last executing test programs: 3m25.030195671s ago: executing program 32 (id=158): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x400) write$rfkill(r0, &(0x7f0000000000)={0x7c17, 0x10, 0x3, 0x1}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x80080c4}, 0xc000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 3m12.222764231s ago: executing program 33 (id=392): shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)=""/112) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000340)=0x10001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x10003}], 0x2, 0x45833af92e4b39ff, 0x0) socket$pptp(0x18, 0x1, 0x2) 2m44.654235244s ago: executing program 5 (id=829): mount(&(0x7f0000000140)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='qnx6\x00', 0x204001, 0x0) r0 = socket$kcm(0x10, 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000080)=""/76, 0x4c}], 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) flock(r2, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x0, &(0x7f0000000580)="c2d565b7fe88e4529eaa5ae7a040ff69d2f36e15a6fc31d9db8f6078734f76", 0x1f, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="61f52e05f5aba3ad6b713fb2ba1b95bfc85dd3b3fa72555f65253ae7236883b19614afacdc565bdb80558111abccde8a8bd67fed4b625494f5a3fde32bc1073dd54f92beefe17c24f1e58a0607ffb4f27d546d77a527d6f391a6382b1d17bb4d37e5fba798af10420071bea939a946993e3f866cb60636f74f0b07a52d4f7db52b4146d406d6eac580bfe3f2df91386a18fdea93868d4e295b41e98d8b90fbc56d11e5c76c83dbb434cb914956ce3c7598879ad2dbd526c791ea0751afac6db609b36492b7ec5847baa8816cb57162c390b72e4bfc8bdb96446a") setsockopt$inet6_int(r4, 0x29, 0x3a, &(0x7f0000000000)=0xfffffffe, 0x4) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x25, @loopback, 0x7}, 0x1c) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000700)=ANY=[], 0x8) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x6106, 0x2, 0x2, 0x40, 0xffffffffffffffff, 0xc, '\x00', r1, r2, 0x1, 0x5, 0x3, 0xc}, 0x50) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600090001c57bec6460456720fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb591645ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e0036e19228aadc0d0100c1deec1f42447a5ae735938634a43a000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00", 0xd7}, {&(0x7f0000000180)="6dbd212ee62c2ec89fec78842db0fe914a797ae2401c00e4f702c744adf7a7852aa8cdaa1e2f6cce2976d6b56c4d9e68b53f8820af26f82dd284553503c2ec552060cea401061caf8bb69a7b66b877c9d278cd0f05410c011d13c3ebbdf24e573aa89d304e194d2171fa692977156b2991359133e45bcd97b7901271e29546b35adfb510b6c5929ebd8ac0ba5dcb1e157c2dc6d1992d2beffa260b5084c32cbdee2a01a66ed5a8885b", 0xa9}, {&(0x7f0000000240)="bb1f903670427ff59b86b552f7a6cd650cc0c388f58430f26093e90fc0fd4abd98e9432e3270233f74a8f58d2f448720cbd83bd83241ceaf84569712e217d124350a33c24ee9492c28fe1944378102bd", 0xfffffffffffffe8e}], 0x3}, 0x80d0) 2m44.534569564s ago: executing program 2 (id=832): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000810) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write(r2, &(0x7f0000000140)="8465000000000000", 0x5ac) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 2m44.534217822s ago: executing program 2 (id=833): r0 = syz_open_dev$sg(&(0x7f0000001600), 0xb, 0x40042) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x3, 0x182) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) 2m44.444486927s ago: executing program 2 (id=834): rt_sigprocmask(0x1, &(0x7f0000000480)={[0x5]}, &(0x7f00000004c0), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="02c8000e000a0005ed182d0600000000000000"], 0x13) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r2, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r2, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r3, 0x0, r4}) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES8, @ANYBLOB="80361a5136ed4f856d5fdeeae34bace5b2840ae12592d855cfeecef2f5d52754d25846365f97b6"], 0x5c}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socket(0x25, 0x6, 0xe) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/anycast6\x00') read$FUSE(r8, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r9, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x33, "74f16b4428bc8134ca77e3b1b1e69603dacb316164dc39aaa9ea0db45a6606d3f7c11eeae9de734752afa327f8e6ea0ae82a41"}, &(0x7f0000000080)=0x3b) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f00000000c0)={r11, @in={{0x2, 0x4e23, @private=0xa010101}}}, 0x84) r12 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r12, 0x84, 0x6c, &(0x7f0000000700)={r11, 0x1000, "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"}, &(0x7f0000000200)=0x1008) getsockopt$IP_SET_OP_GET_FNAME(r12, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000280)=0x2c) sendto$packet(r12, &(0x7f0000000300)="450c5e76451e7d8ae1c54714c8bc0624dc7adcfc827ebf65fdf09b5cf54f89abeae7c34aedfa52870d0ae08f75088004fb7eba1ddfaa50978d6d351a5aeed676d5edb1fef887b8852a2fc24eb98469dae6b3897242d26e969aba88de6a59320cf1de70e80cf11654a6d0907b12883830b754879b30e3348a992d94d6db6bd6584a76a4115abf056618b4e9eae0616afa081814b175da6fbe7cfa6eaa5e43bc842d22ae3f8f5f0a25bbfc9049e03a6cf3f57371f89c7e371ce63558fe505ff3742589b03d648f4e17b4d067edfe7bdc2bd40540fe68d2162ab0b3b8ddf08f8de00748365f9999a822b83be257a87cbfe06d6dad", 0xf3, 0x800, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0x80, 0x6, @broadcast}, 0x14) openat$cgroup_int(r12, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) 2m44.444270997s ago: executing program 2 (id=835): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000001800), 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000001800), 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0x6) connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) creat(&(0x7f0000000280)='./file1\x00', 0xecf86c37d53049cc) (async) creat(&(0x7f0000000280)='./file1\x00', 0xecf86c37d53049cc) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r3 = userfaultfd(0x801) r4 = userfaultfd(0xc0803) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x8}) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x8}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) (async) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f000097b000/0x2000)=nil, 0x2000, 0xb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) (async) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) 2m44.354317609s ago: executing program 2 (id=836): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e3100"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="09000000010001", 0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x19c, 0x13, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x70, 0x8, "372ac7f397a5c12d845c8e84c48848f559c98e366086a4ca9446579cdabab35d9925b16c215dc49dca993ffc3eb9f3eceef35bbba197e442e0e6cf24081f55585258aad677db39151dc60cfea8f801f17509b78c4db5421932ef05c8b9c178e9b89d1506ad4aa99d35c7990f"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0xf3, 0x8, "f1fcedc1522f5583c942bbc99d855996de509b69fda6582bbf623a36fcfbce7c3e89e72522df4bc8a109b9c3827d76d6fbf4be26f1e0d707f27df38db3242d7b3346b26fb135fc5590dda03fccad542e27431cd12f6850cf62c46c3ce1ee3a717203132e20f2101bd97a3d7863b37f37d8161f113c917843f796e3bc79a5676d430aca476c315a02f372620ea4ea05e1379d88f012c023c5fd9c7fca0d73d294bb79e22159020ae52789df308011b1794f4106401097a05e92ac153f95b69c0ebfca36035c715091e91928e8236d01a45c404da76dcbb418ae40e16fd12bce957d5d996c9fe6949510034f15357994"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20008004}, 0x20004000) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000003980)={0x0, @vsock={0x28, 0x0, 0xffffffff, @my=0x0}, @l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, @ethernet={0x306, @remote}, 0x7, 0x0, 0x0, 0x0, 0xb, 0x0, 0x9, 0xfff, 0xff}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'comedi_parport\x00', [0x4f23, 0x22, 0x2, 0x9, 0x1, 0x40000cc4, 0x1, 0x5c952399, 0x10001, 0x40003ff, 0x802, 0x4, 0x10001, 0x1, 0x9, 0xe1cb, 0x6, 0x1, 0x3, 0x397, 0x8000008a, 0xfffffffd, 0x32, 0xeffffff7, 0xffffeadb, 0x7, 0x3c, 0x8, 0x3, 0x8000000, 0x2ec0]}) 2m44.062151892s ago: executing program 2 (id=841): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@ignoreqv}]}}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x5, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x10000000000, 0x0, 0x0, 0xc3, 0x1}, {0x7, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0xc0089364, &(0x7f0000000180)) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) close(r3) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') close(r0) (async) close(r0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000000)) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000000)) read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0x207d) 2m44.028716543s ago: executing program 34 (id=841): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@ignoreqv}]}}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x5, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x10000000000, 0x0, 0x0, 0xc3, 0x1}, {0x7, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1}, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0xc0089364, &(0x7f0000000180)) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) close(r3) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') close(r0) (async) close(r0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000000)) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000000)) read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0x207d) 2m43.730239641s ago: executing program 5 (id=844): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x2042060, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x23}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x1}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000006800010003001000fdffff7f00000000000000000c000200010000001500000004000b"], 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 2m43.353248306s ago: executing program 5 (id=849): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x3) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000100)=""/197, 0xc5}], 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) listen(0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000040)={0xfff, 0x8}) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r8 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000080)='*', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, 0xffffffffffffffff, 0x2c) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r2, 0x36) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r3, 0xffffffffffffffff) 2m42.129137161s ago: executing program 5 (id=858): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000200)={0x36a, 0x5}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000240)={0x10004, 0x4, 0xffffffff, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x2, r4}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @hyper}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2204880, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x62400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r9, 0x0) syz_clone(0x20022180, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) sendto$packet(r7, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) 2m42.024794867s ago: executing program 5 (id=860): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) (async) file_getattr(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x18, 0x1000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) (async) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000040)=0x2) (async) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000100)=""/42) 2m41.436960003s ago: executing program 5 (id=864): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f010000000009043700022ee5cd0009058010ff037f790206050e0320000980070705ab097883f729c445d1068d939e9758d00263d1d8345ad63250d2493ac94e591be656a43a255535d42085a90e76a91b17c26531e6d04def0d8cf45dc7ae54c493b38d81c6d2da3b8fc86f21adb7b3b2b40480816b62a6a646ba7008b7ba8d9bb4f718c09783454b2a170f8043dcbccc3a29a3575be0b23b6572fb65bb027abe19101750c5085fc1ec00"/192], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r3, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000040)=0xffff354a) write$char_usb(r2, &(0x7f0000000e40)="c2f0e71062e3285bd0b4cd9490a39a64639cd9183bee2759f81a35c44b26cb59c0d644e42cb429c32cf98e052c5b3509f662fff97ea2ad2f880f304c656f2e3307080ae22d31e83167f54ac9d78746b6d2c1327e614bd46a4d4ce3da8dc50ba05d046979b3e591ca5babddfc452b5c3579cf1d7f6ae7953cc18d4add5260ca9a33640bd4b535d2fc830b5302b7d8dc68ea5be0575f2a1f8006f05c9cea41e70267108e6751946eb6540c2adafd5bcd9d6a9eb56bac7e04cfe9a0e184", 0xbc) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$CDROMREADAUDIO(r0, 0x5392, &(0x7f0000000000)={@msf={0xa1, 0xa5, 0xc0}, 0x1, 0x0, 0x0}) 2m41.347561268s ago: executing program 35 (id=864): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x800, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f010000000009043700022ee5cd0009058010ff037f790206050e0320000980070705ab097883f729c445d1068d939e9758d00263d1d8345ad63250d2493ac94e591be656a43a255535d42085a90e76a91b17c26531e6d04def0d8cf45dc7ae54c493b38d81c6d2da3b8fc86f21adb7b3b2b40480816b62a6a646ba7008b7ba8d9bb4f718c09783454b2a170f8043dcbccc3a29a3575be0b23b6572fb65bb027abe19101750c5085fc1ec00"/192], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r3, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000040)=0xffff354a) write$char_usb(r2, &(0x7f0000000e40)="c2f0e71062e3285bd0b4cd9490a39a64639cd9183bee2759f81a35c44b26cb59c0d644e42cb429c32cf98e052c5b3509f662fff97ea2ad2f880f304c656f2e3307080ae22d31e83167f54ac9d78746b6d2c1327e614bd46a4d4ce3da8dc50ba05d046979b3e591ca5babddfc452b5c3579cf1d7f6ae7953cc18d4add5260ca9a33640bd4b535d2fc830b5302b7d8dc68ea5be0575f2a1f8006f05c9cea41e70267108e6751946eb6540c2adafd5bcd9d6a9eb56bac7e04cfe9a0e184", 0xbc) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$CDROMREADAUDIO(r0, 0x5392, &(0x7f0000000000)={@msf={0xa1, 0xa5, 0xc0}, 0x1, 0x0, 0x0}) 2m40.04349604s ago: executing program 6 (id=875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000db5000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket(0x400000000010, 0x5, 0x20000000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xc, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x3, 0xffffffffffffffff, 0x4, 0x8}, 0x4}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r4, {0xffff}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r6 = syz_io_uring_complete(0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRES8=r1, @ANYBLOB="35cec0d4ca4fba9c3bfcd48c56fa4144763a4448f998091cb85953d789be85a29ba36b2f046596ff1470876bb2e6a6d418cd6e12bc6c4bfe2978d72eec3c", @ANYRES32=r3, @ANYRESOCT=0x0, @ANYBLOB, @ANYRES8=r0], 0x58}, 0x1, 0x0, 0x0, 0x200040cc}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x8) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x7}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090605000000000000000000010000074ddce51c0007801800148014000242fe80ff0000000000000000000000003074130bff8bd0d530000000000000000940000000f76607100007800c001b4000be990000000000004e"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$KVM_GET_API_VERSION(r8, 0xae00, 0x0) 2m39.924019225s ago: executing program 6 (id=876): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000000)=@ethtool_cmd={0x14, 0x7, 0x800000, 0x7, 0x0, 0x7, 0x9, 0x6, 0x0, 0x45, 0x0, 0x2, 0x5e, 0x4d, 0x80, 0x80, [0x3, 0xffffffff]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "cc7dce9ce2df5a967a8b659f875d67d6"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0xb7aa2c609ef67b65}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x0, 0x5, 0x800}, 0x5, 0x0, 0xffffff3d, 0x6, 0xb, 0x1, 0x1f, 0x12, 0x0, 0x4, {0x0, 0xf, 0x7, 0x5d, 0xe9, 0x7}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x15, 0x20000000, 0x873e, 0x6, 0x400, {0x0, 0x3, 0x3, 0xf427, 0x1, 0x9}, {0x9, 0x1, 0x5, 0x8, 0x5, 0x1ff}, 0x2, 0x4, 0x5}}]}]}}]}, 0x74}}, 0x4080) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PBSS={0x4}]}, 0x2c}}, 0x0) 2m39.273517812s ago: executing program 6 (id=877): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_THP_DISABLE(0x41, 0x1) prctl$PR_SET_THP_DISABLE(0x41, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000004c0)={0x5, @vbi={0x5, 0x80000000, 0x23a2, 0x30313953, [0x3, 0x3], [0x78c, 0x80001], 0x13a}}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x4000010) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write(r0, &(0x7f00000001c0)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c98b455b3d757e8b2333a64d9abf416fd83f942661c570000000c39d877ee595d3c4d3298da286bf7d07ba20d03474a4a4bce636ea8d2b882ffffffff6bfcd7989980b8480eda2769f44bddea50a613c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c1852bfe62da9f3dd3ac725e79228c1a6d5dcf11803105f68e20f474481c543869f5ebac1bf19456be45c12c9896eeb4359f771eeb2", 0xc9) 2m39.204600993s ago: executing program 6 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r0, 0x1) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000400}, 0x40488d4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x4e21}, {@in=@empty, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x8}, {}, {}, 0x0, 0x3502, 0xa}}, 0xf0}}, 0x1000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0)='configfs\x00', 0x200000, 0x0) 2m39.084676844s ago: executing program 6 (id=879): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b708"], 0x0, 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = gettid() sigaltstack(&(0x7f0000000000)={0x0, 0x1}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0)={0x3d}) socket(0x10, 0x803, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f000000d000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2000}) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="060000cad5c0e9eac4d2790000000000", @ANYRES64=r2], 0x38}}, 0x0) 2m35.613306086s ago: executing program 7 (id=943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)) (async) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x78}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) 2m35.504725898s ago: executing program 7 (id=944): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) (async) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async) r3 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0x980900}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r4 = fanotify_init(0x1, 0x101801) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001a00010027bd7000fedbdf251c101402ff00c8030016000008000100eaff01"], 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x2) (async) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 2m35.49161088s ago: executing program 7 (id=946): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x4, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24048801}, 0x2000c840) 2m35.414055882s ago: executing program 7 (id=948): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000100)={0x6, [0xc, 0x8, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0x4, 0xb7, 0x2, 0x10, 0x400, 0xa, 0x8, 0x2, 0x7, 0x9, 0x7f, 0x7, 0x4, 0x0, 0x97, 0x5d3, 0xfff0, 0x5, 0x81, 0x1, 0x4, 0x6, 0xb, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x8000, 0x8, 0x3, 0x2, 0x0, 0x5, 0xe9da, 0xf, 0x8, 0x6, 0x0, 0x5e00], 0x4}) r3 = fanotify_init(0x200, 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB]) fanotify_mark(r3, 0x1, 0x4800003e, r1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) mount$bind(&(0x7f0000000cc0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) socket(0x10, 0x803, 0x0) r6 = syz_pidfd_open(0x0, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000600)={0x2020}, 0x2020) 2m35.297058253s ago: executing program 7 (id=949): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="44010000", @ANYRES16=r3, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x20002008, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'veth0_virt_wifi\x00', @broadcast}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0xa) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000780)={{0x2, 0x4e20, @broadcast}, {0x306, @local}, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 'syzkaller1\x00'}) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000b00)=0x7ff, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r8 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r8, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x12c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @CTA_NAT_SRC={0xb4, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}, @CTA_ID={0x8}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x3, 0x6]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x3, 0x4, 0x10, 0x670655e6, 0x7]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) ioctl$int_in(r0, 0x5452, &(0x7f0000000840)=0x7) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7}, 0x9c) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000a80)=@userptr={0x0, 0x2, 0x4, 0x8, 0xfffffffd, {0x0, 0x2710}, {0x1, 0xc, 0x2, 0x8, 0x2, 0x3, "c37d9c58"}, 0xeb2, 0x2, {&(0x7f0000000880)}, 0xb256}) 2m34.823638671s ago: executing program 7 (id=950): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x1000100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x30]}}}}]}) 2m34.793351757s ago: executing program 36 (id=950): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x1000100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x30]}}}}]}) 2m28.644152817s ago: executing program 6 (id=1015): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x100) (async, rerun: 32) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r0 = gettid() (async) rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x5}]}, 0x1c}}, 0x0) (async, rerun: 32) tkill(r0, 0x7) (async, rerun: 32) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000400)={{}, [@netrom, @remote, @netrom, @netrom, @remote, @netrom, @default]}, &(0x7f0000000140)=0x48) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000380)=0x2708e18e, &(0x7f0000000480)=0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfffd, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20048054) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) (async) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1) 2m28.568810406s ago: executing program 37 (id=1015): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x100) (async, rerun: 32) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r0 = gettid() (async) rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x5}]}, 0x1c}}, 0x0) (async, rerun: 32) tkill(r0, 0x7) (async, rerun: 32) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) r3 = accept$netrom(0xffffffffffffffff, &(0x7f0000000400)={{}, [@netrom, @remote, @netrom, @netrom, @remote, @netrom, @default]}, &(0x7f0000000140)=0x48) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000380)=0x2708e18e, &(0x7f0000000480)=0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfffd, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20048054) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) (async) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x1) 1m53.557093243s ago: executing program 4 (id=1358): r0 = syz_io_uring_setup(0x5c26, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="dc010000210000000400000000000000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(r0, 0x1, 0x0, 0x1, 0x0, 0x1000000) 1m53.556838975s ago: executing program 4 (id=1359): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) getxattr(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000016, 0x12, r2, 0xb0b77000) 1m53.477480728s ago: executing program 4 (id=1362): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x10220}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xff81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), 0xffffffffffffffff) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0xa, 0x18}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x4c, r9, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x73}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "2c3f15d0165d628880ce83086c67e628"}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x34, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x9, 0x2}, {0x9f}, {0x7, 0x6}, {0x1}, {0x1, 0x4}, {0x80, 0x6}], "8834d6b99f96abb3"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x21}, 0x40004000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'ip6erspan0\x00'}) (async) write$tun(r3, &(0x7f0000000480)={@val={0xa, 0x10}, @void, @eth={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "000400", 0x0, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}, 0x3a) (async) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000180)={0x34, r2, 0x501, 0x70bd2c, 0x25dddbff, {}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m53.292218333s ago: executing program 4 (id=1369): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x100010, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7", 0x9f}, {0x0}, {&(0x7f00000005c0)}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x390}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r5, 0x8905, &(0x7f0000000100)={'bond0\x00', @ifru_names='rose0\x00'}) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) request_key(&(0x7f0000000480)='cifs.spnego\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='key_or_keyring:', 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x114, &(0x7f0000000000)=0x3, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m53.167754509s ago: executing program 4 (id=1376): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x2e, 0x1}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) bind$ax25(r0, &(0x7f0000000500)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default]}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0xffffffffffffc000, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="010026", @ANYRES32=r6, @ANYBLOB="0800cd0000000e0074003300802009000802110000010802110000005050505f00ffffffffffffffff6400001000060202020202020301ab0602fc01"], 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000580)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="0100000040000000000001000000080007000a0101024e00010003dfe4dd9e6efa9e72e4065e1d0000000000000471fa019225f4f55724dbd9d72648ffa508ef4da08a74e947a31ce6750f9a05e44bd95d7a6eda083bb40ea3d63e0c0000ddd4a0c6f5e4000008000c000300000008000800ffffffff0800020007000000079fc1e5a8763443f61dc063e048b70f99b33e6cd551e3466c5128a1b2158a6b81fd2345f9aa421c47ca9851ce276a4bd1d2a29b67eb0bb05092d7e1795c36c3add35b6e14a3"], 0x84}}, 0x0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x24, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xf7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4060001}, 0x40044) 1m52.764266016s ago: executing program 4 (id=1378): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) socket(0x10, 0x803, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00') openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fanotify_init(0xf00, 0x1) socket(0x10, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x40012140) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c9}, 0x4008004) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x4054) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) (async) socket(0x10, 0x803, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00') (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) fanotify_init(0xf00, 0x1) (async) socket(0x10, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x40012140) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c9}, 0x4008004) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x4054) (async) 1m52.711590453s ago: executing program 38 (id=1378): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) socket(0x10, 0x803, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00') openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fanotify_init(0xf00, 0x1) socket(0x10, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x40012140) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c9}, 0x4008004) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x4054) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) (async) socket(0x10, 0x803, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00') (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) fanotify_init(0xf00, 0x1) (async) socket(0x10, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x40012140) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c9}, 0x4008004) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x4054) (async) 36.222804158s ago: executing program 9 (id=2721): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x43033, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x400000}]) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f0000000040)="42e546c211a34ea8615ffcc9fce571fd31b96eacc6f2c60c13", 0x19) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x81) writev(r4, &(0x7f0000000900)=[{&(0x7f0000000100)="9080aee9986d6a", 0x7}], 0x1) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) 35.563228131s ago: executing program 9 (id=2731): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new0default user:s'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000080)="b81cd300000f23c80f01cf35080060000f23f826d9ed266465660f3810646100e3f0fe0166baa00066b811c666ef66baf80cb80b72428def66bafc0cb066ee66b81f010f00d89a8ecb0000ac0066bad104edc4e2b107a605000000", 0xfffffffffffffef1}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r1}) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x800201) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000700)={r7, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0x0, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10a233e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a4791300", "fc0177a6f3bb16d5d5560f93e0e50bbf206c9d8db97c00040000000000005f8a654e14dc7c4cc6020004003b3acc9f02cd3eac8be657b534bfa1142100696b29", "4921095856cdf9fd8199034f3b870104000009e3c7a181fb1c16c99189819ef4", [0x1, 0x9]}}) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x3) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000380)={0x1, r5, r1}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x41) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000001c0)={0x10000000, 0xf, 0xffffffffffffff85}) 35.383282765s ago: executing program 9 (id=2732): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x41, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x2000006, 0x5f, 0x80000000, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x10006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000004, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x0, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x7, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x101, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0xfffffffb, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x7, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xffffeffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0xd, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a0ed, 0x2, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x9, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x2, 0xf40, 0x7, 0x1, 0x6c1c, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000140)=@l={0x92, 0x0, 0xc0}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x8}, {0xfff3, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={r3, r1, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) 35.313596287s ago: executing program 9 (id=2733): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x226403, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x226403, 0x0) (async) fcntl$setstatus(r0, 0x4, 0x42000) (async) 35.310356778s ago: executing program 9 (id=2734): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000001380), &(0x7f00000013c0)=0xc) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x201, 0x4000003e, r0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) 35.30743072s ago: executing program 9 (id=2736): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r2, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffeac, 0x0, 0x0, &(0x7f0000000c00)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x6}, 0x94) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) (async) fchdir(r1) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) (async) ioctl$BSG_IO(r2, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffeac, 0x0, 0x0, &(0x7f0000000c00)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x6}, 0x94) (async) 20.23024887s ago: executing program 39 (id=2736): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r2, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffeac, 0x0, 0x0, &(0x7f0000000c00)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x6}, 0x94) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) (async) fchdir(r1) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) (async) ioctl$BSG_IO(r2, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffeac, 0x0, 0x0, &(0x7f0000000c00)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x6}, 0x94) (async) 561.533627ms ago: executing program 1 (id=3194): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0x1000bbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x50001, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x6, 0x401, 0xfffffff5, 0x6, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x5, 0x8e, 0xd50, 0x4000007, 0x5, 0x2, 0x401, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x401, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0xfffffff8, 0x1ff, 0x81, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000008, 0x6, 0x438, 0x77, 0x9, 0x99, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x80], [0x4, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xa, 0x3, 0x9, 0x1, 0xc7, 0xfff, 0x10000a, 0x10000002, 0x400, 0x3e55, 0x5, 0xd3, 0xb, 0x3434, 0x3, 0xd, 0x3, 0x601, 0x0, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf49, 0x3, 0xd500, 0x2, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x6300, 0x40, 0xfb, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x0, 0x1fc, 0x2000803, 0xfffffffc, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x7, 0xc, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x80004, 0x2, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000000700)=0x207, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf5, 0xf, 0x5, 0x6, 0x7, 0x1, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x100400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 462.473985ms ago: executing program 0 (id=3197): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000900)={'amplc_pc263\x00', [0x408, 0x7ff, 0xffffffff, 0x0, 0x0, 0x1, 0x8, 0x7, 0xa, 0x9, 0x2, 0x2, 0xe84b, 0x4000004, 0x6, 0xffffffff, 0x1, 0x1a447, 0x3, 0x40000006, 0x100, 0xffffffff, 0xf24, 0xa, 0xf, 0xa, 0x5, 0xc, 0x4, 0x10000, 0x6]}) mount$9p_virtio(&(0x7f0000000040), &(0x7f00000009c0)='./file0\x00', &(0x7f0000000180), 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d766972b15889e1fc276e23673d3078303030303030303030303030303030352c0002b89682df8ab31d8c914020ece0619de8cbdcfa45"]) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() ioprio_set$pid(0x1, r2, 0x2000) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r3, {0xe1}}, './file0\x00'}) socket(0x2b, 0x80801, 0x1) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="cfc9abc172e086a662ae945427478a35bbd7f046b4c873087464e4af41e928a8b863ec4863b04b706734b7ca43c68dbd44ae00be9bcadb21ad549ae7c9ba6f3b125c130bb848c325931f055b2fe725cc59eee76ed14220f43c218d015fa2edc55450e5cb42f1d3e8e970d54ed40a916d0804d0c8d3044879a8ac75531f181aa683495a6c34979ec3a1fb37cb2931e10e3e2d70c7dcad13ba33cc8c28d8c66ec89c830fb386bbb46b5b2b3b9b7e5fab11b9afa3878e63b1cba02ced8cfa78ebe2bf18677a755cff7637a99accbc3f435ab88a32b565cddc3318e444f675cadef3017f2cab1d3a3e41789a198ac06cc22a", @ANYRES64=0x0], 0x20) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x0, 0x2d, 0x4000000}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') write$sndseq(r0, &(0x7f0000000380)=[{0x4, 0x5, 0x2, 0xc0, @time={0x7, 0x3}, {0x3, 0x6}, {0x2, 0x5}, @addr={0x8, 0x5}}, {0x53, 0xcb, 0x9, 0x0, @tick=0xffa, {0x6, 0x5}, {0x5, 0xb}, @queue={0x5, {0x0, 0x8000}}}, {0xe, 0x5, 0x9, 0x4, @time={0xc37d, 0x7}, {0x0, 0x9}, {0x0, 0xd}, @ext={0x7d, &(0x7f0000000280)="64469b5aeb8ca59e66511ea76e0b70357a2a055052cb2b7e05313e8d61d2b94ad9c1b84363a81f9a85e33986a44b9dd5d0d0b20dd20d7aad4f2c9bda4d817ad2e0371a00d4e457a7ad72a7b09262abdb54358f08e8a12be464c62b3fb1b950d7c0b8db80235315f0d06f4a0c9b83a7f44f424fd3f22e30af4bd2359a2c"}}], 0x54) shutdown(r7, 0x1) read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x10001}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000400)={r8, 0xd6, "f6acf384eb16ead6b6d583b52f5a5e8ed16c977af663f4afcd2de80b45fd4c67cfc30c93755dba666f3c5e3a27faa86ea21a152f8027f11ed2775df4ebf51d46b3f27daa5bfe7c6b61b6fd0444f21d9e807ea6cf6bd24e821ed1d111f5ec2fffca9918f9d622fc6c2371a865f555f699e5d9dd376caf3a99f9fb06ca705c16ef13f84d44ad183b0184dbf6735b905fa2bc36578696aff41536b9ea4b138a2b87f685cb1a8856d8bc2a3260c4446edd8edd6758ab4d1010da4d07d83f560bf990aa7db486ed8d77688fe47dd09fe6271a5b3880d89877"}, &(0x7f0000000500)=0xde) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r10, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r5, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x71}}}}, [""]}, 0x28}}, 0x20000010) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r10, 0x1, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x800) 457.599774ms ago: executing program 0 (id=3199): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000080)=0x52ef, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r4 = socket$kcm(0x29, 0xe, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000005c0)={r1}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000100001042cbd70000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000014110000184012800a0001091f5b36746e6cfd00eb08000280040013"], 0x38}}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000940)={0x38c, r5, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x77}}}}, [@NL80211_ATTR_TESTDATA={0x67, 0x45, "8ebb30648d504fb82397ce30f0fbc16df42e34f8c87d27edac8bfa9b5eee35c439db2be96f29fdf1b21a88f72ff427207aee2dffcfcc434880c8d438380e05ee6e065a1265516acd39f7c3afc59698f331ff633072e989af8b00b510c879b4c25a4890"}, @NL80211_ATTR_TESTDATA={0xe2, 0x45, "d867ca16da8dc0133f3d7a5ad6ec4dd3e250509c861da62bb4df99027e05f1275e7ae6666f7cb34d3f967522e7fea094e7a37b01cf0c8703e267efd4773be3e30ba84ad55db05f71aaddd80b9df32e071e8b8ea552b5ec5a4390397cabd634e13a34b17ec7e9e598f7173d1f2616abafa7211517605cb4ce56982704e75580c24b018218afa7e36ff4cedab5f5d0ff0d30ab1e1b4ef4e9119b93e8eb7b45134528fba8a2040832f9146f7ae3b07a7e4a29c86ce353ad80e100c6f283b858a27e4fe0acebf3707af43add1fd9290fb44a4a7351e936664a9055c93e48348b"}, @NL80211_ATTR_TESTDATA={0xe6, 0x45, "3f5833f0dabefcc30aa61264a049ea66909d589230a87c8763b77a49988dc7aef31608f8dbc8c6346b0ade24d3b51e817ca436f0eb8a94a1a0e7658740e165f44ee19396525fc9b1958016451b9cab39c1d5f7b877e1e43f1b9fce045533f09645d1a2f0f997ad0d20ceabc54bec4e061340318b1ec4cc34338eac1a1f98b7d0643e9573e6eb662f2c4ca4de881b02fe520c01ab6c4c3bed0f4f1974d5c97f4e1d8c876d30b5b53fc7f8c5f6e28457303a6249699172b208cf334765a60eeb80f70a654bb1032ae9cd712aeff4662390508eba66076b8b53338d324bbbe02eb0a8d8"}, @NL80211_ATTR_TESTDATA={0xb7, 0x45, "2cc3575a045d8236480bed67adcb59e2ff6571e2cda482f86c2fa8b04f8cadf3f458a89d75d39a8205a3e7ee203f4b4c12c3c9aa32d139e527fe9187c72970f9ae5063054334ebb5e4b84fe423c538f0325cbdf8accbe513a99d1f241eea5960e5e9672d5b781973f93d4f9af064c51b1c62b90d08ca6242d2b507f71ba753cdc9ca2aceb966fc6a4b072ceb80d81f7b6ad2ad842c16022893d35370c9991fa22080628e6a70343eed0a694a5380eee5341d73"}, @NL80211_ATTR_TESTDATA={0x7f, 0x45, "065a4141e26f22ebafe4011750cb4f5aa58f69d4208a2c7baadcd09e2c59b5e099d3f4476a7e50fcfd3a66f135b43e36e364a9dbeb80d6bf02526423a6e4eb793527b27d458bb269df3dda6dd1f88f0d5da6bfafa01c6509ac85a35c877532de2c7ae13688804fb2fe73a28debbfd0ed5540434438782839079dd0"}]}, 0x38c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r7, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x411b, 0xac}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xe}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 455.797086ms ago: executing program 8 (id=3200): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/tcp\x00') pread64(r1, &(0x7f00000000c0)=""/187, 0xbb, 0x101) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f000019f000/0x4000)=nil, 0x4000, 0x9) 373.103552ms ago: executing program 8 (id=3201): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000040)=0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d988a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040), &(0x7f0000000080)=0x4) 301.792733ms ago: executing program 3 (id=3202): ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00', {}, 0x4000}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x73, @dev={0xac, 0x14, 0x14, 0xfd}, 0x0, 0x2, 'lblcr\x00', 0x10}, 0x2c) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x6, 0x40, 0x7ff}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x62, @multicast1, 0x4e24, 0x1, 'sh\x00', 0x8, 0x0, 0x6a}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 301.460674ms ago: executing program 3 (id=3203): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) gettid() (async) r2 = gettid() tkill(r2, 0x16) 300.832865ms ago: executing program 1 (id=3204): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000200)=0x12, 0x0) accept4$x25(r0, &(0x7f0000000280)={0x9, @remote}, &(0x7f00000002c0)=0x12, 0x80800) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000000)={0x0, [0x0, 0xb1, 0x2, 0x8000, 0xfc00, 0x7f, 0x1244, 0x4, 0xd4b9, 0xce03, 0x8000, 0x7, 0x38f, 0x0, 0x8, 0x1000, 0x7ff, 0x8000, 0x8, 0xfff9, 0x122, 0x4, 0x2, 0x385, 0x3d, 0x8000, 0xfff, 0xff, 0x5, 0x7, 0x1, 0x1719, 0x7, 0xfff, 0xffff, 0x2, 0xbf, 0x9, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x9, 0x6, 0x2, 0x3], 0x5}) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') lseek(r3, 0x5, 0x0) syz_80211_join_ibss(&(0x7f00000000c0)='wlan0\x00', &(0x7f0000000140)=@random="a3fb9f07bc87e7f402614852", 0xc, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r4, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x76}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x711}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x130d}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000840) 293.627111ms ago: executing program 3 (id=3205): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async, rerun: 64) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) ioctl$sock_ifreq(r1, 0x8913, &(0x7f0000000040)={'veth0_vlan\x00', @ifru_data=&(0x7f0000000080)="5021f643efa24d0320f4fca7b17f04d491558ccc97431caaf4de5a01cdf96043"}) ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000000)) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) (async) listen(r0, 0xfffffffc) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xb0000002}) 232.331953ms ago: executing program 0 (id=3206): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000001c0)={0x980902, 0x8082, @value=0x8}) r1 = socket$kcm(0x2, 0xa, 0x2) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000280)={0x3, 'vlan0\x00', {0x2}, 0x8}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0xc}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x2, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) (async) r9 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)="55353568400bcd92a76cdd272e8fa94dbaceee07cdd8086e4c19c9cee75389572073c9357ef4222f16ac071d9699d928907711cce4166d9e8108300000a4063056fdaa573dff82279bb944d65422e949758a9b41bba521617f66f0cd2a55f9fcfbef36d1c696f3ef366b522dd2f2f90d1505736a269e63e6985d984f913dd54cdfd011dede74556e76", 0x89, 0xfffffffffffffff9) (async) r10 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="c8394c4bda1368939ec131b8c114a8fe3668290a2a81f38d6b51bdfd079f0d995ee8440bb815e2fa3eb5fa9df2c9fdadb611c2090a4f771c1c21d2c9879baff663e459ed2250d47512c5e8cb18846bdc859432e9d9433d0dd9", 0x59, 0xfffffffffffffff8) (async) r11 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) (async) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r11, r12, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x3, r11, 0xffffffffffffffff, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r9, r10, r11}, &(0x7f0000000300)=""/39, 0x27, &(0x7f00000003c0)={&(0x7f0000000340)={'sha256-ce\x00'}, &(0x7f0000000380)="5007342e38103af15082fe64e4ec7e06029611cee445f983d8989294d6ec1e83434c8454d8", 0x25}) 231.337661ms ago: executing program 8 (id=3207): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x10000, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3, 0x0, 0x9, 0x1, 0x4, 0x10001, 0x0, 0x0, 0x1, 0x82}}, 0x50) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x2000000009, 0x3, 0x80000002, 0x48cd, 0x5, 0xc}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 230.9364ms ago: executing program 1 (id=3208): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x317}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x60, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0, 0x40002141}) io_uring_enter(r0, 0x19ff, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000680)={0x1d, r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0xffffffffffffff3c, 0x0, 0x41100, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x204000, 0x76) r8 = fanotify_init(0xf00, 0x0) fanotify_mark(r8, 0x105, 0x5000003a, r7, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xe3f266f0ea49432b}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x7c, r10, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x48}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xbf}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9d}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008002}, 0x0) r11 = inotify_init() inotify_add_watch(r11, &(0x7f0000000280)='.\x00', 0xa4000000) open(&(0x7f0000000200)='./file0\x00', 0x4088043, 0x1) 229.404982ms ago: executing program 8 (id=3209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 227.73424ms ago: executing program 0 (id=3210): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={r1}) socket(0x23, 0xa, 0x3) r2 = signalfd(r0, &(0x7f00000000c0)={[0x5]}, 0x8) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000180)={0x0}) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={r7, 0x200, 0x20}, 0xc) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000140)={r3, &(0x7f0000000200)=""/4096}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 151.056224ms ago: executing program 1 (id=3211): ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x84400) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)=0x20) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)=0x20) r1 = semget(0x3, 0x3, 0x108) semctl$SEM_INFO(r1, 0x4, 0x13, &(0x7f00000000c0)=""/46) (async) semctl$SEM_INFO(r1, 0x4, 0x13, &(0x7f00000000c0)=""/46) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000140)=0x1000) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000140)=0x1000) r4 = msgget(0x3, 0x104) msgrcv(r4, &(0x7f0000000180)={0x0, ""/44}, 0x34, 0x1, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r3, 0x80045104, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0xfffc, 0x2, 0x7fff, 0x4, 0x0}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000280)={r5, 0x85, "c41dee82477754d9554bf542e93f20b3218091debf5e4bccac7f88e8fd002c3cdca4961a9aeb12843533caff00e4994e0a5441e585c8f85205cbd1d43e8034b817d384447b9eca0adeb8d686b0c69ad749159d3ecd8d42df8f705498c393bb7b1450728f8a6e671d8a731b9c8694a00d16de63b81ba65e1971f4cda78b87d667acaf9c2f09"}, &(0x7f0000000340)=0x8d) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000480)) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000480)) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f0000000540)=""/57) r6 = semget(0x1, 0x2, 0x141) msgrcv(r4, &(0x7f0000000580)={0x0, ""/206}, 0xd6, 0x0, 0x2000) (async) msgrcv(r4, &(0x7f0000000580)={0x0, ""/206}, 0xd6, 0x0, 0x2000) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000680)=0x6) r7 = syz_open_dev$loop(&(0x7f00000006c0), 0x5, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000700)={0xffffffffffffffff, 0x6, {0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x2, 0x10, 0x1c, "2b48920a4b04810e2f4a2a6a214a8c47b47bf100b9bc370a05ab12d8fd6e08cbab18598dae2c65ba4f8867773687d4c26352c13851c7c5f29bde02d77c0ce6be", "ecf62a77c811bfbcc39e39a79ee2b7cf307d4236a776d4773ff671cb67d720845c5469a76051ca0183d59dc60d2175c9c129e98ae2d31d3504faac9ea11bd2e0", "54ce63ee27c7f64f5b18703c4297bd34031b55f5eac37c7e99ab54fdb4a97f5f", [0x6, 0x91]}}) msgctl$IPC_RMID(0x0, 0x0) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000840)=[0x4, 0xff81]) recvfrom$rose(r2, &(0x7f0000000880)=""/30, 0x1e, 0x0, &(0x7f00000008c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000a80)={0x44, 0x0, &(0x7f00000009c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000900)={@fd={0x66642a85, 0x0, r8}, @flat=@handle={0x73682a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000980)={0x0, 0x18, 0x30}}}], 0x3f, 0x0, &(0x7f0000000a40)="387511d8e10757d5ff593f127725b8c01b593bb5b6bc8dd937d705b3f092cfd154b5888842a6be08dad234ba846c57578213548731f423b232295fbaebaa54"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000a80)={0x44, 0x0, &(0x7f00000009c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000900)={@fd={0x66642a85, 0x0, r8}, @flat=@handle={0x73682a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000980)={0x0, 0x18, 0x30}}}], 0x3f, 0x0, &(0x7f0000000a40)="387511d8e10757d5ff593f127725b8c01b593bb5b6bc8dd937d705b3f092cfd154b5888842a6be08dad234ba846c57578213548731f423b232295fbaebaa54"}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r3, {0xfffffffc, 0xfef}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r3, {0xfffffffc, 0xfef}}, './file0\x00'}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r9, 0x80083313, &(0x7f0000000b00)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) (async) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) write$tcp_congestion(r10, &(0x7f0000000b80)='cubic\x00', 0x6) (async) write$tcp_congestion(r10, &(0x7f0000000b80)='cubic\x00', 0x6) ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f0000000c00)={0x4, 0x0, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f0000000c00)={0x4, 0x0, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0]}) 149.667657ms ago: executing program 0 (id=3212): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = memfd_secret(0x80000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000390423bd7000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="81b8000000000000300012800b00010069b7dc746e6c00002000028014000300200100000000000000000000000000000800080024000000"], 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r2, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @local}, 0x14) r8 = socket(0x8000000010, 0x2, 0x0) write(r8, &(0x7f0000000000)="fc0000001c000720ab5b2509b86803000aab087a0400000001e2bb93210001c0f003058405006010000000810000b9d95662537a00bc000c00f0ff7f0000b400916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c8755cdc8362defe04f000000006239ec2a0f0d1bcae5fa8f5f9dcdd51af51af8502943283f4bb102ddf9b2b8f5566791cf1902a38204ea45e609ded815b2ccd2430de4cc71e0ad73bd6433802e0784f20137d1890058a10000c880ac801fe4af00004900d400"/252, 0xfc) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x81, 0x0, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e6, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x5, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) syz_emit_ethernet(0x8a, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES32=0x41424344, @ANYRES32=r3, @ANYBLOB="1208d083959354514baf8355ca03", @ANYRESDEC], 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r10 = fanotify_init(0x1, 0x101801) fanotify_mark(r10, 0x105, 0x40001032, r9, 0x0) inotify_init() ioctl$BSG_GET_TIMEOUT(r1, 0x2202, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x9c) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r11) 149.135872ms ago: executing program 1 (id=3213): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) syz_usbip_server_init(0x5) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f00000002c0)=ANY=[@ANYRES16=r0]) (async) r1 = socket$inet(0x2, 0x2, 0x1) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b00000008000200"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0x82}], 0x1) (async) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r7, 0x4004ae86, &(0x7f0000000000)=0x3) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r12, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r12, &(0x7f0000000000)={0x1a, 0x200, 0x0, 0x0, 0x0, 0x5, @remote}, 0x10) (async) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffbf, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYRES8=r1], 0x40}, 0x20000000) (async) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0x8200, 0x0) accept4$rose(r13, &(0x7f0000000380)=@short={0xb, @dev, @null}, &(0x7f00000003c0)=0x1c, 0x80000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4380, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 82.887536ms ago: executing program 3 (id=3214): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @string=0x0}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) lseek(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0a00bc94", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e2300000600010002000000080003000a0101020800060001000000"], 0x38}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f00000000c0)='ext2\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r5) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000014c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001480)={&(0x7f0000001540)=ANY=[@ANYBLOB="14000000e9b4d6aad35aa06ec00e2c7d271d9f493dbe8e970c30bafbc91353626a7897c29b557ca7325ab3a9abdfc2879f0cebd35b6700be2d2b084ab91201daa900d1215849226b9078", @ANYRES16=r6, @ANYBLOB="040027bd7000ffdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) getdents64(r5, &(0x7f0000000400)=""/4096, 0xc00) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r12, 0x40045542, &(0x7f0000000b00)) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3f}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100028bd7000ffdbdf255100000008000300", @ANYRES32=r10, @ANYBLOB="0c0000000a000600080211000001000805008a000200"/32], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000010) 82.166637ms ago: executing program 1 (id=3215): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004500090000000000000100f102000000080002"], 0x1c}}, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000400)={0x79, 0x0, 0x6a7}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC(r7, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000ff, 0x0, 0x4de}]}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e0001006970366772656d9272b1d8482c2d02800400120008000a00", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 81.317595ms ago: executing program 8 (id=3216): socket$l2tp(0x2, 0x2, 0x73) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x80, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r0, &(0x7f0000000800)=""/4096, 0x1000) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) (async) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x43033, 0xffffffffffffffff, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) (async) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x8915, &(0x7f0000001740)={'xfrm0\x00'}) eventfd2(0x9, 0x80001) (async) r4 = signalfd(0xffffffffffffffff, &(0x7f00000004c0)={[0x4]}, 0x8) r5 = fcntl$dupfd(r1, 0x406, r4) read$FUSE(r0, &(0x7f0000003840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$cgroup_pid(r5, &(0x7f0000000040)=r6, 0x12) (async) getdents64(r5, &(0x7f0000000340)=""/211, 0xd3) (async) ioctl$BSG_IO(r0, 0x2285, &(0x7f0000000280)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xcd6, 0xbffff6df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9144e6a29fca871a, 0x0, 0x302}) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r5) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r7, @ANYBLOB="00022bbd7000fedbdf2501000000080006000500000008000400050000000c000280080008000800000008000400070000001c00028008000500cbc20000080005000300000006000e004e24000008000400099558dd940dec0d08000000080004000800000014000380050008007f00000008000300030000002c00038014000600000000000000000000000000000000001400060020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x8081}, 0x1010) (async) sendto$l2tp(r5, 0x0, 0x0, 0x8800, &(0x7f0000000180)={0x2, 0x0, @local, 0x80000003}, 0x10) 1.423565ms ago: executing program 0 (id=3217): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x100002, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) write$binfmt_format(r3, &(0x7f00000018c0)='-1\x00', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0x8, 0x4, 0x7, 0x100, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x3b, &(0x7f0000000180)=""/59, 0x41100, 0x2, '\x00', r1, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x10, 0x8, 0x21}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0x1, 0x1, r2, 0xffffffffffffffff, r2, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x18}, 0x18) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) (async) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000300)=0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000240)=0x15) (async) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) close(r7) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@dellinkprop={0x64, 0x6d, 0x501, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40, 0x200}, [@IFLA_IFNAME={0x0, 0x3, 'veth1_virt_wifi\x00'}, @IFLA_WEIGHT={0x8, 0xf, 0xff}, @IFLA_WEIGHT={0x8, 0xf, 0xc51}]}, 0x64}}, 0x0) 997.426µs ago: executing program 8 (id=3218): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_ivalue=0x7}) (async) ioctl$sock_netdev_private(r1, 0x8947, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 150.438µs ago: executing program 3 (id=3219): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) (async) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_pidfd_open(0x0, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000080)={{r0}, 0x7, 0x8000, 0x800}) (async) readv(r3, &(0x7f0000001100)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/44, 0x2c}], 0x2) (async) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000001140)={0x9, 0xa2, 0x7308, 0x8, 0x6, 0x100, "381375a6a7c4d7bc507ea15547780814", 0xf8, 0x9, 0x5, 0x0, 0x5, 0x7, 0x4}) (async) waitid$P_PIDFD(0x3, r0, &(0x7f0000001180), 0x8, &(0x7f0000001200)) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000001300)='wg1\x00', 0x4) (async) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000001540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001500)={&(0x7f0000001380)={0x180, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x31e2}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x61}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0xf}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb2dc}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff6e}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x8}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) (async) r4 = fcntl$dupfd(r1, 0x0, r3) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000001580)=""/246) (async) fcntl$notify(r4, 0x402, 0x8) (async) r5 = syz_open_dev$hiddev(&(0x7f0000001680), 0x2000000000, 0x551680) ioctl$HIDIOCGSTRING(r5, 0x81044804, &(0x7f00000016c0)={0x23, "48cdf22cdf4db9f00fabb68de1dc149c2eb1c0115a15893bd3d574cd28efd09cb38de2"}) preadv2(r1, &(0x7f0000001740)=[{&(0x7f0000001700)=""/39, 0x27}], 0x1, 0x6, 0x3, 0x2) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000017c0), r4) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001780), 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x4c, r6, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c090}, 0x40d0) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x80010, r2, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000001900)={&(0x7f0000fff000/0x1000)=nil, 0x22c3, 0x2}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001940)={0x0, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000001a00)=0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001a40)={r7, 0x7}, 0x8) (async) ioctl$USBDEVFS_FORBID_SUSPEND(r4, 0x5521) (async) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001a80), 0x802, 0x0) write$input_event(r8, &(0x7f0000001ac0)={{0x77359400}, 0x11, 0x5, 0x8000}, 0x18) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000001b40), r4) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x64, r10, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x1) 0s ago: executing program 3 (id=3220): fsmount(0xffffffffffffffff, 0x1, 0xf0) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) (async) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ubifs\x00', 0x200000, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x14) 0s ago: executing program 3 (id=3222): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x38) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="ab2b2ce45a07a42e39c7db9385f2b8d25cc3be34ffae0e542f9157d49d8192c0dd53f9b60e15499d76b6d912f22157a142441f12", 0x34}, {&(0x7f0000000300)="a91e2cfdcc946876a9dc91b427528614657a8e48c17bdbf2cfdbf4d2afcbf0413a33e43aa1485f84c1ff12d0e863e3f0e34fc0e1762077b51a5308355d13eaa7f6c99d81ffeb1f66b1ae81fd991b175c499a6ac0144aa005278d1c6dc0626b6eedf4598e7d30a77613cadbc7fc6529981a05cf740be49cef5aa6950fc2c78675868f7a6636df28185d92b805f5335aed9e021b115014b74e3011b4feac878bd255571f18e4d6306314974b271eb9695d9dcc356bed5790a93ce5329aecdd925e0200d15d75b8e1f98c90c115e220d719cb398fb74f6d809308739e7163c7cb8ebe9679c4d32ee6436ea9a9811fdc92e54acd1b10593c23d1f10886a780c801c3b1bfc890b2ecc3ba8b2eeeb924f727cfaeba6adbfd696c2fe229b69e38ea10ebde93bdc04c7ea710ae4730e148149822071657334c9f2fea3c2094b293200c745b4910c64a2b759e28f514bef582a35de5782968fd5dbba4946bf48b35f70f11fc0d55b92fbe51d150b2bc7d2ba87ca64faa42ec77ae30f1dba7b2e73d1a29eedfcfe53b5a60a8af42a418830c8f3e7c81b975645a42c9f0d06241d282552aa94c3eb5620c99e1e6aa6e278f1248ef41db37b1f5287d5f332582f75ddab8f0c783f1b5df5205d6d2826e4e497af73513915a7b26d640980b00d9f2a284e03adb88170c3a05e4861e133dc29e91fff145c8814e95a61fc3a66cdbe22a06388a5445a55d1a3d46faf6379b37ea1b6bbe58032e8e4b355c27f0926fa5e4a1abb193aa14c7b141efbca0da0d559af93f8f3f25a56e51463f367a6c720665e0f722ed52996d2bd0cd32efc78f1a4bc0a96aaaeb112222b86c8217e16d1426350b4d4c7c1276f6fd66d36481251f1bdebc0c748b8a5617340ab121ad45846c481beab7d934e4e434d732f2f0ed779a4a200b0d3d9fb15b5bd115c2024ad97596f73635461f3a75507aa97a9f5260daed9ab27443b7fecaadac9f0974c7dce7f17db6dd3535c62f26d0f472fd014af3c303500acc5265c0c3eef43178187e1111016cbba30bc0b105fe58f59eb8dee8d6deced8dda4285c4ebd33b62fc73b6f251dd2469ce799336cd783d83db80201e36f9528207a104b71cdf037db693623c7aec9c058d48c04031756b3815384880478c47ccc39cc161ec183c414797fb861c4cd4dd59f6a427f2c82a52316f3264172dc6dba6daac767f49f23f84e379a13c26c1c69b3a1d50f7c260e46cf26391e5cdbfb06e7ee745f6995b68d37c45706eea7eb07494ba295dc1b5f68dd26cc80e13ef2cd3167308463c16e13859f0bbb579466564e65fb87d1703eb71709cef739551cad6f8838d20b1f3de693dd95d2fdabae8299702d88fe7ef0bb314508906e23068777213ddd56c1cf1ab0e8870eecf12fd9b18dbf206b9d37d5919b8ba04f7eed7518701bf4ceef2958df8b613d01871b16930634f530a3dd2556574db8155ead7e4dddc1b0cb0aa95a3516dcb9d4361819d6596250489f72a529b3b01afdc15b1bd3fb62459c23568d74f609693f544c93d874d1fba4e09601d61710b7530a95ce2434116143d3ef800640f95eccc722121887e70e62ead6bf2f385205d11b704af8fed731366db97decb4c7e4cff0850fce982f631b0a70c4e3d2be97952ecd90759a91e2cc5687d16e4307c3a3cf908c3b5d38fdb65389fe2dd060b525017f7879701e670ae951abcc3e3fda4485d12e2366859ea670a06305afbb51de713739d9b0a43839202b35409d8d247b25fc3b6b5c56151048b2bc924a32a71afa2fcf8b0de991362ea082ae063182d784c40daf8ec0959d498e7bb9ba78fbef76cbd2155db3e1953a17a5013e49cb6ff293e2457c0392a53e08aaa529d9e009de036b7f961c514579188b243bc5b186b96467dc8500609e92c10f6c5ccce7381832f0bb35c38f2e5b0f5d3d463d2d899aa67d6857a1e8e41b10a882072469f3f4e89c2363f9b5fe99c640f5530001cf927345d7fd02ef88eaee0d0274b840a84bbdbfdce5b6f1e7e01eea449b338264e2036cfbb819be64717a9ec594857aa0108afe3603c52c9cd94cd835c7e32322416b321a4e7f9b8e182f21d1055c9cb53f8cb81d97c5ef345dfdd8275db5aaf9ca7880847c4680539988095c0c1d6f626df32ea29ce0bad67f5c375c9d058a3c81517d358694ba0274e6b88c7dfd6ad7f3323495e761cbb4db2f21594e8c75a69ef9644342e6b25f85f648ea09ceb7ee75790b04835a5a537458b8922c38c6d239b8b4f93fb788ef7d4fa926b0db152f742e7dd7f779cf4fc7eaa19acd9acd6f532ec5f7f02bf3320c8066b58bfe528c3719f45b2a086cf38e7646be5fc1f8a00c0ebef686b44254713ff0f4a66dfdc22bad474039429e12df7863030bdef895f5de9633aee15bd17de2f5015553878cfab128a10c195c9154f180debef35141c323a2851d11271773997c1088cdb53e928c6430f180b60847951bd599ea2b8c3b4f5a514cfbe1f9a521e1aae5f44ad9c65aee1a165e13d7db6af74c63d0c13ff2f92e8bda99970e5f7d8908bd532b8cbbf9caee53ee9ea4541fb2f7cb5742f0a922569a1a86073b553e35d014a06be7ddd7d215e87b20d28bba36e5782d49ddebb1e4685a986aa30531ea03c5d452c0020843c1e2d1edb68ffffdb05733b29af381de0b978d1618dd42a45b13c98a443a264423aad2c02e4ab282a4fe566d44201a5e715ebcadaafb381b6f973fcad6a3788d5412d8f9bb6dfc642bb957f3b6279289cc4199e130d3eee4bfcff31610c7e69acbf73d10b7e1db1f3b3f83dd213378197f42f5fe78a2fd74870328e7462a5f47067fd210c1ddb38ecf118a9d47b2d7636233e009a0f75498908eda937649fa2c40073de3c2188f657dde68592ddc3356a634d5c38451792f8cd1dd71d2c9f03031500736715a37b351ece0756cf8ee14196dee7cb6d375f1b854670d827c623fee5f09ba65392e669386bf9a355f5e5b4e5c69cfba5b94164303e890b7d019538048146feaff3d8d88084f10d311803dc9569dd3619c488b7badc20aa6cc2716c56d6342f148ff9bf3e7896f283d9f6a870a5d324524939c8c73b645e3be2c1ee1cbb90f2203b4ca47a85e12048f5871cd0b9ac7760b17221406ce8767e4a56a814511e9a81b7589b25a9d626a3f8cdd8bf6eb701c374890aa3a910f143b27d44387aee88ceee9bbd349fcc8f455e855cdbac1278201cda8343c0e4dc8f5fa179da4d1f3e8185a57a36e866f8855df2eda21630f61a40e90bad066f554df05d462c090671776d158ee7f231f34f56b764e43781eaa0ad6483c1ea11f07f95d1f059a24f7c44cee4a8aa37ff448d1d7b38bea41035f861bd94c88d19861904e7872ac6f40aa2452e07a13c42783b0ffa52e1adf22ce6788454bdb34dccccddc6e91b8f44128804f3f57d3f0b2b4c823c2304b749f98307dd0b09353704dff0fb452022b2fbd005b7914b9bd943094a3947979365c1553eeb7901bfa1e140cd219549ef851577608c77a47b9697be9c2b1020f5c2ac7ebbfd09c7be4e29d9183b0875db719bacebaed8f01a7d62f2f999832ff3559e3c50a58531314d26c6ce23d68a6b47d957f65f8628c30c5745b7fc659378502c6d6fd1a27968596366ef0ab2517311af13dc34ad03dae8728cdf8841658bf090914eb595c16666a49943d71f520543afb5e99a559c6bbe9d2de5dbf52e6a3c5ee18e47ed86536f63d43fe17bbc9cd031ceeec98b8b4e1fe7594e6f5ad476ff3922454dfb2588596f074e031f63551507d061bda312b50a0d4bae1f5dc8035ab159d720793bfe0722f160712223a06dad9c6961056702e88d0ac5b5e10bcd1e58b51179e7dfd4a74644ae823dc8de8205b52e176c0e02cce2f944a9c6ff1725aed9f0284753d526035a3ff881e65514e72c687b2b826eb0d1f3dfb0abae590fc3e4e6b466045468b945b4d7a64ec0f575d98905100b1251862c4ddb049036d2a88aca279ff301498a919c5010c6a202e1d3b5faf74c5f9efd5c34b7ba210874e5239cd6e84614dc3c350a13c0cc5404cf7f2d0bea358df5abf32ea0b2cb748d63bc806cde2681384dfccf6fa6424d98cdd487088ed5fd4bf4c1d71d8381fd82fa72b7fa7691eaa36de7a6849b53eae876a647d425ed677b98c5cea2e746f53fb5b534f57f9d34b579a32dae7900077f9f803e8fcaa13b3294406ca93fc633e6660f4a0e29827098f181f24ce0b80fc7c0add3291b24224cd2564f0163ebcb0b788e4982c51f4bcf89c0b03db5464339ada3cdf595765ef0628596530d49204e97ef09637460b96380c2ff24d0de6154dfd99c880001ed9771f37efc7f49b4825ab4b50206dfbcf3a2534dd324f4154c4a191741cc1b8998f816ccac7106994e719dd0cfc2b59a797805873d3d9592a421d0d265d6f2b387cf25ce8d43c421f2411024b24d2b72b4bc7a26f52b1e034de55a1c0685a122d88df5e934f31e926a062db62981f72f50a2d3cc897f06a3aca6c6b754fe417a6d204d6ff7ea17547b89c55bed959c540c14ecacee04fc8a94f5af4f9a91eb4bc1e36f7f12dce34c56512dd82c162e10af16c421d855cca675a554d8c58977a267e23ff14d2167b748fa15ebce5e937d814410695e74c900d2dbea3bfc958a29591b27e01df5b8a1048384c44731838d81f1d2f6b876ada6ddeb01501eda7759467e4688d0309dfcba09f1437457d4a923ec2075bcc54ddbca4778dc1100099caffcf6fd14d23c19c4264a315e9591318cf3280f5e82c62b707aea090c4221666c7d47c632eb869566891885387a2b6b6cdd740d64dc04c9a7cbca1534cd6f8cf8d0fa552b8561e0bbd8af71bc0996eabd7a2a45fa0ba521844dcc28bd75d1862cbce79b76aa877b88c033ad9f9b131db6923a6130c44e1c13fab6d146131382000f338d5fa98989fe51760c2db1231399beb2df15551a8c0a3ae83656f2036a0570ede1b56a535f90f85d4f4f67642b104f98c49ca10c502def31ea11bbb61f165712c3509569f8c68810efbb89ca4fa2fc38d6591e0d383084c2149ef87cb621c25e8c368eba841cdd250f89a14b104ad8609369883065cd57ed2a5e987a117b7a2b21e9a890594448910b91305bd91660ad24b26b2575c767f43fc6d4f491a412998b1c97b314b36f744d8d7d0b94f72f6c6c97115cdb65301590853a57c2ed605c707cbe8097145c70cc2c148a632f4c2edd7a2faabe3ac4efe14dc7933fe2c446c6c70094e3a3121e8bfb63005afe324424d90c4d2bad6992a974925eaaecec50b7a4f4e6305d341f691e6185d84e7a2638b87dacd76f486d8c81cee3fb918fa7e7d233f7749237f111b85e11641ce93d7760bc0dfff657afa24d80e1d15b6dbf90bea3f577d9f34b1f8fbe1fc233f2f3f0d85d200eee65d7bb8196c59c23127b5ba34c5a53896e5cee2abd092bdcf5e426e1f325203961a5fa890153b2f28ac9adc4c13f795fd343ab78f2060b659be38996a2a973353e848d912b69b4e44e40cb2a7b0c2a095c3c3b715a62768387194201ba4e810fc4bf931804c642034db83c9d350e06e5667389e869e38baf0de61945ca8a5ade8d3891dc25a12a50164933bfb6396ee474f64e86ef0920331ad395598d2c156e8d2b1ade1cd96cc835f877006fa1a3b4b5eedb23a00dcb7860e9c593b9be8e0c275954368dee7ea938df51be1a5e58a01eca298628b9a175bbd5a1f377657bb25e50ae8799d43e10f484b411f83796b039f54f4d60ae986385cee054fcc0196280d49122a3401fc16770539", 0x1000}, {&(0x7f0000000080)="e606461f57ca4ba6f5ad5e180a0bdd8649e6194b3e03e271e9cbae799913542b61896b0f551fd2c63f29b4f564ec1116d6891cd65673f111c62885f341f009b6ffb461e40076b7b0ca12d24a9d927a34cbedb60db33ee108438e2034fc0bc4e6b6e24c439346315111a63e121c4cdaadb6", 0x71}], 0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') recvmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001300)=""/134, 0x86}, {&(0x7f00000013c0)=""/198, 0xc6}, {&(0x7f00000014c0)=""/252, 0xfc}, {&(0x7f00000015c0)=""/108, 0x6c}, {&(0x7f0000001640)=""/146, 0x92}], 0x5, &(0x7f0000001780)=""/213, 0xd5}, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r1) (async) fdatasync(r1) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) fchmodat(r3, &(0x7f0000000140)='./file0\x00', 0x3b) (async) fchmodat(r3, &(0x7f0000000140)='./file0\x00', 0x3b) write$cgroup_int(r0, &(0x7f0000000040)=0xfe8e, 0x12) kernel console output (not intermixed with test programs): ype=1326 audit(467.096:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17725 comm="syz.9.2416" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc8c5f9aeb9 code=0x0 [ 211.210253][T17730] netlink: 'syz.9.2416': attribute type 33 has an invalid length. [ 211.214059][T17730] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2416'. [ 211.236138][ T40] audit: type=1400 audit(467.176:945): avc: denied { listen } for pid=17731 comm="syz.3.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.627665][T17737] xt_NFQUEUE: number of total queues is 0 [ 211.742945][ T5935] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 211.747553][ T5935] Bluetooth: hci1: Injecting HCI hardware error event [ 211.750769][ T5935] Bluetooth: hci1: hardware error 0x00 [ 211.793957][ T40] audit: type=1400 audit(467.736:946): avc: denied { ioctl } for pid=17751 comm="syz.8.2422" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 211.794389][T17754] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 211.928172][T17764] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 212.019046][T17775] netlink: 'syz.9.2426': attribute type 10 has an invalid length. [ 212.022363][T17775] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2426'. [ 212.025473][T17775] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 212.028051][T17775] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 212.030526][T17775] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 212.181357][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 212.362633][ T24] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 212.366058][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 212.370659][ T40] audit: type=1400 audit(468.306:947): avc: denied { getopt } for pid=17785 comm="syz.8.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.373832][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 212.380855][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 212.384359][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 212.386924][ T24] usb 5-1: Product: syz [ 212.388249][ T24] usb 5-1: Manufacturer: syz [ 212.389670][ T24] usb 5-1: SerialNumber: syz [ 212.394832][ T24] usb 5-1: config 0 descriptor?? [ 212.399899][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 212.403757][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 212.407497][ T24] usb 5-1: selecting invalid altsetting 0 [ 212.812574][T17829] netlink: 'syz.8.2432': attribute type 17 has an invalid length. [ 212.815638][T17829] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2432'. [ 212.819234][T17829] macvtap0: entered allmulticast mode [ 212.821700][T17829] veth0_macvtap: entered allmulticast mode [ 212.824518][T17829] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 212.938978][ T40] audit: type=1400 audit(468.876:948): avc: denied { node_bind } for pid=17840 comm="syz.9.2434" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 213.003399][T17764] usb 5-1: reset high-speed USB device number 23 using dummy_hcd [ 213.259665][ T40] audit: type=1400 audit(469.196:949): avc: denied { write } for pid=17854 comm="syz.8.2438" path="socket:[61814]" dev="sockfs" ino=61814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 213.364295][T17857] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2439'. [ 213.371406][T17857] syzkaller1: entered promiscuous mode [ 213.373250][T17857] syzkaller1: entered allmulticast mode [ 213.374306][T17819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.378522][ T9681] Process accounting resumed [ 213.378751][T17819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.490378][T17856] Process accounting resumed [ 213.597260][T10862] udevd[10862]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 213.624427][ T5991] usb 5-1: USB disconnect, device number 23 [ 213.811330][ T5935] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 214.145636][T17904] netlink: 'syz.9.2446': attribute type 21 has an invalid length. [ 214.180802][T17908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2447'. [ 214.276550][T17920] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 214.314278][T17921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2449'. [ 214.317290][T17921] netlink: 536 bytes leftover after parsing attributes in process `syz.0.2449'. [ 214.320256][T17921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2449'. [ 214.405549][ T40] audit: type=1400 audit(470.336:950): avc: denied { write } for pid=17928 comm="syz.9.2451" path="socket:[63778]" dev="sockfs" ino=63778 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 214.452957][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2451'. [ 214.680532][T17938] all: renamed from bridge_slave_0 (while UP) [ 214.705236][T17933] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2452'. [ 214.931293][ T24] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 215.094137][ T24] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 215.097791][ T24] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 215.101959][ T24] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 215.105017][ T24] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 215.109033][ T24] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 215.112572][ T24] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.121827][ T24] usb 13-1: config 0 descriptor?? [ 215.158795][T17985] syzkaller0: entered promiscuous mode [ 215.160609][T17985] syzkaller0: entered allmulticast mode [ 215.211832][ T40] audit: type=1400 audit(471.146:951): avc: denied { create } for pid=17991 comm="syz.9.2463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 215.229232][T17992] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 215.233119][T17992] PKCS7: Only support pkcs7_signedData type [ 215.238607][T17992] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2463'. [ 215.551749][ T24] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 215.582874][ T24] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 215.638156][T18006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2465'. [ 215.641157][T18006] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2465'. [ 216.556591][T18024] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2469'. [ 216.566505][T18021] tmpfs: Too few inodes for current use [ 216.788289][T18052] netlink: 'syz.0.2476': attribute type 4 has an invalid length. [ 217.534730][ T40] audit: type=1400 audit(473.476:952): avc: denied { map } for pid=18112 comm="syz.8.2484" path="/proc/1189/task/1191/fdinfo/3" dev="proc" ino=62026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 217.535536][T18114] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 217.543816][ T40] audit: type=1400 audit(473.476:953): avc: denied { execute } for pid=18112 comm="syz.8.2484" path="/proc/1189/task/1191/fdinfo/3" dev="proc" ino=62026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 217.551286][T18114] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 1th superblock [ 217.558261][T18114] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 217.560702][T18114] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 2th superblock [ 217.615426][T18134] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 217.615426][T18133] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 217.624378][T18134] No control pipe specified [ 217.624383][T18133] No control pipe specified [ 217.634821][ T9681] usb 13-1: USB disconnect, device number 24 [ 217.742991][T18166] xfrm0 speed is unknown, defaulting to 1000 [ 217.744970][T18166] xfrm0 speed is unknown, defaulting to 1000 [ 217.747833][T18166] xfrm0 speed is unknown, defaulting to 1000 [ 217.753430][T18166] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 217.759338][T18166] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 217.774815][T18166] xfrm0 speed is unknown, defaulting to 1000 [ 217.777595][T18166] xfrm0 speed is unknown, defaulting to 1000 [ 217.780164][T18166] xfrm0 speed is unknown, defaulting to 1000 [ 217.782806][T18166] xfrm0 speed is unknown, defaulting to 1000 [ 217.785349][T18166] xfrm0 speed is unknown, defaulting to 1000 [ 217.854404][ T40] audit: type=1400 audit(473.796:954): avc: denied { ioctl } for pid=18182 comm="syz.9.2496" path="socket:[62061]" dev="sockfs" ino=62061 ioctlcmd=0x3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 217.880455][T18184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=18184 comm=syz.9.2496 [ 218.218905][ T40] audit: type=1400 audit(474.156:955): avc: denied { setopt } for pid=18216 comm="syz.8.2504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 218.257374][T18222] /dev/nullb0: Can't open blockdev [ 218.259476][T18222] /dev/nullb0: Can't open blockdev [ 218.261517][T18222] /dev/nullb0: Can't open blockdev [ 218.263790][T18222] /dev/nullb0: Can't open blockdev [ 218.267178][T18222] /dev/nullb0: Can't open blockdev [ 218.269214][T18222] /dev/nullb0: Can't open blockdev [ 218.271176][T18222] /dev/nullb0: Can't open blockdev [ 218.273753][T18222] /dev/nullb0: Can't open blockdev [ 218.275684][T18222] /dev/nullb0: Can't open blockdev [ 218.277699][T18222] /dev/nullb0: Can't open blockdev [ 218.279637][T18222] /dev/nullb0: Can't open blockdev [ 218.282184][T18222] /dev/nullb0: Can't open blockdev [ 218.284153][T18222] /dev/nullb0: Can't open blockdev [ 218.286044][T18222] /dev/nullb0: Can't open blockdev [ 218.289651][T18222] /dev/nullb0: Can't open blockdev [ 218.293899][T18222] /dev/nullb0: Can't open blockdev [ 218.295830][T18222] /dev/nullb0: Can't open blockdev [ 218.297726][T18222] /dev/nullb0: Can't open blockdev [ 218.299475][ T40] audit: type=1400 audit(474.236:956): avc: denied { execheap } for pid=18225 comm="syz.9.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 218.306512][T18222] /dev/nullb0: Can't open blockdev [ 218.308480][T18222] /dev/nullb0: Can't open blockdev [ 218.310492][T18222] /dev/nullb0: Can't open blockdev [ 218.312538][T18222] /dev/nullb0: Can't open blockdev [ 218.314474][T18222] /dev/nullb0: Can't open blockdev [ 218.316515][T18222] /dev/nullb0: Can't open blockdev [ 218.318455][T18222] /dev/nullb0: Can't open blockdev [ 218.320452][T18222] /dev/nullb0: Can't open blockdev [ 218.324069][T18222] /dev/nullb0: Can't open blockdev [ 218.326044][T18222] /dev/nullb0: Can't open blockdev [ 218.328048][T18222] /dev/nullb0: Can't open blockdev [ 218.329964][T18222] /dev/nullb0: Can't open blockdev [ 218.332715][T18222] /dev/nullb0: Can't open blockdev [ 218.334651][T18222] /dev/nullb0: Can't open blockdev [ 218.336572][T18222] /dev/nullb0: Can't open blockdev [ 218.783719][ T9743] usb 14-1: new high-speed USB device number 17 using dummy_hcd [ 218.821364][ T841] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 218.942611][ T9743] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.945866][ T9743] usb 14-1: config 0 has no interfaces? [ 218.949354][ T9743] usb 14-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 218.952395][ T9743] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.954946][ T9743] usb 14-1: Product: syz [ 218.956301][ T9743] usb 14-1: Manufacturer: syz [ 218.957813][ T9743] usb 14-1: SerialNumber: syz [ 218.960951][ T9743] usb 14-1: config 0 descriptor?? [ 218.985216][ T841] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 218.988136][ T841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.990641][ T841] usb 5-1: Product: syz [ 218.992191][ T841] usb 5-1: Manufacturer: syz [ 218.993681][ T841] usb 5-1: SerialNumber: syz [ 219.185869][T18243] __nla_validate_parse: 7 callbacks suppressed [ 219.185880][T18243] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2512'. [ 219.190759][T18243] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2512'. [ 219.193847][T18243] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2512'. [ 219.200835][T18125] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.200903][T18243] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2512'. [ 219.204521][T18125] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.204542][T18125] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.204560][T18125] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.216003][T18243] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2512'. [ 219.216021][T18243] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2512'. [ 219.242133][ T841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 219.245956][ T841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 219.249314][ T841] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 219.256824][ T841] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 219.262840][ T841] usb 5-1: USB disconnect, device number 24 [ 219.624309][T18287] i2c i2c-1: Invalid block write size 34 [ 219.942015][ T40] audit: type=1400 audit(475.886:957): avc: denied { read } for pid=18303 comm="syz.8.2518" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 219.951019][ T40] audit: type=1400 audit(475.886:958): avc: denied { open } for pid=18303 comm="syz.8.2518" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 219.960992][ T40] audit: type=1400 audit(475.886:959): avc: denied { ioctl } for pid=18303 comm="syz.8.2518" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0x6802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 220.053424][ T40] audit: type=1400 audit(475.996:960): avc: denied { setopt } for pid=18310 comm="syz.8.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 220.060121][ T40] audit: type=1400 audit(475.996:961): avc: denied { connect } for pid=18310 comm="syz.8.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 220.121343][ T60] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 220.191331][T18325] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2524'. [ 220.251374][ T60] usb 5-1: device descriptor read/64, error -71 [ 220.491312][ T60] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 220.496940][T18347] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2532'. [ 220.500261][T18347] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2532'. [ 220.503885][T18347] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2532'. [ 220.537786][T18355] tmpfs: Unknown parameter 'ga_ºŠDP“…u™Œê‡¦Í‰tÜ¡ÙÑ“eÚÎé4Ž¤Žd¹Ã)Þ›ÓnÈ5' [ 220.562947][T18357] netlink: 'syz.8.2536': attribute type 137 has an invalid length. [ 220.641530][ T60] usb 5-1: device descriptor read/64, error -71 [ 220.752199][ T60] usb usb5-port1: attempt power cycle [ 220.759783][T18365] program syz.3.2538 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.874569][T18394] netlink: 'syz.8.2545': attribute type 20 has an invalid length. [ 220.915112][ T5935] Bluetooth: hci3: unexpected event for opcode 0x0c57 [ 221.101304][ T60] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 221.132001][ T60] usb 5-1: device descriptor read/8, error -71 [ 221.212838][T18394] netlink: 'syz.8.2545': attribute type 20 has an invalid length. [ 221.227748][ T9315] xfrm0 speed is unknown, defaulting to 1000 [ 221.230438][ T9315] syz1: Port: 1 Link DOWN [ 221.234641][T18412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.381471][ T60] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 221.403085][ T60] usb 5-1: device descriptor read/8, error -71 [ 221.471709][T18442] kvm: Disabled LAPIC found during irq injection [ 221.521465][ T60] usb usb5-port1: unable to enumerate USB device [ 221.605277][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 221.625822][T18463] netlink: 'syz.3.2561': attribute type 142 has an invalid length. [ 221.696044][T18475] /dev/nullb0: Can't open blockdev [ 221.999674][T18511] mkiss: ax0: crc mode is auto. [ 222.122054][T18515] kvm: kvm [18506]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 222.125541][T18515] kvm: kvm [18506]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 222.145137][T18515] kvm: kvm [18506]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 222.166733][T18515] kvm: kvm [18506]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 222.170229][T18515] kvm: kvm [18506]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 222.307565][T18549] netlink: 'syz.8.2579': attribute type 20 has an invalid length. [ 222.384017][ C2] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 222.393546][T18558] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 222.396548][T18558] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 222.399581][T18558] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 222.460989][T18565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.465287][T18567] tipc: Started in network mode [ 222.466299][T18565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.467365][T18567] tipc: Node identity 86d43fcab80a, cluster identity 3865 [ 222.474594][T18567] tipc: Enabled bearer , priority 0 [ 222.477713][T18567] syzkaller0: entered promiscuous mode [ 222.479490][T18567] syzkaller0: entered allmulticast mode [ 222.492932][T18567] tipc: Resetting bearer [ 222.502845][T18566] tipc: Resetting bearer [ 222.513692][T18566] tipc: Disabling bearer [ 222.818799][T18595] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.821464][T18595] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.902689][T18609] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 223.121311][ T9681] usb 13-1: new high-speed USB device number 25 using dummy_hcd [ 223.179009][T18634] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 223.184874][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 223.184884][ T40] audit: type=1400 audit(2000000000.000:969): avc: denied { relabelto } for pid=18633 comm="syz.3.2598" name="cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 223.196291][ T40] audit: type=1400 audit(2000000000.000:970): avc: denied { associate } for pid=18633 comm="syz.3.2598" name="cgroup.procs" dev="cgroup" ino=178 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 223.286090][ T9681] usb 13-1: Using ep0 maxpacket: 32 [ 223.289228][ T9681] usb 13-1: config 2 has an invalid interface number: 146 but max is 2 [ 223.291907][ T9681] usb 13-1: config 2 has an invalid interface number: 241 but max is 2 [ 223.294532][ T9681] usb 13-1: config 2 has an invalid interface number: 209 but max is 2 [ 223.297140][ T9681] usb 13-1: config 2 has no interface number 0 [ 223.299200][ T9681] usb 13-1: config 2 has no interface number 1 [ 223.301168][ T9681] usb 13-1: config 2 has no interface number 2 [ 223.303658][ T9681] usb 13-1: config 2 interface 146 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 223.307519][ T9681] usb 13-1: config 2 interface 146 altsetting 3 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 223.310981][ T9681] usb 13-1: config 2 interface 146 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 223.317255][ T9681] usb 13-1: config 2 interface 146 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 223.320998][ T9681] usb 13-1: config 2 interface 146 altsetting 3 has an endpoint descriptor with address 0x59, changing to 0x9 [ 223.325112][ T9681] usb 13-1: config 2 interface 146 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 223.328494][ T9681] usb 13-1: config 2 interface 146 altsetting 3 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 223.333843][ T9681] usb 13-1: config 2 interface 241 altsetting 2 has an endpoint descriptor with address 0x33, changing to 0x3 [ 223.338138][ T9681] usb 13-1: config 2 interface 241 altsetting 2 endpoint 0x3 has an invalid bInterval 111, changing to 10 [ 223.342325][ T9681] usb 13-1: config 2 interface 241 altsetting 2 endpoint 0x3 has invalid maxpacket 50852, setting to 1024 [ 223.345920][ T9681] usb 13-1: config 2 interface 241 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 223.349341][ T9681] usb 13-1: config 2 interface 241 altsetting 2 endpoint 0x8 has an invalid bInterval 94, changing to 7 [ 223.354977][T18650] FAULT_INJECTION: forcing a failure. [ 223.354977][T18650] name failslab, interval 1, probability 0, space 0, times 0 [ 223.359865][T18650] CPU: 2 UID: 0 PID: 18650 Comm: syz.0.2601 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.359882][T18650] Tainted: [L]=SOFTLOCKUP [ 223.359885][T18650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.359891][T18650] Call Trace: [ 223.359903][T18650] [ 223.359907][T18650] dump_stack_lvl+0x100/0x190 [ 223.359933][T18650] should_fail_ex.cold+0x5/0xa [ 223.359945][T18650] should_failslab+0xc2/0x120 [ 223.359960][T18650] ? tomoyo_realpath_from_path+0xb6/0x690 [ 223.359977][T18650] __kmalloc_noprof+0xf6/0x9c0 [ 223.359992][T18650] ? tomoyo_realpath_from_path+0xb6/0x690 [ 223.360003][T18650] tomoyo_realpath_from_path+0xb6/0x690 [ 223.360018][T18650] tomoyo_path_number_perm+0x23c/0x580 [ 223.360035][T18650] ? tomoyo_path_number_perm+0x22e/0x580 [ 223.360057][T18650] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 223.360087][T18650] ? find_held_lock+0x2b/0x80 [ 223.360101][T18650] ? hook_file_ioctl_common+0x146/0x410 [ 223.360115][T18650] ? __fget_files+0x215/0x3d0 [ 223.360130][T18650] ? __fget_files+0x21f/0x3d0 [ 223.360145][T18650] security_file_ioctl+0xd3/0x230 [ 223.360157][T18650] __x64_sys_ioctl+0xb7/0x210 [ 223.360168][T18650] do_syscall_64+0xc9/0xf80 [ 223.360188][T18650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.360198][T18650] RIP: 0033:0x7f50bdb9aeb9 [ 223.360208][T18650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.360219][T18650] RSP: 002b:00007f50bbdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.360229][T18650] RAX: ffffffffffffffda RBX: 00007f50bde15fa0 RCX: 00007f50bdb9aeb9 [ 223.360235][T18650] RDX: 00002000000001c0 RSI: 00000000c018643a RDI: 0000000000000004 [ 223.360241][T18650] RBP: 00007f50bbdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 223.360247][T18650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.360253][T18650] R13: 00007f50bde16038 R14: 00007f50bde15fa0 R15: 00007fff0f09b878 [ 223.360294][T18650] [ 223.360299][T18650] ERROR: Out of memory at tomoyo_realpath_from_path. [ 223.361180][ T9681] usb 13-1: config 2 interface 241 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 223.429744][ T9681] usb 13-1: config 2 interface 241 altsetting 2 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 223.433888][ T9681] usb 13-1: config 2 interface 209 altsetting 100 has a duplicate endpoint with address 0xA, skipping [ 223.437490][ T9681] usb 13-1: config 2 interface 209 altsetting 100 has a duplicate endpoint with address 0x3, skipping [ 223.440925][ T9681] usb 13-1: config 2 interface 209 altsetting 100 has a duplicate endpoint with address 0x8, skipping [ 223.444407][ T9681] usb 13-1: config 2 interface 209 altsetting 100 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 223.448500][ T9681] usb 13-1: config 2 interface 146 has no altsetting 0 [ 223.450637][ T9681] usb 13-1: config 2 interface 241 has no altsetting 0 [ 223.452869][ T9681] usb 13-1: config 2 interface 209 has no altsetting 0 [ 223.463208][ T9681] usb 13-1: New USB device found, idVendor=7392, idProduct=7811, bcdDevice=ea.51 [ 223.466050][ T9681] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.468572][ T9681] usb 13-1: Product: à  [ 223.469918][ T9681] usb 13-1: Manufacturer: Ñ [ 223.472180][ T9681] usb 13-1: SerialNumber: Б [ 223.624348][T18667] macvlan2: entered promiscuous mode [ 223.625975][T18667] bridge0: entered promiscuous mode [ 223.715954][T18677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.719966][T18677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.759439][ T9681] usb 13-1: USB disconnect, device number 25 [ 223.805197][T18695] FAULT_INJECTION: forcing a failure. [ 223.805197][T18695] name failslab, interval 1, probability 0, space 0, times 0 [ 223.809168][T18695] CPU: 2 UID: 0 PID: 18695 Comm: syz.0.2610 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.809185][T18695] Tainted: [L]=SOFTLOCKUP [ 223.809188][T18695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.809194][T18695] Call Trace: [ 223.809199][T18695] [ 223.809203][T18695] dump_stack_lvl+0x100/0x190 [ 223.809221][T18695] should_fail_ex.cold+0x5/0xa [ 223.809233][T18695] should_failslab+0xc2/0x120 [ 223.809247][T18695] ? tomoyo_encode2+0xfb/0x3c0 [ 223.809258][T18695] __kmalloc_noprof+0xf6/0x9c0 [ 223.809272][T18695] ? tomoyo_encode2+0xfb/0x3c0 [ 223.809282][T18695] tomoyo_encode2+0xfb/0x3c0 [ 223.809295][T18695] tomoyo_encode+0x29/0x50 [ 223.809306][T18695] tomoyo_realpath_from_path+0x18c/0x690 [ 223.809321][T18695] tomoyo_path_number_perm+0x23c/0x580 [ 223.809338][T18695] ? tomoyo_path_number_perm+0x22e/0x580 [ 223.809355][T18695] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 223.809386][T18695] ? find_held_lock+0x2b/0x80 [ 223.809399][T18695] ? hook_file_ioctl_common+0x146/0x410 [ 223.809413][T18695] ? __fget_files+0x215/0x3d0 [ 223.809428][T18695] ? __fget_files+0x21f/0x3d0 [ 223.809443][T18695] security_file_ioctl+0xd3/0x230 [ 223.809455][T18695] __x64_sys_ioctl+0xb7/0x210 [ 223.809467][T18695] do_syscall_64+0xc9/0xf80 [ 223.809481][T18695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.809491][T18695] RIP: 0033:0x7f50bdb9aeb9 [ 223.809500][T18695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.809510][T18695] RSP: 002b:00007f50bbdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.809521][T18695] RAX: ffffffffffffffda RBX: 00007f50bde15fa0 RCX: 00007f50bdb9aeb9 [ 223.809528][T18695] RDX: 00002000000001c0 RSI: 00000000c018643a RDI: 0000000000000004 [ 223.809534][T18695] RBP: 00007f50bbdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 223.809540][T18695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.809546][T18695] R13: 00007f50bde16038 R14: 00007f50bde15fa0 R15: 00007fff0f09b878 [ 223.809560][T18695] [ 223.809569][T18695] ERROR: Out of memory at tomoyo_realpath_from_path. [ 224.386300][T18782] binder: 18775:18782 ioctl 89f0 200000000180 returned -22 [ 224.388949][T18784] FAULT_INJECTION: forcing a failure. [ 224.388949][T18784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.393388][T18784] CPU: 0 UID: 0 PID: 18784 Comm: syz.0.2619 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.393404][T18784] Tainted: [L]=SOFTLOCKUP [ 224.393419][T18784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 224.393426][T18784] Call Trace: [ 224.393430][T18784] [ 224.393434][T18784] dump_stack_lvl+0x100/0x190 [ 224.393452][T18784] should_fail_ex.cold+0x5/0xa [ 224.393463][T18784] _copy_from_user+0x2e/0xd0 [ 224.393478][T18784] drm_ioctl+0x520/0xc60 [ 224.393492][T18784] ? __pfx_drm_wait_vblank_ioctl+0x10/0x10 [ 224.393510][T18784] ? __pfx_drm_ioctl+0x10/0x10 [ 224.393526][T18784] ? selinux_file_ioctl+0x139/0x290 [ 224.393537][T18784] ? selinux_file_ioctl+0xb4/0x290 [ 224.393548][T18784] ? __pfx_drm_ioctl+0x10/0x10 [ 224.393559][T18784] __x64_sys_ioctl+0x18e/0x210 [ 224.393571][T18784] do_syscall_64+0xc9/0xf80 [ 224.393584][T18784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.393595][T18784] RIP: 0033:0x7f50bdb9aeb9 [ 224.393604][T18784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.393614][T18784] RSP: 002b:00007f50bbdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.393624][T18784] RAX: ffffffffffffffda RBX: 00007f50bde15fa0 RCX: 00007f50bdb9aeb9 [ 224.393631][T18784] RDX: 00002000000001c0 RSI: 00000000c018643a RDI: 0000000000000004 [ 224.393636][T18784] RBP: 00007f50bbdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 224.393642][T18784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.393648][T18784] R13: 00007f50bde16038 R14: 00007f50bde15fa0 R15: 00007fff0f09b878 [ 224.393662][T18784] [ 224.481063][ T5991] IPVS: starting estimator thread 0... [ 224.493584][T18795] loop2: detected capacity change from 0 to 7 [ 224.498020][T18795] loop2: [POWERTEC] p1 [ 224.500313][T18795] loop2: p1 size 1818361856 extends beyond EOD, truncated [ 224.544902][T10862] udevd[10862]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 224.566804][ T40] audit: type=1400 audit(2000000001.379:971): avc: denied { mount } for pid=18808 comm="syz.9.2625" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 224.569150][T18809] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 224.574046][ T40] audit: type=1400 audit(2000000001.379:972): avc: denied { mounton } for pid=18808 comm="syz.9.2625" path="/429/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 224.582394][T18796] IPVS: using max 43 ests per chain, 103200 per kthread [ 224.592779][T18809] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 224.595865][ T40] audit: type=1400 audit(2000000001.409:973): avc: denied { read } for pid=18808 comm="syz.9.2625" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 224.605521][ T40] audit: type=1400 audit(2000000001.409:974): avc: denied { read } for pid=18808 comm="syz.9.2625" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 224.614237][ T40] audit: type=1400 audit(2000000001.409:975): avc: denied { read } for pid=18808 comm="syz.9.2625" name="/" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 224.619546][T18809] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 224.621886][ T40] audit: type=1400 audit(2000000001.409:976): avc: denied { open } for pid=18808 comm="syz.9.2625" path="/429/file0" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 224.621911][ T40] audit: type=1400 audit(2000000001.409:977): avc: denied { read } for pid=18808 comm="syz.9.2625" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 224.621933][ T40] audit: type=1400 audit(2000000001.409:978): avc: denied { read } for pid=18808 comm="syz.9.2625" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 224.647816][T18809] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 224.651266][T18809] overlayfs: d_ino too big (429, ino=9223372036854778109, xinobits=3) [ 224.654571][T18809] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 224.657465][T18809] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 224.660454][T18809] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 224.663805][T18809] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 224.666643][T18809] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 224.669419][T18809] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 224.673157][T18809] overlayfs: d_ino too big (instances, ino=4611686018427388011, xinobits=3) [ 224.789242][T18822] No source specified [ 224.793379][T18822] __nla_validate_parse: 20 callbacks suppressed [ 224.793388][T18822] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2629'. [ 225.277464][T18865] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2635'. [ 225.465231][T18877] netlink: 'syz.8.2638': attribute type 23 has an invalid length. [ 225.713375][T18899] pimreg: tun_chr_ioctl cmd 1074025676 [ 225.715199][T18899] pimreg: owner set to 0 [ 225.934405][T18907] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2643'. [ 225.938645][T18907] fuse: Unknown parameter 'ŒV3' [ 225.980861][T18910] overlayfs: failed lookup in lower (newroot/60, name='file0', err=-40): overlapping layers [ 225.986171][T18910] overlayfs: failed lookup in lower (newroot/60, name='bus', err=-40): overlapping layers [ 225.991406][T18912] overlayfs: failed lookup in lower (newroot/60, name='file0', err=-40): overlapping layers [ 226.064226][T18922] netlink: 'syz.9.2647': attribute type 1 has an invalid length. [ 226.080113][T18922] bond4: entered promiscuous mode [ 226.091472][T18922] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.095428][T18925] IPVS: set_ctl: invalid protocol: 57 172.30.0.1:20002 [ 226.097284][T18922] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2647'. [ 226.100466][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2647'. [ 226.103401][T18922] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2647'. [ 226.114847][T18922] bond4: (slave bridge4): making interface the new active one [ 226.117365][T18922] bridge4: entered promiscuous mode [ 226.119888][T18922] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 226.195062][T18985] input: syz0 as /devices/virtual/input/input35 [ 226.230067][T18992] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2655'. [ 226.233333][T18992] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2655'. [ 226.235209][T18995] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 226.239185][T18995] SELinux: failed to load policy [ 226.552006][T19050] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 226.623577][ T60] usb 13-1: new high-speed USB device number 26 using dummy_hcd [ 226.655444][ T5935] Bluetooth: unknown link type 128 [ 226.781927][ T60] usb 13-1: Using ep0 maxpacket: 8 [ 226.789101][ T60] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 226.792213][ T60] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.801136][ T60] pvrusb2: Hardware description: Terratec Grabster AV400 [ 226.808891][ T60] pvrusb2: ********** [ 226.810176][ T60] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 226.817730][ T60] pvrusb2: Important functionality might not be entirely working. [ 226.820206][ T60] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 226.825511][ T60] pvrusb2: ********** [ 226.835630][T19115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 226.837948][T19115] IPv6: NLM_F_CREATE should be set when creating new route [ 226.861338][ T1331] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 226.879413][T19119] netlink: 'syz.3.2677': attribute type 1 has an invalid length. [ 226.896984][T19119] bond3: entered promiscuous mode [ 226.899088][T19119] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.969178][T19121] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.972311][T19121] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 226.975511][T19121] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 226.980600][T19121] bond3: (slave vxcan3): making interface the new active one [ 226.984019][T19121] vxcan3: entered promiscuous mode [ 226.986737][T19121] vxcan3: left promiscuous mode [ 227.006591][ T2490] pvrusb2: Invalid write control endpoint [ 227.020822][T19177] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2678'. [ 227.033187][ T1331] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 227.036369][ T1331] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 227.039468][ T1331] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.044092][ T2490] pvrusb2: Invalid write control endpoint [ 227.044274][T19122] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 227.046237][ T2490] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 227.053042][T19122] bond3: (slave vxcan3): making interface the new active one [ 227.055842][ T2490] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 227.060093][ T1331] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 227.061612][ T2490] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 227.063075][ T1331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 227.066202][ T2490] pvrusb2: Device being rendered inoperable [ 227.068640][ T1331] usb 5-1: Product: syz [ 227.068649][ T1331] usb 5-1: Manufacturer: syz [ 227.068657][ T1331] usb 5-1: SerialNumber: syz [ 227.085629][ T2490] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 227.088392][ T2490] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 227.102629][ T2490] pvrusb2: Attached sub-driver cx25840 [ 227.104778][ T2490] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 227.108000][ T2490] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 227.206014][T19018] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 227.275925][ T1331] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 227.810768][T19204] 9p: Bad value for 'version' [ 228.405726][ T60] usb 5-1: USB disconnect, device number 29 [ 228.414039][ T60] usblp0: removed [ 228.490948][T19229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2683'. [ 228.552416][T19245] program syz.3.2685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.591686][ T1115] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 228.594864][ T1115] ata1.00: irq_stat 0x40000000 [ 228.596475][ T1115] ata1.00: failed command: ZAC MANAGEMENT OUT [ 228.598533][ T1115] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 14 [ 228.598533][ T1115] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 228.604857][ T1115] ata1.00: status: { DRDY ERR } [ 228.606935][ T1115] ata1.00: error: { ABRT } [ 228.608412][ T1115] ata1.00: device reported invalid CHS sector 0 [ 228.682056][T19269] overlayfs: failed to resolve './file0': -2 [ 228.691552][ T5935] Bluetooth: hci3: command 0x0419 tx timeout [ 228.878348][T19304] fuse: Unknown parameter '1844674407370955161500000000000000032768' [ 229.196156][T19340] pimreg3: entered allmulticast mode [ 229.303882][ T60] usb 13-1: USB disconnect, device number 26 [ 229.323255][T19356] bond5 (unregistering): Released all slaves [ 229.496558][T19443] xt_hashlimit: max too large, truncated to 1048576 [ 229.499093][T19443] xt_hashlimit: max too large, truncated to 1048576 [ 229.510279][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 229.510290][ T40] audit: type=1400 audit(2000000006.319:995): avc: denied { execute } for pid=19436 comm="syz.8.2705" path="/dev/snd/pcmC0D0c" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 229.586112][T19450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.590115][T19450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.700519][T19457] mkiss: ax0: crc mode is auto. [ 229.962756][T19464] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 229.984307][ C2] ata1: illegal qc_active transition (00000000->00000040) [ 229.992711][ T40] audit: type=1400 audit(2000000006.809:996): avc: denied { read } for pid=19467 comm="syz.0.2713" name="mixer" dev="devtmpfs" ino=1319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:devicekit_power_exec_t:s0" [ 230.001710][ T40] audit: type=1400 audit(2000000006.809:997): avc: denied { open } for pid=19467 comm="syz.0.2713" path="/dev/mixer" dev="devtmpfs" ino=1319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:devicekit_power_exec_t:s0" [ 230.061886][T19468] netlink: 'syz.0.2713': attribute type 64 has an invalid length. [ 230.064483][T19468] netlink: 'syz.0.2713': attribute type 4 has an invalid length. [ 230.067416][T19468] __nla_validate_parse: 5 callbacks suppressed [ 230.067424][T19468] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2713'. [ 230.088540][T19471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2714'. [ 230.104815][T19471] 8021q: adding VLAN 0 to HW filter on device bond4 [ 230.108274][ T40] audit: type=1326 audit(2000000006.919:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19470 comm="syz.3.2714" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bf6b9aeb9 code=0x0 [ 230.119533][T19509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2716'. [ 230.149865][ T40] audit: type=1400 audit(2000000006.959:999): avc: denied { write } for pid=19513 comm="syz.0.2718" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 230.151710][T19514] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2718'. [ 230.161315][T19515] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2718'. [ 230.280136][ T40] audit: type=1400 audit(2000000007.089:1000): avc: denied { lock } for pid=19533 comm="syz.8.2724" path="socket:[68359]" dev="sockfs" ino=68359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 230.302929][ T1115] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 230.306582][ T1115] ata1.00: configured for UDMA/100 [ 230.337700][T19540] syzkaller1: entered promiscuous mode [ 230.339463][T19540] syzkaller1: entered allmulticast mode [ 230.405178][ T5935] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 230.446026][T19551] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 230.509125][T19560] can0: slcan on ttyS3. [ 230.568782][ T40] audit: type=1400 audit(2000000007.379:1001): avc: denied { connect } for pid=19567 comm="syz.3.2730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 230.601419][T19554] can0 (unregistered): slcan off ttyS3. [ 230.849967][T19572] trusted_key: encrypted_key: keylen parameter is missing [ 230.941276][T19572] Invalid logical block size (3) [ 231.199791][T19589] netlink: 'syz.8.2737': attribute type 1 has an invalid length. [ 231.272090][T19599] netlink: 'syz.8.2740': attribute type 1 has an invalid length. [ 231.360303][T19634] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.432796][T19645] can0: slcan on ttyS3. [ 231.529812][T19661] syzkaller0: entered promiscuous mode [ 231.533128][T19645] can0 (unregistered): slcan off ttyS3. [ 231.533479][T19661] syzkaller0: entered allmulticast mode [ 231.544135][T19661] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2746'. [ 231.548308][T19645] mkiss: ax0: crc mode is auto. [ 231.643233][T19678] mkiss: ax1: crc mode is auto. [ 232.017639][ T40] audit: type=1400 audit(2000000008.829:1002): avc: denied { create } for pid=19722 comm="syz.8.2757" name="cpuset.memory_pressure_enabled" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 232.064988][T19727] gfs2: error -5 reading superblock [ 232.119768][ T40] audit: type=1400 audit(2000000008.929:1003): avc: denied { write } for pid=19733 comm="syz.8.2760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.178699][T19739] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2761'. [ 232.208870][ T40] audit: type=1400 audit(2000000009.019:1004): avc: denied { getattr } for pid=19738 comm="syz.3.2761" path="socket:[69328]" dev="sockfs" ino=69328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 232.384053][T19814] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2765'. [ 232.496955][T19824] netlink: 212328 bytes leftover after parsing attributes in process `syz.8.2767'. [ 232.500287][T19824] netlink: Unknown conntrack attr (type=2304, max=9) [ 232.524649][T19826] netlink: 2 bytes leftover after parsing attributes in process `syz.8.2768'. [ 235.317845][ T9743] IPVS: starting estimator thread 0... [ 235.320350][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 235.320360][ T40] audit: type=1400 audit(2000000012.129:1006): avc: denied { bind } for pid=19850 comm="syz.3.2773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 235.338074][T19851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19851 comm=syz.3.2773 [ 235.402029][T19852] IPVS: using max 43 ests per chain, 103200 per kthread [ 235.617736][T19831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.754327][T19880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2782'. [ 235.757109][T19880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2782'. [ 235.795666][T19889] netlink: 'syz.3.2784': attribute type 1 has an invalid length. [ 235.806702][T19889] bond5: entered promiscuous mode [ 235.808548][T19889] 8021q: adding VLAN 0 to HW filter on device bond5 [ 236.002865][T19958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=19958 comm=syz.8.2790 [ 237.192164][T19973] syzkaller0: entered promiscuous mode [ 237.193932][T19973] syzkaller0: entered allmulticast mode [ 237.389552][T19994] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2796'. [ 237.394314][T19994] syz.8.2796: vmalloc error: size 4183572480, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 237.399112][T19994] CPU: 0 UID: 0 PID: 19994 Comm: syz.8.2796 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.399131][T19994] Tainted: [L]=SOFTLOCKUP [ 237.399135][T19994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.399142][T19994] Call Trace: [ 237.399147][T19994] [ 237.399152][T19994] dump_stack_lvl+0x100/0x190 [ 237.399185][T19994] warn_alloc.cold+0x95/0x1c1 [ 237.399205][T19994] ? __pfx_warn_alloc+0x10/0x10 [ 237.399217][T19994] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 237.399238][T19994] ? lockdep_hardirqs_on+0x78/0x100 [ 237.399250][T19994] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 237.399263][T19994] ? kasan_save_track+0x14/0x30 [ 237.399279][T19994] ? kasan_save_stack+0x3f/0x50 [ 237.399291][T19994] ? kasan_save_stack+0x30/0x50 [ 237.399303][T19994] ? kasan_save_track+0x14/0x30 [ 237.399319][T19994] ? vb2_vmalloc_alloc+0x135/0x410 [ 237.399344][T19994] __vmalloc_node_range_noprof+0x1252/0x1530 [ 237.399362][T19994] ? __x64_sys_ioctl+0x18e/0x210 [ 237.399372][T19994] ? do_syscall_64+0xc9/0xf80 [ 237.399384][T19994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.399398][T19994] ? vb2_vmalloc_alloc+0x135/0x410 [ 237.399417][T19994] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 237.399443][T19994] ? vb2_vmalloc_alloc+0x135/0x410 [ 237.399458][T19994] vmalloc_user_noprof+0x9e/0xe0 [ 237.399476][T19994] ? vb2_vmalloc_alloc+0x135/0x410 [ 237.399491][T19994] vb2_vmalloc_alloc+0x135/0x410 [ 237.399505][T19994] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 237.399521][T19994] __vb2_queue_alloc+0x8cc/0x1150 [ 237.399542][T19994] vb2_core_create_bufs+0x5fa/0xa30 [ 237.399557][T19994] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 237.399574][T19994] ? lock_acquire+0x17c/0x330 [ 237.399588][T19994] vb2_create_bufs+0x40c/0x830 [ 237.399602][T19994] ? __pfx_vb2_create_bufs+0x10/0x10 [ 237.399613][T19994] ? __video_do_ioctl+0x43e/0xdc0 [ 237.399624][T19994] ? v4l_sanitize_colorspace+0x220/0x410 [ 237.399641][T19994] vb2_ioctl_create_bufs+0x244/0x3e0 [ 237.399654][T19994] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.399672][T19994] vidioc_create_bufs+0x7d/0xf0 [ 237.399689][T19994] v4l_create_bufs+0x17d/0x270 [ 237.399706][T19994] __video_do_ioctl+0xaf8/0xdc0 [ 237.399718][T19994] ? __might_fault+0xc5/0x140 [ 237.399730][T19994] ? __pfx___video_do_ioctl+0x10/0x10 [ 237.399746][T19994] video_usercopy+0x476/0x1660 [ 237.399757][T19994] ? __pfx___video_do_ioctl+0x10/0x10 [ 237.399770][T19994] ? __pfx_video_usercopy+0x10/0x10 [ 237.399790][T19994] v4l2_ioctl+0x1bd/0x250 [ 237.399801][T19994] ? __pfx_v4l2_ioctl+0x10/0x10 [ 237.399814][T19994] __x64_sys_ioctl+0x18e/0x210 [ 237.399826][T19994] do_syscall_64+0xc9/0xf80 [ 237.399838][T19994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.399849][T19994] RIP: 0033:0x7fc0f2d9aeb9 [ 237.399865][T19994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.399876][T19994] RSP: 002b:00007fc0f3bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 237.399887][T19994] RAX: ffffffffffffffda RBX: 00007fc0f3015fa0 RCX: 00007fc0f2d9aeb9 [ 237.399895][T19994] RDX: 0000200000000000 RSI: 00000000c100565c RDI: 0000000000000004 [ 237.399902][T19994] RBP: 00007fc0f2e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 237.399908][T19994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.399915][T19994] R13: 00007fc0f3016038 R14: 00007fc0f3015fa0 R15: 00007ffe890c2538 [ 237.399931][T19994] [ 237.399935][T19994] Mem-Info: [ 237.445085][T19995] netlink: 'syz.8.2796': attribute type 10 has an invalid length. [ 237.447179][T19994] active_anon:40696 inactive_anon:303 isolated_anon:0 [ 237.447179][T19994] active_file:20401 inactive_file:4711 isolated_file:0 [ 237.447179][T19994] unevictable:18207 dirty:51 writeback:0 [ 237.447179][T19994] slab_reclaimable:9259 slab_unreclaimable:83167 [ 237.447179][T19994] mapped:24503 shmem:28059 pagetables:2172 [ 237.447179][T19994] sec_pagetables:316 bounce:0 [ 237.447179][T19994] kernel_misc_reclaimable:0 [ 237.447179][T19994] free:400388 free_pcp:24748 free_cma:0 [ 237.508913][T19997] netlink: 'syz.8.2796': attribute type 10 has an invalid length. [ 237.509710][T19994] Node 0 active_anon:162568kB inactive_anon:1212kB active_file:81412kB inactive_file:18612kB unevictable:69292kB isolated(anon):0kB isolated(file):0kB mapped:77560kB dirty:188kB writeback:0kB shmem:108700kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:16320kB pagetables:8408kB sec_pagetables:1260kB all_unreclaimable? no Balloon:0kB [ 237.512397][T19997] netlink: 2 bytes leftover after parsing attributes in process `syz.8.2796'. [ 237.526324][T19994] Node 1 active_anon:128kB inactive_anon:0kB active_file:192kB inactive_file:232kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:16kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:268kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB [ 237.526355][T19994] Node 0 DMA free:15288kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 237.526389][T19994] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 237.526413][T19994] Node 0 DMA32 free:74560kB boost:0kB min:27488kB low:34360kB high:41232kB reserved_highatomic:0KB free_highatomic:0KB active_anon:162568kB inactive_anon:1212kB active_file:81412kB inactive_file:18612kB unevictable:69292kB writepending:188kB zspages:0kB present:2080628kB managed:1261168kB mlocked:0kB bounce:0kB free_pcp:69772kB local_pcp:23584kB free_cma:0kB [ 237.526447][T19994] lowmem_reserve[]: 0 0 0 0 0 [ 237.574347][T19994] Node 1 Normal free:1513020kB boost:0kB min:39752kB low:49688kB high:59624kB reserved_highatomic:0KB free_highatomic:0KB active_anon:128kB inactive_anon:0kB active_file:192kB inactive_file:232kB unevictable:3536kB writepending:16kB zspages:1720kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:28036kB local_pcp:2068kB free_cma:0kB [ 237.584441][T19994] lowmem_reserve[]: 0 0 0 0 0 [ 237.585977][T19994] Node 0 DMA: 4*4kB (U) 3*8kB (U) 1*16kB (U) 4*32kB (U) 4*64kB (U) 4*128kB (U) 4*256kB (U) 4*512kB (U) 3*1024kB (U) 2*2048kB (UM) 1*4096kB (U) = 15288kB [ 237.590923][T19994] Node 0 DMA32: 1467*4kB (UME) 807*8kB (UME) 425*16kB (UME) 236*32kB (UME) 94*64kB (UME) 27*128kB (UME) 9*256kB (ME) 8*512kB (ME) 12*1024kB (UM) 8*2048kB (UM) 1*4096kB (U) = 75316kB [ 237.596748][T19994] Node 1 Normal: 52*4kB (UME) 105*8kB (UME) 117*16kB (UME) 283*32kB (UME) 126*64kB (UME) 44*128kB (UME) 28*256kB (UM) 23*512kB (UME) 16*1024kB (UM) 5*2048kB (UM) 352*4096kB (UM) = 1513032kB [ 237.602706][T19994] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.605676][T19994] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 237.608577][T19994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.611620][T19994] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 237.614506][T19994] 69686 total pagecache pages [ 237.616054][T19994] 80 pages in swap cache [ 237.617402][T19994] Free swap = 122872kB [ 237.618774][T19994] Total swap = 124996kB [ 237.620105][T19994] 1048443 pages RAM [ 237.621430][T19994] 0 pages HighMem/MovableOnly [ 237.622994][T19994] 283840 pages reserved [ 237.624335][T19994] 0 pages cma reserved [ 237.715881][T20005] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2799'. [ 237.719601][T20005] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2799'. [ 237.723082][T20005] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2799'. [ 237.832833][T20014] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2801'. [ 237.964637][T20031] btrfs: Unknown parameter 'ier' [ 239.044711][T19963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.055297][T20039] netlink: 'syz.8.2808': attribute type 1 has an invalid length. [ 239.057928][T20039] netlink: 9188 bytes leftover after parsing attributes in process `syz.8.2808'. [ 239.086439][T20045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20045 comm=syz.3.2809 [ 239.146314][T20045] netlink: 'syz.3.2809': attribute type 1 has an invalid length. [ 239.185160][T20045] bond6: (slave bridge3): making interface the new active one [ 239.187988][T20045] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 239.205774][T20092] netlink: 'syz.8.2814': attribute type 4 has an invalid length. [ 239.208499][T20092] netlink: 'syz.8.2814': attribute type 4 has an invalid length. [ 239.267448][T20100] geneve2: entered promiscuous mode [ 239.269184][T20100] geneve2: entered allmulticast mode [ 239.305454][T18125] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 239.444262][T20128] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2819'. [ 239.603007][T20154] overlayfs: missing 'lowerdir' [ 239.860777][ T40] audit: type=1400 audit(2000000016.669:1007): avc: denied { append } for pid=20181 comm="syz.0.2832" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 239.921750][T20183] input: syz1 as /devices/virtual/input/input37 [ 239.972014][T20181] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 240.023095][T20193] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 240.025269][T20193] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 240.027788][T20193] vhci_hcd vhci_hcd.0: Device attached [ 240.033798][T20193] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 240.036103][T20193] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 240.038570][T20193] vhci_hcd vhci_hcd.0: Device attached [ 240.041661][T20193] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 240.043771][T20193] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 240.046174][T20193] vhci_hcd vhci_hcd.0: Device attached [ 240.048267][T20198] vhci_hcd: connection closed [ 240.048307][T20196] vhci_hcd: connection closed [ 240.048466][T18125] vhci_hcd vhci_hcd.0: stop threads [ 240.053551][T20194] vhci_hcd: connection closed [ 240.054401][T18125] vhci_hcd vhci_hcd.0: release socket [ 240.057736][T18125] vhci_hcd vhci_hcd.0: disconnect device [ 240.059702][T18125] vhci_hcd vhci_hcd.0: stop threads [ 240.062481][T18125] vhci_hcd vhci_hcd.0: release socket [ 240.064538][T18125] vhci_hcd vhci_hcd.0: disconnect device [ 240.066476][T18125] vhci_hcd vhci_hcd.0: stop threads [ 240.068155][T18125] vhci_hcd vhci_hcd.0: release socket [ 240.069867][T18125] vhci_hcd vhci_hcd.0: disconnect device [ 240.427142][T10862] buffer_io_error: 29 callbacks suppressed [ 240.427153][T10862] Buffer I/O error on dev loop7, logical block 32767996, async page read [ 240.473662][T20205] netlink: 'syz.3.2836': attribute type 10 has an invalid length. [ 240.551489][T20212] sctp: [Deprecated]: syz.8.2839 (pid 20212) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.551489][T20212] Use struct sctp_sack_info instead [ 240.667635][T20207] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 240.871515][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 240.875353][T20233] xt_hashlimit: max too large, truncated to 1048576 [ 241.031324][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 241.034658][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 241.037450][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.040653][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 241.044001][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 241.047348][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.051834][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 241.055563][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.064060][T20248] ip6gre1: entered allmulticast mode [ 241.093582][T20258] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2848'. [ 241.096431][T20258] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2848'. [ 241.133684][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2849'. [ 241.265469][ T24] usb 5-1: usb_control_msg returned -71 [ 241.267445][ T24] usbtmc 5-1:16.0: can't read capabilities [ 241.276877][ T24] usb 5-1: USB disconnect, device number 30 [ 241.413915][T20280] program syz.3.2851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.644925][T20329] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2506703405 (20053627240 ns) > initial count (16699669768 ns). Using initial count to start timer. [ 241.655461][T20329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2856'. [ 241.659286][T20329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 242.119099][T20361] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2862'. [ 242.150761][T20381] random: crng reseeded on system resumption [ 242.156112][T20383] program syz.8.2864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.204081][T20387] autofs4:pid:20387:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(40960.1), cmd(0xc0189374) [ 242.208384][T20387] autofs4:pid:20387:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 242.320743][T20399] sctp: [Deprecated]: syz.8.2870 (pid 20399) Use of int in maxseg socket option. [ 242.320743][T20399] Use struct sctp_assoc_value instead [ 242.419889][T20413] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 242.568564][T20429] syzkaller1: entered promiscuous mode [ 242.570740][T20429] syzkaller1: entered allmulticast mode [ 242.741240][T20445] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 242.986854][T20462] macvtap1: entered promiscuous mode [ 242.994789][T20462] macvtap1: entered allmulticast mode [ 243.299983][T20473] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 243.364685][T20478] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 243.510858][T20497] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2890'. [ 243.725515][T20516] NILFS (nbd3): device size too small [ 243.844046][T20521] netlink: 'syz.0.2896': attribute type 21 has an invalid length. [ 244.418294][T20529] netlink: 788 bytes leftover after parsing attributes in process `syz.8.2897'. [ 244.421168][T20529] bond0: entered allmulticast mode [ 244.422957][T20529] bond_slave_0: entered allmulticast mode [ 244.424828][T20529] bond_slave_1: entered allmulticast mode [ 244.573444][T20535] nvme_fabrics: missing parameter 'transport=%s' [ 244.575992][T20535] nvme_fabrics: missing parameter 'nqn=%s' [ 244.579135][T20542] netlink: 'syz.8.2900': attribute type 1 has an invalid length. [ 244.583409][T20542] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2900'. [ 244.586306][T20542] nbd: illegal input index 65544 [ 244.825677][T20595] kvm: pic: level sensitive irq not supported [ 244.832127][T20595] kvm: pic: non byte write [ 244.835943][T20595] kvm: pic: non byte write [ 244.837801][T20595] kvm: pic: non byte write [ 244.839641][T20595] kvm: pic: non byte write [ 244.849600][T20595] kvm: pic: non byte write [ 244.863141][T20595] kvm: pic: non byte write [ 244.865019][T20595] kvm: pic: non byte write [ 244.866841][T20595] kvm: pic: non byte write [ 244.868694][T20595] kvm: pic: non byte write [ 244.870803][T20595] kvm: pic: non byte write [ 245.000423][T20630] hsr_slave_0: left promiscuous mode [ 245.003306][T20630] hsr_slave_1: left promiscuous mode [ 245.088234][T20643] bridge_slave_0: left allmulticast mode [ 245.090148][T20643] bridge_slave_0: left promiscuous mode [ 245.093192][T20643] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.097194][T20643] bridge_slave_1: left allmulticast mode [ 245.099024][T20643] bridge_slave_1: left promiscuous mode [ 245.100932][T20643] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.105309][T20643] bond2: (slave veth0_to_bond): Releasing active interface [ 245.116358][T20643] bond0: (slave bond_slave_0): Releasing backup interface [ 245.121526][T20643] bond0: (slave bond_slave_1): Releasing backup interface [ 245.127298][T20643] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 245.329360][ T40] audit: type=1800 audit(2000000022.139:1008): pid=20652 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2912" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 245.370193][T20652] netlink: 'syz.0.2912': attribute type 1 has an invalid length. [ 245.467443][ T40] audit: type=1400 audit(2000000022.279:1009): avc: denied { setopt } for pid=20666 comm="syz.3.2916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 245.468825][T20667] netlink: 'syz.3.2916': attribute type 1 has an invalid length. [ 245.476395][T20667] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2916'. [ 245.514355][T20666] delete_channel: no stack [ 245.874888][ T5935] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 246.103403][ T9743] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 246.272725][ T9743] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.275568][ T9743] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.279403][ T9743] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.282788][ T9743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.342943][ T5931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.349296][ T5931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.353159][ T5931] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.356261][ T5931] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.359297][ T5931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.497973][ T9743] usb 5-1: usb_control_msg returned -32 [ 246.499633][ T9743] usbtmc 5-1:16.0: can't read capabilities [ 246.582056][T20832] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2930'. [ 246.584967][T20832] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2930'. [ 246.672146][T20797] chnl_net:caif_netlink_parms(): no params data found [ 246.737101][T20867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20867 comm=syz.3.2932 [ 246.770952][T20797] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.773888][T20797] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.776228][T20797] bridge_slave_0: entered allmulticast mode [ 246.779093][T20797] bridge_slave_0: entered promiscuous mode [ 246.782580][T20797] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.785438][T20797] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.788289][T20797] bridge_slave_1: entered allmulticast mode [ 246.793707][T20797] bridge_slave_1: entered promiscuous mode [ 246.805138][ T9] usb 14-1: USB disconnect, device number 17 [ 246.842615][T20797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.847672][T20797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.863634][T20797] team0: Port device team_slave_0 added [ 246.866775][T20797] team0: Port device team_slave_1 added [ 246.884249][T20797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.886466][T20797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.897170][T20797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.901667][T20797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.903901][T20797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.912576][T20797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.938231][T20797] hsr_slave_0: entered promiscuous mode [ 246.940458][T20797] hsr_slave_1: entered promiscuous mode [ 246.944214][T20797] debugfs: 'hsr0' already exists in 'hsr' [ 246.946045][T20797] Cannot create hsr debugfs directory [ 246.972810][T21034] bond8: option downdelay: invalid value (18446744073709551615) [ 246.975276][T21034] bond8: option downdelay: allowed values 0 - 2147483647 [ 246.978514][T21034] bond8 (unregistering): Released all slaves [ 247.020945][T18120] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.027613][T18120] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.161617][T18120] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.164963][T18120] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.173511][T21178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2937'. [ 247.177888][T21180] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2937'. [ 247.255774][T18120] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.259162][T18120] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.359193][T18120] bond0: (slave netdevsim0): Releasing backup interface [ 247.364424][T18120] netdevsim netdevsim9 netdevsim0 (unregistering): left promiscuous mode [ 247.369333][T18120] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.372843][T18120] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.684664][T18120] gretap0 (unregistering): left promiscuous mode [ 247.722078][T18120] bond3 (unregistering): (slave geneve2): Releasing active interface [ 247.724769][T18120] geneve2 (unregistering): left promiscuous mode [ 247.726798][T18120] geneve2 (unregistering): left allmulticast mode [ 247.766097][T18120] bridge0 (unregistering): left promiscuous mode [ 247.999339][T18120] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 248.002006][T18120] bridge4 (unregistering): left promiscuous mode [ 248.067059][T18120] bond0 (unregistering): left promiscuous mode [ 248.069883][T18120] bond_slave_0: left promiscuous mode [ 248.072778][T18120] bond_slave_1: left promiscuous mode [ 248.075317][T18120] batadv0: left promiscuous mode [ 248.083523][T18120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.087669][T18120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.091337][T18120] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 248.095090][T18120] bond0 (unregistering): Released all slaves [ 248.099391][T18120] bond1 (unregistering): Released all slaves [ 248.187691][T18120] bond2 (unregistering): (slave veth3): Releasing active interface [ 248.192181][T18120] bond2 (unregistering): (slave wlan0): Releasing active interface [ 248.199633][T18120] bond2 (unregistering): Released all slaves [ 248.287312][T18120] bond3 (unregistering): Released all slaves [ 248.387148][T18120] bond4 (unregistering): Released all slaves [ 248.459222][ T5931] Bluetooth: hci0: command tx timeout [ 248.482724][T20797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 248.497273][T18120] tipc: Left network mode [ 248.499042][T20797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 248.507706][T20797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 248.513718][T21279] /dev/nullb0: Can't open blockdev [ 248.526222][T20797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 248.539312][T18120] IPVS: stopping backup sync thread 16342 ... [ 248.575367][T20797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.585293][T20797] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.589908][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.592267][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.604357][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.606634][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.628377][T20797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.636549][T21302] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2953'. [ 248.735572][T21373] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21373 comm=syz.8.2953 [ 248.747158][T20797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.768267][T20797] veth0_vlan: entered promiscuous mode [ 248.775585][T20797] veth1_vlan: entered promiscuous mode [ 248.808621][T20797] veth0_macvtap: entered promiscuous mode [ 248.816833][T20797] veth1_macvtap: entered promiscuous mode [ 248.825100][T20797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.830277][T20797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.836297][ T1157] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.839170][ T1157] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.845139][T18124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.855022][T18124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.889607][ T60] usb 5-1: USB disconnect, device number 31 [ 248.920020][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.925411][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.956334][T18120] hsr_slave_0: left promiscuous mode [ 248.959240][T18120] hsr_slave_1: left promiscuous mode [ 248.962175][T18120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.965086][T18120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.975522][T18120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.978435][T18120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.988824][T18120] veth1_macvtap: left promiscuous mode [ 248.991062][T18120] veth0_macvtap: left promiscuous mode [ 248.997616][T18120] veth1_vlan: left promiscuous mode [ 248.999752][T18120] veth0_vlan: left promiscuous mode [ 249.369322][T18120] team0 (unregistering): Port device team_slave_1 removed [ 249.392424][T18120] team0 (unregistering): Port device team_slave_0 removed [ 249.576230][T21432] netlink: 'syz.8.2959': attribute type 1 has an invalid length. [ 249.578724][T21432] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2959'. [ 249.581655][T21432] NCSI netlink: No device for ifindex 0 [ 249.639179][T18125] smc: removing ib device syz2 [ 249.662175][T18124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.665077][T18124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.718402][T21440] netlink: 'syz.8.2960': attribute type 11 has an invalid length. [ 249.721286][T21440] netlink: 'syz.8.2960': attribute type 11 has an invalid length. [ 249.723878][T21440] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2960'. [ 249.732999][T21445] xt_l2tp: v2 doesn't support IP mode [ 249.900006][T21463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2963'. [ 249.943225][T21472] SELinux: Context Ü is not valid (left unmapped). [ 249.990677][T21477] mkiss: ax0: crc mode is auto. [ 250.282710][T21490] xt_hashlimit: size too large, truncated to 1048576 [ 250.335931][T21501] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 250.368343][T21505] kvm: MONITOR instruction emulated as NOP! [ 250.531339][ T5931] Bluetooth: hci0: command tx timeout [ 250.557978][T21539] overlayfs: missing 'lowerdir' [ 250.595359][T21544] vcan0: tx address claim with different name [ 250.641119][T21552] netlink: 'syz.1.2976': attribute type 4 has an invalid length. [ 250.711325][T12388] usb 13-1: new high-speed USB device number 27 using dummy_hcd [ 250.785419][T21558] bridge_slave_0: left allmulticast mode [ 250.787382][T21558] bridge_slave_0: left promiscuous mode [ 250.789296][T21558] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.797126][ T5931] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 250.839535][T21558] bridge_slave_1: left allmulticast mode [ 250.844080][T21558] bridge_slave_1: left promiscuous mode [ 250.846062][T21558] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.851068][T21558] bond0: (slave bond_slave_0): Releasing backup interface [ 250.858317][T21558] bond0: (slave bond_slave_1): Releasing backup interface [ 250.865059][T21558] team0: Port device team_slave_0 removed [ 250.869176][T21558] team0: Port device team_slave_1 removed [ 250.871519][T21558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.873841][T21558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.877863][T21558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.880261][T21558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.883110][T12388] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 250.885940][T12388] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 250.886913][T21558] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 250.889225][T12388] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 250.889252][T12388] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 250.900694][T12388] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 250.912443][T12388] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 250.915425][T12388] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 250.915505][T21558] team0: Mode changed to "loadbalance" [ 250.917981][T12388] usb 13-1: Product: syz [ 250.917991][T12388] usb 13-1: Manufacturer: syz [ 250.926525][T12388] cdc_wdm 13-1:1.0: skipping garbage [ 250.928549][T12388] cdc_wdm 13-1:1.0: skipping garbage [ 250.931744][T12388] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 250.933823][T12388] cdc_wdm 13-1:1.0: Unknown control protocol [ 251.004920][T21577] erspan1: entered promiscuous mode [ 251.034103][T21577] netlink: 'syz.1.2981': attribute type 1 has an invalid length. [ 251.133422][T21525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.137925][T21525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.148332][T12388] usb 13-1: USB disconnect, device number 27 [ 251.167386][T21601] tmpfs: Bad value for 'mpol' [ 251.311271][ T40] audit: type=1804 audit(2000000028.119:1010): pid=21617 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.2986" name="/newroot/9/file0" dev="tmpfs" ino=64 res=1 errno=0 [ 251.320314][ T40] audit: type=1804 audit(2000000028.119:1011): pid=21616 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.2986" name="/newroot/9/file0" dev="tmpfs" ino=64 res=1 errno=0 [ 251.348106][T21613] uprobe: syz.1.2986:21613 failed to unregister, leaking uprobe [ 251.411025][T21625] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 251.423031][T21630] overlayfs: missing 'lowerdir' [ 251.471305][T21642] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 251.473567][T21642] overlayfs: failed to set xattr on upper [ 251.475385][T21642] overlayfs: ...falling back to redirect_dir=nofollow. [ 251.477545][T21642] overlayfs: ...falling back to index=off. [ 251.479453][T21642] overlayfs: ...falling back to uuid=null. [ 251.539754][T21657] netlink: 'syz.8.2998': attribute type 4 has an invalid length. [ 251.577441][ T40] audit: type=1400 audit(2000000028.389:1012): avc: denied { read } for pid=21670 comm="syz.1.3001" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 251.586104][ T40] audit: type=1400 audit(2000000028.389:1013): avc: denied { open } for pid=21670 comm="syz.1.3001" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 251.627413][T21676] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 251.629704][T21676] overlayfs: failed to set xattr on upper [ 251.631554][T21676] overlayfs: ...falling back to redirect_dir=nofollow. [ 251.633730][T21676] overlayfs: ...falling back to index=off. [ 251.635557][T21676] overlayfs: ...falling back to uuid=null. [ 251.645289][T21676] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 251.793706][T12388] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 251.812580][T21700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3006'. [ 251.921535][T12388] usb 5-1: device descriptor read/64, error -71 [ 251.990287][T21712] could not allocate digest TFM handle cryptd(hmac(sha256)) [ 252.018898][ T5931] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 252.021769][T21729] netlink: 'syz.3.3013': attribute type 1 has an invalid length. [ 252.024259][T21729] netlink: 'syz.3.3013': attribute type 4 has an invalid length. [ 252.026746][T21729] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3013'. [ 252.031167][T21729] netlink: 'syz.3.3013': attribute type 1 has an invalid length. [ 252.035622][T21729] netlink: 'syz.3.3013': attribute type 4 has an invalid length. [ 252.038136][T21729] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3013'. [ 252.145515][T21741] Cannot find del_set index 4 as target [ 252.147685][T21742] Cannot find del_set index 4 as target [ 252.180212][T12388] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 252.311368][T12388] usb 5-1: device descriptor read/64, error -71 [ 252.341299][ T9681] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 252.431576][T12388] usb usb5-port1: attempt power cycle [ 252.491257][ T9681] usb 6-1: Using ep0 maxpacket: 32 [ 252.494735][ T9681] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 252.497913][ T9681] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 252.502428][ T9681] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 252.506719][ T9681] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 252.515755][ T9681] usb 6-1: config 0 interface 0 has no altsetting 0 [ 252.521111][ T9681] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 252.525279][ T9681] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 252.528535][ T9681] usb 6-1: Product: syz [ 252.530299][ T9681] usb 6-1: Manufacturer: syz [ 252.533631][ T9681] usb 6-1: SerialNumber: syz [ 252.538765][ T9681] usb 6-1: config 0 descriptor?? [ 252.661428][ T9681] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 252.665374][ T9681] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 252.697365][T21754] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 252.801715][T12388] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 252.822019][T12388] usb 5-1: device descriptor read/8, error -71 [ 252.842913][ T29] usb 6-1: USB disconnect, device number 3 [ 252.855111][ T29] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 253.061538][T12388] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 253.087075][T12388] usb 5-1: device descriptor read/8, error -71 [ 253.169168][T21786] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3022'. [ 253.205582][T12388] usb usb5-port1: unable to enumerate USB device [ 253.311318][ T9681] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 253.462073][ T9681] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 253.466611][ T9681] usb 6-1: config 0 has no interfaces? [ 253.469891][ T9681] usb 6-1: config 0 has no interfaces? [ 253.473434][ T9681] usb 6-1: config 0 has no interfaces? [ 253.476767][ T9681] usb 6-1: config 0 has no interfaces? [ 253.480289][ T9681] usb 6-1: config 0 has no interfaces? [ 253.484090][ T9681] usb 6-1: config 0 has no interfaces? [ 253.487701][ T9681] usb 6-1: config 0 has no interfaces? [ 253.491470][ T9681] usb 6-1: config 0 has no interfaces? [ 253.495934][ T9681] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.499786][ T9681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.503400][ T9681] usb 6-1: Product: syz [ 253.505201][ T9681] usb 6-1: Manufacturer: syz [ 253.506927][ T9681] usb 6-1: SerialNumber: syz [ 253.511615][ T9681] usb 6-1: config 0 descriptor?? [ 253.661258][ T5931] Bluetooth: hci0: command tx timeout [ 253.669247][T21803] Bluetooth: MGMT ver 1.23 [ 253.672080][T21803] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3026'. [ 253.674895][T21803] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3026'. [ 253.717520][T12388] usb 6-1: USB disconnect, device number 4 [ 253.756979][T13768] Buffer I/O error on dev loop7, logical block 32767996, async page read [ 254.008010][T21844] loop6: detected capacity change from 0 to 524288000 [ 254.068732][ T40] audit: type=1400 audit(2000000030.879:1014): avc: denied { create } for pid=21849 comm="syz.8.3036" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 254.068985][ T40] audit: type=1400 audit(2000000030.879:1015): avc: denied { associate } for pid=21849 comm="syz.8.3036" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 254.097673][ T40] audit: type=1400 audit(2000000030.879:1016): avc: denied { mounton } for pid=21849 comm="syz.8.3036" path="/580/bus" dev="tmpfs" ino=3114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 254.126224][ T40] audit: type=1400 audit(2000000030.879:1017): avc: denied { add_name } for pid=21849 comm="syz.8.3036" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 254.154388][ T40] audit: type=1400 audit(2000000030.879:1018): avc: denied { setattr } for pid=21849 comm="syz.8.3036" name="work" dev="tmpfs" ino=3115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 254.188440][ T40] audit: type=1400 audit(2000000030.879:1019): avc: denied { write open } for pid=21849 comm="syz.8.3036" path=2F202864656C6574656429 dev="tmpfs" ino=3116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 254.391652][ T29] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 254.583689][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 254.586713][ T29] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 254.589339][ T29] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 254.592924][ T29] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 254.596401][ T29] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 254.600508][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 254.605100][ T29] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 254.608051][ T29] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 254.610712][ T29] usb 6-1: Product: syz [ 254.612358][ T29] usb 6-1: Manufacturer: syz [ 254.614144][ T29] usb 6-1: SerialNumber: syz [ 254.617217][ T29] usb 6-1: config 0 descriptor?? [ 254.620442][ T29] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 254.628149][ T29] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 254.820620][ T1465] usb 6-1: USB disconnect, device number 5 [ 254.822681][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 254.825948][ T1465] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 254.848694][T21921] netlink: 187476 bytes leftover after parsing attributes in process `syz.0.3042'. [ 255.231780][T21939] bond7 (unregistering): Released all slaves [ 255.276765][T22017] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3046'. [ 256.324017][T22022] syzkaller0: entered promiscuous mode [ 256.325954][T22022] syzkaller0: entered allmulticast mode [ 257.038665][T22061] syz.3.3053: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 257.048115][T22061] CPU: 0 UID: 0 PID: 22061 Comm: syz.3.3053 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.048134][T22061] Tainted: [L]=SOFTLOCKUP [ 257.048138][T22061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 257.048145][T22061] Call Trace: [ 257.048150][T22061] [ 257.048154][T22061] dump_stack_lvl+0x100/0x190 [ 257.048173][T22061] warn_alloc.cold+0x95/0x1c1 [ 257.048191][T22061] ? __pfx_warn_alloc+0x10/0x10 [ 257.048209][T22061] ? __pfx___schedule+0x10/0x10 [ 257.048222][T22061] ? kasan_save_stack+0x3f/0x50 [ 257.048235][T22061] ? kasan_save_stack+0x30/0x50 [ 257.048247][T22061] ? kasan_save_track+0x14/0x30 [ 257.048260][T22061] ? xskq_create+0xfb/0x1d0 [ 257.048277][T22061] __vmalloc_node_range_noprof+0x1252/0x1530 [ 257.048299][T22061] ? xskq_create+0xfb/0x1d0 [ 257.048320][T22061] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.048343][T22061] ? xskq_create+0xfb/0x1d0 [ 257.048360][T22061] vmalloc_user_noprof+0x9e/0xe0 [ 257.048376][T22061] ? xskq_create+0xfb/0x1d0 [ 257.048392][T22061] xskq_create+0xfb/0x1d0 [ 257.048409][T22061] xsk_setsockopt+0x725/0xa90 [ 257.048432][T22061] ? __pfx_xsk_setsockopt+0x10/0x10 [ 257.048448][T22061] ? find_held_lock+0x2b/0x80 [ 257.048463][T22061] ? __fget_files+0x215/0x3d0 [ 257.048480][T22061] ? selinux_socket_setsockopt+0x6a/0x80 [ 257.048498][T22061] ? __pfx_xsk_setsockopt+0x10/0x10 [ 257.048516][T22061] do_sock_setsockopt+0xf3/0x1d0 [ 257.048534][T22061] __sys_setsockopt+0x195/0x220 [ 257.048551][T22061] __x64_sys_setsockopt+0xbd/0x160 [ 257.048564][T22061] ? do_syscall_64+0x94/0xf80 [ 257.048576][T22061] ? lockdep_hardirqs_on+0x78/0x100 [ 257.048588][T22061] do_syscall_64+0xc9/0xf80 [ 257.048602][T22061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.048614][T22061] RIP: 0033:0x7f9bf6b9aeb9 [ 257.048623][T22061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.048634][T22061] RSP: 002b:00007f9bf79d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 257.048645][T22061] RAX: ffffffffffffffda RBX: 00007f9bf6e16090 RCX: 00007f9bf6b9aeb9 [ 257.048652][T22061] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 257.048658][T22061] RBP: 00007f9bf6c08c1f R08: 0000000000000004 R09: 0000000000000000 [ 257.048664][T22061] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.048670][T22061] R13: 00007f9bf6e16128 R14: 00007f9bf6e16090 R15: 00007ffc52786728 [ 257.048684][T22061] [ 257.048688][T22061] Mem-Info: [ 257.128053][T22061] active_anon:1643 inactive_anon:28202 isolated_anon:0 [ 257.128053][T22061] active_file:4644 inactive_file:20470 isolated_file:0 [ 257.128053][T22061] unevictable:18207 dirty:48 writeback:0 [ 257.128053][T22061] slab_reclaimable:11135 slab_unreclaimable:83999 [ 257.128053][T22061] mapped:24393 shmem:17797 pagetables:2159 [ 257.128053][T22061] sec_pagetables:316 bounce:0 [ 257.128053][T22061] kernel_misc_reclaimable:0 [ 257.128053][T22061] free:412609 free_pcp:22145 free_cma:0 [ 257.142026][T22061] Node 0 active_anon:4960kB inactive_anon:112808kB active_file:16984kB inactive_file:81644kB unevictable:69292kB isolated(anon):0kB isolated(file):0kB mapped:56612kB dirty:192kB writeback:0kB shmem:67652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:16256kB pagetables:8036kB sec_pagetables:1260kB all_unreclaimable? no Balloon:0kB [ 257.152084][T22061] Node 1 active_anon:1612kB inactive_anon:0kB active_file:1592kB inactive_file:236kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40960kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:600kB sec_pagetables:4kB all_unreclaimable? no Balloon:0kB [ 257.161517][T22061] Node 0 DMA free:9144kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 257.179202][T22061] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 257.181100][T22061] Node 0 DMA32 free:183296kB boost:0kB min:27488kB low:34360kB high:41232kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4960kB inactive_anon:112808kB active_file:16984kB inactive_file:81644kB unevictable:69292kB writepending:192kB zspages:0kB present:2080628kB managed:1261168kB mlocked:0kB bounce:0kB free_pcp:56600kB local_pcp:8872kB free_cma:0kB [ 257.191545][T22061] lowmem_reserve[]: 0 0 0 0 0 [ 257.193078][T22061] Node 1 Normal free:1457996kB boost:0kB min:39752kB low:49688kB high:59624kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1612kB inactive_anon:0kB active_file:1592kB inactive_file:236kB unevictable:3536kB writepending:0kB zspages:2320kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:32176kB local_pcp:3728kB free_cma:0kB [ 257.203315][T22061] lowmem_reserve[]: 0 0 0 0 0 [ 257.204857][T22061] Node 0 DMA: 4*4kB (U) 3*8kB (U) 1*16kB (U) 4*32kB (U) 4*64kB (U) 4*128kB (U) 4*256kB (U) 4*512kB (U) 3*1024kB (U) 1*2048kB (M) 0*4096kB = 9144kB [ 257.209594][T22061] Node 0 DMA32: 4389*4kB (UME) 1842*8kB (UME) 750*16kB (UME) 726*32kB (UME) 221*64kB (UME) 106*128kB (UM) 48*256kB (M) 26*512kB (M) 21*1024kB (UME) 8*2048kB (UME) 6*4096kB (UM) = 183300kB [ 257.215568][T22061] Node 1 Normal: 87*4kB (UME) 78*8kB (UME) 34*16kB (UM) 119*32kB (UME) 16*64kB (UME) 41*128kB (UME) 24*256kB (UM) 21*512kB (UME) 18*1024kB (UM) 7*2048kB (UM) 341*4096kB (UM) = 1457996kB [ 257.221406][T22061] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.224398][T22061] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 257.228255][T22061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.231368][T22061] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 257.234273][T22061] 59470 total pagecache pages [ 257.235787][T22061] 125 pages in swap cache [ 257.237163][T22061] Free swap = 121416kB [ 257.238515][T22061] Total swap = 124996kB [ 257.239869][T22061] 1048443 pages RAM [ 257.241104][T22061] 0 pages HighMem/MovableOnly [ 257.242687][T22061] 283840 pages reserved [ 257.244012][T22061] 0 pages cma reserved [ 257.721598][T22041] kthread_run failed with err -4 [ 257.758566][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 257.758577][ T40] audit: type=1400 audit(2000000034.569:1026): avc: denied { map } for pid=22069 comm="syz.3.3055" path="socket:[76359]" dev="sockfs" ino=76359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 257.772646][T22072] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3056'. [ 257.849469][T22085] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 257.885127][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.887682][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.899112][T22088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.904443][T22088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.947436][T22092] bridge_slave_0: entered promiscuous mode [ 257.955975][T22094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3064'. [ 258.000193][T22089] kvm: kvm [22077]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 258.005999][T22089] kvm: kvm [22077]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 258.024342][T22089] kvm: kvm [22077]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 258.043748][T22089] kvm: kvm [22077]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 258.046931][T22089] kvm: kvm [22077]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 258.150622][T22111] fuse: Bad value for 'fd' [ 258.481526][T22126] ptrace attach of "/syz-executor exec"[20797] was attempted by "/syz-executor exec"[22126] [ 258.574506][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3073'. [ 258.600867][T22149] qnx4: unable to read the superblock [ 258.810766][T22163] kvm: kvm [22162]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 258.815217][T22163] kvm: kvm [22162]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 258.824731][T22171] netlink: 'syz.3.3079': attribute type 12 has an invalid length. [ 258.827580][T22171] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.3079'. [ 258.834845][T22163] kvm: kvm [22162]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 258.854805][T22163] kvm: kvm [22162]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 258.858162][T22163] kvm: kvm [22162]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 258.886068][T22179] IPVS: sync thread started: state = MASTER, mcast_ifn = bond0, syncid = -2, id = 0 [ 258.891745][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 259.010660][T22188] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 259.011459][ T40] audit: type=1400 audit(2000000035.819:1027): avc: denied { ioctl } for pid=22181 comm="syz.3.3082" path="/dev/mixer" dev="devtmpfs" ino=1319 ioctlcmd=0x4d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:devicekit_power_exec_t:s0" [ 259.072909][ T29] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 259.075489][ T29] usb 6-1: config 1 has no interface number 0 [ 259.081307][ T29] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1023 [ 259.084499][ T29] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 259.087753][ T29] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 259.097486][ T29] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 259.100332][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.104256][ T29] usb 6-1: Product: syz [ 259.105608][ T29] usb 6-1: Manufacturer: syz [ 259.107086][ T29] usb 6-1: SerialNumber: syz [ 259.114798][T22154] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 259.117163][T22154] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 259.120993][ T29] usb 6-1: Error in usbnet_get_endpoints (-22) [ 259.205168][ T40] audit: type=1400 audit(2000000036.019:1028): avc: denied { bind } for pid=22217 comm="syz.0.3089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 259.205355][T22218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3089'. [ 259.253870][T22225] usb usb8: usbfs: process 22225 (syz.3.3090) did not claim interface 0 before use [ 259.328054][T22231] sp0: Synchronizing with TNC [ 259.332041][T22232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=22232 comm=syz.8.3091 [ 259.348331][T22226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22226 comm=syz.3.3090 [ 259.413209][T22230] [U] è [ 259.602021][T22259] x_tables: duplicate underflow at hook 1 [ 259.602587][T22260] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 259.624764][T22259] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3095'. [ 259.627752][T22259] netlink: ct family unspecified [ 259.743251][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.747395][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.750988][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.755306][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.757972][ T5935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.882482][T22276] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 259.898240][T22278] chnl_net:caif_netlink_parms(): no params data found [ 259.968552][T22278] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.971737][T22278] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.974032][T22278] bridge_slave_0: entered allmulticast mode [ 259.976607][T22278] bridge_slave_0: entered promiscuous mode [ 259.979929][T22278] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.982311][T22278] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.984599][T22278] bridge_slave_1: entered allmulticast mode [ 259.987182][T22278] bridge_slave_1: entered promiscuous mode [ 260.003959][T22278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.008259][T22278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.027931][T22278] team0: Port device team_slave_0 added [ 260.031456][T22278] team0: Port device team_slave_1 added [ 260.047630][T22278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.049880][T22278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.059968][T22455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3100'. [ 260.060754][T22278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.068277][T22278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.070501][T22278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.079077][T22278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.107540][T22278] hsr_slave_0: entered promiscuous mode [ 260.109800][T22278] hsr_slave_1: entered promiscuous mode [ 260.112560][T22278] debugfs: 'hsr0' already exists in 'hsr' [ 260.114388][T22278] Cannot create hsr debugfs directory [ 260.125237][T22494] netlink: 'syz.3.3102': attribute type 21 has an invalid length. [ 260.132346][T22494] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3102'. [ 260.218817][T22278] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.224919][T22278] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.303275][T22278] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.306631][T22278] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.380580][T22278] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.385440][T22278] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.387542][T22583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.395167][T22583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.454612][T22278] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.457923][T22278] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.533435][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.581132][T22278] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 260.593578][T22278] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 260.600533][T22278] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 260.605853][T22278] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 260.620470][T22278] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.622885][T22278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.625260][T22278] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.627594][T22278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.658880][T22278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.667514][T18125] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.671793][T18125] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.685494][T22278] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.690952][T18124] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.693310][T18124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.699352][T18125] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.702301][T18125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.755571][T22609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.760816][T22609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.822991][T22278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.967120][T22278] veth0_vlan: entered promiscuous mode [ 260.973446][T22278] veth1_vlan: entered promiscuous mode [ 260.990983][T22278] veth0_macvtap: entered promiscuous mode [ 260.997089][T22278] veth1_macvtap: entered promiscuous mode [ 261.005588][T22278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.013268][T22278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.019448][T18124] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.025948][T18124] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.029857][T18124] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.035737][T18124] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.077062][T18124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.079750][T18124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.092138][T22562] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 261.098250][T18125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.100803][T18125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.170958][T22609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.180975][T22609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.186662][T22609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.190870][T22609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.235823][T22666] 9p: Bad value for 'rfdno' [ 261.240093][T22667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.247276][T22667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.464700][T22684] bridge_slave_0: left allmulticast mode [ 261.466652][T22684] bridge_slave_0: left promiscuous mode [ 261.468619][T22684] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.473023][T22684] bridge_slave_1: left allmulticast mode [ 261.475099][T22684] bridge_slave_1: left promiscuous mode [ 261.477209][T22684] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.487080][T22684] bond0: (slave bond_slave_0): Releasing backup interface [ 261.491548][T22627] usb 13-1: new high-speed USB device number 28 using dummy_hcd [ 261.494452][T22684] bond0: (slave bond_slave_1): Releasing backup interface [ 261.503687][T22684] team0: Port device team_slave_0 removed [ 261.509249][T22684] team0: Port device team_slave_1 removed [ 261.515809][T22684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.518176][T22684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.522572][T22684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.525157][T22684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.542108][T22690] ip6gre2: entered allmulticast mode [ 261.545452][T22690] team0: Port device ip6gre2 added [ 261.660100][T22695] program syz.0.3112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.672132][T22627] usb 13-1: Using ep0 maxpacket: 16 [ 261.682263][T22627] usb 13-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 261.688708][T22627] usb 13-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 261.701597][T22627] usb 13-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.705975][T22627] usb 13-1: config 1 interface 0 has no altsetting 0 [ 261.710001][T22627] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 261.713599][T22627] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.716215][T22627] usb 13-1: Product: syz [ 261.717652][T22627] usb 13-1: Manufacturer: syz [ 261.719230][T22627] usb 13-1: SerialNumber: syz [ 261.822507][ T5931] Bluetooth: hci1: command tx timeout [ 261.930662][T22627] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 261.942468][T22627] usb 13-1: USB disconnect, device number 28 [ 261.947698][T22627] usblp0: removed [ 262.225129][T11781] usb 6-1: USB disconnect, device number 6 [ 262.286876][T22750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3120'. [ 262.397264][T22808] exFAT-fs (nbd1): unable to read boot sector [ 262.399629][T22808] exFAT-fs (nbd1): failed to read boot sector [ 262.401856][T22808] exFAT-fs (nbd1): failed to recognize exfat type [ 262.522472][T22811] macvlan2: entered promiscuous mode [ 262.710223][T22833] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 262.715188][T22833] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 262.781578][T22840] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3130'. [ 263.040161][T22859] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3137'. [ 263.116947][T22856] kvm_pr_unimpl_wrmsr: 20 callbacks suppressed [ 263.116964][T22856] kvm: kvm [22855]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 263.130646][T22856] kvm: kvm [22855]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 263.156413][T22856] kvm: kvm [22855]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 263.189722][T22856] kvm: kvm [22855]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 263.193635][T22856] kvm: kvm [22855]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 263.265922][T22869] kvm: kvm [22868]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 263.534789][ T40] audit: type=1400 audit(2000000040.349:1029): avc: denied { bind } for pid=22885 comm="syz.0.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 263.580260][T22890] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 263.586214][T22890] batman_adv: batadv0: Adding interface: gretap1 [ 263.588271][T22890] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 263.596499][T22890] batman_adv: batadv0: Interface activated: gretap1 [ 263.603097][T22890] usb usb1: usbfs: process 22890 (syz.0.3143) did not claim interface 2 before use [ 263.702785][T22894] kvm: kvm [22893]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 263.706112][T22894] kvm: kvm [22893]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 263.723609][T22894] kvm: kvm [22893]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 263.743417][T22894] kvm: kvm [22893]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 263.891375][ T5931] Bluetooth: hci1: command tx timeout [ 263.960830][T22908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3147'. [ 264.348661][T22933] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 264.357136][T22933] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 264.419534][T22947] xt_connbytes: Forcing CT accounting to be enabled [ 264.443660][T22930] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 264.447725][T22948] could not allocate digest TFM handle cryptd(blake2b-160) [ 264.513074][T22930] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 264.572737][T22979] netlink: 'syz.1.3157': attribute type 10 has an invalid length. [ 264.575263][T22979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3157'. [ 264.835203][T22999] /dev/nullb0: Can't open blockdev [ 264.839502][T23000] /dev/nullb0: Can't open blockdev [ 265.015711][T23017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3164'. [ 265.025452][ T40] audit: type=1400 audit(2000000041.839:1030): avc: denied { create } for pid=23016 comm="syz.0.3164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 265.087800][T23024] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3167'. [ 265.090915][T23024] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3167'. [ 265.126603][ T40] audit: type=1400 audit(2000000041.939:1031): avc: denied { append } for pid=23026 comm="syz.8.3168" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 265.153494][T23023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3166'. [ 265.368288][T23057] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3172'. [ 265.373306][ T40] audit: type=1400 audit(2000000042.189:1032): avc: denied { write } for pid=23056 comm="syz.8.3172" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 265.385365][T23063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=23063 comm=syz.3.3173 [ 265.443349][ T40] audit: type=1400 audit(2000000042.259:1033): avc: denied { execute } for pid=23065 comm="syz.1.3175" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 265.476110][T23074] overlay: Unknown parameter 'fsuuid' [ 265.535294][T23080] CIFS mount error: No usable UNC path provided in device string! [ 265.535294][T23080] [ 265.538511][T23080] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 265.628474][T23103] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3183'. [ 265.729595][ T40] audit: type=1400 audit(2000000042.539:1034): avc: denied { setopt } for pid=23116 comm="syz.1.3187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 265.746830][T23121] Bluetooth: MGMT ver 1.23 [ 265.751479][T23121] autofs: Unknown parameter 'w»X ü8ÈÂJŠŒ~ê”h[$Sê#8æE®' [ 265.790347][T23130] xt_bpf: check failed: parse error [ 265.817114][T23130] overlayfs: failed to resolve './file0': -2 [ 265.892401][T23143] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 265.920489][T23148] : entered promiscuous mode [ 265.931077][ T40] audit: type=1400 audit(2000000042.739:1035): avc: denied { connect } for pid=23149 comm="syz.3.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 265.971397][ T5931] Bluetooth: hci1: command tx timeout [ 266.069620][T23175] bond1: (slave bond_slave_1): Device is not our slave [ 266.072971][T23169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23169 comm=syz.0.3199 [ 266.077473][T23175] bond1: option active_slave: invalid value (bond_slave_1) [ 266.081387][T23175] bond1 (unregistering): Released all slaves [ 266.104507][T23176] bond1: (slave bond_slave_1): Device is not our slave [ 266.107483][T23176] bond1: option active_slave: invalid value (bond_slave_1) [ 266.113944][T23176] bond1 (unregistering): Released all slaves [ 266.130411][T23169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23169 comm=syz.0.3199 [ 266.272696][T23341] nvme_fabrics: unknown parameter or missing value 'cubic' in ctrl creation request [ 266.276486][T23342] nvme_fabrics: unknown parameter or missing value 'cubic' in ctrl creation request [ 266.312827][T23351] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 266.314950][T23351] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 266.317518][T23351] vhci_hcd vhci_hcd.0: Device attached [ 266.330422][T23353] vhci_hcd: connection closed [ 266.330687][T18123] vhci_hcd vhci_hcd.1: stop threads [ 266.335610][T18123] vhci_hcd vhci_hcd.1: release socket [ 266.337502][T18123] vhci_hcd vhci_hcd.1: disconnect device [ 266.346864][T23360] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 266.349848][T23360] overlayfs: maximum fs stacking depth exceeded [ 266.353547][ T40] audit: type=1400 audit(2000000043.169:1036): avc: denied { mount } for pid=23362 comm="syz.1.3215" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 266.367229][T23360] overlayfs: failed lookup in lower (newroot/421, name='file2', err=-40): overlapping layers [ 266.371106][T23360] overlayfs: failed to look up (file2) for ino (-40) [ 266.378031][ T40] audit: type=1400 audit(2000000043.189:1037): avc: denied { ioctl } for pid=23364 comm="syz.8.3216" path="socket:[81475]" dev="sockfs" ino=81475 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 266.447042][ T40] audit: type=1400 audit(2000000043.259:1038): avc: denied { prog_load } for pid=23371 comm="syz.0.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 266.475348][T23393] Invalid source name [ 266.476695][T23393] UBIFS error (pid: 23393): cannot open "/dev/sg0", error -22 [ 266.500639][T23400] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 266.509994][T23400] program syz.3.3222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.514418][T23400] [ 266.515285][T23400] ====================================================== [ 266.517566][T23400] WARNING: possible circular locking dependency detected [ 266.519774][T23400] syzkaller #0 Tainted: G L [ 266.521714][T23400] ------------------------------------------------------ [ 266.523925][T23400] syz.3.3222/23400 is trying to acquire lock: [ 266.525846][T23400] ffff88803a21d178 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_slow+0x42/0x70 [ 266.528946][T23400] [ 266.528946][T23400] but task is already holding lock: [ 266.531277][T23400] ffff888052626888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 266.534453][T23400] [ 266.534453][T23400] which lock already depends on the new lock. [ 266.534453][T23400] [ 266.537712][T23400] [ 266.537712][T23400] the existing dependency chain (in reverse order) is: [ 266.540279][T23400] [ 266.540279][T23400] -> #4 (&of->mutex){+.+.}-{4:4}: [ 266.542536][T23400] __mutex_lock+0x1a2/0x1b90 [ 266.544182][T23400] kernfs_seq_start+0x4f/0x2a0 [ 266.545901][T23400] seq_read_iter+0x2c1/0x1270 [ 266.547547][T23400] kernfs_fop_read_iter+0x46c/0x610 [ 266.549360][T23400] copy_splice_read+0x4ba/0xb90 [ 266.551081][T23400] do_splice_read+0x285/0x370 [ 266.552760][T23400] splice_direct_to_actor+0x2a1/0xa30 [ 266.554646][T23400] do_splice_direct+0x174/0x240 [ 266.556355][T23400] do_sendfile+0xadc/0xe20 [ 266.557956][T23400] __x64_sys_sendfile64+0x1d8/0x220 [ 266.559781][T23400] do_syscall_64+0xc9/0xf80 [ 266.561385][T23400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.563434][T23400] [ 266.563434][T23400] -> #3 (&p->lock){+.+.}-{4:4}: [ 266.565649][T23400] __mutex_lock+0x1a2/0x1b90 [ 266.567309][T23400] seq_read_iter+0xe1/0x1270 [ 266.568942][T23400] proc_reg_read_iter+0x220/0x310 [ 266.570715][T23400] copy_splice_read+0x4ba/0xb90 [ 266.572424][T23400] do_splice_read+0x285/0x370 [ 266.574057][T23400] splice_file_to_pipe+0x82/0x120 [ 266.575803][T23400] do_sendfile+0x366/0xe20 [ 266.577369][T23400] __x64_sys_sendfile64+0x1d8/0x220 [ 266.579168][T23400] do_syscall_64+0xc9/0xf80 [ 266.580782][T23400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.582780][T23400] [ 266.582780][T23400] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 266.585083][T23400] __mutex_lock+0x1a2/0x1b90 [ 266.586692][T23400] pipe_lock+0x69/0x80 [ 266.588157][T23400] iter_file_splice_write+0x1f8/0x10a0 [ 266.590026][T23400] do_splice+0x109c/0x1fd0 [ 266.591596][T23400] __do_splice+0x33b/0x370 [ 266.593149][T23400] __x64_sys_splice+0x187/0x250 [ 266.594831][T23400] do_syscall_64+0xc9/0xf80 [ 266.596431][T23400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.598475][T23400] [ 266.598475][T23400] -> #1 (sb_writers#6){.+.+}-{0:0}: [ 266.600807][T23400] mnt_want_write+0x6f/0x450 [ 266.602465][T23400] ovl_create_object+0x12b/0x3b0 [ 266.604210][T23400] lookup_open.isra.0+0x139b/0x1890 [ 266.606020][T23400] path_openat+0x117d/0x3120 [ 266.607685][T23400] do_filp_open+0x1f7/0x420 [ 266.609328][T23400] do_sys_openat2+0x12e/0x220 [ 266.611003][T23400] __x64_sys_openat2+0x244/0x380 [ 266.612750][T23400] do_syscall_64+0xc9/0xf80 [ 266.614370][T23400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.616412][T23400] [ 266.616412][T23400] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 266.619193][T23400] __lock_acquire+0x14b8/0x2630 [ 266.620909][T23400] lock_acquire+0x17c/0x330 [ 266.622543][T23400] down_read+0x99/0x460 [ 266.624057][T23400] lookup_slow+0x42/0x70 [ 266.625652][T23400] path_lookupat+0x5e8/0xc40 [ 266.627288][T23400] filename_lookup+0x202/0x590 [ 266.628970][T23400] kern_path+0x35/0x50 [ 266.630462][T23400] lookup_bdev+0xd8/0x280 [ 266.632055][T23400] resume_store+0x1d6/0x460 [ 266.633672][T23400] kobj_attr_store+0x58/0x80 [ 266.635323][T23400] sysfs_kf_write+0xf2/0x150 [ 266.636966][T23400] kernfs_fop_write_iter+0x3e0/0x5f0 [ 266.638856][T23400] vfs_write+0x6ac/0x1070 [ 266.640416][T23400] ksys_write+0x12a/0x250 [ 266.641973][T23400] do_syscall_64+0xc9/0xf80 [ 266.643602][T23400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.645680][T23400] [ 266.645680][T23400] other info that might help us debug this: [ 266.645680][T23400] [ 266.648902][T23400] Chain exists of: [ 266.648902][T23400] &ovl_i_mutex_dir_key[depth] --> &p->lock --> &of->mutex [ 266.648902][T23400] [ 266.652913][T23400] Possible unsafe locking scenario: [ 266.652913][T23400] [ 266.655259][T23400] CPU0 CPU1 [ 266.656962][T23400] ---- ---- [ 266.658702][T23400] lock(&of->mutex); [ 266.659989][T23400] lock(&p->lock); [ 266.661997][T23400] lock(&of->mutex); [ 266.664074][T23400] rlock(&ovl_i_mutex_dir_key[depth]); [ 266.665840][T23400] [ 266.665840][T23400] *** DEADLOCK *** [ 266.665840][T23400] [ 266.668417][T23400] 4 locks held by syz.3.3222/23400: [ 266.670067][T23400] #0: ffff8880382a0638 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 266.672927][T23400] #1: ffff88802e16c420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 266.675760][T23400] #2: ffff888052626888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 266.678812][T23400] #3: ffff888100a83d28 (kn->active#77){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 266.681964][T23400] [ 266.681964][T23400] stack backtrace: [ 266.683856][T23400] CPU: 1 UID: 0 PID: 23400 Comm: syz.3.3222 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.683872][T23400] Tainted: [L]=SOFTLOCKUP [ 266.683875][T23400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.683881][T23400] Call Trace: [ 266.683885][T23400] [ 266.683889][T23400] dump_stack_lvl+0x100/0x190 [ 266.683904][T23400] print_circular_bug.cold+0x178/0x1c7 [ 266.683921][T23400] check_noncircular+0x146/0x160 [ 266.683939][T23400] __lock_acquire+0x14b8/0x2630 [ 266.683951][T23400] lock_acquire+0x17c/0x330 [ 266.683961][T23400] ? lookup_slow+0x42/0x70 [ 266.683976][T23400] ? __pfx___might_resched+0x10/0x10 [ 266.683989][T23400] ? try_to_unlazy+0x296/0x910 [ 266.683999][T23400] down_read+0x99/0x460 [ 266.684011][T23400] ? lookup_slow+0x42/0x70 [ 266.684026][T23400] ? __pfx_down_read+0x10/0x10 [ 266.684040][T23400] lookup_slow+0x42/0x70 [ 266.684056][T23400] path_lookupat+0x5e8/0xc40 [ 266.684068][T23400] filename_lookup+0x202/0x590 [ 266.684079][T23400] ? __pfx_filename_lookup+0x10/0x10 [ 266.684095][T23400] ? getname_kernel+0x52/0x370 [ 266.684109][T23400] ? __asan_memcpy+0x3c/0x60 [ 266.684121][T23400] kern_path+0x35/0x50 [ 266.684131][T23400] lookup_bdev+0xd8/0x280 [ 266.684147][T23400] ? __pfx_lookup_bdev+0x10/0x10 [ 266.684163][T23400] ? __asan_memcpy+0x3c/0x60 [ 266.684173][T23400] resume_store+0x1d6/0x460 [ 266.684185][T23400] ? __pfx_resume_store+0x10/0x10 [ 266.684199][T23400] ? find_held_lock+0x2b/0x80 [ 266.684213][T23400] ? sysfs_file_kobj+0xe4/0x290 [ 266.684227][T23400] ? sysfs_file_kobj+0xe4/0x290 [ 266.684240][T23400] ? __pfx_resume_store+0x10/0x10 [ 266.684252][T23400] kobj_attr_store+0x58/0x80 [ 266.684264][T23400] ? __pfx_kobj_attr_store+0x10/0x10 [ 266.684276][T23400] sysfs_kf_write+0xf2/0x150 [ 266.684290][T23400] kernfs_fop_write_iter+0x3e0/0x5f0 [ 266.684302][T23400] ? __pfx_sysfs_kf_write+0x10/0x10 [ 266.684317][T23400] vfs_write+0x6ac/0x1070 [ 266.684328][T23400] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 266.684341][T23400] ? __pfx_vfs_write+0x10/0x10 [ 266.684351][T23400] ? find_held_lock+0x2b/0x80 [ 266.684368][T23400] ksys_write+0x12a/0x250 [ 266.684379][T23400] ? __pfx_ksys_write+0x10/0x10 [ 266.684392][T23400] do_syscall_64+0xc9/0xf80 [ 266.684404][T23400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.684419][T23400] RIP: 0033:0x7f9bf6b9aeb9 [ 266.684428][T23400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.684438][T23400] RSP: 002b:00007f9bf79f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.684448][T23400] RAX: ffffffffffffffda RBX: 00007f9bf6e15fa0 RCX: 00007f9bf6b9aeb9 [ 266.684455][T23400] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 266.684461][T23400] RBP: 00007f9bf6c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 266.684467][T23400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.684472][T23400] R13: 00007f9bf6e16038 R14: 00007f9bf6e15fa0 R15: 00007ffc52786728 [ 266.684482][T23400] [ 266.787628][T23400] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 266.790653][T23400] PM: Image not found (code -6) [ 268.051293][ T5931] Bluetooth: hci1: command tx timeout [ 271.408725][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 271.408736][ T40] audit: type=1400 audit(2000000048.219:1065): avc: denied { recv } for pid=0 comm="swapper/1" saddr=fe80::2 daddr=ff02::1 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 271.426278][ T40] audit: type=1400 audit(2000000048.239:1066): avc: denied { search } for pid=23435 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.433279][ T40] audit: type=1400 audit(2000000048.239:1067): avc: denied { search } for pid=23435 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.440402][ T40] audit: type=1400 audit(2000000048.239:1068): avc: denied { search } for pid=23435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.448431][ T40] audit: type=1400 audit(2000000048.239:1069): avc: denied { search } for pid=23435 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.455829][ T40] audit: type=1400 audit(2000000048.239:1070): avc: denied { read open } for pid=23436 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.464173][ T40] audit: type=1400 audit(2000000048.239:1071): avc: denied { getattr } for pid=23436 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.472668][ T40] audit: type=1400 audit(2000000048.249:1072): avc: denied { add_name } for pid=23435 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.479498][ T40] audit: type=1400 audit(2000000048.249:1073): avc: denied { create } for pid=23435 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 271.486513][ T40] audit: type=1400 audit(2000000048.249:1074): avc: denied { write open } for pid=23435 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.ra" dev="tmpfs" ino=9143 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1