last executing test programs: 1m35.230422152s ago: executing program 2 (id=3): socket(0xa, 0x3, 0x3a) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = eventfd(0x80000000) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000680)={0x1, r1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x4, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m34.225489835s ago: executing program 2 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000000)='\x00\xdb\xf9}\x94\xd7\xe5\x1f\xab{\xd0E\xbc\x1f\xb5<\xe4f=\b\x00\x00\x00\x00\x00\x00\x00\xe2\xde\x8c\x10boj\xd3X\x86\v\x8clx=\xbc0F\x94k\x8d\xe0\xeeP\xa8\xa9\x10\xd4\x0f\x1eL!\x82\x8d\x80\xd0#\xca\xaf#\xf6\x95\xf4\xf2\xce\x8f\x8c\xa4\t\xac\x96\x13\x96\xf76\xc1', 0x53) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x20) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) listen(r2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xf802}) r8 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) 1m34.225087757s ago: executing program 2 (id=29): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a5a8698dfa871c5165c14b6fb57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d00", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 1m34.149826286s ago: executing program 2 (id=30): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000580)='/dev/comedi4\x00', 0x2, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x25) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x4000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) syz_emit_ethernet(0xf4, &(0x7f0000000240)={@local, @remote, @void, {@mpls_mc={0x8848, {[{0x3}, {0xc}, {0xf, 0x0, 0x1}, {0xcb2e}, {0x7, 0x0, 0x1}, {0x7cce}, {0x7, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x400, 0x0, 0x1}], @ipv4=@icmp={{0x23, 0x4, 0x2, 0x4, 0xbe, 0x65, 0x0, 0x4, 0x1, 0x0, @private=0xa010101, @remote, {[@cipso={0x86, 0x76, 0x0, [{0x6, 0xc, "363fad2497f9b4d0b983"}, {0x2, 0x9, "d9f02adb12bcb0"}, {0x2, 0xc, "a10ab4a8b1679aac1e32"}, {0x0, 0xc, "af3c6e92ca0af37c083b"}, {0x0, 0x7, "aac4fb3f16"}, {0x2, 0xc, "278e798ae7717fecbb1e"}, {0x7, 0x12, "ad35b2385db95bb8370646ac929f5ae1"}, {0x2, 0x2}, {0x0, 0x10, "bfa1b72450cece3a96f951cbc16f"}, {0x1, 0xc, "41320b4bd443f2709446"}]}]}}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0xbd, 0x31, {0xa, 0x4, 0x0, 0x21, 0x1000, 0x64, 0x5, 0x0, 0x0, 0x1, @rand_addr=0x64010100, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x72, 0x3, 0x8, [{@remote, 0x5}, {@loopback, 0x100}]}]}}, "ef53"}}}}}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40408d1}, 0x1000c880) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0xc000002, 0xf, &(0x7f0000000040)=[0x1388, 0x7fff, 0x8, 0x0, 0x7fffffff, 0x825, 0x7, 0xd, 0x9, 0xd536, 0x101, 0x2, 0x7, 0x6, 0x0], 0x1, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044182, 0x0) fchdir(r3) fallocate(r5, 0x11, 0x600, 0x7c000) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m34.097636621s ago: executing program 2 (id=31): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'\x00@\x00', 0x0, 0x6, 0x3, 0x0, 0x0, "f759ca34000400", '\x00', "03000100", '\x00', ["8bada940edffea0a0800", "c2fed6cb0200004000", '\x00', "00000000000000000100"]}) 1m32.733574041s ago: executing program 2 (id=52): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) symlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00') mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0xdf766000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="cc00000021000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff000000000000000000000020000000000000eeffffff00002c000000ac1414bb000000000000000000000000fe800000000000000000000000000028000000000a000000"], 0xcc}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10001, 0x5, 0xfec00000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r3 = semget$private(0x0, 0x6, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) semtimedop(r3, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="03c9002921e3ffaf309107801da242fcd3"], 0x11) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x406, r6) ioctl$TCSETS(r7, 0x80005520, 0x0) semtimedop(r3, &(0x7f0000000040)=[{}, {0x0, 0xd48}], 0x2, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) prlimit64(r2, 0x2, 0x0, &(0x7f0000000040)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r10, 0x4b37) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r12, 0x0) 1m32.718978349s ago: executing program 32 (id=52): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=2']) symlink(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00') mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0xdf766000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=ANY=[@ANYBLOB="cc00000021000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff000000000000000000000020000000000000eeffffff00002c000000ac1414bb000000000000000000000000fe800000000000000000000000000028000000000a000000"], 0xcc}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10001, 0x5, 0xfec00000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r3 = semget$private(0x0, 0x6, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) semtimedop(r3, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="03c9002921e3ffaf309107801da242fcd3"], 0x11) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r7 = fcntl$dupfd(r6, 0x406, r6) ioctl$TCSETS(r7, 0x80005520, 0x0) semtimedop(r3, &(0x7f0000000040)=[{}, {0x0, 0xd48}], 0x2, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) prlimit64(r2, 0x2, 0x0, &(0x7f0000000040)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDISABIO(r10, 0x4b37) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r12, 0x0) 5.037308332s ago: executing program 1 (id=1342): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@ignoreqv}]}}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) (async) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, &(0x7f0000000000)='./file0\x00') 4.969837193s ago: executing program 1 (id=1344): r0 = fanotify_init(0x200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0xffffd000) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x88482) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x0) ioctl$EVIOCGREP(r4, 0x80284504, &(0x7f0000000040)=""/102) (async) setitimer(0x1, 0x0, 0x0) (async) r5 = memfd_create(&(0x7f0000000080)='-\x7f\x00\x00\x00\x00\x00\x00\x00pp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\x05\x00\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1bB\xd8}\x87\xdb\x1d\x92M\xf2\x9e\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcacW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O\xdeu@\xc1\xed.k\xc4\xdf\x9c\xa1\xa8\xc4^\xf6\x95\v\xfe=\xd6x\x16w\xb5\xb7\xec\x14\x9aGF:\xb3\xd4ky\x19/ZG+\xa7\x10\x8f4\xfc\xa1\xd1', 0x1) (async) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x841) ioctl$VIDIOC_QUERYBUF_DMABUF(r6, 0x80405600, 0x0) (async) ioctl$VIDIOC_LOG_STATUS(r6, 0x5646, 0x0) (async) r7 = dup(r5) fanotify_mark(r0, 0x1, 0x2d, r7, 0x0) fanotify_mark(r7, 0x0, 0x8000008, r7, &(0x7f0000000000)='./file0\x00') fsetxattr$system_posix_acl(r5, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 4.81011847s ago: executing program 1 (id=1346): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1446}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8}, @TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_ctinfo={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000000000000060000010000000000000000010000000000007882b084080000004f0cc2a2aa562bb7e753bf36d8d7aea26998ace271cba9560f675eb407bfcc69a86d4d28bed7c65d50165e307c6f91195eb182c24116f405d74823add66de000"/131], 0x0, 0x32, 0x0, 0x1}, 0x20) 4.808512236s ago: executing program 1 (id=1348): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) epoll_pwait2(r2, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20002000}) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000340)={0x14, &(0x7f00000002c0)={0x40, 0x10, 0x3b, {0x3b, 0x1, "0a336cf5e2ecd7a50186f76189d04c6737381072a0bb361de09ef69b713918cf6cd8d69e726ac73cb7ae21c7289fd288d13d520922e7cb9112"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000380)={0x20, 0xc, 0x87, "3adaae2d603825bd4a5101c90b568a0d3a28c3afc3eb4613fd3f82f829db01b9b417ae287ed06468def252be424048aa8b58af61e6f28a295d1dd9f463712ed5592bc0ddcf097fe600d03de7963cc12c5dcad242871112a5317f0adb7b067b1e7f9eb89f9c5e0fb75d174b2ae7a9f598ea7e0cebf0895ef91bf8f819b9a3a6ce5a9964ff4a5dc3"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xc9}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x3, 0x10, 0xffff8000, 0x7d, 0x5, 0x6, 0x6, 0x4, 0xa2, 0x0, 0x9, 0x88}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000640)={0x20, 0x89, 0x2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r4, 0x0, 0x1}, 0x18) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0xa) write$cgroup_int(r5, &(0x7f0000000040)=0x1c5, 0x12) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b03, 0x0) 3.100115785s ago: executing program 0 (id=1379): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x20) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) 3.098705317s ago: executing program 0 (id=1381): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000080)) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000180)=0xecf) 2.998741303s ago: executing program 0 (id=1382): fallocate(0xffffffffffffffff, 0x1e, 0x7, 0x636b) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x8ccc7000) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x1, 'xfrm0\x00', {}, 0x78}) r2 = accept$netrom(r0, &(0x7f0000000080)={{}, [@null, @netrom, @bcast, @rose, @null, @rose]}, &(0x7f0000000100)=0x48) writev(r2, &(0x7f0000000140), 0x0) getsockname$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x20) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000200)="2220950c7b6ba79c58654afb4e94b22a8a93e7aacda842b0a8be851afc899fca7a379a712580f6437836e115ffbf8fe7ece15b0723ee52c3802cb58f0e2eaefca2dd1610065c88d9c42d2f7ba05b0107390d801c174908548ff0469364a71e4c66e32cfafcff090a6df2c02bad3b9e5b81d53a92f6aad2fcba530b0b2a17358d94bdd438e74a665f1e468ca4f3cc14abc02f942ae5feaa", 0x97}, {&(0x7f00000002c0)="1fbcbcc3c44c7478ac94a1ed35e6404e3087ff9c400ecb1cdcf1b58de6d63b37fa6e4f94f52ccb8fdcad75669f968d44f812de38955470840bb8d6aac8724be46367563760eb6846f4c214f20c965d3b2fb51b07c4823807ff5a3383833ec414db17557c4fd0add034b6", 0x6a}, {&(0x7f0000000340)="506c1292983f752e81c201f738fa6fc79b36a9b5974ad3c3976a0875541e5f62f1a6e9d1b7640cc6bcb152ab90afdbbe2256b85571a455eec42c13d78320f50a2c0e8d02c50132b6fc3e5038244a3fcb018612ad661ae3f1082ef9ea61b812ee8b4bf093c8544257e52be2b39ad78f68f7654100ca17c8d2f9b7fd29c63a9381474ce1b98de826270c11e27c4321c6f6c75607c9a3546f153e0f7b3f24886f634cc194726de7f6bace8842e37060900d8643986721d98b4bb5b62ba5bb11b38a", 0xc0}], 0x3) socket$inet(0x2, 0xbc4a0d0197c2915e, 0x800) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) fallocate(r3, 0x20, 0x2, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/cgroup\x00') mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x30, r4, 0x5e1f7000) ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f00000004c0)) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000001000)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000d40)={0x278, 0x1, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xde, 0x6, "4b9098566d91c4f23c0827d615064221b2b43cdf6f699a7a7903c4145c78e6cd8af1bd9b65e3af453234e5321803c2aea9521bbbd3320f62c5eee45ec189fb198a608eb7ce6f09b60a11bf97dc4d8f6441ebb4c3d391c6ecc0a22ff55b199f44a065e3ae8a3216be8e4bf0d4487bc06c85fbdb04751fe176d568593bf7f3888bf76175853cbef256b640b50821f82f5d9eb1630fa5bac505983381bab3a89590431506139ccd3302584eff30150c224ea2d7647439379d5d15b69b65d213208cda130c5724578d12ce1d6858cfbd647885116ac3186cec6a811b"}, @NFTA_TABLE_USERDATA={0x71, 0x6, "c85504b3daf02a9983b7fb56786bdcd1b3962542bfb8658e76c772fa7392611b224b3dc36bab25cda3ec9e4cf05ea64936f150685c1c0fe3d0d17c186ceb6d03654f146fd86100bc7acddbdd2f729ecab4b7f72ee62bfc26ebc2cd584010d49026953c81c9fa656a8e9138ced7"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xd2, 0x6, "be0962673e4f5983a8b4b99f43b6415dce8c504e54efc9313a2c055ee45992593e4c10c26e7cc097bfef512c36ad8ef15a4c2c2c1d813d1151521f238484dd0286c5b603407c32e6e4bf23c80da47274f899ec87764989a602d82e296a608006019bc315211880c318f1bfcaef3620c66c81f453c66904e1a0f8f21e6313751d744ef74a0e8a58910d7333c2dc67b4d3ac11c34daf3578d7db2f9f9013f7db9fe76b5a6dfabcedeefc4b2cf466e0ee5f2270253e0833583e6be243b98f46137b57828dee4eb2cf026c8485e89ffe"}]}, 0x278}, 0x1, 0x0, 0x0, 0x40}, 0x8040) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000001040)={'wg0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x9, 0x1b, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @jmp={0x5, 0x1, 0xa, 0xc, 0x8, 0x6, 0x10}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000001180)='GPL\x00', 0x2, 0x7f, &(0x7f00000011c0)=""/127, 0x41100, 0x20, '\x00', 0x0, @cgroup_sock=0x22, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x5, &(0x7f0000001240)=[r3, r3, r3, r3, r3, r3, r3], &(0x7f0000001280)=[{0x3, 0x1, 0x4, 0x8}, {0x4, 0x5, 0xf, 0x5}, {0x2, 0x3, 0x7, 0x9}, {0x5, 0x1, 0xa, 0x3}, {0xffff, 0x5, 0xb, 0x5}], 0x10, 0x800}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002640)={r5, 0x0, 0xe2, 0x57, &(0x7f00000013c0)="bf01ec15a3e450dfd3cb3abc3a75664809fa3ae81eafde720354d538bb399d75693b7fb9ffed71f1141227a6413406d4edc16a9e91b07a54b4996be884b2c220ccd48dee0c1e354907fbb39248a89ab16844a82a5c2711de3761d032baf0ec73cf3fa3c63327cc9648d6dff08ee74c67b32955e4643580c830735dc81afcf41893566878ef19522ce9711b7140a6139ff423f10c31a63e2d33c0f7a0efe7a95d3889cab4442bdbf727c860913ea171137387d9b75e6e352b8633a7a73d42b80e106ca99556a30c18e3b5b19eb2cc9c25e05b8db8a4c61674ec5462b51d332e2ec22c", &(0x7f00000014c0)=""/87, 0x72, 0x0, 0x1000, 0xe7, &(0x7f0000001540)="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", &(0x7f0000002540)="0d0075d750017bdc7e5e40f9ce1a7afb9266c762dca9eeb4f076b78c796579adb5cc4eb56e0e583838af2affc811ae7625a0862786bf5efeed441eef6433fe3e1a43d95f0caa2907bb051a7100bd71dc4dcf6f0b69682711e7df189125c3d5a84d29480ccc978eebb3ec3382ff16982bd31d77176acb6b77d257c9149616ea378bd0055e9dfd8d8845a7c3e22d36711cd2d50c438c27762ac74d72db0db0644f9e204a2c57871fc213bc98652cf8ea2a11e3ee7e9939e240d747bfd3a90731ff6ef512244bcfb826e359087cc4df68389a57ea609a3013c78fae24e628a1ffc9b8b26029574009", 0x7, 0x0, 0xcf6}, 0x50) syz_usb_connect(0x3, 0x2e3, &(0x7f00000026c0)={{0x12, 0x1, 0x310, 0xaa, 0xec, 0xdd, 0x10, 0x6b9, 0x4061, 0xa25a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d1, 0x1, 0x59, 0x18, 0x88, 0x0, [{{0x9, 0x4, 0x49, 0x5, 0xa, 0xf5, 0x67, 0xcf, 0x8, [@generic={0x2d, 0x6, "99dc2043bfc7dfbefab8c3916baed217362d6cf72bb250fbcc6dbecb7893861615b1cfdd9e1c829452b30b"}, @hid_hid={0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0xdd0}}], [{{0x9, 0x5, 0xc, 0x10, 0x40, 0xe, 0x5, 0x7, [@generic={0xb, 0x2, "794572e55be6ed9fc7"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x5, 0x3, 0x87, [@generic={0x80, 0x1, "7481b131762680226a4fe07539db6bb67e05fee1229c32e2c2f1cc4380ea8510c31a0b82c8bca3609cf174186ee03f3f9eddc3d695c03c6ed5fda7964f020cf2036bc15ecbcaabc42472a2385e3390c767ede5cd0f5347d4187aa572e4adcf8c30f53f678706194eccac5554b01a46261fc5d2b047c4675a306914a1adaa"}]}}, {{0x9, 0x5, 0x3, 0x10, 0xc0ffb90d993681d0, 0x9, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x7, 0x81, 0x9}}, {{0x9, 0x5, 0xf, 0x3, 0x20, 0x5, 0x2, 0x7}}, {{0x9, 0x5, 0x8, 0x1, 0x0, 0xcc, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6}]}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0xa, 0xd, 0x40, [@generic={0x66, 0x11, "d490911f9f46f666945198bdbf0f001b363055b48b435fcc8a6a374269621a583161bbfdbb97f197bea0b5f11b36897f648fb35261ee1783329610e257bb2c8dc76ae811ce1460224ccad41254199c136daadde8c8fe97a5d1899b7c687556fdb36a7641"}, @generic={0xce, 0x21, "e6a3b83f951ee2d3c7e14f75d9376357aa9a3a51a7b6999b04506016446f3412cf45bfb50b1a73d1e32dcc942adbfb30fc726675320c1833951a4b7801e2869eb5d08e70ae2daccd50f1ad3f2ad633f28d0269c9a788f22886b931fbed20ac2379e48d6cdbce207e62992e696011f16cf107e5583594d964eb80b09810cc8d40cb7999c7f92930088628f63897f0d3f4c70d1680ec56f6dcd039d23f88650d6c285aa2893c53969000c2e229485642640140fa852cfa4b61365400022c275bac5bd7435998cf3e7ed451582d"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x1, 0x9, 0x3}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x4, 0x8, 0x5, [@generic={0x4d, 0xb, "0799e91483226493afda96c1c3cffb515e339ac8cf71f231e07170f40b56edc2b4eb4fe6314d70bcb95721e3fb81a68939cd33b621162f4d36b0a6e573c3fad659345f36d16a4aa0c0e77f"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xe}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x4, 0x2, 0x11, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x1}]}}]}}]}}]}}, &(0x7f0000002e00)={0xa, &(0x7f00000029c0)={0xa, 0x6, 0x250, 0x3, 0x5, 0x57, 0x10, 0x70}, 0x5, &(0x7f0000002a00)={0x5, 0xf, 0x5}, 0x7, [{0xd3, &(0x7f0000002a40)=@string={0xd3, 0x3, "7a393cc34de64df614d543fcf98e2204898554fe9cf6522b61b01c8f1a2be09f53eb71c1fedfd0eae1e37520d78da733e31c13b2b3848e55b11f1c1caa9404bb4edb675d2bace0c966be55e792a484474a7d84de9ee93fb5c04c91216fcccad9311054d44d72c23d27084bb866b90716f1eef03b035696c1b7a9aa386d34c1f43bfa392724abe2c3252ce7c87cdefcaa87d2075da6d0ea43c70c4802874e62aff0cf049289b91caf7b51926e1521d52bbd39a8fe4239e046b2849e45ec37c8235c8083993c50092406cc412a41e3f7118f"}}, {0x4, &(0x7f0000002b40)=@lang_id={0x4, 0x3, 0x1404}}, {0x5e, &(0x7f0000002b80)=@string={0x5e, 0x3, "186d5b1ef7ae022271ceccbbca0bcfc6c2150e670e790ee955fcdf633a4a07cad7f5901402221c6a730178d6f8f3af1a198f4032831dc27916e4764eb8f7ff8c533cf32344830a81f8e757897f61b349b676d73b77974509903d5da4"}}, {0x7c, &(0x7f0000002c00)=@string={0x7c, 0x3, "75e92f9e1db2851aaef93e826ae26573b3471e703d99bc8b827abfa7ce674b4cd71e098012ea257c3e079006c5fd85bfa6bd9cf2c1ad77a77cbbb51b893f246e7e659aab3f12c077f8199e5ba1bd2d5ad2c870ced1bbfcf620fd40f6c0f4b73a6f0fdd1bf7c613b493929f2e16f27950f80a1c0611b200133042"}}, {0x75, &(0x7f0000002c80)=@string={0x75, 0x3, "85456e0bdc631e1cc13d0f3a7b11bb6fb036d8880adcee95e1fc26d4f68bdaeb131b240a63e1d843955d1400852db4cccfcaebc3ad582ca20b8b2fd2d5373e6bfd3801b99e5f8e9cfd4bbcb6c255600ba06d4fa7cef4d77a4b114f131b3414e5efb13affac244c1cbb86a04f5df5fe7a7b802b"}}, {0x93, &(0x7f0000002d00)=@string={0x93, 0x3, "e8c831b2c035573b16520cb78366c310e06e4fb1736f213218016af5ca1c39bd21206c1aae141e64397dddc258ac01e7a2d9798f95ebcb60da6edba88fd510871bce6a6840235418b0a04511876482ab5678679d9891aa17b115b249b7bef1c644054dcabd78be68c15f8d174c362fe7a9d7e963ff4ca7865cbfb65a5ba0d565fcf44952ecbf3762461bd13c2c5ae6ff72"}}, {0x32, &(0x7f0000002dc0)=@string={0x32, 0x3, "676e6c8d5c5ffacc9f227258ffc7e3254a29a4722b138243031241c4c04c01dd5356c910c5abdc6a3e7e1380a0db0dcd"}}]}) ioctl$I2C_TIMEOUT(r3, 0x702, 0x81) writev(r2, &(0x7f0000002f40)=[{&(0x7f0000002e80)="6f3b609b4c436890ac28518d14cb543555df5d5e55c8e7c2c94c92a149967c58f656d69216e8d69e236ad053d3ceb584fcbd90fc1a5025b91b31914f190cc0d189fc7a3af928a9156d18e786acbe99f6650e5d2f37f37ab061e01a2517cb1827328694771e9ccd91202c9a56096f7257eac9f46c0b8f88dcbca9cd6e13e8b41ca3d7a90d5e8c9b4451666a430c743e44cf35", 0x92}], 0x1) ioctl$int_in(r5, 0x5421, &(0x7f0000002f80)=0xf) r6 = accept4$tipc(r3, 0x0, &(0x7f0000002fc0), 0x80000) sendmsg$tipc(r6, &(0x7f0000004380)={&(0x7f0000003000)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3}}, 0x10, &(0x7f0000004300)=[{&(0x7f0000003040)="a61fcef2ff478033254e80ed45b2fee69e7d", 0x12}, {&(0x7f0000003080)="1b2b99fbde3f2211631f0ee5180d80f6cf4c831bf19b8816e66e10f2292be1ba487271edf125ab24d637a6ab", 0x2c}, {&(0x7f00000030c0)="0aa261e1d3994b7b96735f5efd875934fcfbf95252de577abf2d4c64c97694df5d86db66", 0x24}, {&(0x7f0000003100)="61f062d2bd0dac129923431ee82d7a5c852c37e19d6c678527840ff29fc8895f528e9a3fd2a1241820202f835d9b405f236cdd4f8137668f13f8dc2660f7910f6d9f27642ce159f3e4530417aff9cbd6ab56ce9593e3b32c7bfdc771623923580c7dcce1200e6cc5726c02f5974e163f2880852906e3cb24199db59feba01bdfc590d4d11c6856b4d228091304888430301425e9d11ca10403b47cf14d7c34488179087ae75bf90b8e29628d9b05627bdad44424d55308db81bf9a88b8f55ad90bc133d6780dadfb32ca1f74beae2e73df8b292732d13e2b09341112833799ce90eaa2", 0xe3}, {&(0x7f0000003200)="868aac5446bd935baf2cfe654ccf879aa7abc1da5088cbb511d19ed890032af638b1f47baac944f7237934ef042d26f3638c70f8780b05abf7c6ef2775ce5df663be5bb99bf7", 0x46}, {&(0x7f0000003280)="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", 0x1000}, {&(0x7f0000004280)="b02ea18f009ad4426d1b6767cf9d82", 0xf}, {&(0x7f00000042c0)="8bf9df0dc453ab977a2b0e6956fc1e8eaa44a88ad8e7c0d5121daf39b3b38a7c9c5b0fa46405db580786b3841f", 0x2d}], 0x8, 0x0, 0x0, 0x80}, 0x40000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000004400), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000044c0)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004480)={&(0x7f0000004440)={0x1c, r7, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000004500), &(0x7f0000004540)=0xe) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000004580)={0x0, 0x0, {0x3, 0x9, 0x2024, 0x8, 0x2, 0x0, 0x2}}) 2.056647893s ago: executing program 4 (id=1393): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) close_range(r0, r0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x224, 0x52000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)=' ', 0x1}]) 1.788004573s ago: executing program 0 (id=1394): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x20) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0xea) 1.787533644s ago: executing program 0 (id=1395): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x20) r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create(0x80) socket$netlink(0x10, 0x3, 0x8000000004) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x0) 1.680064284s ago: executing program 1 (id=1396): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback, 0x3}, r1}}, 0x30) r4 = dup2(r2, 0xffffffffffffffff) sendmsg$nl_netfilter(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00030000060703002cbd7000fddbdf250700000304008a80d402a6800400bd80d3f79133adfd2b5ed904b5a0abf612ab46dec7ff2f0998cf19418ef352f26f6015a88ebfe90fbeccf275a0918b0d64c31c5fa082d05b454f69b7ad2a64fff901583daa896516acad80780d71868b8962f05ca2fe7337ce8e517e2df1f778075b60df1a55da4f901d0eb5dba2f5cfacf01323b71ecb2ef1988e4f8aa3dfa7d70d7ff743f2a73dd158f4dc81d36d7c1542631e006e440cfe37d1279884420f979e4251a87873216852f53f529a3cb47825afbcfe66ea4533101d01e7e2cee6f9f400d98534757c12824310bcf250ade966100b61bfd20c9da097434db23e251f8f20847757f0bf81bdb783a22fcaebe0889943213b7ec5b47495cb36f407e77e2e92818e1f91988fcbaf357c09e5567b4c27c814443fdd93a652c12994ec4f1caf8da9569000eb7aa69a31f0c47b0400f500fa5cf44fd68755cc8762a794432e58a7dd0a0e1d099c86850982e109f219ead02f10de7178ef0176d6afb5dc5b336bb721b759bbe2ad402a73b47382ba96909ba51d15651fb64b8cf0e02cbdec64878bd59329325455732b5305b939610ed2dc61b8f49d45ee3ddf5008d98008014aa2fe0259cec3eb01591926d748aa03ed96e0308a1171fb9d779473a618b8bfb924761d09987e168b00130c52cf1425ffb9e6cb4bb25daddc909246f9a63935bcfa0af94fe519d1087eae4d66000daeca3393c897061dafc005a3bee9cc16cf7b48ed180e0df3e2a44653f19a1b6ffc88c24dc5455dd526050f400c26fc77f4ebaac6a844cbfaf4d1e20239a2b8ab6c423e27445ac1988785d5b03a772d0c98d4affc12708589cb5a5a38c8f12c8406bb0ec4bdb49299305060a8082123839f48526d64cbe270d7eb58439b45422983132df94d6ebaa5ee9013140404000e801dd746517a3339550b36a4dae1fd8e43615b37d546a06bb337218f3d66453ab1e7f4d5e251dabf0db73570b8bbad492d4a8e667532de2e6e8015b550a27585136bea0b5ffd8b7d6bfa040060801400ea00fe8000000000000000000000000000aa"], 0x300}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) msgget$private(0x0, 0x32c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000280)={0x6, 0x1, 0x0, "cb9649f4ad7d527a0e7447de4048315cdd8a771b391c208d2bd399e0a56bade4"}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000580)={0x0, 0x43, &(0x7f0000000ec0)={&(0x7f00000005c0)=ANY=[@ANYRES8=r9, @ANYRES16=r9, @ANYRES16=r5, @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x20000815}, 0x24048020) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x4000085) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r4, 0xc004ae0a, &(0x7f0000000140)={0x2, [0x0, 0x0]}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) 1.679499651s ago: executing program 1 (id=1397): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5, 0x10, 0xffffffffffffffff, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_WRITE_FIXED={0x5, 0x66, 0x0, @fd_index=0x6, 0x202000, 0x1, 0x0, 0xc, 0x0, {0x2, r3}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x10c, 0x10, 0x1, 0x0, 0x10000000, {0x10, 0x0, 0x4c, r5, {}, {}, {0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0xdc, 0x6, 0x1, 0x56, 0x2, 0xc0, 0x3, 0xa}}, {0x18, 0x2, [0x0, 0x3, 0x6, 0x7, 0x1, 0x400, 0x9, 0xff, 0xe, 0x10]}}, {{0x1c, 0x1, {0x9, 0x7, 0x2, 0x5, 0x1, 0x20005, 0x0, 0x5}}, {0xe, 0x2, [0x7, 0x7, 0x0, 0x1486, 0x9f]}}, {{0x1c, 0x1, {0x4, 0x73, 0x2, 0x2, 0x0, 0x40, 0xf, 0x2}}, {0x8, 0x2, [0x4, 0x4]}}, {{0x1c, 0x1, {0x3, 0xf9, 0x24e, 0x0, 0x0, 0x19, 0xcdd, 0x9}}, {0x16, 0x2, [0xad6, 0x6, 0x80, 0x2, 0x7, 0x200, 0x1, 0xb7b0, 0x9]}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40014}, 0x4000000) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2000c0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r15, 0x4048ae9b, &(0x7f0000000180)={0x70003, 0x0, {[0x800003, 0x1f5, 0x483, 0x7, 0x3, 0x4, 0x4, 0xb68c]}}) ioctl$KVM_SET_GUEST_DEBUG_x86(r15, 0x4048ae9b, &(0x7f0000000080)={0x110003, 0x0, {[0x9, 0x400, 0x1, 0x8, 0x401, 0x7, 0xe, 0x7fffffff]}}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x808a4061}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "15d0502307"}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x24004084) 1.050776289s ago: executing program 4 (id=1402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) fchdir(r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000040)=0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x34, 0x1, 0x470bd2b, 0x25dbdbfe, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x1, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffff], 0x8000000, 0x80a05}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@x86={0x2f, 0xe, 0x5, 0x0, 0x7a, 0x9, 0x3, 0x7, 0x5, 0x3, 0x5, 0x9, 0x0, 0x3, 0x2, 0x80, 0x2, 0x8, 0x9, '\x00', 0x5}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 930.308478ms ago: executing program 4 (id=1405): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x20000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000149202, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x40, 0x7800, 0x5, 0x3, {{0x5, 0x4, 0x0, 0x1d, 0x14, 0x64, 0x0, 0x42, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}, @broadcast}}}}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2b, r3}) r4 = syz_io_uring_setup(0x6927, &(0x7f0000000100)={0x0, 0x2000000, 0x10}, &(0x7f0000000040), &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_NAPI(r4, 0x1c, &(0x7f00000000c0), 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2ab, 0x28000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xfb8d14993e11c6ae}, 0x8000011) 870.213397ms ago: executing program 4 (id=1408): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x1) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) dup(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 869.20524ms ago: executing program 4 (id=1409): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$netlink(0x10, 0x3, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000004400)={0x0, 0x0, &(0x7f00000043c0)={&(0x7f0000004300)={0x7c, 0x2, 0x8, 0x101, 0x0, 0x0, {0xfde7d4026b657775}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4c76}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x20004040) 699.940892ms ago: executing program 3 (id=1412): ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000040)={0x8, 0x0, '\x00', {0x0, @reserved}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r2, r2}, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000021, 0x0, 0x7}]}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x14, 0x2f, 0x8, 0x4, 0x25dfdbf9, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x4000045}, 0x0) 500.603251ms ago: executing program 3 (id=1413): sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xee) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r1, 0xfeffff, 0xe, 0x0, &(0x7f0000001bc0)="c45c57ce395de5b289f07d637a22", 0x0, 0x29, 0x0, 0x2a, 0x0, &(0x7f0000000700)="30045c262ad28e566e825e85fd10a4155eed06a0190acaf8796c7e109250fca9c0086cbc80aaf48a1c6a", 0x0}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xfdff, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x15, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20000046}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000001070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 500.307485ms ago: executing program 4 (id=1414): syz_usb_connect(0x3, 0x2d, &(0x7f0000008ec0)={{0x12, 0x1, 0x110, 0x2b, 0x95, 0xd9, 0x8, 0x4e2, 0x1412, 0xca10, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0xfa, 0xa0, 0xbf, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x8, 0x6, 0x62, 0x0, [], [{{0x9, 0x5, 0x9, 0x1, 0x200, 0x4, 0x8, 0xf8}}]}}]}}]}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)=';-H?', 0x4, 0x0}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000000c0)={r1}) 420.633076ms ago: executing program 3 (id=1415): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x0, 0x2, 0x22, @rand_addr=' \x01\x00', @private2, 0x700, 0x80, 0xfffffff9, 0x75}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x0, 0x2, 0x22, @rand_addr=' \x01\x00', @private2, 0x700, 0x80, 0xfffffff9, 0x75}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="66b9800000c00f326635010000000f30bf44000f4af90f30b80e008ed8650f01c4f30fc7b1001066b8d38fffff0f23c80f21f866350000c0000f23f8ba2000b006ee660f380761e2", 0x48}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 350.339453ms ago: executing program 0 (id=1416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff}, 0x1c) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x10001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x7}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r5, &(0x7f00000001c0)={0x2c, 0x0, r7, 0x0, r5}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRES64=r6, @ANYRESOCT=r3, @ANYRES64=r6, @ANYRESHEX, @ANYBLOB="fc3346bc20d46c4d70d5415db45ab6c5ca3e42fd6a5209f6056056e6b2d0", @ANYBLOB="f23582090bdc", @ANYBLOB="b3347997d49d80e9627e951bf2ac5135bba3c00fb11d3a21faa4cd0f4920cc2ab94c4a53494eda1d59683ce73e0c53c341"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r8, &(0x7f0000000040)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) listen(r0, 0x2) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) unshare(0x8000000) semget$private(0x0, 0x3, 0x2f0) 107.890007ms ago: executing program 3 (id=1417): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100)='H', 0x0, 0x1}, 0x20) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x6b, 0x5f, 0x0, 0x22, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x7800, 0x1, 0xffff}}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipmr_delroute={0x44, 0x19, 0x100, 0x70bd29, 0x25dfdbff, {0x80, 0x80, 0x0, 0x10, 0xfc, 0x0, 0xfd, 0x9, 0x3900}, [@RTA_NH_ID, @RTA_UID={0x8, 0x19, r2}, @RTA_IIF={0x8, 0x3, r3}, @RTA_GATEWAY={0x8, 0x5, @multicast2}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x3a}, 0x1, 0x0, 0x0, 0x8000}, 0x8841) 943.563µs ago: executing program 3 (id=1418): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000140)={"0160bd8f41a34066c329e5c9e7e0b93c4cdc2139bb1c026b2b7398bbddbc"}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0xe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}]}) 0s ago: executing program 3 (id=1419): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000340)='-', &(0x7f0000000400)=""/72}, 0x20) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x3, 0x0, 0x8000005, 0x3, 0x5, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x0, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x3, 0xbffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4e0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x70000000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0xfffffffe, 0x105, 0x0, 0x0, 0x8], [0x10, 0xffffffff, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x9, 0x800, 0xffffffd6, 0xfffffffc, 0x0, 0x1, 0x0, 0x1, 0x2ec6a, 0x5, 0x40000002, 0xffffffff, 0xfffffffc, 0x7fffffff, 0x7ffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x4, 0x5, 0x3, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000000, 0x80, 0x2, 0x3, 0x0, 0x9, 0x800000, 0x7], [0x0, 0x4, 0x0, 0x1000000, 0x2, 0x1, 0xa000000, 0x0, 0x0, 0xb78, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x10000, 0x0, 0x80, 0x520, 0xd, 0x0, 0x0, 0x800000, 0x1ff, 0x0, 0x0, 0x2, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x0, 0x3, 0xa9c5, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x100, 0xff, 0x80000001, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x5, 0x0, 0x83, 0x8, 0x3, 0x0, 0x2, 0x1, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x0, 0x4000000, 0x0, 0x4, 0x6, 0x0, 0xffffeffd, 0x2, 0x0, 0x0, 0x3, 0x4, 0x88, 0x4, 0x3, 0x0, 0x0, 0x1, 0x80000001, 0x100, 0x0, 0x3, 0x7, 0xfffffffe, 0x53591b24, 0x7fffffd, 0x2, 0x5, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x3, 0x3]}, 0x45c) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x606540, 0x91) umount2(&(0x7f0000000000)='./file0\x00', 0x9) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x8000, 0x1c0) 0s ago: executing program 3 (id=1420): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x820}, 0x21) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fd}]}, &(0x7f0000000400)='syzkaller\x00', 0x80000000, 0x6b, &(0x7f0000000440)=""/107, 0x41000, 0x12, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000004c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xa, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000540), &(0x7f00000005c0)=[{0x5, 0x2, 0x7, 0x5}, {0x2, 0x5, 0x5, 0xa}, {0x2, 0x1, 0x7, 0x9}, {0x1, 0x3, 0xa, 0x5}, {0x3, 0x5, 0xa, 0xc}, {0x5, 0x3, 0x4, 0x5}, {0x4, 0x3, 0xf, 0xc}, {0x2, 0x4, 0x0, 0x2}], 0x10, 0x8ed9}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$TCFLSH(r0, 0x540b, 0x2) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) (async) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000200)=0x8001100) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="ad6348b4580ec2aab346167d7cdddb65b4eaebddacc3e4ab", @ANYRES32=r6, @ANYBLOB="0400cc0004003c0004000801"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01e4ff000101000000002b000000f7ffffff", @ANYRES32=r9, @ANYBLOB="040046000a0034000101010101010000080026006c0900001400518010000080090001004ffd7cf928000000"], 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) kernel console output (not intermixed with test programs): ermissive=1 [ 89.030867][ C1] vcan0: j1939_tp_rxtimer: 0xffff888103bd1c00: rx timeout, send abort [ 89.034529][ T40] audit: type=1400 audit(1766903135.748:29854): avc: denied { read } for pid=5324 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 89.034767][ C1] vcan0: j1939_tp_rxtimer: 0xffff888103bd0c00: rx timeout, send abort [ 89.044547][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888103bd1c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 89.049479][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888103bd0c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 89.102659][ T8120] overlayfs: failed to resolve './bus': -2 [ 89.103379][ T8118] FAULT_INJECTION: forcing a failure. [ 89.103379][ T8118] name failslab, interval 1, probability 0, space 0, times 0 [ 89.110922][ T8118] CPU: 0 UID: 0 PID: 8118 Comm: syz.4.633 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.110940][ T8118] Tainted: [L]=SOFTLOCKUP [ 89.110944][ T8118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.110951][ T8118] Call Trace: [ 89.110954][ T8118] [ 89.110958][ T8118] dump_stack_lvl+0x16c/0x1f0 [ 89.110993][ T8118] should_fail_ex+0x512/0x640 [ 89.111014][ T8118] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 89.111027][ T8118] should_failslab+0xc2/0x120 [ 89.111041][ T8118] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 89.111053][ T8118] ? __d_alloc+0x35/0xa80 [ 89.111065][ T8118] ? __d_alloc+0x35/0xa80 [ 89.111073][ T8118] __d_alloc+0x35/0xa80 [ 89.111083][ T8118] d_alloc_parallel+0x111/0x1510 [ 89.111097][ T8118] ? find_held_lock+0x2b/0x80 [ 89.111117][ T8118] ? __pfx_d_alloc_parallel+0x10/0x10 [ 89.111131][ T8118] ? lockdep_init_map_type+0x5c/0x270 [ 89.111144][ T8118] ? lockdep_init_map_type+0x5c/0x270 [ 89.111160][ T8118] __lookup_slow+0x193/0x460 [ 89.111171][ T8118] ? __pfx___lookup_slow+0x10/0x10 [ 89.111184][ T8118] ? irq_entries_start+0xd0/0xcb0 [ 89.111199][ T8118] ? irq_entries_start+0xd0/0xcb0 [ 89.111213][ T8118] lookup_slow+0x50/0x70 [ 89.111223][ T8118] lookup_one_unlocked+0xa0/0xd0 [ 89.111242][ T8118] ovl_lookup_single+0x435/0x1330 [ 89.111259][ T8118] ? __pfx_ovl_lookup_single+0x10/0x10 [ 89.111271][ T8118] ? __asan_memset+0x23/0x50 [ 89.111281][ T8118] ? security_compute_sid+0x192d/0x2140 [ 89.111297][ T8118] ovl_lookup_layer+0x3d4/0x480 [ 89.111311][ T8118] ? __pfx_ovl_lookup_layer+0x10/0x10 [ 89.111323][ T8118] ? __pfx_security_compute_sid+0x10/0x10 [ 89.111339][ T8118] ovl_lookup_layers+0x341/0x2920 [ 89.111354][ T8118] ? find_held_lock+0x2b/0x80 [ 89.111371][ T8118] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 89.111384][ T8118] ? avc_has_perm_noaudit+0x149/0x3b0 [ 89.111402][ T8118] ? avc_has_perm+0x144/0x1f0 [ 89.111419][ T8118] ? __pfx_avc_has_perm+0x10/0x10 [ 89.111437][ T8118] ovl_lookup+0x459/0x610 [ 89.111449][ T8118] ? __pfx_ovl_lookup+0x10/0x10 [ 89.111468][ T8118] ? bpf_lsm_inode_permission+0x9/0x10 [ 89.111484][ T8118] ? security_inode_permission+0xbf/0x260 [ 89.111500][ T8118] ? __pfx_ovl_lookup+0x10/0x10 [ 89.111512][ T8118] lookup_open.isra.0+0x4e2/0x1780 [ 89.111527][ T8118] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 89.111543][ T8118] ? find_held_lock+0x2b/0x80 [ 89.111561][ T8118] ? __pfx_down_write+0x10/0x10 [ 89.111580][ T8118] path_openat+0xa95/0x3140 [ 89.111599][ T8118] ? __pfx_path_openat+0x10/0x10 [ 89.111616][ T8118] ? __lock_acquire+0x436/0x2890 [ 89.111629][ T8118] do_filp_open+0x20b/0x470 [ 89.111644][ T8118] ? __pfx_do_filp_open+0x10/0x10 [ 89.111669][ T8118] ? _raw_spin_unlock+0x28/0x50 [ 89.111680][ T8118] ? alloc_fd+0x471/0x7d0 [ 89.111699][ T8118] do_sys_openat2+0x121/0x290 [ 89.111709][ T8118] ? __pfx_do_sys_openat2+0x10/0x10 [ 89.111719][ T8118] ? __fget_files+0x20e/0x3c0 [ 89.111737][ T8118] __x64_sys_creat+0xcc/0x120 [ 89.111748][ T8118] ? __pfx___x64_sys_creat+0x10/0x10 [ 89.111758][ T8118] ? __pfx_ksys_write+0x10/0x10 [ 89.111772][ T8118] ? rcu_is_watching+0x12/0xc0 [ 89.111782][ T8118] ? do_syscall_64+0x91/0xf80 [ 89.111796][ T8118] do_syscall_64+0xcd/0xf80 [ 89.111810][ T8118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.111820][ T8118] RIP: 0033:0x7f28fad8f7c9 [ 89.111829][ T8118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.111839][ T8118] RSP: 002b:00007f28fbbc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 89.111849][ T8118] RAX: ffffffffffffffda RBX: 00007f28fafe5fa0 RCX: 00007f28fad8f7c9 [ 89.111855][ T8118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 89.111861][ T8118] RBP: 00007f28fbbc0090 R08: 0000000000000000 R09: 0000000000000000 [ 89.111867][ T8118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.111873][ T8118] R13: 00007f28fafe6038 R14: 00007f28fafe5fa0 R15: 00007ffef9885ae8 [ 89.111887][ T8118] [ 89.298380][ T6262] net_ratelimit: 67 callbacks suppressed [ 89.298397][ T6262] bond1: (slave lo): failed to get link speed/duplex [ 89.318115][ T5997] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 89.418542][ T96] bond1: (slave lo): failed to get link speed/duplex [ 89.477265][ T5997] usb 8-1: Using ep0 maxpacket: 16 [ 89.480798][ T5997] usb 8-1: config 1 interface 0 altsetting 193 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.484367][ T5997] usb 8-1: config 1 interface 0 altsetting 193 endpoint 0x2 has an invalid bInterval 128, changing to 11 [ 89.488509][ T5997] usb 8-1: config 1 interface 0 has no altsetting 0 [ 89.492412][ T5997] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 89.495665][ T5997] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.498310][ T8136] hid-generic 0003:0627:0001.0001: pid 8136 passed too short report [ 89.499405][ T5997] usb 8-1: Product: ꜰⱟ⺷쉦䎭⭱睻褓섺░꿿ůᎷগ荓輵옅脎굝嶰领꿷⣧땘סּ䧶嵻苴갳永瓑䉞먩꩷얀ڄ㴌 [ 89.509509][ T5997] usb 8-1: Manufacturer: 搮⮩磵溅꓌蹸ꭈ姊্Ϻ⍜ᤑ惸㜣삨옱력㎡ᐣ鈵㞿葺젾ㄘ麟ᷟ伌⿸샧牐睄畭輪輳⷇歃갳鹁計젿Ҍ匍黹ऄ⏐㌺첨滓ꂓꢄ♜鵾 [ 89.518230][ T5997] usb 8-1: SerialNumber: 벟d㓩겄욛舀픑ꦬ陂歖旆ḕ郷牚丌햔驂㍱⛺ɧ텋纱쨞짢ꥬ爇ᒈ匡傺䨨쟺嚮㕣醷判⦜斀㑩ꊩ宊瓪㧽黪嚴ኒ诈⣇丫៹揦飞ꞅⱮ鸡쵺ᪧ訠ꬼ◼䵎견떫ȁ쟟朜䖟Կ襽첉⍟躬常ㄭ莶첟腉꧑䈕醇ॖគ邤下֘䐪꜌䬠쯯ᅁ⭡歮팺ԧ조ﵬ뱣 [ 89.537077][ T6268] bond1: (slave lo): failed to get link speed/duplex [ 89.625665][ T8142] /dev/sg0: Can't lookup blockdev [ 89.646811][ T6264] bond1: (slave lo): failed to get link speed/duplex [ 89.741199][ T5997] usbhid 8-1:1.0: can't add hid device: -71 [ 89.743258][ T5997] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 89.750091][ T5997] usb 8-1: USB disconnect, device number 4 [ 89.756192][ T6261] bond1: (slave lo): failed to get link speed/duplex [ 89.862656][ T8144] netlink: 40 bytes leftover after parsing attributes in process `syz.4.642'. [ 89.875851][ T6266] bond1: (slave lo): failed to get link speed/duplex [ 89.982967][ T8165] FAULT_INJECTION: forcing a failure. [ 89.982967][ T8165] name failslab, interval 1, probability 0, space 0, times 0 [ 89.988647][ T8165] CPU: 2 UID: 0 PID: 8165 Comm: syz.0.645 Tainted: G L syzkaller #0 PREEMPT(full) [ 89.988673][ T8165] Tainted: [L]=SOFTLOCKUP [ 89.988679][ T8165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.988690][ T8165] Call Trace: [ 89.988696][ T8165] [ 89.988702][ T8165] dump_stack_lvl+0x16c/0x1f0 [ 89.988728][ T8165] should_fail_ex+0x512/0x640 [ 89.988752][ T8165] ? __kmalloc_noprof+0xca/0x910 [ 89.988780][ T8165] should_failslab+0xc2/0x120 [ 89.988801][ T8165] __kmalloc_noprof+0xeb/0x910 [ 89.988826][ T8165] ? ovl_lookup_layers+0x16d9/0x2920 [ 89.988866][ T8165] ? ovl_lookup_layers+0x16d9/0x2920 [ 89.988887][ T8165] ovl_lookup_layers+0x16d9/0x2920 [ 89.988918][ T8165] ? find_held_lock+0x2b/0x80 [ 89.988946][ T8165] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 89.988967][ T8165] ? avc_has_perm_noaudit+0x149/0x3b0 [ 89.988998][ T8165] ? avc_has_perm+0x144/0x1f0 [ 89.989024][ T8165] ? __pfx_avc_has_perm+0x10/0x10 [ 89.989053][ T8165] ovl_lookup+0x459/0x610 [ 89.989073][ T8165] ? __pfx_ovl_lookup+0x10/0x10 [ 89.989105][ T8165] ? bpf_lsm_inode_permission+0x9/0x10 [ 89.989128][ T8165] ? security_inode_permission+0xbf/0x260 [ 89.989153][ T8165] ? __pfx_ovl_lookup+0x10/0x10 [ 89.989172][ T8165] lookup_open.isra.0+0x4e2/0x1780 [ 89.989198][ T8165] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 89.989222][ T8165] ? find_held_lock+0x2b/0x80 [ 89.989252][ T8165] ? __pfx_down_write+0x10/0x10 [ 89.989281][ T8165] path_openat+0xa95/0x3140 [ 89.989309][ T8165] ? __pfx_path_openat+0x10/0x10 [ 89.989334][ T8165] ? __lock_acquire+0x436/0x2890 [ 89.989355][ T8165] do_filp_open+0x20b/0x470 [ 89.989376][ T8165] ? __pfx_do_filp_open+0x10/0x10 [ 89.989415][ T8165] ? _raw_spin_unlock+0x28/0x50 [ 89.989432][ T8165] ? alloc_fd+0x471/0x7d0 [ 89.989459][ T8165] do_sys_openat2+0x121/0x290 [ 89.989474][ T8165] ? __pfx_do_sys_openat2+0x10/0x10 [ 89.989490][ T8165] ? __fget_files+0x20e/0x3c0 [ 89.989518][ T8165] __x64_sys_creat+0xcc/0x120 [ 89.989533][ T8165] ? __pfx___x64_sys_creat+0x10/0x10 [ 89.989548][ T8165] ? __pfx_ksys_write+0x10/0x10 [ 89.989573][ T8165] ? rcu_is_watching+0x12/0xc0 [ 89.989588][ T8165] ? do_syscall_64+0x91/0xf80 [ 89.989610][ T8165] do_syscall_64+0xcd/0xf80 [ 89.989631][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.989648][ T8165] RIP: 0033:0x7f963958f7c9 [ 89.989662][ T8165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.989677][ T8165] RSP: 002b:00007f963a437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 89.989693][ T8165] RAX: ffffffffffffffda RBX: 00007f96397e5fa0 RCX: 00007f963958f7c9 [ 89.989703][ T8165] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 89.989712][ T8165] RBP: 00007f963a437090 R08: 0000000000000000 R09: 0000000000000000 [ 89.989720][ T8165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.989729][ T8165] R13: 00007f96397e6038 R14: 00007f96397e5fa0 R15: 00007ffdc663c528 [ 89.989751][ T8165] [ 90.005261][ T6261] bond1: (slave lo): failed to get link speed/duplex [ 90.175493][ T6014] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 90.224701][ T6261] bond1: (slave lo): failed to get link speed/duplex [ 90.334302][ T6014] usb 9-1: Using ep0 maxpacket: 8 [ 90.334869][ T96] bond1: (slave lo): failed to get link speed/duplex [ 90.338164][ T6014] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 90.343051][ T6014] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.347812][ T6014] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.352177][ T6014] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.354474][ T8198] netlink: 2 bytes leftover after parsing attributes in process `syz.0.655'. [ 90.356039][ T6014] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.365073][ T6014] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.369087][ T6014] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.443652][ T6266] bond1: (slave lo): failed to get link speed/duplex [ 90.578464][ T6014] usb 9-1: usb_control_msg returned -32 [ 90.581232][ T6014] usbtmc 9-1:16.0: can't read capabilities [ 90.609319][ T8207] NILFS (nbd3): device size too small [ 91.023146][ T8247] netlink: 'syz.0.664': attribute type 1 has an invalid length. [ 91.037623][ T8247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.042421][ T8247] bond0: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 91.047119][ T8247] bond0: entered allmulticast mode [ 91.055540][ T8247] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 91.144137][ T8284] FAULT_INJECTION: forcing a failure. [ 91.144137][ T8284] name failslab, interval 1, probability 0, space 0, times 0 [ 91.148381][ T8284] CPU: 1 UID: 0 PID: 8284 Comm: syz.1.665 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.148397][ T8284] Tainted: [L]=SOFTLOCKUP [ 91.148401][ T8284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.148407][ T8284] Call Trace: [ 91.148413][ T8284] [ 91.148418][ T8284] dump_stack_lvl+0x16c/0x1f0 [ 91.148435][ T8284] should_fail_ex+0x512/0x640 [ 91.148452][ T8284] ? __kmalloc_cache_noprof+0x5f/0x800 [ 91.148471][ T8284] should_failslab+0xc2/0x120 [ 91.148485][ T8284] __kmalloc_cache_noprof+0x80/0x800 [ 91.148501][ T8284] ? ovl_encode_real_fh+0xca/0x420 [ 91.148515][ T8284] ? ovl_encode_real_fh+0xca/0x420 [ 91.148524][ T8284] ovl_encode_real_fh+0xca/0x420 [ 91.148535][ T8284] ? __pfx_ovl_encode_real_fh+0x10/0x10 [ 91.148549][ T8284] ovl_lookup_index+0xde/0x800 [ 91.148564][ T8284] ? __pfx_ovl_lookup_index+0x10/0x10 [ 91.148576][ T8284] ? ovl_lookup_layers+0x16d9/0x2920 [ 91.148591][ T8284] ovl_lookup_layers+0x5e1/0x2920 [ 91.148609][ T8284] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 91.148622][ T8284] ? avc_has_perm_noaudit+0x149/0x3b0 [ 91.148641][ T8284] ? avc_has_perm+0x144/0x1f0 [ 91.148657][ T8284] ? __pfx_avc_has_perm+0x10/0x10 [ 91.148676][ T8284] ovl_lookup+0x459/0x610 [ 91.148687][ T8284] ? __pfx_ovl_lookup+0x10/0x10 [ 91.148706][ T8284] ? bpf_lsm_inode_permission+0x9/0x10 [ 91.148722][ T8284] ? security_inode_permission+0xbf/0x260 [ 91.148738][ T8284] ? __pfx_ovl_lookup+0x10/0x10 [ 91.148750][ T8284] lookup_open.isra.0+0x4e2/0x1780 [ 91.148766][ T8284] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 91.148781][ T8284] ? find_held_lock+0x2b/0x80 [ 91.148801][ T8284] ? __pfx_down_write+0x10/0x10 [ 91.148820][ T8284] path_openat+0xa95/0x3140 [ 91.148839][ T8284] ? __pfx_path_openat+0x10/0x10 [ 91.148856][ T8284] ? __lock_acquire+0x436/0x2890 [ 91.148870][ T8284] do_filp_open+0x20b/0x470 [ 91.148884][ T8284] ? __pfx_do_filp_open+0x10/0x10 [ 91.148909][ T8284] ? _raw_spin_unlock+0x28/0x50 [ 91.148919][ T8284] ? alloc_fd+0x471/0x7d0 [ 91.148938][ T8284] do_sys_openat2+0x121/0x290 [ 91.148948][ T8284] ? __pfx_do_sys_openat2+0x10/0x10 [ 91.148958][ T8284] ? __fget_files+0x20e/0x3c0 [ 91.148976][ T8284] __x64_sys_creat+0xcc/0x120 [ 91.148987][ T8284] ? __pfx___x64_sys_creat+0x10/0x10 [ 91.148996][ T8284] ? __pfx_ksys_write+0x10/0x10 [ 91.149010][ T8284] ? rcu_is_watching+0x12/0xc0 [ 91.149020][ T8284] ? do_syscall_64+0x91/0xf80 [ 91.149034][ T8284] do_syscall_64+0xcd/0xf80 [ 91.149048][ T8284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.149059][ T8284] RIP: 0033:0x7efc1ed8f7c9 [ 91.149068][ T8284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.149079][ T8284] RSP: 002b:00007efc1fcaa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 91.149089][ T8284] RAX: ffffffffffffffda RBX: 00007efc1efe5fa0 RCX: 00007efc1ed8f7c9 [ 91.149096][ T8284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 91.149102][ T8284] RBP: 00007efc1fcaa090 R08: 0000000000000000 R09: 0000000000000000 [ 91.149108][ T8284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.149113][ T8284] R13: 00007efc1efe6038 R14: 00007efc1efe5fa0 R15: 00007ffcedd76108 [ 91.149127][ T8284] [ 91.502785][ T8303] gfs2: path_lookup on \\8< $$&6n @M [ 91.843767][ T8339] dump_stack_lvl+0x16c/0x1f0 [ 91.843812][ T8339] should_fail_ex+0x512/0x640 [ 91.843841][ T8339] ? __kmalloc_noprof+0xca/0x910 [ 91.843868][ T8339] should_failslab+0xc2/0x120 [ 91.843891][ T8339] __kmalloc_noprof+0xeb/0x910 [ 91.843914][ T8339] ? ovl_encode_real_fh+0x33a/0x420 [ 91.843932][ T8339] ? ovl_get_index_name_fh+0x55/0x190 [ 91.843954][ T8339] ? ovl_get_index_name_fh+0x55/0x190 [ 91.843977][ T8339] ovl_get_index_name_fh+0x55/0x190 [ 91.843998][ T8339] ovl_lookup_index+0x10f/0x800 [ 91.844019][ T8339] ? __pfx_ovl_lookup_index+0x10/0x10 [ 91.844037][ T8339] ? ovl_lookup_layers+0x16d9/0x2920 [ 91.844059][ T8339] ovl_lookup_layers+0x5e1/0x2920 [ 91.844088][ T8339] ? __pfx_ovl_lookup_layers+0x10/0x10 [ 91.844109][ T8339] ? avc_has_perm_noaudit+0x149/0x3b0 [ 91.844137][ T8339] ? avc_has_perm+0x144/0x1f0 [ 91.844160][ T8339] ? __pfx_avc_has_perm+0x10/0x10 [ 91.844188][ T8339] ovl_lookup+0x459/0x610 [ 91.844207][ T8339] ? __pfx_ovl_lookup+0x10/0x10 [ 91.844236][ T8339] ? bpf_lsm_inode_permission+0x9/0x10 [ 91.844259][ T8339] ? security_inode_permission+0xbf/0x260 [ 91.844282][ T8339] ? __pfx_ovl_lookup+0x10/0x10 [ 91.844299][ T8339] lookup_open.isra.0+0x4e2/0x1780 [ 91.844325][ T8339] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 91.844348][ T8339] ? find_held_lock+0x2b/0x80 [ 91.844377][ T8339] ? __pfx_down_write+0x10/0x10 [ 91.844405][ T8339] path_openat+0xa95/0x3140 [ 91.844434][ T8339] ? __pfx_path_openat+0x10/0x10 [ 91.844460][ T8339] ? __lock_acquire+0x436/0x2890 [ 91.844479][ T8339] do_filp_open+0x20b/0x470 [ 91.844502][ T8339] ? __pfx_do_filp_open+0x10/0x10 [ 91.844539][ T8339] ? _raw_spin_unlock+0x28/0x50 [ 91.844557][ T8339] ? alloc_fd+0x471/0x7d0 [ 91.844583][ T8339] do_sys_openat2+0x121/0x290 [ 91.844600][ T8339] ? __pfx_do_sys_openat2+0x10/0x10 [ 91.844615][ T8339] ? __fget_files+0x20e/0x3c0 [ 91.844642][ T8339] __x64_sys_creat+0xcc/0x120 [ 91.844658][ T8339] ? __pfx___x64_sys_creat+0x10/0x10 [ 91.844673][ T8339] ? __pfx_ksys_write+0x10/0x10 [ 91.844695][ T8339] ? rcu_is_watching+0x12/0xc0 [ 91.844710][ T8339] ? do_syscall_64+0x91/0xf80 [ 91.844732][ T8339] do_syscall_64+0xcd/0xf80 [ 91.844773][ T8339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.844788][ T8339] RIP: 0033:0x7f963958f7c9 [ 91.844802][ T8339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.844816][ T8339] RSP: 002b:00007f963a437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 91.844833][ T8339] RAX: ffffffffffffffda RBX: 00007f96397e5fa0 RCX: 00007f963958f7c9 [ 91.844843][ T8339] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 91.844852][ T8339] RBP: 00007f963a437090 R08: 0000000000000000 R09: 0000000000000000 [ 91.844862][ T8339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.844871][ T8339] R13: 00007f96397e6038 R14: 00007f96397e5fa0 R15: 00007ffdc663c528 [ 91.844895][ T8339] [ 91.886806][ T8331] NILFS (nbd1): device size too small [ 92.251636][ T8353] netlink: 32 bytes leftover after parsing attributes in process `syz.0.680'. [ 92.258078][ T34] IPVS: starting estimator thread 0... [ 92.356696][ T8354] IPVS: using max 46 ests per chain, 110400 per kthread [ 92.661309][ T6014] usb 9-1: USB disconnect, device number 5 [ 92.699639][ T8373] No source specified [ 93.568185][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 93.568202][ T40] audit: type=1400 audit(1766903140.294:29878): avc: denied { bind } for pid=8385 comm="syz.0.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.580178][ T40] audit: type=1400 audit(1766903140.294:29879): avc: denied { name_bind } for pid=8385 comm="syz.0.690" src=28326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 93.581308][ T8390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.689'. [ 93.589990][ T40] audit: type=1400 audit(1766903140.294:29880): avc: denied { node_bind } for pid=8385 comm="syz.0.690" saddr=172.20.20.170 src=28326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 93.725663][ T8411] block device autoloading is deprecated and will be removed. [ 93.738221][ T8416] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 93.755494][ T40] audit: type=1400 audit(1766903140.485:29881): avc: denied { setattr } for pid=8415 comm="syz.1.697" name="NETLINK" dev="sockfs" ino=19354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.812175][ T34] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 93.844217][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'. [ 93.844290][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'. [ 93.866931][ T8429] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 93.870757][ T8429] SELinux: failed to load policy [ 93.881642][ T8431] VFS: Mount too revealing [ 93.895836][ T40] audit: type=1400 audit(1766903140.625:29882): avc: denied { read } for pid=8432 comm="syz.3.703" lport=48010 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.910101][ T8433] team0: Mode changed to "loadbalance" [ 93.972846][ T34] usb 5-1: Using ep0 maxpacket: 8 [ 93.981813][ T34] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 93.986383][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 93.990347][ T34] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.993330][ T61] libceph: connect (1)[c::]:6789 error -101 [ 93.994951][ T34] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.996828][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 94.008648][ T61] libceph: connect (1)[c::]:6789 error -101 [ 94.009176][ T34] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.010756][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 94.015354][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.111142][ T8438] ceph: No mds server is up or the cluster is laggy [ 94.238487][ T40] audit: type=1400 audit(1766903140.966:29883): avc: denied { connect } for pid=8471 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.246317][ T34] usb 5-1: GET_CAPABILITIES returned 0 [ 94.248205][ T34] usbtmc 5-1:16.0: can't read capabilities [ 94.330194][ T8482] atomic_op ffff88803b86c998 conn xmit_atomic 0000000000000000 [ 94.333504][ T8482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.715'. [ 94.336946][ T8483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.715'. [ 94.348616][ T8470] kvm: kvm [8468]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xa2e0 [ 94.388452][ T8490] tmpfs: Bad value for 'nr_inodes' [ 94.391901][ T96] net_ratelimit: 39 callbacks suppressed [ 94.391916][ T96] bond1: (slave lo): failed to get link speed/duplex [ 94.448839][ T40] audit: type=1400 audit(1766903141.177:29884): avc: denied { create } for pid=8491 comm="syz.4.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 94.453171][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 94.459781][ T8386] usbtmc 5-1:16.0: Unable to send data, error -71 [ 94.472624][ T6014] usb 5-1: USB disconnect, device number 12 [ 94.500492][ T6266] bond1: (slave lo): failed to get link speed/duplex [ 94.507716][ T40] audit: type=1400 audit(1766903141.237:29885): avc: denied { watch watch_reads } for pid=8503 comm="syz.1.719" path="/177/bus/file0" dev="overlay" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.518516][ T40] audit: type=1400 audit(1766903141.247:29886): avc: denied { getopt } for pid=8491 comm="syz.4.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 94.525389][ T40] audit: type=1400 audit(1766903141.257:29887): avc: denied { ioctl } for pid=8491 comm="syz.4.718" path="socket:[23573]" dev="sockfs" ino=23573 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 94.609964][ T6266] bond1: (slave lo): failed to get link speed/duplex [ 94.731049][ T6265] bond1: (slave lo): failed to get link speed/duplex [ 94.839701][ T6266] bond1: (slave lo): failed to get link speed/duplex [ 94.958702][ T6264] bond1: (slave lo): failed to get link speed/duplex [ 95.081957][ T6268] bond1: (slave lo): failed to get link speed/duplex [ 95.188205][ T6268] bond1: (slave lo): failed to get link speed/duplex [ 95.308690][ T6265] bond1: (slave lo): failed to get link speed/duplex [ 95.417458][ T6265] bond1: (slave lo): failed to get link speed/duplex [ 95.420329][ T29] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 95.576967][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 95.582209][ T29] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 95.586338][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.605956][ T29] pvrusb2: Hardware description: Terratec Grabster AV400 [ 95.609215][ T29] pvrusb2: ********** [ 95.611104][ T29] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 95.614588][ T29] pvrusb2: Important functionality might not be entirely working. [ 95.618631][ T29] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 95.622469][ T29] pvrusb2: ********** [ 95.797554][ T2491] pvrusb2: Invalid write control endpoint [ 95.826258][ T2491] pvrusb2: Invalid write control endpoint [ 95.829651][ T2491] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 95.832763][ T2491] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 95.835201][ T2491] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 95.838695][ T2491] pvrusb2: Device being rendered inoperable [ 95.840859][ T2491] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 95.843260][ T2491] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 95.847045][ T2491] pvrusb2: Attached sub-driver cx25840 [ 95.851796][ T2491] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 95.855190][ T2491] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 96.053503][ T8583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8583 comm=syz.0.732 [ 96.066053][ T8584] fuse: Unknown parameter 'WFQ을I{X [ 96.066053][ T8584] ZT[GۭXeqYN%X%}b' [ 96.126217][ T8589] overlayfs: overlapping lowerdir path [ 96.286284][ T8595] netlink: 'syz.1.740': attribute type 4 has an invalid length. [ 96.292172][ T8595] .`: renamed from bond0 (while UP) [ 96.642355][ T8602] 9pnet_virtio: no channels available for device syz [ 96.946514][ T8620] __nla_validate_parse: 1 callbacks suppressed [ 96.946528][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 96.996010][ T8626] netlink: 'syz.1.748': attribute type 39 has an invalid length. [ 97.287956][ T8652] random: crng reseeded on system resumption [ 97.419695][ T5342] Dev loop6: unable to read RDB block 1 [ 97.421716][ T5342] loop6: unable to read partition table [ 97.423971][ T5342] loop6: partition table beyond EOD, truncated [ 97.811246][ T61] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 97.964366][ T61] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.968110][ T61] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.972530][ T61] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.976529][ T61] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.981433][ T61] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16639, setting to 1024 [ 97.986473][ T61] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.989991][ T61] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.992841][ T61] usb 6-1: Product: syz [ 97.994454][ T61] usb 6-1: Manufacturer: syz [ 98.004831][ T61] cdc_wdm 6-1:1.0: skipping garbage [ 98.007165][ T61] cdc_wdm 6-1:1.0: skipping garbage [ 98.012478][ T61] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 98.015013][ T61] cdc_wdm 6-1:1.0: Unknown control protocol [ 98.024335][ T8695] QAT: failed to copy from user cfg_data. [ 98.177652][ T6020] usb 5-1: USB disconnect, device number 13 [ 98.256997][ C3] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 98.258126][ T29] usb 6-1: USB disconnect, device number 3 [ 98.259845][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 98.265076][ C3] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 98.634356][ T8745] /dev/nullb0: Can't open blockdev [ 98.638087][ T8745] /dev/nullb0: Can't open blockdev [ 98.644653][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 98.644663][ T40] audit: type=1400 audit(1766903145.388:29901): avc: denied { map } for pid=8744 comm="syz.3.767" path="socket:[22225]" dev="sockfs" ino=22225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.655089][ T40] audit: type=1400 audit(1766903145.388:29902): avc: denied { read accept } for pid=8744 comm="syz.3.767" path="socket:[22225]" dev="sockfs" ino=22225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 98.695718][ T8748] netlink: 'syz.3.768': attribute type 3 has an invalid length. [ 98.698842][ T8748] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 98.702429][ T8748] netlink: 224 bytes leftover after parsing attributes in process `syz.3.768'. [ 98.706393][ T8748] NCSI netlink: No device for ifindex 1044578304 [ 98.750942][ T40] audit: type=1804 audit(1766903145.498:29903): pid=8750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.769" name="/newroot/191/file0" dev="tmpfs" ino=1116 res=1 errno=0 [ 98.760951][ T40] audit: type=1804 audit(1766903145.498:29904): pid=8750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.769" name="/newroot/191/file0" dev="tmpfs" ino=1116 res=1 errno=0 [ 98.790633][ T8755] FAULT_INJECTION: forcing a failure. [ 98.790633][ T8755] name failslab, interval 1, probability 0, space 0, times 0 [ 98.797331][ T8755] CPU: 2 UID: 0 PID: 8755 Comm: syz.3.770 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.797371][ T8755] Tainted: [L]=SOFTLOCKUP [ 98.797376][ T8755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 98.797383][ T8755] Call Trace: [ 98.797388][ T8755] [ 98.797393][ T8755] dump_stack_lvl+0x16c/0x1f0 [ 98.797429][ T8755] should_fail_ex+0x512/0x640 [ 98.797449][ T8755] ? fs_reclaim_acquire+0xae/0x150 [ 98.797465][ T8755] should_failslab+0xc2/0x120 [ 98.797479][ T8755] __kmalloc_node_track_caller_noprof+0xec/0x930 [ 98.797492][ T8755] ? security_context_to_sid_core+0x732/0x860 [ 98.797510][ T8755] ? kstrdup+0x53/0x100 [ 98.797519][ T8755] kstrdup+0x53/0x100 [ 98.797529][ T8755] security_context_to_sid_core+0x732/0x860 [ 98.797545][ T8755] ? __pfx_security_context_to_sid_core+0x10/0x10 [ 98.797567][ T8755] inode_doinit_use_xattr+0x101/0x410 [ 98.797581][ T8755] inode_doinit_with_dentry+0x51d/0x12e0 [ 98.797598][ T8755] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 98.797612][ T8755] ? kasan_quarantine_put+0x10a/0x240 [ 98.797623][ T8755] ? lockdep_hardirqs_on+0x7c/0x110 [ 98.797638][ T8755] selinux_d_instantiate+0x26/0x30 [ 98.797652][ T8755] security_d_instantiate+0x142/0x1a0 [ 98.797667][ T8755] d_splice_alias_ops+0x92/0x840 [ 98.797683][ T8755] ovl_lookup+0x51e/0x610 [ 98.797696][ T8755] ? __pfx_ovl_lookup+0x10/0x10 [ 98.797715][ T8755] ? bpf_lsm_inode_permission+0x9/0x10 [ 98.797731][ T8755] ? security_inode_permission+0xbf/0x260 [ 98.797746][ T8755] ? __pfx_ovl_lookup+0x10/0x10 [ 98.797758][ T8755] lookup_open.isra.0+0x4e2/0x1780 [ 98.797774][ T8755] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 98.797789][ T8755] ? find_held_lock+0x2b/0x80 [ 98.797809][ T8755] ? __pfx_down_write+0x10/0x10 [ 98.797828][ T8755] path_openat+0xa95/0x3140 [ 98.797875][ T8755] ? __pfx_path_openat+0x10/0x10 [ 98.797895][ T8755] ? __lock_acquire+0x436/0x2890 [ 98.797909][ T8755] do_filp_open+0x20b/0x470 [ 98.797924][ T8755] ? __pfx_do_filp_open+0x10/0x10 [ 98.797949][ T8755] ? _raw_spin_unlock+0x28/0x50 [ 98.797960][ T8755] ? alloc_fd+0x471/0x7d0 [ 98.797979][ T8755] do_sys_openat2+0x121/0x290 [ 98.797989][ T8755] ? __pfx_do_sys_openat2+0x10/0x10 [ 98.797999][ T8755] ? __fget_files+0x20e/0x3c0 [ 98.798017][ T8755] __x64_sys_creat+0xcc/0x120 [ 98.798027][ T8755] ? __pfx___x64_sys_creat+0x10/0x10 [ 98.798036][ T8755] ? __pfx_ksys_write+0x10/0x10 [ 98.798051][ T8755] ? rcu_is_watching+0x12/0xc0 [ 98.798061][ T8755] ? do_syscall_64+0x91/0xf80 [ 98.798075][ T8755] do_syscall_64+0xcd/0xf80 [ 98.798093][ T8755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.798104][ T8755] RIP: 0033:0x7f40b6b8f7c9 [ 98.798113][ T8755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.798123][ T8755] RSP: 002b:00007f40b797f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 98.798134][ T8755] RAX: ffffffffffffffda RBX: 00007f40b6de5fa0 RCX: 00007f40b6b8f7c9 [ 98.798140][ T8755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 98.798146][ T8755] RBP: 00007f40b797f090 R08: 0000000000000000 R09: 0000000000000000 [ 98.798152][ T8755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.798158][ T8755] R13: 00007f40b6de6038 R14: 00007f40b6de5fa0 R15: 00007fff4f43d678 [ 98.798172][ T8755] [ 98.798249][ T8755] SELinux: inode_doinit_use_xattr: context_to_sid(root:object_r:user_tmpfs_t) returned 12 for dev=overlay ino=1130 [ 98.930333][ T40] audit: type=1400 audit(1766903145.678:29905): avc: denied { write } for pid=8754 comm="syz.3.770" name="file0" dev="overlay" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.941067][ T40] audit: type=1400 audit(1766903145.688:29906): avc: denied { open } for pid=8754 comm="syz.3.770" path="/192/bus/file0" dev="overlay" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.995222][ T40] audit: type=1400 audit(1766903145.738:29907): avc: denied { map } for pid=8757 comm="syz.3.772" path="socket:[22891]" dev="sockfs" ino=22891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 99.011584][ T40] audit: type=1400 audit(1766903145.758:29908): avc: denied { append } for pid=8765 comm="syz.4.774" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.104404][ T8778] input: syz1 as /devices/virtual/input/input7 [ 99.111227][ T40] audit: type=1400 audit(1766903145.859:29909): avc: denied { ioctl } for pid=5327 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3054 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.141723][ T8778] netlink: 'syz.4.777': attribute type 28 has an invalid length. [ 99.145358][ T8778] netlink: 'syz.4.777': attribute type 3 has an invalid length. [ 99.149727][ T8778] netlink: 132 bytes leftover after parsing attributes in process `syz.4.777'. [ 99.290124][ T8802] input: syz1 as /devices/virtual/input/input8 [ 99.341534][ T8809] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 99.401033][ T40] audit: type=1400 audit(1766903146.149:29910): avc: denied { accept } for pid=8811 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.418724][ T6266] net_ratelimit: 35 callbacks suppressed [ 99.418741][ T6266] bond1: (slave lo): failed to get link speed/duplex [ 99.487507][ T29] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 99.565071][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 99.568106][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.789'. [ 99.584499][ T8827] overlay: ./file0 is not a directory [ 99.587077][ T8827] 9pnet_virtio: no channels available for device ./file0 [ 99.627893][ T6264] bond1: (slave lo): failed to get link speed/duplex [ 99.649708][ T29] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 99.653726][ T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.658284][ T29] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 99.661800][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.666638][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16639, setting to 1024 [ 99.676111][ T29] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 99.682352][ T29] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 99.685894][ T29] usb 8-1: Product: syz [ 99.688418][ T29] usb 8-1: Manufacturer: syz [ 99.710842][ T29] cdc_wdm 8-1:1.0: skipping garbage [ 99.713223][ T29] cdc_wdm 8-1:1.0: skipping garbage [ 99.716426][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'. [ 99.721756][ T29] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 99.724391][ T29] cdc_wdm 8-1:1.0: Unknown control protocol [ 99.737183][ T6265] bond1: (slave lo): failed to get link speed/duplex [ 99.760437][ T8876] FAULT_INJECTION: forcing a failure. [ 99.760437][ T8876] name failslab, interval 1, probability 0, space 0, times 0 [ 99.764834][ T8876] CPU: 0 UID: 0 PID: 8876 Comm: syz.4.791 Tainted: G L syzkaller #0 PREEMPT(full) [ 99.764851][ T8876] Tainted: [L]=SOFTLOCKUP [ 99.764855][ T8876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 99.764862][ T8876] Call Trace: [ 99.764870][ T8876] [ 99.764874][ T8876] dump_stack_lvl+0x16c/0x1f0 [ 99.764892][ T8876] should_fail_ex+0x512/0x640 [ 99.764907][ T8876] ? fs_reclaim_acquire+0xae/0x150 [ 99.764924][ T8876] should_failslab+0xc2/0x120 [ 99.764937][ T8876] __kmalloc_noprof+0xeb/0x910 [ 99.764953][ T8876] ? tomoyo_encode2+0x100/0x3e0 [ 99.764970][ T8876] ? tomoyo_encode2+0x100/0x3e0 [ 99.764983][ T8876] tomoyo_encode2+0x100/0x3e0 [ 99.764998][ T8876] tomoyo_encode+0x29/0x50 [ 99.765011][ T8876] tomoyo_realpath_from_path+0x18f/0x6e0 [ 99.765029][ T8876] tomoyo_check_open_permission+0x2ab/0x3c0 [ 99.765042][ T8876] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 99.765067][ T8876] ? lock_acquire+0x179/0x330 [ 99.765080][ T8876] ? find_held_lock+0x2b/0x80 [ 99.765096][ T8876] ? mnt_get_write_access+0x52/0x2f0 [ 99.765109][ T8876] tomoyo_file_open+0x6b/0x90 [ 99.765126][ T8876] security_file_open+0x84/0x1e0 [ 99.765140][ T8876] do_dentry_open+0x597/0x1590 [ 99.765155][ T8876] ? security_inode_permission+0xbf/0x260 [ 99.765170][ T8876] vfs_open+0x82/0x3f0 [ 99.765181][ T8876] path_openat+0x2078/0x3140 [ 99.765200][ T8876] ? __pfx_path_openat+0x10/0x10 [ 99.765217][ T8876] ? __lock_acquire+0x436/0x2890 [ 99.765231][ T8876] do_filp_open+0x20b/0x470 [ 99.765245][ T8876] ? __pfx_do_filp_open+0x10/0x10 [ 99.765270][ T8876] ? _raw_spin_unlock+0x28/0x50 [ 99.765281][ T8876] ? alloc_fd+0x471/0x7d0 [ 99.765299][ T8876] do_sys_openat2+0x121/0x290 [ 99.765309][ T8876] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.765319][ T8876] ? __fget_files+0x20e/0x3c0 [ 99.765337][ T8876] __x64_sys_creat+0xcc/0x120 [ 99.765347][ T8876] ? __pfx___x64_sys_creat+0x10/0x10 [ 99.765357][ T8876] ? __pfx_ksys_write+0x10/0x10 [ 99.765371][ T8876] ? rcu_is_watching+0x12/0xc0 [ 99.765381][ T8876] ? do_syscall_64+0x91/0xf80 [ 99.765394][ T8876] do_syscall_64+0xcd/0xf80 [ 99.765408][ T8876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.765419][ T8876] RIP: 0033:0x7f28fad8f7c9 [ 99.765428][ T8876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.765438][ T8876] RSP: 002b:00007f28fbbc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 99.765449][ T8876] RAX: ffffffffffffffda RBX: 00007f28fafe5fa0 RCX: 00007f28fad8f7c9 [ 99.765456][ T8876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 99.765461][ T8876] RBP: 00007f28fbbc0090 R08: 0000000000000000 R09: 0000000000000000 [ 99.765467][ T8876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.765473][ T8876] R13: 00007f28fafe6038 R14: 00007f28fafe5fa0 R15: 00007ffef9885ae8 [ 99.765488][ T8876] [ 99.765500][ T8876] ERROR: Out of memory at tomoyo_realpath_from_path. [ 99.846890][ T6264] bond1: (slave lo): failed to get link speed/duplex [ 99.947260][ T8885] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 99.953764][ T8885] bond3 (unregistering): Released all slaves [ 99.965516][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 99.965596][ T62] usb 8-1: USB disconnect, device number 5 [ 99.967750][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 99.967761][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 99.973203][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.796'. [ 99.979772][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.4.796'. [ 99.994110][ T34] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 99.999911][ T8938] block nbd4: Unsupported socket: should be TCP or UNIX. [ 100.007061][ T6268] bond1: (slave lo): failed to get link speed/duplex [ 100.048627][ T8966] overlayfs: failed to resolve './file1': -2 [ 100.117501][ T6262] bond1: (slave lo): failed to get link speed/duplex [ 100.141779][ T8974] netlink: 'syz.4.801': attribute type 1 has an invalid length. [ 100.149478][ T8972] netlink: 'syz.1.800': attribute type 1 has an invalid length. [ 100.160353][ T34] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 100.166162][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.169054][ T34] usb 5-1: Product: syz [ 100.171284][ T34] usb 5-1: Manufacturer: syz [ 100.174624][ T8974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 100.177252][ T34] usb 5-1: SerialNumber: syz [ 100.236090][ T6268] bond1: (slave lo): failed to get link speed/duplex [ 100.345820][ T6262] bond1: (slave lo): failed to get link speed/duplex [ 100.457102][ T6264] bond1: (slave lo): failed to get link speed/duplex [ 100.496421][ T9048] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=9048 comm=syz.1.805 [ 100.565393][ T6264] bond1: (slave lo): failed to get link speed/duplex [ 100.597275][ T8867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.792'. [ 100.658170][ T34] rtl8150 5-1:1.0: couldn't reset the device [ 100.661479][ T34] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 100.672883][ T34] usb 5-1: USB disconnect, device number 14 [ 100.755021][ C3] bridge0: port 3(syz_tun) entered forwarding state [ 100.757214][ C3] bridge0: topology change detected, propagating [ 100.768232][ T9146] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.800888][ T9175] program syz.3.809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.822887][ T9177] ata1.00: invalid multi_count 1 ignored [ 100.872476][ T9184] Bluetooth: MGMT ver 1.23 [ 101.043356][ T9199] overlay: Unknown parameter 'hash' [ 101.424979][ T9229] netlink: 27 bytes leftover after parsing attributes in process `syz.3.825'. [ 101.475346][ T9238] xt_bpf: check failed: parse error [ 101.626462][ T9280] usb usb8: usbfs: process 9280 (syz.0.832) did not claim interface 0 before use [ 102.236399][ T9326] FAULT_INJECTION: forcing a failure. [ 102.236399][ T9326] name failslab, interval 1, probability 0, space 0, times 0 [ 102.240667][ T9326] CPU: 2 UID: 0 PID: 9326 Comm: syz.3.844 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.240684][ T9326] Tainted: [L]=SOFTLOCKUP [ 102.240688][ T9326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.240694][ T9326] Call Trace: [ 102.240698][ T9326] [ 102.240703][ T9326] dump_stack_lvl+0x16c/0x1f0 [ 102.240720][ T9326] should_fail_ex+0x512/0x640 [ 102.240736][ T9326] ? fs_reclaim_acquire+0xae/0x150 [ 102.240751][ T9326] should_failslab+0xc2/0x120 [ 102.240765][ T9326] __kmalloc_noprof+0xeb/0x910 [ 102.240781][ T9326] ? tomoyo_encode2+0x100/0x3e0 [ 102.240798][ T9326] ? tomoyo_encode2+0x100/0x3e0 [ 102.240810][ T9326] tomoyo_encode2+0x100/0x3e0 [ 102.240827][ T9326] tomoyo_encode+0x29/0x50 [ 102.240840][ T9326] tomoyo_realpath_from_path+0x18f/0x6e0 [ 102.240856][ T9326] ? tomoyo_profile+0x47/0x60 [ 102.240872][ T9326] tomoyo_path_perm+0x274/0x460 [ 102.240883][ T9326] ? tomoyo_path_perm+0x260/0x460 [ 102.240896][ T9326] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 102.240922][ T9326] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 102.240935][ T9326] ? is_bpf_text_address+0x94/0x1a0 [ 102.240948][ T9326] ? kernel_text_address+0x8d/0x100 [ 102.240964][ T9326] security_inode_getattr+0x116/0x290 [ 102.240978][ T9326] vfs_getattr+0x25/0x60 [ 102.240994][ T9326] ovl_copy_up_one+0x16e/0x3c40 [ 102.241007][ T9326] ? stack_trace_save+0x8e/0xc0 [ 102.241018][ T9326] ? __pfx_stack_trace_save+0x10/0x10 [ 102.241030][ T9326] ? __lock_acquire+0x436/0x2890 [ 102.241043][ T9326] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 102.241053][ T9326] ? kasan_save_stack+0x42/0x60 [ 102.241064][ T9326] ? kasan_save_stack+0x33/0x60 [ 102.241080][ T9326] ? __kasan_slab_free+0x5f/0x80 [ 102.241091][ T9326] ? kfree+0x2f8/0x6e0 [ 102.241100][ T9326] ? security_file_open+0x84/0x1e0 [ 102.241119][ T9326] ? do_dentry_open+0x597/0x1590 [ 102.241137][ T9326] ? vfs_open+0x82/0x3f0 [ 102.241151][ T9326] ? path_openat+0x2078/0x3140 [ 102.241170][ T9326] ? do_filp_open+0x20b/0x470 [ 102.241191][ T9326] ? do_sys_openat2+0x121/0x290 [ 102.241203][ T9326] ? __x64_sys_creat+0xcc/0x120 [ 102.241212][ T9326] ? do_syscall_64+0xcd/0xf80 [ 102.241224][ T9326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.241266][ T9326] ? dget_parent+0xf8/0x5e0 [ 102.241282][ T9326] ovl_copy_up_flags+0x18f/0x240 [ 102.241295][ T9326] ovl_maybe_copy_up+0x124/0x170 [ 102.241306][ T9326] ovl_open+0x176/0x330 [ 102.241319][ T9326] ? __pfx_ovl_open+0x10/0x10 [ 102.241331][ T9326] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 102.241351][ T9326] do_dentry_open+0x748/0x1590 [ 102.241363][ T9326] ? __pfx_ovl_open+0x10/0x10 [ 102.241379][ T9326] vfs_open+0x82/0x3f0 [ 102.241390][ T9326] path_openat+0x2078/0x3140 [ 102.241408][ T9326] ? __pfx_path_openat+0x10/0x10 [ 102.241425][ T9326] ? __lock_acquire+0x436/0x2890 [ 102.241438][ T9326] do_filp_open+0x20b/0x470 [ 102.241453][ T9326] ? __pfx_do_filp_open+0x10/0x10 [ 102.241477][ T9326] ? _raw_spin_unlock+0x28/0x50 [ 102.241488][ T9326] ? alloc_fd+0x471/0x7d0 [ 102.241506][ T9326] do_sys_openat2+0x121/0x290 [ 102.241515][ T9326] ? __pfx_do_sys_openat2+0x10/0x10 [ 102.241526][ T9326] ? __fget_files+0x20e/0x3c0 [ 102.241543][ T9326] __x64_sys_creat+0xcc/0x120 [ 102.241553][ T9326] ? __pfx___x64_sys_creat+0x10/0x10 [ 102.241563][ T9326] ? __pfx_ksys_write+0x10/0x10 [ 102.241577][ T9326] ? rcu_is_watching+0x12/0xc0 [ 102.241587][ T9326] ? do_syscall_64+0x91/0xf80 [ 102.241601][ T9326] do_syscall_64+0xcd/0xf80 [ 102.241614][ T9326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.241624][ T9326] RIP: 0033:0x7f40b6b8f7c9 [ 102.241633][ T9326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.241644][ T9326] RSP: 002b:00007f40b797f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 102.241654][ T9326] RAX: ffffffffffffffda RBX: 00007f40b6de5fa0 RCX: 00007f40b6b8f7c9 [ 102.241660][ T9326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 102.241666][ T9326] RBP: 00007f40b797f090 R08: 0000000000000000 R09: 0000000000000000 [ 102.241672][ T9326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.241678][ T9326] R13: 00007f40b6de6038 R14: 00007f40b6de5fa0 R15: 00007fff4f43d678 [ 102.241693][ T9326] [ 102.241760][ T9326] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.605292][ T9338] __nla_validate_parse: 4 callbacks suppressed [ 102.605304][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.849'. [ 102.616568][ T9341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.851'. [ 102.630143][ T9338] bond0: entered promiscuous mode [ 102.633006][ T9338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.638092][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.849'. [ 102.641014][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 102.651139][ T9338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'. [ 102.656663][ T9375] netlink: 'syz.4.850': attribute type 1 has an invalid length. [ 102.659409][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.849'. [ 102.660623][ T9375] netlink: 228 bytes leftover after parsing attributes in process `syz.4.850'. [ 102.665975][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.850'. [ 102.666454][ T9338] bond0: (slave sit1): refused to change device type [ 102.849229][ T9398] netlink: 72 bytes leftover after parsing attributes in process `syz.1.857'. [ 102.854811][ T9398] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.857'. [ 103.683582][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 103.683595][ T40] audit: type=1400 audit(1766903150.437:29931): avc: denied { bind } for pid=9407 comm="syz.4.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.689789][ T9408] tipc: Can't bind to reserved service type 1 [ 103.844531][ T40] audit: type=1400 audit(1766903150.597:29932): avc: denied { mount } for pid=9423 comm="syz.3.866" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 103.852980][ T40] audit: type=1400 audit(1766903150.597:29933): avc: denied { remount } for pid=9423 comm="syz.3.866" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 103.913210][ T9433] SELinux: failed to load policy [ 103.979234][ T40] audit: type=1400 audit(1766903150.728:29934): avc: denied { setopt } for pid=9431 comm="syz.4.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 104.063652][ T40] audit: type=1400 audit(1766903150.818:29935): avc: denied { accept } for pid=9423 comm="syz.3.866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.105422][ T40] audit: type=1400 audit(1766903150.858:29936): avc: denied { ioctl } for pid=9472 comm="syz.4.869" path="socket:[25220]" dev="sockfs" ino=25220 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.237156][ T9483] 8021q: VLANs not supported on wg1 [ 104.337148][ T9495] digital: digital_start_poll: Unknown protocol [ 104.341812][ T40] audit: type=1400 audit(1766903151.098:29937): avc: denied { mount } for pid=9494 comm="syz.1.873" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 104.344020][ T9495] devtmpfs: Unknown parameter 'usrq55M' [ 104.351677][ T40] audit: type=1400 audit(1766903151.098:29938): avc: denied { remount } for pid=9494 comm="syz.1.873" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 104.372223][ T40] audit: type=1400 audit(1766903151.128:29939): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 104.508912][ T6264] net_ratelimit: 39 callbacks suppressed [ 104.508927][ T6264] bond1: (slave lo): failed to get link speed/duplex [ 104.618461][ T6262] bond1: (slave lo): failed to get link speed/duplex [ 104.727034][ T40] audit: type=1400 audit(1766903151.479:29940): avc: denied { unmount } for pid=5929 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 104.733922][ T6264] bond1: (slave lo): failed to get link speed/duplex [ 104.820518][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.848013][ T60] bond1: (slave lo): failed to get link speed/duplex [ 104.957876][ T6265] bond1: (slave lo): failed to get link speed/duplex [ 105.077647][ T6265] bond1: (slave lo): failed to get link speed/duplex [ 105.197483][ T6268] bond1: (slave lo): failed to get link speed/duplex [ 105.207805][ T9526] delete_channel: no stack [ 105.263126][ T9556] binder: 9555:9556 unknown command 0 [ 105.264979][ T9556] binder: 9555:9556 ioctl c0306201 2000000005c0 returned -22 [ 105.307240][ T6268] bond1: (slave lo): failed to get link speed/duplex [ 105.428071][ T6268] bond1: (slave lo): failed to get link speed/duplex [ 105.647652][ T9584] block nbd1: NBD_DISCONNECT [ 105.757886][ T9596] 9pnet: Found fid 0 not clunked [ 105.924967][ T9570] block nbd1: Disconnected due to user request. [ 105.932093][ T9570] block nbd1: shutting down sockets [ 106.247534][ T9633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9633 comm=syz.3.906 [ 106.498953][ T9655] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.636193][ T9669] 9pnet_virtio: no channels available for device syz [ 106.740863][ T9680] bond1: (slave lo): Removing an active aggregator [ 106.744435][ T9680] bond1: (slave lo): Releasing backup interface [ 106.747320][ T6179] e1000 0000:00:06.0 eth0: Reset adapter [ 106.751932][ T9680] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 106.755275][ T9680] lo: left promiscuous mode [ 106.758141][ T9683] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 106.762328][ T9680] dummy0: left allmulticast mode [ 106.762754][ T9682] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 106.764108][ T9680] bridge0: port 3(dummy0) entered disabled state [ 106.776218][ T9680] bridge_slave_0: left allmulticast mode [ 106.778664][ T9680] bridge_slave_0: left promiscuous mode [ 106.779792][ T9682] kvm: pic: level sensitive irq not supported [ 106.780856][ T9680] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.781469][ T9682] kvm: pic: non byte read [ 106.790381][ T9680] bridge_slave_1: left allmulticast mode [ 106.790914][ T9682] kvm: pic: single mode not supported [ 106.792550][ T9680] bridge_slave_1: left promiscuous mode [ 106.792705][ T9680] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.796280][ T9682] kvm: pic: non byte read [ 106.807679][ T9680] .`: (slave bond_slave_0): Releasing backup interface [ 106.816413][ T9680] .`: (slave bond_slave_1): Releasing backup interface [ 106.829457][ T9680] team0: Port device team_slave_0 removed [ 106.838394][ T9680] team0: Port device team_slave_1 removed [ 106.841367][ T9680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.844449][ T9680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.849182][ T9680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.851590][ T9680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.972953][ T9669] team0: Mode changed to "activebackup" [ 106.978889][ T9694] vlan0: entered promiscuous mode [ 106.986725][ T9694] team0: Port device vlan0 added [ 109.054244][ T6179] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 110.011745][ T6020] net_ratelimit: 17 callbacks suppressed [ 110.011762][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.050739][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.089774][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.409318][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.129079][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.168377][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.207235][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.448889][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.246055][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.285533][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.326119][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.484649][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.646116][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.364240][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.403616][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.381501][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 121.381511][ T40] audit: type=1400 audit(1766903168.144:29949): avc: denied { bpf } for pid=9740 comm="syz.4.926" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.385624][ T9743] program syz.1.925 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.400781][ T40] audit: type=1400 audit(1766903168.164:29950): avc: denied { perfmon } for pid=9738 comm="syz.1.925" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.430068][ T40] audit: type=1400 audit(1766903168.194:29951): avc: denied { module_request } for pid=9748 comm="syz.4.928" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 121.452801][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.493316][ T40] audit: type=1400 audit(1766903168.264:29952): avc: denied { getopt } for pid=9748 comm="syz.4.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 121.540858][ T9758] macsec1: entered allmulticast mode [ 121.551439][ T9763] tmpfs: Unknown parameter 'mpoerneave' [ 121.592415][ T9768] 9pnet_virtio: no channels available for device syz [ 121.629458][ T40] audit: type=1400 audit(1766903168.394:29953): avc: denied { ioctl } for pid=9769 comm="syz.1.933" path="socket:[24377]" dev="sockfs" ino=24377 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.676323][ T9781] nbd: couldn't find device at index -2127233020 [ 121.680336][ T9781] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 121.684489][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.792900][ T40] audit: type=1400 audit(1766903168.554:29954): avc: denied { connect } for pid=9792 comm="syz.0.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 121.793511][ T9791] comedi comedi3: comedi_config --init_data is deprecated [ 121.851944][ T40] audit: type=1400 audit(1766903168.614:29955): avc: denied { name_bind } for pid=9802 comm="syz.1.943" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 121.918399][ T9810] __nla_validate_parse: 10 callbacks suppressed [ 121.918412][ T9810] netlink: 60 bytes leftover after parsing attributes in process `syz.4.942'. [ 121.923956][ T40] audit: type=1400 audit(1766903168.695:29956): avc: denied { getopt } for pid=9802 comm="syz.1.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 121.933734][ T9810] netlink: 224 bytes leftover after parsing attributes in process `syz.4.942'. [ 122.044057][ T9821] bond4: (slave bond_slave_1): Device is not our slave [ 122.046375][ T9821] bond4: option active_slave: invalid value (bond_slave_1) [ 122.050402][ T9821] bond4 (unregistering): Released all slaves [ 122.096003][ T9900] overlayfs: failed to resolve './file1': -2 [ 122.490352][ T65] Bluetooth: hci3: link tx timeout [ 122.493167][ T65] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.502306][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.529421][ T9939] tipc: Enabling of bearer rejected, already enabled [ 123.090065][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.964'. [ 123.094236][ T9956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.964'. [ 123.372933][ T40] audit: type=1400 audit(1766903170.145:29957): avc: denied { map } for pid=9957 comm="syz.0.965" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 123.374412][ T9959] No memory to map [ 123.381386][ T40] audit: type=1400 audit(1766903170.145:29958): avc: denied { execute } for pid=9957 comm="syz.0.965" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 123.531820][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.858301][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 123.862175][ T9988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.973'. [ 124.084913][ T9998] input: syz1 as /devices/virtual/input/input10 [ 124.316604][T10014] netlink: 132 bytes leftover after parsing attributes in process `syz.1.980'. [ 124.459783][T10020] overlayfs: failed to resolve './file0': -2 [ 124.532990][T10024] netlink: 'syz.1.984': attribute type 4 has an invalid length. [ 124.570107][ T65] Bluetooth: hci3: command 0x0406 tx timeout [ 124.575294][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.644105][T10031] ptrace attach of "/syz-executor exec"[5941] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 124.702966][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.985'. [ 124.721354][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.739269][T10037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.985'. [ 124.921779][T10048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10048 comm=syz.1.989 [ 124.925002][T10051] netlink: 'syz.4.990': attribute type 1 has an invalid length. [ 124.928464][T10048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.989'. [ 124.997091][T10099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10099 comm=syz.1.991 [ 125.115391][T10110] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10110 comm=syz.1.995 [ 125.171052][ T6179] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 125.248923][T10121] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 125.252806][T10121] dvmrp1: linktype set to 519 [ 125.255851][T10124] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 125.257902][T10124] dvmrp1: linktype set to 519 [ 125.260031][T10125] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 125.332243][ T6179] usb 8-1: config 15 has an invalid interface number: 134 but max is 1 [ 125.335058][ T6179] usb 8-1: config 15 has an invalid interface number: 212 but max is 1 [ 125.340985][ T6179] usb 8-1: config 15 has an invalid descriptor of length 1, skipping remainder of the config [ 125.344401][ T6179] usb 8-1: config 15 has no interface number 0 [ 125.346623][ T6179] usb 8-1: config 15 has no interface number 1 [ 125.349555][ T6179] usb 8-1: config 15 interface 134 altsetting 10 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 125.370986][ T6179] usb 8-1: config 15 interface 134 altsetting 10 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 125.375157][ T6179] usb 8-1: config 15 interface 134 altsetting 10 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 125.379151][ T6179] usb 8-1: config 15 interface 134 altsetting 10 endpoint 0xD has invalid maxpacket 967, setting to 64 [ 125.400939][ T6179] usb 8-1: config 15 interface 212 altsetting 3 endpoint 0x4 has invalid maxpacket 15631, setting to 64 [ 125.404879][ T6179] usb 8-1: config 15 interface 212 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 125.409347][ T6179] usb 8-1: config 15 interface 134 has no altsetting 0 [ 125.412191][ T6179] usb 8-1: config 15 interface 212 has no altsetting 0 [ 125.416355][ T6179] usb 8-1: New USB device found, idVendor=19d2, idProduct=ffce, bcdDevice=64.79 [ 125.419474][ T6179] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.422507][ T6179] usb 8-1: Product: syz [ 125.423966][ T6179] usb 8-1: Manufacturer: syz [ 125.425543][ T6179] usb 8-1: SerialNumber: syz [ 125.610939][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.873718][T10140] kvm: pic: non byte write [ 125.991620][T10152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=10152 comm=syz.4.1006 [ 126.027429][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.027821][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.028219][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.028536][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.028876][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.029284][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.029904][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.030395][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.030837][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.031179][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.031577][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.031914][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.032242][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.032596][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.032989][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.033301][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.033645][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.034035][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.034395][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.039607][T10155] overlay: filesystem on ./file0 not supported as upperdir [ 126.083913][T10157] overlayfs: failed to resolve './file1': -2 [ 126.117372][T10161] overlayfs: failed to resolve './file1': -2 [ 126.145249][ T6179] option 8-1:15.134: GSM modem (1-port) converter detected [ 126.159527][ T6179] rndis_host 8-1:15.212: skipping garbage [ 126.159542][ T6179] usb 8-1: bad CDC descriptors [ 126.167435][ T6179] usb 8-1: USB disconnect, device number 6 [ 126.174434][ T6179] option 8-1:15.134: device disconnected [ 126.191268][T10183] fuse: Unknown parameter '0x0000000000000004' [ 126.193929][T10182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64528 sclass=netlink_route_socket pid=10182 comm=syz.1.1011 [ 126.223829][T10182] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 126.342306][T10194] random: crng reseeded on system resumption [ 126.351691][T10194] Restarting kernel threads ... [ 126.353497][T10194] Done restarting kernel threads. [ 126.375923][T10191] kvm: pic: non byte write [ 126.574150][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 126.574167][ T40] audit: type=1400 audit(1766903173.347:29969): avc: denied { listen } for pid=10204 comm="syz.3.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 126.640600][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.052165][T10240] kvm: pic: non byte write [ 127.203883][T10251] __nla_validate_parse: 5 callbacks suppressed [ 127.203895][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'. [ 127.226152][ T40] audit: type=1400 audit(1766903173.997:29970): avc: denied { setopt } for pid=10250 comm="syz.4.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 127.298864][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 127.452258][T10285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1033'. [ 127.471911][T10285] bridge2: port 1(gretap0) entered blocking state [ 127.475009][T10285] bridge2: port 1(gretap0) entered disabled state [ 127.477448][T10285] gretap0: entered allmulticast mode [ 127.481209][T10285] gretap0: entered promiscuous mode [ 127.486372][T10285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1033'. [ 127.493925][T10285] bridge2: port 2(veth0_to_bond) entered blocking state [ 127.497164][T10285] bridge2: port 2(veth0_to_bond) entered disabled state [ 127.500693][T10285] veth0_to_bond: entered allmulticast mode [ 127.503922][T10285] veth0_to_bond: entered promiscuous mode [ 127.546733][T10292] IPv6: addrconf: prefix option has invalid lifetime [ 127.582804][T10294] kvm: pic: non byte write [ 127.680205][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.739825][ T40] audit: type=1400 audit(1766903174.507:29971): avc: denied { set_context_mgr } for pid=10307 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 127.746230][T10310] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1040'. [ 127.749437][ T40] audit: type=1400 audit(1766903174.517:29972): avc: denied { call } for pid=10307 comm="syz.3.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 127.756945][T10308] binder_alloc: 10307: pid 10307 spamming oneway? 1 buffers allocated for a total size of 4096 [ 127.765085][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.775419][T10312] openvswitch: netlink: Flow actions attr not present in new flow. [ 128.001260][ T40] audit: type=1400 audit(1766903174.777:29973): avc: denied { create } for pid=10352 comm="syz.3.1044" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.006402][T10353] Cannot find add_set index 0 as target [ 128.027281][ T40] audit: type=1400 audit(1766903174.797:29974): avc: denied { setattr } for pid=10352 comm="syz.3.1044" name="file1" dev="overlay" ino=1635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.037776][ T40] audit: type=1400 audit(1766903174.797:29975): avc: denied { rename } for pid=10352 comm="syz.3.1044" name="#83" dev="tmpfs" ino=1643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.041540][T10354] overlayfs: orphan index entry (index/00fb210001fa0775d86b20420b9c248be7495633b6ab1aa0e16306000000000000, ftype=2000, nlink=1) [ 128.045489][ T40] audit: type=1400 audit(1766903174.797:29976): avc: denied { link } for pid=10352 comm="syz.3.1044" name="00fb210001fa0775d86b20420b9c248be7495633b6ab1aa0e16306000000000000" dev="tmpfs" ino=1643 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.062527][T10353] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1044'. [ 128.077462][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'. [ 128.089487][T10366] chnl_net:caif_netlink_parms(): no params data found [ 128.255937][ T40] audit: type=1400 audit(1766903175.027:29977): avc: denied { block_suspend } for pid=10385 comm="syz.0.1051" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.327781][T10399] fuse: Unknown parameter 'd' [ 128.471658][T10403] IPv6: addrconf: prefix option has invalid lifetime [ 128.529914][ T6014] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 128.679716][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 128.689811][ T6014] usb 5-1: Using ep0 maxpacket: 8 [ 128.693111][ T6014] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 128.695817][ T6014] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.698961][ T6014] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.700243][T10311] [U] B [ 128.702738][ T6014] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.706463][ T6014] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.711087][ T6014] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.714151][ T6014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.729855][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.764019][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1059'. [ 128.767003][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1059'. [ 128.771092][T10431] netlink: 'syz.4.1059': attribute type 12 has an invalid length. [ 128.851844][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.855652][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 128.858796][ T9] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 128.861972][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.868357][ T9] usb 6-1: config 0 descriptor?? [ 128.878438][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 128.881038][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.881115][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 128.894097][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 128.898037][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 128.901271][ T9] usb 6-1: media controller created [ 128.904878][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.917040][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 128.920166][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 128.922623][ T6014] usb 5-1: usb_control_msg returned -32 [ 128.924556][ T6014] usbtmc 5-1:16.0: can't read capabilities [ 128.932278][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input11 [ 128.940372][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 128.942770][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 129.075214][ T9] usb 6-1: USB disconnect, device number 4 [ 129.106817][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 129.197192][T10478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1066'. [ 129.732435][ T40] audit: type=1400 audit(1766903176.508:29978): avc: denied { execute } for pid=10496 comm="syz.1.1071" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 129.747053][T10497] FAT-fs (loop1): unable to read boot sector [ 129.761533][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.981811][T10515] netlink: 'syz.1.1074': attribute type 29 has an invalid length. [ 129.985022][T10515] netlink: 'syz.1.1074': attribute type 29 has an invalid length. [ 130.404037][T10549] overlayfs: failed to resolve './file3': -2 [ 130.799234][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.111951][T10572] binder: BC_ATTEMPT_ACQUIRE not supported [ 131.113967][T10572] binder: 10571:10572 ioctl c0306201 200000000680 returned -22 [ 131.302215][ T34] usb 5-1: USB disconnect, device number 15 [ 131.473323][T10599] 9pnet_virtio: no channels available for device syz [ 131.552269][T10607] overlayfs: missing 'lowerdir' [ 131.651669][T10616] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 131.674767][T10616] can: request_module (can-proto-3) failed. [ 131.741761][T10634] tmpfs: Bad value for 'mpol' [ 131.839989][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.921193][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.947880][T10646] 9pnet_virtio: no channels available for device syz [ 131.988087][T10648] overlayfs: missing 'lowerdir' [ 132.068336][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 132.068346][ T40] audit: type=1400 audit(1766903178.838:29985): avc: denied { create } for pid=10651 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.080103][T10652] netlink: 'syz.3.1105': attribute type 21 has an invalid length. [ 132.083813][ T40] audit: type=1400 audit(1766903178.858:29986): avc: denied { setopt } for pid=10651 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.211339][T10655] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.356476][T10661] __nla_validate_parse: 4 callbacks suppressed [ 132.356487][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1108'. [ 132.404545][T10666] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 132.502517][T10682] overlayfs: missing 'lowerdir' [ 132.546008][T10685] xt_connbytes: Forcing CT accounting to be enabled [ 132.567237][ T40] audit: type=1400 audit(1766903179.338:29987): avc: denied { listen } for pid=10684 comm="syz.3.1114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.667327][ T9] Process accounting resumed [ 132.701442][T10696] netlink: 'syz.4.1118': attribute type 1 has an invalid length. [ 132.727749][T10696] 8021q: adding VLAN 0 to HW filter on device bond5 [ 132.878741][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.992710][T10739] netlink: 18 bytes leftover after parsing attributes in process `syz.0.1120'. [ 133.320656][T10741] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 133.325655][T10741] bond4 (unregistering): Released all slaves [ 133.363002][T10742] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 133.371920][T10742] bond4 (unregistering): Released all slaves [ 133.460587][T10688] Process accounting resumed [ 133.480384][T10874] overlayfs: missing 'lowerdir' [ 133.489491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 133.695026][T10902] ip6erspan0: entered promiscuous mode [ 133.731755][T10907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.735897][T10907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.739309][T10907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.742263][T10907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.742467][T10909] block device autoloading is deprecated and will be removed. [ 133.745155][T10907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.752368][T10905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.754128][T10909] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1132'. [ 133.759455][T10909] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1132'. [ 133.808931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 133.826892][ T40] audit: type=1400 audit(1766903180.599:29988): avc: denied { mounton } for pid=10918 comm="syz.3.1136" path="/file0" dev="ramfs" ino=29407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 133.827033][T10919] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 133.839293][T10919] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 133.843209][T10919] overlayfs: missing 'lowerdir' [ 133.892453][ T40] audit: type=1400 audit(1766903180.669:29989): avc: denied { associate } for pid=10926 comm="syz.3.1140" name="0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 133.902932][T10929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1139'. [ 133.906680][T10929] vcan0: tx address claim with different name [ 134.033302][T10954] overlayfs: missing 'workdir' [ 134.107968][ T40] audit: type=1400 audit(1766903180.879:29990): avc: denied { create } for pid=10960 comm="syz.4.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 134.438313][ T40] audit: type=1400 audit(1766903181.189:29991): avc: denied { append } for pid=10968 comm="syz.3.1151" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 134.465958][T10982] No source specified [ 134.484399][ T40] audit: type=1400 audit(1766903181.259:29992): avc: denied { mounton } for pid=10983 comm="syz.3.1154" path="/315/file0" dev="tmpfs" ino=1871 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 134.987901][T11012] netlink: 'syz.0.1163': attribute type 29 has an invalid length. [ 135.043913][ T40] audit: type=1400 audit(1766903181.819:29993): avc: denied { setopt } for pid=11015 comm="syz.4.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 135.057438][T11016] mkiss: ax0: crc mode is auto. [ 135.121500][T11015] delete_channel: no stack [ 135.157150][T11027] 9pnet_virtio: no channels available for device syz [ 135.160400][T11027] raw_sendmsg: syz.4.1166 forgot to set AF_INET. Fix it! [ 135.426104][ T40] audit: type=1400 audit(1766903182.199:29994): avc: denied { read } for pid=11040 comm="syz.4.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 135.832249][T11073] fuse: Unknown parameter '' [ 135.876913][T11087] net_ratelimit: 3 callbacks suppressed [ 135.876924][T11087] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 135.998290][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.039141][T11084] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 136.043745][T11084] xt_hashlimit: size too large, truncated to 1048576 [ 136.093471][T11100] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1186'. [ 136.096423][T11100] block nbd0: not configured, cannot reconfigure [ 136.232384][T11114] binder: BINDER_SET_CONTEXT_MGR already set [ 136.234677][T11114] binder: 11113:11114 ioctl 4018620d 200000000100 returned -16 [ 137.037783][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.186738][ T5934] Bluetooth: hci1: unexpected cc 0x202a length: 5 > 2 [ 137.191019][T11160] overlayfs: missing 'lowerdir' [ 137.199963][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.202208][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.211914][ T9] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 137.217598][ T9] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 137.220070][ T9] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 137.222698][ T9] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 137.225247][ T9] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 137.227934][ T9] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 137.230343][ T9] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 137.232844][ T9] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 137.235387][ T9] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 137.238260][ T9] hid-generic 0005:00B6:0009.0002: unknown main item tag 0x0 [ 137.256340][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 137.256354][ T40] audit: type=1400 audit(1766903184.029:30002): avc: denied { bind } for pid=11165 comm="syz.0.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.256810][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'. [ 137.268784][ T9] hid-generic 0005:00B6:0009.0002: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 137.307637][T11169] fido_id[11169]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 137.336771][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'. [ 137.368474][T11187] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1203'. [ 137.373487][T11187] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1203'. [ 137.376256][T11189] tmpfs: Bad value for 'mpol' [ 137.402364][ T40] audit: type=1400 audit(1766903184.179:30003): avc: denied { create } for pid=11190 comm="syz.4.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 137.413185][ T40] audit: type=1400 audit(1766903184.189:30004): avc: denied { bind } for pid=11190 comm="syz.4.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 137.436214][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'. [ 137.527890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.575101][T11221] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1214'. [ 137.598697][T11223] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1215'. [ 137.646301][T11236] binder_alloc: binder_alloc_mmap_handler: 11235 200000ffd000-200001000000 already mapped failed -16 [ 137.649145][T11234] /dev/nullb0: Can't open blockdev [ 137.652853][T11236] binder: BINDER_SET_CONTEXT_MGR already set [ 137.654886][T11236] binder: 11235:11236 ioctl 4018620d 2000000000c0 returned -16 [ 137.660379][T11236] binder_alloc: 11235: binder_alloc_buf, no vma [ 137.660440][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1215'. [ 137.785648][T11328] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 137.814050][T11329] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 137.818569][T11329] overlayfs: failed to look up (tracing) for ino (-66) [ 137.839598][ T40] audit: type=1400 audit(1766903184.619:30005): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 137.873100][T11342] netlink: 'syz.0.1229': attribute type 6 has an invalid length. [ 137.875925][T11342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1229'. [ 137.876244][T11343] netlink: 'syz.3.1230': attribute type 1 has an invalid length. [ 137.919856][T11343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.924494][T11343] bond3: (slave bond4): making interface the new active one [ 137.927185][T11343] bond3: (slave bond4): Enslaving as an active interface with an up link [ 137.936891][T11343] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 137.943040][T11343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1230'. [ 137.945623][T11419] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 137.953639][T11419] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 137.977976][T11421] 9pnet_virtio: no channels available for device syz [ 137.998439][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.020431][ T40] audit: type=1400 audit(1766903184.799:30006): avc: denied { watch watch_reads } for pid=11424 comm="syz.0.1235" path="/proc/773" dev="proc" ino=31170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 138.087584][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 138.088320][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.138103][ T40] audit: type=1400 audit(1766903184.920:30007): avc: denied { read } for pid=11434 comm="syz.3.1238" path="socket:[32964]" dev="sockfs" ino=32964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.194174][ T40] audit: type=1400 audit(1766903184.970:30008): avc: denied { write } for pid=11434 comm="syz.3.1238" path="socket:[31173]" dev="sockfs" ino=31173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 138.248350][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 138.251586][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 138.254487][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.259611][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 138.262789][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.266063][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.267445][ T34] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 138.271313][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 138.276504][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.439162][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 138.446061][ T34] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 138.449987][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.453142][ T34] usb 5-1: Product: syz [ 138.454913][ T34] usb 5-1: Manufacturer: syz [ 138.456832][ T34] usb 5-1: SerialNumber: syz [ 138.461007][ T34] usb 5-1: config 0 descriptor?? [ 138.464547][ T34] hub 5-1:0.0: bad descriptor, ignoring hub [ 138.466998][ T34] hub 5-1:0.0: probe with driver hub failed with error -5 [ 138.472021][ T34] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input13 [ 138.488164][ T9] usb 6-1: usb_control_msg returned -32 [ 138.490189][ T9] usbtmc 6-1:16.0: can't read capabilities [ 138.503351][T11453] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 138.524012][T11453] bond6: entered promiscuous mode [ 138.525965][T11453] 8021q: adding VLAN 0 to HW filter on device bond6 [ 138.548862][ T40] audit: type=1400 audit(1766903185.330:30009): avc: denied { ioctl } for pid=11451 comm="syz.4.1240" path="socket:[33885]" dev="sockfs" ino=33885 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.556759][T11453] bond6: (slave bridge0): making interface the new active one [ 138.562081][T11453] bridge0: entered promiscuous mode [ 138.562382][ T40] audit: type=1400 audit(1766903185.330:30010): avc: denied { bind } for pid=11451 comm="syz.4.1240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.564431][T11453] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 138.783736][T11502] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 138.787723][T11502] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 138.895905][T11507] binder_alloc: 11506: binder_alloc_buf, no vma [ 139.119864][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.393313][T11544] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 139.395993][T11544] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 139.468195][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1254'. [ 139.508890][ T40] audit: type=1400 audit(1766903186.290:30011): avc: denied { setopt } for pid=11551 comm="syz.0.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 139.563494][T11554] syzkaller1: entered promiscuous mode [ 139.565305][T11554] syzkaller1: entered allmulticast mode [ 139.620486][T11565] 9pnet_virtio: no channels available for device syz [ 139.847554][T11576] binder: BINDER_SET_CONTEXT_MGR already set [ 139.849655][T11576] binder: 11575:11576 ioctl 4018620d 200000000100 returned -16 [ 139.857236][ T5997] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 139.940292][T11583] mkiss: ax0: crc mode is auto. [ 140.020709][ T5997] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 140.024200][ T5997] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.027802][ T5997] usb 8-1: Product: syz [ 140.029662][ T5997] usb 8-1: Manufacturer: syz [ 140.031692][ T5997] usb 8-1: SerialNumber: syz [ 140.037804][ T5997] usb 8-1: config 0 descriptor?? [ 140.136227][T11604] binder: BINDER_SET_CONTEXT_MGR already set [ 140.138488][T11604] binder: 11603:11604 ioctl 4018620d 200000000100 returned -16 [ 140.144231][T11604] binder: BINDER_SET_CONTEXT_MGR already set [ 140.146291][T11604] binder: 11603:11604 ioctl 4018620d 2000000002c0 returned -16 [ 140.167473][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.181574][T11606] netlink: 'syz.0.1265': attribute type 11 has an invalid length. [ 140.184250][T11606] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1265'. [ 140.246332][ T6015] usb 8-1: USB disconnect, device number 7 [ 140.256353][T11618] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 140.256911][T11613] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 140.421528][T11630] vlan0: entered promiscuous mode [ 140.427453][T11630] team0: Port device vlan0 added [ 140.495261][T11635] tipc: Started in network mode [ 140.496930][T11635] tipc: Node identity , cluster identity 4711 [ 140.499900][T11635] tipc: Failed to obtain node identity [ 140.501774][T11635] tipc: Enabling of bearer rejected, failed to enable media [ 140.529456][T11638] dlm: no local IP address has been set [ 140.532216][T11638] dlm: cannot start dlm midcomms -107 [ 140.830790][ T34] usb 5-1: USB disconnect, device number 16 [ 140.841384][ T6014] usb 6-1: USB disconnect, device number 5 [ 140.987049][ T34] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 141.038917][ T6016] net_ratelimit: 3 callbacks suppressed [ 141.038936][ T6016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.112549][T11680] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 141.207463][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.488377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 141.657389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 141.829536][ T34] usb 5-1: Invalid ep0 maxpacket: 64 [ 141.857164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 141.860016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 141.896952][ T6179] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 142.006860][ T34] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 142.026988][ T6179] usb 8-1: device descriptor read/64, error -71 [ 142.031057][T11714] netlink: 'syz.4.1284': attribute type 8 has an invalid length. [ 142.134076][T11730] vcan2: entered allmulticast mode [ 142.162972][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.166525][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.169644][ T34] usb 5-1: Invalid ep0 maxpacket: 64 [ 142.171811][ T34] usb usb5-port1: attempt power cycle [ 142.174353][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.178654][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.182114][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.185687][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.189290][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.190426][T11738] binder: Unknown parameter 'fowner<18446744073709551615' [ 142.192731][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.197986][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.201555][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.205413][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.209195][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.212781][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.216401][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.219950][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.223499][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.228839][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.230660][T11740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11740 comm=syz.1.1292 [ 142.232348][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.237376][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.240373][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.246995][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.250742][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.254290][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.258544][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.262098][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.265556][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.266842][ T6179] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 142.269154][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.274523][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.278053][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.281518][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.285063][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.288640][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.292168][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.295727][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.299367][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.302864][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.306240][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.310034][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.313591][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.318264][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.321911][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.325421][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.329494][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.332917][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.336385][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.340427][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.343957][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.347417][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.350853][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.354392][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.358113][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.361563][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.365100][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.368767][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.372638][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.376231][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.379845][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.383410][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.386971][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.391250][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.395823][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.396852][ T6179] usb 8-1: device descriptor read/64, error -71 [ 142.399573][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.405005][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.408536][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.412236][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.415749][T11735] 9pnet_fd: p9_fd_create_tcp (11735): problem connecting socket to 127.0.0.1 [ 142.461026][T11748] netlink: zone id is out of range [ 142.507096][ T6179] usb usb8-port1: attempt power cycle [ 142.536906][ T34] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 142.557515][ T34] usb 5-1: Invalid ep0 maxpacket: 64 [ 142.686765][ T34] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 142.707182][ T34] usb 5-1: Invalid ep0 maxpacket: 64 [ 142.709485][ T34] usb usb5-port1: unable to enumerate USB device [ 142.846800][ T6179] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 142.867077][ T6179] usb 8-1: device descriptor read/8, error -71 [ 142.946752][ T34] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 143.096740][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 143.101735][ T34] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 143.104741][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.106869][ T6179] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 143.107326][ T34] usb 9-1: Product: syz [ 143.111173][ T34] usb 9-1: Manufacturer: syz [ 143.112826][ T34] usb 9-1: SerialNumber: syz [ 143.116705][ T34] usb 9-1: config 0 descriptor?? [ 143.127280][ T6179] usb 8-1: device descriptor read/8, error -71 [ 143.237384][ T6179] usb usb8-port1: unable to enumerate USB device [ 143.287007][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.292764][T11770] 9pnet_virtio: no channels available for device syz [ 143.320859][ T34] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 143.327147][T11755] /dev/nullb0: Can't open blockdev [ 143.333051][ T34] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 143.340304][ T34] usb 9-1: USB disconnect, device number 6 [ 143.390311][T11784] __nla_validate_parse: 2 callbacks suppressed [ 143.390323][T11784] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1301'. [ 143.437957][T11788] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1302'. [ 143.476943][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 143.476957][ T40] audit: type=1400 audit(1766903190.260:30020): avc: denied { write } for pid=11792 comm="syz.1.1303" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 143.487313][ T40] audit: type=1400 audit(1766903190.260:30021): avc: denied { open } for pid=11792 comm="syz.1.1303" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 143.489877][T11794] autofs4:pid:11794:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 143.495052][ T40] audit: type=1400 audit(1766903190.270:30022): avc: denied { ioctl } for pid=11792 comm="syz.1.1303" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 143.845022][ T40] audit: type=1400 audit(1766903190.620:30023): avc: denied { accept } for pid=11819 comm="syz.0.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 143.889689][T11828] 9pnet_virtio: no channels available for device syz [ 143.950846][T11835] SET target dimension over the limit! [ 144.053831][ T40] audit: type=1400 audit(1766903190.830:30024): avc: denied { read } for pid=11842 comm="syz.4.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 144.064324][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1310'. [ 144.078412][ T5997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.175722][T11851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.183962][T11851] bond0: (slave rose0): Enslaving as an active interface with an up link [ 144.316682][ T6179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.372051][T11871] syz.1.1315 uses old SIOCAX25GETINFO [ 144.454571][T11881] netlink: 'syz.1.1316': attribute type 10 has an invalid length. [ 144.458447][T11881] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1316'. [ 144.573574][T11891] 9pnet_virtio: no channels available for device syz [ 144.794977][T11907] overlayfs: workdir and upperdir must be separate subtrees [ 144.963545][T11910] xt_limit: Overflow, try lower: 271964/0 [ 145.060432][ T40] audit: type=1400 audit(1766903191.840:30025): avc: denied { create } for pid=11920 comm="syz.3.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 145.065803][T11917] set match dimension is over the limit! [ 145.072550][ T40] audit: type=1400 audit(1766903191.840:30026): avc: denied { ioctl } for pid=11920 comm="syz.3.1326" path="socket:[33614]" dev="sockfs" ino=33614 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 145.147807][T11930] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1330'. [ 145.161640][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1330'. [ 145.165276][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1330'. [ 145.196179][T11937] delete_channel: no stack [ 145.226290][T11930] vxcan1: entered allmulticast mode [ 145.356873][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.405179][ T40] audit: type=1400 audit(1766903192.181:30027): avc: denied { remount } for pid=11951 comm="syz.0.1343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 145.407484][T11953] option changes via remount are deprecated (pid=11951 comm=syz.0.1343) [ 145.550320][T11970] 9pnet_virtio: no channels available for device syz [ 145.561877][T11973] FAULT_INJECTION: forcing a failure. [ 145.561877][T11973] name failslab, interval 1, probability 0, space 0, times 0 [ 145.565954][T11973] CPU: 2 UID: 0 PID: 11973 Comm: syz.0.1340 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.565971][T11973] Tainted: [L]=SOFTLOCKUP [ 145.565974][T11973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.565981][T11973] Call Trace: [ 145.565985][T11973] [ 145.565989][T11973] dump_stack_lvl+0x16c/0x1f0 [ 145.566025][T11973] should_fail_ex+0x512/0x640 [ 145.566044][T11973] ? kmem_cache_alloc_noprof+0x62/0x770 [ 145.566057][T11973] should_failslab+0xc2/0x120 [ 145.566071][T11973] kmem_cache_alloc_noprof+0x83/0x770 [ 145.566082][T11973] ? getname_flags.part.0+0x4c/0x550 [ 145.566096][T11973] ? getname_flags.part.0+0x4c/0x550 [ 145.566105][T11973] getname_flags.part.0+0x4c/0x550 [ 145.566117][T11973] getname_flags+0x93/0xf0 [ 145.566130][T11973] do_sys_openat2+0xb9/0x290 [ 145.566139][T11973] ? __pfx_do_sys_openat2+0x10/0x10 [ 145.566150][T11973] ? __fget_files+0x20e/0x3c0 [ 145.566168][T11973] __x64_sys_creat+0xcc/0x120 [ 145.566178][T11973] ? __pfx___x64_sys_creat+0x10/0x10 [ 145.566188][T11973] ? __pfx_ksys_write+0x10/0x10 [ 145.566202][T11973] ? rcu_is_watching+0x12/0xc0 [ 145.566212][T11973] ? do_syscall_64+0x91/0xf80 [ 145.566226][T11973] do_syscall_64+0xcd/0xf80 [ 145.566239][T11973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.566250][T11973] RIP: 0033:0x7f963958f7c9 [ 145.566259][T11973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.566270][T11973] RSP: 002b:00007f963a437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 145.566281][T11973] RAX: ffffffffffffffda RBX: 00007f96397e5fa0 RCX: 00007f963958f7c9 [ 145.566287][T11973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 145.566293][T11973] RBP: 00007f963a437090 R08: 0000000000000000 R09: 0000000000000000 [ 145.566299][T11973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.566316][T11973] R13: 00007f96397e6038 R14: 00007f96397e5fa0 R15: 00007ffdc663c528 [ 145.566332][T11973] [ 145.590939][T11975] Debayer B: ================= START STATUS ================= [ 145.593197][ T40] audit: type=1400 audit(1766903192.371:30028): avc: denied { append } for pid=11974 comm="syz.1.1344" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 145.595146][T11975] Debayer B: Debayer Mean Window Size: 3 [ 145.657911][T11975] Debayer B: ================== END STATUS ================== [ 145.748177][ T5934] Bluetooth: hci2: unexpected event 0x3b length: 48 > 10 [ 146.076414][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 146.236582][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 146.240499][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 146.243517][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.246775][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 146.249770][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 146.252894][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.261757][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 146.265559][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.478962][ T9] usb 6-1: usb_control_msg returned -32 [ 146.480853][ T9] usbtmc 6-1:16.0: can't read capabilities [ 146.485556][T12034] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1357'. [ 146.544183][ T40] audit: type=1400 audit(1766903193.321:30029): avc: denied { setopt } for pid=12032 comm="syz.3.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 146.632957][T12054] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1360'. [ 146.637323][T12054] netlink: 'syz.0.1360': attribute type 11 has an invalid length. [ 146.640438][T12054] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1360'. [ 146.672564][T12065] netlink: 'syz.4.1361': attribute type 1 has an invalid length. [ 146.676319][T12065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.259270][T12162] Driver unsupported XDP return value 0 on prog (id 248) dev N/A, expect packet loss! [ 147.346244][ T34] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 147.443655][T12172] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 147.466243][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.499723][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 147.505173][ T34] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 147.508341][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.515235][ T34] usb 8-1: Product: syz [ 147.517397][ T34] usb 8-1: Manufacturer: syz [ 147.519245][ T34] usb 8-1: SerialNumber: syz [ 147.523354][ T34] usb 8-1: config 0 descriptor?? [ 147.529341][ T34] hub 8-1:0.0: bad descriptor, ignoring hub [ 147.531264][ T34] hub 8-1:0.0: probe with driver hub failed with error -5 [ 147.535586][ T34] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input14 [ 147.652040][T12198] fuse: Unknown parameter 'group_id00000000000000000000' [ 147.783222][T12207] netlink: 'syz.3.1372': attribute type 21 has an invalid length. [ 147.787506][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 147.789854][T12207] netlink: 'syz.3.1372': attribute type 6 has an invalid length. [ 147.936271][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 147.940887][ T9] usb 5-1: config 89 has an invalid interface number: 73 but max is 0 [ 147.943427][ T9] usb 5-1: config 89 contains an unexpected descriptor of type 0x2, skipping [ 147.945971][ T9] usb 5-1: config 89 contains an unexpected descriptor of type 0x1, skipping [ 147.948821][ T9] usb 5-1: config 89 has no interface number 0 [ 147.950742][ T9] usb 5-1: config 89 interface 73 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 147.953863][ T9] usb 5-1: config 89 interface 73 altsetting 5 endpoint 0x8 has an invalid bInterval 204, changing to 7 [ 147.959808][ T9] usb 5-1: config 89 interface 73 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 147.962675][ T9] usb 5-1: config 89 interface 73 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 147.965829][ T9] usb 5-1: config 89 interface 73 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 147.969439][ T9] usb 5-1: config 89 interface 73 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 147.972990][ T9] usb 5-1: config 89 interface 73 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 147.976358][ T9] usb 5-1: config 89 interface 73 has no altsetting 0 [ 147.980260][ T9] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=a2.5a [ 147.982891][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.985226][ T9] usb 5-1: Product: 洘ṛ껷∂칱믌ொ웏ᗂ朎礎ﱕ揟䨺쨇ᒐ∂樜ų홸᪯輙㉀ᶃ秂乶賿㱓⏳荄脊襗慿䦳皶㯗靷ॅ㶐ꑝ [ 147.990001][ T9] usb 5-1: Manufacturer: ᐄ [ 147.991370][ T9] usb 5-1: SerialNumber: 鸯눝᪅瑩舾獥䞳瀞餽讼窂ꞿ柎䱋ỗ耉簥ܾڐﷅ뾅붦귁ꝷ뭼᮵㾉渤敾ꮚሿ矀᧸实붡娭죒칰믑ﴠ㪷཯ᯝ웷됓銓⺟偹૸؜눑ጀ䈰 [ 148.076620][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.079940][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.205129][ T9] speedtch 5-1:89.73: speedtch_bind: wrong device class 170 [ 148.207506][ T9] speedtch 5-1:89.73: usbatm_usb_probe: bind failed: -19! [ 148.212978][ T9] usb 5-1: USB disconnect, device number 21 [ 148.393981][T12234] fuse: Unknown parameter 'grout_id' [ 148.476352][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.490243][T12237] __nla_validate_parse: 5 callbacks suppressed [ 148.490258][T12237] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1392'. [ 148.795565][ T9] usb 6-1: USB disconnect, device number 6 [ 148.925614][T12265] netlink: 'syz.1.1397': attribute type 10 has an invalid length. [ 149.046521][ T6015] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 149.207694][ T6015] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.210959][ T6015] usb 5-1: config 0 has no interface number 0 [ 149.213727][ T6015] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 149.218565][ T6015] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 149.222835][ T6015] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 149.226054][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.231414][ T6015] usb 5-1: config 0 descriptor?? [ 149.233736][T12251] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.244738][ T6015] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 149.266104][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 149.302450][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 149.302466][ T40] audit: type=1800 audit(1766903196.081:30032): pid=12278 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1399" name="bus" dev="overlay" ino=2178 res=0 errno=0 [ 149.314258][ T40] audit: type=1804 audit(1766903196.091:30033): pid=12278 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1399" name="/newroot/366/bus/bus" dev="overlay" ino=2178 res=1 errno=0 [ 149.442666][ T6015] usb 5-1: USB disconnect, device number 22 [ 149.442748][ C3] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 149.442776][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 149.453138][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.457408][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.461403][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 149.467474][ T9] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 149.471325][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.481140][ T9] usb 6-1: config 0 descriptor?? [ 149.495231][T12306] netlink: 'syz.4.1402': attribute type 5 has an invalid length. [ 149.517667][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.616884][T12313] fuse: Bad value for 'user_id' [ 149.618565][T12313] fuse: Bad value for 'user_id' [ 149.673567][ T40] audit: type=1400 audit(1766903196.451:30034): avc: denied { read } for pid=12320 comm="syz.3.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.725080][ T40] audit: type=1400 audit(1766903196.501:30035): avc: denied { setopt } for pid=12320 comm="syz.3.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.733806][T12325] ceph: No source [ 149.886316][ T40] audit: type=1400 audit(1766903196.671:30036): avc: denied { read } for pid=12264 comm="syz.1.1397" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 149.886437][T12265] random: crng reseeded on system resumption [ 149.910528][ T40] audit: type=1400 audit(1766903196.691:30037): avc: denied { create } for pid=12323 comm="syz.4.1409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 149.922183][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input16 [ 149.959214][ T9] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 149.962232][ T9] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 150.061345][T12349] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1413'. [ 150.072633][T12349] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1413'. [ 150.118232][ T6014] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 150.129307][ T6020] usb 6-1: USB disconnect, device number 7 [ 150.137743][ T6014] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 150.142446][ T6014] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 150.147838][ T6014] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 150.156794][ T143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.466062][ T143] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 150.553205][T12410] overlayfs: failed to resolve './file1': -2 [ 150.556373][T12410] overlayfs: missing 'lowerdir' [ 150.557006][ T6020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.591896][T12412] input: syz1 as /devices/virtual/input/input17 [ 150.598860][T12412] 9pnet_virtio: no channels available for device syz [ 150.625969][ T143] usb 9-1: Using ep0 maxpacket: 8 [ 150.629795][ T143] usb 9-1: config 2 interface 0 has no altsetting 0 [ 150.634500][ T143] usb 9-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 150.638679][ T143] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.641603][ T143] usb 9-1: Product: syz [ 150.643504][ T143] usb 9-1: Manufacturer: syz [ 150.645449][ T143] usb 9-1: SerialNumber: syz [ 150.652201][T12421] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN NOPTI [ 150.656196][T12421] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 150.659239][T12421] CPU: 1 UID: 0 PID: 12421 Comm: syz.3.1420 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.662747][T12421] Tainted: [L]=SOFTLOCKUP [ 150.664183][T12421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.667697][T12421] RIP: 0010:h5_recv+0x104/0x950 [ 150.669648][T12421] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 41 8a 6b f9 48 8b 44 24 08 <80> 38 00 0f 85 c3 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 150.676182][T12421] RSP: 0018:ffffc9000d76fbf0 EFLAGS: 00010293 [ 150.678398][T12421] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff88535c3a [ 150.681004][T12421] RDX: ffff88805a7724c0 RSI: ffffffff88535c7f RDI: 0000000000000005 [ 150.683565][T12421] RBP: ffffc9000d76fd78 R08: 0000000000000005 R09: 0000000000000000 [ 150.686091][T12421] R10: 0000000000000001 R11: ffff88805a772ff0 R12: 0000000000000001 [ 150.688639][T12421] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c947b40 [ 150.691286][T12421] FS: 00007f40b795e6c0(0000) GS:ffff8880d69f5000(0000) knlGS:0000000000000000 [ 150.694220][T12421] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.696353][T12421] CR2: 00007f40b795df98 CR3: 0000000038b43000 CR4: 0000000000352ef0 [ 150.699088][T12421] Call Trace: [ 150.700222][T12421] [ 150.701236][T12421] ? __pfx_h5_recv+0x10/0x10 [ 150.702892][T12421] hci_uart_tty_receive+0x254/0x7e0 [ 150.704565][T12421] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 150.706382][T12421] tty_ioctl+0x583/0x1650 [ 150.707834][T12421] ? __pfx_tty_ioctl+0x10/0x10 [ 150.709439][T12421] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 150.711733][T12421] ? hook_file_ioctl_common+0x144/0x410 [ 150.713607][T12421] ? selinux_file_ioctl+0x180/0x270 [ 150.715350][T12421] ? selinux_file_ioctl+0xb4/0x270 [ 150.717062][T12421] ? __pfx_tty_ioctl+0x10/0x10 [ 150.718582][T12421] __x64_sys_ioctl+0x18e/0x210 [ 150.720145][T12421] do_syscall_64+0xcd/0xf80 [ 150.721678][T12421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.723661][T12421] RIP: 0033:0x7f40b6b8f7c9 [ 150.725092][T12421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.731178][T12421] RSP: 002b:00007f40b795e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.733892][T12421] RAX: ffffffffffffffda RBX: 00007f40b6de6090 RCX: 00007f40b6b8f7c9 [ 150.736434][T12421] RDX: 0000200000000040 RSI: 0000000000005412 RDI: 0000000000000004 [ 150.739057][T12421] RBP: 00007f40b6c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 150.741561][T12421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.744254][T12421] R13: 00007f40b6de6128 R14: 00007f40b6de6090 R15: 00007fff4f43d678 [ 150.747579][T12421] [ 150.748890][T12421] Modules linked in: [ 150.751343][T12421] ---[ end trace 0000000000000000 ]--- [ 150.755955][T12421] RIP: 0010:h5_recv+0x104/0x950 [ 150.757913][T12421] Code: c1 e8 03 4c 01 f0 48 89 44 24 08 48 8d 83 08 03 00 00 48 89 44 24 30 48 c1 e8 03 48 89 44 24 10 e8 41 8a 6b f9 48 8b 44 24 08 <80> 38 00 0f 85 c3 01 00 00 48 89 ea 48 89 e9 4c 8b bb f8 02 00 00 [ 150.765352][T12421] RSP: 0018:ffffc9000d76fbf0 EFLAGS: 00010293 [ 150.768588][T12421] RAX: dffffc000000005f RBX: 0000000000000000 RCX: ffffffff88535c3a [ 150.771597][T12421] RDX: ffff88805a7724c0 RSI: ffffffff88535c7f RDI: 0000000000000005 [ 150.773584][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1421'. [ 150.774339][T12421] RBP: ffffc9000d76fd78 R08: 0000000000000005 R09: 0000000000000000 [ 150.778153][T12428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1421'. [ 150.782148][T12421] R10: 0000000000000001 R11: ffff88805a772ff0 R12: 0000000000000001 [ 150.788130][T12421] R13: 0000000000000001 R14: dffffc0000000000 R15: ffffffff8c947b40 [ 150.791668][T12421] FS: 00007f40b795e6c0(0000) GS:ffff8880d68f5000(0000) knlGS:0000000000000000 [ 150.795334][T12421] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.797964][T12421] CR2: 00007f40b4df5f98 CR3: 0000000038b43000 CR4: 0000000000352ef0 [ 150.800785][T12421] Kernel panic - not syncing: Fatal exception [ 150.803945][T12421] Kernel Offset: disabled [ 150.805288][T12421] Rebooting in 86400 seconds..