last executing test programs: 1m41.710405176s ago: executing program 0 (id=458): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r1 = socket(0x80000000000000a, 0x2, 0x0) setxattr$security_capability(&(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@v2={0x2000000, [{0x4}, {0x0, 0x4}]}, 0x14, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}, 0x40000000}}, {{0xa, 0x4e24, 0x2000, @remote, 0x1}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x4}) (async) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x4}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000006c0)={'erspan0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x10, 0x8, 0x4, 0x8, {{0x2c, 0x4, 0x2, 0x2f, 0xb0, 0x64, 0x0, 0x6, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@timestamp={0x44, 0xc, 0x83, 0x0, 0xb, [0x40, 0x100]}, @ssrr={0x89, 0x7, 0xef, [@remote]}, @timestamp_prespec={0x44, 0x44, 0xf9, 0x3, 0x6, [{@empty, 0xc}, {@empty, 0xffffffff}, {@rand_addr=0x64010102, 0x4}, {@remote, 0x4}, {@dev={0xac, 0x14, 0x14, 0xd}}, {@empty, 0xd}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x9}, {@private=0xa010102, 0xb}]}, @end, @timestamp_addr={0x44, 0x2c, 0xaf, 0x1, 0x4, [{@private=0xa010101, 0x5}, {@private=0xa010101}, {@broadcast, 0x9}, {@rand_addr=0x64010102, 0x7}, {@rand_addr=0x64010101}]}, @noop, @end, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x25, 0x0, 0x7, [0x0, 0x2, 0xac]}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@gettfilter={0x6c, 0x2e, 0x300, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x10, 0xd}, {0xb, 0x2}, {0xf, 0xc}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x82aabcf8}, {0x8, 0xb, 0xfffffffc}, {0x8, 0xb, 0x54d}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x800}, {0x8, 0xb, 0x101}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008000}, 0xc64ccc33a5864fd5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000bfe000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000280)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x62, {"6436460f01c866b8ce000f00d82e400f0013450f01c88f89b89721410f01c266baf80cb88450828cef66bafc0c66b8000066ef65f347d9f30fc75cd52d66baf80cb8c4504884ef66bafc0cb81c000000ef"}}], 0x62}) ioctl$KVM_CAP_DISABLE_QUIRKS(r7, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x48}) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018080000", @ANYRES32=r2, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018080000", @ANYRES32=r2, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x94) 1m40.717660817s ago: executing program 0 (id=472): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0xf7fe, @empty}, 0x10) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000001c0)="b7ca8b", 0x3, 0x850, &(0x7f0000000200)={0x11, 0x18, r3, 0x1, 0xdb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x14) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) getsockname$packet(r4, &(0x7f0000000080), &(0x7f0000000100)=0x14) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) writev(r1, &(0x7f0000001a00)=[{&(0x7f0000000880)="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", 0x481}], 0x1) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f903, 0x0, '\x00', @string=0x0}}) 1m40.716454365s ago: executing program 0 (id=473): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000002100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) sendmmsg$inet(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000012) 1m40.635290873s ago: executing program 0 (id=474): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) syz_usbip_server_init(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) (async) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) (async) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) (async) syz_usbip_server_init(0x3) (async) 1m40.561155905s ago: executing program 0 (id=476): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = fsmount(r2, 0x0, 0x82) (rerun: 64) fchdir(r3) (async) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)="566f31e7892d", 0x6) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r4, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) r5 = socket(0x2d, 0x2, 0x0) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3e}, 0x10) close(0x3) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in=@local, @in6=@private1, 0x800, 0x10, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x5e}, {0x7, 0x10, 0x100000002, 0x0, 0x7ff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x7f, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) 1m39.978685782s ago: executing program 0 (id=489): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x1, @mcast1, 0x7f}, 0x1c) r2 = socket(0x21, 0x6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private0, r3}, 0x14) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x40000000}, 0x10) sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = dup3(r0, r4, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x0) write$tun(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES64=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4004000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "1ba76f3f1895c257", "51237c014abd64804d92bbff1a8b9bfb", "6376831f", "d9c21a641caa6f6b"}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010300000000000000000200002000123f7255dcb54ccf0003e904000000b35ef7cf391c9839e38949ab9474500131a9cfbc5f9558d01d92785b7eaa9519b511b291a49e983d3141f3a49d1306a3d217f0cda61a122f350a6d98cbf0093053068093224162586248c8c8525cdd49b8448b45df8a7f2be06325c8edd6775a6fb81604de0829db635ec8b8"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) recvfrom(r6, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) 1m39.965627441s ago: executing program 32 (id=489): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x1, @mcast1, 0x7f}, 0x1c) r2 = socket(0x21, 0x6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@private0, r3}, 0x14) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x40000000}, 0x10) sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = dup3(r0, r4, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x0) write$tun(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES64=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4004000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "1ba76f3f1895c257", "51237c014abd64804d92bbff1a8b9bfb", "6376831f", "d9c21a641caa6f6b"}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010300000000000000000200002000123f7255dcb54ccf0003e904000000b35ef7cf391c9839e38949ab9474500131a9cfbc5f9558d01d92785b7eaa9519b511b291a49e983d3141f3a49d1306a3d217f0cda61a122f350a6d98cbf0093053068093224162586248c8c8525cdd49b8448b45df8a7f2be06325c8edd6775a6fb81604de0829db635ec8b8"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) recvfrom(r6, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) 41.705971441s ago: executing program 3 (id=1338): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)={0x4bc, 0x0, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [{{0x254, 0x1, {{0x2, 0xd80c}, 0x8, 0x3, 0x8, 0x3, 0x27, 'syz0\x00', "7771ed767577c46244729ba238281f43a70c46b86fe9271284a5f83fa7582718", "7801537634028a1390bc0622fd63330ca478d532c87bcc3b47cf2a9477617b1d", [{0x1ba6, 0x4, {0x1, 0x7000}}, {0x9, 0x0, {0x3, 0x9}}, {0xb7, 0xecf, {0x0, 0xffffff44}}, {0x2, 0xffff, {0x3, 0x4}}, {0x7, 0x76c4, {0x3, 0x6}}, {0xc, 0x8, {0x0, 0x2}}, {0x6, 0x4, {0x2}}, {0x1, 0x9, {0x1, 0x2}}, {0x4d, 0x423d, {0x3, 0x7}}, {0x401, 0x6, {0x0, 0x7}}, {0x8, 0x4, {0x0, 0x10000}}, {0x3, 0x7ff, {0x0, 0xd75}}, {0x5, 0xb, {0x2, 0x3}}, {0x7, 0x9, {0x1, 0x4}}, {0xffff, 0x1, {0x1, 0xfff}}, {0x3000, 0x5, {0x1, 0x98f}}, {0x6, 0xffff, {0x2, 0x5}}, {0xcc2, 0x2, {0x3, 0x8001}}, {0x4, 0x8, {0x0, 0x53}}, {0x7, 0x4000, {0x1, 0xfffffb75}}, {0x9, 0x8, {0x1, 0x7}}, {0x5, 0x44, {0x0, 0x3}}, {0x8000, 0x2, {0x0, 0x5}}, {0x6, 0xf000, {0x2, 0x6}}, {0x1, 0xffff, {0x1, 0x7}}, {0x791f, 0x7, {0x2, 0x5}}, {0x5, 0x5, {0x2, 0x3}}, {0x213, 0x6, {0x0, 0x7}}, {0x9, 0x9, {0x3, 0x4c4}}, {0x4dcf, 0x5f16, {0x3, 0x4}}, {0x9, 0x3, {0x0, 0x8}}, {0x40, 0x3, {0x2, 0x7}}, {0xd, 0x6, {0x1, 0x8}}, {0x0, 0x3, {0x3, 0x6}}, {0x9, 0xfffe, {0x0, 0x963}}, {0x1, 0x5, {0x3, 0x6c0d}}, {0x5, 0x8, {0x7, 0x80000000}}, {0xffff, 0x3, {0xc6b04437a5f6769f, 0x82b}}, {0x3, 0xfff, {0x1, 0x9}}, {0xe61c, 0x2, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x8, 0x1, 0x8, 0x2, 0x27, 'syz0\x00', "d68eac673c2de2acf7f8e25a8240fff8cb9c93ae61f01de2bcadf6df53b22dff", "c57f1c7c5246ea3cea53b3f3af136598be647da8f1c40aa7c90990495e2a936b", [{0x8, 0xfffe, {0x2, 0x3}}, {0x7, 0x5, {0x2, 0x7fffffff}}, {0x9, 0x1, {0x0, 0x5}}, {0x8, 0x80, {0x1, 0xfffffff7}}, {0x4, 0x7ff, {0x2, 0x3}}, {0x400, 0x1ff, {0x1, 0xfffff872}}, {0x0, 0xff80, {0x2, 0x9}}, {0x3, 0x7, {0x1, 0x4}}, {0x6, 0x5, {0x1, 0x101}}, {0xf384, 0x3, {0x2, 0x8000}}, {0xfe, 0x9, {0x1, 0x2}}, {0x2, 0x8, {0x0, 0x2}}, {0x800, 0x3946, {0x3, 0x5}}, {0x1, 0x7ff, {0x2, 0x7b1}}, {0x7f, 0xfc00, {0x0, 0x8}}, {0xf, 0x6, {0x0, 0x80}}, {0xadfb, 0xfe8e, {0x0, 0x1c0}}, {0x8001, 0x36, {0x0, 0xfffffffc}}, {0x8, 0x3ff, {0x2, 0xe}}, {0x5, 0x3, {0x0, 0x7}}, {0x8, 0x8, {0x3, 0x14a}}, {0x401, 0x8, {0x3, 0x2fd8}}, {0x0, 0x7, {0x2, 0x4b71}}, {0x3e, 0xfffe, {0x0, 0x1ff}}, {0xc, 0x8001, {0x2, 0xc}}, {0x7c7, 0x0, {0x3, 0x6}}, {0x7, 0xff, {0x1, 0x1ff}}, {0x4, 0x28, {0x3, 0x8}}, {0x882d, 0xfe1d, {0x2, 0x5}}, {0x5, 0x2, {0x1, 0x9010}}, {0x1, 0xf001, {0x3, 0x4}}, {0x24, 0xb08, {0x3, 0x4}}, {0x4, 0x2, {0x3, 0x6}}, {0x8, 0x4, {0x3, 0x800}}, {0x1, 0x4, {0x0, 0x3}}, {0x100, 0x5, {0x3, 0x7f}}, {0x5, 0x1e1, {0x3, 0x3}}, {0x4, 0x3, {0x3, 0xff}}, {0x0, 0x2, {0x3, 0x6}}, {0xde9, 0x8, {0x3, 0xfffffffd}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x24008081}, 0x4004) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x48040) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x48040) socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f00000002c0)=@ethtool_cmd={0x35, 0xc5, 0x531, 0x8d, 0xf, 0x1, 0x6, 0x25, 0x5, 0xd, 0xad, 0x7, 0x80, 0x80, 0xfd, 0xf, [0x3, 0x10007c88]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="1a040500bbff03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14) 41.640429232s ago: executing program 3 (id=1340): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) close_range(r0, r0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close(r1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) 41.500719021s ago: executing program 3 (id=1343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f00000000c0)) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe81}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="b9b10800000f32c46275aae6b9b1090000b806000000ba000000000f30420f20e545e041440fbaf17f67440f0f12aa6567450f01b00825000026660f388019b9800000c00f3235000400000f30", 0x4d}], 0x1, 0x18, &(0x7f0000000280)=[@cstype3={0x5, 0x6}, @cstype0={0x4, 0xe}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) accept$alg(r2, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) write$tun(r2, &(0x7f0000000000)={@val={0x0, 0x88ca}, @void, @mpls={[{0x800, 0x0, 0x1}, {0x8}, {0x1, 0x0, 0x1}, {0xffffa, 0x0, 0x1}, {0x7}, {0xf3}, {0x800}, {0xffff8}], @generic="b579a51af280cf89d98fbcc201df957df6be"}}, 0x36) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 41.260148932s ago: executing program 3 (id=1349): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4000003e, r0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) 41.253274135s ago: executing program 3 (id=1352): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000400), &(0x7f00000006c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x85) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @private=0xa010101}, 0x144, 0x0, 0x0, 0x0, 0x403, &(0x7f0000000000)='gretap0\x00', 0x8, 0x5, 0x400}) 40.940950947s ago: executing program 3 (id=1357): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) r1 = accept(r0, &(0x7f0000000480)=@can, &(0x7f0000000500)=0x80) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000540)={0x3, 0x8000}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1206c3b397fa8319}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfc}]}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280000000000069078ac1414bbac1414aa00004e22746b97064c195d1a46e73dc9b3dc1c622c8200e73be925a3ee38a172cde6590b350a94aff8fafbea8670246d0c1f5c99825ada7ac02c3c15313ec6e7f644530f61e63df44b3acd0723945f769d4d4f7f11781f9d729db995c1807f7fc8c517044f290ee611ec557f0a8ffcabd507cfef76e1f90bd5c7f0faef75288e5c34a203aae1f55ceddd7436c88170c1a0775ed1dead", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780002"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r8, 0x0, &(0x7f0000fa9000/0x1000)=nil, 0x1000, 0x3}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x200000, 0x2f15ea, 0x334e8b}) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r10, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r9, 0x0, 0x10000, 0x0, 0x9, 0x2ea473, 0x2eb809, 0x20}) r11 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r11, 0xc008561c, &(0x7f00000001c0)={0x980914, 0x8081, @value=0x20000007}) ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, &(0x7f0000000200)={0x0, 0x4, 0x21, &(0x7f00000000c0)=""/33}) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x2f18c) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001d00010023bd7000fedbdf2507000000", @ANYRES32=r6, @ANYBLOB="20007e010a000200ff3a755e6c9e738d27b53dc8651cd8ec2fc87e7b8b28466f3a7d593beeb7b7bbbc981966694339ca2dc951d2039aae1aa9f570c94829b02f31352eece7dc53f19f801e228e3a8b8d46c732016cbdc76ae3f3c9da79fa03"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 40.894527402s ago: executing program 33 (id=1357): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) r1 = accept(r0, &(0x7f0000000480)=@can, &(0x7f0000000500)=0x80) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000540)={0x3, 0x8000}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1206c3b397fa8319}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfc}]}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280000000000069078ac1414bbac1414aa00004e22746b97064c195d1a46e73dc9b3dc1c622c8200e73be925a3ee38a172cde6590b350a94aff8fafbea8670246d0c1f5c99825ada7ac02c3c15313ec6e7f644530f61e63df44b3acd0723945f769d4d4f7f11781f9d729db995c1807f7fc8c517044f290ee611ec557f0a8ffcabd507cfef76e1f90bd5c7f0faef75288e5c34a203aae1f55ceddd7436c88170c1a0775ed1dead", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780002"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r8, 0x0, &(0x7f0000fa9000/0x1000)=nil, 0x1000, 0x3}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x200000, 0x2f15ea, 0x334e8b}) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r10, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r9, 0x0, 0x10000, 0x0, 0x9, 0x2ea473, 0x2eb809, 0x20}) r11 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r11, 0xc008561c, &(0x7f00000001c0)={0x980914, 0x8081, @value=0x20000007}) ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, &(0x7f0000000200)={0x0, 0x4, 0x21, &(0x7f00000000c0)=""/33}) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x2f18c) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001d00010023bd7000fedbdf2507000000", @ANYRES32=r6, @ANYBLOB="20007e010a000200ff3a755e6c9e738d27b53dc8651cd8ec2fc87e7b8b28466f3a7d593beeb7b7bbbc981966694339ca2dc951d2039aae1aa9f570c94829b02f31352eece7dc53f19f801e228e3a8b8d46c732016cbdc76ae3f3c9da79fa03"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 33.925264387s ago: executing program 1 (id=1469): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x1c8d, &(0x7f0000000180)={0x0, 0x1775, 0x40, 0x2, 0x27}, &(0x7f0000000300), &(0x7f0000000240), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000040)=[@ioring_restriction_sqe_flags_required={0x3, 0x18}], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) ioctl$XFS_IOC_FSGROWFSDATA(r1, 0x4010586e, &(0x7f0000000080)={0x7, 0x1}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRES64=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001", @ANYRES8=r2], 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') dup3(r6, r5, 0x0) ioctl$PPPIOCGFLAGS(r6, 0x8004745a, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r4, 0x1, 0x2f, &(0x7f0000000480), 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f00000006c0)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0x0, 0x2, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xaf}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xfc, 0x0, 0x9, '\x00', 0x43}, {0x0, 0x79, 0xc5, '\x00', 0x5}, {0x94, 0x2, 0x1b, '\x00', 0xfe}, {0xf, 0x0, 0x6}, {0x1, 0x4, 0xc, '\x00', 0x13}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x8, 0x4, 0x1, '\x00', 0x6}, {0x80, 0x6, 0x6, '\x00', 0x48}, {0x5, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x4, '\x00', 0x6}, {0xd, 0x7, 0x7, '\x00', 0x86}, {0x8, 0x80, 0x2, '\x00', 0x6}, {0x3, 0x7, 0x81, '\x00', 0xb}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x9, 0x3, 0xb6, '\x00', 0x7}, {0x9, 0x8, 0x5, '\x00', 0x9}, {0x1, 0x9, 0x9, '\x00', 0x81}, {0xf9, 0x3, 0x8, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) 33.840869687s ago: executing program 1 (id=1471): ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000200fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 33.840487447s ago: executing program 1 (id=1472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040)=r1, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r4 = dup2(r3, r1) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x148}, 0x1, 0x0, 0x0, 0xc050}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0xc821}, 0x800) 33.750617139s ago: executing program 1 (id=1473): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0xf, 0x2, {{0x0, 0x0, 0x0, 0xfffffffd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xe, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x24040081}, 0x880) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$kcm(0x29, 0x7, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1a) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) io_uring_setup(0x37cc, &(0x7f0000000040)={0x0, 0x2a11, 0x1c080, 0xa, 0x20002f7}) (async) io_uring_setup(0x37cc, &(0x7f0000000040)={0x0, 0x2a11, 0x1c080, 0xa, 0x20002f7}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) openat(r2, &(0x7f0000000300)='./file1\x00', 0x88700, 0x36) 33.680977358s ago: executing program 1 (id=1475): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x40, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfe1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) pwrite64(r4, &(0x7f0000000000)="a5", 0xfffffe8c, 0x2) cachestat(r4, &(0x7f0000000100)={0x8005, 0x6d4}, &(0x7f0000000080), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 33.440787428s ago: executing program 1 (id=1479): writev(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_open_dev$video(&(0x7f0000003200), 0x3, 0x28800) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000009f00)=0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, r2, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0x1000, 0x1000, r3, r4, 0x0, 0x2}}}, 0x78) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000180)={[{@memory_localevents}]}) (async) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x600, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000040)={0x4000000, 0x0, 0x0, 0xfffffffe, 0x7}) 33.352073945s ago: executing program 34 (id=1479): writev(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_open_dev$video(&(0x7f0000003200), 0x3, 0x28800) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000009f00)=0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, r2, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0x1000, 0x1000, r3, r4, 0x0, 0x2}}}, 0x78) mount$cgroup2(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000180)={[{@memory_localevents}]}) (async) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x600, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000040)={0x4000000, 0x0, 0x0, 0xfffffffe, 0x7}) 1.899995228s ago: executing program 6 (id=1918): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) signalfd4(r0, &(0x7f0000000040)={[0x5]}, 0x8, 0x800) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) (async) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) (async) madvise(&(0x7f000022d000/0x1000)=nil, 0x1000, 0x9) (async) set_mempolicy(0x3, &(0x7f0000000140)=0x7, 0x8) (async) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1.763879724s ago: executing program 6 (id=1921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0x8004510b, &(0x7f0000000080)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x52, 0xd8, 0xfffc, {0x4, 0x1}, {0x47, 0x2}, @ramp={0x7fff, 0xfb27, {0x5, 0x4, 0x1ff, 0x7}}}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r8, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x4, 0x3, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa0100fd, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) r10 = dup(r7) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) epoll_wait(r4, &(0x7f00000000c0)=[{}, {}], 0x0, 0x137e) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) 1.540612668s ago: executing program 4 (id=1922): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1/../file0', [{0x20, '#! '}, {0x20, '\xec'}, {}, {0x20, '/dev/loop#\x00'}, {0x20, '#! '}, {0x20, '#! '}, {}], 0xa, "4230133220d6d1dedbf8adc05b47ca8fe7f0cb078a8285d4ff458f279dbe556d21ca76988602e199406bdb47c24db8e7940dbd3d35235b9a26de7762"}, 0x6c) (async) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf2501000000050004000200000008000600ac1414bb08000b00", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 1.540176243s ago: executing program 4 (id=1923): mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004ca, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0x4], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write(r0, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004ca, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0x4], 0x10000, 0x202}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) write(r0, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) 1.358748974s ago: executing program 6 (id=1924): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103301) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x80, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x8}, @IFLA_GRE_TTL={0x5, 0x8, 0x3}, @IFLA_GRE_TTL={0x5, 0x8, 0x6}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x5}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0x80, 0x6, 0x101, 0x0, 0xec, 0x2, 0x0}) 1.358387248s ago: executing program 4 (id=1925): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) setreuid(0x0, 0xee01) setresuid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$CDROM_SELECT_SPEED(r0, 0x5323, 0x3) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x10000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x166) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a3000000000050004000000000015000300686173683a69702c70bc55742c6e6574000000000c000780080008400000000205000500020000000500010006000000"], 0x5c}, 0x1, 0x0, 0x0, 0x24000043}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x44fc1) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r5 = syz_io_uring_setup(0x33ef, &(0x7f0000000300)={0x0, 0x7c87, 0x10, 0xfffffffe, 0x252}, &(0x7f0000000380), &(0x7f00000002c0), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0) shutdown(r1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 1.354382424s ago: executing program 6 (id=1926): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x4, 0xc}, 0x50) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000140)={0x1, 0x0, 0xf, 0x8, 0x6}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f000000e5c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x464, 0x0, 0x1, [@nested={0x18, 0xcd, 0x0, 0x1, [@typed={0x14, 0x9b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}]}]}]}]}, 0x38}}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x4, 0xc}, 0x50) (async) pipe2$9p(0x0, 0x0) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000140)={0x1, 0x0, 0xf, 0x8, 0x6}) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f000000e5c0), 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x464, 0x0, 0x1, [@nested={0x18, 0xcd, 0x0, 0x1, [@typed={0x14, 0x9b, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}]}]}]}]}, 0x38}}, 0xc000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) 1.270465991s ago: executing program 4 (id=1927): ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000030000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.27023868s ago: executing program 4 (id=1928): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) utime(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0xfffffffe) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x4400) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') open_by_handle_at(r4, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x1, 0x0, 0x105, 0xffffff7a, 0x4}}, 0x4202) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r2, 0x0, 0x0) 850.064869ms ago: executing program 6 (id=1934): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679eb7edd, 0x80a0a1240160183d) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) tee(r2, r1, 0x3, 0x1) renameat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000180)='./file1\x00') 798.250787ms ago: executing program 6 (id=1937): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000001340)=@newtaction={0x84, 0x30, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1100}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0x24}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x7ff, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x84}}, 0x8000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r2 = accept$alg(r1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0xfffa, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) sendmmsg$alg(r2, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000000280)="57cd4e", 0x3}, {&(0x7f0000000580)="3222f0476ed4765dc271a2c4fc02", 0xe}, {&(0x7f00000004c0)="9ec2fac086b46ea75227701aa4233597d8f5829cf3b7347f318edeece819b98e0dfc0ce47063b8f43f765ab2f7ffd018c2005e9f3f8c8c274bacde84922bfc0c6295a0a3d3f7c26773699d40b16775d8a6301526dcaebb7817fda3d495b115a5b9a13ff72966bc42a8aab4a4d3fe6164", 0x70}], 0x3, &(0x7f0000001a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000801}], 0x1, 0x40) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000000)=""/105, 0x69}, {&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f00000002c0)=""/158, 0x9e}, {&(0x7f0000000200)=""/78, 0x4e}, {&(0x7f0000000640)=""/243, 0xf3}, {&(0x7f0000000740)=""/239, 0xef}], 0x7, &(0x7f0000001900)=""/220, 0xdc}, 0xc}], 0x1, 0x2101, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) syz_open_dev$loop(&(0x7f0000000380), 0x81, 0x10200) sendmsg$rds(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x80, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 796.856784ms ago: executing program 5 (id=1939): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000200000008000000060000000000000009000000000000000000000000000000ff0000000000008003000000000000000000000000000000ffffff7f58000000030000000080000009000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b"], 0x0, 0x0, 0x0}) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) getdents64(r4, 0x0, 0x0) getdents(r4, &(0x7f0000000600)=""/225, 0xe1) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="428a6ce66c433e7d6473d37a71716ae84216bc67277f3e9626c032a88a7acfd09ce24f4255f37078d380c6723d7aacdc3e0220c069b0e3a64d5f03936770166422985d1b36eaea3166a4f1403dceba822af78c5c09a45e2174bb51f6e9f11deea936b040d91598d4aa373bf4c5765a17e6c33ddad61487bdd32e3e58af5741f560b4b08b02d3254eef9fe9b2f0bdbddffe42ca87595f21dd7ff6c3d5754346b6414d2d7dbb41f5de3181ef343faa894a332cfc895ad40b048dc597478a761ef691d4bad54af2c711334532ad94c6017b49990e1f01bedefed1eea35deff92249b09a7a5d762d4fef1fd20bd95c3fa810d6d99cc5b8c2dd70a8a62ddd217e069cb29c9e7ef5bec625b3a303188d8cad4f423eb71a4aee6bf69c9cf73f0884a277a9d2d39449053d13952eea2b4de2e61715f0b878bb42d48642399e4e5ff2ea4daf9bf21c73ce7d767db0171cb6d436bd0c3ea93920700e0cf64731f7cafb172b0866fbbfaacc940639d6741bb7e4c7ce69dd1a815387838b081b1d9a04bf6192bc0e8d4e16a8da6ff83df1bead9f6218e4684b78026a0b49a2a89d3f05549b12e8b07734ab867c41a9401abc9c3fc6cab66e57eaa9513fd491384a2c65715abadf29aa1036a4b78e47ecb95d76884b23fe89a251626e1c5d827dc1d96f83d6e524a93561fc1d43ceb28b9dc5b476cd0c6ee51f4f37b7792f9b5d862d69184830ab80a5fb6a53729cbef25d612640b688b72c9d77c83538ae181d2065250858adc72786027103a8e1a2d098a33f1a130db154925a8aef6c4752d6262932dc3cd957a9a91ba1021c726b8b16b0027ebf48e9f2f19bc82ac3f6743d584a5f3d3679487925157d5fee7280cac2a26934e35942c4ce233fe962bbc76b7efe9587b564b0b91f6f75c4ff570ccf8e5b15b09ca095ddcff7fef94e28cefbd1592fc30484b142838263ed9b72ee93e9db0dc0d7c60a750d80d90aa7f0fdfa3603aeb92e6f0166ae30ff4225e90ccd2d0fa3bf89407e1c038124bd628bbd864469b5b77eacd7af14a42487bd0bfd6b2fb1962d63d427ef318fc01dfac3c476611209fb2c0e599c62da902c96abb18b91c6d7f2637c5da80900d07557ff62563ae8d84537485d7102e86990476cf34acbb42b2683a247d64788c0500179d0452e879c6263c4a82bb10987dade8c195eaf8368daed13b2f46e62de7e72c5189868372f081b72e48871e6598e5076997755e6d70c8c78b8ff937003e9558b0e7809ca260bac8d2c165818287cfdf7eab197cbe17b9ecb556931dbb2494b4290ab1eed4d00fd4c3c88f942c57b70ccd9e618872d658111c25a7ca4f271fa92ba1f8bb3d625ebdf2c0635b74c6d10e1c67116eee87687974d1be802b883ce2e05296831cf0552454f0b6a1a29ff2d5ac9af44f10817d063142327170f30d15fb49baa3506313f4c859e23dd153d5fa303df32fd52d0c6e27db0860c2cd00128e3fcb7f63832ac42a507b83fa587049fec1cb4b171236835d1ffc2645686edc9e9b5233a38020ba84c7d3744a5041eb4056d0be3fe6a6ed2a9c87ae8c1010a7ae9a08b189cb10b989358f0d9b5501b31b876fa8e78e591d29e82ff391c913c6894b9dc7aee2fba54a03f020473abcaf75ca71b48e43a195de1be70e30895c34fce11dbcaa81d55f674fe84d2ddcfbcb6cda65c206c0d48e73e2d23c16d8871e409313177c564dfc98ae86ff903e1e37a5c7cc1f5e8ba7f2ea4fb2974a1af29d84d4470ab769eda38506d8a5dc6b7dadafd94847ee26ca5e8221e0269147828fb569a0873b50d9b82a698a58b04aaa3c0f39e76b8f5def74ac1921ffce7bd2d5c9e3ae3e1b78040c7492be0854e52ba0df6100c5bb6c1732a5fa989ddfd0713c12531856969f0cf40e4e6a3e7ec1491eb351967b9679cd733977d0cf8629fc7e32a668015de2a79c76e0ba30b1557acbc067a66630aff2d68409d59c04e0d507e88f35fd2d3af2eee43a06a69c963fd30b3606e08a172d2012ae8c7c25475249a3d8a2fb7aa48fec18893c8f8bde721ddae7d9444a5963007ebe36063515094d54f36de8b29877f2d6faf147d50beff0b5b5f17088452dd97c91d5872e3596cf2f26546e8009448ab45fd1351f09ea7138ae510512715692fa181483da711fa6a861c81d27ee0b8e2701c61c8e4844401e26e2136d9371e5edd223c98fcfe3d5ddf7e514ddde1be2450f64a6c6af79ff4ceb529cc573f178de2322d98091d81c0375e42dc600907c236cac3b3dd2a61dc706a228e803a54e4640cfdb318be734686e04e6deba7e85cd2bb5a2135c143cbc25d64d2e5a50df677f518cfdb178090b8be719e96b742d370f9ddfe4852ac3c9a3ca4d0f63ce5ffed0605c1efb72de7e5d79aa70aac1b1e7e622c6cc7732a2a08496d2d22191aa78a037c89f9c7620a7d3a9530f5b02fc460dbbc16b46d814d4c49c55771ba591daf6fe9300e8c2694c438da06383ea67ed6cb22cc1ead51c89a0eae2b221af22969b5e01be6b4ee752465b0b96e7c0bde2e2654260c63c7c711e23ceedfc7c8f60f94ddce5056684e3213e6e79ab800a9464d1c407ae07999d9a1733a075d10621f796aec1b93cfec393e609f6a317768fa6d90f450e3f77f54bbdc254806f22ae03933d72b0526b77679ddd89b1bbcfa7c0a97025dbc7f66e4fc99444ce2f1a9eff1b741de631ee206a53e1b53256c5722587b6722962576a0c519285f09e1a17df9d7da065b14d26d1fa50ec0c67dcae691eef2d581a262004c900243e1dfb39b8a5a8e0c8f565491895e4c589be089b32d0e92e0a6846885e39da03023197061b99c0b2304eb0a41ab1c99079fa99dbe1ad9b3930cbddaf433407b790a40d1669d8e764243488f53c9c5597320dc7abd32ae9e0207919cf2b9a955509f84f6c18e8aa676a13917fef06d65755ef538a624112d8c4f62c4ad4a1c6a39774fcac69fc0ff99e6d36bff208974ce4f08556032cb5b8ac3a75ad24a8f87b5d36119ea43aa37054b4e7d9bd68d5b0500e863464101185c7006082698afb70fba7a9a1db9a294019b195ee5364a77250a0742a0395d22397d57ec972f71955a6ab34f894ff08484a3565cd5e3a1793267cb186b40adb4056837843c90ad254814aae1d6e44406b148c829434fba7caa2c3db16ef5ac904f505a18b1f55c43f16591577ecbfdeaa960363c26f782335772f78a693fb8e45ed0418646e57b12d5ec9f96a4c4dbc96bc0f3a2b18eda4a279428bf34920a55e96c6d50d8c0f7e7728ec8667e39bba86664120fd688ea9f067f64e4d27ea53e14f8ee8560c347df20cf7ca4a7905420bab3e327fc875154a9e0f52596e86bdeadebaf6e79ad4bab8ec079720a414eb20f7938ccbf8204fe04c1b18f3f3e69b79bcd135f60d7c46c22cef7f8f72410516fc4be391c0c7f4a6f1063c0e739f91c757a34f3ff587051d4356c26bb0b2579b6096a912bf8cfdbc7d1d2adbc194441677c22ab17b108ea7f2491ab519f18d8ba2b20aefe1a694941050f27ec6ee6a2c230afac26dc93065f9cd52ca326378bf36e3260bdf011af695ebdb3b0fa321f80ced7d7024020e23d381474844019bf3f72a2afa6ebf43cd853b7852792b7b14a0e23f4ef42911e2c0748c44a8f2117e440c0ffda360d4f8252187b938dcc9b4eeacd97f374281ac31fefc69e6e8ac84300022f307c5c4e7fc96d3bbf8044e72c778ed85a3d02ca5fe9b15cc3245fae21f57a02383f06bfcc6a3b37a4b9df50baa1162b8669d7549e88b8731ec9e5e058d4e41150ce3d3acb17069d1c08519ca1d1896b843877b9c2beda2a5fa839930349e6331488cd3fa1dc8acd598767b03c5e633cdbbb7f84ae29ebbdf16751498cb6fabe81a50d0eea6887d8ed52b77448c1344647aed17903bb9f2ce08e03e73ddc8f94e27053b81066de7666004870094a5bc9902f866b191cad4603a17eb7c3d62bacbaa4ba524908517fb431f51f2777f7de4053113c5083358e696b9969f912376643aabe3b4a6ab9b6baf71f71673f5872f4367afeb514aa9647907776fc8527f48f75a87f8dbaaa59055753e89985864915ab8f323b1e6012009b49afa8201a3f6634882a5f88a9e6eece7a491a8f4652c32f27784d94d1ba715f6146b5ccb0ecb37109ddd4026d8af2c308f9d8475945d497ad5e0a47bcad2e70290c5085f886f3d58d2099b8e47012cb86e67eb3b760e15f345c001b4f950ea739762a752a22bfe0b9844660b92afb5a1fec179f155a95461230dce2607ffcfda4263907fa5053c6f84089677b8766daab786271d08eed53c228ee7d8c9a818c7aff7973dc86c1600a4e3decca6a6047e2e633e682425ec28e3a77dbb3a21fcd0aaf4b4826f5f9a99d52415faa21fc500d5c99a9bf5e43d7b11dd820975cddf18212df99a0166306e5e45d72c75a917ab0f844d35c2934af58e5b8a12e2e9a1f16925a3b342c3509e86885f3a487a5b74c94bdcb150a81f853b431a74cf47510e55f89da8e2089d07faacb650f64473dfbaf308264a361db8cccfdc4c80bf97c8c4bf9db7789c231e62c2878837c2e72585584de5d52c3f59fed0a4a14a8957279a8dcf8b6efa0e81f00c73b52f34eedf8f31840a0b18c9634570cfed3d7f4e13b78c0fcb16628d380de48e2807d884e9a46f7c2737e89cb7fbbff6491db2f9f6dafc248a5e417ba926304784be621e83db65dddb0b84141e5b97728a9bcd1b1916f9c2da403e86bd178a2ffb3a1f5d64253707f8f6da3ca22a00de18c8bb000384a38293da2ce968fc184b696fd5d26618b5d3b633145e971ff010ab9cbfb0f3173cf6f8016cdef01a2ed0921e3608f3e3e0a511a7480464638ecba810df33e2146a7f53258b440339d1eeb5e06eb94814d9fe24d835704cf34be75fc56f4bfb3f8355776f319095b1987a81dce624c6425d080258d355263224b888a8317782101769e1ec4874c20ff75b430037710bc9437234a791fc7606d9498f6c353af33adc0c92c53229574095a7988c59bfcda13bf1a4185fdd6318b250590aeedb15aeaccf049665316eb1873e4d5a4a7b686ec6279a987444c17927e530e598d5b5f672b88ff6f98fbc52b193053a516f19da80fb2873a49fb9cad5b037eaf9e9afd7c5a6bd0e3349c0aac078968f2655b789abc08b82af590bf7e3f1051188ad725dbff39c124915037afeccc741912def5645951b2ded95b29797da1ac40b16a3f89863047131e1d99879896db7d5e019bbbef6753752f665e0cbdb6473bf86da661e63ff8b0893de82ca786d08dd0a4b7f8cb9181aba271ef13bbb6d6b7ed79debf6105ac5a971dbae815ef10303b630cdfcd8ba9a0bcda0052a6c2a8a6135c6f466fc543d44a9e722bd2a3fc3d004e5f6430246c8e2fae6272cd238581412748d4ef37a404b7e4035a03a981be204606dec92a430c5cf303f663878c6b16215e63e41869496f634cdeced1475c47864e78a7cc398c06cd53d229ec08488651695ea5c018b00dcad9e48fdb8006fd38e1f53fcdea59aeb3570a1098659892d20b3be362edd0e587f4c3f78af67301c78e83b8aff103667709afd8968846caa34d9291fd549b4aaad4cc783042a117f3bdb009169eebde40bea76925218c7e964cd3e42c09220cbf27e2c253b3a4615af8039c4a713e9afb3dea376152cc9d011886674ca84f9aa413dc1ddc9936472bb7e9107c792da1dd56a7a396fd036f5caab4d4ffe35ee1f0771f3d04c9933a94aa0f28bc489bd81ad331a1cffaf1fcb44694bca71886978ac7ea1aeaf1e8cda64d195414c4da561a074ee28e2c983742477d7de8eeca587cf279aa948a037bd3b596862f928910d0d0e077c4949a0c7b340e41d41f5b217bd6ae4cb2b2a34561652978e64616863f56ffe91f896eb85823ade588333e6f9acccaeee63d0d4f19bf6eb58ce9311cfc1a731705e484ce612eba0bb81f89fe2ca223df2c3b9f37684c5d4419379e96e65830cff6e0e03c146f171cd9f9d287e8edc631d21887e7f63109dc9c57feb3cb3e67f3146c3d7c8735f73d5d6f038ed2ab29b6ab7a64aa936671d71a2a82abc41d907ec91d4aa187b53e1a5790974b3a65ef3e7f145b040a17991b287513c43ffc35d58440c200e1f5914f216dd2d8c1477bb7715dcb96b4ac12263e52bbf7869e82a0f1a2de61ac65af1e016f5cf811031c3ef2be67fc442114082688aba559ce993c523a9d60eb19245bca03dc2783fba384740295e86cdf6433ae624f0a84eea3d1d133f3cb8d3655601debfdfb89995aa86bdeaab4bf37ecd728958f32739030527b51532fad7ca3861ed5599568dbe9445f622b0a1cd9d5864544265752fecc10e874c2f1a0c6f11d5dc945696fcae70b50fdde191d0aafe50632a786dff3fd5f976aaa5af332156bc96c3c86a88f35f2ea876d050a0aeea72e61d57a988183bf3ff14508f825f86f2cb6742c809096c1c16a343e5e38be54b8426ed809e1ce15600b92f251ddfbc6244b82d3ec22bf888929a11cf9e591dbc06007cd15ab7edc093dfbcdae3a145ece8ded5f0b63bb5f3928ea0a1996762b982e10394fb8a6b33bf62dc4a6f8f614ec856a9b1d790b9d06e675320afa41e1a465dcf6fbb49d737f66ff492f019b0c4b34f9dad26e088ec3b9019a19a78a6a25f7421702d87ce9d50415ecfb3cb4d5c6f3ed0c24ed3bc5dc7fcc26e54403d319a7e629664953aed9f96fa63f2b1aa9a6a066a12d004b7ec28bb92457ca3fd863745085bf6eb40794beb5363ccaf0371844a24252aae1e49ca4bac41961e7a155fb8938a01ba73ad66f55ce33c415a6c6b860021dbc61b0fbde29ad55556a11a7ca4c5a85b0608ca2a2a649ae7654974e8aca57c5d013a02de7f389245aba981d23fe4e115415d3f5c7a52951f122ef4ac3efd9783f6229576ee88e3320112e885038b17d9ce1847c84c972bf57b0cdbc30794b9f3ef626c897fb38db40141f8a0049a998524f90dec8e657289c49634e773e9d3e776b0fd14afcb3f54127d95f062c8078540efa31a11aaeffc8c68cd981ef531a1f166ea73c00590e1044db5e719947dabe2a8dff7ae0b8400a9fcdd6f5cf69250acec7b06ee2db86a45fc90bf5abeb90d1d11cb2b657475bac2a5cc4606fda1f19171fe63f72746d29a218cca87616d283fc5d35f0d36840bde80577ae91f1148960079d027a72a8084b5aebed10b201eacc4924bed0ca734772c8dbec33bc256cbbb08a80bbc4545d5b5ac9f610aa4ac32faa0bd741e6bc39c5840559a9a6de4646ff5b62ccaf3340985151203e885bfcffa11b9c77e0b42b903de4fd7db842135ea3efb1c227aa7eac69102b09832c6d5456315b894c15d706386a0cd336cb57dbd8b97fe4e03cba770ac356445449bc53754dcc18abee099ff5674c6637e433b448221bac334475f45ebaeabb3e0cc1d35164d501a75205253060c80db6c0e65b307375adeab281eb4433b3eccb1dc27d4e2db0b712dc21b0aafd05d07d59995f94d6b45070eee5174f54067871b29b02ec23fc2c6eb122fe690cbab49b040d48d9dc0217b9ac439001ad5ed7f73b673739010ca8b99ec3b2f1fb528e3db34c698fd5dee32794b31fd63c2b72f32bda74506e40b6f88e4495739f6c3863542ca7cb4ec69b5b48a3da1b808e9249c285811d6eb031ff7449e75f0ab1235c44bdadfb7f4549cc361f3d370831580269a2a0004596fb719dfe15faf4db82cf533f0e813e25e5ada6d06f235c695be58ae02bd0a05ea836d15faac2ceb330bd93abe5abe4355a4bcc00382845a0fee4d4c5b831cceb8d6c8bf543b18f34355a7d03e89be95f0ddce76625af30aa71a5090f7639f85accd686fce53abc71512a4289d14e992a64ad5303fb0fb1298648d268939136f1625039b472f0d144599290c909aa2924563a7ff5fd5cdaa5018e592e9b4853bcba57c34c1167f77dc7fc010a2fe8a8e3e82e5dfd8cbde7a73d1f0f84691b452c263ed4bf0fe336ab05910d42f95b8fe1b52421315d611b16820ae75089ddbc222edc1830a952c91180a6d3228d1e1fe823d908bfa4d24c1a6424461007d1b94f0fbc13a9e718243ced7e6f24522a80005a4fcff858dff00585cd9283ea1a597f0ca1e76c54747d050f392cd0e086326d0ddc766ab1fbe30c3b8cba924c01475b160e775c3d1d26c35840f83269a7e28f1338ea375e53dc98b862c8d15a19f772ac23b3ee9f90bb04e03dfde4e82fb9dd3a0890fe06a99101c59ae696ff1e1bb1d652b6f3f9635c18616a7c86b1b6ace325a6c62d132cda8d826654641b6e802acba840a4265e24e85cc274b55e0fbd01a76dd9af91441ae349e5bf7f585c9860f5c4500da889c3b72497b86f193fcf969d1424eb0f64e9ae1db82c102e1d57bb4f6646209a691cd0b286182f2a66dfd3dbda20a83156b0a108bb0e0a5c8e2bc7a2c19cbab09f25db581771af9fdcb09d77a46f337f2443962f1858e374c16b37f8e993646cf84b2869d9f93a4e38e0f4db5444c287d4030f4ed1bfaded4f37646d81255ec9bbad06687f49678dcb4690284c2db493464e7fc5c2e39832ae3ede01b136ff32532f5e670ba2d753983fdd2052f42311fbf917e96a1e29b4898d62130c683bc0d45cc2be5945cc41e35475fda252ee1c3f035afc352f34b77ea13a4fb09c09dea26110e700693cff04ce8e06b30f66535608968e65d2ebef57698ad72e69beea4db56b0e8c6f91cdf187fd0d49c84c1d5ab34900f6004b00503131e7d6c996dce0a84341ae8236bb5741adf6cf5b447d750f1e5f0cb5b3787e22992a9f26310f28d4789d09c53df3057113f6ffbf2978984762fa679cdacbe509d6dc4b637f17b6cf49283d5a523e04a2205b1a1af1c6880fce33502a83170a5b0ed1f384ed1451e683b622f44ccc0d385b3d7540ca3116d6112aaf905039471b564d3cf615ccb8823cfd34e635c3b2af982ed0a98fdf2358b42cfa8e8cf2ac184b7e08bf48988f000850163bffafe7f69b3f8a761936a3e1974e79ec92ce893f6a8474fe900b42025c9bf56799dc9a0db57239e8fa5dbb3b1972b0d2c456f7777ab2baa1aef60f5be9d48b4aba1aa934a493682c70687b4e7b05f5226eafe9a25d4fc33cc2af7a7315b37c7db101ad3456d8ad04ddc3b76d2baa96129da53c810d55377382a2a25d6ce0d4c113c3367fc906034eb775290c1d5e5c881d9a8c6567d8470d68b33b506bfab2d6b61a9a7ca6eb003772e30165ed01544d896f96c0f286a23ab55ae258c1554b8054e9f6de37e9f29bb644c4f2ee3ec42d51daf7d4da1cda30f16a56f12e299b5e302deae593fbbd6f75390f4eb25555185bf62eeaa882c23416872a4cc18d2534ddc4d2a1f3a0c3ca461d9b9e4fda10c3294ee74c631c65e840d5e4a94a1798e07a5e151968b7b22892d65ac2c81e7e8d9a471a790f66a9391b4e8c19a2251488255c96d498cda6ddb3aaef264454f2b4ff43a70c48b1fba3ed45c43d0dd44bc26452045e9fffa2b25901b3d5704ae3b0352fa3e8830774b6e38025c7552c13d312a273cb88c1649dc6d8ab38ebd1b2bfb16b2cc056f870c138052b951baacdee560e218972b1a0932bc266855062fafed6064bcc637db59713538c45a69c838b09e1b143b7c1e2e6b72a6a00b7cd0afff8d20b9008d61023aadf193d8ff8040220564c0bcbd9dc03a98ab1b8eb96c576291636c0c1de5e3d872c095876efafa7575f994f45c29cb3fa9e96f98012b7a84ce820e172e625b1de98031e5471cf5c9036864289d95d2f1956abf5d4f9a7e81ac2796c67a4aec8f54a5896bffd05b4514df6b2a7df1038183ea740459db4a07ad275e153a08cef7542abf7775a8ff164e73a424bd22815da91265c8c86c1dd90ed926fe313fe32be9c040f7065b27c8cd03d585bbdef6f149ebb3e3906fed7290a19ee7d42621393d634940c771c6dd95a9fd153bf25e029b453a69b10cd3c9d3fb17fd936ee6243a5357b38ccdfacff843aa2a51081925acac1b7ef3dae20304562be99ee3464885988d6e08b8f1ec22e51d5960b25c799d4ec379bec80219cacbcb4e312e744b6e5da1cb39e6d7b90c492ddacc215d1218891f65acb3d3917ed208bd6e8fd520eddf7584ecc920c9243c657cb6482dbf6a38af25d199f2137880b605f640a4f996f48da1f7058d81604a70c672414230105990aeb151560ab80379e346a1326c0438b68ce6bd291654d736881176ad30d11e1fad2871eb83f4b339e5fb0bb68eabe3b707324673b3ba607fa27953c9109185ecc2eeff24cc3a7494cbf04f70bbda0b85e644d8e2434bfdeb2bb242016bd82fc78e8ff2b1bb18167e7834f621225eef2607be6d2318ea29e507f7be94764f67aa5c61c7d15dba36cbea919c665137f9216e30310c1c3a410eb7ffd8bfb3d339273a8934b4089efeea8ce06cd5dcdc46907e169dad730be362e6583a512071d6a2b7ead9c4482dc91f55a62592925adcd3892dd57461ac830d74cb8ceb47c78ddaf2558cb8bde9dd3ce2edb882cbb0fe019ea611bbf778493d63a3b68b3d94a283470e4e682ee4cc569ebc6629b4f0a5e10fa9bbd6dc044cf7d61d11d0ec5563c0b7b86141e7a852fe64fa7c8496b112f366ca2e4afefc68ebd78bddfd5bf95b40f691b0d81fdb5126e9ed55e32db62af1dca33a3449aba59f12bd03c0f4a64e1fefb18ed08f6a9a1325248139659687a73d378f09002ebc4b2baab643ca44b4a7ee63dc4631f211181647daea7e36806eb0a79980ae519fbc77c9988db03cebecc1ce2db3acbdc928e2de2111fd171c89feac400249b28c14267f3e6f711206b0517aea57817e13d0f6553e6e9b73d99a3f85e5a9cc8bd7e3605dbf5b4f4e665bc7541fe888c7d86cac5811d560e044ebe3bb4768eb9307369da53a32201a7467c066b83b86c333876e821801f98b466dcd2dd6077468029722b01988324e101b8dc37d5d45be0cfa5655e232bebbdae8bd70e92a66140ddfa4bd182beecf5038d4f0bc31b37fa26ed21820c78450770d380c2f42386a5c27a93b2f85f37756d9b32df934ec4d1598e5b3ff6fc53d5cdaf6acdaa53566a122349bd1c21a73b634dfaf23130db368a236376144efbdfbcbea34e78000a261b3817a10eb7c0413534dafdc55cb12f65bbcb73a4467bbc2c2319ab070ffaaa8e4eb24ef9cfa2cdeab19e16e0b1a502104492ca060ce50381e7ebeae0341ab532bc8a4e9a4bdf31e25fbf7674353f347c274fcc40083486fd48c08602c12c9c6806c7517c5b8aa178f65286f5007ea8d94170a7b070e66bae28e5e143b477a2629efa8e33883c03e0e58a6f21e253d87683d4852abd31f1199496337eef9c8bb81c5e3313a0a4c96cd4e4a3997144340f0bd5d3fe3ecdcd0feeee6bcb3ba0cbd160298936e6c26e3be0b86644e2704b0ead40f64e486a95856736f04d5493944eba60794ebc538fe149367eec24d8855061ca11078832d771d0efdfa221f66af302e1424bd3e4afef26dab0cf76b51d95b90d75d4ea196f5eff677e4260170b21918b0882eeab5dba283b07b4feb99bdce197c6e453371c41be2a8fa6e29d6ab5cbeff6", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x10, 0x0, 0x4000000000200}, 0x0, 0x0, 0x0, 0x0}) getdents(r4, 0x0, 0x48) syz_fuse_handle_req(r0, &(0x7f0000010ec0)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="300000000000000008000000000000000100000000000000000000000000000001"], 0x0, 0x0, 0x0, 0x0}) 650.053812ms ago: executing program 2 (id=1940): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f00000000c0)='rdma') 649.7907ms ago: executing program 2 (id=1941): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)={0x4d6, 0x7d, 0x0, {{0x500, 0x124, 0x0, 0x0, {}, 0x400c0000, 0x0, 0x0, 0x0, 0x2e, '\x04nodZ=\xbfd\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x9beq,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1', 0x39, 'p\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\xd9\xb5i(\xfb\xbf\v\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00'}, 0x39d, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11\xe5\x9d\xfb\xd8\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xed\x8e<\xea\v^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae-[\\\x99\xf7\x17\xf0\xa0wI#\x9b]\b\xf8\xc5\xc0\xadyQ\xe0\xa7\xc7\xf3\xdb\x8d\xfd?\x86W%\x8al\x04\xf3-W\xad(s\xdeE\xfa\x98\xb0\xf8&y\x17\xff\x9b\xbe\x9c\rt\xa5\xac\xa2\x06\xfe)\xe0\xc1\x03\x9f\"U<\'GB]\x83\x100x.\xe7\x8f\x8b\xa3]\xe3\x18\xc5?\tO\x92\\\xc9x.\x94\xb6\xc8p\xa4\x87g\x8b\xfa\xe7E\xdf\xf2h\xbd\xa7\xfd\xec\x87<\xe4\xfbK\x8d\xcb\xa0A\x9b0D\x9a\xdf\xefrAb\xbf\xb1\n\xaf\xcf\xeaH\xa6\x7f\xaew3\xcc:\x7f\x1e\xef\x91\xbeR\x85!^\xabA\xf6', 0xffffffffffffffff}}, 0x4d6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) ioprio_set$pid(0x2, 0x0, 0x2007) openat$dsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) 560.816836ms ago: executing program 2 (id=1942): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000280)={0x11}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x27, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 559.994283ms ago: executing program 2 (id=1943): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) write$nci(r0, &(0x7f0000000140)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x0, 0x2, 0x0, 0x9, "b237ef56b1f052a6b154071a6d563c87ded56ccac15b58040d2bc1b859cd53bba7119837f9d90efccb1dc0178fd209de119f7266e3c0227c8c39ba18418731b78262c589833ef9be9c2c52ac0fb5cc864da9bc52a33d8a"}, 0x5a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pread64(r2, &(0x7f0000001600)=""/4073, 0xfe9, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r3 = fcntl$dupfd(r1, 0x406, r1) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000380)=0xb8, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) read$msr(r3, &(0x7f0000000640)=""/154, 0x9a) 500.556496ms ago: executing program 2 (id=1944): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x9e9e, 0x80801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0xd, 0x2, r2}) r3 = eventfd2(0x6, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe81a10a0015400100142603600e1208000b0000000401a800080008000a400600000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000440)={[{0x4, 0x9, 0x8e, 0xf, 0x81, 0x2, 0x40, 0x4b, 0x10, 0x5, 0x7, 0x6a, 0x9}, {0x7, 0xff, 0x4, 0x8, 0x6, 0x4, 0x7, 0x6, 0x23, 0x6, 0x40, 0x4, 0x5}, {0x8, 0x5, 0x8, 0xf3, 0xb0, 0x6, 0x2, 0x7, 0x8b, 0x0, 0x2, 0x7f, 0x2}], 0x4}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, r3}) setxattr$trusted_overlay_nlink(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340), &(0x7f0000000380)={'U-', 0x8}, 0x16, 0x5) close(0x4) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000002c0)=r3, 0x1) 499.949758ms ago: executing program 2 (id=1945): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x11c) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r3 = io_uring_setup(0x5013, &(0x7f0000000140)={0x0, 0xfffffffc, 0x3681, 0x0, 0x273}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_enter(r3, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000f40)=ANY=[@ANYRES8, @ANYBLOB="e13c8dddc8"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='vxfs\x00', 0x11, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000040025bd7011f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 450.500268ms ago: executing program 5 (id=1946): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100033060000000000000000ffffffff000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a002300000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040007"], 0x154}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x20000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000003c0)={'ni_at_a2150\x00', [0x140, 0x1, 0x1, 0xfffffffe, 0xba8, 0x10000, 0x7, 0x6, 0x1007, 0xc72d, 0x1, 0x12, 0xf8, 0x8, 0x4ce, 0x9e9a, 0x101, 0x9, 0x6, 0x8, 0x8000004, 0x0, 0x80000c, 0x9, 0x3, 0x200000, 0xae, 0x100000, 0xf, 0x0, 0x1008]}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x114, 0x24, 0x400, 0x70bd2a, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x67, 0x32, 0x5b, 0x2, 0x2, 0xaec, 0x3, 0x7}}, {0x12, 0x2, [0x49b, 0x3, 0xda9e, 0xb6, 0x1, 0x45, 0x0]}}, {{0x1c, 0x1, {0x7, 0x1, 0x81, 0x680, 0x2, 0x101, 0x4, 0x8}}, {0x14, 0x2, [0x9, 0xffff, 0x4, 0x0, 0x3, 0x3, 0xb7b, 0x8]}}, {{0x1c, 0x1, {0x8, 0x9, 0x1, 0x2, 0x1, 0x3, 0x0, 0x6}}, {0x10, 0x2, [0xfffc, 0x2, 0xfc01, 0x3, 0x24f, 0x7]}}, {{0x1c, 0x1, {0xf8, 0xc, 0x8eb, 0x6, 0x2, 0x2, 0x5, 0x6}}, {0x10, 0x2, [0x4e, 0x7, 0x5, 0x1000, 0x200, 0x47c]}}, {{0x1c, 0x1, {0x3, 0x0, 0x1, 0x5, 0x2, 0x8, 0x3, 0x5}}, {0xe, 0x2, [0x9, 0x400, 0x200, 0x4, 0x0]}}]}]}, 0x114}}, 0x0) 390.234461ms ago: executing program 5 (id=1947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000100)=0x9) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012cbd700002000000020020000800610054000000080061"], 0x24}}, 0x4000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="b268823c0ab1dc8eff0e3903d83dd406149d740aa470da3027353fb75f159f653e53e3c22a1e7285422673df623fd1cb7585ed991bbb77147bc904a1a857d821b011bb766ddca08b880fb17c479386c4e10b5ec2efd1a38741af35d4a0fc0749a355e98c25d33a913d70aed6ef8b35cbe2da02bb4b5698893b9d2956302a213069d39599f7124553f49e744c92ee459daac8fbc20fa14c1948704fc5c1a3a505bd71c86c10cbaf78a7d507dec07f2ab2080ceeb5692fa5ad52a88cc03bfbeeffa285e9b2c9ee7d8265763d20c7104efa2d892c53659c4f561e51704c", @ANYRES16=r3, @ANYBLOB="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"], 0x284}, 0x1, 0x0, 0x0, 0x800}, 0x24000080) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x24, 0x0, &(0x7f0000cab000)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r9 = socket$unix(0x1, 0x5, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffead, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xe, 0x7f, 0x800, 0x5}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40008c1}, 0x20000090) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRES32=r12, @ANYRESHEX=r4, @ANYBLOB="9457059050270cc26824fa778b1cac2926d68f60d0f61adbdf25040000a986bae70000000a0000", @ANYRESHEX=r10, @ANYRESDEC=r9, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x42805}, 0x84) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x1, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44840) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r14, 0x15}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 290.778342ms ago: executing program 4 (id=1948): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='0000:00:01.0\x00', 0xd) write(0xffffffffffffffff, &(0x7f0000000900), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x80, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r3, r2, 0x7}, 0x10) write(r1, &(0x7f0000000b00)='0000:00:03.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='0000:00:04.0\x00', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/pci/devices/0000:00:05.0/driver/unbind\x00', 0x1, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000003c0)={'8255\x00', [0x140, 0x0, 0xd, 0x0, 0x2, 0x4, 0x4, 0x2, 0x7, 0x2c731, 0x4000004, 0x7, 0x2009, 0x8, 0x4ce, 0x9e9b, 0x103, 0x80000006, 0x6, 0x0, 0x7, 0x2, 0x2f, 0x81, 0xffd, 0x6, 0xab, 0x1, 0x283, 0x8001, 0x400006]}) timerfd_create(0x0, 0x80000) write(r5, &(0x7f0000000f00)='0000:00:05.0', 0xc) 290.500784ms ago: executing program 5 (id=1949): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000280)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffffff, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x4, 0x83, @tick, {0xf9}, {}, @ext={0x0, 0x0}}, {0x6, 0x3, 0x9, 0xff, @time={0x9, 0x5}, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xe, 0x7fff}}, {0x8, 0x3, 0xa, 0x4, @time={0x800003, 0x6}, {0xbd, 0x3}, {0xd}, @time=@tick=0x5}], 0x70) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [], {0x14}}, 0x28}}, 0x4000000) 60.452524ms ago: executing program 5 (id=1950): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x200101) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x9100100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd4f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x20000010) preadv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/150, 0x96}], 0x1, 0xde, 0x6) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f00000003c0)="b8ef73", &(0x7f0000000400)=""/164}, 0x20) (async) r3 = syz_clone(0x20000000, &(0x7f0000000500)="6458ed4cbffe35f3d0cf910f40384ce1d258e08fecd16f5b37e9fef3fb42341a72c7b955c8a41e8eb1cb76fb9c99caa92dd9ba1c570d82a5b371a08dd4baf26d7f0aa2cbfb8e0846283314c3c1203aed37d86b6c8a9d801e8495ec987889b90c8af8db1fcaf0b101b1291b0f2ede1dc1a01957939869dc006e4979acfabb622889f983b69690e681975649df", 0x8c, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="f7dd7da5787c3128a3eaca2f0e2acb2c8ed963a725b37e2adc7bfc84a46d99792b6d3454e3050ee97e3a90c96bf5e9c06e52b9c1650b0d2a0736d2b22b387c27b2bcd30d764aaa41d09182b4b9b9d14766515683824c62405f78963f33ab450a4c25a643d5c610809b925676947978a0c1575cf5cb3285817e9f9e53e616f4") (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, r5, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) (async) sendto$packet(r0, &(0x7f0000000880)="9416cf0e612ae9f2d68cb58e59b44085eeb7c8049078a9aa82bb0defc64d8471b55a217ab6fe95dbf2039dcdd760f67468c402341e6c55acb7dbbdc6a74951fd1600ca0560f0fec2887f504bceb8772941ac3076f9e2defea7c8ab3856327f6712a1e181c6b95af45a8909d3d94727ecc1529c828eed3e9de650004f133f604c55735565051294981c2d524687f6eb643e9f459f99aa2287498cea5ec8a83037e9166ead68253466d921e93d6d6fefb8ba7c4368904b", 0xb6, 0x40, &(0x7f0000000940)={0x11, 0xf5, r1, 0x1, 0x8, 0x6, @remote}, 0x14) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000000980)={0x3, 0xac}) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a00), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, r8, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008801}, 0x10) (async) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b80), r4) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x78, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x40009}, 0x20885) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r9, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0xc000) (async) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x0, [0x6, 0x8, 0x8]}, &(0x7f0000000e40)=0x44) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000f00)={'sit0\x00', &(0x7f0000000e80)={'ip_vti0\x00', r1, 0x40, 0x700, 0x8, 0x0, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x67, 0x0, 0x2, 0x2f, 0x0, @multicast2, @multicast2, {[@generic={0x94, 0x2}, @ssrr={0x89, 0xf, 0x4f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}}}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000f40)={r10, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101}, 0xc) (async) unshare(0x48010880) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)=@getnexthop={0x18, 0x6a, 0x4, 0x70bd25, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x80a0) (async) ptrace$ARCH_MAP_VDSO_32(0x1e, r3, 0x400, 0x2002) (async) fcntl$getownex(r0, 0x10, &(0x7f0000001080)) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000010c0), 0xdad32c2c9b8fe958, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r12, 0x5760, 0xa) 0s ago: executing program 5 (id=1951): r0 = fsopen(&(0x7f0000000100)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002b2ff200fbdbdf25681e010008000300", @ANYRES32=r5, @ANYBLOB="2400c7", @ANYRES8=0x0, @ANYRESOCT], 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x4800) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x200004, 0x3}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) kernel console output (not intermixed with test programs): xt=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.837406][ T42] audit: type=1400 audit(2000000265.866:5035): avc: denied { write } for pid=9480 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 441.878820][ T9491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.889569][ T9490] misc userio: No port type given on /dev/userio [ 441.912292][ T9493] i2c i2c-0: new_device: Can't parse I2C address [ 441.978366][ T9501] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 441.980445][ T9501] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 441.982994][ T9501] vhci_hcd vhci_hcd.0: Device attached [ 442.183731][ T1044] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 442.243678][ T5889] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 442.253721][ T1044] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 442.423715][ T5889] usb 7-1: Using ep0 maxpacket: 16 [ 442.429144][ T5889] usb 7-1: config index 0 descriptor too short (expected 18169, got 18) [ 442.431862][ T5889] usb 7-1: config 212 has too many interfaces: 193, using maximum allowed: 32 [ 442.435080][ T5889] usb 7-1: config 212 has an invalid descriptor of length 126, skipping remainder of the config [ 442.438832][ T5889] usb 7-1: config 212 has 0 interfaces, different from the descriptor's value: 193 [ 442.443323][ T5889] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 442.446366][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.448971][ T5889] usb 7-1: Product: syz [ 442.450313][ T5889] usb 7-1: Manufacturer: syz [ 442.451822][ T5889] usb 7-1: SerialNumber: syz [ 442.513955][ T5799] Bluetooth: hci1: command 0x0411 tx timeout [ 442.514031][ T64] Bluetooth: hci3: command 0x0406 tx timeout [ 442.518675][ T5807] Bluetooth: hci2: command 0x0c1a tx timeout [ 442.519377][ T5804] Bluetooth: hci0: command 0x0c1a tx timeout [ 442.663490][ T9502] vhci_hcd: connection reset by peer [ 442.664429][ T5889] usb 7-1: USB disconnect, device number 14 [ 442.667894][ T12] vhci_hcd vhci_hcd.2: stop threads [ 442.670628][ T12] vhci_hcd vhci_hcd.2: release socket [ 442.679018][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 442.800135][ T9516] BIDI support in bsg has been removed. [ 442.830914][ T42] audit: type=1400 audit(2000000266.856:5036): avc: denied { wake_alarm } for pid=9519 comm="syz.3.959" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 442.831003][ T9520] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 443.066897][ T42] audit: type=1400 audit(2000000267.096:5037): avc: denied { setattr } for pid=9534 comm="syz.3.964" name="NETLINK" dev="sockfs" ino=33549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 443.076832][ T42] audit: type=1400 audit(2000000267.106:5038): avc: denied { create } for pid=9534 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 443.256169][ T9557] netlink: 'syz.4.971': attribute type 13 has an invalid length. [ 443.285080][ T9557] netlink: 28 bytes leftover after parsing attributes in process `syz.4.971'. [ 443.378449][ T9565] netlink: 'syz.2.973': attribute type 1 has an invalid length. [ 443.417111][ T9565] 8021q: adding VLAN 0 to HW filter on device bond2 [ 443.423429][ T9565] netlink: 44 bytes leftover after parsing attributes in process `syz.2.973'. [ 444.249805][ T9609] loop6: detected capacity change from 0 to 7 [ 444.257122][ T9609] Dev loop6: unable to read RDB block 7 [ 444.259016][ T9609] loop6: AHDI p1 p2 p3 [ 444.260420][ T9609] loop6: partition table partially beyond EOD, truncated [ 444.262779][ T9609] loop6: p1 start 1601398130 is beyond EOD, truncated [ 444.264951][ T9609] loop6: p2 start 1702059890 is beyond EOD, truncated [ 444.583754][ T5804] Bluetooth: hci1: command 0x0411 tx timeout [ 444.901237][ T9638] 9pnet_virtio: no channels available for device syz [ 444.905024][ T9638] 9pnet_virtio: no channels available for device syz [ 444.908081][ T9638] 9pnet_virtio: no channels available for device syz [ 444.910664][ T9638] 9pnet_virtio: no channels available for device syz [ 444.913209][ T9638] 9pnet_virtio: no channels available for device syz [ 444.916445][ T9638] 9pnet_virtio: no channels available for device syz [ 444.924404][ T9638] 9pnet_virtio: no channels available for device syz [ 444.927653][ T9638] 9pnet_virtio: no channels available for device syz [ 444.930868][ T9638] 9pnet_virtio: no channels available for device syz [ 444.934036][ T9638] 9pnet_virtio: no channels available for device syz [ 444.939566][ T9638] 9pnet_virtio: no channels available for device syz [ 444.975020][ T9642] can0: slcan on ttyS3. [ 445.004610][ T9645] loop5: detected capacity change from 0 to 7 [ 445.073217][ T9653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1000'. [ 445.157944][ T9641] can0 (unregistered): slcan off ttyS3. [ 445.360410][ T9682] netlink: 'syz.4.1007': attribute type 1 has an invalid length. [ 445.380436][ T9682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 445.520700][ T9693] overlayfs: overlapping lowerdir path [ 445.523082][ T9697] overlayfs: overlapping lowerdir path [ 445.833676][ T9440] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 446.005321][ T9440] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.008840][ T9440] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.011875][ T9440] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 446.015835][ T9440] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.018650][ T9440] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.022604][ T9440] usb 9-1: config 0 descriptor?? [ 446.221251][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 446.221264][ T42] audit: type=1400 audit(2000000270.246:5054): avc: denied { kexec_image_load } for pid=9706 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 446.448996][ T9440] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 446.473818][ T42] audit: type=1326 audit(2000000270.506:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38f79de99 code=0x7ffc0000 [ 446.483390][ T42] audit: type=1326 audit(2000000270.506:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38f79de99 code=0x7ffc0000 [ 446.493775][ T42] audit: type=1326 audit(2000000270.506:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38f79de99 code=0x7ffc0000 [ 446.502692][ T42] audit: type=1326 audit(2000000270.506:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd38f79de99 code=0x7ffc0000 [ 446.511261][ T42] audit: type=1326 audit(2000000270.526:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38f79de99 code=0x7ffc0000 [ 446.520131][ T42] audit: type=1326 audit(2000000270.526:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38f79de99 code=0x7ffc0000 [ 446.527370][ T42] audit: type=1326 audit(2000000270.536:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38f79de99 code=0x7ffc0000 [ 446.535230][ T42] audit: type=1326 audit(2000000270.536:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd38f79de99 code=0x7ffc0000 [ 446.547059][ T42] audit: type=1326 audit(2000000270.536:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.2.1015" exe="/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fd38f79de99 code=0x7ffc0000 [ 446.612669][ T5889] hid (null): global environment stack underflow [ 446.621493][ T5889] hid-generic 616F:20C2607D:F72986D9.0007: global environment stack underflow [ 446.624557][ T5889] hid-generic 616F:20C2607D:F72986D9.0007: item 0 1 1 11 parsing failed [ 446.627395][ T5889] hid-generic 616F:20C2607D:F72986D9.0007: probe with driver hid-generic failed with error -22 [ 446.665308][ T5804] Bluetooth: hci1: command 0x0411 tx timeout [ 446.674406][ T9724] program syz.1.1018 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.818527][ T9734] macvtap1: entered promiscuous mode [ 446.822716][ T9734] dummy0: entered promiscuous mode [ 446.833503][ T9734] team0: Device macvtap1 failed to register rx_handler [ 446.862413][ T40] dummy0: left promiscuous mode [ 447.029601][ T9748] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1024'. [ 447.045248][ T9748] ufs: You didn't specify the type of your ufs filesystem [ 447.045248][ T9748] [ 447.045248][ T9748] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 447.045248][ T9748] [ 447.045248][ T9748] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 447.056207][ T9748] ufs: failed to set blocksize [ 447.178857][ T9748] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 447.243339][ T9756] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 447.291857][ T9758] bond0: (slave team0): Releasing backup interface [ 447.305696][ T9758] bond0: (slave bond_slave_0): Releasing backup interface [ 447.312220][ T9758] bond0: (slave bond_slave_1): Releasing backup interface [ 447.321361][ T9758] team0: Port device team_slave_0 removed [ 447.330078][ T9758] team0: Port device team_slave_1 removed [ 447.333490][ T9758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.336992][ T9758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.341527][ T9758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.344876][ T9758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.345085][ T9759] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 447.353419][ T9758] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 447.375044][ T1044] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 447.761272][ T9772] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 447.763723][ T9772] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 447.771710][ T9772] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 447.774947][ T9772] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 447.782159][ T9772] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 447.785064][ T9772] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 447.791120][ T9772] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 447.794232][ T9772] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 447.994947][ T9801] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 448.351064][ T9841] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 448.358836][ T9841] block device autoloading is deprecated and will be removed. [ 448.619651][ T5889] usb 9-1: USB disconnect, device number 6 [ 448.742209][ T9865] tap0: tun_chr_ioctl cmd 1074025675 [ 448.744809][ T9865] tap0: persist disabled [ 448.747337][ T9865] tap0: tun_chr_ioctl cmd 35108 [ 448.795209][ T9870] bond4: entered promiscuous mode [ 448.928591][ T9880] 9pnet_fd: Insufficient options for proto=fd [ 448.931125][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1069'. [ 448.936251][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1069'. [ 448.940427][ T9880] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1069'. [ 449.110256][ T9902] udc dummy_udc.0: failed to start g1: -19 [ 449.114691][ T5886] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 449.126580][ T9902] UDC core: g1: couldn't find an available UDC or it's busy [ 449.238415][ T9848] orangefs_mount: mount request failed with -4 [ 449.264592][ T5886] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 449.267808][ T5886] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 449.270882][ T5886] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 449.275499][ T5886] usb 9-1: config 0 interface 0 has no altsetting 0 [ 449.279448][ T5886] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 449.282306][ T5886] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 449.286082][ T5886] usb 9-1: config 0 interface 0 has no altsetting 0 [ 449.288845][ T5886] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 449.292045][ T5886] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 449.296764][ T5886] usb 9-1: config 0 interface 0 has no altsetting 0 [ 449.301592][ T5886] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 449.305736][ T5886] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 449.310423][ T5886] usb 9-1: config 0 interface 0 has no altsetting 0 [ 449.315926][ T5886] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 449.319543][ T5886] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 449.323854][ T5886] usb 9-1: config 0 interface 0 has no altsetting 0 [ 449.327478][ T5886] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 449.331397][ T5886] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 449.335913][ T5886] usb 9-1: config 0 interface 0 has no altsetting 0 [ 449.339582][ T5886] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 449.343380][ T5886] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 449.348115][ T5886] usb 9-1: config 0 interface 0 has no altsetting 0 [ 449.352037][ T5886] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 449.355790][ T5886] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 449.359223][ T5886] usb 9-1: config 0 interface 0 has no altsetting 0 [ 449.362868][ T5886] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 449.366557][ T5886] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 449.369493][ T5886] usb 9-1: Product: syz [ 449.370856][ T5886] usb 9-1: Manufacturer: syz [ 449.372592][ T5886] usb 9-1: SerialNumber: syz [ 449.386483][ T5886] usb 9-1: config 0 descriptor?? [ 449.413609][ T5888] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 449.419573][ T5886] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 449.574567][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 449.579183][ T5888] usb 6-1: config 166 has an invalid interface number: 36 but max is 2 [ 449.582568][ T5888] usb 6-1: config 166 contains an unexpected descriptor of type 0x1, skipping [ 449.586616][ T5888] usb 6-1: config 166 has an invalid interface number: 43 but max is 2 [ 449.590004][ T5888] usb 6-1: config 166 has an invalid interface number: 240 but max is 2 [ 449.593120][ T5888] usb 6-1: config 166 has an invalid interface number: 129 but max is 2 [ 449.596541][ T5888] usb 6-1: config 166 has 4 interfaces, different from the descriptor's value: 3 [ 449.600393][ T5888] usb 6-1: config 166 has no interface number 0 [ 449.603642][ T5888] usb 6-1: config 166 has no interface number 1 [ 449.606174][ T5888] usb 6-1: config 166 has no interface number 2 [ 449.608809][ T5888] usb 6-1: config 166 has no interface number 3 [ 449.611385][ T5888] usb 6-1: config 166 interface 36 altsetting 7 bulk endpoint 0x8 has invalid maxpacket 32 [ 449.616670][ T5888] usb 6-1: config 166 interface 36 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 449.621090][ T5888] usb 6-1: config 166 interface 36 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 449.626091][ T5888] usb 6-1: config 166 interface 36 altsetting 7 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 449.630428][ T5888] usb 6-1: config 166 interface 43 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 449.635036][ T5888] usb 6-1: config 166 interface 43 altsetting 4 bulk endpoint 0xF has invalid maxpacket 1024 [ 449.639215][ T5888] usb 6-1: config 166 interface 43 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 449.643226][ T5888] usb 6-1: config 166 interface 43 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 449.648534][ T5888] usb 6-1: config 166 interface 43 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 449.652962][ T5888] usb 6-1: config 166 interface 43 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 449.657724][ T5888] usb 6-1: config 166 interface 240 altsetting 224 has a duplicate endpoint with address 0x9, skipping [ 449.662883][ T5888] usb 6-1: config 166 interface 240 altsetting 224 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 449.669312][ T5888] usb 6-1: too many endpoints for config 166 interface 129 altsetting 34: 113, using maximum allowed: 30 [ 449.674850][ T5888] usb 6-1: config 166 interface 129 altsetting 34 has a duplicate endpoint with address 0x6, skipping [ 449.678645][ T5888] usb 6-1: config 166 interface 129 altsetting 34 has a duplicate endpoint with address 0x1, skipping [ 449.682059][ T5888] usb 6-1: config 166 interface 129 altsetting 34 has a duplicate endpoint with address 0xA, skipping [ 449.685629][ T5888] usb 6-1: config 166 interface 129 altsetting 34 has a duplicate endpoint with address 0xB, skipping [ 449.689130][ T5888] usb 6-1: config 166 interface 129 altsetting 34 has 4 endpoint descriptors, different from the interface descriptor's value: 113 [ 449.693402][ T5888] usb 6-1: config 166 interface 36 has no altsetting 0 [ 449.695546][ T5888] usb 6-1: config 166 interface 43 has no altsetting 0 [ 449.697625][ T5888] usb 6-1: config 166 interface 240 has no altsetting 0 [ 449.700385][ T5888] usb 6-1: config 166 interface 129 has no altsetting 0 [ 449.704796][ T5888] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=38.41 [ 449.708405][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.710908][ T5888] usb 6-1: Product: 䰊 [ 449.712246][ T5888] usb 6-1: Manufacturer: წ˒㲌⤇붺쐿緼ꏏ䭣㥬ᜧ㕢ꦱ㠤鮲裦阈⫦饆㬵趋찴六焚肋䪐㰙韓黟譏⾾쭊ﾜ苨ᰍ༞碋㫥ꁓ唵䱀湒ኟজꯧ姻뛦瀂窻ޥ龕칪 [ 449.718791][ T5888] usb 6-1: SerialNumber: syz [ 449.724077][ T5888] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 449.726902][ T5888] usb 6-1: no configuration chosen from 1 choice [ 449.803611][ C0] usb 9-1: yurex_control_callback - control failed: -71 [ 449.808889][ T5888] usb 9-1: USB disconnect, device number 7 [ 449.810960][ T9960] yurex 9-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 449.813851][ T5888] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 450.178797][ T9984] binder: BINDER_SET_CONTEXT_MGR already set [ 450.180763][ T9984] binder: 9983:9984 ioctl 4018620d 2000000000c0 returned -16 [ 450.196502][ T9984] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.1095'. [ 450.199456][ T9984] netlink: 'syz.3.1095': attribute type 1 has an invalid length. [ 450.436860][ T9990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.458548][ T9992] netlink: 'syz.2.1098': attribute type 29 has an invalid length. [ 450.529028][ T9990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.633261][ T9990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.720275][T10002] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 450.755614][ T9990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.874555][ T5896] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.886851][ T5896] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.897803][ T5896] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.906006][ T5896] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.116754][T10025] MTD: Couldn't look up '/dev/sg0': -15 [ 451.118556][T10025] /dev/sg0: Can't lookup blockdev [ 451.120818][T10025] nfs: Bad value for 'source' [ 452.170670][ T40] usb 6-1: USB disconnect, device number 9 [ 452.242743][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1128'. [ 452.253513][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 452.255065][T10081] 8021q: adding VLAN 0 to HW filter on device bond4 [ 452.255665][ T42] audit: type=1400 audit(452.129:5112): avc: denied { map } for pid=10083 comm="syz.1.1130" path="pipe:[7106]" dev="pipefs" ino=7106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 452.264799][T10081] macvlan2: entered promiscuous mode [ 452.267188][T10081] macvlan2: entered allmulticast mode [ 452.269682][T10081] bond4: (slave macvlan2): Opening slave failed [ 453.297977][T10101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1134'. [ 453.301792][T10101] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1134'. [ 453.403126][T10106] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 453.406011][T10106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 453.410738][T10106] vhci_hcd vhci_hcd.0: Device attached [ 453.415597][T10106] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 453.418326][T10106] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 453.424889][T10106] vhci_hcd vhci_hcd.0: Device attached [ 453.427743][T10109] vhci_hcd: connection closed [ 453.427884][T10107] vhci_hcd: connection closed [ 453.429947][ T5848] vhci_hcd vhci_hcd.4: stop threads [ 453.433423][ T5848] vhci_hcd vhci_hcd.4: release socket [ 453.435244][ T5848] vhci_hcd vhci_hcd.4: disconnect device [ 453.437238][ T5848] vhci_hcd vhci_hcd.4: stop threads [ 453.439008][ T5848] vhci_hcd vhci_hcd.4: release socket [ 453.440904][ T5848] vhci_hcd vhci_hcd.4: disconnect device [ 453.713294][T10125] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=7924 sclass=netlink_xfrm_socket pid=10125 comm=syz.1.1140 [ 453.810112][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1141'. [ 453.968173][ T42] audit: type=1400 audit(453.849:5113): avc: denied { write } for pid=10184 comm="syz.1.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 453.979095][ T42] audit: type=1400 audit(453.859:5114): avc: denied { read } for pid=10184 comm="syz.1.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 454.088744][T10203] bond5: option downdelay: invalid value (18446744073709551615) [ 454.091402][T10203] bond5: option downdelay: allowed values 0 - 2147483647 [ 454.096307][T10203] bond5 (unregistering): Released all slaves [ 454.430500][ T42] audit: type=1400 audit(454.309:5115): avc: denied { write } for pid=10214 comm="syz.3.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 454.468215][T10220] overlayfs: overlapping lowerdir path [ 454.472787][T10220] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 454.476062][T10220] overlayfs: overlapping lowerdir path [ 454.549867][T10222] overlayfs: failed to verify index (index/00fb2100014869d76e2a2a48f7bd07019e16e6bcb6be52f890f505000000000000, ftype=8000, err=-61) [ 454.557383][T10222] overlayfs: failed index dir cleanup (-61) [ 454.560583][T10222] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 454.683495][ T42] audit: type=1400 audit(454.559:5116): avc: denied { write } for pid=10226 comm="syz.1.1158" name="usb_gadget" dev="configfs" ino=6626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 454.692086][ T42] audit: type=1400 audit(454.569:5117): avc: denied { write } for pid=10226 comm="syz.1.1158" name="functions" dev="configfs" ino=38622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 454.711069][ T42] audit: type=1400 audit(454.589:5118): avc: denied { getopt } for pid=10228 comm="syz.2.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 454.759157][ T42] audit: type=1400 audit(454.639:5119): avc: denied { lock } for pid=10232 comm="syz.3.1156" path="socket:[39151]" dev="sockfs" ino=39151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 454.800342][T10242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.819511][ T42] audit: type=1400 audit(454.699:5120): avc: denied { setopt } for pid=10239 comm="syz.2.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.832509][T10244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.849959][T10244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.063895][ T5889] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 455.193651][ T5889] usb 7-1: device descriptor read/64, error -71 [ 455.434412][ T5889] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 455.563647][ T5889] usb 7-1: device descriptor read/64, error -71 [ 455.673848][ T5889] usb usb7-port1: attempt power cycle [ 455.805880][T10312] CIFS: bad ip= option (.RHe'ˠ/1C~1WexEAeSb{~R) [ 456.014423][ T5889] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 456.034911][ T5889] usb 7-1: device descriptor read/8, error -71 [ 456.106944][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1179'. [ 456.135212][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1180'. [ 456.273682][ T5889] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 456.294052][ T5889] usb 7-1: device descriptor read/8, error -71 [ 456.405317][ T5889] usb usb7-port1: unable to enumerate USB device [ 456.643162][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1191'. [ 456.647499][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1191'. [ 456.651457][ T42] audit: type=1400 audit(456.529:5121): avc: denied { getopt } for pid=10372 comm="syz.1.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 456.863693][ T5889] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 457.013636][ T5889] usb 9-1: Using ep0 maxpacket: 16 [ 457.017828][ T5889] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 457.022349][ T5889] usb 9-1: config 0 interface 0 has no altsetting 0 [ 457.026716][ T5889] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 457.030386][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.033518][ T5889] usb 9-1: Product: syz [ 457.035161][ T5889] usb 9-1: Manufacturer: syz [ 457.037165][ T5889] usb 9-1: SerialNumber: syz [ 457.041653][ T5889] usb 9-1: config 0 descriptor?? [ 457.252701][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 457.262523][ T5889] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input12 [ 457.279802][ T5889] imon:send_packet: packet tx failed (-71) [ 457.293791][ T5889] imon 9-1:0.0: panel buttons/knobs setup failed [ 457.355425][ T5889] rc_core: IR keymap rc-imon-pad not found [ 457.358027][ T5889] Registered IR keymap rc-empty [ 457.360123][ T5889] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 457.364347][ T5889] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 457.369984][ T5889] imon:send_packet: packet tx failed (-71) [ 457.383728][ T5889] imon 9-1:0.0: remote input dev register failed [ 457.387309][ T5889] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 457.414035][ T5889] imon 9-1:0.0: unable to initialize intf0, err 0 [ 457.416831][ T5889] imon:imon_probe: failed to initialize context! [ 457.419509][ T5889] imon 9-1:0.0: unable to register, err -19 [ 457.425363][ T5889] usb 9-1: USB disconnect, device number 8 [ 457.754074][T10392] input input14: cannot allocate more than FF_MAX_EFFECTS effects [ 457.793680][ T5889] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 457.845988][T10400] syzkaller0: entered promiscuous mode [ 457.848035][T10400] syzkaller0: entered allmulticast mode [ 457.873703][T10399] sctp: [Deprecated]: syz.2.1199 (pid 10399) Use of int in max_burst socket option. [ 457.873703][T10399] Use struct sctp_assoc_value instead [ 457.962393][ T5889] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 457.971161][ T5889] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 457.980961][ T5889] usb 9-1: config 0 interface 0 has no altsetting 0 [ 457.986223][ T5889] usb 9-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 457.989340][T10412] openvswitch: netlink: Flow actions attr not present in new flow. [ 457.990093][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.994974][T10412] xt_hashlimit: size too large, truncated to 1048576 [ 457.996148][ T5889] usb 9-1: Product: syz [ 457.999759][ T5889] usb 9-1: Manufacturer: syz [ 458.001702][ T5889] usb 9-1: SerialNumber: syz [ 458.006337][ T5889] usb 9-1: config 0 descriptor?? [ 458.008983][T10371] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 458.073340][T10412] PKCS8: Unsupported PKCS#8 version [ 458.139055][ T42] audit: type=1400 audit(458.019:5122): avc: denied { load_policy } for pid=10429 comm="syz.1.1209" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 458.141042][T10430] SELinux: ebitmap: empty map [ 458.148179][T10430] SELinux: failed to load policy [ 458.157578][T10428] loop6: detected capacity change from 0 to 8 [ 458.216615][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 458.225873][ T5889] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input15 [ 458.357523][T10428] Dev loop6: unable to read RDB block 8 [ 458.359171][T10434] loop6: detected capacity change from 8 to 0 [ 458.362257][T10428] loop6: unable to read partition table [ 458.365115][T10428] loop6: partition table beyond EOD, truncated [ 458.370033][T10428] loop_reread_partitions: partition scan of loop6 ([{BZ5]z(.BL_sk1) failed (rc=-5) [ 458.473766][ T5889] rc_core: IR keymap rc-imon-pad not found [ 458.475626][ T5889] Registered IR keymap rc-empty [ 458.477261][ T5889] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 458.480265][ T5889] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 458.518231][T10448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1213'. [ 458.546373][T10448] 8021q: adding VLAN 0 to HW filter on device bond3 [ 458.550710][T10451] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=10451 comm=syz.1.1214 [ 458.559670][T10451] netlink: 'syz.1.1214': attribute type 12 has an invalid length. [ 458.562744][T10451] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1214'. [ 458.603986][T10452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1213'. [ 458.622650][ T42] audit: type=1400 audit(458.499:5123): avc: denied { setopt } for pid=10455 comm="syz.1.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 458.630681][ T42] audit: type=1400 audit(458.509:5124): avc: denied { read } for pid=10455 comm="syz.1.1215" path="socket:[41236]" dev="sockfs" ino=41236 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 458.635847][ T5889] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 458.646472][ T5889] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input16 [ 458.660229][ T5889] imon 9-1:0.0: iMON device (15c2:0045, intf0) on usb<9:9> initialized [ 458.808571][ T42] audit: type=1400 audit(458.689:5125): avc: denied { map } for pid=10465 comm="syz.2.1218" path="/dev/null" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 458.819601][ T42] audit: type=1400 audit(458.699:5126): avc: denied { ioctl } for pid=10465 comm="syz.2.1218" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x542a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 458.850033][T10471] IPv6: NLM_F_CREATE should be specified when creating new route [ 458.853803][T10471] loop5: detected capacity change from 0 to 7 [ 458.856928][T10471] Dev loop5: unable to read RDB block 7 [ 458.858680][T10471] loop5: unable to read partition table [ 458.860515][T10471] loop5: partition table beyond EOD, truncated [ 458.862479][T10471] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 458.913951][ T5889] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 459.053841][ T5889] usb 6-1: device descriptor read/64, error -71 [ 459.159438][ T1044] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x105) [ 459.168009][T10481] JFS: discard option not supported on device [ 459.172545][T10481] Mount JFS Failure: -5 [ 459.182137][T10481] Bluetooth: MGMT ver 1.23 [ 459.293689][ T5889] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 459.375848][ T60] usb 9-1: USB disconnect, device number 9 [ 459.443670][ T5889] usb 6-1: device descriptor read/64, error -71 [ 459.554118][ T5889] usb usb6-port1: attempt power cycle [ 459.894169][ T5889] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 459.906536][T10489] syzkaller1: entered promiscuous mode [ 459.908783][T10489] syzkaller1: entered allmulticast mode [ 459.914293][ T5889] usb 6-1: device descriptor read/8, error -71 [ 459.933264][ T42] audit: type=1400 audit(459.809:5127): avc: denied { create } for pid=10491 comm="syz.4.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 459.970279][T10492] netlink: 'syz.4.1225': attribute type 1 has an invalid length. [ 460.153883][ T5889] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 460.176202][ T5889] usb 6-1: device descriptor read/8, error -71 [ 460.293868][ T5889] usb usb6-port1: unable to enumerate USB device [ 460.653647][ T40] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 460.826184][ T40] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 460.829059][ T40] usb 7-1: can't read configurations, error -71 [ 460.994551][T10515] batadv_slave_0: Caught tx_queue_len zero misconfig [ 461.153210][T10524] rdma_op ffff888056dce1f0 conn xmit_rdma 0000000000000000 [ 461.250488][T10527] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.1235'. [ 461.319091][T10535] dvmrp1: entered allmulticast mode [ 461.510673][T10555] netlink: 'syz.4.1244': attribute type 4 has an invalid length. [ 461.544619][T10557] binder: 10556:10557 ioctl c0306201 200000000640 returned -22 [ 461.547153][T10558] binder: 10556:10558 ioctl c0306201 200000000640 returned -22 [ 461.550431][T10557] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1245'. [ 461.553386][T10558] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1245'. [ 461.863665][ T40] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 462.013734][ T40] usb 7-1: Using ep0 maxpacket: 32 [ 462.018146][ T40] usb 7-1: unable to get BOS descriptor or descriptor too short [ 462.022336][ T40] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 54688, setting to 64 [ 462.029385][ T40] usb 7-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40 [ 462.033029][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.035662][ T40] usb 7-1: Product: syz [ 462.037063][ T40] usb 7-1: Manufacturer: syz [ 462.038905][ T40] usb 7-1: SerialNumber: syz [ 462.086853][T10576] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 462.262530][ T40] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 462.333461][ T40] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 462.339727][ T40] usb 7-1: USB disconnect, device number 20 [ 462.340274][T10583] tipc: Started in network mode [ 462.344977][T10583] tipc: Node identity 4004, cluster identity 4711 [ 462.345981][ T42] audit: type=1400 audit(462.229:5128): avc: denied { map } for pid=10578 comm="syz.3.1254" path="/proc/904/net/netlink" dev="proc" ino=4026533060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 462.347570][T10583] tipc: Node number set to 16388 [ 462.353091][ T6822] udevd[6822]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.403992][T10585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1256'. [ 462.510842][T10591] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 462.515011][T10591] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 462.669821][T10601] binder: 10600:10601 ioctl 4018620d 0 returned -22 [ 462.790663][T10609] dlm: non-version read from control device 4096 [ 462.794870][ T42] audit: type=1400 audit(462.679:5129): avc: denied { listen } for pid=10608 comm="syz.4.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 462.803869][ T42] audit: type=1400 audit(462.679:5130): avc: denied { mounton } for pid=10608 comm="syz.4.1265" path="/101/file1" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 462.822663][ T42] audit: type=1400 audit(462.699:5131): avc: denied { unmount } for pid=8982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 462.849383][T10618] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1266'. [ 462.878060][T10621] tmpfs: Bad value for 'mpol' [ 462.894409][T10624] 9pnet_virtio: no channels available for device syz [ 463.073643][T10631] netlink: 'syz.4.1271': attribute type 1 has an invalid length. [ 463.076696][T10631] netlink: 'syz.4.1271': attribute type 4 has an invalid length. [ 463.079287][T10631] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1271'. [ 463.083650][T10631] netlink: 'syz.4.1271': attribute type 1 has an invalid length. [ 463.086229][T10631] netlink: 'syz.4.1271': attribute type 4 has an invalid length. [ 463.088727][T10631] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1271'. [ 463.145525][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 463.145536][ T42] audit: type=1400 audit(463.029:5136): avc: denied { write } for pid=10635 comm="syz.2.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 463.200957][T10649] netlink: 'syz.1.1275': attribute type 10 has an invalid length. [ 463.208495][ T42] audit: type=1400 audit(463.089:5137): avc: denied { lock } for pid=10635 comm="syz.2.1272" path="socket:[39885]" dev="sockfs" ino=39885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 463.348642][T10651] netlink: 'syz.1.1275': attribute type 3 has an invalid length. [ 463.352136][T10651] netlink: 'syz.1.1275': attribute type 1 has an invalid length. [ 463.355443][T10651] NCSI netlink: No device for ifindex 511 [ 463.510172][ T42] audit: type=1400 audit(463.389:5138): avc: denied { name_bind } for pid=10660 comm="syz.1.1278" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 463.669579][T10676] __nla_validate_parse: 3 callbacks suppressed [ 463.669591][T10676] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1278'. [ 463.675915][T10676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.751778][ T42] audit: type=1400 audit(463.629:5139): avc: denied { view } for pid=10677 comm="syz.3.1282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 463.821215][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1284'. [ 463.952262][ T42] audit: type=1400 audit(463.829:5140): avc: denied { mount } for pid=10689 comm="syz.3.1286" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 463.962122][ T42] audit: type=1400 audit(463.829:5141): avc: denied { mounton } for pid=10689 comm="syz.3.1286" path="/302/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 463.970255][ T42] audit: type=1400 audit(463.829:5142): avc: denied { read } for pid=10689 comm="syz.3.1286" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 463.977441][ T42] audit: type=1400 audit(463.829:5143): avc: denied { read } for pid=10689 comm="syz.3.1286" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 463.984013][ T42] audit: type=1400 audit(463.829:5144): avc: denied { open } for pid=10689 comm="syz.3.1286" path="/302/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 463.990684][ T42] audit: type=1400 audit(463.829:5145): avc: denied { read } for pid=10689 comm="syz.3.1286" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 464.507825][T10726] openvswitch: netlink: Missing key (keys=40, expected=100) [ 464.674915][T10739] efs: device does not support 512 byte blocks [ 464.680444][T10739] device does not support 512 byte blocks [ 464.680444][T10739] [ 464.778807][T10753] bridge_slave_0: left allmulticast mode [ 464.780537][T10753] bridge_slave_0: left promiscuous mode [ 464.782303][T10753] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.789068][T10753] bridge_slave_1: left allmulticast mode [ 464.790655][T10753] bridge_slave_1: left promiscuous mode [ 464.792214][T10753] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.797265][T10753] bond0: (slave bond_slave_0): Releasing backup interface [ 464.802980][T10753] bond0: (slave bond_slave_1): Releasing backup interface [ 464.813473][T10753] team0: Port device team_slave_0 removed [ 464.820593][T10753] team0: Port device team_slave_1 removed [ 464.822724][T10753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.825037][T10753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.833308][T10753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.836813][T10753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.841447][T10753] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 465.191066][T10780] ): renamed from hsr0 (while UP) [ 465.220329][T10780] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 465.454440][T10799] xfrm2: entered allmulticast mode [ 465.473986][ T40] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 465.625991][ T40] usb 7-1: config 107 has an invalid interface number: 91 but max is 1 [ 465.629518][ T40] usb 7-1: config 107 contains an unexpected descriptor of type 0x1, skipping [ 465.635487][ T40] usb 7-1: config 107 has an invalid interface number: 149 but max is 1 [ 465.641200][ T40] usb 7-1: config 107 has no interface number 0 [ 465.644063][ T40] usb 7-1: config 107 has no interface number 1 [ 465.646124][ T40] usb 7-1: config 107 interface 91 altsetting 192 endpoint 0x7 has an invalid bInterval 129, changing to 11 [ 465.649691][ T40] usb 7-1: config 107 interface 91 altsetting 192 bulk endpoint 0x5 has invalid maxpacket 1024 [ 465.652944][ T40] usb 7-1: config 107 interface 149 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 465.656923][ T40] usb 7-1: config 107 interface 91 has no altsetting 0 [ 465.658946][ T40] usb 7-1: config 107 interface 149 has no altsetting 0 [ 465.663281][ T40] usb 7-1: New USB device found, idVendor=1b3d, idProduct=0127, bcdDevice= c.7f [ 465.666557][ T40] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.669814][ T40] usb 7-1: Product: Ќ [ 465.671381][ T40] usb 7-1: Manufacturer: 蚣ᒏ㣕挎ⴄ옔슟䦔⠬엾㌯忉퀋㵤 [ 465.676149][T10780] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 466.085870][ T40] ftdi_sio 7-1:107.91: FTDI USB Serial Device converter detected [ 466.089483][ T40] ftdi_sio ttyUSB0: unknown device type: 0xc7f [ 466.098138][ T40] ftdi_sio 7-1:107.149: FTDI USB Serial Device converter detected [ 466.101470][ T40] ftdi_sio ttyUSB1: unknown device type: 0xc7f [ 466.105166][ T40] usb 7-1: USB disconnect, device number 21 [ 466.116133][ T40] ftdi_sio 7-1:107.91: device disconnected [ 466.121616][ T40] ftdi_sio 7-1:107.149: device disconnected [ 466.593922][ T5889] IPVS: starting estimator thread 0... [ 466.643694][T10826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1331'. [ 466.648037][T10825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.683625][T10827] IPVS: using max 44 ests per chain, 105600 per kthread [ 466.913758][ T5993] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 467.065359][ T5993] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 467.069800][ T5993] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 467.073662][ T5993] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 467.077403][ T5993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.083423][T10834] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 467.089612][ T5993] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 467.209397][T10841] misc userio: No port type given on /dev/userio [ 467.217545][T10841] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1336'. [ 467.292423][ T60] usb 7-1: USB disconnect, device number 22 [ 467.468752][T10858] netlink: 'syz.1.1341': attribute type 10 has an invalid length. [ 467.489867][T10858] team0 (unregistering): Port device team_slave_0 removed [ 467.495079][T10858] team0 (unregistering): Port device team_slave_1 removed [ 467.500159][T10860] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1342'. [ 467.508660][T10860] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1342'. [ 467.520260][T10863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1341'. [ 467.524464][T10863] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 467.948973][T10895] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1353'. [ 468.132619][ T5896] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.235003][ T5896] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.295403][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 468.299130][T10917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1361'. [ 468.299150][T10917] openvswitch: netlink: Flow key attr not present in new flow. [ 468.322260][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 468.340149][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 468.352850][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 468.358944][ T5896] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.359292][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 468.374781][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 468.379023][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 468.382197][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 468.387784][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 468.391259][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 468.396802][T10937] gre0: Caught tx_queue_len zero misconfig [ 468.456528][ T5896] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.461058][T10942] netlink: 'syz.1.1366': attribute type 11 has an invalid length. [ 468.473242][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1365'. [ 468.499233][ T7177] Bluetooth: hci4: Frame reassembly failed (-84) [ 468.525969][T10943] batadv0: entered promiscuous mode [ 468.535220][T10943] macsec1: entered promiscuous mode [ 468.537734][T10943] macsec1: entered allmulticast mode [ 468.540127][T10943] batadv0: entered allmulticast mode [ 468.543478][T10943] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 468.550890][T10947] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.554003][T10947] bridge0: port 2(bridge_slave_1) entered listening state [ 468.557211][T10947] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.560320][T10947] bridge0: port 1(bridge_slave_0) entered listening state [ 468.586583][T10947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.592263][T10947] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 468.718116][ T5848] bond3: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 468.723464][ T5848] bond3: (slave veth0_to_bond): making interface the new active one [ 468.731351][ T5848] bond3: active interface up! [ 468.783796][ T5889] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 468.845713][ T5896] bond3 (unregistering): (slave bridge2): Releasing active interface [ 468.863080][ T5896] bond0 (unregistering): Released all slaves [ 468.869556][ T5896] bond1 (unregistering): Released all slaves [ 468.881479][ T5896] bond2 (unregistering): Released all slaves [ 468.890483][ T5896] bond3 (unregistering): Released all slaves [ 468.900003][ T5896] bond4 (unregistering): Released all slaves [ 468.934743][ T5889] usb 7-1: not running at top speed; connect to a high speed hub [ 468.938739][ T5889] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 468.941102][ T5889] usb 7-1: can't read configurations, error -61 [ 468.999495][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 468.999508][ T42] audit: type=1400 audit(468.879:5162): avc: denied { write } for pid=10960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.060993][ T42] audit: type=1400 audit(468.939:5163): avc: denied { write } for pid=10969 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.075359][ T5889] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 469.105284][T10975] tipc: Enabled bearer , priority 0 [ 469.108192][ T5447] 8021q: adding VLAN 0 to HW filter on device eth6 [ 469.130078][T10975] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 469.166971][T10921] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.171840][T10921] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.174704][T10921] bridge_slave_0: entered allmulticast mode [ 469.177435][T10921] bridge_slave_0: entered promiscuous mode [ 469.181072][T10921] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.185077][T10921] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.188137][T10921] bridge_slave_1: entered allmulticast mode [ 469.190962][T10921] bridge_slave_1: entered promiscuous mode [ 469.231499][T10921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.236877][ T5889] usb 7-1: not running at top speed; connect to a high speed hub [ 469.241012][ T5896] hsr_slave_0: left promiscuous mode [ 469.241691][ T5889] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 469.245382][ T5896] hsr_slave_1: left promiscuous mode [ 469.245495][ T5889] usb 7-1: can't read configurations, error -61 [ 469.252317][ T5889] usb usb7-port1: attempt power cycle [ 469.476687][T10921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.507966][T10921] team0: Port device team_slave_0 added [ 469.513946][T10921] team0: Port device team_slave_1 added [ 469.534771][T10921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.537665][T10921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.547719][T10921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.554579][T10921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.556824][T10921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.566432][T10921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.579047][ T42] audit: type=1400 audit(469.459:5164): avc: denied { write } for pid=10984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.604590][T10921] hsr_slave_0: entered promiscuous mode [ 469.607130][ T5889] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 469.607974][T10921] hsr_slave_1: entered promiscuous mode [ 469.612617][T10921] debugfs: 'hsr0' already exists in 'hsr' [ 469.615170][T10921] Cannot create hsr debugfs directory [ 469.629495][ T5889] usb 7-1: not running at top speed; connect to a high speed hub [ 469.634723][ T5889] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 469.637995][ T42] audit: type=1400 audit(469.519:5165): avc: denied { write } for pid=10987 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.638454][ T5889] usb 7-1: can't read configurations, error -61 [ 469.708514][ T5447] 8021q: adding VLAN 0 to HW filter on device eth7 [ 469.783722][ T5889] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 469.805539][ T5889] usb 7-1: not running at top speed; connect to a high speed hub [ 469.809212][ T5889] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 469.812020][ T5889] usb 7-1: can't read configurations, error -61 [ 469.816663][ T5889] usb usb7-port1: unable to enumerate USB device [ 469.835024][T10921] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 469.838024][ T42] audit: type=1400 audit(469.719:5166): avc: denied { write } for pid=10992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.839473][T10921] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.849303][T10921] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 469.853797][T10921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.856640][T10921] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 469.860963][T10921] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.866779][T10921] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 469.871187][T10921] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 469.902403][ T42] audit: type=1400 audit(469.779:5167): avc: denied { write } for pid=10998 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.922872][T10921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.935585][T10921] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.941233][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.944409][ T7177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.951046][ T5447] 8021q: adding VLAN 0 to HW filter on device eth8 [ 469.957395][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.960468][ T7177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.059053][ T42] audit: type=1400 audit(469.939:5168): avc: denied { write } for pid=11006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.107223][ T42] audit: type=1400 audit(469.989:5169): avc: denied { write } for pid=11012 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.152429][ T5447] 8021q: adding VLAN 0 to HW filter on device eth9 [ 470.192731][ T42] audit: type=1400 audit(470.069:5170): avc: denied { write } for pid=11016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.240586][ T42] audit: type=1400 audit(470.119:5171): avc: denied { write } for pid=11021 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.293412][T10921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.445161][T10921] veth0_vlan: entered promiscuous mode [ 470.451414][T10921] veth1_vlan: entered promiscuous mode [ 470.467195][T10921] veth0_macvtap: entered promiscuous mode [ 470.471110][T10921] veth1_macvtap: entered promiscuous mode [ 470.482653][T10921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.489081][T10921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.497074][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.499894][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.505017][ T5804] Bluetooth: hci4: command 0x1003 tx timeout [ 470.505724][ T5799] Bluetooth: hci3: command tx timeout [ 470.507370][ T5810] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 470.514093][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.514146][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.730927][ T5767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.736703][ T5767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.755891][ T5767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.764624][ T5767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.766711][T11051] SELinux: failed to load policy [ 470.881895][T11066] binder: 11061:11066 ioctl c0306201 0 returned -14 [ 470.998576][T11059] syz.1.1378 (11059): drop_caches: 2 [ 471.077494][T11075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.078844][T11078] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 471.113443][T11083] xt_hashlimit: size too large, truncated to 1048576 [ 471.286177][T11096] Process accounting resumed [ 471.310449][T11098] __nla_validate_parse: 1 callbacks suppressed [ 471.310467][T11098] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1388'. [ 471.392878][T11104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1391'. [ 471.421389][T11105] veth5: entered promiscuous mode [ 471.456828][T11104] 8021q: adding VLAN 0 to HW filter on device bond5 [ 471.593746][ T60] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 471.665202][T11123] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1397'. [ 471.756256][ T60] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 471.762322][ T60] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 471.768529][ T60] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 471.774735][ T60] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 471.783825][ T60] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 471.793516][ T60] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 471.796988][ T60] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 471.801404][ T60] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 471.806567][ T60] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 471.811211][ T60] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 471.818591][ T60] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 471.821042][ T60] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 471.824555][ T60] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 471.828301][ T60] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 471.831793][ T60] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 471.837650][ T60] usb 10-1: string descriptor 0 read error: -22 [ 471.839786][ T60] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 471.842609][ T60] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.854769][ T60] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 472.067091][T11100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.071074][T11100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.239640][T11189] fuse: Bad value for 'fd' [ 472.385839][T11200] cgroup: subsys name conflicts with all [ 472.423079][T11206] netlink: 'syz.4.1423': attribute type 11 has an invalid length. [ 472.426830][T11206] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1423'. [ 472.427257][T11207] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 472.583704][ T5810] Bluetooth: hci3: command tx timeout [ 472.733685][ T7818] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 472.913634][ T7818] usb 7-1: Using ep0 maxpacket: 8 [ 472.916503][ T7818] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 472.919151][ T7818] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 472.922198][ T7818] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 472.925496][ T7818] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 472.928622][ T7818] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.932604][ T7818] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 472.935682][ T7818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.144183][ T7818] usb 7-1: GET_CAPABILITIES returned 0 [ 473.145995][ T7818] usbtmc 7-1:16.0: can't read capabilities [ 473.212336][T11199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.391788][ T9197] usb 7-1: USB disconnect, device number 27 [ 473.543271][T11224] 9pnet_fd: p9_fd_create_unix (11224): problem connecting socket: ./file0: -111 [ 473.837688][T11237] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1433'. [ 473.949996][T11247] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1436'. [ 473.955637][T11247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.972003][T11247] netlink: 'syz.2.1436': attribute type 10 has an invalid length. [ 473.974732][T11247] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1436'. [ 473.977697][T11247] team_slave_1: entered promiscuous mode [ 473.979515][T11247] team_slave_1: entered allmulticast mode [ 473.981819][T11247] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 474.047991][T11254] /dev/nullb0: Can't lookup blockdev [ 474.665295][ T5810] Bluetooth: hci3: command tx timeout [ 474.704862][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 474.704875][ T42] audit: type=1400 audit(474.589:5206): avc: denied { watch } for pid=11285 comm="syz.2.1449" path="/347/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 474.894140][T11302] syzkaller0: entered promiscuous mode [ 474.895967][T11302] syzkaller0: entered allmulticast mode [ 475.183296][T11345] fuse: Unknown parameter 'rootmde' [ 475.309102][T11353] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 475.320240][T11352] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 475.320247][T11353] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 475.334865][T11353] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 475.439440][T11358] netlink: set zone limit has 4 unknown bytes [ 475.490989][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1476'. [ 475.494741][T11358] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1476'. [ 475.623350][T11368] netlink: 'syz.4.1478': attribute type 1 has an invalid length. [ 475.640572][T11368] bond6: entered promiscuous mode [ 475.642597][T11368] 8021q: adding VLAN 0 to HW filter on device bond6 [ 475.649144][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1478'. [ 475.665058][T11368] bond6: (slave bridge3): making interface the new active one [ 475.667485][T11368] bridge3: entered promiscuous mode [ 475.670571][T11368] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 475.750022][T11373] tmpfs: Bad value for 'mpol' [ 475.811924][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 475.815856][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 475.822065][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 475.832876][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 475.844816][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 475.852986][T11376] can0: slcan on ptm2. [ 475.919086][ T42] audit: type=1400 audit(475.799:5207): avc: denied { write } for pid=11382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.991213][ T42] audit: type=1400 audit(475.869:5208): avc: denied { write } for pid=11389 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.188116][ T5766] usb 10-1: USB disconnect, device number 2 [ 476.319275][T11377] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.321699][T11377] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.325307][T11377] bridge_slave_0: entered allmulticast mode [ 476.329274][T11377] bridge_slave_0: entered promiscuous mode [ 476.396082][ T42] audit: type=1400 audit(476.279:5209): avc: denied { write } for pid=11407 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.410481][T11377] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.415745][T11377] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.418709][T11377] bridge_slave_1: entered allmulticast mode [ 476.422518][T11377] bridge_slave_1: entered promiscuous mode [ 476.443944][ T42] audit: type=1400 audit(476.329:5210): avc: denied { write } for pid=11414 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.454771][T11374] can0 (unregistered): slcan off ptm2. [ 476.458134][T11377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.464950][T11377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.496655][T11377] team0: Port device team_slave_0 added [ 476.502044][T11377] team0: Port device team_slave_1 added [ 476.506227][ T42] audit: type=1400 audit(476.389:5211): avc: denied { write } for pid=11416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.534665][T11377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.536877][T11377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.544797][T11377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.549021][T11377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.551120][T11377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.558929][ T42] audit: type=1400 audit(476.429:5212): avc: denied { write } for pid=11422 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.565581][T11377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.595004][T11377] hsr_slave_0: entered promiscuous mode [ 476.597292][T11377] hsr_slave_1: entered promiscuous mode [ 476.599332][T11377] debugfs: 'hsr0' already exists in 'hsr' [ 476.601014][T11377] Cannot create hsr debugfs directory [ 476.687465][T11431] bond7: (slave batadv0): Device is not bonding slave [ 476.689572][T11431] bond7: option active_slave: invalid value (batadv0) [ 476.692687][T11431] bond7 (unregistering): Released all slaves [ 476.730498][ T42] audit: type=1804 audit(476.609:5213): pid=11433 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1488" name="/newroot/7/file0" dev="tmpfs" ino=56 res=1 errno=0 [ 476.732002][T11433] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 476.739726][T11433] ref_ctr increment failed for inode: 0x38 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888038753300 [ 476.744035][ T5804] Bluetooth: hci3: command tx timeout [ 476.748438][T11429] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 476.751885][T11429] ref_ctr decrement failed for inode: 0x38 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888038753300 [ 476.755275][T11429] uprobe: syz.5.1488:11429 failed to unregister, leaking uprobe [ 476.788291][T11377] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 476.793071][T11377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.796670][T11377] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 476.811124][T11377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.818538][T11377] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 476.831479][T11377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.834970][T11377] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 476.844187][T11377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.857906][T11377] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.860194][T11377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.862538][T11377] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.864784][T11377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.904161][T11377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.909892][T11452] __nla_validate_parse: 1 callbacks suppressed [ 476.909909][T11452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1493'. [ 476.918297][T10163] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.918663][T11452] openvswitch: netlink: Missing key (keys=40, expected=100) [ 476.926616][T10163] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.927731][T11452] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1493'. [ 476.942603][T11377] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.949846][T10163] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.952146][T10163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.961089][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.963358][ T7246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.268101][T11470] Mass Storage Function, version: 2009/09/11 [ 477.269624][ T42] audit: type=1400 audit(477.149:5214): avc: denied { write } for pid=11469 comm="syz.4.1499" name="functions" dev="configfs" ino=12575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 477.275952][T11470] LUN: removable file: (no medium) [ 477.286661][ T42] audit: type=1400 audit(477.169:5215): avc: denied { mounton } for pid=11473 comm="syz.2.1500" path="/syzcgroup/unified/syz2" dev="hugetlbfs" ino=34751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 477.302172][T11474] XFS (loop2): SB validate failed with error -5. [ 477.437072][T11484] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 477.441837][T11485] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 477.449242][T11484] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 477.463207][T11485] erofs: Unknown parameter '&%*-' [ 477.572303][T11377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.777086][T11377] veth0_vlan: entered promiscuous mode [ 477.789759][T11377] veth1_vlan: entered promiscuous mode [ 477.818074][T11377] veth0_macvtap: entered promiscuous mode [ 477.831857][T11377] veth1_macvtap: entered promiscuous mode [ 477.849776][T11377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.862640][T11377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.867351][ T5804] Bluetooth: hci2: command tx timeout [ 477.895055][ T5848] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.900093][ T5848] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.904881][ T5848] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.913878][ T5848] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.923981][T11524] program syz.5.1508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 478.005686][ T5767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.010970][ T5767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.038408][ T7260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.041013][ T7260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.043470][T11533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11533 comm=syz.5.1510 [ 478.300290][T11548] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1514'. [ 478.368226][T11553] netlink: 'syz.5.1516': attribute type 2 has an invalid length. [ 478.374280][T11553] netlink: 151 bytes leftover after parsing attributes in process `syz.5.1516'. [ 478.831095][T11594] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1529'. [ 478.878214][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'. [ 478.882052][T11597] netlink: 'syz.4.1530': attribute type 10 has an invalid length. [ 478.886582][T11597] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1530'. [ 478.900969][T11597] bond0 (unregistering): Released all slaves [ 478.927509][T11592] fuse: Bad value for 'fd' [ 479.025531][T11613] fuse: Bad value for 'fd' [ 479.060861][T11615] syz_tun: entered allmulticast mode [ 479.070295][T11614] syz_tun: left allmulticast mode [ 479.201417][T11625] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 479.247652][T11626] can: request_module (can-proto-0) failed. [ 479.259250][T11625] can: request_module (can-proto-0) failed. [ 479.761730][T11657] Process accounting resumed [ 479.943705][ T5804] Bluetooth: hci2: command tx timeout [ 480.168736][T11670] xt_ipcomp: unknown flags 1D [ 481.434683][T11668] IPv6: sit1: Disabled Multicast RS [ 481.437685][T11668] sit1: entered allmulticast mode [ 481.492691][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 481.492703][ T42] audit: type=1400 audit(481.369:5226): avc: denied { write } for pid=11677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.535372][ T42] audit: type=1400 audit(481.419:5227): avc: denied { write } for pid=11682 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.597885][T11676] SELinux: failed to load policy [ 481.606391][T11696] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20003 [ 481.648635][T11703] mmap: syz.4.1559 (11703): VmData 37462016 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 481.651301][T11704] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1560'. [ 481.707256][T11708] (syz.4.1562,11708,3):ocfs2_get_sector:1713 ERROR: status = -5 [ 481.715257][T11708] (syz.4.1562,11708,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 481.719389][T11708] (syz.4.1562,11708,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 481.723094][T11708] (syz.4.1562,11708,3):ocfs2_fill_super:1177 ERROR: status = -5 [ 481.787181][T11724] overlayfs: failed to resolve './file1/file0': -2 [ 481.789669][T11721] program syz.5.1565 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.835248][T11729] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=11729 comm=syz.2.1567 [ 481.878750][ T42] audit: type=1400 audit(481.759:5228): avc: denied { write } for pid=11730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.918094][T11737] netlink: 'syz.2.1569': attribute type 1 has an invalid length. [ 481.921082][T11738] netlink: 'syz.2.1569': attribute type 1 has an invalid length. [ 481.922247][ T42] audit: type=1400 audit(481.799:5229): avc: denied { write } for pid=11735 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 481.936590][T11727] i2c i2c-0: delete_device: Can't find device in list [ 481.952966][T11738] 8021q: adding VLAN 0 to HW filter on device bond4 [ 481.983300][ T42] audit: type=1400 audit(481.859:5230): avc: denied { create } for pid=11742 comm="syz.2.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 481.993722][ T9] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 482.020968][T11743] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 482.023701][ T5804] Bluetooth: hci2: command tx timeout [ 482.155929][ T9] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 482.158623][ T9] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 482.162504][ T9] usb 11-1: config 0 interface 0 has no altsetting 0 [ 482.167431][ T9] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 482.170911][ T9] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 482.173859][ T9] usb 11-1: Product: syz [ 482.175557][ T9] usb 11-1: Manufacturer: syz [ 482.177010][ T9] usb 11-1: SerialNumber: syz [ 482.181862][ T9] usb 11-1: config 0 descriptor?? [ 482.188679][ T9] hub 11-1:0.0: bad descriptor, ignoring hub [ 482.191520][ T9] hub 11-1:0.0: probe with driver hub failed with error -5 [ 482.196089][ T9] usb 11-1: selecting invalid altsetting 0 [ 482.263889][ T1359] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 482.439831][T11721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.447492][T11747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.450699][T11721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.453897][T11747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.461162][ T60] usb 11-1: USB disconnect, device number 2 [ 482.462041][ T1359] usb 10-1: unable to get BOS descriptor or descriptor too short [ 482.467201][ T1359] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 482.469594][ T1359] usb 10-1: can't read configurations, error -71 [ 482.944211][T11763] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 482.999063][T11768] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 483.001134][T11768] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 483.004493][T11768] vhci_hcd vhci_hcd.0: Device attached [ 483.007893][ T5804] Bluetooth: hci3: unexpected cc 0x080f length: 90 > 1 [ 483.008902][ T42] audit: type=1400 audit(482.889:5231): avc: denied { setopt } for pid=11767 comm="syz.5.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 483.034158][T11773] x_tables: duplicate underflow at hook 2 [ 483.176436][ T42] audit: type=1400 audit(483.059:5232): avc: denied { map } for pid=11778 comm="syz.4.1582" path="socket:[48630]" dev="sockfs" ino=48630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 483.185777][ T42] audit: type=1400 audit(483.059:5233): avc: denied { read accept } for pid=11778 comm="syz.4.1582" path="socket:[48630]" dev="sockfs" ino=48630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 483.193826][ T5766] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 483.198875][ T42] audit: type=1400 audit(483.059:5234): avc: denied { getopt } for pid=11778 comm="syz.4.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 483.265359][ T5766] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 483.277251][T11784] geneve3: entered promiscuous mode [ 483.279643][T11784] geneve3: entered allmulticast mode [ 483.447684][T11792] /dev/sr0: Can't lookup blockdev [ 483.451541][T11792] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1587'. [ 483.549654][T11797] ptrace attach of "/syz-executor exec"[5793] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 483.553487][T11797] digital: digital_start_poll: Unknown protocol [ 483.636859][ T42] audit: type=1400 audit(483.519:5235): avc: denied { write } for pid=11798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 483.662184][T11804] IPVS: length: 28 != 24 [ 483.665339][T11804] IPVS: length: 28 != 24 [ 483.666592][T11805] netlink: 'syz.2.1590': attribute type 49 has an invalid length. [ 483.666733][T11804] IPVS: length: 28 != 24 [ 483.729960][T11805] bond_slave_0: entered promiscuous mode [ 483.733401][T11805] bond_slave_0: entered allmulticast mode [ 483.781879][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1591'. [ 483.831179][T11769] vhci_hcd: connection reset by peer [ 483.833939][ T5896] vhci_hcd vhci_hcd.5: stop threads [ 483.836568][ T5896] vhci_hcd vhci_hcd.5: release socket [ 483.839022][ T5896] vhci_hcd vhci_hcd.5: disconnect device [ 484.104263][ T5804] Bluetooth: hci2: command tx timeout [ 484.295286][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1593'. [ 484.367504][T11844] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 484.445346][T11848] netlink: 'syz.4.1596': attribute type 1 has an invalid length. [ 484.456867][T11848] bond7: entered promiscuous mode [ 484.458874][T11848] 8021q: adding VLAN 0 to HW filter on device bond7 [ 484.470325][T11848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1596'. [ 484.473427][T11848] bond7: entered allmulticast mode [ 484.678647][T11857] overlay: filesystem on ./file0 is read-only [ 484.948764][T11877] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 484.983135][T11864] Bluetooth: MGMT ver 1.23 [ 485.051299][T11879] overlayfs: conflicting lowerdir path [ 485.513656][ T60] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 485.663957][ T60] usb 11-1: Using ep0 maxpacket: 16 [ 485.670018][ T60] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.675675][ T60] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.679840][ T60] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 485.685778][ T60] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 485.689636][ T60] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.695970][ T60] usb 11-1: config 0 descriptor?? [ 485.783883][ T7818] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 485.905968][T11943] netlink: 872 bytes leftover after parsing attributes in process `syz.2.1627'. [ 485.908888][T11943] netlink: 872 bytes leftover after parsing attributes in process `syz.2.1627'. [ 485.935951][ T7818] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 485.938557][ T7818] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 485.941138][ T7818] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 485.944158][ T7818] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 485.947911][ T7818] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 485.950954][ T7818] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 485.957918][ T7818] usb 9-1: string descriptor 0 read error: -22 [ 485.959921][ T7818] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 485.962722][ T7818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.967003][ T7818] usb 9-1: config 0 descriptor?? [ 485.969121][T11922] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 485.972753][ T7818] hub 9-1:0.0: bad descriptor, ignoring hub [ 485.974718][ T7818] hub 9-1:0.0: probe with driver hub failed with error -5 [ 485.979986][ T7818] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input18 [ 486.107152][T11900] netlink: 512 bytes leftover after parsing attributes in process `syz.6.1614'. [ 486.185156][ T5888] usb 9-1: USB disconnect, device number 10 [ 486.185267][ C3] usb_acecad 9-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -19 [ 487.065832][ T5804] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 487.071112][ T5804] Bluetooth: hci3: Injecting HCI hardware error event [ 487.075011][ T5810] Bluetooth: hci3: hardware error 0x00 [ 487.161763][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 487.161779][ T42] audit: type=1400 audit(487.039:5251): avc: denied { write } for pid=11975 comm="syz.2.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 487.291101][T11989] ptrace attach of "/syz-executor exec"[8982] was attempted by "/syz-executor exec"[11989] [ 487.387677][ T42] audit: type=1400 audit(487.269:5252): avc: denied { listen } for pid=11997 comm="syz.4.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 487.390764][T11998] netlink: 'syz.4.1642': attribute type 1 has an invalid length. [ 487.396688][T11998] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1642'. [ 487.400212][T11998] netlink: 'syz.4.1642': attribute type 2 has an invalid length. [ 487.402688][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1642'. [ 487.411600][ T42] audit: type=1400 audit(487.289:5253): avc: denied { transfer } for pid=11997 comm="syz.4.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 487.476632][T12000] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 487.599133][T12005] comedi comedi3: unsupported base address 0x2000 [ 487.619539][T12002] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 487.629874][ T42] audit: type=1400 audit(487.509:5254): avc: denied { relabelto } for pid=12001 comm="syz.2.1644" name="403" dev="tmpfs" ino=2178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 487.640325][ T42] audit: type=1400 audit(487.509:5255): avc: denied { associate } for pid=12001 comm="syz.2.1644" name="403" dev="tmpfs" ino=2178 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 487.756559][ T42] audit: type=1400 audit(487.639:5256): avc: denied { write } for pid=5793 comm="syz-executor" name="403" dev="tmpfs" ino=2178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 487.764627][ T42] audit: type=1400 audit(487.639:5257): avc: denied { remove_name } for pid=5793 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 487.772867][ T42] audit: type=1400 audit(487.639:5258): avc: denied { write } for pid=5793 comm="syz-executor" name="403" dev="tmpfs" ino=2178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 487.781026][ T42] audit: type=1400 audit(487.639:5259): avc: denied { write } for pid=5793 comm="syz-executor" name="403" dev="tmpfs" ino=2178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 487.792101][ T42] audit: type=1400 audit(487.639:5260): avc: denied { write } for pid=5793 comm="syz-executor" name="403" dev="tmpfs" ino=2178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 487.808036][T12018] block nbd0: not configured, cannot reconfigure [ 487.841930][T12020] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1650'. [ 487.998254][T12026] netlink: 'syz.2.1652': attribute type 21 has an invalid length. [ 488.272071][ T60] usbhid 11-1:0.0: can't add hid device: -71 [ 488.274115][ T60] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 488.280458][ T60] usb 11-1: USB disconnect, device number 3 [ 488.300669][T12037] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 488.433731][ T5766] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 488.492871][T12041] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 488.496394][T12041] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 488.499954][T12041] overlayfs: failed to set uuid (219/file1, err=-13); falling back to uuid=null. [ 488.664039][ T60] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 488.780877][T12048] team0: Mode changed to "loadbalance" [ 488.795808][ T60] usb 11-1: device descriptor read/64, error -71 [ 489.053797][ T60] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 489.092895][T12078] /dev/nullb0: Can't lookup blockdev [ 489.118972][T12080] __nla_validate_parse: 1 callbacks suppressed [ 489.118984][T12080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1670'. [ 489.193761][ T60] usb 11-1: device descriptor read/64, error -71 [ 489.221815][T12090] fuse: Bad value for 'fd' [ 489.265062][T12093] netlink: 'syz.2.1675': attribute type 2 has an invalid length. [ 489.267535][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1675'. [ 489.314336][ T60] usb usb11-port1: attempt power cycle [ 489.314370][ T5810] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 489.367281][T12100] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 489.533859][T12107] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 489.537829][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1680'. [ 489.540359][T12107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1680'. [ 489.545899][T12107] dvmrp1: left allmulticast mode [ 489.599026][T12108] cgroup: Invalid name [ 489.602631][T12108] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 489.663861][ T60] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 489.684964][ T60] usb 11-1: device descriptor read/8, error -71 [ 489.795568][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1683'. [ 489.933696][ T60] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 489.954288][ T60] usb 11-1: device descriptor read/8, error -71 [ 490.063947][ T60] usb usb11-port1: unable to enumerate USB device [ 490.186827][T12142] nftables ruleset with unbound set [ 490.968877][T12189] fuse: Unknown parameter 'fd9SP9 mU2' [ 490.972772][T12189] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12189 comm=syz.4.1702 [ 491.086749][T12190] [U]  [ 491.194911][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1705'. [ 491.380674][T12200] binder: 12198:12200 unknown command 1986356271 [ 491.382832][T12200] binder: 12198:12200 ioctl c0306201 2000000004c0 returned -22 [ 492.129708][T12226] netlink: 'syz.4.1712': attribute type 64 has an invalid length. [ 492.132139][T12226] netlink: 'syz.4.1712': attribute type 4 has an invalid length. [ 492.134719][T12226] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1712'. [ 492.466309][T12239] afs: Unknown parameter 'dynfs' [ 492.469576][T12239] overlayfs: overlapping lowerdir path [ 492.653384][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 492.653399][ T42] audit: type=1400 audit(492.529:5266): avc: denied { connect } for pid=12247 comm="syz.6.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 493.322600][T12261] tmpfs: Bad value for 'mpol' [ 493.457406][T12270] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1726'. [ 493.460139][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1726'. [ 493.463203][T12270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1726'. [ 493.850047][T12299] xt_l2tp: missing protocol rule (udp|l2tpip) [ 493.938712][T12295] loop3: detected capacity change from 0 to 7 [ 493.945665][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.949894][ C0] buffer_io_error: 27 callbacks suppressed [ 493.949909][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 493.958923][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.962665][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 493.966977][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.970841][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 493.976832][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.980633][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 493.984568][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 493.987541][T12313] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 493.988271][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 493.991480][T12313] overlayfs: maximum fs stacking depth exceeded [ 493.994873][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.000399][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 494.003926][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.006973][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 494.009535][T12295] ldm_validate_partition_table(): Disk read failed. [ 494.011843][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.015395][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 494.018830][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.021849][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 494.024841][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 494.028649][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 494.031877][T12295] Dev loop3: unable to read RDB block 0 [ 494.037507][T12295] loop3: unable to read partition table [ 494.039395][T12295] loop3: partition table beyond EOD, truncated [ 494.042544][T12295] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 494.042853][T12319] netlink: 'syz.2.1740': attribute type 1 has an invalid length. [ 494.106912][T12319] bridge4: entered promiscuous mode [ 494.113955][T12319] bond5: (slave bridge4): making interface the new active one [ 494.116733][T12319] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 494.162886][ T42] audit: type=1326 audit(494.039:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12326 comm="syz.4.1742" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe9ab9de99 code=0x0 [ 494.528781][T12338] fuse: Bad value for 'fd' [ 494.531713][T12338] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 494.570254][T12342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12342 comm=syz.2.1746 [ 494.570621][T12343] netlink: 'syz.2.1746': attribute type 1 has an invalid length. [ 494.579256][T12343] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 494.756913][T12353] __nla_validate_parse: 3 callbacks suppressed [ 494.756930][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'. [ 494.766553][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1748'. [ 494.892094][ T42] audit: type=1400 audit(494.769:5268): avc: denied { accept } for pid=12356 comm="syz.6.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 495.013119][T12375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1753'. [ 495.019311][T12375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1753'. [ 495.027925][T12375] erspan0: entered promiscuous mode [ 495.031647][T12375] erspan0: left promiscuous mode [ 495.032125][T12378] netlink: 'syz.4.1754': attribute type 1 has an invalid length. [ 495.058565][T12378] bond8: entered promiscuous mode [ 495.060653][T12378] 8021q: adding VLAN 0 to HW filter on device bond8 [ 495.216403][ T42] audit: type=1400 audit(495.099:5269): avc: denied { write } for pid=12389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.268514][ T42] audit: type=1400 audit(495.149:5270): avc: denied { write } for pid=12398 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.480807][T12407] xt_hashlimit: size too large, truncated to 1048576 [ 495.550673][ T42] audit: type=1400 audit(495.429:5271): avc: denied { append } for pid=12418 comm="syz.4.1765" name="event2" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 495.564714][T12419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1765'. [ 495.652512][ T42] audit: type=1400 audit(495.529:5272): avc: denied { setattr } for pid=12422 comm="syz.6.1767" name="pmem0" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 495.893249][T12426] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 495.894703][ T42] audit: type=1400 audit(495.779:5273): avc: denied { create } for pid=12425 comm="syz.4.1768" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 495.931538][ T42] audit: type=1400 audit(495.779:5274): avc: denied { associate } for pid=12425 comm="syz.4.1768" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 495.970557][ T42] audit: type=1400 audit(495.779:5275): avc: denied { mounton } for pid=12425 comm="syz.4.1768" path="/269/bus" dev="tmpfs" ino=1451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 496.124506][T12444] netlink: 'syz.4.1773': attribute type 11 has an invalid length. [ 496.204308][T12446] netlink: 666 bytes leftover after parsing attributes in process `syz.6.1774'. [ 496.494863][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'. [ 496.497646][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'. [ 496.536151][T12465] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1779'. [ 496.602793][T12467] securityfs: Unknown parameter '/dev/video2' [ 496.668474][T12472] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 496.681920][T12472] dvmrp0: entered allmulticast mode [ 496.719753][T12474] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1782'. [ 496.902633][T12481] veth1_to_bond: Caught tx_queue_len zero misconfig [ 496.962549][T12488] loop5: detected capacity change from 0 to 7 [ 496.966483][T12488] loop5: p3 p4 [ 496.968053][T12488] loop5: partition table partially beyond EOD, truncated [ 496.996142][T12488] virtio-fs: tag not found [ 497.176244][T12507] virtio-fs: tag not found [ 497.197016][ T5810] Bluetooth: hci2: Unable to find connection for big 0x6f [ 497.197532][T12509] lo: Caught tx_queue_len zero misconfig [ 497.210896][T12507] bond0: entered allmulticast mode [ 497.217797][T12507] bond_slave_0: entered allmulticast mode [ 497.219503][T12507] bond_slave_1: entered allmulticast mode [ 497.225579][T12509] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 497.233125][T12509] exFAT-fs (nullb0): invalid boot record signature [ 497.236192][T12509] exFAT-fs (nullb0): failed to read boot sector [ 497.239568][T12509] exFAT-fs (nullb0): failed to recognize exfat type [ 497.343853][T12519] ip6erspan0: entered allmulticast mode [ 497.620361][T12537] openvswitch: netlink: Key 7 has unexpected len 2 expected 12 [ 498.823649][ C2] bridge0: port 1(bridge_slave_0) entered learning state [ 498.826471][ C2] bridge0: port 2(bridge_slave_1) entered learning state [ 500.512582][T12557] fuse: Bad value for 'fd' [ 500.555842][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 500.555853][ T42] audit: type=1400 audit(500.439:5298): avc: denied { write } for pid=12562 comm="syz.4.1811" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 500.566156][ T42] audit: type=1400 audit(500.449:5299): avc: denied { ioctl } for pid=12562 comm="syz.4.1811" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 500.589106][ T42] audit: type=1400 audit(500.469:5300): avc: denied { write } for pid=12564 comm="syz.5.1813" name="extensions" dev="configfs" ino=15402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 500.636726][ T7818] IPVS: starting estimator thread 0... [ 500.704133][T12581] __nla_validate_parse: 9 callbacks suppressed [ 500.704150][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1815'. [ 500.763661][T12574] IPVS: using max 31 ests per chain, 74400 per kthread [ 500.772309][T12590] fuse: Bad value for 'fd' [ 501.398518][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.110904][T12670] syzkaller0: entered promiscuous mode [ 502.113490][T12670] syzkaller0: entered allmulticast mode [ 502.316613][T12663] FAULT_INJECTION: forcing a failure. [ 502.316613][T12663] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 502.321938][T12663] CPU: 0 UID: 0 PID: 12663 Comm: syz.5.1839 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.321957][T12663] Tainted: [L]=SOFTLOCKUP [ 502.321960][T12663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 502.321967][T12663] Call Trace: [ 502.321971][T12663] [ 502.321976][T12663] dump_stack_lvl+0x100/0x190 [ 502.322005][T12663] should_fail_ex.cold+0x5/0xa [ 502.322019][T12663] _copy_to_user+0x32/0xd0 [ 502.322039][T12663] simple_read_from_buffer+0xcb/0x170 [ 502.322051][T12663] proc_fail_nth_read+0x1af/0x230 [ 502.322072][T12663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.322089][T12663] ? rw_verify_area+0xce/0x6d0 [ 502.322103][T12663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.322119][T12663] vfs_read+0x1e4/0xb40 [ 502.322136][T12663] ? __pfx_vfs_read+0x10/0x10 [ 502.322152][T12663] ? __fget_files+0x215/0x3d0 [ 502.322165][T12663] ? __fget_files+0x21f/0x3d0 [ 502.322179][T12663] ksys_read+0x12a/0x250 [ 502.322195][T12663] ? __pfx_ksys_read+0x10/0x10 [ 502.322214][T12663] do_syscall_64+0x115/0x870 [ 502.322231][T12663] ? clear_bhb_loop+0x40/0x90 [ 502.322244][T12663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.322255][T12663] RIP: 0033:0x7f867f35e6ce [ 502.322264][T12663] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 502.322274][T12663] RSP: 002b:00007f868023efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 502.322285][T12663] RAX: ffffffffffffffda RBX: 00007f868023f6c0 RCX: 00007f867f35e6ce [ 502.322292][T12663] RDX: 000000000000000f RSI: 00007f868023f0a0 RDI: 0000000000000005 [ 502.322298][T12663] RBP: 00007f868023f090 R08: 0000000000000000 R09: 0000000000000000 [ 502.322304][T12663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.322310][T12663] R13: 00007f867f626038 R14: 00007f867f625fa0 R15: 00007ffc3dfb18f8 [ 502.322323][T12663] [ 502.594384][T12706] bpf: Bad value for 'uid' [ 502.702500][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1850'. [ 502.806708][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1853'. [ 502.810186][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1853'. [ 502.844977][T12714] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1853'. [ 502.868651][T12712] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:0 [ 502.987185][ T42] audit: type=1400 audit(502.869:5301): avc: denied { read } for pid=12723 comm="syz.6.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 503.532732][T12734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62367 sclass=netlink_route_socket pid=12734 comm=syz.6.1859 [ 503.753418][T12741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1861'. [ 503.825561][T12746] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.1862'. [ 503.828637][T12746] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.1862'. [ 504.149213][T12759] fuse: Bad value for 'fd' [ 504.167151][T12760] vxcan3: entered promiscuous mode [ 504.196256][T12762] xt_TPROXY: Can be used only with -p tcp or -p udp [ 504.199576][T12762] trusted_key: encrypted_key: master key parameter is missing [ 504.269234][T12766] XFS (nbd6): SB validate failed with error -5. [ 504.350234][T12771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.413201][ T42] audit: type=1400 audit(504.289:5302): avc: denied { write } for pid=12777 comm="syz.6.1871" name="/" dev="9p" ino=79429723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 504.429676][ T42] audit: type=1400 audit(504.289:5303): avc: denied { unlink } for pid=12777 comm="syz.6.1871" name="file0" dev="9p" ino=79429959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 504.446025][ T42] audit: type=1326 audit(504.319:5304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.2.1872" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd38f79de99 code=0x0 [ 504.491485][T12784] netlink: 'syz.2.1873': attribute type 12 has an invalid length. [ 504.494097][T12784] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1873'. [ 504.505282][ T42] audit: type=1400 audit(504.389:5305): avc: denied { write } for pid=12777 comm="syz.6.1871" name="/" dev="9p" ino=79429723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 504.518790][ T42] audit: type=1400 audit(504.389:5306): avc: denied { link } for pid=12777 comm="syz.6.1871" name="file1" dev="9p" ino=79429755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 504.535850][ T42] audit: type=1400 audit(504.419:5307): avc: denied { write } for pid=12777 comm="syz.6.1871" name="/" dev="9p" ino=79429723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 504.604134][T12781] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 504.609103][T12781] block device autoloading is deprecated and will be removed. [ 504.613022][T12776] netlink: 'syz.5.1870': attribute type 10 has an invalid length. [ 504.758252][T12793] fuse: Bad value for 'fd' [ 504.852426][T12799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 504.978471][T12807] loop8: detected capacity change from 0 to 7 [ 505.001150][ C2] blk_print_req_error: 10 callbacks suppressed [ 505.001168][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 505.008065][ C2] buffer_io_error: 10 callbacks suppressed [ 505.008082][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 505.022513][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 505.025541][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 505.028617][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 505.031617][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 505.036624][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 505.039653][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 505.042274][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 505.045637][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 505.048418][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 505.051413][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 505.054192][T12807] ldm_validate_partition_table(): Disk read failed. [ 505.056565][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 505.059650][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 505.063808][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 505.066769][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 505.069528][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 505.072495][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 505.075146][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 505.078115][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 505.081012][T12807] Dev loop8: unable to read RDB block 0 [ 505.083206][T12807] loop8: unable to read partition table [ 505.085264][T12807] loop8: partition table beyond EOD, truncated [ 505.090518][T12807] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 505.219226][T12816] overlayfs: failed to resolve './bus': -2 [ 505.554260][ T7818] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 505.713969][ T7818] usb 11-1: Using ep0 maxpacket: 8 [ 505.716752][ T7818] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 505.720318][ T7818] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 505.733024][ T7818] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 505.742323][ T7818] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 505.752978][ T7818] usb 11-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 505.755865][ T7818] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.758375][ T7818] usb 11-1: Product: syz [ 505.759703][ T7818] usb 11-1: Manufacturer: syz [ 505.761159][ T7818] usb 11-1: SerialNumber: syz [ 505.767331][ T7818] usb 11-1: config 0 descriptor?? [ 505.769493][T12820] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 505.977115][ T7818] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 505.981257][ T7818] input: Griffin SoundKnob as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input20 [ 506.357159][ C1] powermate: config urb returned -71 [ 506.359546][ C1] powermate: config urb returned -71 [ 506.361966][ C1] powermate: config urb returned -71 [ 506.373658][ T7818] usb 11-1: USB disconnect, device number 8 [ 506.373753][ C1] powermate 11-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 506.417850][T12863] netlink: 'syz.6.1898': attribute type 1 has an invalid length. [ 506.438098][T12863] __nla_validate_parse: 3 callbacks suppressed [ 506.438115][T12863] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.1898'. [ 506.447573][T12863] netlink: 'syz.6.1898': attribute type 1 has an invalid length. [ 506.450585][T12863] netlink: 2016 bytes leftover after parsing attributes in process `syz.6.1898'. [ 506.571379][T12875] random: crng reseeded on system resumption [ 506.597137][T12874] virtio-fs: tag not found [ 506.614925][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1903'. [ 506.748460][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1907'. [ 506.819304][T12894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1908'. [ 506.830901][T12895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1908'. [ 506.919265][T12909] trusted_key: syz.5.1913 sent an empty control message without MSG_MORE. [ 506.923868][T12895] binfmt_misc: register: failed to install interpreter file ./file0 [ 506.939142][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 506.939154][ T42] audit: type=1400 audit(506.819:5309): avc: denied { map } for pid=12907 comm="syz.5.1913" path="/dev/video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 506.980040][T12894] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1908'. [ 506.985562][T12908] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1908'. [ 507.280441][T12933] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1920'. [ 507.419022][T12937] netlink: 'syz.4.1919': attribute type 12 has an invalid length. [ 507.565575][T12943] gadgetfs: bound to dummy_udc driver [ 507.743047][T12955] netlink: zone id is out of range [ 507.745178][T12955] netlink: get zone limit has 4 unknown bytes [ 507.781024][T12955] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.783504][T12955] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.789676][T12955] bond0: left allmulticast mode [ 507.791527][T12955] bond_slave_0: left allmulticast mode [ 507.793204][T12955] bond_slave_1: left allmulticast mode [ 507.859081][T12955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.870888][T12955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.006656][ T7416] hid-generic 0005:0007:0007.0008: hidraw1: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 508.007723][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1932'. [ 508.081813][T12978] fido_id[12978]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 508.176334][T12955] vxcan3: left promiscuous mode [ 508.185892][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.191312][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.199861][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.202883][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.270925][T12995] mac80211_hwsim hwsim3 : renamed from wlan0 [ 508.408171][T13001] CIFS mount error: No usable UNC path provided in device string! [ 508.408171][T13001] [ 508.412519][T13001] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 508.464209][T13003] /dev/loop2: Can't lookup blockdev [ 508.501793][T13005] netlink: 'syz.2.1942': attribute type 2 has an invalid length. [ 508.558604][T13010] netlink: 'syz.2.1944': attribute type 21 has an invalid length. [ 508.601159][ T42] audit: type=1326 audit(508.479:5310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13011 comm="syz.2.1945" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd38f79de99 code=0x0 [ 508.655210][T13015] /dev/nullb0: Can't lookup blockdev [ 509.085307][T13033] overlay: filesystem on ./file0 not supported as upperdir qemu-system-x86_64: vtd_irte_get: detected non-present IRTE (index=15, high=0x0, low=0x0) [ 509.102284][T13025] ------------[ cut here ]------------ [ 509.104981][T13025] remove_proc_entry: removing non-empty directory 'irq/20', leaking at least 'comedi_parport' [ 509.109138][T13025] WARNING: fs/proc/generic.c:747 at remove_proc_entry+0x4e7/0x610, CPU#3: syz.4.1948/13025 [ 509.113052][T13025] Modules linked in: [ 509.115127][T13025] CPU: 3 UID: 0 PID: 13025 Comm: syz.4.1948 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.121327][T13025] Tainted: [L]=SOFTLOCKUP [ 509.123015][T13025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 509.126674][T13025] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 509.128827][T13025] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d e9 5f 6c 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 00 ea 8b <67> 48 0f b9 3a e9 2a fe ff ff e8 0c ca 4d ff 48 8d 7d 18 48 b8 00 [ 509.138628][T13025] RSP: 0018:ffffc90003a57780 EFLAGS: 00010246 [ 509.140547][T13025] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff888038695edc [ 509.143047][T13025] RDX: ffff88801c3685dc RSI: ffffffff8bea0040 RDI: ffffffff9128f260 [ 509.145571][T13025] RBP: ffff888038695eb8 R08: ffff8880386959dc R09: ffffed10070d2bc3 [ 509.148039][T13025] R10: ffff888038695e1b R11: 0000000000000000 R12: ffff888038695e00 [ 509.150483][T13025] R13: ffff88801c368500 R14: ffff8880386959b8 R15: dffffc0000000000 [ 509.152945][T13025] FS: 00007efe98df66c0(0000) GS:ffff8880d60de000(0000) knlGS:0000000000000000 [ 509.155748][T13025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 509.157845][T13025] CR2: 00007f868021cfa8 CR3: 0000000060766000 CR4: 0000000000352ef0 [ 509.160321][T13025] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 509.162872][T13025] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 509.165666][T13025] Call Trace: [ 509.166901][T13025] [ 509.168043][T13025] ? __pfx_remove_proc_entry+0x10/0x10 [ 509.169746][T13025] ? mtree_load+0x32d/0xa90 [ 509.171221][T13025] ? __pfx_mtree_load+0x10/0x10 [ 509.172909][T13025] ? rcu_is_watching+0x12/0xc0 [ 509.174460][T13025] unregister_irq_proc+0x206/0x2a0 [ 509.176081][T13025] ? __pfx_unregister_irq_proc+0x10/0x10 [ 509.177861][T13025] free_desc+0x89/0x330 [ 509.179174][T13025] ? __pfx_free_desc+0x10/0x10 [ 509.180688][T13025] ? kasan_quarantine_put+0x104/0x240 [ 509.182400][T13025] ? lockdep_hardirqs_on+0x78/0x100 [ 509.184084][T13025] ? irq_domain_free_irqs+0x370/0x5c0 [ 509.185742][T13025] irq_free_descs+0x84/0xc0 [ 509.187152][T13025] irq_domain_free_irqs+0x46a/0x5c0 [ 509.188785][T13025] mp_unmap_irq+0xf8/0x130 [ 509.190183][T13025] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 509.192163][T13025] acpi_unregister_gsi_ioapic+0x40/0x60 [ 509.193957][T13025] acpi_unregister_gsi+0x25/0x40 [ 509.195493][T13025] acpi_pci_irq_disable+0x275/0x360 [ 509.197129][T13025] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 509.198900][T13025] pcibios_disable_device+0x89/0xb0 [ 509.200631][T13025] do_pci_disable_device+0x9f/0x100 [ 509.202439][T13025] ? __pfx_do_pci_disable_device+0x10/0x10 [ 509.204348][T13025] pci_disable_device+0x130/0x270 [ 509.205907][T13025] pci_device_remove+0xb2/0x1d0 [ 509.207332][T13025] ? __pfx_pci_device_remove+0x10/0x10 [ 509.208998][T13025] device_remove+0xcb/0x180 [ 509.210418][T13025] device_release_driver_internal+0x44e/0x620 [ 509.212329][T13025] unbind_store+0xf8/0x110 [ 509.213800][T13025] ? __pfx_unbind_store+0x10/0x10 [ 509.215355][T13025] drv_attr_store+0x74/0xb0 [ 509.216778][T13025] ? __pfx_drv_attr_store+0x10/0x10 [ 509.218405][T13025] sysfs_kf_write+0xf2/0x150 [ 509.219886][T13025] kernfs_fop_write_iter+0x3e0/0x5f0 [ 509.221543][T13025] ? __pfx_sysfs_kf_write+0x10/0x10 [ 509.223157][T13025] vfs_write+0x6ac/0x1050 [ 509.224616][T13025] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 509.226456][T13025] ? __pfx_vfs_write+0x10/0x10 [ 509.227963][T13025] ksys_write+0x12a/0x250 [ 509.229319][T13025] ? __pfx_ksys_write+0x10/0x10 [ 509.230848][T13025] ? kcov_ioctl+0x17a/0x750 [ 509.232300][T13025] do_syscall_64+0x115/0x870 [ 509.233831][T13025] ? clear_bhb_loop+0x40/0x90 [ 509.235308][T13025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.237131][T13025] RIP: 0033:0x7efe9ab9de99 [ 509.238538][T13025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.244598][T13025] RSP: 002b:00007efe98df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 509.247097][T13025] RAX: ffffffffffffffda RBX: 00007efe9ae26180 RCX: 00007efe9ab9de99 [ 509.249519][T13025] RDX: 000000000000000d RSI: 0000200000000d00 RDI: 0000000000000007 [ 509.251961][T13025] RBP: 00007efe9ac33eaf R08: 0000000000000000 R09: 0000000000000000 [ 509.254446][T13025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.256886][T13025] R13: 00007efe9ae26218 R14: 00007efe9ae26180 R15: 00007ffd30a241b8 [ 509.259317][T13025] [ 509.260280][T13025] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 509.262539][T13025] CPU: 3 UID: 0 PID: 13025 Comm: syz.4.1948 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.265860][T13025] Tainted: [L]=SOFTLOCKUP [ 509.267197][T13025] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 509.270388][T13025] Call Trace: [ 509.271408][T13025] [ 509.272374][T13025] dump_stack_lvl+0x100/0x190 [ 509.273863][T13025] vpanic+0x552/0x970 [ 509.275104][T13025] ? __pfx_vpanic+0x10/0x10 [ 509.276571][T13025] panic+0xd1/0xe0 [ 509.277758][T13025] ? __pfx_panic+0x10/0x10 [ 509.279150][T13025] check_panic_on_warn.cold+0x19/0x34 [ 509.280803][T13025] ? remove_proc_entry+0x4e7/0x610 [ 509.282413][T13025] __warn.cold+0x191/0x318 [ 509.283830][T13025] __report_bug+0x30f/0x440 [ 509.285251][T13025] ? remove_proc_entry+0x4e7/0x610 [ 509.287055][T13025] ? __pfx___report_bug+0x10/0x10 [ 509.288612][T13025] ? do_raw_spin_lock+0x128/0x260 [ 509.290107][T13025] ? find_held_lock+0x2b/0x80 [ 509.291556][T13025] ? proc_entry_rundown+0x158/0x1e0 [ 509.293162][T13025] ? proc_entry_rundown+0x158/0x1e0 [ 509.294759][T13025] report_bug_entry+0xe1/0x290 [ 509.296291][T13025] ? remove_proc_entry+0x4f5/0x610 [ 509.297872][T13025] handle_bug+0x1cd/0x2a0 [ 509.299213][T13025] exc_invalid_op+0x17/0x50 [ 509.300595][T13025] asm_exc_invalid_op+0x1a/0x20 [ 509.302133][T13025] RIP: 0010:remove_proc_entry+0x4f5/0x610 [ 509.303862][T13025] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 c7 00 00 00 48 8d 3d e9 5f 6c 0e 49 8b 95 d0 00 00 00 48 c7 c6 40 00 ea 8b <67> 48 0f b9 3a e9 2a fe ff ff e8 0c ca 4d ff 48 8d 7d 18 48 b8 00 [ 509.309690][T13025] RSP: 0018:ffffc90003a57780 EFLAGS: 00010246 [ 509.311572][T13025] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: ffff888038695edc [ 509.314200][T13025] RDX: ffff88801c3685dc RSI: ffffffff8bea0040 RDI: ffffffff9128f260 [ 509.316650][T13025] RBP: ffff888038695eb8 R08: ffff8880386959dc R09: ffffed10070d2bc3 [ 509.319188][T13025] R10: ffff888038695e1b R11: 0000000000000000 R12: ffff888038695e00 [ 509.321661][T13025] R13: ffff88801c368500 R14: ffff8880386959b8 R15: dffffc0000000000 [ 509.324072][T13025] ? __pfx_remove_proc_entry+0x10/0x10 [ 509.325756][T13025] ? mtree_load+0x32d/0xa90 [ 509.327177][T13025] ? __pfx_mtree_load+0x10/0x10 [ 509.328703][T13025] ? rcu_is_watching+0x12/0xc0 [ 509.330110][T13025] unregister_irq_proc+0x206/0x2a0 [ 509.331741][T13025] ? __pfx_unregister_irq_proc+0x10/0x10 [ 509.333482][T13025] free_desc+0x89/0x330 [ 509.334775][T13025] ? __pfx_free_desc+0x10/0x10 [ 509.336287][T13025] ? kasan_quarantine_put+0x104/0x240 [ 509.337961][T13025] ? lockdep_hardirqs_on+0x78/0x100 [ 509.339583][T13025] ? irq_domain_free_irqs+0x370/0x5c0 [ 509.341288][T13025] irq_free_descs+0x84/0xc0 [ 509.342717][T13025] irq_domain_free_irqs+0x46a/0x5c0 [ 509.344350][T13025] mp_unmap_irq+0xf8/0x130 [ 509.345739][T13025] ? __pfx_acpi_unregister_gsi_ioapic+0x10/0x10 [ 509.347531][T13025] acpi_unregister_gsi_ioapic+0x40/0x60 [ 509.349151][T13025] acpi_unregister_gsi+0x25/0x40 [ 509.350637][T13025] acpi_pci_irq_disable+0x275/0x360 [ 509.352239][T13025] ? __pfx_acpi_pci_irq_disable+0x10/0x10 [ 509.353947][T13025] pcibios_disable_device+0x89/0xb0 [ 509.355516][T13025] do_pci_disable_device+0x9f/0x100 [ 509.357136][T13025] ? __pfx_do_pci_disable_device+0x10/0x10 [ 509.358943][T13025] pci_disable_device+0x130/0x270 [ 509.360503][T13025] pci_device_remove+0xb2/0x1d0 [ 509.362068][T13025] ? __pfx_pci_device_remove+0x10/0x10 [ 509.363727][T13025] device_remove+0xcb/0x180 [ 509.365142][T13025] device_release_driver_internal+0x44e/0x620 [ 509.367043][T13025] unbind_store+0xf8/0x110 [ 509.368445][T13025] ? __pfx_unbind_store+0x10/0x10 [ 509.370020][T13025] drv_attr_store+0x74/0xb0 [ 509.371470][T13025] ? __pfx_drv_attr_store+0x10/0x10 [ 509.373186][T13025] sysfs_kf_write+0xf2/0x150 [ 509.374627][T13025] kernfs_fop_write_iter+0x3e0/0x5f0 [ 509.376197][T13025] ? __pfx_sysfs_kf_write+0x10/0x10 [ 509.377745][T13025] vfs_write+0x6ac/0x1050 [ 509.379041][T13025] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 509.380759][T13025] ? __pfx_vfs_write+0x10/0x10 [ 509.382260][T13025] ksys_write+0x12a/0x250 [ 509.383598][T13025] ? __pfx_ksys_write+0x10/0x10 [ 509.385110][T13025] ? kcov_ioctl+0x17a/0x750 [ 509.386527][T13025] do_syscall_64+0x115/0x870 [ 509.387962][T13025] ? clear_bhb_loop+0x40/0x90 [ 509.389426][T13025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.391234][T13025] RIP: 0033:0x7efe9ab9de99 [ 509.392599][T13025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.398595][T13025] RSP: 002b:00007efe98df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 509.401189][T13025] RAX: ffffffffffffffda RBX: 00007efe9ae26180 RCX: 00007efe9ab9de99 [ 509.403643][T13025] RDX: 000000000000000d RSI: 0000200000000d00 RDI: 0000000000000007 [ 509.406082][T13025] RBP: 00007efe9ac33eaf R08: 0000000000000000 R09: 0000000000000000 [ 509.408519][T13025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.410945][T13025] R13: 00007efe9ae26218 R14: 00007efe9ae26180 R15: 00007ffd30a241b8 [ 509.413323][T13025] [ 509.414927][T13025] Kernel Offset: disabled [ 509.416259][T13025] Rebooting in 86400 seconds..