last executing test programs: 5m12.433588167s ago: executing program 1 (id=494): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20000080) 5m12.357310837s ago: executing program 1 (id=496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20006, 0x8, 0xfffffffc, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x8100, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = ioctl$KVM_GET_STATS_FD_cpu(r8, 0xaece) read$FUSE(r9, &(0x7f0000000500)={0x2020}, 0x2020) (async) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYRES32=r5], 0x50}}, 0x4006004) (async) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r10, 0x8) (async) r11 = accept4(r10, 0x0, 0x0, 0x0) sendto$inet(r11, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0500e4ffff3e6880af5827c3d00008000300", @ANYRES32=r14], 0x28}, 0x1, 0x0, 0x0, 0x808}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 5m12.175301932s ago: executing program 1 (id=502): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0xfe11, 0x3f, 0x200, 0x70bf27, 0x0, {0x3}}, 0xf0}, 0x1, 0x0, 0x0, 0x42804}, 0xc800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x8efd, 0xf, 0x80000}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x7, [0xff, 0xf0a2, 0x6, 0x7ff, 0x8, 0x7, 0x4]}, 0x12) 5m12.159456286s ago: executing program 1 (id=504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000015c0), 0x80000, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000001600)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaa3708004500002c00004000002f9078ac701e0001e00000010000655800189078040069afe3c4235a93110000000000"], 0x3e) 5m11.944581241s ago: executing program 1 (id=509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000340)={0x2, 0x0, 0xffffffff, @empty}, 0x1c) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x11c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0xfffc, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x7, 0x7ff, 0x7, 0x1, 0x7, 0x30, 0x4}}, {0xc, 0x2, [0x4, 0x5, 0x2, 0x6]}}, {{0x1c, 0x1, {0x1, 0x6, 0x3, 0xc9, 0x1, 0x2, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x3, 0xb, 0x1d8, 0x2d4d, 0x2, 0x2902420e, 0x7, 0x2}}, {0x8, 0x2, [0x6, 0xed9]}}]}]}, 0x11c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x32, '\x00', r5, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r1, 0x2cb3b0415539fbbb, 0x70bd2b, 0x21dfdbfd, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) 5m11.634587909s ago: executing program 1 (id=518): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20028010}, 0x448d0) 5m11.577194089s ago: executing program 32 (id=518): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20028010}, 0x448d0) 4m12.022396358s ago: executing program 2 (id=1529): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r3, 0x0, 0x0, 0x4}, 0x20) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)=@chain={'key_or_keyring:', r1}) (async) keyctl$clear(0x7, r1) (async) keyctl$reject(0x13, r0, 0x3, 0x8f, r0) 4m11.989326966s ago: executing program 2 (id=1531): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f0000000000000000140002"], 0x54}}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000040)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x90, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb1d}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xaf3}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x12}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x90}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, 0x0, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x2, 0x0, @none, 0x3, 0x5, 0xf5, 0x0, 0x9, 0xc018, 0x40, @none}]}}}}, 0x1d) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 4m11.925254377s ago: executing program 2 (id=1534): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0x42, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}]}, 0x60}, 0x1, 0x0, 0x0, 0x4810}, 0x44000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x40440d0}, 0x24048800) 4m11.850019508s ago: executing program 2 (id=1536): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000080)={r3, r3, 0x0, 0x6, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000004c0)={&(0x7f0000000440)=[r3], &(0x7f0000000100), 0x1}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 4m11.633130168s ago: executing program 2 (id=1541): r0 = syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40000, 0x2, 0x333}, 0x0, 0x0) (async) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1, {0x2}}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x13, r0, 0x10000000) (async) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x81}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7c8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r4, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@ethernet={0x1, @multicast}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)}, {&(0x7f0000000140)="ee0983a46fc18af045afbf269ada80da01ad91d75613407f9fce921b1fd9c30eb4b30cdc7070e2dbfd179f6f1544f2e29dd9bfb57c7164a0f47fe3c6797f50c4ab21a7767c6a99673cce325098f47075e225e63c1263b9a5e9fa09804e351926e7881c70d56ed5c39a386b74ff5f8bae6563d57fd7455bef77b9ed7ebfede55df08e198cf20d9a55fe56822336e3859652da8bbf3672cf72dd948bca6a8640da765ab2926c3b1a9d773101abea78c326a590c07bddb0e5b041eb1f39b2f1", 0xbe}, {&(0x7f0000000200)="ecf348fed78f324a5afb810134e5fda66a58ae5f00f884db513612e8ffed73f0715cf2c84a4c49799a6d5f2a3177a6f3b24bcd18a31399f79a7679", 0x3b}, {&(0x7f0000000240)="724a80231b334c671f3200ff127e9a2c8bb3325d413712c78c6736fba1895d51111e43b40a1508bf39f3641454342d198b90db08f39255661e251f762564c3631fd310848e30da309ebe59a97639585518f2b43a4aa876a69e3de4b547ad28f7f95ef06057206d05b9206d4fa804da85c9269587f489ca67f3dbd923906199b16aeb63f2a7dd0dc631a8b866a7f2b9b5814053bf39be5282", 0x98}, {&(0x7f0000000300)="1cefd6b411512b19591a6e138172d2448f0db49424087eac7fc7741af5d4bccbb65e57bcd3220d520d1005c85c89a65dd2cfd4d0824dc9cb4ffc203f48918b5589c63a54c2bfba008f9c54966e73dccc110090577f34b597b51f9d023828a805aa", 0x61}], 0x5}, 0x0, 0x44050, 0x1, {0x0, r8}}) 4m11.324479777s ago: executing program 2 (id=1545): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x108) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) (async) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xac901, 0x28) (async) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) (async) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r3) setreuid(0xee00, 0xee00) setreuid(0x0, 0xee01) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=@newtaction={0x7ac, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x798, 0x1, [@m_nat={0x1a4, 0x16, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x1, 0x2, 0xa1, 0xb0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x8, 0x2, 0x3}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x5, 0xffffffffffffffff, 0x4, 0xa676}, @multicast1, @remote, 0xffffff00, 0x1}}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x4fb592a129d3e32f}}}}, @m_ife={0x9c, 0x5, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xd, 0x1, 0xffffffff, 0x80000000}}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x43, 0x6, "a74c043d1bf8b399eae8c4ad0dc443a24d75a0ed6b7aa13fad49c58bcc99b795ec4bcc2ceaf52365d88dcf002897508c69791625b9c620ba637af2f53add5f"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x148, 0xf, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7f, 0x2, 0x9, 0x6af2a88a}, 0x4}}]}, {0xfa, 0x6, "8cacc77979c21379f026e4c7db4aeab533bfaf8c5a20f66ed8a9dc1c0a9f95d5db3668c5e43ece8597003f772926cd110621202649c030589eb4bf453bb4fe91b9f2968b11aff2752d2f1c28f802cd36ed380ea81f96c60747c5ff3891adc21f07e60dc3088d17ecd4c84dd4fa7de9e6391f32dca1e0ca827eff7bda89e9b4e0a5fcdce699ad72dfe89e6cb3db69d22c7b3230e8569430f3c438eddcc6b31b876bb6ac1eaced8fe6e88cc704d57634a1d177a525ddc7da8931e242dff9482d023fe03acaa6bb7d983866e2155f39751cc620467b3dbaa81493f769dc332296dcee73f4dbfa59478f71bc668ad30ea9260fc8517b141d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x3}}}}, @m_gact={0xe0, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0xb1, 0x6, "90955383f8aba886c57d856f4b2af00a5d121265e0f3fbff417c0aff66e593ca1e4e12368c4dcee0d3c29ec7144b0ea0afc78b23087316d215d806864920fe4d7b8696f169c87f9fee0098327cecb13156c6177f57e7c1e1ee89cfcd6292898dfc53eeb50f94a634b4407e28a93e8ef9dbf963ce0c61513b77d91ce8c03b8b673af813b6fba5cd15a13b82c938f6fbd0654714046e9c21573a1f8a9c191a0bf67266cc711490bb64996d9bb1ae"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x98, 0x14, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xdd4, 0x1, 0x10000004, 0x401, 0x7fff}}, @TCA_DEF_DATA={0xd, 0x3, 'skcipher\x00'}]}, {0x44, 0x6, "8598e3bc002a15156af6c04c8d1d763651102ca438f24acedf9693cc4e87934ed1b6136950a169f3676e1a5c96d661c2d4ade5e09f7329546a16d4f0c47726dc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x104, 0x4, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x8, 0x80000000, 0x65}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x3, 0x7}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0x7, 0x10000000, 0x9, 0x1}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x0, 0x6, 0x9, 0x5}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0xe9cd04c0373fe6b8, 0x4, 0x200007}, 0x1a}}]}, {0x49, 0x6, "fc9619cd69e1f81b27355460a385dd13fded2c69389fc7aa14d2e966631c59f1123650e9d5edde58f57b74cc40e4655ab925b99485ed61c4a76ae03a3bb07e1f539b500014"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x190, 0x11, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5, 0x8, 0xffffffff, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x100, 0x5, 0x3, 0x3, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x6, 0x2, 0xfff00000, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xfffffff7, 0x6, 0xff, 0x1}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200000, 0x9, 0xffffffffffffffff, 0x8d, 0x200}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xd697efe, 0x1, 0x1, 0x1}, 0x4}}, @TCA_MIRRED_PARMS={0x27, 0x2, {{0xd2b, 0x7, 0x0, 0x7, 0x5}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xac, 0x2, 0x1, 0x1, 0xb}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xaf2, 0x6, 0x10000000, 0x7, 0x25}, 0x3}}]}, {0x44, 0x6, "8ea38a53b5223f649d745f0dc36b21fb7566a7af712067fb7bae9cca2e9f24b20ebf39bbf0e4ee99cb22d6bc601953637b1efc10b7c183423d486c4708dbb6b1"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x7ac}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, &(0x7f0000000200)=0x1a) (async) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, &(0x7f0000000200)=0x1a) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x80000) (async) r8 = accept4(r7, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r8) sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newchain={0x84, 0x64, 0xf09d2fbf8b68c555, 0x70bd07, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xfff1, 0x1}, {0x9, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xa}}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_pedit={0x30, 0xb, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x44801) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000080096c9a190000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000080096c9a190000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m11.223220243s ago: executing program 33 (id=1545): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x108) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) (async) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xac901, 0x28) (async) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) (async) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r3) setreuid(0xee00, 0xee00) setreuid(0x0, 0xee01) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=@newtaction={0x7ac, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x798, 0x1, [@m_nat={0x1a4, 0x16, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7fffffff, 0x1, 0x2, 0xa1, 0xb0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x8, 0x2, 0x3}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x5, 0xffffffffffffffff, 0x4, 0xa676}, @multicast1, @remote, 0xffffff00, 0x1}}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x4fb592a129d3e32f}}}}, @m_ife={0x9c, 0x5, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xd, 0x1, 0xffffffff, 0x80000000}}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0x43, 0x6, "a74c043d1bf8b399eae8c4ad0dc443a24d75a0ed6b7aa13fad49c58bcc99b795ec4bcc2ceaf52365d88dcf002897508c69791625b9c620ba637af2f53add5f"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mirred={0x148, 0xf, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x7f, 0x2, 0x9, 0x6af2a88a}, 0x4}}]}, {0xfa, 0x6, "8cacc77979c21379f026e4c7db4aeab533bfaf8c5a20f66ed8a9dc1c0a9f95d5db3668c5e43ece8597003f772926cd110621202649c030589eb4bf453bb4fe91b9f2968b11aff2752d2f1c28f802cd36ed380ea81f96c60747c5ff3891adc21f07e60dc3088d17ecd4c84dd4fa7de9e6391f32dca1e0ca827eff7bda89e9b4e0a5fcdce699ad72dfe89e6cb3db69d22c7b3230e8569430f3c438eddcc6b31b876bb6ac1eaced8fe6e88cc704d57634a1d177a525ddc7da8931e242dff9482d023fe03acaa6bb7d983866e2155f39751cc620467b3dbaa81493f769dc332296dcee73f4dbfa59478f71bc668ad30ea9260fc8517b141d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x3}}}}, @m_gact={0xe0, 0x1a, 0x0, 0x0, {{0x9}, {0x4}, {0xb1, 0x6, "90955383f8aba886c57d856f4b2af00a5d121265e0f3fbff417c0aff66e593ca1e4e12368c4dcee0d3c29ec7144b0ea0afc78b23087316d215d806864920fe4d7b8696f169c87f9fee0098327cecb13156c6177f57e7c1e1ee89cfcd6292898dfc53eeb50f94a634b4407e28a93e8ef9dbf963ce0c61513b77d91ce8c03b8b673af813b6fba5cd15a13b82c938f6fbd0654714046e9c21573a1f8a9c191a0bf67266cc711490bb64996d9bb1ae"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x98, 0x14, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xdd4, 0x1, 0x10000004, 0x401, 0x7fff}}, @TCA_DEF_DATA={0xd, 0x3, 'skcipher\x00'}]}, {0x44, 0x6, "8598e3bc002a15156af6c04c8d1d763651102ca438f24acedf9693cc4e87934ed1b6136950a169f3676e1a5c96d661c2d4ade5e09f7329546a16d4f0c47726dc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x104, 0x4, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x8, 0x80000000, 0x65}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x3, 0x7}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0x7, 0x10000000, 0x9, 0x1}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x0, 0x6, 0x9, 0x5}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0xe9cd04c0373fe6b8, 0x4, 0x200007}, 0x1a}}]}, {0x49, 0x6, "fc9619cd69e1f81b27355460a385dd13fded2c69389fc7aa14d2e966631c59f1123650e9d5edde58f57b74cc40e4655ab925b99485ed61c4a76ae03a3bb07e1f539b500014"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x190, 0x11, 0x0, 0x0, {{0xb}, {0x124, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x5, 0x8, 0xffffffff, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x100, 0x5, 0x3, 0x3, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x6, 0x2, 0xfff00000, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xfffffff7, 0x6, 0xff, 0x1}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x200000, 0x9, 0xffffffffffffffff, 0x8d, 0x200}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xd697efe, 0x1, 0x1, 0x1}, 0x4}}, @TCA_MIRRED_PARMS={0x27, 0x2, {{0xd2b, 0x7, 0x0, 0x7, 0x5}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xac, 0x2, 0x1, 0x1, 0xb}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xaf2, 0x6, 0x10000000, 0x7, 0x25}, 0x3}}]}, {0x44, 0x6, "8ea38a53b5223f649d745f0dc36b21fb7566a7af712067fb7bae9cca2e9f24b20ebf39bbf0e4ee99cb22d6bc601953637b1efc10b7c183423d486c4708dbb6b1"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x7ac}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, &(0x7f0000000200)=0x1a) (async) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, &(0x7f0000000200)=0x1a) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x80000) (async) r8 = accept4(r7, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r8) sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newchain={0x84, 0x64, 0xf09d2fbf8b68c555, 0x70bd07, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {0xfff1, 0x1}, {0x9, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xa}}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_pedit={0x30, 0xb, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x44801) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000080096c9a190000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000080096c9a190000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m1.854536298s ago: executing program 4 (id=1658): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x113000, 0x0, 0x18}, 0x18) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x85) poll(&(0x7f0000004200)=[{}], 0x1, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2ac0b2, &(0x7f0000000200)) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0) 4m1.852755751s ago: executing program 4 (id=1660): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40081, 0x0) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x6e2100, 0x0) renameat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') (async) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:cert_t:s0\x00', 0x1c, 0x3) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000001c0)) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x4c8, 0x340, 0x0, 0xffffffff, 0x340, 0x0, 0x430, 0x430, 0xffffffff, 0x430, 0x430, 0x5, &(0x7f0000000200), {[{{@uncond, 0x0, 0x100, 0x138, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x0, 0x2, 0x0, 0x3, 0x1], 0x3, 0x1}}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0xc, 0x0, 0x10001}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x3, @local, @rand_addr=0x64010102, @icmp_id=0x64, @port=0x4e20}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff000000, 0x0, 'geneve0\x00', 'wlan0\x00', {0xff}, {0xff}, 0x88, 0x1, 0x10}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x11, "a8b4", 0x1}}, @common=@ah={{0x30}, {[0xfffff001, 0x4], 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x21}, @remote, @port=0x4e21, @port=0x4e24}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x80, 0x0, 0x1, 0x1}}, @common=@addrtype={{0x30}, {0x106, 0x640, 0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x18, @private=0xa010102, @multicast2, @icmp_id=0x68, @gre_key=0x6f9a}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x30}, @broadcast, 0xff, 0x0, 'macsec0\x00', 'netpci0\x00', {}, {}, 0x62, 0x0, 0x20}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x2}}, @common=@addrtype={{0x30}, {0x539, 0x890, 0x0, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0x9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000ac0)={'xfrm0\x00', &(0x7f00000007c0)=@ethtool_per_queue_op={0x4b, 0xe, [0x1, 0x1, 0x332, 0x1, 0x6, 0x6, 0x1, 0x5, 0xe6, 0x4, 0x4, 0xfffff000, 0x7f, 0xfff, 0x1, 0xc8, 0x7, 0x80000000, 0x5, 0x3, 0x200, 0x0, 0x7, 0x0, 0x1, 0x9, 0x5, 0x7, 0x6, 0x0, 0x6, 0x9, 0x5, 0xfff, 0x80000001, 0x3, 0x525, 0x2, 0x6, 0x3, 0x5b, 0x10001, 0x3, 0x9, 0xc968, 0xcc7e, 0x1, 0x10000, 0x6, 0x7, 0x8, 0x4, 0x0, 0x2, 0x8, 0x8, 0xfff, 0x921, 0x9, 0x1, 0x5, 0x8, 0x0, 0x8, 0x9, 0x400, 0x87, 0xe1, 0x4, 0xfb74, 0x7, 0x3, 0x4, 0x81, 0x7, 0x2, 0x6, 0x1, 0x0, 0x80000000, 0x1, 0x0, 0x8, 0x8000000, 0x9dc2, 0x2168, 0x998, 0x5, 0x401, 0xff, 0x1000, 0x5, 0x68, 0x2, 0x4, 0x3, 0x6, 0x4, 0x7, 0x6, 0x10, 0x4, 0x3, 0x80, 0x4, 0x0, 0x3, 0x80, 0x2, 0xe5, 0x8, 0x7, 0x4, 0x6, 0x6, 0x1, 0x0, 0xfffffffe, 0x4, 0x0, 0x5, 0x7, 0x7, 0x0, 0x6, 0x2, 0x0, 0x2], "8faab8dd059da6305d128a759c5a11b2522220aee99c2ecc2909299169cd44a3623d09fb731a86b799922fdcadd2f53451495866d0356c7991d02807b04a6f801e93082eb2f4665a534b753b0c24d7aab8666c2603ee6317587286c9ff62cb6184e2d3ee83056ecde55b0ae12496a9be68c89207b0c6e6155e9b7a82978a1f13a81752416ac740d4d5782ee8775cd7113986c5281e2ce35f18aa469f8f7fb1a92cb9d3a04657ef11694a980ee9613e1fcad4e6f9012b4510c7706eb190bf"}}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x200000, 0x0) faccessat2(r1, &(0x7f0000000b40)='./file0\x00', 0x9, 0x300) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000b80)={0x5, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e20, @local}}}, 0x108) (async) r3 = openat(r1, 0xffffffffffffffff, 0x20000, 0x100) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000e00)={'filter\x00', 0x0, 0x3, 0xee, [0x9, 0x7, 0x2, 0x0, 0xe, 0xfffffffffffff801], 0x1, &(0x7f0000000cc0)=[{}], &(0x7f0000000d00)=""/238}, &(0x7f0000000e80)=0x78) (async) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r4, &(0x7f0000000ec0)="7612c017c02b78228a0b38285e5667cf497a819cf7075834e1dd1024e5f3c85e7f81fad39c302b51a38457848e58fad2674c9a1f9012e3712bdfa0477a60ad21aec67f3989be5b581db75a7b10c3ac732daacaaaa5e60a5bbfa8d2c5263f952e8e93353ce0ed1b86c3a159b97b896f14c428c6785fe332edd523fba40df881a9c3648198229d26c2d1e70f256ada6564f5d9814cadcaa969c7dabe2019b6ee8e1d55fcc4e1ad26076c72f14390765d5678bacc2fc4508fbad0", 0xb9) (async, rerun: 64) close(r1) (async, rerun: 64) connect$inet(r3, &(0x7f0000000f80)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) (async) pread64(r3, &(0x7f0000000fc0)=""/4096, 0x1000, 0x5) (async, rerun: 64) syz_io_uring_setup(0x51d, &(0x7f0000001fc0)={0x0, 0x784d, 0x8000, 0x2, 0x22, 0x0, r1}, &(0x7f0000002040), &(0x7f0000002080)) (async, rerun: 64) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000020c0)={0xa, 0xffffffffffffffff, 0x1}) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f0000002140)=@attr_other={0x0, 0x7, 0x4, &(0x7f0000002100)=0xfffffffffffffffb}) (async, rerun: 64) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000021c0)={@rand_addr, 0x0}, &(0x7f0000002200)=0x14) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000002300)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)=@deltclass={0x60, 0x29, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xffe0, 0xc}, {0xffff, 0xd}, {0xffe0, 0x4}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0xff, 0x4}}, @TCA_RATE={0x6, 0x5, {0xa, 0x2}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0xed, 0x7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4001) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000002340)={0x0, 0x2}, &(0x7f0000002380)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000023c0)={r7, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x43a, 0x58}, &(0x7f0000002480)=0x90) sendmmsg(0xffffffffffffffff, &(0x7f0000004b00)=[{{&(0x7f00000024c0)=@isdn={0x22, 0x0, 0x4, 0x7, 0x6}, 0x80, &(0x7f0000004840)=[{&(0x7f0000002540)="5b5e728bf836dde1c729df693705de961908fcb55a69387a760fe89243d183a2709e923ec5ca1525cfed9f180e578a8c89a43f5a6dc2a7b7d7093b75b046d8c5ba1a128540255ad4d136d4a8d962eea3ae0b89a0a54edb039f972ed81c3fdd9a8bc33bedb23ef35488d47eba899948bffd81401e601a54dcfa515c418c", 0x7d}, {&(0x7f00000025c0)="fa87ca88bf7c9fe4f2361e535066c61797a6eb4ab8e09910de9d4f74b300d00e4364f10ba75819eec6d1b7ddb15b04c9412b0d63eacb27d8b26655ac8011068e2aaf29b0142557b78c78a6bef228203781cdf719ecb26da3fc16c7c1906139c193d05293954a594b3ad83a53a971b87de0357bbf852ab654d3638772a3da0adf07a62c59bd8543a012237ffa2ea4fe262000c06d2f254a829e8c04b4ae80dd1ae6425639", 0xa4}, {&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000003680)="6dd3182e35e80064f3e8ae2aed373ee9dee99846dddf4f154b7ad5a88b449915d202671fbb3a37f87d173d2f050366d60fb54532e0ec100e4cb23d72d6f09170ea65ca66ff6d59d1ff7758c455cf249943", 0x51}, {&(0x7f0000003700)="966a3cafc44cf25d7aabf94f55d21c819b103e40c2a35ce9ec1363607b3dd8f116", 0x21}, {&(0x7f0000003740)="eea90dc69dee4fd1c86ab93dd3e11460447d915d7cdee923f7095cef7351977a11de31c361b790c3f88f6f860a01146c5be35c5804221bb5104bb0c763fcef431d464467eea3cf4df3bc4fff47fdbda45ea40c5a8d206cde68ceb420275868729c5a822739564d9767f7f69e251760f3a72eb93ec1ba2ee6336303e598201bc866cf58f06b6f30d956ab8f29001fc64f99e9c415e9bdf44293ed0263f41490e176cece74b5c2e028eb6a496a3b13abafd83ade7ebe5c012932cc6569c2c11d178add7c6b7eb0c025321d2bce8f915ddf8da59e85e7c4f22031924b73ce2131af1df74e6cb3eb1fe7f17363fbe72564e88319858f7ae98ff5606b4c9fd7fa9853cd0cfbd20dcb119cc2985f3f1cb097588711c72e4fe5b9a51d6e3236a146c55f88386fcb52e904b98efca2f1ba4ab34bf997b3aaec7878a656b83bbd79bfaba8c9df53b1974da2b167c4ce164c2ca818c3619321a01ec0713282e139acc5829caf3db03269db17bbdbffb6e7cd0119a78d672c9573f6acbf4bd144a4808f21a1b854229f0cdfa3e898ae5fd0c1134ba1941bdb3343efea11a06addd4802951d4cc393eb3398ffb58d2626bc1e17bf273b266bd45cc8152329febf0d93e3033f931abf82e01151731c690d841180cb8a538aca65e71d30b80ce1e99fe9c6e22f297325429e040155ff34ac0805bce862598cb213ca4f1d4fed189b941da373baf6259c111d414fe62f8c78a07d90ff2156a0a3b01d673a1205107cb3f2b2cbfe40bc5849e1fe055a40ae8d432a4fa18c4d6e1fdc59b77834802831d385cf7fa7797ebf52e56e6c7cd78733ad6cdb8ff6d4b26c940c5fbae1eee3fb6e45100c596c2d1273010f0f089dcecc0b51ac025c719419b2d1152ff0fc437ef2938647c2a85bf2b8d4c03baa54ebb584ea694fc7c8415ac27c22894b4334875c2cdb15768e7d982c9d6133cddcef06a24d13ecdb079d993ccd4a56d63268683931a49ee8ece348df69c1a18ba29968916f09f23da27eaeab9e930fc4a94ca75716133d51f75909c12cda2ad622c5d489a1e62bebbdb5c473de6d582a94cf5adb494ecb0fcf3663fd6ff851ac0681bf4f55586e713e940d7806dd53d312f5e314dc8f6277cf3e675bab19698d33e7dd65ad1890b4c8aaa4a6c6211008736565ca353d5a935bc254eb0b0ba5e74bb667e055ec0df7d911d7b6f17e6db2739c51211d1660bcd7946f9d60bd69770b74e7fd295e9594ca789ff7716ca960df70e2362fbdf1fae00890ced16160c8d0b6728a974ebb075c238691806c4aa105e8979d10e513cc65cd8c6447565d9fb79025fc2ef75ca1aca7afa23e797846f60b02916e954da7ded290cfca7eb614863dc6d509533f07bf6fac901ed49d9648b6e3a0aa51141dc2f4a8af6998d1894f8f49a3784acd46a3a50c3e001b7b34dcc0a32c8c36f378bf51a0f81cde22d550cb8b78f30875f6363b0ab0c5851b7b9ab59f43326887f18bfe26fd896840703c1089f4959819c5f289a44e78dbd1667f2d87b73c9f37ca37fded32bac7871f4d2f7d6b871d9fb4200dd61f2a285b930fe75a7583c997041d7532e50841648d3efc3ccec21c37b76d7b547cf49adf7e878828eabff55ce64112b281e576c6fa1f6cc41c75c13a4f68ffe4ea7649a5f0e11299f84a16e634861b866bffecd922383986046890ebe88ec25188b3f2383c83b2fe7b0c2b50b8cecf2ab0b14d720605c216544d60f1cf4be89561d4fa7fa257f5205a6b5115e763b22881604a7ee281fe4bce09fa18ec5f1dc714d1f2d424cdd6eb668e9dc15bc43bd1a9af33e95823d372f03079120b06489e6e3273a4653dc8f4cd1d91f152e97f0a74726700be14f356fe5d34963a603a99c590892cf9bcd3779007d2fa111efc5ac12893a1f43c43b7299d587af5800c71cba002e21beea80ab6ba421d6efa83fb46078bc45224bf26bfdde23ac5a82aed39c25c1477731201195e348406f5d4d70f965e28136654fdd5f340ba2580e5c978a3058f3a5f7526f949d0649601bddafff62c30e1a748f2efd4580ecf465dc277ea6d9f5cbe896aa31ad95db38cee5fb2462d6933b16ba027c9a1b02b315eb69c1d5aae5186f80836023f6bd1d7dcb766d345b34068ca8fc7992658721aea43a8edaafb84cb198b5cb32dc67ea9db720e7b2f829bb4e3c30a6ddb3f6e0373de0023278adf632674d1958e10e0eda70868ecf8883a93049e0e204ca9b0c2861f1959000d5974f8a4015f7142693f08d9f35e62126c88f686ffead5199db62b3a6adc93d88ec4df70435090d12a5720f48e99d2e832e76a110dbf20484399f534b0cb23076f17b402691855d3c6b3cf1876a212cc50880d06a6b177fa86909a235feb67c49730ee1c2a652b0af2136e2874403a14dc69ccd0ae16e9948493e7cd052841bf30c901be86b97b5c2c348942cab94eeade58fb582ccf5290bb2ee16b545d159bf0cbda46501d2687f13df3e0ac12d444bdbe4b047e074c8ec4c1bcc72db079369462f2c2d9ee7f6aee8d91564385c6dd23ce511df3fd9f1645410b6435f0a36c165ea36edf35be93fe3d2e349f4da52d90a1898ab242875d5cc97318ed535caae03fc35f096f36340d62eb178f63d7f28f47b0c6bdfb685da176f62dbbf63296d043746d058dac30edc997d4d9aeb5fbfc6237cfb0bc629bd762e59f37023e3815fbdc372eafa08321c2a479b727dbe11c626eb25f9dbe9043f15d84a90fcf1c8933ff9d1e79ab891982fb6b4be38d6bf0eaf807a982d0209afe8539d8872255f37474839af024488f189f2dc480fc93d3ffffc18c68f430f44721c31526ddc66df05a14b6615369868005f101a27528f255b9a049a0d74c08e7077c83a1a21ea422d5345e5e7bd280829cbcbd59f16aeded55d2a731ed3ea14c401940a125239bbd390438cd5b42a333a0cdaa5369e72d720edb3870e5d9c55ce3ba41e9fc06a488a9bf9cf1be69253970e9ec2306ad03aacf9af83fc7a84ef7a684052a6f5ccda8d31d79dbb1e7077cf8f498eb78de4bc4067ecae0bd1a3451a79807f129955f22d709553ecd53797e7b4e7c3f8a78db1a99ea577b595145b7e1bdc2c735256615166001d0e017cf4cdb50e31b223b958fbaef77f393394f44bd5637efcc1c20c05b3b684a53fa77bbf313c3ab6f653d6d957232bb3877d2844d5fe8f7886bab97f258d9e24cbaf4c36f986527f32e4e6af700c62e5bd9fa20a355dc79671c69d061d41574bbc95f771f7bbccdb67e887103834b37e30076784f91d4ff093223efabdc8c128e19732a8f1ad28f9bf37c870565c38b6e067184aef51acfff5aa2f7c86ee85f08e717b93d9fdd263ea9b4ff8d27c6d980832ad1f0ae9a6559ab0ff66d9979779aa625d05dfa19cc07832b2eb6c71b08e2073812d13ee54c578f2cff32e5a47974bb47529636e5ad2eba46d8ad995bec8c2a2cfc8768a1d8da6aa8ae79a3498daf66b430df61219ac9b47d26ebc46b7a3e819ec57a874715a2027f09fcc07d14247102d71996f4fddbb87e58800be7dad62b6d6d4b2a1601e385611994c411e33e6a4a76fe0477c4d8a4ce1a4a51f6988280ac425818a824348c524e08157a71b7755ce58bff3959d5580751d81b66e59546b7e4a0e802df13b9f2fcf49e737f70621905961422c192ed2223b128458043826094fda431a05609e3d6abcbc716e4e4967775a0a79ff8e1b05ca8021fcf9b11de1f25c1317f44e2cc9a33db8632bc1105c79eadf89bc0378865c904cb66b64be275e99eab3eff93305422ff94665b853ae8d08b925f2375013bca6b569a534a183b1ce820d1b3d332f0983a9b0a45b1639dd6739ba875de15683961e30135ee5e6ac4d49b80f7975d403455a02d61360e87ba1372cfe3fdc68588b7b13a2e68d2ba7f21882e933aeb5561e54ab52e5fa9e8bbc769a07abea00af3ec3f6b4484223c34c0dbbcea3eb9e48a5c22e6b051dd77933b23ca5fda1c1d3d70191dbaf6ba0a4bc3df05760628529d3055bae01d02aaf8749362444117987f3749abf752e666558f1bab2d4e75248c8b1a823b4855d02d52cc34dea474ead761fa12e0ef0549cd421a0ebc52c22230cd86cb88ea88ed9ad28ef7fdcd53c01d8f1369332289556963ad01cdf42724425527597029767180bc2e37326c2a45b9e68b027ccd19e9ddeb4b81a9d67cd99ab2ba6f716b0345cafa0e6f8b68c2c0185f141b8d7093544c70e8f55385c48301a2d97db76bcebc54de90a31412b614175f6e92249958dfb6af5fca4f10fd096b3d3135e575cb68e164deb6d8ea0388fecdc1d6ef4b4c31415d90341b236d19ae4d79eed1f8b4f1ad666b9561576595a8e5d651684f17480eda50d5ccdee408edba943d9ebdddd3a130c1bacde46ea86e751b3be65d7a5dd51e8676e7a56aac5c912a881641d9e46add43e44ffb68cf868323ad12d78aade8d57700b130e27d0051d3a1984dd4914906abff66b3b49a3d97a31c1240df39d59db192b1e0ca586e90fe83db5c381f698c354feef027d85c87d56aebe0be6415b26c74412642c60170fd7fe713449f8a858b34636a2314ebaa7255714f7a39170c6953425802f6ab9e91c02c93382202350cb93cdbfb9d97cd199fb999d1b84af01d80365476d913bbc5ba176f72295b48fe833f504cb764c1c784700da0d8411246828a1bdaabc389d8078842e912b4ed061602308b968b815eafdd206389c648f7533ccea7a9fb5903379776c6d15b719a44d393646cc0aee4c2a671684cf5295f54e5a949d09db93a399b803626153ecef13587a06e889c0c6f1c387e1ea5468a3e2309dfe32bb969d40ee05f2de91c9fd6eacd5e2ffd197f8ea852481055180c21f58f1651da9352933924fbc7ae790ff5e3c989399fa84cf5e6c1b28d9e8527529e6414a463771a00a331b0ebb6d1f73b18c6012a27fb93ee5efc6d11e1a4943797358c63d26275fb3ffa3d150b96046720a6282085bf07d4f2a5e8a185bf46cabd53f03df2bf2699b9300b626479375ffc50aa20cf9ebe32873149501496caa859ac39e77a2f2138ff83436bd25f81c1fb5cebe2fad79555781ba725939dd259abd6b38d49650f061b9becc85856ec0b75e2e2bef959eb37d0e0467d70bb4be955c09ccf9a01d4da3861da59a1c3d0383ee932389e5f801974e7c18773b572ea2492a15eac028ade67d12a1b7510ebfb8588af88d8f21ad21316386e0849f25cb5cec63bda81570e4c7635f95116c2ca06643784c6e5df38e0a372c0e624ffe7ab4e65d5caba305337b0b62d6ae269775df733ab2797142ce83defa9b13de2a86c0b33017c0bad3c2c238da6189da3fafb4bcfba0b857e984c0f3412a2cd38b657eb0e86b18442d3212ab5522dbaff35cad53c5cb5c82a027a77941124c0fd78763f16bb91cd0ea555dbc0d3d59fdb3e028cc11591ec74a28869bc5a783bb2c419fe4397819ca7b1f8b03da96a90570f2597644b5a52f4b8affd5427b875e7126feccbf66abf1402974319a1c67f3e7b49a2880191619654d7d94a2b7be8566a540994f5b26667086c6e0a866479cb751aa0393cd00ab257fecb5ae0547c6418ca2d229ae1ec29a248d9e793efa28ec5e01a2b96dacf53fd7fa4b33b12a07ba8734034c53e012f6ab926d9980fb526257f4bacfe71c7294c8ba5df5b63e5109c713dea5f54816b131d475bd8b64104cd65ba3b302afb9a458e7433d2ce24bfa98a019daa5d5e28a7bd37d6e28bb2c31c7fd1249e3f0e7a29a4d3b853d7551d8d99ef79afc3cfd8dd443b635", 0x1000}, {&(0x7f0000004740)="c164e77594eb735ab6d91b2eda27869d762638ee0a37817e7b4acb58ec7f07c92d37a322ec94689619a67d151c368b16b046325c5670a70ecadf8ab5fb8a0ffc5e3730a0d9b9528f1ab33d0a32e48911788277389f220c2aa85d82b451c8afdaa41b74ffc9fcd57cbef2403939e1446d3675bce3d7291df00cdf3db83a3473087ea0bacec2bf4cd13fa928f57684f2b9be4967ce9c598bf998c5f5a0e650ef2e8aa91a588c324be2aa4428aae4d4d729f4ac8209a5900fc95812db5c1447c4fd", 0xc0}, {&(0x7f0000004800)}], 0x8, &(0x7f00000048c0)=[{0xa0, 0xff, 0x6, "dba8c3bf605c171f9d6cbb46d84e990fec60dc18664902c87095b3008cd177b9a6e6ae5b6ef586f51a1ea5b01134630cc6b84dd8aa136e7fcc10b33d51488e5b478117188d55a5461c7812f6906302c64c2ae3348fc28f6a023c3d0c831852932eace78b8e04d996c92c52d238f8e57e725d9af728b2f248367258ccc74899e783c1299b5af58a3ce477"}, {0x100, 0x113, 0x7, "56522ef8475bd583dc1c4400ad77e2c6509b49f61bcfe3e7b4608feb01997c58697a0bb48034c293e52e7c6c7a356eb08cfab4dac312dd77da6d5871e7e7b272f04716599857a4d555d4cb4269b3b399bc687024d0112c718f7a9faf15d7a53b344945c78a625c0e068aad357bba89f7b119c5820d994f6a17e8dd4b7d2d0d5156f798b8eff7035653962163296b475bf97402024c808824d9119ba17e428b671bbed57b9b6650856dd4da96f3cef22a1fb0a18670c9b659da32a325cb1b3d0e4a9f03bc4f2272aefc5fed44bed964a51ae6d6baac353e44845a2cbe316e7eec7b301668d70fae49be58"}, {0x90, 0x11, 0x7fff, "f8095a4b6b37bd86ce4f401500a54a72ce2957642a8f59c0133c65a01e87e4c7639eb113bf66ed41df79e0f7195f12515af997fb92ec4271408b234805c0b00b43bef11c5f1d453487fdcb4038bf0da89beff05ce591100af4dc1a4ec9caab60077f797048ca0b65883057aea9a95eb25599a8043783863ef5964714"}], 0x230}}], 0x1, 0x400c040) (async) write$tcp_congestion(r1, &(0x7f0000004b40)='cdg\x00', 0x4) (async, rerun: 32) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 32) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000004cc0)={0x2, 0x2db, &(0x7f0000004b80)="e5e8620345fbdcb2f5413583f6628627325cabb65a49959ebb819b5c3b05ab08db2d15af99d6477d", &(0x7f0000004bc0)="6b09872d27f574079ad5c67a0c73bb1076a5e9ff4862e47d90d0b77ad60b5450dc6384c5122c146bb927f635ae74957682485e1e1c507e3fa2de2b0afd19f6cd5dfb4bf5f11a75420d49eb980b37d86cf5968a14f46489c196a1d288f9a42a42b346fa783bbec3e242af8307998ad8e190ab6e24cef44a2f4947112680e4e39cbd71f542ee2cd9cca1a5c57941990af938f0381c03975e1153c80832c452bb920912bfb065eb9355ec3606cdd609667682d238939949a94e0075849043143d07ac40192ca4f5739276626dbe1392e82cb834a97cec4a869e05f42494ecf031d83d05a1a08b209702278552", 0x28, 0xeb}) (async) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000004d40)={0x0, @bt={0x6, 0x5, 0x0, 0x0, 0x1, 0x10000, 0x80000001, 0x1, 0x6d7a, 0x3ff, 0x2, 0x8, 0x5, 0xd0c8, 0x18, 0x2c, {0x6, 0x2}, 0x81, 0x5}}) 4m1.747451955s ago: executing program 4 (id=1661): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, r0, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) 4m1.660023894s ago: executing program 4 (id=1662): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x110ba0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0xa0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0xfffffffd, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffa, 0x0, 0x0, 0x1e, 0x8, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "323d9e234b305d83cd4a524bd3ffe70c7fbf238f51a07fbf05e70a1fcaed1e831fa79a00000000000000000000a768f44f00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0xa]}}) write$P9_RXATTRCREATE(r1, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000100)={{r3}, 0x7, 0x6, 0x8}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c, 0x0, 0x2}, 0x20) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000020000030c0007800500140004000000050005000a0000000900020073797a31000000000000000000050001000700000011000300686173683a6e65742c6e657400000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioprio_set$uid(0x3, 0x0, 0x2007) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4, 0x27}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, r9, 0x8) accept4(r8, 0x0, 0x0, 0x800) 4m1.533808627s ago: executing program 4 (id=1664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000003180)=ANY=[@ANYBLOB="86594858dab845625660eabf089b05d228ca02bde746731d7a4ac24a1c58b6dc8563a843fa77c56e7d385deea674b9bfaf70021c14abdd3f0015127deaab9e0a1199116ac7ed940ae6b2349d27a5ed95feca5d6404fd7940a7762acbefbcc8d99fea83a90e5e9ac1bf54f85ba38b928e77f1408e7cc644d14c1efa7d1c7567a2e1d6dc6cace00fdffec21d40a0", @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf256600000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x7ac}, 0x1, 0x0, 0x0, 0x860}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0xff2c) 3m59.757727471s ago: executing program 4 (id=1683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x2, r2}) 3m59.692650439s ago: executing program 34 (id=1683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x2, r2}) 3m44.297999385s ago: executing program 5 (id=1947): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd601823"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x34, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0xd07d50bf8d1db8c6}, 0x20000040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) syz_extract_tcp_res(&(0x7f00000001c0), 0x5, 0x4) 3m44.297846212s ago: executing program 5 (id=1948): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="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", 0x22b) r1 = accept4(r0, 0x0, 0x0, 0x80000) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000180), &(0x7f00000001c0)=0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x9) syz_open_dev$vcsa(&(0x7f0000000100), 0x8000000000000000, 0x4800) (async) syz_open_dev$vcsa(&(0x7f0000000100), 0x8000000000000000, 0x4800) socket$can_j1939(0x1d, 0x2, 0x7) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001600)=""/4103, 0x1007}], 0x1}, 0x2) 3m44.199960954s ago: executing program 5 (id=1951): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000122000/0x1000)=nil, 0x1000, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r0, &(0x7f0000002680)={0x2020}, 0xfffffffffffffcc4) 3m44.115572271s ago: executing program 5 (id=1953): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (rerun: 32) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f00000009c0)={@hyper}) (async, rerun: 32) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x280181, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x864, 0x5e, 0x200000000000, 0x100000000000006}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7, 0x1, 0x7ff, 0x9, 0x3}}) (async) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x270, 0x118, 0xb, 0x148, 0x0, 0x148, 0x1d8, 0x230, 0x242, 0x1d8, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0xe8, 0x118, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@multicast2, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], 0x4e21, 0x0, 0x3, 0x4e24, 0x4, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0xfc}}}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) 3m43.954129491s ago: executing program 5 (id=1958): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x80c00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16, @ANYRES32=r2], 0x44}}, 0x0) 3m43.698096183s ago: executing program 5 (id=1961): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='btrfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') 3m43.669716514s ago: executing program 35 (id=1961): r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='btrfs\x00', 0x10003, &(0x7f00000000c0)='norecovery') 2m32.665044609s ago: executing program 0 (id=2902): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000100)='./file1\x00') 2m32.601937825s ago: executing program 0 (id=2903): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r1, r0, 0x0, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_delroute={0x28, 0x19, 0x1, 0x70bd2a, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0xfffe, 0x5, 0x6}}]}, 0x28}}, 0x0) 2m32.60168969s ago: executing program 0 (id=2904): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f00000006c0)=[{0xe, 0x0, 0x2, 0xfd, @tick, {}, {0xe}, @queue={0xa, {0x40, 0x2}}}], 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x15}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x11) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x15}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x11) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001d00010429bd7000fedbdf2507000000", @ANYRES32=r4, @ANYBLOB="4000e6030a000200aaaaaaaaaa1b"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x20000040) 2m32.526599506s ago: executing program 0 (id=2905): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xce) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000140)="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", 0x148) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2m32.333971711s ago: executing program 0 (id=2909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x44043011, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) r3 = getpgid(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x2, 0x10000}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r3}) close(r2) sendmmsg$unix(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="11", 0x1}], 0x1}}], 0x1, 0x20040001) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000000000000000000000000500000305000100"], 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000001c0)) 2m32.106430727s ago: executing program 0 (id=2913): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xc8902, 0x0) write$binfmt_misc(r0, 0x0, 0x0) (async) write$binfmt_misc(r0, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x0, 0x8000, 0x1402}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x24044092) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {}, {0xc, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000700000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) getpeername$l2tp(r2, &(0x7f00000002c0)={0x2, 0x0, @dev}, &(0x7f0000000300)=0x10) (async) getpeername$l2tp(r2, &(0x7f00000002c0)={0x2, 0x0, @dev}, &(0x7f0000000300)=0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, 0x0, 0xe5) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x62, 0x0, 0x8, 0x6e}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) 2m32.034249361s ago: executing program 36 (id=2913): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xc8902, 0x0) write$binfmt_misc(r0, 0x0, 0x0) (async) write$binfmt_misc(r0, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x0, 0x8000, 0x1402}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x24044092) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {}, {0xc, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e0001000000000000000000020000000100000700000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) getpeername$l2tp(r2, &(0x7f00000002c0)={0x2, 0x0, @dev}, &(0x7f0000000300)=0x10) (async) getpeername$l2tp(r2, &(0x7f00000002c0)={0x2, 0x0, @dev}, &(0x7f0000000300)=0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, 0x0, 0xe5) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x62, 0x0, 0x8, 0x6e}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) 1m43.964599608s ago: executing program 6 (id=3558): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x37]}}]}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000100)='./file1\x00') 1m43.963705874s ago: executing program 6 (id=3560): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}, 0x4}], 0x1, 0xcb, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x13, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet6_udp_int(r6, 0x11, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$RTC_UIE_ON(r6, 0x7003) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) (async) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) accept$alg(r3, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x0, 0x0, 0x2000000}, 0x4}], 0x1, 0xcb, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x13, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) getsockopt$inet6_udp_int(r6, 0x11, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$RTC_UIE_ON(r6, 0x7003) (async) 1m43.868474574s ago: executing program 6 (id=3561): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="0100fa00ffff090000000800000008000300", @ANYRESOCT=r0], 0x5c}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff3}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1f0000001200010029bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="6b880000b45609002b002e0003000000d2a63515246cbb381f3aef921ed68860e277b8481991b4657cb73f17e9196c12c1c4229ebb8598a9170f4605b7cd3634f2d29824931ca2330956c45a389de3ba0ae6f218eb5df06d4b0ee957e81b6f55f30b1df6622530fc0000000000000000"], 0x28}}, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@upd={0xe0, 0x12, 0x201, 0x70bd2b, 0x25dfdbfc, {{'ctr-twofish-avx\x00'}, '\x00', '\x00', 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r7, 0x4004560e, &(0x7f0000000240)=0x4) ftruncate(r5, 0xffffffffffffacc7) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f0000000280)=0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@delqdisc={0x9c, 0x25, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0xd, 0xd}, {0x1, 0x2}}, [@TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x79, 0x7f, 0x81, 0x7b3, 0x2, 0xfffffff3, 0x0, 0x1}}, {0x6, 0x2, [0x61bc]}}, {{0x1c, 0x1, {0x2a, 0x3, 0x7, 0x2, 0x1}}, {0x4}}]}, @TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x8, 0x9, 0x5, 0x0, 0x1ff, 0x86, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0x8, 0x8, 0xc]}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c850) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="66643dad267b04ae7280111ab1c228dd46df826acc50cf338be4d404ee9feed7536ce4901b479ed60916ba10eb56adae14b5b35abb369734dfa0c575da09c35898a1", @ANYRESHEX=r8, @ANYBLOB="ac000000746d6f64653d30303030303030303030303030303030303034303034302c757365725f69643d", @ANYRES32=r7, @ANYRES32, @ANYRES32=r6]) read$FUSE(r8, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x8021, 0x2, @tid=r11}, &(0x7f0000000300)=0x0) timer_settime(r12, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) syz_fuse_handle_req(r8, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x0, 0x101, 0x3, 0x100, 0x10000000, {0x3f, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r10, 0x902, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000000440)={0x50, 0x0, r9, {0x7, 0x29, 0x0, 0xffffffff80000000, 0xfffc, 0x2, 0x6b, 0x2, 0x0, 0x0, 0x80, 0x933}}, 0x50) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x8c, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xcf7}]}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x555e}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}]}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004804) r13 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r13, 0x933, 0x20000000) close_range(r4, 0xffffffffffffffff, 0x0) 1m42.585518063s ago: executing program 6 (id=3563): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000161000/0xf000)=nil, &(0x7f00001df000/0x3000)=nil, 0xf000, 0x2, 0x2}) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000161000/0xf000)=nil, &(0x7f00001df000/0x3000)=nil, 0xf000, 0x2, 0x2}) madvise(&(0x7f0000975000/0x1000)=nil, 0x1000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x4000, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x203800, 0x0) (async) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x203800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x86, 0xffffffffffffffff, {0x4}}, './file0\x00'}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r0, 0x0, 0x0, 0x0, 0x80800}) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r2, 0x3517, 0xc2de, 0x9, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000066c0)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000002440)="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", 0x100d}, {&(0x7f0000001700)="838f15ef96df0d0c1fbfa03b1200a40eb9ff24a64f55f1505e6e01371d2d8f858005b25f99cc680018746056ace3eb5c15e16d0db3c0fdffd91b4a306ad72ab379c6b5cb157568889a9e336165d1425ec39ac4641f5bad63e62abb26615145184eb59fd1986c35e244568b489d15fbe4df4289149fd68c7a725606d1ebf6c839fd159f744480b7f958a556523f7217aaf87706c2ade33118cacff606b85c818f6c3d3cff5ae1d22fa8bc8073eb0c0daaf81b0632613d3b4a10b35c16e38de8cac07e147abbc3710f83ab79", 0xcb}, {&(0x7f0000001800)="aa452874d236dce1ac2d81ff4b570f3eaf43c45a8eb91f76964b0b86441dddd68d18e2016f695f9db52c1c9f077e9497820fda379d993b219b8ccc6f916b4a081f95d5090721c3fc3d29903ad509ab143283108354fa6b8d9a68fba4cb368f5830c99be732b77b021f97bc38433151127d3d185810d96f8c27716b29780e3f87ef5046425387494444d001fcff9ee1dac3372cd4695b08973d4bce0c47d39bf696b79e5fc32592c6203b0d772fc1483d51f71685", 0xb4}, {&(0x7f00000018c0)="da20ebaa0e628c2a1fd0a675c86d6379af2c07c3fab846bdd173d6b06c9271072de0ccc9fbc2404de0f408022eb571e23febeb769af0368ba6e1928541782a201aefac84425f8b555903df3c5eb03304404332ebce4e0ab12673169a41733dfb803f0beeca06ef621375cb9bef64eb642bb805e7881393663de1063882b6842f8aad49669b391abadf7e4651c4aa8ae60b436ccdf6349d", 0x97}, {&(0x7f00000004c0)="4ddef8ed6e652a787d2304a8e46af99703008caf6ec7f35a14c334edcc4bc861d3085c73eb6b16f14cda19a0e2ab23ee6c4880eaa7e5ebfba329282f32164e5272e05b31ea675750638fa137129e86e87d36507bb9b0f9e89bb9d043", 0x5c}, {&(0x7f00000005c0)="7c17bd50bf5df2fbc739b06dcddca4349967d98392b0f294dafa07f43fcd6455d34a6d2b9383d8e137c7", 0x2a}, {&(0x7f0000001980)="1e18ff2f367074d1b2cdb490c6f78522239192f843bda2004edd17222f4201e28e4b868bc0d40e551700ac9462028a134a811d9200f5dbd2f5b3bc3a9cd742218d7cc8d06b8ea10321212d9809dae4d0be4ce3a3e208d8eebfcc375a", 0x5c}, {&(0x7f0000001a00)="fcff9f73e8d9223fb418c26ad5befdc3b11da7a3a93ec5663f664d571af97c6f5bb823193d5c5e8f45cfe45e3f659b0851caa2d8e143d477c6d38820430debe29734792e33c8a4e61a25c88177c713ba937a3a36e4287c00"/103, 0x67}, {&(0x7f0000001a80)="e6a481e19d65abe327d109f8018b4be6464b62e4408407d3bc31f318ffef083a6011928372f39f1fee2272b2bfe95c023d190546247f037f5553a6198cc0b2ddc71cb238c4a6943df8dc365c0adacfd94a0bff5fd23e59bd1a284a96a381c79315fe532fa772c22bcb9d7ea146d040ecf221973f7065163e6952c408c8633e4ca4dfc3fd969088de5eef9f80d820130a4e01f962059d251e9f41eba511be49d0ffb822d0fbb39d87a581056d1b9a69d433b11759005c4f0776ab83e69d769943a7918a05946550518ec56804c535ee2a4a901d47c4825ebecb99e5d94bc27baafa9c6326eeaf9cb80884df1ac58bfcf55e356aaa", 0xf4}], 0x9, &(0x7f0000001cc0)=[@rights={{0x2c, 0x1, 0x1, [r7, r10, r8, r1, r10, r2, r2]}}, @rights={{0x18, 0x1, 0x1, [r6, r0]}}, @cred={{0x1c}}], 0x68, 0x10095}}, {{&(0x7f0000001d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006480), 0x0, &(0x7f0000006580)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r5]}}, @rights={{0x24, 0x1, 0x1, [r9, 0xffffffffffffffff, r7, r10, r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff, r8, r0, 0xffffffffffffffff, 0xffffffffffffffff, r5]}}], 0x138, 0x4044000}}], 0x2, 0xc040) r11 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xc120, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/97, 0x61}], 0x1}) io_uring_enter(r11, 0x847ba, 0x0, 0xe, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x200000000000013f, &(0x7f0000000140)=[{0x3, 0x0, 0x0, 0x2}, {0x2, 0x5, 0x10, 0x4}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x200000000000013f, &(0x7f0000000140)=[{0x3, 0x0, 0x0, 0x2}, {0x2, 0x5, 0x10, 0x4}]}, 0x10) syz_io_uring_submit(r12, r13, &(0x7f0000000240)=@IORING_OP_UNLINKAT={0x24, 0x2, 0x0, r6, 0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x200, 0x1}) (async) syz_io_uring_submit(r12, r13, &(0x7f0000000240)=@IORING_OP_UNLINKAT={0x24, 0x2, 0x0, r6, 0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x200, 0x1}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) (async) r14 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r14, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m42.583666236s ago: executing program 6 (id=3565): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x20, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff3}, {0x10, 0xf}, {0xffe0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0d4}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', 0x0, 0x0, 0x0) (async) request_key(&(0x7f0000001000)='dns_resolver\x00', 0x0, 0x0, 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000300)) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f00000001c0)={0x80000001, {{0xa, 0x4e21, 0xfffffffd, @local, 0x95}}, {{0xa, 0x4e24, 0xffffffff, @rand_addr=' \x01\x00', 0x1}}}, 0x108) (async) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f00000001c0)={0x80000001, {{0xa, 0x4e21, 0xfffffffd, @local, 0x95}}, {{0xa, 0x4e24, 0xffffffff, @rand_addr=' \x01\x00', 0x1}}}, 0x108) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m42.220343033s ago: executing program 6 (id=3570): syz_clone(0x91a0200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)="24ab3f9fadf08a2bff49ec2208104e0c6339b39cda51a6b76683d93f1ad6a9b71cb8184fda55f020976ab9417b4afb12") r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1d1, 0x0, 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008"], 0x125) 1m42.145512796s ago: executing program 37 (id=3570): syz_clone(0x91a0200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)="24ab3f9fadf08a2bff49ec2208104e0c6339b39cda51a6b76683d93f1ad6a9b71cb8184fda55f020976ab9417b4afb12") r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x1d1, 0x0, 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad000008"], 0x125) 1.209132385s ago: executing program 3 (id=4667): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x6, r1, 0x1, 0xe5}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000004c0)="2d04020007fe280000002d3922ff65b4355e953d23d254f0", 0xfe4d}], 0x1}, 0x4) 1.134722646s ago: executing program 3 (id=4668): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) 1.134467605s ago: executing program 3 (id=4669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x2, 0x10, 0x1, 0x5, 0x4, 0x9, 0xf, 0x4, 0x5, 0x10, 0x9}, {0xeeee0000, 0x0, 0xf, 0x4a, 0x6, 0x10, 0x9, 0x5, 0x9, 0x3, 0x40, 0x8}, {0x8000000, 0x8000000, 0x3, 0x0, 0x2, 0xa, 0x8, 0xf, 0x6, 0xa6, 0x3, 0x3}, {0xdddd0000, 0xfec00000, 0x3, 0x37, 0x9, 0x4, 0x5, 0xfa, 0x1, 0x4, 0x7, 0x7}, {0x4000, 0x0, 0x4, 0x20, 0xd, 0x1, 0x40, 0x7, 0xb, 0x3, 0x7, 0xb}, {0xeeef0000, 0x4000, 0x9, 0x9, 0x2, 0x8, 0x7, 0x2, 0xf, 0x4, 0x8, 0x44}, {0xdddd1000, 0x8080000, 0x4, 0x1, 0x5, 0xc9, 0x3, 0x8, 0x6, 0x5, 0x2, 0x7}, {0x2, 0xffff1000, 0xe, 0x1f, 0x1, 0x9, 0x9, 0x7, 0x7, 0x8, 0x2, 0x7}, {0x8000000, 0x1000}, {0x4000, 0x3}, 0x80060018, 0x0, 0x6000, 0x400010, 0x1, 0x100, 0x100000, [0x1000, 0xfff, 0x3f, 0x1]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r3, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000005c0)=0x8, 0x4) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.057891592s ago: executing program 8 (id=4671): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0x44, 0x9, 0x3, 0xfe, 0x7, 0x6, 0x1e, 0x81, 0xf8, 0x1, 0x4c, 0x3, 0x20}, 0x6) shutdown(r1, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendto$inet(r1, &(0x7f0000000000)='Q', 0x1, 0x40, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.057577911s ago: executing program 8 (id=4673): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000140)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f00000000c0)=0xa4) 974.056547ms ago: executing program 8 (id=4674): timer_create(0x0, &(0x7f0000000200)={0x0, 0x33, 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = semget$private(0x0, 0x7, 0x191) semtimedop(r0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r0, &(0x7f0000000140)=[{0x1, 0xe4, 0x1000}, {0x1, 0xe108, 0x1000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)) 886.753206ms ago: executing program 8 (id=4675): timer_create(0x2, &(0x7f0000000140)={0x0, 0x12, 0x2}, &(0x7f0000044000)) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x16) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x20000000000fecc) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 885.658451ms ago: executing program 8 (id=4676): ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000001c0)={0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="110000000100060000071a80010061cc", 0x10) 813.093137ms ago: executing program 8 (id=4677): rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={r2, 0x47, 0x6}, 0xc) 600.005293ms ago: executing program 7 (id=4683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000180)="fa64d89c0a5dd9f364f466b9860300000f32f20f2086660f323e0fc71e7100440f20c0663505000000440f22c066b93002000066b80400000066ba008000000f30", 0x41}], 0x1, 0x43, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@keyring) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x15, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xba) ioctl$KVM_RUN(r3, 0xae80, 0x0) 449.241249ms ago: executing program 9 (id=4684): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x6, {0x200, 0x0, 0x4}}, 0x0}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_getoverrun(r0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000480), 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c033, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) remap_file_pages(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0, 0xfff, 0x194023) 449.09285ms ago: executing program 7 (id=4685): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x8}, &(0x7f00000000c0)=0x8) 350.681922ms ago: executing program 7 (id=4686): shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf}, 0x88b, 0xfffffffffffffffa, 0x8, 0x1003, 0x0, 0x0, 0x1}) shmctl$SHM_LOCK(0x0, 0xb) 350.51498ms ago: executing program 9 (id=4687): r0 = socket$inet6(0xa, 0x802, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000140)=' ', 0x2e) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) 350.411386ms ago: executing program 7 (id=4688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="440f20c0663507000000440f22c0bad004b0aaee0f01f40f20d86635080000000f22d83ef30f090f20d86635080000000f22d8baf80c66b8042b8c8e66efbafc0c66edf083690e8bf2f6530f66db9af5df", 0x51}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@x86={0xff, 0xd, 0x1, 0x0, 0xff, 0x4, 0x6, 0xc, 0x9, 0x1, 0x1, 0x2, 0x0, 0x5, 0x1, 0x3c, 0x7, 0x3, 0xb, '\x00', 0x60, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 293.192223ms ago: executing program 9 (id=4689): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) pread64(r0, &(0x7f00000002c0)=""/200, 0xc8, 0x327f) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=']', 0x1}], 0x10000000000002d7, 0xc) 293.109719ms ago: executing program 9 (id=4690): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreq(r0, 0x0, 0x33, &(0x7f0000000080)={@multicast1, @remote}, 0x8) 192.918106ms ago: executing program 9 (id=4691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x5e}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0xd, 0xeb5, 0x45, 0x9, 0x5}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 115.768918ms ago: executing program 3 (id=4692): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x2d, 0x8000001, r0, 0x0) fanotify_mark(r1, 0x2, 0x4800002c, r0, 0x0) 115.619566ms ago: executing program 7 (id=4693): openat$kvm(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x0, 0x2, 0xf9, 0x8}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x12, &(0x7f0000000000)="11106e00", 0x4) 64.210217ms ago: executing program 3 (id=4694): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)={'c', ' *:* ', 'wm\x00'}, 0x9) 64.078048ms ago: executing program 7 (id=4695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x2, 0x0, [{0x80000000, 0xa, 0x0, 0x100, 0xde, 0x3, 0x204}, {0x0, 0x3, 0x4, 0x8, 0x4007843, 0x3, 0x4}]}) 61.199469ms ago: executing program 9 (id=4696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x1}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000002c0)=@x86={0x0, 0x0, 0x3, 0x0, 0xffffffff, 0xe, 0x8, 0xf2, 0xd5, 0x5, 0x6, 0x9, 0x0, 0xc9b, 0x2, 0x6e, 0x7, 0x6, 0x9, '\x00', 0x9, 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=4697): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) fchdir(r0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) kernel console output (not intermixed with test programs): has 1 interface, different from the descriptor's value: 9 [ 313.273792][ T24] usb 14-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 313.277562][ T24] usb 14-1: config 0 interface 0 has no altsetting 0 [ 313.282162][ T24] usb 14-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 313.285268][ T24] usb 14-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 313.288103][ T24] usb 14-1: Product: syz [ 313.289846][ T24] usb 14-1: Manufacturer: syz [ 313.291427][ T24] usb 14-1: SerialNumber: syz [ 313.294507][ T24] usb 14-1: config 0 descriptor?? [ 313.295021][T18037] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 313.300944][ T24] yurex 14-1:0.0: USB YUREX device now attached to Yurex #0 [ 313.361959][T18029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.365135][T18029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.369265][T14671] usb 13-1: USB disconnect, device number 9 [ 313.513807][ T6065] usb 14-1: USB disconnect, device number 2 [ 313.518753][ T6065] yurex 14-1:0.0: USB YUREX #0 now disconnected [ 313.599385][T18029] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3617'. [ 313.626801][T18029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18029 comm=syz.8.3617 [ 313.705419][T18048] xfrm0 speed is unknown, defaulting to 1000 [ 313.800386][T18050] FAT-fs (sr0): bogus number of reserved sectors [ 313.802887][T18050] FAT-fs (sr0): Can't find a valid FAT filesystem [ 313.949900][T18054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3626'. [ 314.007715][T18056] netlink: 'syz.3.3626': attribute type 10 has an invalid length. [ 314.011018][T18056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3626'. [ 314.019428][T18056] netlink: 'syz.3.3626': attribute type 10 has an invalid length. [ 314.024635][T18056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3626'. [ 314.028648][T18056] netlink: 'syz.3.3626': attribute type 10 has an invalid length. [ 314.032143][T18056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3626'. [ 314.036908][T18056] netlink: 'syz.3.3626': attribute type 10 has an invalid length. [ 314.040498][T18056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3626'. [ 314.048352][T18056] netlink: 'syz.3.3626': attribute type 10 has an invalid length. [ 314.051032][T18056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3626'. [ 314.054153][T18056] netlink: 'syz.3.3626': attribute type 10 has an invalid length. [ 314.057009][T18056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3626'. [ 314.060032][T18056] netlink: 'syz.3.3626': attribute type 10 has an invalid length. [ 314.062624][T18056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3626'. [ 314.065666][T18056] netlink: 'syz.3.3626': attribute type 10 has an invalid length. [ 314.068297][T18056] netlink: 'syz.3.3626': attribute type 10 has an invalid length. [ 314.153581][T18063] input: syz1 as /devices/virtual/input/input44 [ 314.258526][T18067] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 314.321202][T18073] bridge0: port 1(veth0_to_bridge) entered blocking state [ 314.324411][T18073] bridge0: port 1(veth0_to_bridge) entered disabled state [ 314.327047][T18073] veth0_to_bridge: entered allmulticast mode [ 314.329915][T18073] veth0_to_bridge: entered promiscuous mode [ 314.370449][T18079] loop2: detected capacity change from 0 to 7 [ 314.373416][T18079] loop2: p1 [ 314.374678][T18079] loop2: partition table partially beyond EOD, truncated [ 314.377279][T18079] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 314.542604][T18091] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 314.985398][T18096] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 315.243383][T18107] loop2: detected capacity change from 0 to 7 [ 315.246826][T18107] loop2: p1 [ 315.248023][T18107] loop2: partition table partially beyond EOD, truncated [ 315.250520][T18107] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 315.474429][T18118] (syz.3.3647,18118,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 315.544179][T18127] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 315.594037][T18130] ALSA: seq fatal error: cannot create timer (-22) [ 316.912723][T18130] workqueue: Failed to create a rescuer kthread for wq "bond41": -EINTR [ 316.948153][T18132] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.950875][T18143] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 317.006454][T18150] ipt_rpfilter: unknown options [ 317.063414][T18132] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.157603][T18132] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.236855][T18132] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.331075][ T9834] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.340554][ T9834] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.349140][ T9834] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.358720][ T9834] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.879744][T18173] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 317.883479][ T40] kauditd_printk_skb: 209 callbacks suppressed [ 317.883665][ T40] audit: type=1400 audit(818.270:12649): avc: denied { read } for pid=18172 comm="syz.9.3664" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 317.896416][ T40] audit: type=1400 audit(818.270:12650): avc: denied { open } for pid=18172 comm="syz.9.3664" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 317.908478][ T40] audit: type=1400 audit(818.270:12651): avc: denied { module_request } for pid=18174 comm="syz.7.3663" kmod="net-pf-2-proto-7-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 317.916909][ T40] audit: type=1400 audit(818.279:12652): avc: denied { read write } for pid=18172 comm="syz.9.3664" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 317.924524][ T40] audit: type=1400 audit(818.279:12653): avc: denied { open } for pid=18172 comm="syz.9.3664" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 317.932104][ T40] audit: type=1400 audit(818.279:12654): avc: denied { ioctl } for pid=18172 comm="syz.9.3664" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 317.940138][ T40] audit: type=1400 audit(818.279:12655): avc: denied { read write } for pid=18172 comm="syz.9.3664" name="vbi7" dev="devtmpfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 317.948142][ T40] audit: type=1400 audit(818.279:12656): avc: denied { open } for pid=18172 comm="syz.9.3664" path="/dev/vbi7" dev="devtmpfs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 317.955783][ T40] audit: type=1400 audit(818.288:12657): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=36308 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 317.963911][ T40] audit: type=1400 audit(818.288:12658): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=36308 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 318.215228][T14670] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 318.385459][T14670] usb 12-1: Using ep0 maxpacket: 8 [ 318.388701][T14670] usb 12-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 318.392169][T14670] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 318.395236][T14670] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.648728][T18196] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 319.796857][T18211] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 319.800211][T18211] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 319.809666][T18211] __nla_validate_parse: 60 callbacks suppressed [ 319.809681][T18211] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3676'. [ 319.850486][T18213] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 319.857183][T18213] binder: 18212:18213 ioctl c0285700 200000000040 returned -22 [ 320.159755][T18230] XFS (nbd9): no-recovery mounts must be read-only. [ 320.202705][T18230] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 320.438214][T18235] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3685'. [ 320.490978][T18237] loop2: detected capacity change from 0 to 7 [ 320.494248][T18237] loop2: p1 [ 320.495731][T18237] loop2: partition table partially beyond EOD, truncated [ 320.498224][T18237] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 320.547515][T18239] validate_nla: 58 callbacks suppressed [ 320.547531][T18239] netlink: 'syz.9.3687': attribute type 1 has an invalid length. [ 320.571781][T18239] bond1: entered promiscuous mode [ 320.574394][T18239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.592955][T18243] bond6: ARP target 4.0.0.0 is already present [ 320.595718][T18243] bond6: option arp_ip_target: invalid value (4) [ 320.602848][T18243] bond6 (unregistering): Released all slaves [ 320.631229][T18239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.634614][T18239] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 320.639085][T18239] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 320.641177][T18247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3687'. [ 320.648771][T18239] bond1: (slave ip6gre1): making interface the new active one [ 320.652385][T18239] ip6gre1: entered promiscuous mode [ 320.655174][T18239] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 320.755930][T18247] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 320.758695][T18247] ip6gre1: left promiscuous mode [ 320.763414][T18247] bond1 (unregistering): Released all slaves [ 320.819553][T18257] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3691'. [ 320.826183][T18257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18257 comm=syz.8.3691 [ 320.896797][T18272] loop2: detected capacity change from 0 to 7 [ 320.899409][T18272] loop2: p1 [ 320.900531][T18272] loop2: partition table partially beyond EOD, truncated [ 320.900673][T18273] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 320.902929][T18272] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 320.935936][T18277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3699'. [ 320.944291][T18280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3700'. [ 320.944375][T18277] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 320.947218][T18280] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3700'. [ 320.952769][T18281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3699'. [ 320.987320][T18288] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 321.075437][T18301] x_tables: duplicate underflow at hook 1 [ 321.075442][T18302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3706'. [ 321.083024][T18302] openvswitch: netlink: Missing key (keys=40, expected=80) [ 321.086255][T18302] fuse: Unknown parameter '0x0000000000000004' [ 321.111191][T18304] overlay: Unknown parameter 'dont_measure' [ 321.145527][T18309] loop2: detected capacity change from 0 to 7 [ 321.148417][T18309] loop2: p1 [ 321.149743][T18309] loop2: partition table partially beyond EOD, truncated [ 321.152929][T18309] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 321.179366][T14666] usb 12-1: USB disconnect, device number 20 [ 321.179747][T18310] overlay: Unknown parameter 'dont_hash' [ 321.275833][T18310] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 322.105507][T18337] loop2: detected capacity change from 0 to 7 [ 322.108885][T18337] loop2: p1 [ 322.110619][T18337] loop2: partition table partially beyond EOD, truncated [ 322.113816][T18337] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 322.271154][T18345] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3721'. [ 322.308197][T18347] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 322.311307][T18347] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 322.391690][T18358] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 322.406785][ T74] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 322.470945][T18360] tmpfs: Unknown parameter 'usrquota_inode_hardl' [ 322.482605][T18360] xt_TPROXY: Can be used only with -p tcp or -p udp [ 322.491409][T18360] tmpfs: Unknown parameter 'gr_hardlimit' [ 322.494894][T18360] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 322.497906][T18360] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 322.500898][T18360] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 322.588739][ T74] usb 8-1: Using ep0 maxpacket: 8 [ 322.591655][ T74] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 322.594989][ T74] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.599702][ T74] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 322.602721][ T74] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.607719][ T74] usbtmc 8-1:16.0: bulk endpoints not found [ 322.677903][T18366] loop2: detected capacity change from 0 to 7 [ 322.680350][T18366] loop2: p1 [ 322.681460][T18366] loop2: partition table partially beyond EOD, truncated [ 322.684718][T18366] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 322.731250][T18370] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 322.999875][ T6065] hid-generic 0000:00D0:01A0.000B: reserved main item tag 0xd [ 323.003112][ T6065] hid_parser_main: 5 callbacks suppressed [ 323.003126][ T6065] hid-generic 0000:00D0:01A0.000B: unknown main item tag 0x0 [ 323.009425][ T6065] hid-generic 0000:00D0:01A0.000B: unknown main item tag 0x0 [ 323.012455][ T6065] hid-generic 0000:00D0:01A0.000B: unknown main item tag 0x0 [ 323.016201][ T6065] hid-generic 0000:00D0:01A0.000B: unknown main item tag 0x0 [ 323.019355][ T6065] hid-generic 0000:00D0:01A0.000B: unknown main item tag 0x0 [ 323.022574][ T6065] hid-generic 0000:00D0:01A0.000B: unknown main item tag 0x5 [ 323.025511][ T6065] hid-generic 0000:00D0:01A0.000B: unknown main item tag 0x5 [ 323.028557][ T6065] hid-generic 0000:00D0:01A0.000B: unknown main item tag 0x0 [ 323.031600][ T6065] hid-generic 0000:00D0:01A0.000B: unknown main item tag 0x0 [ 323.034118][ T6065] hid-generic 0000:00D0:01A0.000B: unknown main item tag 0x0 [ 323.037423][ T6065] hid-generic 0000:00D0:01A0.000B: unbalanced collection at end of report description [ 323.041187][ T6065] hid-generic 0000:00D0:01A0.000B: probe with driver hid-generic failed with error -22 [ 323.058557][T14671] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 323.096356][T18388] FAULT_INJECTION: forcing a failure. [ 323.096356][T18388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.100707][T18388] CPU: 2 UID: 0 PID: 18388 Comm: syz.7.3737 Not tainted syzkaller #0 PREEMPT(full) [ 323.100723][T18388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 323.100730][T18388] Call Trace: [ 323.100734][T18388] [ 323.100739][T18388] dump_stack_lvl+0x16c/0x1f0 [ 323.100770][T18388] should_fail_ex+0x512/0x640 [ 323.100792][T18388] strncpy_from_user+0x3b/0x2e0 [ 323.100810][T18388] getname_flags.part.0+0x8f/0x550 [ 323.100823][T18388] __x64_sys_unlink+0xb0/0x110 [ 323.100838][T18388] do_syscall_64+0xcd/0xf80 [ 323.100850][T18388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.100861][T18388] RIP: 0033:0x7f1df8f8f7c9 [ 323.100870][T18388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.100881][T18388] RSP: 002b:00007f1df9eb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 323.100891][T18388] RAX: ffffffffffffffda RBX: 00007f1df91e5fa0 RCX: 00007f1df8f8f7c9 [ 323.100898][T18388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 323.100904][T18388] RBP: 00007f1df9eb8090 R08: 0000000000000000 R09: 0000000000000000 [ 323.100910][T18388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.100916][T18388] R13: 00007f1df91e6038 R14: 00007f1df91e5fa0 R15: 00007fff0eb5dfd8 [ 323.100930][T18388] [ 323.185812][T18390] loop2: detected capacity change from 0 to 7 [ 323.188708][T18390] loop2: p1 [ 323.189838][T18390] loop2: partition table partially beyond EOD, truncated [ 323.192197][T18390] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 323.230534][T14671] usb 14-1: Using ep0 maxpacket: 16 [ 323.234239][T14671] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.237736][T14671] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.242108][T14671] usb 14-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 323.245449][T14671] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.249383][ T40] kauditd_printk_skb: 330 callbacks suppressed [ 323.249393][ T40] audit: type=1400 audit(823.283:12989): avc: denied { read } for pid=18392 comm="syz.8.3740" path="socket:[86196]" dev="sockfs" ino=86196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 323.257059][T14671] usb 14-1: config 0 descriptor?? [ 323.358235][ T40] audit: type=1400 audit(823.386:12990): avc: denied { map_read map_write } for pid=18404 comm="syz.8.3741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 323.389310][ T40] audit: type=1400 audit(823.404:12991): avc: denied { bind } for pid=18406 comm="syz.8.3744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 323.396461][ T40] audit: type=1400 audit(823.404:12992): avc: denied { write } for pid=18406 comm="syz.8.3744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 323.410877][ T40] audit: type=1400 audit(823.404:12993): avc: denied { getopt } for pid=18406 comm="syz.8.3744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 323.417041][ T40] audit: type=1400 audit(823.442:12994): avc: denied { read } for pid=18412 comm="syz.8.3745" dev="nsfs" ino=4026533158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 323.424293][ T40] audit: type=1400 audit(823.442:12995): avc: denied { open } for pid=18412 comm="syz.8.3745" path="net:[4026533158]" dev="nsfs" ino=4026533158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 323.431669][ T40] audit: type=1400 audit(823.442:12996): avc: denied { shutdown } for pid=18412 comm="syz.8.3745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 323.478182][ T40] audit: type=1400 audit(823.498:12997): avc: denied { mount } for pid=18419 comm="syz.8.3747" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 323.482198][T18420] FAULT_INJECTION: forcing a failure. [ 323.482198][T18420] name failslab, interval 1, probability 0, space 0, times 0 [ 323.491394][T18420] CPU: 0 UID: 0 PID: 18420 Comm: syz.8.3747 Not tainted syzkaller #0 PREEMPT(full) [ 323.491409][T18420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 323.491416][T18420] Call Trace: [ 323.491420][T18420] [ 323.491425][T18420] dump_stack_lvl+0x16c/0x1f0 [ 323.491440][T18420] should_fail_ex+0x512/0x640 [ 323.491458][T18420] ? kmem_cache_alloc_lru_noprof+0x66/0x720 [ 323.491478][T18420] should_failslab+0xc2/0x120 [ 323.491492][T18420] kmem_cache_alloc_lru_noprof+0x79/0x720 [ 323.491510][T18420] ? __d_alloc+0x35/0xa80 [ 323.491529][T18420] ? __d_alloc+0x35/0xa80 [ 323.491543][T18420] __d_alloc+0x35/0xa80 [ 323.491561][T18420] d_alloc_parallel+0x111/0x1510 [ 323.491574][T18420] ? find_held_lock+0x2b/0x80 [ 323.491589][T18420] ? __pfx_d_alloc_parallel+0x10/0x10 [ 323.491601][T18420] ? map_id_range_up+0x2ce/0x3b0 [ 323.491614][T18420] ? lockdep_init_map_type+0x5c/0x270 [ 323.491630][T18420] ? lockdep_init_map_type+0x5c/0x270 [ 323.491647][T18420] __lookup_slow+0x193/0x460 [ 323.491658][T18420] ? __pfx___lookup_slow+0x10/0x10 [ 323.491670][T18420] ? irq_entries_start+0xd0/0xcb0 [ 323.491685][T18420] ? irq_entries_start+0xd0/0xcb0 [ 323.491700][T18420] lookup_slow+0x50/0x70 [ 323.491710][T18420] lookup_one_unlocked+0xa0/0xd0 [ 323.491725][T18420] ovl_lookup_single+0x435/0x1330 [ 323.491745][T18420] ? arch_stack_walk+0xa6/0x100 [ 323.491759][T18420] ? __pfx_ovl_lookup_single+0x10/0x10 [ 323.491779][T18420] ovl_lookup_layer+0x3d4/0x480 [ 323.491798][T18420] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 323.491813][T18420] ? xa_load+0x153/0x2c0 [ 323.491833][T18420] ovl_lookup_layers+0x341/0x2920 [ 323.491852][T18420] ? __lock_acquire+0x433/0x22f0 [ 323.491866][T18420] ? lock_acquire+0x179/0x330 [ 323.491882][T18420] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 323.491901][T18420] ? find_held_lock+0x2b/0x80 [ 323.491912][T18420] ? rcu_read_unlock+0x17/0x60 [ 323.491931][T18420] ovl_lookup+0x459/0x610 [ 323.491940][T18420] ? __pfx_ovl_lookup+0x10/0x10 [ 323.491950][T18420] ? rcu_is_watching+0x12/0xc0 [ 323.491964][T18420] ? do_raw_spin_lock+0x12c/0x2b0 [ 323.491984][T18420] ? do_raw_spin_unlock+0x172/0x230 [ 323.492000][T18420] ? _raw_spin_unlock+0x28/0x50 [ 323.492018][T18420] lookup_one_qstr_excl+0x1d1/0x250 [ 323.492028][T18420] ? mnt_want_write+0x161/0x450 [ 323.492042][T18420] do_unlinkat+0x27b/0x660 [ 323.492057][T18420] ? __might_fault+0xe3/0x190 [ 323.492073][T18420] ? __pfx_do_unlinkat+0x10/0x10 [ 323.492094][T18420] ? getname_flags.part.0+0x1c5/0x550 [ 323.492106][T18420] __x64_sys_unlink+0xc5/0x110 [ 323.492121][T18420] do_syscall_64+0xcd/0xf80 [ 323.492133][T18420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.492156][T18420] RIP: 0033:0x7f28c798f7c9 [ 323.492165][T18420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.492176][T18420] RSP: 002b:00007f28c87c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 323.492187][T18420] RAX: ffffffffffffffda RBX: 00007f28c7be5fa0 RCX: 00007f28c798f7c9 [ 323.492193][T18420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 323.492199][T18420] RBP: 00007f28c87c3090 R08: 0000000000000000 R09: 0000000000000000 [ 323.492206][T18420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.492212][T18420] R13: 00007f28c7be6038 R14: 00007f28c7be5fa0 R15: 00007ffe357d1e18 [ 323.492227][T18420] [ 323.496059][ T40] audit: type=1400 audit(823.507:12998): avc: denied { create } for pid=18421 comm="syz.7.3748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 323.666561][T18429] loop2: detected capacity change from 0 to 7 [ 323.671383][T18429] loop2: p1 [ 323.672593][T18429] loop2: partition table partially beyond EOD, truncated [ 323.674981][T18429] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 323.746483][T14671] usb 14-1: USB disconnect, device number 3 [ 323.896590][T18448] x_tables: ip_tables: osf match: only valid for protocol 6 [ 324.365629][T18462] loop2: detected capacity change from 0 to 7 [ 324.368636][T18462] loop2: p1 [ 324.370059][T18462] loop2: partition table partially beyond EOD, truncated [ 324.373048][T18462] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 325.132356][ T6153] usb 13-1: new full-speed USB device number 10 using dummy_hcd [ 325.294073][ T6153] usb 13-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 325.298057][ T6153] usb 13-1: config 0 interface 0 has no altsetting 0 [ 325.315637][ T6153] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 325.319430][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803bd28400: rx timeout, send abort [ 325.323011][ T6153] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 325.326412][ T6153] usb 13-1: Product: syz [ 325.328178][ T6153] usb 13-1: Manufacturer: syz [ 325.330153][ T6153] usb 13-1: SerialNumber: syz [ 325.333246][ T6153] usb 13-1: config 0 descriptor?? [ 325.339645][ T6153] usb 13-1: selecting invalid altsetting 0 [ 325.378233][ T6065] usb 8-1: USB disconnect, device number 31 [ 325.408955][T18500] __nla_validate_parse: 4 callbacks suppressed [ 325.408966][T18500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3772'. [ 325.506875][T18504] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3774'. [ 325.563459][T14669] usb 13-1: USB disconnect, device number 10 [ 325.682275][T18515] overlay: Unknown parameter '/' [ 325.712225][T18519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3778'. [ 325.854130][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803bd28400: abort rx timeout. Force session deactivation [ 326.062670][ T6065] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 326.130777][T18527] overlayfs: upper fs does not support file handles, falling back to index=off. [ 326.167348][T18530] loop2: detected capacity change from 0 to 7 [ 326.170726][T18530] loop2: p1 [ 326.172158][T18530] loop2: partition table partially beyond EOD, truncated [ 326.175282][T18530] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 326.222974][ T6065] usb 8-1: Using ep0 maxpacket: 8 [ 326.234706][ T6065] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 326.238960][ T6065] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.245494][ T6065] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 326.249580][ T6065] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.259655][ T6065] usbtmc 8-1:16.0: bulk endpoints not found [ 326.339651][T18541] overlayfs: failed to resolve './file1': -2 [ 326.643577][T18555] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 326.710158][T18562] loop2: detected capacity change from 0 to 7 [ 326.713330][T18562] loop2: p1 [ 326.714995][T18562] loop2: partition table partially beyond EOD, truncated [ 326.717704][T18562] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 326.798948][T18566] team0: Device xfrm1 is of different type [ 327.489315][T18590] loop2: detected capacity change from 0 to 7 [ 327.496829][T18590] loop2: p1 [ 327.498365][T18590] loop2: partition table partially beyond EOD, truncated [ 327.501333][T18590] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 327.588306][T18593] rtc_cmos 00:05: Alarms can be up to one day in the future [ 327.675807][T18598] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3806'. [ 327.679933][T18598] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3806'. [ 327.681610][T18573] kvm: kvm [18572]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xaa0f [ 327.686949][T18573] kvm: kvm [18572]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xaac1 [ 327.702558][T18573] kvm: kvm [18572]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x34d2 [ 327.818111][T18609] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 328.606513][T18617] tmpfs: Unknown parameter 'qTotasrquota_inodeHhardlimit' [ 328.612277][ T40] kauditd_printk_skb: 171 callbacks suppressed [ 328.612287][ T40] audit: type=1400 audit(828.305:13170): avc: denied { unlink } for pid=18616 comm="syz.9.3810" name="#98" dev="tmpfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 328.621943][ T40] audit: type=1400 audit(828.305:13171): avc: denied { mount } for pid=18616 comm="syz.9.3810" name="/" dev="overlay" ino=339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 328.630203][ T40] audit: type=1400 audit(828.324:13172): avc: denied { create } for pid=18616 comm="syz.9.3810" name="#9a" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 328.637207][ T40] audit: type=1400 audit(828.324:13173): avc: denied { link } for pid=18616 comm="syz.9.3810" name="#9a" dev="tmpfs" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 328.644409][ T40] audit: type=1400 audit(828.324:13174): avc: denied { rename } for pid=18616 comm="syz.9.3810" name="#9b" dev="tmpfs" ino=346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 328.655238][ T40] audit: type=1400 audit(828.342:13175): avc: denied { unmount } for pid=17862 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 328.734648][ T40] audit: type=1400 audit(828.408:13176): avc: denied { read } for pid=18620 comm="syz.9.3812" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 328.742687][ T40] audit: type=1400 audit(828.408:13177): avc: denied { open } for pid=18620 comm="syz.9.3812" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 328.965266][ T40] audit: type=1400 audit(828.632:13178): avc: denied { write } for pid=18620 comm="syz.9.3812" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 328.978404][ T40] audit: type=1400 audit(828.642:13179): avc: denied { allowed } for pid=18620 comm="syz.9.3812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 329.023671][ T6065] usb 8-1: USB disconnect, device number 32 [ 329.290803][T18630] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.3815'. [ 329.783612][ T74] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 329.806021][T18656] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 329.954700][ T74] usb 8-1: Using ep0 maxpacket: 8 [ 329.958045][ T74] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 329.961600][ T74] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.966034][ T74] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 329.969142][ T74] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.974289][ T74] usbtmc 8-1:16.0: bulk endpoints not found [ 330.273769][T18659] openvswitch: netlink: Key type 181 is out of range max 32 [ 330.316322][T18663] rdma_rxe: rxe_newlink: failed to add lo [ 331.278366][T18673] sp0: Synchronizing with TNC [ 331.292270][T18672] [U] [ 331.329203][T18687] syz1: rxe_newlink: already configured on xfrm0 [ 331.571087][T18705] binder: Binderfs stats mode cannot be changed during a remount [ 331.620884][T18709] hugetlbfs: syz.9.3841 (18709): Using mlock ulimits for SHM_HUGETLB is obsolete [ 331.722415][T18717] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 331.725470][T18717] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 331.740005][T18717] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3843'. [ 331.969092][T18725] tmpfs: Unknown parameter 'usrquota_inode_hard`it' [ 332.010152][T18728] ip6t_rpfilter: unknown options [ 332.080394][T18734] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3849'. [ 332.140504][T18741] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 332.167516][T18743] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 332.170623][T18743] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 332.184350][T18743] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3852'. [ 332.386094][T18750] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 332.749268][ T6153] usb 8-1: USB disconnect, device number 33 [ 332.851619][T18762] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 333.683222][T18776] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 333.687390][T18776] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 333.889086][T18776] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3862'. [ 333.895643][T18765] xfrm0 speed is unknown, defaulting to 1000 [ 333.961605][T18782] loop2: detected capacity change from 0 to 7 [ 333.966154][T18782] loop2: p1 [ 333.967382][T18782] loop2: partition table partially beyond EOD, truncated [ 333.969785][T18782] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 333.981405][T18764] xfrm0 speed is unknown, defaulting to 1000 [ 333.983327][ T40] kauditd_printk_skb: 139 callbacks suppressed [ 333.983337][ T40] audit: type=1400 audit(833.318:13319): avc: denied { write } for pid=18779 comm="syz.9.3863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 334.009888][ T40] audit: type=1400 audit(833.346:13320): avc: denied { map } for pid=18784 comm="syz.7.3866" path="socket:[87686]" dev="sockfs" ino=87686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 334.017844][ T40] audit: type=1400 audit(833.346:13321): avc: denied { read } for pid=18784 comm="syz.7.3866" path="socket:[87686]" dev="sockfs" ino=87686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 334.025975][ T40] audit: type=1400 audit(833.355:13322): avc: denied { create } for pid=18784 comm="syz.7.3866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 334.033723][ T40] audit: type=1400 audit(833.355:13323): avc: denied { bind } for pid=18784 comm="syz.7.3866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 334.042559][ T40] audit: type=1400 audit(833.355:13324): avc: denied { setopt } for pid=18784 comm="syz.7.3866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 334.050405][ T40] audit: type=1400 audit(833.355:13325): avc: denied { accept } for pid=18784 comm="syz.7.3866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 334.058193][ T40] audit: type=1400 audit(833.355:13326): avc: denied { write } for pid=18784 comm="syz.7.3866" path="socket:[87688]" dev="sockfs" ino=87688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 334.067313][ T40] audit: type=1400 audit(833.355:13327): avc: denied { read } for pid=18784 comm="syz.7.3866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 334.173090][ T40] audit: type=1400 audit(833.495:13328): avc: denied { allowed } for pid=18790 comm="syz.8.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 334.241332][T18793] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 334.248485][T18793] overlayfs: missing 'lowerdir' [ 334.447044][T18795] openvswitch: netlink: IP tunnel dst address not specified [ 334.506661][T18797] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.612636][T18797] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.651363][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.666194][T18797] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.794014][T18797] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.878679][ T9692] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.888000][ T9699] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.891795][T18808] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 334.894950][T18808] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 334.906480][ T9699] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.910430][ T9699] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.922185][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3873'. [ 334.989867][T18815] bond41: option downdelay: invalid value (18446744073709551615) [ 334.994832][T18815] bond41: option downdelay: allowed values 0 - 2147483647 [ 334.999046][T18815] bond41 (unregistering): Released all slaves [ 335.104477][T18836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.107411][T18836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.109773][T18838] FAULT_INJECTION: forcing a failure. [ 335.109773][T18838] name failslab, interval 1, probability 0, space 0, times 0 [ 335.112307][T18836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3878'. [ 335.116673][T18838] CPU: 1 UID: 0 PID: 18838 Comm: syz.9.3884 Not tainted syzkaller #0 PREEMPT(full) [ 335.116696][T18838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 335.116706][T18838] Call Trace: [ 335.116713][T18838] [ 335.116720][T18838] dump_stack_lvl+0x16c/0x1f0 [ 335.116751][T18838] should_fail_ex+0x512/0x640 [ 335.116780][T18838] ? fs_reclaim_acquire+0xae/0x150 [ 335.116802][T18838] should_failslab+0xc2/0x120 [ 335.116824][T18838] __kmalloc_noprof+0xdd/0x870 [ 335.116847][T18838] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 335.116877][T18838] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 335.116900][T18838] tomoyo_realpath_from_path+0xc2/0x6e0 [ 335.116926][T18838] ? tomoyo_profile+0x47/0x60 [ 335.116945][T18838] tomoyo_path_number_perm+0x245/0x580 [ 335.116965][T18838] ? tomoyo_path_number_perm+0x237/0x580 [ 335.116994][T18838] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 335.117016][T18838] ? find_held_lock+0x2b/0x80 [ 335.117056][T18838] ? find_held_lock+0x2b/0x80 [ 335.117072][T18838] ? hook_file_ioctl_common+0x145/0x410 [ 335.117095][T18838] ? __fget_files+0x20e/0x3c0 [ 335.117121][T18838] security_file_ioctl+0x9b/0x240 [ 335.117147][T18838] __x64_sys_ioctl+0xb7/0x210 [ 335.117167][T18838] do_syscall_64+0xcd/0xf80 [ 335.117186][T18838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.117203][T18838] RIP: 0033:0x7fc57a58f7c9 [ 335.117216][T18838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.117231][T18838] RSP: 002b:00007fc57b466038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.117247][T18838] RAX: ffffffffffffffda RBX: 00007fc57a7e5fa0 RCX: 00007fc57a58f7c9 [ 335.117257][T18838] RDX: 0000200000000000 RSI: 00000000c02c563a RDI: 0000000000000003 [ 335.117266][T18838] RBP: 00007fc57b466090 R08: 0000000000000000 R09: 0000000000000000 [ 335.117276][T18838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.117285][T18838] R13: 00007fc57a7e6038 R14: 00007fc57a7e5fa0 R15: 00007ffcdee8bda8 [ 335.117307][T18838] [ 335.117314][T18838] ERROR: Out of memory at tomoyo_realpath_from_path. [ 335.166278][T18843] fuse: Bad value for 'fd' [ 335.260494][T18854] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 335.263291][T18854] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 335.292569][T18854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3887'. [ 335.446298][T18872] FAULT_INJECTION: forcing a failure. [ 335.446298][T18872] name failslab, interval 1, probability 0, space 0, times 0 [ 335.451986][T18872] CPU: 3 UID: 0 PID: 18872 Comm: syz.8.3895 Not tainted syzkaller #0 PREEMPT(full) [ 335.452011][T18872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 335.452022][T18872] Call Trace: [ 335.452028][T18872] [ 335.452033][T18872] dump_stack_lvl+0x16c/0x1f0 [ 335.452053][T18872] should_fail_ex+0x512/0x640 [ 335.452076][T18872] ? fs_reclaim_acquire+0xae/0x150 [ 335.452096][T18872] should_failslab+0xc2/0x120 [ 335.452115][T18872] __kmalloc_noprof+0xdd/0x870 [ 335.452136][T18872] ? tomoyo_encode2+0x100/0x3e0 [ 335.452161][T18872] ? tomoyo_encode2+0x100/0x3e0 [ 335.452182][T18872] tomoyo_encode2+0x100/0x3e0 [ 335.452206][T18872] tomoyo_encode+0x29/0x50 [ 335.452226][T18872] tomoyo_realpath_from_path+0x18f/0x6e0 [ 335.452255][T18872] tomoyo_path_number_perm+0x245/0x580 [ 335.452273][T18872] ? tomoyo_path_number_perm+0x237/0x580 [ 335.452294][T18872] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 335.452314][T18872] ? find_held_lock+0x2b/0x80 [ 335.452347][T18872] ? find_held_lock+0x2b/0x80 [ 335.452360][T18872] ? hook_file_ioctl_common+0x145/0x410 [ 335.452381][T18872] ? __fget_files+0x20e/0x3c0 [ 335.452404][T18872] security_file_ioctl+0x9b/0x240 [ 335.452427][T18872] __x64_sys_ioctl+0xb7/0x210 [ 335.452445][T18872] do_syscall_64+0xcd/0xf80 [ 335.452461][T18872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.452476][T18872] RIP: 0033:0x7f28c798f7c9 [ 335.452487][T18872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.452501][T18872] RSP: 002b:00007f28c87c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.452516][T18872] RAX: ffffffffffffffda RBX: 00007f28c7be5fa0 RCX: 00007f28c798f7c9 [ 335.452525][T18872] RDX: 0000200000000000 RSI: 00000000c02c563a RDI: 0000000000000003 [ 335.452535][T18872] RBP: 00007f28c87c3090 R08: 0000000000000000 R09: 0000000000000000 [ 335.452543][T18872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.452551][T18872] R13: 00007f28c7be6038 R14: 00007f28c7be5fa0 R15: 00007ffe357d1e18 [ 335.452571][T18872] [ 335.452586][T18872] ERROR: Out of memory at tomoyo_realpath_from_path. [ 335.580049][T18881] netlink: 'syz.8.3897': attribute type 1 has an invalid length. [ 335.693072][T18893] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 335.696154][T18893] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 335.711329][T18893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3902'. [ 335.877040][T18895] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 335.929398][T18899] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 336.075781][T18907] FAULT_INJECTION: forcing a failure. [ 336.075781][T18907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.081818][T18907] CPU: 0 UID: 0 PID: 18907 Comm: syz.7.3905 Not tainted syzkaller #0 PREEMPT(full) [ 336.081841][T18907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 336.081852][T18907] Call Trace: [ 336.081858][T18907] [ 336.081864][T18907] dump_stack_lvl+0x16c/0x1f0 [ 336.081906][T18907] should_fail_ex+0x512/0x640 [ 336.081936][T18907] _copy_from_user+0x2e/0xd0 [ 336.081954][T18907] video_usercopy+0xee2/0x16c0 [ 336.081975][T18907] ? __pfx___video_do_ioctl+0x10/0x10 [ 336.081993][T18907] ? selinux_kernel_read_file+0x60/0x130 [ 336.082017][T18907] ? __pfx_video_usercopy+0x10/0x10 [ 336.082052][T18907] v4l2_ioctl+0x1bd/0x250 [ 336.082068][T18907] ? __pfx_v4l2_ioctl+0x10/0x10 [ 336.082087][T18907] __x64_sys_ioctl+0x18e/0x210 [ 336.082108][T18907] do_syscall_64+0xcd/0xf80 [ 336.082132][T18907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.082147][T18907] RIP: 0033:0x7f1df8f8f7c9 [ 336.082160][T18907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.082176][T18907] RSP: 002b:00007f1df9eb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 336.082192][T18907] RAX: ffffffffffffffda RBX: 00007f1df91e5fa0 RCX: 00007f1df8f8f7c9 [ 336.082203][T18907] RDX: 0000200000000000 RSI: 00000000c02c563a RDI: 0000000000000003 [ 336.082214][T18907] RBP: 00007f1df9eb8090 R08: 0000000000000000 R09: 0000000000000000 [ 336.082223][T18907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.082233][T18907] R13: 00007f1df91e6038 R14: 00007f1df91e5fa0 R15: 00007fff0eb5dfd8 [ 336.082254][T18907] [ 336.087358][T18909] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 336.138885][T18914] comedi comedi3: comedi_config --init_data is deprecated [ 336.186966][T18917] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3909'. [ 336.191053][T18917] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3909'. [ 336.567938][T18926] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 336.572191][T18926] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 337.591355][T18926] __nla_validate_parse: 1 callbacks suppressed [ 337.591368][T18926] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3911'. [ 337.661749][T18937] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 337.665944][T18937] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 337.669732][T18937] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 337.672286][T18937] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 337.677443][T18937] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3915'. [ 337.756446][T18945] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 337.804699][T18949] netlink: 'syz.8.3914': attribute type 39 has an invalid length. [ 337.853787][ T9835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.857356][ T9835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.017029][ T74] usb 14-1: new full-speed USB device number 4 using dummy_hcd [ 338.179242][ T74] usb 14-1: unable to get BOS descriptor or descriptor too short [ 338.182292][ T74] usb 14-1: not running at top speed; connect to a high speed hub [ 338.185729][ T74] usb 14-1: config 129 has an invalid interface number: 135 but max is 0 [ 338.188699][ T74] usb 14-1: config 129 has an invalid interface number: 5 but max is 0 [ 338.191516][ T74] usb 14-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 338.194615][ T74] usb 14-1: config 129 has no interface number 0 [ 338.196759][ T74] usb 14-1: config 129 has no interface number 1 [ 338.199208][ T74] usb 14-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 338.203708][ T74] usb 14-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 338.207375][ T74] usb 14-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 338.211971][ T74] usb 14-1: config 129 interface 135 has no altsetting 0 [ 338.214399][ T74] usb 14-1: config 129 interface 5 has no altsetting 0 [ 338.218581][ T74] usb 14-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 338.221844][ T74] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.224653][ T74] usb 14-1: Product: syz [ 338.226160][ T74] usb 14-1: Manufacturer: syz [ 338.227936][ T74] usb 14-1: SerialNumber: syz [ 338.453317][ T74] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.455868][ T74] usb 14-1: MIDIStreaming interface descriptor not found [ 338.468960][ T74] usb 14-1: USB disconnect, device number 4 [ 338.783461][T18966] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 338.787588][T18966] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 338.800054][T18966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3923'. [ 339.175278][T18977] sctp: [Deprecated]: syz.3.3926 (pid 18977) Use of int in maxseg socket option. [ 339.175278][T18977] Use struct sctp_assoc_value instead [ 339.201475][T18980] loop2: detected capacity change from 0 to 7 [ 339.206879][T18980] loop2: p1 [ 339.208508][T18980] loop2: partition table partially beyond EOD, truncated [ 339.211764][T18980] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 339.306498][T18986] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 339.366416][ T40] kauditd_printk_skb: 171 callbacks suppressed [ 339.366433][ T40] audit: type=1400 audit(838.359:13500): avc: denied { name_bind } for pid=18985 comm="syz.7.3929" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 340.022483][ T40] audit: type=1400 audit(838.967:13501): avc: denied { create } for pid=18989 comm="syz.3.3930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.023965][T18990] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3930'. [ 340.032025][ T40] audit: type=1400 audit(838.967:13502): avc: denied { write } for pid=18989 comm="syz.3.3930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.035288][T18990] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3930'. [ 340.044317][ T40] audit: type=1400 audit(838.967:13503): avc: denied { read } for pid=18989 comm="syz.3.3930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.057306][ T40] audit: type=1400 audit(838.995:13504): avc: denied { unlink } for pid=18989 comm="syz.3.3930" name="#aa" dev="tmpfs" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 340.067411][ T40] audit: type=1400 audit(838.995:13505): avc: denied { create } for pid=18989 comm="syz.3.3930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.076622][ T40] audit: type=1400 audit(838.995:13506): avc: denied { setopt } for pid=18989 comm="syz.3.3930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.084724][ T40] audit: type=1400 audit(839.013:13507): avc: denied { ioctl } for pid=18989 comm="syz.3.3930" path="socket:[88581]" dev="sockfs" ino=88581 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.094831][ T40] audit: type=1400 audit(839.032:13508): avc: denied { write } for pid=18989 comm="syz.3.3930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 340.169246][ T40] audit: type=1400 audit(839.107:13509): avc: denied { ioctl } for pid=18991 comm="syz.3.3931" path="socket:[87964]" dev="sockfs" ino=87964 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.177026][T18992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=18992 comm=syz.3.3931 [ 340.255329][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3934'. [ 340.403230][T19008] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 340.419531][T19008] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 340.424440][T19008] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 340.427185][T19008] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 340.430650][T19008] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 340.433755][T19008] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 340.437530][T19008] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 340.440343][T19008] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 340.442974][T19008] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 340.446556][T19008] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 340.832479][T19022] syz1: rxe_newlink: already configured on xfrm0 [ 341.010682][ T6153] usb 12-1: new low-speed USB device number 21 using dummy_hcd [ 341.171101][ T6153] usb 12-1: Invalid ep0 maxpacket: 64 [ 341.310056][ T6153] usb 12-1: new low-speed USB device number 22 using dummy_hcd [ 341.470462][ T6153] usb 12-1: Invalid ep0 maxpacket: 64 [ 341.472586][ T6153] usb usb12-port1: attempt power cycle [ 341.845698][ T6153] usb 12-1: new low-speed USB device number 23 using dummy_hcd [ 341.847985][T19032] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3944'. [ 341.868872][ T6153] usb 12-1: Invalid ep0 maxpacket: 64 [ 342.005901][ T6153] usb 12-1: new low-speed USB device number 24 using dummy_hcd [ 342.026937][ T6153] usb 12-1: Invalid ep0 maxpacket: 64 [ 342.029622][ T6153] usb usb12-port1: unable to enumerate USB device [ 342.040135][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3945'. [ 342.068348][T19035] team0 (unregistering): Port device team_slave_0 removed [ 342.075456][T19035] team0 (unregistering): Port device team_slave_1 removed [ 342.588165][T19055] netlink: 2 bytes leftover after parsing attributes in process `syz.8.3950'. [ 342.589356][T19059] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3951'. [ 342.598499][T19055] macsec1: entered promiscuous mode [ 342.600885][T19055] macsec1: entered allmulticast mode [ 342.657272][T19066] loop0: detected capacity change from 0 to 7 [ 342.659644][T19066] Dev loop0: unable to read RDB block 7 [ 342.661265][T19066] loop0: AHDI p1 p2 p3 [ 342.662536][T19066] loop0: partition table partially beyond EOD, truncated [ 342.664634][T19066] loop0: p1 start 1818582900 is beyond EOD, truncated [ 342.666610][T19066] loop0: p3 start 335544320 is beyond EOD, truncated [ 342.791272][T19080] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 343.331585][ T74] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 343.518280][ T74] usb 14-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 343.521638][ T74] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.530501][ T74] usb 14-1: Product: syz [ 343.532106][ T74] usb 14-1: Manufacturer: syz [ 343.533844][ T74] usb 14-1: SerialNumber: syz [ 343.633697][T19085] loop2: detected capacity change from 0 to 7 [ 343.637573][T19085] loop2: p1 [ 343.638996][T19085] loop2: partition table partially beyond EOD, truncated [ 343.642815][T19085] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 343.753696][ T74] lan78xx 14-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 343.758063][ T74] lan78xx 14-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 343.762971][ T74] lan78xx 14-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 343.771768][ T74] lan78xx 14-1:1.0: probe with driver lan78xx failed with error -71 [ 343.777106][ T74] usb 14-1: USB disconnect, device number 5 [ 345.089957][ T6065] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 345.256763][ T6065] usb 14-1: Using ep0 maxpacket: 8 [ 345.260682][ T6065] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 345.265617][ T6065] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 345.270587][ T6065] usb 14-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 345.275374][ T6065] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.281209][ T6065] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 345.285106][ T6065] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.304447][ T6065] usbtmc 14-1:16.0: bulk endpoints not found [ 345.858880][ T40] kauditd_printk_skb: 123 callbacks suppressed [ 345.858892][ T40] audit: type=1400 audit(844.428:13633): avc: denied { mount } for pid=19109 comm="syz.8.3967" name="/" dev="9p" ino=71827863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 345.869965][ T40] audit: type=1400 audit(844.438:13634): avc: denied { create } for pid=19109 comm="syz.8.3967" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 345.879403][ T40] audit: type=1400 audit(844.438:13635): avc: denied { write } for pid=19109 comm="syz.8.3967" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 345.886854][ T40] audit: type=1400 audit(844.438:13636): avc: denied { open } for pid=19109 comm="syz.8.3967" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 345.895591][ T40] audit: type=1400 audit(844.438:13637): avc: denied { setattr } for pid=19109 comm="syz.8.3967" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 345.905254][ T40] audit: type=1400 audit(844.456:13638): avc: denied { unlink } for pid=15784 comm="syz-executor" name="file0" dev="tmpfs" ino=1607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 345.914566][ T40] audit: type=1400 audit(844.456:13639): avc: denied { unmount } for pid=15784 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 345.924686][T19113] loop2: detected capacity change from 0 to 7 [ 345.929744][T19113] loop2: p1 [ 345.931005][T19113] loop2: partition table partially beyond EOD, truncated [ 345.934094][T19113] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 345.966617][ T40] audit: type=1400 audit(844.531:13640): avc: denied { setopt } for pid=19114 comm="syz.3.3970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 345.982720][ T40] audit: type=1400 audit(844.541:13641): avc: denied { create } for pid=19114 comm="syz.3.3970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 346.037586][ T40] audit: type=1400 audit(844.597:13642): avc: denied { write } for pid=19114 comm="syz.3.3970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 346.038245][T19121] __nla_validate_parse: 2 callbacks suppressed [ 346.038255][T19121] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3970'. [ 346.214373][T19134] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3975'. [ 346.400189][ T6153] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 346.424739][T19141] binder: BINDER_SET_CONTEXT_MGR already set [ 346.426903][T19141] binder: 19140:19141 ioctl 4018620d 200000000100 returned -16 [ 346.430135][T19141] binder: BINDER_SET_CONTEXT_MGR already set [ 346.433597][T19141] binder: 19140:19141 ioctl 4018620d 200000000100 returned -16 [ 346.571009][ T6153] usb 13-1: Using ep0 maxpacket: 16 [ 346.574263][ T6153] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.578182][ T6153] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.581482][ T6153] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 346.585843][ T6153] usb 13-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 346.588985][ T6153] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.593869][ T6153] usb 13-1: config 0 descriptor?? [ 346.675846][T19150] loop2: detected capacity change from 0 to 7 [ 346.678749][T19150] loop2: p1 [ 346.680263][T19150] loop2: partition table partially beyond EOD, truncated [ 346.683439][T19150] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 347.030573][ T6153] hid_parser_main: 11 callbacks suppressed [ 347.030587][ T6153] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 347.035915][ T6153] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 347.038719][ T6153] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 347.043625][ T6153] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 347.046179][ T6153] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 347.048700][ T6153] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 347.051250][ T6153] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 347.054241][ T6153] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 347.056684][ T6153] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 347.059615][ T6153] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 347.068014][ T6153] HID 045e:07da: Invalid code 65791 type 1 [ 347.074340][T19161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3984'. [ 347.075089][ T6153] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/0003:045E:07DA.000C/input/input55 [ 347.085650][ T6153] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 347.476308][T19182] loop2: detected capacity change from 0 to 7 [ 347.478845][T19182] loop2: p1 [ 347.480816][T19182] loop2: partition table partially beyond EOD, truncated [ 347.483799][T19182] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 347.713382][T19188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65340 sclass=netlink_route_socket pid=19188 comm=syz.3.3992 [ 347.898987][T19196] /dev/sg0: Can't lookup blockdev [ 347.901287][T19196] /dev/sg0: Can't lookup blockdev [ 347.903450][T19196] /dev/sg0: Can't lookup blockdev [ 347.905487][T19196] /dev/sg0: Can't lookup blockdev [ 347.908007][T19196] /dev/sg0: Can't lookup blockdev [ 347.910413][T19196] /dev/sg0: Can't lookup blockdev [ 347.912678][T19196] /dev/sg0: Can't lookup blockdev [ 347.915370][T19196] /dev/sg0: Can't lookup blockdev [ 347.917420][T19196] /dev/sg0: Can't lookup blockdev [ 347.919659][T19196] /dev/sg0: Can't lookup blockdev [ 347.921649][T19196] /dev/sg0: Can't lookup blockdev [ 347.923709][T19196] /dev/sg0: Can't lookup blockdev [ 347.925730][T19196] /dev/sg0: Can't lookup blockdev [ 347.927827][T19196] /dev/sg0: Can't lookup blockdev [ 347.930189][T19196] /dev/sg0: Can't lookup blockdev [ 347.932322][T19196] /dev/sg0: Can't lookup blockdev [ 347.934540][T19196] /dev/sg0: Can't lookup blockdev [ 347.936482][T19198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.936606][T19196] /dev/sg0: Can't lookup blockdev [ 347.941746][T19196] /dev/sg0: Can't lookup blockdev [ 347.943725][T19196] /dev/sg0: Can't lookup blockdev [ 347.945776][T19196] /dev/sg0: Can't lookup blockdev [ 347.947798][T19196] /dev/sg0: Can't lookup blockdev [ 347.949888][T19196] /dev/sg0: Can't lookup blockdev [ 347.952108][T19196] /dev/sg0: Can't lookup blockdev [ 347.954531][T19196] /dev/sg0: Can't lookup blockdev [ 348.017418][T19209] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 348.060312][ T47] usb 14-1: USB disconnect, device number 6 [ 348.088815][T19214] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4001'. [ 348.487365][T14669] usb 13-1: reset high-speed USB device number 11 using dummy_hcd [ 349.533902][T19214] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 349.587852][T19231] loop2: detected capacity change from 0 to 7 [ 349.594992][T19231] loop2: p1 [ 349.596492][T19231] loop2: partition table partially beyond EOD, truncated [ 349.602450][T19231] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 349.621407][T19233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4007'. [ 349.624400][T19233] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4007'. [ 349.627349][T19233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4007'. [ 349.631189][T19233] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4007'. [ 349.634125][T19233] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4007'. [ 349.722946][T19247] program syz.3.4009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.009018][T19254] tmpfs: Bad value for 'mpol' [ 350.012075][T19254] tmpfs: Unknown parameter 'mpl\7 ]LIPol' [ 350.116171][T19259] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4014'. [ 350.162629][T19259] syz.7.4014: attempt to access beyond end of device [ 350.162629][T19259] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 350.167350][T19259] gfs2: error -5 reading superblock [ 350.193553][T14671] usb 13-1: USB disconnect, device number 11 [ 350.510874][T19269] xfrm0 speed is unknown, defaulting to 1000 [ 350.662432][T19281] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 350.971879][T19322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19322 comm=syz.7.4029 [ 351.097356][T19333] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 351.167767][T19324] syz.8.4030 (19324): drop_caches: 2 [ 351.264671][ T40] kauditd_printk_skb: 314 callbacks suppressed [ 351.268186][ T40] audit: type=1400 audit(849.479:13957): avc: denied { read } for pid=19349 comm="syz.8.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.283472][ T40] audit: type=1400 audit(849.497:13958): avc: denied { getopt } for pid=19349 comm="syz.8.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.312911][ T40] audit: type=1400 audit(849.525:13959): avc: denied { ioctl } for pid=19345 comm="syz.9.4037" path="/dev/uinput" dev="devtmpfs" ino=943 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 351.314284][T19347] input: syz0 as /devices/virtual/input/input57 [ 351.328919][ T40] audit: type=1400 audit(849.535:13960): avc: denied { read } for pid=5334 comm="acpid" name="js0" dev="devtmpfs" ino=3514 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 351.337827][ T40] audit: type=1400 audit(849.535:13961): avc: denied { open } for pid=5334 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3514 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 351.348678][ T40] audit: type=1400 audit(849.535:13962): avc: denied { ioctl } for pid=5334 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3514 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 351.358947][ T40] audit: type=1400 audit(849.553:13963): avc: denied { write } for pid=19355 comm="syz.3.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 351.369655][ T40] audit: type=1400 audit(849.563:13964): avc: denied { read append } for pid=19345 comm="syz.9.4037" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 351.381328][ T40] audit: type=1400 audit(849.563:13965): avc: denied { open } for pid=19345 comm="syz.9.4037" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 351.391181][ T40] audit: type=1400 audit(849.563:13966): avc: denied { create } for pid=19355 comm="syz.3.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 351.450654][T19363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.476890][T19363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.495638][T19365] __nla_validate_parse: 6 callbacks suppressed [ 351.495654][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4044'. [ 351.504757][T19365] netlink: 'syz.3.4044': attribute type 15 has an invalid length. [ 351.508088][T19365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4044'. [ 351.518897][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4044'. [ 351.522943][T19365] netlink: 'syz.3.4044': attribute type 15 has an invalid length. [ 351.526400][T19365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4044'. [ 351.693390][T19372] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 351.697432][T19372] syz.3.4047 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 351.750600][T19374] ISOFS: Unable to identify CD-ROM format. [ 351.965190][T19383] veth7: entered promiscuous mode [ 351.998549][T19388] xfrm0 speed is unknown, defaulting to 1000 [ 352.248532][ T47] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 352.766303][T19410] loop2: detected capacity change from 0 to 7 [ 352.769271][T19410] loop2: p1 [ 352.770743][T19410] loop2: partition table partially beyond EOD, truncated [ 352.774410][T19410] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 353.064417][T19424] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4065'. [ 353.873943][T19474] kAFS: No cell specified [ 353.879442][T19474] Option '_n'tr1ZQ3-ֵkXv~' to dns_resolver key: bad/missing value [ 353.959345][T19476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4080'. [ 353.963632][T19476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4080'. [ 354.004690][T19480] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 354.185845][T19482] netlink: 'syz.8.4082': attribute type 10 has an invalid length. [ 354.394768][T19488] netlink: 'syz.3.4084': attribute type 1 has an invalid length. [ 354.399791][T19488] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 354.652384][T19509] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 354.663561][T19509] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.689417][T19515] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4092'. [ 354.721365][T19517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.770573][T19509] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 354.775487][T19509] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.867789][T19509] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 354.872415][T19509] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.014667][T19509] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 355.018984][T19509] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.045454][T19527] block nbd9: shutting down sockets [ 355.113514][T19529] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 355.161069][T19531] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4098'. [ 355.192771][T19533] netlink: 'syz.9.4099': attribute type 5 has an invalid length. [ 355.195477][ T9252] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 355.198562][ T9252] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.210740][ T9252] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 355.213556][ T9252] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.233299][ T9692] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 355.237214][ T9692] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.251379][ T9692] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 355.255678][ T9692] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.587576][T19563] loop2: detected capacity change from 0 to 7 [ 355.590175][T19563] loop2: p1 [ 355.591301][T19563] loop2: partition table partially beyond EOD, truncated [ 355.593699][T19563] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 355.627794][T19568] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 355.630167][T19568] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 355.634338][T19568] vhci_hcd vhci_hcd.0: Device attached [ 355.641790][T19569] usbip_core: unknown command [ 355.643433][T19569] vhci_hcd: unknown pdu 0 [ 355.644935][T19569] usbip_core: unknown command [ 355.646754][ T9692] vhci_hcd: stop threads [ 355.648982][ T9692] vhci_hcd: release socket [ 355.650776][ T9692] vhci_hcd: disconnect device [ 355.798763][T19573] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4113'. [ 356.123567][T19581] kernel profiling enabled (shift: 6) [ 356.505180][T19610] Falling back ldisc for ttyprintk. [ 356.664129][ T40] kauditd_printk_skb: 258 callbacks suppressed [ 356.664141][ T40] audit: type=1400 audit(854.529:14225): avc: denied { load_policy } for pid=19618 comm="syz.9.4129" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 356.667787][T19619] SELinux: ebitmap: truncated map [ 356.679973][T19619] SELinux: failed to load policy [ 356.756142][ T40] audit: type=1400 audit(854.622:14226): avc: denied { create } for pid=19624 comm="syz.3.4131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 356.766706][ T40] audit: type=1400 audit(854.632:14227): avc: denied { allowed } for pid=19624 comm="syz.3.4131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 356.772953][ T40] audit: type=1400 audit(854.632:14228): avc: denied { create } for pid=19624 comm="syz.3.4131" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 356.779835][ T40] audit: type=1400 audit(854.632:14229): avc: denied { map } for pid=19624 comm="syz.3.4131" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=93549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 356.787995][ T40] audit: type=1400 audit(854.632:14230): avc: denied { read write } for pid=19624 comm="syz.3.4131" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=93549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 356.858174][ T40] audit: type=1400 audit(854.716:14231): avc: denied { create } for pid=19628 comm="syz.9.4132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 356.866790][T19629] delete_channel: no stack [ 356.913652][ T40] audit: type=1400 audit(854.772:14232): avc: denied { module_request } for pid=19631 comm="syz.9.4133" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 356.934976][ T40] audit: type=1400 audit(854.791:14233): avc: denied { sys_module } for pid=19631 comm="syz.9.4133" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 356.967357][ T40] audit: type=1400 audit(854.819:14234): avc: denied { write } for pid=19631 comm="syz.9.4133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 356.984046][T19636] blktrace: Concurrent blktraces are not allowed on loop4 [ 357.068212][T19644] CIFS mount error: No usable UNC path provided in device string! [ 357.068212][T19644] [ 357.071805][T19644] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 357.267249][T19650] netlink: 'syz.3.4139': attribute type 1 has an invalid length. [ 357.310442][T19659] __nla_validate_parse: 6 callbacks suppressed [ 357.310458][T19659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4142'. [ 357.316610][T19659] netlink: 'syz.3.4142': attribute type 7 has an invalid length. [ 357.320135][T19659] netlink: 'syz.3.4142': attribute type 8 has an invalid length. [ 357.323043][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4142'. [ 357.332173][T19659] erspan0: entered promiscuous mode [ 357.414117][T19659] erspan0: left promiscuous mode [ 357.538985][T19668] netlink: 348 bytes leftover after parsing attributes in process `syz.3.4144'. [ 357.600351][T19672] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 357.630888][T19679] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4149'. [ 357.635655][T19679] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4149'. [ 357.842818][T19695] netlink: set zone limit has 4 unknown bytes [ 357.847476][T19695] overlay: filesystem on ./bus is read-only [ 358.151743][T19709] overlayfs: failed lookup in lower (newroot/334, name='file1', err=-40): overlapping layers [ 359.092876][T19722] fuse: Bad value for 'fd' [ 359.093043][T19721] fuse: Bad value for 'fd' [ 359.096820][T19722] fuse: Bad value for 'fd' [ 359.096905][T19721] fuse: Bad value for 'fd' [ 359.898403][T19745] loop2: detected capacity change from 0 to 7 [ 359.900939][T19745] loop2: p1 [ 359.902153][T19745] loop2: partition table partially beyond EOD, truncated [ 359.905235][T19745] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 360.142729][ T6065] hid-generic 0005:0006:5508.000D: hidraw0: BLUETOOTH HID vc3.34 Device [syz0] on aa:aa:aa:aa:aa:aa [ 360.197060][T19765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4180'. [ 360.197803][T19766] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4179'. [ 360.201745][T19765] netlink: 360 bytes leftover after parsing attributes in process `syz.3.4180'. [ 360.276981][T19771] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4182'. [ 360.280938][T19772] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4182'. [ 360.332168][ T74] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 360.366137][ T5948] Bluetooth: hci4: sending frame failed (-49) [ 360.368875][ T5300] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 360.481751][ T74] usb 13-1: device descriptor read/64, error -71 [ 360.749059][ T74] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 360.898949][ T74] usb 13-1: device descriptor read/64, error -71 [ 361.016550][ T74] usb usb13-port1: attempt power cycle [ 361.044958][T19780] loop2: detected capacity change from 0 to 7 [ 361.048120][T19780] loop2: p1 [ 361.049766][T19780] loop2: partition table partially beyond EOD, truncated [ 361.052885][T19780] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 361.254713][T19789] usb usb7: usbfs: process 19789 (syz.7.4188) did not claim interface 2 before use [ 361.401428][ T74] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 361.423324][ T74] usb 13-1: device descriptor read/8, error -71 [ 361.581590][T19805] FAT-fs (nullb0): bogus number of reserved sectors [ 361.585134][T19805] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 361.636608][ T6153] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 361.703070][ T74] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 361.722883][ T74] usb 13-1: device descriptor read/8, error -71 [ 361.798381][ T6153] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 361.801964][ T6153] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 361.806698][ T6153] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 361.811371][ T6153] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 361.816082][ T6153] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 361.822553][ T6153] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 361.826183][ T6153] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 361.828655][ T6153] usb 12-1: Product: syz [ 361.830339][ T6153] usb 12-1: Manufacturer: syz [ 361.834639][ T6153] cdc_wdm 12-1:1.0: skipping garbage [ 361.836485][ T6153] cdc_wdm 12-1:1.0: skipping garbage [ 361.839236][ T6153] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 361.842348][ T6153] cdc_wdm 12-1:1.0: Unknown control protocol [ 361.850799][ T74] usb usb13-port1: unable to enumerate USB device [ 361.893221][T14667] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 362.053515][T14667] usb 8-1: Using ep0 maxpacket: 8 [ 362.056616][T14667] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 362.060007][T14667] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 362.063221][T14667] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65312, setting to 1024 [ 362.067170][T14667] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 362.070505][T14667] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.074759][T14667] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 362.077857][T14667] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.297244][T14667] usb 8-1: GET_CAPABILITIES returned 0 [ 362.301612][T14667] usbtmc 8-1:16.0: can't read capabilities [ 362.325297][T19809] loop2: detected capacity change from 0 to 7 [ 362.327886][T19809] loop2: p1 [ 362.329054][T19809] loop2: partition table partially beyond EOD, truncated [ 362.331571][T19809] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 362.361000][ T40] kauditd_printk_skb: 161 callbacks suppressed [ 362.361012][ T40] audit: type=1400 audit(859.860:14396): avc: denied { append } for pid=19810 comm="syz.9.4196" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 362.422687][ T40] audit: type=1400 audit(859.916:14397): avc: denied { allowed } for pid=19817 comm="syz.9.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 362.430113][ T40] audit: type=1400 audit(859.935:14398): avc: denied { create } for pid=19817 comm="syz.9.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 362.436807][ T40] audit: type=1400 audit(859.935:14399): avc: denied { create } for pid=19817 comm="syz.9.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 362.503022][ T40] audit: type=1400 audit(860.000:14400): avc: denied { read } for pid=19819 comm="syz.9.4199" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 362.513116][ T40] audit: type=1400 audit(860.000:14401): avc: denied { open } for pid=19819 comm="syz.9.4199" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 362.517004][T19807] netlink: 'syz.3.4194': attribute type 1 has an invalid length. [ 362.525574][ T40] audit: type=1400 audit(860.000:14402): avc: denied { ioctl } for pid=19819 comm="syz.9.4199" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 362.530688][T19807] erspan1: entered allmulticast mode [ 362.604922][T14667] usb 8-1: USB disconnect, device number 35 [ 363.211919][T19826] __nla_validate_parse: 2 callbacks suppressed [ 363.211931][T19826] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4201'. [ 363.241382][ T40] audit: type=1400 audit(860.692:14403): avc: denied { map } for pid=19827 comm="syz.3.4202" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=93843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 363.251137][ T40] audit: type=1400 audit(860.692:14404): avc: denied { read write } for pid=19827 comm="syz.3.4202" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=93843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 363.340811][T19833] loop9: detected capacity change from 0 to 7 [ 363.343446][T19833] Dev loop9: unable to read RDB block 7 [ 363.345329][T19833] loop9: AHDI p1 [ 363.346582][T19833] loop9: partition table partially beyond EOD, truncated [ 363.404781][T19833] netlink: 'syz.8.4204': attribute type 3 has an invalid length. [ 363.419976][ T40] audit: type=1400 audit(860.851:14405): avc: denied { execmem } for pid=19834 comm="syz.9.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 363.439425][T19837] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4206'. [ 363.516950][T19847] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4209'. [ 363.538628][T19847] 8021q: adding VLAN 0 to HW filter on device bond3 [ 363.566852][T19847] macsec2: entered allmulticast mode [ 363.569358][T19847] bond3: entered allmulticast mode [ 363.574314][T19847] bond3: left allmulticast mode [ 363.915064][T19881] cgroup: none used incorrectly [ 364.149758][T19893] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4222'. [ 364.206625][T19904] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 364.253961][T19909] loop2: detected capacity change from 0 to 7 [ 364.289146][T19909] loop2: p1 [ 364.290311][T19909] loop2: partition table partially beyond EOD, truncated [ 364.292775][T19909] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 364.330108][ T6065] IPVS: starting estimator thread 0... [ 364.437982][T19916] IPVS: using max 47 ests per chain, 112800 per kthread [ 364.482843][T19924] syzkaller0: entered promiscuous mode [ 364.484732][T19924] syzkaller0: entered allmulticast mode [ 364.549743][T14669] usb 12-1: USB disconnect, device number 25 [ 364.752231][T19949] gfs2: gfs2 mount does not exist [ 364.764706][T19943] can: request_module (can-proto-0) failed. [ 364.819143][T19955] picdev_read: 83 callbacks suppressed [ 364.819155][T19955] kvm: pic: non byte read [ 364.910184][T19974] netlink: 152 bytes leftover after parsing attributes in process `syz.7.4247'. [ 365.048066][T19986] overlayfs: maximum fs stacking depth exceeded [ 365.054797][T19986] pim6reg: entered allmulticast mode [ 365.270570][T19995] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4253'. [ 365.956254][ T74] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 365.961724][T20015] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4260'. [ 365.965189][T20015] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4260'. [ 366.018352][T20022] xfrm0 speed is unknown, defaulting to 1000 [ 366.118398][ T74] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 366.122688][ T74] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 366.126900][ T74] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 366.130919][ T74] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.136302][T20002] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 366.138880][T20002] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 366.142942][ T74] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 366.152496][T20036] netlink: 120 bytes leftover after parsing attributes in process `syz.7.4266'. [ 366.170405][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4263'. [ 366.174016][T20022] veth1_vlan: entered allmulticast mode [ 366.186553][T20022] hpfs: Bad magic ... probably not HPFS [ 366.191301][T20022] @: renamed from vlan0 (while UP) [ 366.210266][T20036] fuse: Unknown parameter '' [ 366.357012][T20002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=20002 comm=syz.3.4256 [ 366.365182][ T74] usb 8-1: USB disconnect, device number 36 [ 366.408090][T20044] syzkaller0: entered promiscuous mode [ 366.410027][T20044] syzkaller0: entered allmulticast mode [ 366.833085][ T74] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 366.922904][T20047] loop2: detected capacity change from 0 to 7 [ 366.925824][T20047] loop2: p1 [ 366.927151][T20047] loop2: partition table partially beyond EOD, truncated [ 366.930251][T20047] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 367.017384][ T74] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 367.022303][ T74] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 367.028141][ T74] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 367.032320][ T74] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.039238][T20002] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 367.049761][ T74] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 367.204346][T20076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=20076 comm=syz.8.4278 [ 367.220082][T20078] netlink: 'syz.9.4279': attribute type 4 has an invalid length. [ 367.494254][T20087] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 367.595786][T20089] serio: Serial port ptm0 [ 367.738804][ T40] kauditd_printk_skb: 291 callbacks suppressed [ 367.738814][ T40] audit: type=1400 audit(864.891:14697): avc: denied { write } for pid=20094 comm="syz.8.4284" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 367.776515][ T40] audit: type=1400 audit(864.929:14698): avc: denied { read } for pid=20098 comm="syz.8.4285" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 367.784127][ T40] audit: type=1400 audit(864.929:14699): avc: denied { open } for pid=20098 comm="syz.8.4285" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 367.804486][T20101] loop2: detected capacity change from 0 to 7 [ 367.807244][T20101] loop2: p1 [ 367.808407][T20101] loop2: partition table partially beyond EOD, truncated [ 367.810869][T20101] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 367.850066][ T40] audit: type=1400 audit(864.994:14700): avc: denied { read } for pid=20102 comm="syz.8.4287" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 367.857840][ T40] audit: type=1400 audit(864.994:14701): avc: denied { open } for pid=20102 comm="syz.8.4287" path="/dev/dri/card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 367.867011][ T40] audit: type=1400 audit(864.994:14702): avc: denied { ioctl } for pid=20102 comm="syz.8.4287" path="/dev/dri/card2" dev="devtmpfs" ino=639 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 367.955860][T20109] autofs: Unknown parameter '/dev/bsg/2:0:0:0' [ 367.955863][ T40] audit: type=1400 audit(865.088:14703): avc: denied { read write } for pid=20107 comm="syz.8.4288" name="2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 367.955909][ T40] audit: type=1400 audit(865.088:14704): avc: denied { open } for pid=20107 comm="syz.8.4288" path="/dev/bsg/2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 367.974738][ T40] audit: type=1400 audit(865.088:14705): avc: denied { mounton } for pid=20107 comm="syz.8.4288" path="/368/file0" dev="tmpfs" ino=2016 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 368.065839][T20112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.070274][T20112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.093227][ T74] usb 8-1: USB disconnect, device number 37 [ 368.126431][ T40] audit: type=1400 audit(865.256:14706): avc: denied { ioctl } for pid=20116 comm="syz.3.4289" path="socket:[94196]" dev="sockfs" ino=94196 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 368.267187][T20083] slcan: can't register candev [ 368.274033][T20083] Falling back ldisc for ttyS3. [ 368.511891][ T74] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 368.661476][ T74] usb 8-1: device descriptor read/64, error -71 [ 368.851442][T20108] 0: renamed from hsr0 (while UP) [ 368.856717][T20108] 0: entered allmulticast mode [ 368.859030][T20108] hsr_slave_0: entered allmulticast mode [ 368.861272][T20108] hsr_slave_1: entered allmulticast mode [ 368.863420][T20108] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 368.905681][T20125] __nla_validate_parse: 5 callbacks suppressed [ 368.905691][T20125] netlink: 312 bytes leftover after parsing attributes in process `syz.8.4291'. [ 368.928845][ T74] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 368.954761][T20125] 8021q: adding VLAN 0 to HW filter on device bond4 [ 368.972322][T20125] bond4: (slave ip6gretap1): making interface the new active one [ 368.972848][T20134] loop2: detected capacity change from 0 to 7 [ 368.977073][T20125] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 368.978575][T20134] loop2: p1 [ 368.983392][T20134] loop2: partition table partially beyond EOD, truncated [ 368.985971][T20134] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 369.078516][ T74] usb 8-1: device descriptor read/64, error -71 [ 369.196379][ T74] usb usb8-port1: attempt power cycle [ 369.202630][T20146] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 369.205064][T20146] VFS: Can't find a romfs filesystem on dev nullb0. [ 369.205064][T20146] [ 369.559679][ T74] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 369.581774][ T74] usb 8-1: device descriptor read/8, error -71 [ 369.777808][T20148] netlink: 'syz.7.4300': attribute type 21 has an invalid length. [ 369.780471][T20148] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4300'. [ 369.838526][ T74] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 369.859838][ T74] usb 8-1: device descriptor read/8, error -71 [ 369.977630][ T74] usb usb8-port1: unable to enumerate USB device [ 370.166998][T20171] netlink: 207952 bytes leftover after parsing attributes in process `syz.7.4307'. [ 370.172397][T20171] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4307'. [ 370.211573][T20171] team0: Port device team_slave_0 removed [ 370.415138][T14669] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 370.586152][T14669] usb 13-1: Using ep0 maxpacket: 16 [ 370.590213][T14669] usb 13-1: config 1 interface 0 altsetting 12 bulk endpoint 0x1 has invalid maxpacket 32 [ 370.593561][T14669] usb 13-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 16 [ 370.596999][T14671] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 370.599677][T14669] usb 13-1: config 1 interface 0 has no altsetting 0 [ 370.604087][T14669] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 370.607218][T14669] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.610240][T14669] usb 13-1: Product: Я [ 370.611759][T14669] usb 13-1: Manufacturer: 㰀 [ 370.613431][T14669] usb 13-1: SerialNumber: 羕吶ધ瓶慴ࡸ賲睑옸ꍆ렁ㄬ媓瀺部볡峵䱾唜Დ亘꿞鶬Ⅱ譆鵷첈螣䘢ᩃF呦란攳㈕䍢肿ൺ焉泟칁齿돢뭖ꎸ瞵❤몏썶坋 [ 370.622184][T20173] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 370.624753][T20173] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 370.757232][T14671] usb 12-1: Using ep0 maxpacket: 32 [ 370.760767][T14671] usb 12-1: config 0 has an invalid interface number: 5 but max is 1 [ 370.763542][T14671] usb 12-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 370.766433][T14671] usb 12-1: config 0 has an invalid interface number: 116 but max is 1 [ 370.769253][T14671] usb 12-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 370.772594][T14671] usb 12-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 370.775637][T14671] usb 12-1: config 0 has an invalid descriptor of length 189, skipping remainder of the config [ 370.779204][T14671] usb 12-1: config 0 has no interface number 0 [ 370.781295][T14671] usb 12-1: config 0 has no interface number 1 [ 370.783488][T14671] usb 12-1: config 0 interface 5 altsetting 160 has an invalid descriptor for endpoint zero, skipping [ 370.787207][T14671] usb 12-1: config 0 interface 5 altsetting 160 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 370.791121][T14671] usb 12-1: config 0 interface 5 altsetting 160 bulk endpoint 0x2 has invalid maxpacket 1023 [ 370.795077][T14671] usb 12-1: config 0 interface 5 altsetting 160 has a duplicate endpoint with address 0x5, skipping [ 370.798695][T14671] usb 12-1: config 0 interface 5 altsetting 160 has an invalid descriptor for endpoint zero, skipping [ 370.802410][T14671] usb 12-1: config 0 interface 116 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 370.806497][T14671] usb 12-1: config 0 interface 116 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 370.810212][T14671] usb 12-1: config 0 interface 116 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 370.813893][T14671] usb 12-1: config 0 interface 116 altsetting 5 endpoint 0x9 has invalid maxpacket 4755, setting to 64 [ 370.817653][T14671] usb 12-1: config 0 interface 116 altsetting 5 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 370.821501][T14671] usb 12-1: config 0 interface 116 altsetting 5 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 370.825247][T14671] usb 12-1: config 0 interface 116 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 370.828940][T14671] usb 12-1: config 0 interface 116 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 370.832776][T14671] usb 12-1: config 0 interface 116 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 370.837512][T14671] usb 12-1: config 0 interface 116 altsetting 5 has 10 endpoint descriptors, different from the interface descriptor's value: 16 [ 370.843534][T14671] usb 12-1: config 0 interface 5 has no altsetting 0 [ 370.844955][T20173] dlm: non-version read from control device 0 [ 370.846655][T14671] usb 12-1: config 0 interface 116 has no altsetting 0 [ 370.861440][T14671] usb 12-1: New USB device found, idVendor=05c6, idProduct=9079, bcdDevice=14.d8 [ 370.865408][T14671] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.868116][T14671] usb 12-1: Product: syz [ 370.869534][T14671] usb 12-1: Manufacturer: syz [ 370.871225][T14671] usb 12-1: SerialNumber: syz [ 370.874566][T14669] usb 13-1: USB disconnect, device number 16 [ 370.878478][T20184] SELinux: syz.9.4312 (20184) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 370.881448][T14671] usb 12-1: config 0 descriptor?? [ 370.887742][T20182] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 370.890380][T20182] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 371.110565][T20182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.114571][T20182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.141176][T14671] usb 12-1: USB disconnect, device number 26 [ 371.374847][T20189] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 371.685114][T20204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20204 comm=syz.8.4318 [ 371.779925][T20218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4320'. [ 372.061715][ T74] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 372.234049][ T74] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 372.238360][ T74] usb 13-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 372.241386][ T74] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.245629][ T74] usb 13-1: config 0 descriptor?? [ 372.464176][ T74] usbhid 13-1:0.0: can't add hid device: -71 [ 372.466266][ T74] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 372.469953][ T74] usb 13-1: USB disconnect, device number 17 [ 372.901342][T20235] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 372.960092][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 373.039200][T20246] loop2: detected capacity change from 0 to 7 [ 373.042116][T20246] loop2: p1 [ 373.043367][T20246] loop2: partition table partially beyond EOD, truncated [ 373.046224][T20246] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 373.126582][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 373.126599][ T40] audit: type=1400 audit(869.932:14785): avc: denied { map_create } for pid=20249 comm="syz.7.4330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 373.135638][ T40] audit: type=1400 audit(869.942:14786): avc: denied { map_read map_write } for pid=20249 comm="syz.7.4330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 373.142789][ T40] audit: type=1400 audit(869.951:14787): avc: denied { allowed } for pid=20249 comm="syz.7.4330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 373.152154][ T40] audit: type=1400 audit(869.951:14788): avc: denied { create } for pid=20249 comm="syz.7.4330" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 373.159290][ T40] audit: type=1400 audit(869.951:14789): avc: denied { map } for pid=20249 comm="syz.7.4330" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 373.168042][ T40] audit: type=1400 audit(869.951:14790): avc: denied { read write } for pid=20249 comm="syz.7.4330" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=101442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 373.366615][ T40] audit: type=1400 audit(870.157:14791): avc: denied { create } for pid=20268 comm="syz.7.4339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 373.543108][ T40] audit: type=1400 audit(870.316:14792): avc: denied { relabelfrom } for pid=20279 comm="syz.7.4344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 373.549909][ T40] audit: type=1400 audit(870.325:14793): avc: denied { relabelto } for pid=20279 comm="syz.7.4344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 374.181724][T20284] syzkaller0: entered promiscuous mode [ 374.183421][T20284] syzkaller0: entered allmulticast mode [ 375.831015][ T40] audit: type=1400 audit(872.448:14794): avc: denied { create } for pid=20333 comm="syz.8.4367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 378.524852][ T40] audit: type=1400 audit(874.982:14795): avc: denied { execute } for pid=20416 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 378.534406][ T40] audit: type=1400 audit(874.992:14796): avc: denied { execute_no_trans } for pid=20416 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 378.718687][ T40] audit: type=1400 audit(875.160:14797): avc: denied { read write } for pid=20417 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 378.727469][ T40] audit: type=1400 audit(875.170:14798): avc: denied { open } for pid=20417 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 378.752502][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.771485][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.777289][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.790606][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.798427][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.822889][ T40] audit: type=1400 audit(875.263:14799): avc: denied { read } for pid=20417 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 378.833345][ T40] audit: type=1400 audit(875.263:14800): avc: denied { open } for pid=20417 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 378.841434][ T40] audit: type=1400 audit(875.272:14801): avc: denied { mounton } for pid=20417 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 379.213029][T20372] bridge0: entered allmulticast mode [ 379.215291][T20378] veth0_to_bridge: left allmulticast mode [ 379.217531][T20378] veth0_to_bridge: left promiscuous mode [ 379.221955][T20378] bridge0: port 1(veth0_to_bridge) entered disabled state [ 379.375450][T20393] syzkaller0: entered promiscuous mode [ 379.377322][T20393] syzkaller0: entered allmulticast mode [ 380.945824][ T9834] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.950782][ T9834] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.976109][T20417] xfrm0 speed is unknown, defaulting to 1000 [ 381.000754][ T5300] Bluetooth: hci1: command tx timeout [ 381.080800][ T9834] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.085122][ T9834] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.180049][T20417] chnl_net:caif_netlink_parms(): no params data found [ 381.217979][ T9834] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.221636][ T9834] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.287510][T20474] tap0: tun_chr_ioctl cmd 2147767517 [ 381.334574][ T9834] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.339784][ T9834] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.376122][T20417] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.378682][T20417] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.381151][T20417] bridge_slave_0: entered allmulticast mode [ 381.384390][T20417] bridge_slave_0: entered promiscuous mode [ 381.389310][T20417] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.391786][T20417] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.394297][T20417] bridge_slave_1: entered allmulticast mode [ 381.397459][T20417] bridge_slave_1: entered promiscuous mode [ 381.431515][T20417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.438433][T20417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.464900][T20417] team0: Port device team_slave_0 added [ 381.469857][T20417] team0: Port device team_slave_1 added [ 381.486966][ T40] audit: type=1400 audit(877.741:14802): avc: denied { write } for pid=20508 comm="syz.9.4440" name="cgroup.subtree_control" dev="cgroup2" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 381.494290][T20417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.497663][T20417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.500636][ T40] audit: type=1400 audit(877.751:14803): avc: denied { open } for pid=20508 comm="syz.9.4440" path="" dev="cgroup2" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 381.517663][T20417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.518310][ T40] audit: type=1400 audit(877.751:14804): avc: denied { ioctl } for pid=20508 comm="syz.9.4440" path="" dev="cgroup2" ino=453 ioctlcmd=0x54d5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 381.522267][T20417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.531507][T20417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.540418][T20417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.601711][T20417] hsr_slave_0: entered promiscuous mode [ 381.604341][T20417] hsr_slave_1: entered promiscuous mode [ 381.606626][T20417] debugfs: 'hsr0' already exists in 'hsr' [ 381.613946][T20417] Cannot create hsr debugfs directory [ 381.661740][ T9834] bridge_slave_1: left allmulticast mode [ 381.663983][ T9834] bridge_slave_1: left promiscuous mode [ 381.666254][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.671103][ T9834] bridge_slave_0: left allmulticast mode [ 381.673105][ T9834] bridge_slave_0: left promiscuous mode [ 381.675499][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.817379][ T9834] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 381.972940][ T9834] bond5 (unregistering): (slave geneve2): Releasing active interface [ 382.041181][ T9834] bridge0 (unregistering): left allmulticast mode [ 382.101034][ T9834] bond1 (unregistering): (slave bridge1): Releasing active interface [ 382.341961][ T9834] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.346319][ T9834] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.350857][ T9834] .` (unregistering): Released all slaves [ 382.355503][ T9834] bond1 (unregistering): Released all slaves [ 382.366031][ T9834] bond0 (unregistering): Released all slaves [ 382.383135][ T9834] bond2 (unregistering): (slave lo): Releasing backup interface [ 382.386900][ T9834] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 382.394158][ T9834] bond2 (unregistering): Released all slaves [ 382.405132][ T9834] bond3 (unregistering): Released all slaves [ 382.536728][ T9834] bond4 (unregistering): Released all slaves [ 382.629694][ T9834] bond5 (unregistering): Released all slaves [ 382.745752][ T9834] bond6 (unregistering): Released all slaves [ 382.864418][ T9834] bond7 (unregistering): Released all slaves [ 382.873088][ T9834] bond8 (unregistering): Released all slaves [ 382.974686][ T9834] bond9 (unregistering): Released all slaves [ 382.981034][ T9834] bond10 (unregistering): Released all slaves [ 383.070336][ T9834] bond11 (unregistering): Released all slaves [ 383.172777][ T9834] bond12 (unregistering): Released all slaves [ 383.224878][ T5300] Bluetooth: hci1: command tx timeout [ 383.259850][ T9834] bond13 (unregistering): Released all slaves [ 383.352421][ T9834] bond14 (unregistering): Released all slaves [ 383.437597][ T9834] bond15 (unregistering): Released all slaves [ 383.539435][ T9834] bond16 (unregistering): Released all slaves [ 383.642347][ T9834] bond17 (unregistering): Released all slaves [ 383.741136][ T9834] bond18 (unregistering): Released all slaves [ 383.848407][ T9834] bond19 (unregistering): Released all slaves [ 383.946961][ T9834] bond20 (unregistering): Released all slaves [ 384.046970][ T9834] bond21 (unregistering): Released all slaves [ 384.134722][ T9834] bond22 (unregistering): Released all slaves [ 384.222773][ T9834] bond23 (unregistering): Released all slaves [ 384.309400][ T9834] bond24 (unregistering): Released all slaves [ 384.399635][ T9834] bond25 (unregistering): Released all slaves [ 384.486140][ T9834] bond26 (unregistering): Released all slaves [ 384.573116][ T9834] bond27 (unregistering): Released all slaves [ 384.661822][ T9834] bond28 (unregistering): Released all slaves [ 384.747847][ T9834] bond29 (unregistering): Released all slaves [ 384.835092][ T9834] bond30 (unregistering): Released all slaves [ 384.919884][ T9834] bond31 (unregistering): Released all slaves [ 385.016034][ T9834] bond32 (unregistering): Released all slaves [ 385.114323][ T9834] bond33 (unregistering): Released all slaves [ 385.222637][ T9834] bond34 (unregistering): Released all slaves [ 385.307288][ T9834] bond35 (unregistering): Released all slaves [ 385.398075][ T9834] bond36 (unregistering): Released all slaves [ 385.459534][ T5300] Bluetooth: hci1: command tx timeout [ 385.491585][ T9834] bond37 (unregistering): Released all slaves [ 385.595760][ T9834] bond38 (unregistering): Released all slaves [ 385.705813][ T9834] bond39 (unregistering): Released all slaves [ 385.812691][ T9834] bond40 (unregistering): Released all slaves [ 386.041152][ T40] audit: type=1400 audit(881.997:14805): avc: denied { write } for pid=20572 comm="syz.8.4470" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 386.061288][ T40] audit: type=1400 audit(882.025:14806): avc: denied { setopt } for pid=20574 comm="syz.9.4471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 386.071937][ T40] audit: type=1400 audit(882.025:14807): avc: denied { connect } for pid=20574 comm="syz.9.4471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 386.082183][ T40] audit: type=1400 audit(882.025:14808): avc: denied { name_connect } for pid=20574 comm="syz.9.4471" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 386.126917][ T40] audit: type=1400 audit(882.090:14809): avc: denied { bind } for pid=20574 comm="syz.9.4471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 386.134790][ T40] audit: type=1400 audit(882.090:14810): avc: denied { name_bind } for pid=20574 comm="syz.9.4471" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 386.150739][ T40] audit: type=1400 audit(882.090:14811): avc: denied { node_bind } for pid=20574 comm="syz.9.4471" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 386.159203][ T40] audit: type=1400 audit(882.090:14812): avc: denied { write } for pid=20574 comm="syz.9.4471" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 386.166389][ T40] audit: type=1400 audit(882.090:14813): avc: denied { getopt } for pid=20574 comm="syz.9.4471" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 386.367315][ T40] audit: type=1326 audit(882.305:14814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20589 comm="syz.8.4476" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28c798f7c9 code=0x7ffe0000 [ 386.456888][T20417] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 386.467818][T20417] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 386.501321][T20417] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 386.507635][T20417] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 386.573058][T20417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.581218][T20417] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.587984][ T9827] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.590287][ T9827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.607448][ T9253] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.609805][ T9253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.673998][ T9834] hsr_slave_0: left promiscuous mode [ 386.676839][ T9834] hsr_slave_1: left promiscuous mode [ 386.687748][ T9834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.693856][ T9834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.697804][ T9834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.701156][ T9834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.716815][ T9834] veth1_macvtap: left promiscuous mode [ 386.718824][ T9834] veth0_macvtap: left promiscuous mode [ 386.720756][ T9834] veth1_vlan: left promiscuous mode [ 386.722706][ T9834] veth0_vlan: left promiscuous mode [ 386.780503][ T9834] pim6reg (unregistering): left allmulticast mode [ 387.098550][ T9834] team0 (unregistering): Port device team_slave_1 removed [ 387.411307][T20417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.579705][T20417] veth0_vlan: entered promiscuous mode [ 387.585682][T20417] veth1_vlan: entered promiscuous mode [ 387.601381][T20417] veth0_macvtap: entered promiscuous mode [ 387.608855][T20417] veth1_macvtap: entered promiscuous mode [ 387.616885][T20417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.630017][T20417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.635911][ T9255] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.641130][ T9255] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.646483][ T9255] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.647060][T20636] kvm: pic: non byte write [ 387.649370][ T9255] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.674296][ T5300] Bluetooth: hci1: command tx timeout [ 387.735000][ T9252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.738729][ T9252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.756566][ T9256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.759434][ T9256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.907785][ T9834] IPVS: stop unused estimator thread 0... [ 388.040803][T20667] sctp: [Deprecated]: syz.9.4501 (pid 20667) Use of int in max_burst socket option. [ 388.040803][T20667] Use struct sctp_assoc_value instead [ 388.645464][T20707] sctp: [Deprecated]: syz.8.4516 (pid 20707) Use of int in max_burst socket option. [ 388.645464][T20707] Use struct sctp_assoc_value instead [ 388.650922][T20707] sctp: [Deprecated]: syz.8.4516 (pid 20707) Use of int in maxseg socket option. [ 388.650922][T20707] Use struct sctp_assoc_value instead [ 389.298653][T20741] autofs4:pid:20741:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 391.108709][T20858] xfrm0 speed is unknown, defaulting to 1000 [ 391.396082][ T40] kauditd_printk_skb: 80 callbacks suppressed [ 391.396093][ T40] audit: type=1400 audit(887.019:14895): avc: denied { create } for pid=20870 comm="syz.7.4579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 391.421608][ T40] audit: type=1400 audit(887.038:14896): avc: denied { ioctl } for pid=20870 comm="syz.7.4579" path="socket:[103322]" dev="sockfs" ino=103322 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 391.473212][ T40] audit: type=1400 audit(887.084:14897): avc: denied { write } for pid=20879 comm="syz.9.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 391.528916][ T40] audit: type=1400 audit(887.140:14898): avc: denied { create } for pid=20889 comm="syz.7.4588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 391.530674][T20890] netlink: 'syz.7.4588': attribute type 75 has an invalid length. [ 391.543542][ T40] audit: type=1400 audit(887.140:14899): avc: denied { write } for pid=20889 comm="syz.7.4588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 391.691315][ T40] audit: type=1400 audit(887.290:14900): avc: denied { listen } for pid=20902 comm="syz.9.4594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 391.702102][ T40] audit: type=1400 audit(887.299:14901): avc: denied { execute } for pid=20904 comm="syz.7.4595" dev="tmpfs" ino=2135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 391.714826][ T40] audit: type=1400 audit(887.299:14902): avc: denied { execute_no_trans } for pid=20904 comm="syz.7.4595" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=2135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 392.151137][ T40] audit: type=1400 audit(887.720:14903): avc: denied { create } for pid=20940 comm="syz.7.4611" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 392.251486][ T40] audit: type=1400 audit(887.823:14904): avc: denied { write } for pid=20947 comm="syz.3.4614" lport=45603 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 392.609369][T20963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4619'. [ 393.203102][T20987] kvm: emulating exchange as write [ 394.992297][T21081] kvm: kvm [21080]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 394.995924][T21081] kvm: kvm [21080]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 395.953631][T21147] kvm: pic: non byte write [ 395.957559][T21147] ------------[ cut here ]------------ [ 395.959846][T21147] WARNING: arch/x86/kvm/x86.c:11571 at vcpu_run+0x1be9/0x56d0, CPU#2: syz.9.4696/21147 [ 395.963899][T21147] Modules linked in: [ 395.966162][T21147] CPU: 2 UID: 0 PID: 21147 Comm: syz.9.4696 Not tainted syzkaller #0 PREEMPT(full) [ 395.970485][T21147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 395.975230][T21147] RIP: 0010:vcpu_run+0x1be9/0x56d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 395.977623][T21147] Code: c7 e8 9b 4a 7c 00 be 08 00 00 00 4c 89 f7 e8 6e e7 e4 00 f0 41 80 67 38 fd 41 bd fb ff ff ff e9 a5 fa ff ff e8 78 4a 7c 00 90 <0f> 0b 90 e9 5d ff ff ff e8 6a 4a 7c 00 e9 ab f6 ff ff e8 60 4a 7c [ 395.986318][T21147] RSP: 0018:ffffc90004ee7aa0 EFLAGS: 00010287 [ 395.989029][T21147] RAX: 0000000000002411 RBX: ffff8880327c6bd0 RCX: ffffc9002b3c8000 [ 395.992332][T21147] RDX: 0000000000080000 RSI: ffffffff81418378 RDI: 0000000000000005 [ 395.994993][T21147] RBP: ffffc90004ee7c10 R08: 0000000000000005 R09: 00000000fffffff0 [ 395.997799][T21147] R10: 00000000fffffff0 R11: 0000000034089702 R12: dffffc0000000000 [ 396.000730][T21147] R13: 00000000fffffff0 R14: ffff8880327c5280 R15: ffff8880327c52b8 [ 396.003466][T21147] FS: 00007fc57b4666c0(0000) GS:ffff8880d6b9e000(0000) knlGS:0000000000000000 [ 396.006443][T21147] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.008917][T21147] CR2: 0000000000000000 CR3: 0000000049e0f000 CR4: 0000000000352ef0 [ 396.011869][T21147] Call Trace: [ 396.013091][T21147] [ 396.014155][T21147] ? vmx_segment_cache_test_set+0x14b/0x400 [ 396.016152][T21147] ? __pfx_vcpu_run+0x10/0x10 [ 396.017776][T21147] ? skip_emulated_instruction+0x20f/0x4a0 [ 396.020112][T21147] ? __pfx_skip_emulated_instruction+0x10/0x10 [ 396.022229][T21147] ? kvm_pmu_trigger_event.isra.0+0x23/0x7d0 [ 396.024347][T21147] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 396.026292][T21147] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 396.028155][T21147] kvm_vcpu_ioctl+0x5eb/0x1660 [ 396.029847][T21147] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 396.031637][T21147] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 396.033701][T21147] ? do_vfs_ioctl+0x128/0x14f0 [ 396.035828][T21147] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 396.038148][T21147] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 396.041041][T21147] ? hook_file_ioctl_common+0x145/0x410 [ 396.043120][T21147] ? selinux_file_ioctl+0x180/0x270 [ 396.044925][T21147] ? selinux_file_ioctl+0xb4/0x270 [ 396.046786][T21147] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 396.048553][T21147] __x64_sys_ioctl+0x18e/0x210 [ 396.050189][T21147] do_syscall_64+0xcd/0xf80 [ 396.051780][T21147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.053820][T21147] RIP: 0033:0x7fc57a58f7c9 [ 396.055382][T21147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.061891][T21147] RSP: 002b:00007fc57b466038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.064872][T21147] RAX: ffffffffffffffda RBX: 00007fc57a7e5fa0 RCX: 00007fc57a58f7c9 [ 396.067742][T21147] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 396.070839][T21147] RBP: 00007fc57a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 396.073524][T21147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.076172][T21147] R13: 00007fc57a7e6038 R14: 00007fc57a7e5fa0 R15: 00007ffcdee8bda8 [ 396.078969][T21147] [ 396.080034][T21147] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 396.082469][T21147] CPU: 2 UID: 0 PID: 21147 Comm: syz.9.4696 Not tainted syzkaller #0 PREEMPT(full) [ 396.085532][T21147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 396.089128][T21147] Call Trace: [ 396.090279][T21147] [ 396.091328][T21147] dump_stack_lvl+0x3d/0x1f0 [ 396.093139][T21147] vpanic+0x640/0x6f0 [ 396.094666][T21147] ? vcpu_run+0x1be9/0x56d0 [ 396.096241][T21147] panic+0xca/0xd0 [ 396.097578][T21147] ? __pfx_panic+0x10/0x10 [ 396.099323][T21147] check_panic_on_warn+0xab/0xb0 [ 396.101028][T21147] __warn+0x108/0x3c0 [ 396.102415][T21147] __report_bug+0x2a0/0x520 [ 396.103981][T21147] ? vcpu_run+0x1be9/0x56d0 [ 396.105559][T21147] ? __pfx___report_bug+0x10/0x10 [ 396.107251][T21147] ? find_held_lock+0x2b/0x80 [ 396.108953][T21147] ? rcuwait_wake_up+0xdf/0x290 [ 396.110723][T21147] ? vcpu_run+0x1be9/0x56d0 [ 396.112272][T21147] report_bug+0xb2/0x220 [ 396.113711][T21147] ? vcpu_run+0x1be9/0x56d0 [ 396.115273][T21147] handle_bug+0x127/0x260 [ 396.116727][T21147] exc_invalid_op+0x17/0x50 [ 396.118294][T21147] asm_exc_invalid_op+0x1a/0x20 [ 396.120171][T21147] RIP: 0010:vcpu_run+0x1be9/0x56d0 [ 396.121970][T21147] Code: c7 e8 9b 4a 7c 00 be 08 00 00 00 4c 89 f7 e8 6e e7 e4 00 f0 41 80 67 38 fd 41 bd fb ff ff ff e9 a5 fa ff ff e8 78 4a 7c 00 90 <0f> 0b 90 e9 5d ff ff ff e8 6a 4a 7c 00 e9 ab f6 ff ff e8 60 4a 7c [ 396.129460][T21147] RSP: 0018:ffffc90004ee7aa0 EFLAGS: 00010287 [ 396.132082][T21147] RAX: 0000000000002411 RBX: ffff8880327c6bd0 RCX: ffffc9002b3c8000 [ 396.135495][T21147] RDX: 0000000000080000 RSI: ffffffff81418378 RDI: 0000000000000005 [ 396.138582][T21147] RBP: ffffc90004ee7c10 R08: 0000000000000005 R09: 00000000fffffff0 [ 396.141206][T21147] R10: 00000000fffffff0 R11: 0000000034089702 R12: dffffc0000000000 [ 396.143844][T21147] R13: 00000000fffffff0 R14: ffff8880327c5280 R15: ffff8880327c52b8 [ 396.146485][T21147] ? vcpu_run+0x1be8/0x56d0 [ 396.148042][T21147] ? vmx_segment_cache_test_set+0x14b/0x400 [ 396.150023][T21147] ? __pfx_vcpu_run+0x10/0x10 [ 396.151631][T21147] ? skip_emulated_instruction+0x20f/0x4a0 [ 396.153633][T21147] ? __pfx_skip_emulated_instruction+0x10/0x10 [ 396.155741][T21147] ? kvm_pmu_trigger_event.isra.0+0x23/0x7d0 [ 396.157811][T21147] ? kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 396.159748][T21147] kvm_arch_vcpu_ioctl_run+0xfd3/0x1860 [ 396.161635][T21147] kvm_vcpu_ioctl+0x5eb/0x1660 [ 396.163261][T21147] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 396.165018][T21147] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 396.166994][T21147] ? do_vfs_ioctl+0x128/0x14f0 [ 396.168611][T21147] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 396.170310][T21147] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 396.172628][T21147] ? hook_file_ioctl_common+0x145/0x410 [ 396.174504][T21147] ? selinux_file_ioctl+0x180/0x270 [ 396.176255][T21147] ? selinux_file_ioctl+0xb4/0x270 [ 396.178009][T21147] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 396.179758][T21147] __x64_sys_ioctl+0x18e/0x210 [ 396.181390][T21147] do_syscall_64+0xcd/0xf80 [ 396.182926][T21147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.184904][T21147] RIP: 0033:0x7fc57a58f7c9 [ 396.186410][T21147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.192754][T21147] RSP: 002b:00007fc57b466038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.195509][T21147] RAX: ffffffffffffffda RBX: 00007fc57a7e5fa0 RCX: 00007fc57a58f7c9 [ 396.198187][T21147] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 396.200824][T21147] RBP: 00007fc57a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 396.203474][T21147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.206099][T21147] R13: 00007fc57a7e6038 R14: 00007fc57a7e5fa0 R15: 00007ffcdee8bda8 [ 396.208751][T21147] [ 396.210411][T21147] Kernel Offset: disabled [ 396.211871][T21147] Rebooting in 86400 seconds..