticast mode [ 63.648515][ T5936] bridge_slave_0: entered promiscuous mode [ 63.653192][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.656446][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.659894][ T5936] bridge_slave_1: entered allmulticast mode [ 63.664573][ T5936] bridge_slave_1: entered promiscuous mode [ 63.690644][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.693949][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.697018][ T5931] bridge_slave_0: entered allmulticast mode [ 63.700694][ T5931] bridge_slave_0: entered promiscuous mode [ 63.744972][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.749620][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.753454][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.756916][ T5931] bridge_slave_1: entered allmulticast mode [ 63.761253][ T5931] bridge_slave_1: entered promiscuous mode [ 63.778636][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.784733][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.789296][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.810348][ T5936] team0: Port device team_slave_0 added [ 63.815190][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.821088][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.838009][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.842351][ T5936] team0: Port device team_slave_1 added [ 63.868056][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.902864][ T5933] team0: Port device team_slave_0 added [ 63.912707][ T5932] team0: Port device team_slave_0 added [ 63.916778][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.919289][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.928046][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.934243][ T5933] team0: Port device team_slave_1 added [ 63.938005][ T5931] team0: Port device team_slave_0 added [ 63.940849][ T5932] team0: Port device team_slave_1 added [ 63.942986][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.945702][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.955188][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.975807][ T5931] team0: Port device team_slave_1 added [ 64.017007][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.019739][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.028896][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.044742][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.047237][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.057679][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.062906][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.065921][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.078416][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.084729][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.087812][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.099207][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.105302][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.108360][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.118710][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.158154][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.161000][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.171103][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.193406][ T5936] hsr_slave_0: entered promiscuous mode [ 64.196835][ T5936] hsr_slave_1: entered promiscuous mode [ 64.217517][ T5931] hsr_slave_0: entered promiscuous mode [ 64.220607][ T5931] hsr_slave_1: entered promiscuous mode [ 64.223809][ T5931] debugfs: 'hsr0' already exists in 'hsr' [ 64.226379][ T5931] Cannot create hsr debugfs directory [ 64.272172][ T5933] hsr_slave_0: entered promiscuous mode [ 64.275675][ T5933] hsr_slave_1: entered promiscuous mode [ 64.278834][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 64.281615][ T5933] Cannot create hsr debugfs directory [ 64.323494][ T5932] hsr_slave_0: entered promiscuous mode [ 64.326609][ T5932] hsr_slave_1: entered promiscuous mode [ 64.329038][ T5932] debugfs: 'hsr0' already exists in 'hsr' [ 64.331079][ T5932] Cannot create hsr debugfs directory [ 64.738292][ T5931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.749011][ T5931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.755895][ T5931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.771198][ T5931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.818271][ T5932] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.829546][ T5932] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.835204][ T5932] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.842587][ T5932] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.925321][ T5936] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.938161][ T5936] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.950300][ T5936] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.971158][ T5936] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.973903][ T5935] Bluetooth: hci0: command tx timeout [ 64.984951][ T5935] Bluetooth: hci3: command tx timeout [ 64.987228][ T5935] Bluetooth: hci1: command tx timeout [ 65.047024][ T5933] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.056154][ T5933] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.062115][ T5939] Bluetooth: hci2: command tx timeout [ 65.072181][ T5933] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.081129][ T5933] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.105296][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.122194][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.153543][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.164532][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.172927][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.176480][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.194969][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.198356][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.215709][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.218031][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.222214][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.225141][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.258234][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.298082][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.320481][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.323364][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.330418][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.333948][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.367898][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.377794][ T40] audit: type=1400 audit(1774471786.985:91): avc: denied { sys_module } for pid=5931 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.396941][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.409029][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.412057][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.426414][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.428754][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.437565][ T5936] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.440916][ T5936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.486209][ T5933] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.489209][ T5933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.521310][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.545205][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.588660][ T5931] veth0_vlan: entered promiscuous mode [ 65.608246][ T5931] veth1_vlan: entered promiscuous mode [ 65.634818][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.638035][ T5932] veth0_vlan: entered promiscuous mode [ 65.655404][ T5932] veth1_vlan: entered promiscuous mode [ 65.662150][ T5931] veth0_macvtap: entered promiscuous mode [ 65.670581][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.676904][ T5931] veth1_macvtap: entered promiscuous mode [ 65.696345][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.708644][ T5932] veth0_macvtap: entered promiscuous mode [ 65.714823][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.725699][ T5932] veth1_macvtap: entered promiscuous mode [ 65.745428][ T1168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.759163][ T1168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.765553][ T1168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.771959][ T5936] veth0_vlan: entered promiscuous mode [ 65.776720][ T5933] veth0_vlan: entered promiscuous mode [ 65.778697][ T1168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.785549][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.796974][ T5936] veth1_vlan: entered promiscuous mode [ 65.801901][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.818860][ T5933] veth1_vlan: entered promiscuous mode [ 65.835893][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.839598][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.856316][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.861174][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.894795][ T5936] veth0_macvtap: entered promiscuous mode [ 65.916424][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.920808][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.924079][ T5936] veth1_macvtap: entered promiscuous mode [ 65.941872][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.953767][ T5933] veth0_macvtap: entered promiscuous mode [ 65.967784][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.977358][ T5933] veth1_macvtap: entered promiscuous mode [ 66.006867][ T179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.009891][ T179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.029994][ T179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.033925][ T179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.037080][ T179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.039663][ T179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.054421][ T40] audit: type=1400 audit(1774471787.665:92): avc: denied { mount } for pid=5931 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.057311][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.063466][ T40] audit: type=1400 audit(1774471787.665:93): avc: denied { mounton } for pid=5931 comm="syz-executor" path="/syzkaller.krVqkf/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 66.075190][ T40] audit: type=1400 audit(1774471787.685:94): avc: denied { mount } for pid=5931 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 66.082925][ T40] audit: type=1400 audit(1774471787.685:95): avc: denied { mounton } for pid=5931 comm="syz-executor" path="/syzkaller.krVqkf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 66.087448][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.094838][ T40] audit: type=1400 audit(1774471787.685:96): avc: denied { mounton } for pid=5931 comm="syz-executor" path="/syzkaller.krVqkf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 66.098886][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.110473][ T40] audit: type=1400 audit(1774471787.695:97): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 66.121823][ T40] audit: type=1400 audit(1774471787.735:98): avc: denied { mounton } for pid=5931 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 66.135849][ T40] audit: type=1400 audit(1774471787.735:99): avc: denied { mount } for pid=5931 comm="syz-executor" name="/" dev="gadgetfs" ino=7062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 66.140387][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.155593][ T179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.157153][ T5931] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 66.159853][ T179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.171974][ T1168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.176017][ T1168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.225312][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.228184][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.264483][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.267023][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.286438][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.289095][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.365592][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.366675][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.369910][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.374653][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.431225][ T6024] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 66.446624][ T6024] netlink: 'syz.3.4': attribute type 11 has an invalid length. [ 66.685233][ T6039] capability: warning: `syz.0.7' uses deprecated v2 capabilities in a way that may be insecure [ 66.874573][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802c7c5c00: rx timeout, send abort [ 66.946259][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12'. [ 66.950310][ T6055] netlink: 'syz.3.12': attribute type 7 has an invalid length. [ 66.954984][ T6055] netlink: 'syz.3.12': attribute type 8 has an invalid length. [ 66.958517][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 67.051783][ T5939] Bluetooth: hci0: command tx timeout [ 67.051908][ T5935] Bluetooth: hci1: command tx timeout [ 67.055436][ T5945] Bluetooth: hci3: command tx timeout [ 67.131591][ T5945] Bluetooth: hci2: command tx timeout [ 67.375017][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802c7c5800: rx timeout, send abort [ 67.379053][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802c7c5c00: abort rx timeout. Force session deactivation [ 67.877868][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802c7c5800: abort rx timeout. Force session deactivation [ 69.141725][ T5945] Bluetooth: hci0: command tx timeout [ 69.142024][ T5935] Bluetooth: hci1: command tx timeout [ 69.145824][ T5939] Bluetooth: hci3: command tx timeout [ 69.211876][ T5939] Bluetooth: hci2: command tx timeout [ 71.213182][ T5939] Bluetooth: hci3: command tx timeout [ 71.215699][ T5939] Bluetooth: hci1: command tx timeout [ 71.217943][ T5939] Bluetooth: hci0: command tx timeout [ 71.292416][ T5935] Bluetooth: hci2: command tx timeout [ 76.346612][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.349662][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 80.144046][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 80.144058][ T40] audit: type=1400 audit(1774471801.755:164): avc: denied { read } for pid=6066 comm="syz.0.13" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.155178][ T40] audit: type=1400 audit(1774471801.755:165): avc: denied { open } for pid=6066 comm="syz.0.13" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.163408][ T40] audit: type=1400 audit(1774471801.755:166): avc: denied { ioctl } for pid=6066 comm="syz.0.13" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.171067][ T40] audit: type=1400 audit(1774471801.755:167): avc: denied { prog_run } for pid=6065 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.217653][ T40] audit: type=1400 audit(1774471801.825:168): avc: denied { create } for pid=6065 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 80.218254][ T40] audit: type=1400 audit(1774471801.825:169): avc: denied { write } for pid=6066 comm="syz.0.13" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.218981][ T40] audit: type=1400 audit(1774471801.825:170): avc: denied { ioctl } for pid=6065 comm="syz.2.15" path="socket:[8733]" dev="sockfs" ino=8733 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 80.224153][ T40] audit: type=1400 audit(1774471801.835:171): avc: denied { map_create } for pid=6065 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.263027][ T6068] Zero length message leads to an empty skb [ 80.274194][ T40] audit: type=1400 audit(1774471801.885:172): avc: denied { mount } for pid=6066 comm="syz.0.13" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 80.274222][ T40] audit: type=1326 audit(1774471801.885:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.0.13" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9905d9c799 code=0x0 [ 80.488245][ T6108] netlink: 'syz.3.25': attribute type 11 has an invalid length. [ 80.549171][ T6113] loop5: detected capacity change from 0 to 7 [ 80.556036][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 80.559725][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.564156][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 80.568197][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.572088][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 80.577082][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.581206][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 80.585215][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.588700][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 80.593605][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.598083][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 80.603570][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.610495][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 80.623163][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 80.626967][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.629773][ T6076] ldm_validate_partition_table(): Disk read failed. [ 80.634375][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 80.637460][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.640449][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 80.643946][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.648208][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 80.651325][ T6076] Dev loop5: unable to read RDB block 0 [ 80.654822][ T6076] loop5: unable to read partition table [ 80.656783][ T6076] loop5: partition table beyond EOD, truncated [ 80.662648][ T6113] ldm_validate_partition_table(): Disk read failed. [ 80.665327][ T6113] Dev loop5: unable to read RDB block 0 [ 80.671946][ T6113] loop5: unable to read partition table [ 80.674253][ T6113] loop5: partition table beyond EOD, truncated [ 80.677323][ T6113] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 80.734939][ T6132] openvswitch: netlink: IP tunnel dst address not specified [ 80.775454][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 80.779328][ T6135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=6135 comm=syz.0.35 [ 80.781009][ T6138] trusted_key: syz.2.34 sent an empty control message without MSG_MORE. [ 80.785270][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 80.934279][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 81.141540][ T67] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.260791][ T6159] ubi0: attaching mtd0 [ 81.264887][ T6159] ubi0: scanning is finished [ 81.266548][ T6159] ubi0: empty MTD device detected [ 81.325847][ T67] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 25, changing to 8 [ 81.331593][ T67] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 187, changing to 11 [ 81.336420][ T67] usb 5-1: config 1 interface 0 has no altsetting 0 [ 81.343083][ T67] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 81.346945][ T67] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.350451][ T67] usb 5-1: Product: ☡幨㘊ᶋ떣绊卢啚 [ 81.353711][ T67] usb 5-1: Manufacturer: ⠉ [ 81.356087][ T67] usb 5-1: SerialNumber: syz [ 81.401487][ T6159] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 81.404690][ T6159] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes [ 81.407718][ T6159] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 81.410687][ T6159] ubi0: VID header offset: 258 (aligned 258), data offset: 322 [ 81.415096][ T6159] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 81.418126][ T6159] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21 [ 81.422025][ T6159] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1507504116 [ 81.426799][ T6159] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 81.430412][ T6171] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.432028][ T6168] ubi0: background thread "ubi_bgt0d" started, PID 6168 [ 81.532949][ T6180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6180 comm=syz.1.47 [ 81.579559][ T67] usbhid 5-1:1.0: can't add hid device: -71 [ 81.583238][ T67] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 81.592158][ T67] usb 5-1: USB disconnect, device number 2 [ 81.618408][ T6185] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 81.721521][ T6195] netlink: 40 bytes leftover after parsing attributes in process `syz.2.52'. [ 82.454842][ T6211] binder_alloc: binder_alloc_mmap_handler: 6210 200000ffd000-200001000000 already mapped failed -16 [ 82.556601][ T6214] 8021q: VLANs not supported on ip6_vti0 [ 82.600511][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 82.604425][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.60'. [ 82.621003][ T1168] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.621044][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 82.626727][ T1168] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.629812][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.60'. [ 82.634834][ T1168] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.643748][ T1168] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.694937][ T6224] netlink: 'syz.1.63': attribute type 15 has an invalid length. [ 82.699789][ T6225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.702738][ T6225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.706607][ T6225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.709076][ T6225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.950928][ T6237] netlink: 'syz.3.67': attribute type 21 has an invalid length. [ 82.960849][ T6239] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 82.961560][ T6240] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 83.021261][ T6244] program syz.0.69 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.028328][ T6244] netlink: 16 bytes leftover after parsing attributes in process `syz.0.69'. [ 83.028335][ T6246] trusted_key: encrypted_key: master key parameter is missing [ 83.245228][ T6260] netlink: 'syz.2.76': attribute type 4 has an invalid length. [ 83.280729][ T6262] netlink: 'syz.0.77': attribute type 1 has an invalid length. [ 83.308983][ T6265] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 83.626160][ T6301] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.716958][ T6301] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.734604][ T6311] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 83.843328][ T6301] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.856747][ T6319] exFAT-fs (nullb0): invalid boot record signature [ 83.859348][ T6319] exFAT-fs (nullb0): failed to read boot sector [ 83.862685][ T6319] exFAT-fs (nullb0): failed to recognize exfat type [ 83.879894][ T6319] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 83.922777][ T6301] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.028754][ T1168] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.048492][ T220] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.054525][ T6338] ======================================================= [ 84.054525][ T6338] WARNING: The mand mount option has been deprecated and [ 84.054525][ T6338] and is ignored by this kernel. Remove the mand [ 84.054525][ T6338] option from the mount to silence this warning. [ 84.054525][ T6338] ======================================================= [ 84.074126][ T81] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.085435][ T179] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.103956][ T6336] hpfs: hpfs_map_sector(): read error [ 84.155543][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 84.281544][ T34] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 84.284135][ T6353] Invalid ELF header type: 3 != 1 [ 84.441517][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 84.445597][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.450345][ T34] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.455146][ T34] usb 6-1: config 0 interface 0 has no altsetting 0 [ 84.458320][ T34] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 84.462874][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.469290][ T34] usb 6-1: config 0 descriptor?? [ 84.699303][ T34] usbhid 6-1:0.0: can't add hid device: -71 [ 84.702290][ T34] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 84.709511][ T34] usb 6-1: USB disconnect, device number 2 [ 84.860988][ T6366] netlink: 'syz.1.111': attribute type 1 has an invalid length. [ 84.886816][ T6366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.965819][ T6371] bond1: (slave gretap1): making interface the new active one [ 84.971185][ T6371] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 84.980708][ T6371] program syz.1.111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.274727][ T40] kauditd_printk_skb: 113 callbacks suppressed [ 85.274745][ T40] audit: type=1400 audit(1774471806.885:287): avc: denied { name_bind } for pid=6382 comm="syz.3.117" src=20006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 85.286587][ T6383] kernel read not supported for file /policy (pid: 6383 comm: syz.3.117) [ 85.286724][ T40] audit: type=1400 audit(1774471806.895:288): avc: denied { module_load } for pid=6382 comm="syz.3.117" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 85.305951][ T40] audit: type=1400 audit(1774471806.915:289): avc: denied { create } for pid=6389 comm="syz.0.119" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.316643][ T40] audit: type=1400 audit(1774471806.915:290): avc: denied { read write } for pid=5932 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.327448][ T40] audit: type=1400 audit(1774471806.915:291): avc: denied { open } for pid=5932 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.339328][ T40] audit: type=1400 audit(1774471806.915:292): avc: denied { ioctl } for pid=5932 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.350603][ T40] audit: type=1400 audit(1774471806.925:293): avc: denied { mounton } for pid=6389 comm="syz.0.119" path="/32/file0" dev="tmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 85.361152][ T40] audit: type=1400 audit(1774471806.935:294): avc: denied { watch watch_reads } for pid=6391 comm="syz.3.120" path="/39" dev="tmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 85.433772][ T40] audit: type=1400 audit(1774471807.045:295): avc: denied { write } for pid=6395 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 85.479823][ T40] audit: type=1400 audit(1774471807.085:296): avc: denied { write } for pid=6397 comm="syz.0.123" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 85.571469][ T1329] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 85.733023][ T1329] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 85.737210][ T1329] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 85.741822][ T1329] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.749838][ T1329] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 85.754417][ T1329] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.760657][ T1329] usb 8-1: Product: syz [ 85.764173][ T1329] usb 8-1: Manufacturer: syz [ 85.766216][ T1329] usb 8-1: SerialNumber: syz [ 85.774334][ T1329] hub 8-1:1.0: bad descriptor, ignoring hub [ 85.777030][ T1329] hub 8-1:1.0: probe with driver hub failed with error -5 [ 85.982897][ T1329] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 85.993341][ T6411] ubi: mtd0 is already attached to ubi0 [ 86.288835][ T1329] usb 8-1: USB disconnect, device number 2 [ 86.293872][ T1329] usblp0: removed [ 86.511041][ T6445] __nla_validate_parse: 2 callbacks suppressed [ 86.511057][ T6445] netlink: 504 bytes leftover after parsing attributes in process `syz.2.139'. [ 86.573178][ T10] cfg80211: failed to load regulatory.db [ 86.622087][ T6449] Invalid ELF header type: 0 != 1 [ 86.761510][ T1329] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 86.796313][ T6458] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 86.805865][ T6458] cramfs: wrong magic [ 86.811905][ T6458] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 86.819623][ T6458] cramfs: wrong magic [ 86.901619][ T1329] usb 8-1: device descriptor read/64, error -71 [ 86.948453][ T6468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.147'. [ 87.151490][ T1329] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 87.291488][ T1329] usb 8-1: device descriptor read/64, error -71 [ 87.408372][ T1329] usb usb8-port1: attempt power cycle [ 87.712626][ T6483] ipvlan2: entered allmulticast mode [ 87.714431][ T6483] batadv_slave_1: entered allmulticast mode [ 87.751658][ T1329] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 87.775671][ T1329] usb 8-1: device descriptor read/8, error -71 [ 87.843081][ T6489] netlink: 48 bytes leftover after parsing attributes in process `syz.1.155'. [ 88.031719][ T1329] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 88.051982][ T1329] usb 8-1: device descriptor read/8, error -71 [ 88.074795][ T6496] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 88.171832][ T1329] usb usb8-port1: unable to enumerate USB device [ 88.186374][ T6496] kvm: kvm [6495]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 88.189984][ T6496] kvm: kvm [6495]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 88.207161][ T6502] Bluetooth: MGMT ver 1.23 [ 88.439977][ T6517] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 88.779988][ T6544] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 88.791481][ T6544] CIFS mount error: No usable UNC path provided in device string! [ 88.791481][ T6544] [ 88.796365][ T6544] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 88.834905][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 88.843642][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.172'. [ 88.885163][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 88.889103][ T6552] netlink: 'syz.2.173': attribute type 30 has an invalid length. [ 88.892139][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.173'. [ 89.015363][ T6560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6560 comm=syz.2.176 [ 89.077924][ T6563] rdma_op ffff88802de931f0 conn xmit_rdma 0000000000000000 [ 89.441579][ T6000] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 89.590703][ T6582] syzkaller0: entered promiscuous mode [ 89.593308][ T6582] syzkaller0: entered allmulticast mode [ 89.601462][ T6000] usb 6-1: Using ep0 maxpacket: 8 [ 89.604771][ T6000] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.607776][ T6000] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.611015][ T6000] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.614963][ T6000] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.619219][ T6000] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 89.622624][ T6000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.830259][ T6000] usb 6-1: GET_CAPABILITIES returned 0 [ 89.832359][ T6000] usbtmc 6-1:16.0: can't read capabilities [ 90.198327][ T5986] usb 6-1: USB disconnect, device number 3 [ 90.746911][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 90.746925][ T40] audit: type=1400 audit(1774471812.355:343): avc: denied { write } for pid=6586 comm="syz.1.184" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.870731][ T6590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.185'. [ 91.881959][ T6551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.929727][ T40] audit: type=1400 audit(1774471813.535:344): avc: denied { ioctl } for pid=6592 comm="syz.1.186" path="socket:[11144]" dev="sockfs" ino=11144 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.949781][ T40] audit: type=1400 audit(1774471813.555:345): avc: denied { connect } for pid=6594 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.955202][ T6593] netlink: 56 bytes leftover after parsing attributes in process `syz.1.186'. [ 91.958120][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 92.003708][ T6604] syzkaller1: entered promiscuous mode [ 92.005606][ T6604] syzkaller1: entered allmulticast mode [ 92.038906][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 92.043041][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 92.046524][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 92.054706][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 92.057908][ T6611] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.107182][ T40] audit: type=1400 audit(1774471813.705:346): avc: denied { execute } for pid=6606 comm="syz.3.192" path="/45/cpu.stat" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.141792][ T40] audit: type=1400 audit(1774471813.745:347): avc: denied { name_bind } for pid=6610 comm="syz.0.191" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 92.172110][ T6621] process 'syz.2.195' launched './file0' with NULL argv: empty string added [ 92.175419][ T40] audit: type=1400 audit(1774471813.785:348): avc: denied { execute_no_trans } for pid=6620 comm="syz.2.195" path="/62/file0" dev="tmpfs" ino=366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.189462][ T40] audit: type=1400 audit(1774471813.785:349): avc: denied { getopt } for pid=6620 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.216649][ T40] audit: type=1400 audit(1774471813.825:350): avc: denied { lock } for pid=6620 comm="syz.2.195" path="socket:[12035]" dev="sockfs" ino=12035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.234528][ T40] audit: type=1400 audit(1774471813.845:351): avc: denied { create } for pid=6620 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.237087][ T6621] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.244568][ T40] audit: type=1400 audit(1774471813.845:352): avc: denied { write } for pid=6620 comm="syz.2.195" path="socket:[12036]" dev="sockfs" ino=12036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 92.503025][ T6655] netlink: 128 bytes leftover after parsing attributes in process `syz.3.207'. [ 92.683885][ T6665] tap0: tun_chr_ioctl cmd 1074025677 [ 92.686828][ T6665] tap0: linktype set to 780 [ 92.689741][ T6665] tap0: tun_chr_ioctl cmd 1074025672 [ 92.692364][ T6665] tap0: ignored: set checksum disabled [ 92.726645][ T6667] overlayfs: unescaped trailing colons in lowerdir mount option. [ 92.781528][ T6670] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 92.861685][ T6672] Timeout policy `syz1' can only be used by L3 protocol number 35095 [ 92.954801][ T6678] sp0: Synchronizing with TNC [ 93.081496][ T24] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 93.231503][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 93.235318][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 93.240790][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 93.245295][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.249688][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.256860][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.260209][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.284586][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.216'. [ 93.341442][ T5935] Bluetooth: Frame is too long (len 10, expected len 4) [ 93.475171][ T24] usb 8-1: GET_CAPABILITIES returned 0 [ 93.477600][ T24] usbtmc 8-1:16.0: can't read capabilities [ 93.529616][ T6700] overlayfs: failed to resolve './file0': -2 [ 93.615766][ T6721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.226'. [ 93.683841][ T1329] usb 8-1: USB disconnect, device number 7 [ 93.971521][ T6000] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 94.121470][ T6000] usb 7-1: device descriptor read/64, error -71 [ 94.240201][ T6767] netlink: 24 bytes leftover after parsing attributes in process `syz.0.234'. [ 94.371543][ T6000] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 94.426012][ T6785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.455923][ T6787] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 94.482254][ T6787] sg_read: process 169 (syz.0.238) changed security contexts after opening file descriptor, this is not allowed. [ 94.511556][ T6000] usb 7-1: device descriptor read/64, error -71 [ 94.622072][ T6000] usb usb7-port1: attempt power cycle [ 94.648565][ T6799] netlink: 'syz.1.241': attribute type 12 has an invalid length. [ 94.825442][ T6818] xt_hashlimit: size too large, truncated to 1048576 [ 94.877050][ T6824] x9: renamed from bridge_slave_0 (while UP) [ 94.961483][ T6000] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 94.983914][ T6000] usb 7-1: device descriptor read/8, error -71 [ 95.220671][ T6830] dummy0: entered allmulticast mode [ 95.241444][ T6000] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 95.262089][ T6000] usb 7-1: device descriptor read/8, error -71 [ 95.288228][ T6831] dummy0: left allmulticast mode [ 95.351929][ T6837] new mount options do not match the existing superblock, will be ignored [ 95.381491][ T6000] usb usb7-port1: unable to enumerate USB device [ 95.516592][ T6847] warning: `syz.3.256' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.680317][ T6859] ip6t_srh: unknown srh invflags 4000 [ 95.758069][ T40] kauditd_printk_skb: 69 callbacks suppressed [ 95.758086][ T40] audit: type=1400 audit(1774471817.365:422): avc: denied { remove_name } for pid=6864 comm="rm" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=2953 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.774164][ T40] audit: type=1400 audit(1774471817.365:423): avc: denied { unlink } for pid=6864 comm="rm" name="resolv.conf.dummy0.ipv4ll" dev="tmpfs" ino=2953 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.999169][ T6880] mmap: syz.0.264 (6880) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 96.045994][ T6883] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 96.058546][ T40] audit: type=1400 audit(1774471817.665:424): avc: denied { map } for pid=6879 comm="syz.0.264" path="socket:[16783]" dev="sockfs" ino=16783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.066444][ T40] audit: type=1400 audit(1774471817.665:425): avc: denied { read } for pid=6879 comm="syz.0.264" path="socket:[16783]" dev="sockfs" ino=16783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.146347][ T40] audit: type=1400 audit(1774471817.755:426): avc: denied { sqpoll } for pid=6890 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.156593][ T6891] 9pnet_fd: p9_fd_create_tcp (6891): problem connecting socket to 127.0.0.1 [ 96.213356][ T40] audit: type=1400 audit(1774471817.825:427): avc: denied { read write } for pid=6895 comm="syz.0.270" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 96.224346][ T6894] netlink: 'syz.1.269': attribute type 23 has an invalid length. [ 96.225481][ T40] audit: type=1400 audit(1774471817.825:428): avc: denied { open } for pid=6895 comm="syz.0.270" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 96.361165][ T6908] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 96.376254][ T6908] overlayfs: workdir and upperdir must be separate subtrees [ 96.386946][ T6908] overlayfs: workdir and upperdir must be separate subtrees [ 96.451544][ T6000] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 96.584058][ T6000] usb 5-1: device descriptor read/64, error -71 [ 96.733124][ T40] audit: type=1400 audit(1774471818.345:429): avc: denied { ioctl } for pid=6930 comm="syz.1.280" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 96.746276][ T6931] netlink: 'syz.1.280': attribute type 3 has an invalid length. [ 96.823621][ T6000] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 96.951444][ T6000] usb 5-1: device descriptor read/64, error -71 [ 96.955515][ T6937] syzkaller0: entered promiscuous mode [ 96.967975][ T6937] syzkaller0: entered allmulticast mode [ 97.063492][ T6000] usb usb5-port1: attempt power cycle [ 97.077335][ T6944] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 97.261950][ T6947] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 97.368322][ T40] audit: type=1400 audit(1774471818.975:430): avc: denied { relabelfrom } for pid=6943 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.374282][ T40] audit: type=1400 audit(1774471818.975:431): avc: denied { relabelto } for pid=6943 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.411498][ T6000] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 97.432748][ T6000] usb 5-1: device descriptor read/8, error -71 [ 97.684154][ T6000] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 97.712197][ T6000] usb 5-1: device descriptor read/8, error -71 [ 97.821679][ T6000] usb usb5-port1: unable to enumerate USB device [ 98.611340][ T6960] netlink: 'syz.3.287': attribute type 5 has an invalid length. [ 98.715682][ T6967] input: syz0 as /devices/virtual/input/input6 [ 98.790772][ T6974] __nla_validate_parse: 5 callbacks suppressed [ 98.790786][ T6974] netlink: 32 bytes leftover after parsing attributes in process `syz.3.290'. [ 98.797518][ T6974] tc_dump_action: action bad kind [ 98.809827][ T6976] evm: overlay not supported [ 98.815316][ T6972] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 98.964344][ T6981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.295'. [ 99.136627][ T179] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.140596][ T179] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.210070][ T179] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.221573][ T179] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.291147][ T5939] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.303146][ T5939] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.307362][ T5939] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.310888][ T5939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.315050][ T5939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.337027][ T179] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.341064][ T179] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.359155][ T6993] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 99.430766][ T179] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.434815][ T179] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.500295][ T6996] overlayfs: failed to resolve './file1': -2 [ 99.638614][ T6988] chnl_net:caif_netlink_parms(): no params data found [ 99.644012][ T179] bridge_slave_1: left allmulticast mode [ 99.644477][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 99.646704][ T179] bridge_slave_1: left promiscuous mode [ 99.657529][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.667479][ T179] bridge_slave_0: left allmulticast mode [ 99.670025][ T179] bridge_slave_0: left promiscuous mode [ 99.676146][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.833624][ T7012] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 99.847297][ T7011] (syz.0.307,7011,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 99.850119][ T7011] (syz.0.307,7011,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 99.877901][ T7011] nvme_fabrics: missing parameter 'transport=%s' [ 99.880596][ T7011] nvme_fabrics: missing parameter 'nqn=%s' [ 99.886990][ T7011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.307'. [ 99.926433][ T179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.933898][ T179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.939172][ T179] bond0 (unregistering): Released all slaves [ 99.946484][ T179] bond1 (unregistering): Released all slaves [ 100.030112][ C1] vcan0: j1939_tp_rxtimer: 0xffff888036984400: rx timeout, send abort [ 100.033841][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888036984400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 100.106383][ T6988] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.109305][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.112758][ T6988] bridge_slave_0: entered allmulticast mode [ 100.115767][ T6988] bridge_slave_0: entered promiscuous mode [ 100.120691][ T6988] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.123605][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.126086][ T6988] bridge_slave_1: entered allmulticast mode [ 100.130141][ T6988] bridge_slave_1: entered promiscuous mode [ 100.158969][ T6988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.165376][ T6988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.213583][ T6988] team0: Port device team_slave_0 added [ 100.218588][ T6988] team0: Port device team_slave_1 added [ 100.240044][ T6988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.242853][ T6988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.253011][ T6988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.260176][ T6988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.263343][ T6988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.274036][ T6988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.335503][ T6988] hsr_slave_0: entered promiscuous mode [ 100.337978][ T6988] hsr_slave_1: entered promiscuous mode [ 100.340436][ T6988] debugfs: 'hsr0' already exists in 'hsr' [ 100.342934][ T6988] Cannot create hsr debugfs directory [ 100.352708][ T179] hsr_slave_0: left promiscuous mode [ 100.355591][ T179] hsr_slave_1: left promiscuous mode [ 100.363944][ T179] veth1_macvtap: left promiscuous mode [ 100.365853][ T179] veth0_macvtap: left promiscuous mode [ 100.368301][ T179] veth1_vlan: left promiscuous mode [ 100.370706][ T179] veth0_vlan: left promiscuous mode [ 100.567279][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'. [ 100.571253][ T7047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.313'. [ 100.599428][ T179] team0 (unregistering): Port device team_slave_1 removed [ 100.614368][ T179] team0 (unregistering): Port device team_slave_0 removed [ 101.008402][ T7068] misc userio: No port type given on /dev/userio [ 101.023092][ T7061] netlink: 'syz.1.314': attribute type 1 has an invalid length. [ 101.067749][ T7061] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.096014][ T7061] vlan3: entered allmulticast mode [ 101.098542][ T7061] macsec0: entered allmulticast mode [ 101.100941][ T7061] veth1_macvtap: entered allmulticast mode [ 101.105052][ T7061] bond2: (slave vlan3): Error -34 calling dev_set_mtu [ 101.332792][ T7088] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 101.372517][ T5939] Bluetooth: hci1: command tx timeout [ 103.451495][ T5939] Bluetooth: hci1: command tx timeout [ 103.797139][ T7050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.806500][ T6988] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.828930][ T6988] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.844289][ T6988] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.859337][ T6988] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.967544][ T6988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.979960][ T6988] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.012672][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.015184][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.038310][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.041439][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.265204][ T6988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.323173][ T7138] tipc: Enabling of bearer rejected, failed to enable media [ 104.471241][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'. [ 104.475458][ T7164] netlink: 'syz.0.332': attribute type 26 has an invalid length. [ 104.509821][ T6988] veth0_vlan: entered promiscuous mode [ 104.517115][ T6988] veth1_vlan: entered promiscuous mode [ 104.542259][ T6988] veth0_macvtap: entered promiscuous mode [ 104.542994][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 104.547603][ T6988] veth1_macvtap: entered promiscuous mode [ 104.566052][ T6988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.583310][ T6988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.594129][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.598137][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.642452][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.645416][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.670112][ T7174] overlayfs: failed to resolve './file0': -2 [ 104.701605][ T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.707407][ T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.735985][ T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.739698][ T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.762941][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 104.762956][ T40] audit: type=1400 audit(1774471826.375:456): avc: denied { mounton } for pid=6988 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 104.775788][ T40] audit: type=1400 audit(1774471826.385:457): avc: denied { bind } for pid=7180 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.783724][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 104.786784][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 104.789717][ T7181] netlink: 'syz.1.338': attribute type 12 has an invalid length. [ 104.792847][ T7181] netlink: 'syz.1.338': attribute type 6 has an invalid length. [ 104.827278][ T7189] ieee802154 phy0 wpan0: encryption failed: -22 [ 104.867855][ T7196] netlink: 'syz.0.340': attribute type 4 has an invalid length. [ 104.915141][ T40] audit: type=1400 audit(1774471826.525:458): avc: denied { firmware_load } for pid=7194 comm="syz.0.340" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 104.946922][ T7196] syz.0.340 (7196) used greatest stack depth: 19104 bytes left [ 104.966447][ T40] audit: type=1400 audit(1774471826.575:459): avc: denied { getopt } for pid=7199 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.967796][ T7206] overlayfs: failed to resolve './file0': -2 [ 104.979500][ T40] audit: type=1400 audit(1774471826.575:460): avc: denied { read } for pid=7199 comm="syz.2.342" dev="sockfs" ino=18745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.989175][ T40] audit: type=1400 audit(1774471826.595:461): avc: denied { read write } for pid=7207 comm="syz.0.344" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 104.997839][ T40] audit: type=1400 audit(1774471826.595:462): avc: denied { open } for pid=7207 comm="syz.0.344" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 105.014222][ T10] hid-generic 0005:000B:0009.0002: unknown main item tag 0x0 [ 105.017002][ T10] hid-generic 0005:000B:0009.0002: unknown main item tag 0x0 [ 105.019481][ T10] hid-generic 0005:000B:0009.0002: unknown main item tag 0x0 [ 105.031454][ T10] hid-generic 0005:000B:0009.0002: unknown main item tag 0x0 [ 105.033795][ T10] hid-generic 0005:000B:0009.0002: unknown main item tag 0x0 [ 105.036096][ T10] hid-generic 0005:000B:0009.0002: unknown main item tag 0x0 [ 105.038566][ T10] hid-generic 0005:000B:0009.0002: unknown main item tag 0x0 [ 105.041235][ T10] hid-generic 0005:000B:0009.0002: unknown main item tag 0x0 [ 105.045430][ T10] hid-generic 0005:000B:0009.0002: unknown main item tag 0x0 [ 105.048276][ T10] hid-generic 0005:000B:0009.0002: unknown main item tag 0x0 [ 105.060314][ T40] audit: type=1400 audit(1774471826.665:463): avc: denied { map } for pid=7210 comm="syz.1.345" path="/82/file0/memory.events.local" dev="9p" ino=75760057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 105.082081][ T10] hid-generic 0005:000B:0009.0002: hidraw1: BLUETOOTH HID v0.01 Device [syz0] on syz1 [ 105.108248][ T7219] netlink: 148 bytes leftover after parsing attributes in process `syz.4.347'. [ 105.358108][ T40] audit: type=1400 audit(1774471826.965:464): avc: denied { setattr } for pid=7231 comm="syz.4.350" name="NETLINK" dev="sockfs" ino=17974 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 105.360998][ T7232] No source specified [ 105.382675][ T7232] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.388540][ T7232] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 105.517631][ T7238] overlayfs: failed to resolve './file0': -2 [ 105.531534][ T5939] Bluetooth: hci1: command tx timeout [ 105.602426][ T7246] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.355'. [ 105.694400][ T7249] No source specified [ 105.758865][ T7259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.770852][ T40] audit: type=1400 audit(1774471827.375:465): avc: denied { setopt } for pid=7258 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.957476][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 105.963076][ T7281] program syz.1.363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.984760][ T7278] kvm: MONITOR instruction emulated as NOP! [ 106.081518][ T29] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 106.171609][ T5939] Bluetooth: hci0: command tx timeout [ 106.241711][ T67] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 106.255157][ T29] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 106.258195][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.260835][ T29] usb 7-1: Product: syz [ 106.269473][ T29] usb 7-1: Manufacturer: syz [ 106.271473][ T29] usb 7-1: SerialNumber: syz [ 106.277148][ T29] usb 7-1: config 0 descriptor?? [ 106.371159][ T7292] kvm: kvm [7291]: vcpu0, guest rIP: 0x9130 Unhandled WRMSR(0x11e) = 0x0 [ 106.406088][ T7311] overlayfs: failed to resolve './file0': -2 [ 106.413489][ T67] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 106.417437][ T67] usb 9-1: config 0 has no interface number 0 [ 106.431653][ T67] usb 9-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 106.436800][ T67] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 106.442007][ T67] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 106.448325][ T67] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 106.452799][ T67] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 106.455873][ T67] usb 9-1: Product: syz [ 106.457725][ T67] usb 9-1: SerialNumber: syz [ 106.464846][ T67] usb 9-1: config 0 descriptor?? [ 106.470372][ T67] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 106.475835][ T67] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input7 [ 106.485661][ T7268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.499177][ T7268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.534099][ T10] usb 7-1: USB disconnect, device number 6 [ 106.676523][ T7324] sp0: Synchronizing with TNC [ 106.683926][ T7324] [U] [ 106.690351][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 106.690519][ T5944] usb 9-1: USB disconnect, device number 2 [ 106.693303][ C3] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 106.723891][ T5944] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 107.480772][ T7354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.386'. [ 107.622993][ T5939] Bluetooth: hci1: command tx timeout [ 107.632660][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'. [ 107.697895][ T7381] capability: warning: `syz.4.393' uses 32-bit capabilities (legacy support in use) [ 107.792702][ T7383] loop6: detected capacity change from 0 to 8 [ 107.989664][ T7383] Dev loop6: unable to read RDB block 8 [ 107.993428][ T7383] loop6: unable to read partition table [ 107.995557][ T7383] loop6: partition table beyond EOD, truncated [ 107.997601][ T7383] loop_reread_partitions: partition scan of loop6 (Nh*hp "o?< ʺXDbp0O{>.) failed (rc=-5) [ 108.029775][ T7397] overlayfs: failed to resolve './file1': -2 [ 108.246390][ T7414] netlink: 'syz.4.405': attribute type 1 has an invalid length. [ 108.307983][ T7415] vlan2: entered allmulticast mode [ 108.309921][ T7415] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 108.406510][ T7418] loop7: detected capacity change from 0 to 7 [ 108.415202][ T6235] Dev loop7: unable to read RDB block 7 [ 108.417806][ T6235] loop7: unable to read partition table [ 108.420428][ T6235] loop7: partition table beyond EOD, truncated [ 108.426466][ T7418] Dev loop7: unable to read RDB block 7 [ 108.428332][ T7418] loop7: unable to read partition table [ 108.430477][ T7418] loop7: partition table beyond EOD, truncated [ 108.433475][ T7418] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 108.444639][ C3] blk_print_req_error: 26 callbacks suppressed [ 108.444652][ C3] operation not supported error, dev loop7, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 108.503064][ T7422] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 108.658166][ T7436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.410'. [ 108.803925][ T7435] ------------[ cut here ]------------ [ 108.808315][ T7435] enable_ept && !allow_smaller_maxphyaddr [ 108.808329][ T7435] WARNING: arch/x86/kvm/vmx/vmx.c:5444 at handle_exception_nmi+0xa6e/0x1bb0, CPU#0: syz.0.411/7435 [ 108.816320][ T7435] Modules linked in: [ 108.818410][ T7435] CPU: 0 UID: 0 PID: 7435 Comm: syz.0.411 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.823985][ T7435] Tainted: [L]=SOFTLOCKUP [ 108.825948][ T7435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.830639][ T7435] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 108.834015][ T7435] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d 96 e3 39 0f 31 ff 44 89 ee e8 a1 2b 69 00 45 84 ed 0f 85 b5 0e 00 00 e8 43 31 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 e5 2b 69 00 45 85 e4 0f 85 7f 0b 00 00 [ 108.842996][ T7435] RSP: 0018:ffffc900032cf9d8 EFLAGS: 00010283 [ 108.845737][ T7435] RAX: 000000000001a015 RBX: ffff88803c425380 RCX: ffffc900062e9000 [ 108.849736][ T7435] RDX: 0000000000080000 RSI: ffffffff819faffd RDI: ffff88803216a4c0 [ 108.853945][ T7435] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 108.857867][ T7435] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 108.861760][ T7435] R13: 0000000000000000 R14: ffff888043eb6000 R15: ffff88803c425458 [ 108.865549][ T7435] FS: 00007f9903ff66c0(0000) GS:ffff8880d633f000(0000) knlGS:0000000000000000 [ 108.869877][ T7435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.873028][ T7435] CR2: 000000000f6632eb CR3: 000000010b9c7000 CR4: 0000000000352ef0 [ 108.876626][ T7435] Call Trace: [ 108.878185][ T7435] [ 108.879526][ T7435] ? __pfx_handle_exception_nmi+0x10/0x10 [ 108.882321][ T7435] vmx_handle_exit+0x84d/0x1f40 [ 108.884500][ T7435] vcpu_run+0x34cf/0x5ca0 [ 108.886535][ T7435] ? __pfx_vcpu_run+0x10/0x10 [ 108.888552][ T7435] ? rcu_is_watching+0x12/0xc0 [ 108.890797][ T7435] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 108.893478][ T7435] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 108.895987][ T7435] kvm_vcpu_ioctl+0x730/0x1730 [ 108.898222][ T7435] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 108.900635][ T7435] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.903438][ T7435] ? do_vfs_ioctl+0x226/0x13e0 [ 108.906032][ T7435] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 108.908415][ T7435] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 108.911881][ T7435] ? __fget_files+0x215/0x3d0 [ 108.914047][ T7435] ? hook_file_ioctl_common+0x146/0x410 [ 108.916601][ T7435] ? selinux_file_ioctl+0x139/0x290 [ 108.919096][ T7435] ? selinux_file_ioctl+0xb4/0x290 [ 108.921540][ T7435] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 108.924094][ T7435] __x64_sys_ioctl+0x18e/0x210 [ 108.926462][ T7435] do_syscall_64+0x106/0xf80 [ 108.928733][ T7435] ? clear_bhb_loop+0x40/0x90 [ 108.930988][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.933870][ T7435] RIP: 0033:0x7f9905d9c799 [ 108.935882][ T7435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.944653][ T7435] RSP: 002b:00007f9903ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.948546][ T7435] RAX: ffffffffffffffda RBX: 00007f9906015fa0 RCX: 00007f9905d9c799 [ 108.952404][ T7435] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 108.956115][ T7435] RBP: 00007f9905e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 108.959705][ T7435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.963624][ T7435] R13: 00007f9906016038 R14: 00007f9906015fa0 R15: 00007ffcc2b7b638 [ 108.967986][ T7435] [ 108.969441][ T7435] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.972733][ T7435] CPU: 0 UID: 0 PID: 7435 Comm: syz.0.411 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.977953][ T7435] Tainted: [L]=SOFTLOCKUP [ 108.980133][ T7435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 108.984795][ T7435] Call Trace: [ 108.986431][ T7435] [ 108.987891][ T7435] dump_stack_lvl+0x100/0x190 [ 108.990217][ T7435] vpanic+0x552/0x970 [ 108.992271][ T7435] ? __pfx_vpanic+0x10/0x10 [ 108.994506][ T7435] panic+0xd1/0xe0 [ 108.996214][ T7435] ? __pfx_panic+0x10/0x10 [ 108.998281][ T7435] check_panic_on_warn.cold+0x19/0x34 [ 109.000782][ T7435] ? handle_exception_nmi+0xa6e/0x1bb0 [ 109.003274][ T7435] __warn.cold+0x191/0x348 [ 109.005282][ T7435] __report_bug+0x296/0x3d0 [ 109.007434][ T7435] ? handle_exception_nmi+0xa6e/0x1bb0 [ 109.010222][ T7435] ? __pfx___report_bug+0x10/0x10 [ 109.012668][ T7435] ? kvm_sched_in+0x9a/0xf0 [ 109.014833][ T7435] ? finish_task_switch.isra.0+0x2c6/0xb80 [ 109.017493][ T7435] ? rcu_is_watching+0x12/0xc0 [ 109.019836][ T7435] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.022567][ T7435] ? handle_exception_nmi+0xa6e/0x1bb0 [ 109.024800][ T7435] report_bug+0xb2/0x220 [ 109.026562][ T7435] ? handle_exception_nmi+0xa6e/0x1bb0 [ 109.028805][ T7435] handle_bug+0x16a/0x2a0 [ 109.030794][ T7435] exc_invalid_op+0x17/0x50 [ 109.032895][ T7435] asm_exc_invalid_op+0x1a/0x20 [ 109.035194][ T7435] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 109.038198][ T7435] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d 96 e3 39 0f 31 ff 44 89 ee e8 a1 2b 69 00 45 84 ed 0f 85 b5 0e 00 00 e8 43 31 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 e5 2b 69 00 45 85 e4 0f 85 7f 0b 00 00 [ 109.046868][ T7435] RSP: 0018:ffffc900032cf9d8 EFLAGS: 00010283 [ 109.049629][ T7435] RAX: 000000000001a015 RBX: ffff88803c425380 RCX: ffffc900062e9000 [ 109.053275][ T7435] RDX: 0000000000080000 RSI: ffffffff819faffd RDI: ffff88803216a4c0 [ 109.056931][ T7435] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 109.060753][ T7435] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 109.064463][ T7435] R13: 0000000000000000 R14: ffff888043eb6000 R15: ffff88803c425458 [ 109.068055][ T7435] ? handle_exception_nmi+0xa6d/0x1bb0 [ 109.070578][ T7435] ? handle_exception_nmi+0xa6d/0x1bb0 [ 109.073165][ T7435] ? __pfx_handle_exception_nmi+0x10/0x10 [ 109.076035][ T7435] vmx_handle_exit+0x84d/0x1f40 [ 109.078414][ T7435] vcpu_run+0x34cf/0x5ca0 [ 109.080435][ T7435] ? __pfx_vcpu_run+0x10/0x10 [ 109.082637][ T7435] ? rcu_is_watching+0x12/0xc0 [ 109.084876][ T7435] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 109.087695][ T7435] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 109.090551][ T7435] kvm_vcpu_ioctl+0x730/0x1730 [ 109.092870][ T7435] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 109.095278][ T7435] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.097990][ T7435] ? do_vfs_ioctl+0x226/0x13e0 [ 109.100232][ T7435] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 109.102613][ T7435] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 109.105875][ T7435] ? __fget_files+0x215/0x3d0 [ 109.108183][ T7435] ? hook_file_ioctl_common+0x146/0x410 [ 109.110776][ T7435] ? selinux_file_ioctl+0x139/0x290 [ 109.113143][ T7435] ? selinux_file_ioctl+0xb4/0x290 [ 109.115484][ T7435] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 109.117941][ T7435] __x64_sys_ioctl+0x18e/0x210 [ 109.120230][ T7435] do_syscall_64+0x106/0xf80 [ 109.122433][ T7435] ? clear_bhb_loop+0x40/0x90 [ 109.124580][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.127290][ T7435] RIP: 0033:0x7f9905d9c799 [ 109.129367][ T7435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.138608][ T7435] RSP: 002b:00007f9903ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.142378][ T7435] RAX: ffffffffffffffda RBX: 00007f9906015fa0 RCX: 00007f9905d9c799 [ 109.145936][ T7435] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 109.149529][ T7435] RBP: 00007f9905e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 109.153290][ T7435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.156904][ T7435] R13: 00007f9906016038 R14: 00007f9906015fa0 R15: 00007ffcc2b7b638 [ 109.160534][ T7435] [ 109.162735][ T7435] Kernel Offset: disabled [ 109.164233][ T7435] Rebooting in 86400 seconds..