last executing test programs: 1m23.276275276s ago: executing program 1 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40014}, 0x8840) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010600000000000000002d0100000000000100000000050001000a0000000c000500010000000c000000300000001800010600000000000000002d010000000000010000000005000100fe0000000c000500010000000c"], 0xc0}}, 0x0) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000100)=@nullb, 0x0, &(0x7f0000000180)='./cgroup\x00') 1m23.023027552s ago: executing program 1 (id=103): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x22340) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x4d) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000d73000/0x4000)=nil], 0x0, &(0x7f00000003c0), 0x2) ioctl$I2C_PEC(r1, 0x708, 0xd) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000000)={0x0, 0x0, 0x80800}) socket$nl_generic(0x10, 0x3, 0x10) 1m22.871377205s ago: executing program 1 (id=106): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0x1b, 0x0, 0xc00}, {0x832, 0x0, 0x40000}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x6e0, 0x0, 0x1}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x1, 0x0) 1m22.39972109s ago: executing program 1 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x2a532d1, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x8, 0x704, 0x4}, 0x10}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) write$tun(r1, &(0x7f0000000300)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @private=0xa010101}}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/route\x00') quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000340)=@sg0, 0xee01, &(0x7f0000000380)) mknodat(r6, &(0x7f0000000140)='./file0/../file0/file0\x00', 0x8000, 0x7) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010000104020040000300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000bcb5f31a34001280110001006272696467655f736c617665000000001c000580050001000000000005001e00000000000600020009000000140003006272696467655f736c6176655f300000"], 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) syz_usbip_server_init(0x3) 1m20.931505845s ago: executing program 1 (id=115): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="240000001e005f0214f6fffffffffff8070000000018000000000300aa503a8455bfc475", 0x24) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000340)=0xd031, 0x4) ioctl$NILFS_IOCTL_GET_BDESCS(r1, 0xc0186e87, &(0x7f0000000100)={&(0x7f0000000040)=[{0x5, 0x100000001, 0x3, 0x9158, 0x7}], 0x1, 0x28, 0x3, 0xe4b1}) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000380)=ANY=[], 0x0) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0x498) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000c80)=@newqdisc={0x30, 0x24, 0x2, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x5}, {0x1ffe3, 0xd}, {0xa, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9a}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0xffaf) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010000aa11f6bbf44d00000000008984", 0x39}], 0x1) 1m20.049735481s ago: executing program 1 (id=122): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 1m19.870204084s ago: executing program 32 (id=122): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 56.261192123s ago: executing program 3 (id=211): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000880}, 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000003fc0)=ANY=[@ANYBLOB="0c007c04", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25040000000800020005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8094}, 0x24004000) 56.112869088s ago: executing program 3 (id=214): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000940), 0x2482, 0x0) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, 0x0) 56.001183373s ago: executing program 3 (id=215): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1, @loopback, 0x5}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 55.801002296s ago: executing program 3 (id=217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0xfff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000440)='./file0\x00', 0x6) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000940)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a0, 0x11c0, 0xc8, 0x8, 0x0, 0x5803, 0x12d0, 0x2e8, 0x2e8, 0x12d0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x142, 0x1198, 0x11c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0xa66, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8000000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1400) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd25, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0xf, 0x4}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) 55.512194004s ago: executing program 3 (id=220): ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)=0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000003, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x4, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x94, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x5, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x37, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x1, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fcntl$getown(r3, 0x9) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000280)) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000008001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) write(r0, &(0x7f0000000240)='1', 0x1) 55.000669435s ago: executing program 3 (id=223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006a00831300000000fcdbcf25000000000000000008000500d47021fb"], 0x20}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) setns(r3, 0x8000000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x7, 0x0, 0x0, 0x1, 0xfffffffe}}) 54.729642201s ago: executing program 33 (id=223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006a00831300000000fcdbcf25000000000000000008000500d47021fb"], 0x20}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) setns(r3, 0x8000000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x7, 0x0, 0x0, 0x1, 0xfffffffe}}) 6.237677511s ago: executing program 4 (id=556): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff8f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x702, 0xe80, 0x0, &(0x7f0000000040)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a3", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f00000000c0)='autofs\x00', 0x2000010, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x545c, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x40800) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000240)={&(0x7f0000000140)=""/218, 0xda}) r3 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000000)={0x100097, 0xfe, 0x0, {r3}}, 0x20) 5.203845749s ago: executing program 4 (id=566): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x200}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) read(r1, &(0x7f0000001600)=""/233, 0xe9) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0x0, @loopback}], 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003e40)) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8100, &(0x7f0000001dc0)={0x0, 0x84, 0x40000}, 0x20) 4.141390605s ago: executing program 4 (id=575): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x55d}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x2) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x30000009}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) 3.751474704s ago: executing program 4 (id=582): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) read$FUSE(r1, &(0x7f0000001000)={0x2020}, 0x2020) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r2, 0xa) close(r0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x6b083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 2.80385383s ago: executing program 4 (id=588): epoll_create1(0x0) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0xffeffffe}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x78e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x68, 0x8c, 0xaf, 0x8, 0x19d2, 0x89, 0xd8af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77c, 0x3, 0xa, 0x3, 0x0, 0x27, "", [{{0x9, 0x4, 0x39, 0x8, 0x8, 0xff, 0xff, 0xff, 0xff, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "61ac64bf"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0xfffb, 0x5c}, {0x6, 0x24, 0x1a, 0xa, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x2, 0x4423, 0x9, 0x6, 0x9, 0xc}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x20}]}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0xa, 0x3, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x0, 0x9, 0x5}]}], [{{0x9, 0x5, 0xb, 0xc, 0x20, 0x7, 0x7, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x51, 0xc2a1}, @generic={0xff, 0xd, "08a3935c9d3a8196ed81c5e1d343b2d8b8f23743d1b8ce5f532e9a5af0a146b4f9b7b3dd35f9c0caf78a075a127cb5cd4a998cfefa4530d109eb19d82a86f771decf49d46dd8220a47d6ba84df4b3f11e2dd6ae571a094465ee11c68189cfbefaa7c8d2884a4424d5cbca75e6da95e02eaa5b0a1e48e64e288c550d1a8e58a4e1dc5c599f6aa3c77ca95922251007daa02168b9f476a62bece46a3ee36ac31cbfbda73d5d528d33ead296417e4d4928f82bb9c8b8fd6889e7613ae0eee162b57865adac66fe44cc969ef1b56f599dfbf966948ceab270abc6cf4d06b4507eb48b60a4809ce5b404f82d2dd41b11a06f7243569cbc32743bf8d79b4d802"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x3, 0xc4, 0x4, [@generic={0x82, 0x21, "a38c53d290c8d84cee21f044408dab99271015771992064bb793040753491a5fba7ec2cc2c231a8162942130d6fb4f75f9cb29e69c4f75a8386cfcdf794eea4e4eb97dd88795d8518d86195900defe143be258ab7ff965b06accba7ac73e1111f651f127aafb5d330519baad7b246919efe73af6ecda3fa908138d3feb8f5156"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x0, 0x7, 0x8, [@generic={0x86, 0x23, "48147fdc1d2e2fc3711ddff71918b89cae56ee3032bdc4a850212a6f1e9327339ead74023d0ff1ba57ca51d75fb25c4db78c85b811894f7873002e729d803185ec6579fa6ff1c8c15d0cdd0cc4aa13a12a3f87906362d7756e72a0e98d9d777e328bcb850fd67a38c195b3c5efb97f3f8d30879b0a6b54f226aacd9569df2f1de9bebfbf"}, @generic={0x1b, 0xf, "a764029191e445fd050d0104f20955696367323df66d1a3f3f"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x80, 0x6, 0x5b, [@generic={0xf5, 0xd, "4b37587b05494dde4441a5ec023863c3541218f62116648df2d97ffd712fc064cf8ce0f288a849baebd762b1ab78dbea57a7c8eb93a78e138ca809ef4a0e6f1dc79e9d73739e98e627c2a87d4c8837b6d5a15690833141783f30b068c7bedcc071d98051f579419cabaf6fdaec95ca9f270033f10a761ba3698da419d2340f8cbd48251fa7989b7467109b494e1c38d34df110747c9146967c2942226ddfb7404b109859e37203f6108cfb1f3043099e8121300801116b7239b5106278278f7690bcad9ebc979e97c1d4af261739057652e474a46ff8e832bf8f7d505ed97d9c393bc298f1118c18671ac25349aa69d9631bfe"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x59}]}}, {{0x9, 0x5, 0x14, 0x2, 0x400, 0x1, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x8}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x3, 0x81, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x1}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x8, 0x2, 0xfb}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0xfe, 0x6, 0x1, [@generic={0x79, 0x31, "edeb738e09265fde37ccf891e70634207eb576fb95e1fe347e7dbf8d972384c30589d67955011311ed328b22109806b39d71832316123afdf715cfaf7f78962166f3bfd07a662ad6b241cb7cdd11273e94fb15de5d2fc91d9a3e0c645fc3e5980c3a71f9cc5c476f61015b54674348b71333e871310607"}]}}]}}, {{0x9, 0x4, 0x9a, 0x3, 0xb, 0xff, 0xff, 0xff, 0x32, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "c2a0"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x85, 0x8001, 0xc}, {0x6, 0x24, 0x1a, 0x2e9, 0x2}, [@acm={0x4, 0x24, 0x2, 0xf}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0xa4, 0xf5}]}, @hid_hid={0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0x128}}], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0xfe, 0x8, 0x4, [@generic={0x10, 0x30, "aa4f4e7a00e0302d46392d92b6a3"}]}}, {{0x9, 0x5, 0xe, 0x12, 0x3ff, 0x2d, 0x3, 0x7, [@generic={0x9f, 0x23, "44d4d27711c677c33096b3cf73ed9e225dc53f1f7dde50fa259c5078d69879f6fb846100705c19f40d1e98f9ec2918f7de2a6ceee884ea7bcaeae4ec146c6af26c7b1b65088ba8b3a914b11025dbdd625408d8b0acb58f726372e2e70b2a5d66feef8ddf6c8fa66972b638a10f8f84ff07ddb3f0fef624f311eb0721636618d12ef2e54f87a7b6e65358f72ffe87a4cfa074f219bde94478a453a01f2b"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x4, 0x3, 0x4, [@generic={0x32, 0x9, "e3204caac75863cf934dd92fb9233202ea687a61fdc7185b970327ae7493b63000670f231ab20ec0821950fc478af57f"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x7, 0x4, 0x2, [@generic={0x9d, 0x8, "b762dc9d70a5ae8f28289ad5a80d1cd8d3c0d4007b13ce77e52ae79b5a5c7e7fd1feb702846d06269841a891f2dcb569614e83002381e291999a6465ab8ed1e52c4b96cc33615bf475918e224d19725e69e636df76d32ab070d642abf0c36aa070e95a3bb3fe076ace0ba0e457479732f04fe4f7061c9fdf15ccb5fdd8813613175e37bc78b8da85d7666cf29e8863fde846448d31cd828364829e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x2}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x2, 0x1, 0x3e}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x1, 0x6, 0x40}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x0, 0xc, 0x2, [@generic={0xf1, 0x31, "27c0dbd6f890e53586d8456f07b1579d50d5dbd562562d8b4c088723155b91e3ae38576cc05be94c8338553cb704ca4dbc9e9cf1bfd8203a94d9a1f61d45e7046ef35637afdf600784d2a5b8a35c5c43f692f2a844057bc07077389d8964153070f8c600e8addb24e7beee027159b654a70c2602c7f7c9fd4f25c29ede3768e282e68ac402e12167caeeb12e7c67c2652b62ee36e88b48cf00dd6bd598f2f91da430f4664b8ec823afc9b624bde1d35a26a36cdddaaf1c102b253ecc2be5a44b35612901c2c0de6cb99f65eee62d6dd4cde8a5e2b5cb5b00a9da868cc59e92f8e6ecfa3037a28df3135c0609335ee3"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3fed46183e75ec8, 0x4, 0x2, 0x3}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x0, 0x5, 0x7}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x40, 0x4, 0x5}}, {{0x9, 0x5, 0x0, 0x10, 0x0, 0x6, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0xf}]}}]}}, {{0x9, 0x4, 0xd9, 0xc5, 0x1, 0x80, 0xc4, 0xb, 0x6, [], [{{0x9, 0x5, 0xb, 0xc, 0x20, 0x8, 0x2, 0x7}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x250, 0x0, 0xe6, 0x6, 0xff, 0x8}, 0xfffffffffffffdc3, &(0x7f0000000c80)={0x5, 0xf, 0x15e, 0x3, [@generic={0x4b, 0x10, 0x4, "eb1576f6b6bf9960a2ccb7c425a3a525ae53bf0b4ea869e363a6c2cdd052d0607a6a507dcefceb58baab3a7a4de71b13bb3c03203bdd3c96857b85cffff3e69541172ce8bf7ed69e"}, @generic={0x103, 0x10, 0xb, "3bf587bd675505cce238ab1aecea8e54963190fbc836221c4eb84f535546a6ca48e20a8d6489f78c29e50ae80ec380ff4ef1c9d0e4f7346750977f3a73dac651718d3c812c4372736fddb991baecde1dd7ce5b1d7070a5fa92646c6054046d8e6056559e4bd1d18b6ff8a347f184c09ac3f7c06440cb937f7f53afa45609e3c9de1a4b2f0489701082de68bd59218c91b6b3c91c8640cc49d97afcd0b621a9d9c50d558a78841b664a7c52aaf9354d3cdf8892396f47bc56886afdf4c4223c9d06c5da208a8cb18cf5491fc40cda3f1b71b22556e7fb5814ec51a5125b882a3b604da32eaef1c0daf47f4f45837984c1ff7e58cacb00"/256}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc4, 0x7, 0xf5, 0x8, 0xe}]}, 0x8, [{0x68, &(0x7f0000000980)=@lang_id={0x0, 0x3, 0x816}}, {0x9c, &(0x7f0000000880)=@lang_id={0x0, 0x3, 0x1407}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x200a}}, {0x4c, &(0x7f0000000b00)=@string={0x4c, 0x3, "b7150f4d2eae80ba952f67b6a96cf11f085a0be7fcfe26227f1671ce0c3634caa99224736f5a9749a8c2a3fe3d0e80bbbecddb690c1ed75aa80b84f03d9259ed6f0e0f7b1fd31f04c981"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x447}}, {0x24, &(0x7f0000000bc0)=@string={0x24, 0x3, "7dc60dcaf25f1e4fb371f9bac9072188d42897b7c932397a948a23aceb5a104eeff0"}}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000182000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000080000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0xfc, 0x0, 0x0, 0x78, 0xf88, &(0x7f0000002200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x4}, @ptr={0x70742a85, 0x7fffc, 0x0, 0xf0, 0x1, 0x26}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3a}}, &(0x7f0000000300)={0x1f, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl(r6, 0x4048aecb, &(0x7f0000001000)="070000000000000001000000ffffffff") syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x2e, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x6, 0x80007, 0x7f, 0x20000006, 0xc9, 0x26, 0x5f, 0x9, 0x5, 0xffef2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000000, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x5, 0x89d1, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x400000e, 0xe7, 0x80008171, 0xffff, 0x17, 0x10, 0x74c71973, 0x2, 0x42, 0x8f, 0xfffffffc, 0x6, 0x80000000, 0x0, 0x0, 0xb, 0x6, 0x80, 0x0, 0x4, 0xa, 0xb, 0x4, 0x3, 0x40], [0x401, 0xf0000000, 0x80000131, 0x8004, 0x6, 0x6, 0xbc3, 0xc8, 0xf9, 0xe, 0x82bf, 0x6c7, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x2, 0x5, 0x2f, 0x10, 0x10000, 0xd, 0x8, 0x7, 0x4, 0x7, 0x0, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x1, 0x3, 0x14, 0x20009, 0x8, 0xf, 0x9, 0x43, 0x8000, 0x1, 0xfe000000, 0x3, 0xfffffffe, 0x2, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x8003, 0x6c0, 0xbc47, 0xfffffffa, 0x44, 0x9e9], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x100008d2, 0x3, 0xff, 0x7fff, 0x0, 0x2, 0xb, 0x4, 0x6, 0x9e6, 0x2000000, 0x80, 0x5, 0x8470, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0xc2, 0x3, 0x9, 0x20000008, 0x4, 0x6d01, 0xa, 0x1, 0x800002, 0x1fe, 0x7e, 0x7, 0x0, 0x2950bfaf, 0xd3c, 0x5ae, 0x7, 0x4000a9, 0x5, 0x9, 0xacb, 0x2000af, 0xfffffffe, 0xfffffffd, 0x7ff, 0x12b, 0x4, 0x1, 0x95, 0x0, 0x5, 0x1c, 0x1, 0x3f, 0x2004, 0x80a2ed, 0x8004, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x242c2, 0x2, 0x2, 0x0, 0x0, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x7, 0x401, 0xffff, 0x2000a620, 0x2, 0x1, 0x0, 0x2, 0x5, 0xe7, 0x8, 0x4, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0x100, 0x10000, 0xe63, 0x7e, 0x2000006, 0x2, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x1000, 0x4d, 0x8, 0x2, 0x5, 0x1f40, 0x7, 0x4041, 0x5, 0x7ff, 0x804, 0xac1, 0x6, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2e) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r9, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0) 2.033007677s ago: executing program 2 (id=593): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x1efd, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}, 0x30) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000001600)='hpfs\x00', 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async, rerun: 32) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) lchown(&(0x7f0000000280)='./mnt\x00', 0x0, 0x0) 1.944689222s ago: executing program 0 (id=594): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x4}]}}}]}, 0x3c}}, 0x0) 1.777065741s ago: executing program 2 (id=595): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x24, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 x00000000ffffff7', 0x32) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x5, 0x0, 0x1}) creat(&(0x7f0000000100)='./file0\x00', 0x1c) r4 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000040)={0x1, 0xa8, 0x100000004}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f0000000040)={0x8, r3}) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r5 = accept(r1, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r8, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) sendmsg$tipc(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000002c0)='0', 0x1}], 0x2, 0x0, 0x0, 0x4000411}, 0x80) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 1.400407897s ago: executing program 0 (id=596): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x40080) r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1, 0x4}, 0x6) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000880), 0xf504, r3}, 0x38) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x401, 0x18}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_lsm={0x1d, 0x19, &(0x7f0000000540)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x868}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x2, 0x4, 0x2, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x401}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}], &(0x7f0000000640)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000680)=""/4096, 0x41100, 0x12, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001680)={0x1, 0xc, 0x5, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000016c0)=[r1, r1], &(0x7f0000001700)=[{0x2, 0x4, 0x0, 0x5}], 0x10, 0x8}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001800)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r6, @ANYBLOB="410000000000000000008100000008000300", @ANYRES32=r7, @ANYBLOB="0a000600080211000000000006006600c78800001c0033"], 0x4c}}, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r1, &(0x7f0000000280)="fe2996169cd0d7ea1f1c1b90bcc4", &(0x7f0000000440)=""/167}, 0x20) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x14, 0xbe, "0054f776037e43e55853839be2abf250"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x81}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x40}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x95a, 0xd30, 0xff, 0x3]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8000}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x118}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10000004}, 0x4000000) 931.470776ms ago: executing program 0 (id=598): socket(0x15, 0x5, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, 0x0, 0x0) fsmount(r0, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0xc881}, 0x10) 856.75166ms ago: executing program 0 (id=599): madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) r0 = userfaultfd(0x80001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0xfffffff8}, &(0x7f0000000100)=0xc) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x109200, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000680)={0x8, 0x97d, {0xffffffffffffffff}, {}, 0x2, 0x8}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000001a00)={'\x00', 0x4, 0x40, 0x6, 0x7fffffff, 0x7fff, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001a80)=0x0) syz_clone3(&(0x7f0000001d80)={0x40000, &(0x7f0000001b40), &(0x7f0000001b80)=0x0, &(0x7f0000001bc0), {0x6}, &(0x7f0000001c00)=""/45, 0x2d, &(0x7f0000001c40)=""/233, &(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9, {r1}}, 0x58) read$FUSE(r1, &(0x7f0000001e00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003e40)={0x0, 0x0, 0x0}, &(0x7f0000003e80)=0xc) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003ec0), 0x2, 0x0) r12 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000003f00), 0x402, 0x0) r13 = socket$can_raw(0x1d, 0x3, 0x1) r14 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$netlink(r1, &(0x7f0000004000)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xc, &(0x7f0000001b00)=[{&(0x7f00000001c0)={0xb4, 0x34, 0x100, 0x70bd26, 0x25dfdbfc, "", [@typed={0x4, 0x140}, @typed={0x14, 0x14, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1f}}, @generic="c6cf603f2fb5ec591b160ea398637a0b7e461109", @generic="283dfabc05e5e8438b85f2cb060e6d4c826f6721d32c8b6256ad6dc3b94ba230e67de9600d9ac3d95d6d9e3eaf32c539371f1caa6743d8bdfeca567c23ffd44f28b829beaa46a321f6cef299cd2ea419d189df86c3441fa1ba2ba6155f898c57436d82d0630d112c16e91b6ee44cbfe1035d3ee4e9da9d"]}, 0xb4}, {&(0x7f0000000280)={0x3dc, 0x1b, 0x0, 0x70bd29, 0x25dfdbfc, "", [@nested={0x16d, 0x33, 0x0, 0x1, [@generic="a5", @generic="b4d8a2a682dc3d399138961b5fa5340b9b9ba64f260a217424c68a9122bb6e315eec5aa571160c3d2732ad8a7b9654d9c81317d1f0181a8373a423f40a63d0f0bdbd4bc9762a441a2094bb54b5f7c3b80f46c235bf5bc00d5577c2d5ff110966ada5e2b29dd8e21e8f4314c4d24b4cc527c2f894aed14c62b04779b55e81807c9e81ef7650361dcb0d65eead3868fb037841f3b7ed55e39dce45eb9516246a89b89704b0c1bcae6740618a3817ba844eda", @nested={0x4, 0xbd}, @generic="8b543e89d1a59ecc20bbb7dddf96f6bb88d9c51675c2a259915fa1c40eca199e00048acc8f4339e7f01f5324bda7446b3b80028ec1720a04bccea9ea51e073b46093e95403fad329510cc1e5d64dc955a712745df2a748181d412c0adfaaad4c4bf6a6d7af63a7648a944951a117a2f7f8bbcba0a9f1006e290e2aed9ba1c91b592486b92104e86f2533292b85d2eee28abbc94262b76465aa15fb8be422aa15cc087d09a4521f72a47573", @typed={0x6, 0x139, 0x0, 0x0, @str='/\x00'}]}, @typed={0x14, 0xae, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="321953ce0e3bd711d66edcef2536f6f2de9d6214e49e496aaa6c2f851b4b027d86a0c73a9d143cc82cae526a9d5f8fe3c2489600a0d4b0977c4dba9f97d0632dfabc5f5cfe300023ce287a972a3927a106c2252410857cb6fefddf73418f53d51f213433d21cf6e6bb76cf48bc7c9394f4a9c13907152bfa8bc042b780858d85ea727018471975e37db2d6445fd92199149545c100b8742e065c9aee2c698e4fa9348ac18901a5e33c3c9fd3c312bdb1597eeb460746e31065ec625153b62caf059a247991db98b7a4e8b12d2bdd07943f936ce9e593a29f3c4d92a743c8de2068a32459ca5d40e7c83c", @nested={0xc, 0x48, 0x0, 0x1, [@typed={0x8, 0xd4, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x6e, 0xa6, 0x0, 0x1, [@generic="a7ef651c453980f2316a2a30a41df9ae01256097d33f5f56bf212e04842d54682b2b8379d875f65a5770c3163de8ac550b85412aae72211348c4c66ffe1851dfcc7babd6ac354ecc30341727cf92352a1a48b5dd116569198544e9758a66fadc8eb725e5f58fca5e271c"]}, @generic="6eef64aea6130c87e92448a4cf2b10e2c3734415b6143a309a5a916d3b1b62fa5e2b0a0764594ad4d0cb6b6408ca6a93d975c4cdfb71f1c43761f947172f4e3eb4e73f5d510b03b1b9503d42c50817c0995a9d1f4dba2ca47889befef6808419099d861331feb0e3cb462d3c549013d4c6405287002fe7d5311add15b62e48b15278a1a0d92307dfa6703f9514f6792c14b11d165bd0e2b5b6e30713fb672b1b34ea521c81aae496eebd4e4ddab9ea012c0bc9b3b646e4d4c94235c38cdaa760bd5f6e4b3d18d067a217cf4ccaf118944fabf6e691b8b6fe30603e04ff780283f91f"]}, 0x3dc}, {&(0x7f00000006c0)={0x131c, 0x18, 0x800, 0x70bd25, 0x25dfdbfe, "", [@typed={0x5, 0x33, 0x0, 0x0, @str='\x00'}, @nested={0x10c5, 0xcf, 0x0, 0x1, [@generic="c4df7532590a9e23d04345b637095914f1bca662bd68bd844f1b8de01049d1af3fadf45ba08ab50ea897eaf257ac3b06a9b6c3abc343e8752047727c068e71fb08bec7528e01320972e539c29ea9574fce1ed7171998af4e5e86cca62cb740663559a6e2e0bd095002db88a6122411d1eda12774dfa1303ebfa9e6bc336dcb09c1934c40a67ec7382baef2f488869d671032f102fc6bafa0d438b0234a21e380649215", @nested={0x4, 0x6c}, @generic="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", @generic="ca61ba1cc468ef3cbeb1a5f0efcc2d07d01be3c6aef749bb76d8"]}, @generic="6f7a28846fb109d25bb1446b3b113635effc09a6f04ebd9db24a44eb99e503f333ded7c5555a13dfdcf0d8d575a2bd72ea3db1a84b3923ec976257a60fac166fe6c7e47e4cd81895232c3d884a58afd895fc091d568c6d410fde9b93889b16a77cb88156b33459aca29f517b41da39e34a01f2dea77e31c74702b7256710f8d72aae0bb414188a7558c348dcd037c8c8d241f34536a357d33137abc8235fbb129eec5b8ac9cb10849e662220aafa62668a18bb", @typed={0x4, 0xe6}, @nested={0x177, 0x1, 0x0, 0x1, [@nested={0x4, 0xd0}, @nested={0x4, 0x2c}, @typed={0x8, 0x57, 0x0, 0x0, @pid=r5}, @generic="9d5491de7310469fc6390979e9cfcc824da038c7e96227d05bbe55c50dc34b8ea2668cadc1150e6f1efdd2e3b0e2903ebb2cc245d14108fbf0226f49caf04d2780078eb2e5dc915af86c4ce5333c2e1698a5d0d352435467d924facf7367bb28cb0f4e9ac0934aa6e12045d50286707494058aa1cd51dc4aa8a966516085458453e48255a8", @generic="3ddae17b030feb083017640ee86038e4e542c2e8afc383261d52ac43b2236ff3cdeab22e44cb0522ce3d2955679c7d65a1ecd18ad1d82b17d1097458ba69af1b178952018fbcaea94e2133dfe8f6ca4d7d70b079e0c8103222bf646ac48edc5520d7ac877b821d8eda5ce711102381c265225d6543ea7c3cb96be6e3248b5d260c13c92a56873316fb825d36b591ce46ff80c5a9c0049a2d3d6965a1b72520d8764cad22f214936672691584f67c8ce686a596f45a64520b67409c744ea49db93f5c5e808000df4a3026f8dc6f838edb9fe30531e926", @nested={0x4, 0x129}, @nested={0x4, 0x16}]}, @typed={0x4, 0x5a}, @typed={0x8, 0x10b, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, 0x131c}, {&(0x7f0000001ac0)={0x28, 0x39, 0x20, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0x74, 0x0, 0x0, @pid=r6}, @nested={0x10, 0x57, 0x0, 0x1, [@typed={0x8, 0x164, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x142}]}]}, 0x28}], 0x4, &(0x7f0000003f40)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x20, 0x1, 0x1, [r11, r4, r12, r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, r4, r13, r14, r1, r4]}}], 0x88, 0x5091}, 0x20000018) mmap$IORING_OFF_SQ_RING(0x0, 0x3b0787e7, 0x1, 0x40010, r1, 0x0) r15 = socket$inet6(0xa, 0x4, 0x3) r16 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004040), 0x8000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000004080)={r3, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x6, 0xfff9}, &(0x7f0000004140)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r16, 0x84, 0x22, &(0x7f0000004180)={0x792, 0x0, 0x2, 0xfffffffc, r17}, &(0x7f00000041c0)=0x10) ioctl$BTRFS_IOC_GET_FEATURES(r14, 0x80189439, &(0x7f0000004200)) preadv(r13, &(0x7f00000046c0)=[{&(0x7f0000004240)=""/83, 0x53}, {&(0x7f00000042c0)=""/107, 0x6b}, {&(0x7f0000004340)=""/194, 0xc2}, {&(0x7f0000004440)=""/199, 0xc7}, {&(0x7f0000004540)=""/234, 0xea}, {&(0x7f0000004640)=""/28, 0x1c}, {&(0x7f0000004680)=""/8, 0x8}], 0x7, 0x2, 0x7ff) socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r15, 0x84, 0x1f, &(0x7f0000004740)={r3, @in6={{0xa, 0x4e24, 0x3b0, @mcast2, 0x8}}, 0xfffc, 0xd}, 0x90) setsockopt$inet6_buf(r16, 0x29, 0x2b, &(0x7f0000004800)="e4a88e6cadb65d00b765", 0xa) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r12, 0x84, 0x78, &(0x7f0000004840)=r17, 0x4) 856.572573ms ago: executing program 5 (id=600): r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x8, 0x200400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0b45545, 0x0) 760.707833ms ago: executing program 4 (id=601): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) (async, rerun: 32) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0xbe67}) (rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80, 0x4}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x7}) (async) r2 = syz_usb_connect(0x1, 0x58, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRES32=r0], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x16da, [{0x4, &(0x7f0000000200)=@string={0x0, 0x3, "a42be472f5a607120be9a5ff06b7f95d84f4d0577db3054055d34f9c300624f91c1244fcc5ac13ab8430b8adabc9a67594b6e9bd116500799d2006a2cb7c45c4a15aa7f4762dafaaa0dff6819064cb25807a4002401f619adc4894415d26b30148a1ceb67c5e0bab9b5c242dd51b62715c4470355100118f20b1877c8a8bec309f803cb036698ff36505a6d79cc7edb9ff5e3d33cc9ec049f002273c"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xfcff}}, {0x33, &(0x7f0000000700)=@string={0x33, 0x3, "2c5f2edc7f877bb4c2ef32f520b92fe0ea59e853a93a54a5d9bf6bb97eff33710839add25cf0bf722335a571ede868bf293a7293b9c4f45ed5d9d2109c7ed95736f6c84fc103061b63213b5d94c22f8e6ae725bb8d3169a3a972fac0f1cf11e0252064a7c0c3f0129c8e6c81194c13ecd41168a3693846ec1fe11d87c0cdd247d5bec50ad8e40d0c92b39aa6de8e9ffdfb7794"}}, {0xb8, &(0x7f0000000300)=@string={0xb8, 0x3, "3ba810fc360b11ef8481bd1226ad6c37dacd42c0e23e05f72a3f057728c2d82f125da7a3854673c2472319882251d405b6c755e9632bf54775895d65bc53c997b6b285dd860d8530a5d54099ca04186e576eb31909f0c265140291d98ef08518d6cf413e78c37de0543a0c65cf71b216d5ce7dad7aaf01081af85ea9de163d21a979bf70240eb23b66223021baa194b6ad9246825aadedff7403606041144ff280b541ccb8d6e6f1bf9272d72c1ae08aa799fc7cee74"}}, {0xb6, &(0x7f0000000640)=@string={0xb6, 0x3, "1cde07ad06ca74d59af794f751d76c699a103e7128044d280ccf73ff8a1d1b4b9f196910b2604d5ec0860a26e07b016449359dbf0129a5e98a13fb9713aa8a45f655b5e4a80146b19e595940a6ed2d2d7d909aa1057fdfd321c084bb9062b02fb75fc459572a487a1cd6005aceea4f973e9663f477470e7dabec25812861959ebdec755363621fb1135e06cf822e6fa0290f68d1fa623efe95cda987033bbc51369eaf6337500bbda62d9eb08cb5b4ca3c7f7044"}}, {0x84, &(0x7f00000003c0)}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000000)=@string={0x0, 0x3, "74dc0117fdbd8d2207b815e8ed5f8b"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000007c0)={0xd, 0x81, 0x0, 'queue0\x00', 0x7ff}) syz_usb_control_io(r2, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r3, &(0x7f00000034c0)=[{&(0x7f0000002340)=""/4096, 0x1000}], 0x1) 760.42433ms ago: executing program 2 (id=602): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc8) (fail_nth: 4) 712.192936ms ago: executing program 5 (id=603): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x600, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 655.755661ms ago: executing program 2 (id=604): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1, @local, 0x5}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x2}}}, 0x118) 559.096677ms ago: executing program 5 (id=605): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x413, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040800) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc8) 505.384658ms ago: executing program 0 (id=606): syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000094110500746dffc2591ef551cc2a7da92e56c30000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 504.880751ms ago: executing program 5 (id=607): socket(0x15, 0x5, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, 0x0, 0x0) fsmount(r0, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0xc881}, 0x10) 469.472273ms ago: executing program 2 (id=608): setns(0xc9, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r1) pipe2(&(0x7f0000000500)={0x0, 0x0}, 0x0) write(r3, &(0x7f0000000014)="0500010001000000", 0x8) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000600)='trigger_packet', 0xe, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r5 = fsmount(r0, 0x0, 0x0) socket(0x21, 0x2, 0x10) fchdir(r5) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x4900, 0x80, 0xe}, 0x0, 0x18, 0x0, 0x12345}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) io_uring_enter(r6, 0x1203, 0x109c, 0x16, 0x0, 0xffffffffffffff02) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c}) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r7, &(0x7f0000003cc0), 0x40000ce, 0x4001c00) 351.080534ms ago: executing program 0 (id=609): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0xc0000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) r5 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xd) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_clone(0xe280, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fchdir(r6) open(&(0x7f0000000040)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x141d40, 0x125) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="210327bd7000fcdbdf25040000000c0001bb08004f0f00000000"], 0x20}}, 0x4000000) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000040)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x4000010) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r9) getpid() setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4) bind$rds(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r11, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) 297.629465ms ago: executing program 5 (id=610): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x54, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x68, 0x309, 0x4, 0x25dfdbfd}, 0x18}}, 0xc0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x1) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="040000002009f5ff06000000000065d4319f18cc0000784ac633bc8a41979a88373d8bbc2e8807", @ANYRES64=r4, @ANYRES64=r5/1000+10000, @ANYRES64=0x0, @ANYRES16=r0, @ANYBLOB="040000600100000000000000010200003816a539c265227c62feffbfe4"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001200576d100000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000802000000000008001d0057"], 0x28}}, 0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) write$tun(r6, &(0x7f00000000c0)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16=r1], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0xf}, 0x94) 586.258µs ago: executing program 5 (id=611): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) (async, rerun: 32) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async, rerun: 32) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@link_local={0x3}, @random="7f00f2b6df62", @void, {@can={0xc, {{0x4, 0x1, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "56c0038bfc8f3056"}}}}, 0x0) setns(0xc9, 0x0) r2 = socket(0x2, 0x3, 0xff) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r5, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0) (async) r6 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xa7dc, 0x0, 0x40, 0x3aa}) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r7) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r8}, 0x20) (async) connect$unix(r7, &(0x7f00000001c0)=@file={0x0, './file1\x00'}, 0x6e) setsockopt$inet6_tcp_int(r7, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x6}}, 0x20) (async) close_range(r6, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0xffffffffffffffff, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) (async, rerun: 32) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) (async, rerun: 32) sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="25daecdbd8e723b7b21e8dc5f4c935826e3e87ca", 0x14}], 0x1}, 0x4000040) (rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (async) recvmmsg(r0, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x12160, 0x0) 0s ago: executing program 2 (id=612): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x101600, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x3, 0x73, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf9205000000000000001eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c00e106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72cd67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae04753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14c17564b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c35ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487429a8da93c5e2a14f727"}}, 0xfdef) ioctl$CDROMRESET(r0, 0x5312) kernel console output (not intermixed with test programs): t: type=1400 audit(1789053323.834:473): avc: denied { watch } for pid=6795 comm="syz.2.189" path="/46/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 170.781859][ T6516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.865863][ T6781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.866330][ T6781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.070827][ T5831] usb 8-1: USB disconnect, device number 3 [ 171.097686][ T5831] usblp0: removed [ 171.650957][ T6516] veth0_vlan: entered promiscuous mode [ 171.657230][ T6516] veth1_vlan: entered promiscuous mode [ 171.748528][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.863168][ T6516] veth0_macvtap: entered promiscuous mode [ 171.867377][ T6516] veth1_macvtap: entered promiscuous mode [ 171.897216][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.902147][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.008127][ T5824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.008173][ T5824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.008202][ T5824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.008232][ T5824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.193310][ T447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.193333][ T447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.299423][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.299446][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.355033][ T6829] netlink: 32 bytes leftover after parsing attributes in process `syz.3.193'. [ 172.356634][ T6829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.193'. [ 172.394891][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.409160][ T6830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.193'. [ 172.768598][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.805748][ T6844] syzkaller0: entered promiscuous mode [ 172.805774][ T6844] syzkaller0: entered allmulticast mode [ 173.210989][ T38] IPVS: starting estimator thread 0... [ 173.298555][ T6855] IPVS: using max 28 ests per chain, 67200 per kthread [ 173.811746][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.815779][ T44] kauditd_printk_skb: 7 callbacks suppressed [ 173.815840][ T44] audit: type=1400 audit(1789053326.914:481): avc: denied { shutdown } for pid=6863 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.480031][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.509085][ T1231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.749467][ T6871] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 174.861324][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.916126][ T44] audit: type=1400 audit(1789053327.964:482): avc: denied { write } for pid=6870 comm="syz.0.201" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 174.916186][ T44] audit: type=1400 audit(1789053327.964:483): avc: denied { open } for pid=6870 comm="syz.0.201" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 174.916220][ T44] audit: type=1400 audit(1789053327.964:484): avc: denied { ioctl } for pid=6870 comm="syz.0.201" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 175.436322][ T1231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.888669][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.960154][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.024201][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.426946][ T5751] Bluetooth: hci2: command 0x0406 tx timeout [ 177.985479][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.469631][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.029334][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.574159][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.051088][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.244038][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.634469][ T6853] tipc: Enabling of bearer rejected, failed to enable media [ 180.638669][ T6858] wlan1 speed is unknown, defaulting to 1000 [ 180.638729][ T6858] wlan1 speed is unknown, defaulting to 1000 [ 180.639568][ T6858] wlan1 speed is unknown, defaulting to 1000 [ 180.661471][ T6858] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 180.661512][ T6858] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 180.661549][ T6858] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 180.664806][ T6858] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 180.674662][ T6858] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 180.861818][ T6858] wlan1 speed is unknown, defaulting to 1000 [ 180.863490][ T6858] wlan1 speed is unknown, defaulting to 1000 [ 180.864925][ T6858] wlan1 speed is unknown, defaulting to 1000 [ 180.866234][ T6858] wlan1 speed is unknown, defaulting to 1000 [ 180.981548][ T44] audit: type=1400 audit(1789053334.064:485): avc: denied { write } for pid=6873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.080999][ T44] audit: type=1400 audit(1789053334.184:486): avc: denied { map } for pid=6879 comm="syz.0.202" path="socket:[16471]" dev="sockfs" ino=16471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 181.081051][ T44] audit: type=1400 audit(1789053334.184:487): avc: denied { read } for pid=6879 comm="syz.0.202" path="socket:[16471]" dev="sockfs" ino=16471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 181.087642][ T44] audit: type=1400 audit(1789053334.184:488): avc: denied { getopt } for pid=6879 comm="syz.0.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.092328][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.343067][ T44] audit: type=1400 audit(1789053334.434:489): avc: denied { write } for pid=6892 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.350485][ T6899] netlink: 60 bytes leftover after parsing attributes in process `syz.3.208'. [ 181.351070][ T6899] netlink: 60 bytes leftover after parsing attributes in process `syz.3.208'. [ 181.351585][ T6899] netlink: 'syz.3.208': attribute type 32 has an invalid length. [ 181.351598][ T6899] netlink: 492 bytes leftover after parsing attributes in process `syz.3.208'. [ 181.522469][ T44] audit: type=1400 audit(1789053334.624:490): avc: denied { create } for pid=6906 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 181.526022][ T44] audit: type=1400 audit(1789053334.624:491): avc: denied { bind } for pid=6906 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 181.530141][ T44] audit: type=1400 audit(1789053334.624:492): avc: denied { listen } for pid=6906 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 181.530182][ T44] audit: type=1400 audit(1789053334.634:493): avc: denied { accept } for pid=6906 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 181.598479][ T44] audit: type=1400 audit(1789053334.684:494): avc: denied { append } for pid=6906 comm="syz.4.210" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 181.661891][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 181.844628][ T6917] xt_hashlimit: max too large, truncated to 1048576 [ 181.847339][ T6917] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 181.848234][ T6918] xt_hashlimit: max too large, truncated to 1048576 [ 181.848611][ T6918] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 182.134396][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.238603][ T6928] mmap: syz.2.216 (6928) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 182.258845][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 182.473618][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 182.474692][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 182.474718][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 182.474755][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.543424][ T6933] openvswitch: netlink: Duplicate or invalid key (type 0). [ 182.543464][ T6933] openvswitch: netlink: Actions may not be safe on all matching packets [ 182.873282][ T6943] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 182.906590][ T9] usb 5-1: USB disconnect, device number 3 [ 182.986038][ T6947] overlayfs: overlapping lowerdir path [ 183.164708][ T5796] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.170184][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.265920][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.404886][ T5796] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.470658][ T6951] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 183.531783][ T6950] overlayfs: failed to resolve './file2': -2 [ 183.611710][ T6954] netlink: 'syz.0.226': attribute type 2 has an invalid length. [ 183.611738][ T6954] netlink: 224 bytes leftover after parsing attributes in process `syz.0.226'. [ 183.696851][ T5751] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 183.736410][ T5751] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 183.741541][ T5751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 183.743207][ T5751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 183.743974][ T5751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.879411][ T6959] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 183.900836][ T5796] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.912662][ T6965] overlayfs: invalid origin (0000) [ 184.024471][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'. [ 184.043378][ T6969] netlink: 'syz.0.228': attribute type 30 has an invalid length. [ 184.096706][ T6973] CacheFiles: Empty directory specified [ 184.135686][ T6969] bond0: option arp_missed_max: invalid value (0) [ 184.135708][ T6969] bond0: option arp_missed_max: allowed values 1 - 255 [ 184.160959][ T6969] bond0 (unregistering): Released all slaves [ 184.208875][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.545081][ T5796] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.048914][ T5851] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 185.220932][ T5851] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 185.221876][ T5851] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.221908][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.312662][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.372685][ T5851] as10x_usb: device has been detected [ 185.373376][ T5851] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 185.478810][ T5796] bridge_slave_1: left allmulticast mode [ 185.478836][ T5796] bridge_slave_1: left promiscuous mode [ 185.479015][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.560428][ T5851] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 185.607081][ T5796] bridge_slave_0: left allmulticast mode [ 185.607107][ T5796] bridge_slave_0: left promiscuous mode [ 185.607312][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.723080][ T5851] as10x_usb: error during firmware upload part1 [ 185.723887][ T5851] Registered device Abilis Systems DVB-Titan [ 185.897113][ T5763] Bluetooth: hci2: command tx timeout [ 186.051282][ T5895] usb 7-1: USB disconnect, device number 3 [ 186.106686][ T44] kauditd_printk_skb: 19 callbacks suppressed [ 186.106705][ T44] audit: type=1400 audit(1789053339.204:514): avc: denied { ioctl } for pid=6985 comm="syz.2.233" path="socket:[14807]" dev="sockfs" ino=14807 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 186.266839][ T5895] Unregistered device Abilis Systems DVB-Titan [ 186.268152][ T5895] as10x_usb: device has been disconnected [ 186.309068][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.376300][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.419052][ T5796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.554906][ T5796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.593191][ T5796] bond0 (unregistering): Released all slaves [ 186.601623][ T6955] wlan1 speed is unknown, defaulting to 1000 [ 186.613967][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.628053][ T5445] 8021q: adding VLAN 0 to HW filter on device eth6 [ 186.926964][ T44] audit: type=1400 audit(1789053340.024:515): avc: denied { write } for pid=7005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.947981][ T44] audit: type=1400 audit(1789053340.044:516): avc: denied { write } for pid=7013 comm="syz.2.237" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 187.120620][ T44] audit: type=1400 audit(1789053340.224:517): avc: denied { write } for pid=7016 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.253802][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.438132][ T44] audit: type=1400 audit(1789053340.534:518): avc: denied { write } for pid=7030 comm="syz.2.242" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 187.496960][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.642929][ T44] audit: type=1400 audit(1789053340.744:519): avc: denied { create } for pid=7030 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 187.654865][ T44] audit: type=1400 audit(1789053340.754:520): avc: denied { shutdown } for pid=7030 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.753299][ T44] audit: type=1400 audit(1789053340.854:521): avc: denied { bind } for pid=7027 comm="syz.0.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.006048][ T5763] Bluetooth: hci2: command tx timeout [ 188.255263][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.255439][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.255548][ T6955] bridge_slave_0: entered allmulticast mode [ 188.294531][ T6955] bridge_slave_0: entered promiscuous mode [ 188.311934][ T7050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.245'. [ 188.339481][ T6955] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.339557][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.339681][ T6955] bridge_slave_1: entered allmulticast mode [ 188.439223][ T6955] bridge_slave_1: entered promiscuous mode [ 188.542846][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.774074][ T7054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.245'. [ 188.836105][ T7058] ip6t_hbh: Not strict - not implemented [ 188.924886][ T6955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.930026][ T6955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.132449][ T44] audit: type=1400 audit(1789053342.214:522): avc: denied { read append } for pid=7061 comm="syz.0.248" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 189.132825][ T44] audit: type=1400 audit(1789053342.214:523): avc: denied { open } for pid=7061 comm="syz.0.248" path="/dev/ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 189.345494][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.588746][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.617820][ T5796] hsr_slave_0: left promiscuous mode [ 189.620569][ T5796] hsr_slave_1: left promiscuous mode [ 189.621317][ T5796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.621332][ T5796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.623060][ T5796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.623079][ T5796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.674666][ T5796] veth1_macvtap: left promiscuous mode [ 189.674705][ T5796] veth0_macvtap: left promiscuous mode [ 189.674790][ T5796] veth1_vlan: left promiscuous mode [ 189.674864][ T5796] veth0_vlan: left promiscuous mode [ 190.011970][ T1231] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 190.064218][ T5763] Bluetooth: hci2: command tx timeout [ 190.191875][ T1231] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 190.216682][ T1231] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 190.216712][ T1231] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 190.253557][ T1231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.253585][ T1231] usb 5-1: Product: syz [ 190.253599][ T1231] usb 5-1: Manufacturer: syz [ 190.253613][ T1231] usb 5-1: SerialNumber: syz [ 190.348716][ T5796] team0 (unregistering): Port device team_slave_1 removed [ 190.391685][ T5796] team0 (unregistering): Port device team_slave_0 removed [ 190.448694][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.479130][ T1231] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 190.594960][ T6955] team0: Port device team_slave_0 added [ 190.597896][ T6955] team0: Port device team_slave_1 added [ 190.627886][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.636292][ T7072] bridge0: port 3(macsec1) entered blocking state [ 190.636436][ T7072] bridge0: port 3(macsec1) entered disabled state [ 190.636554][ T7072] macsec1: entered allmulticast mode [ 190.723910][ T7072] macsec1: entered promiscuous mode [ 190.766794][ T7083] qrtr: Invalid version 48 [ 190.849965][ T5445] 8021q: adding VLAN 0 to HW filter on device eth7 [ 190.968720][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.252'. [ 191.091070][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.091087][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.091108][ T6955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.092624][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.092637][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.092657][ T6955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.154883][ T7092] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 191.160797][ T7089] fuse: blksize only supported for fuseblk [ 191.236338][ T44] kauditd_printk_skb: 8 callbacks suppressed [ 191.236357][ T44] audit: type=1400 audit(1789053344.324:532): avc: denied { write } for pid=7093 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.542376][ T6955] hsr_slave_0: entered promiscuous mode [ 191.543222][ T6955] hsr_slave_1: entered promiscuous mode [ 191.659947][ T44] audit: type=1400 audit(1789053344.764:533): avc: denied { write } for pid=7101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.668181][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.814076][ T44] audit: type=1400 audit(1789053344.914:534): avc: denied { write } for pid=7107 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.155708][ T5763] Bluetooth: hci2: command tx timeout [ 192.167329][ T7066] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.167353][ T7066] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 192.389783][ T5796] IPVS: stop unused estimator thread 0... [ 192.540794][ T7066] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.540818][ T7066] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 192.698637][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.824248][ T44] audit: type=1400 audit(1789053345.934:535): avc: denied { write } for pid=7119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.878002][ T6955] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 192.882677][ T9] usb 5-1: USB disconnect, device number 4 [ 192.886587][ T9] usblp0: removed [ 193.004608][ T6955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 193.005562][ T6955] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 193.094753][ T6955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.148786][ T44] audit: type=1400 audit(1789053346.234:536): avc: denied { write } for pid=7122 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.369706][ T6955] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 193.379100][ T6955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.380066][ T6955] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 193.406083][ T6955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.441746][ T5445] 8021q: adding VLAN 0 to HW filter on device eth8 [ 193.504036][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.641890][ T7066] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 193.641920][ T7066] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 193.756913][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.010877][ T44] audit: type=1400 audit(1789053347.114:537): avc: denied { write } for pid=7142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.103865][ T43] wlan1 speed is unknown, defaulting to 1000 [ 194.103893][ T43] syz2: Port: 1 Link DOWN [ 194.105353][ T7066] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.105374][ T7066] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 194.109182][ T44] audit: type=1400 audit(1789053347.214:538): avc: denied { write } for pid=7143 comm="syz.0.258" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 194.117775][ T6955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.145485][ T6955] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.151656][ T599] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.151733][ T599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.162228][ T599] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.162330][ T599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.217649][ T44] audit: type=1400 audit(1789053347.314:539): avc: denied { write } for pid=7148 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.366631][ T5445] 8021q: adding VLAN 0 to HW filter on device eth9 [ 194.585577][ T44] audit: type=1400 audit(1789053347.684:540): avc: denied { ioctl } for pid=7157 comm="syz.4.259" path="socket:[15036]" dev="sockfs" ino=15036 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 194.768619][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.794006][ T44] audit: type=1400 audit(1789053347.884:541): avc: denied { write } for pid=7167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.126528][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 195.160258][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 195.354271][ T6955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.838542][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.221699][ T1136] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 196.264762][ T1136] ata1.00: configured for UDMA/100 [ 196.322158][ T6955] veth0_vlan: entered promiscuous mode [ 196.376195][ T6955] veth1_vlan: entered promiscuous mode [ 196.403302][ T44] kauditd_printk_skb: 4 callbacks suppressed [ 196.403319][ T44] audit: type=1400 audit(1789053349.504:546): avc: denied { write } for pid=7204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.525367][ T6955] veth0_macvtap: entered promiscuous mode [ 196.550090][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.585723][ T6955] veth1_macvtap: entered promiscuous mode [ 196.605790][ T44] audit: type=1400 audit(1789053349.654:547): avc: denied { unmount } for pid=6516 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 196.654083][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.679730][ T6955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.799381][ T44] audit: type=1400 audit(1789053349.894:548): avc: denied { write } for pid=7209 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 196.861463][ T6702] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.861504][ T6702] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.861531][ T6702] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.861558][ T6702] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.874037][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.921983][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.018833][ T7213] qrtr: Invalid version 48 [ 197.114590][ T599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.114611][ T599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.299858][ T599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.299880][ T599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.443272][ T44] audit: type=1400 audit(1789053350.544:549): avc: denied { mounton } for pid=6955 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 197.618012][ T44] audit: type=1400 audit(1789053350.724:550): avc: denied { write } for pid=7221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.924444][ T44] audit: type=1400 audit(1789053351.014:551): avc: denied { write } for pid=7235 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.971861][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.138491][ T5831] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 198.289806][ T44] audit: type=1400 audit(1789053351.384:552): avc: denied { write } for pid=7252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.336002][ T5831] usb 5-1: Invalid ep0 maxpacket: 32 [ 198.475861][ T5831] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 198.524958][ T44] audit: type=1400 audit(1789053351.624:553): avc: denied { connect } for pid=7260 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.547216][ T44] audit: type=1400 audit(1789053351.644:554): avc: denied { write } for pid=7258 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.616898][ T44] audit: type=1400 audit(1789053351.714:555): avc: denied { setopt } for pid=7260 comm="syz.4.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.638479][ T5831] usb 5-1: Invalid ep0 maxpacket: 32 [ 198.638719][ T5831] usb usb5-port1: attempt power cycle [ 199.008777][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.011509][ T5831] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 199.042120][ T5831] usb 5-1: Invalid ep0 maxpacket: 32 [ 199.180872][ T5831] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 199.189289][ T5831] usb 5-1: Invalid ep0 maxpacket: 32 [ 199.189593][ T5831] usb usb5-port1: unable to enumerate USB device [ 199.369365][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.276'. [ 199.369540][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.276'. [ 199.369686][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.276'. [ 199.370237][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.276'. [ 199.370450][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.276'. [ 199.370610][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.276'. [ 199.370754][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.276'. [ 199.370907][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.5.276'. [ 199.497263][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.600326][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.634298][ T7297] bridge_slave_0 (unregistering): left allmulticast mode [ 199.634330][ T7297] bridge_slave_0 (unregistering): left promiscuous mode [ 199.634438][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.754138][ T7305] syz_tun: entered allmulticast mode [ 199.863960][ T7296] syz_tun: left allmulticast mode [ 200.105994][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.221246][ T7318] qrtr: Invalid version 48 [ 200.472707][ T7323] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 200.588825][ T7323] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 200.634910][ T7323] syzkaller1: entered promiscuous mode [ 200.634931][ T7323] syzkaller1: entered allmulticast mode [ 200.689007][ T66] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 200.853519][ T66] usb 9-1: Using ep0 maxpacket: 8 [ 200.859033][ T66] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 200.860908][ T66] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 200.860961][ T66] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.860984][ T66] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.861008][ T66] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.861031][ T66] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.861071][ T66] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.173213][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.180396][ T66] usb 9-1: usb_control_msg returned -32 [ 201.180442][ T66] usbtmc 9-1:16.0: can't read capabilities [ 201.375377][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.375428][ T1446] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.534998][ T44] kauditd_printk_skb: 11 callbacks suppressed [ 201.535020][ T44] audit: type=1400 audit(1789053354.614:567): avc: denied { write } for pid=7320 comm="syz.4.282" name="usbtmc0" dev="devtmpfs" ino=3556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 201.538871][ T7337] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 201.660422][ T44] audit: type=1400 audit(1789053354.744:568): avc: denied { read write } for pid=7334 comm="syz.2.286" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 201.661062][ T44] audit: type=1400 audit(1789053354.764:569): avc: denied { open } for pid=7334 comm="syz.2.286" path="/75/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 201.667919][ T7335] type: 17119 invalid [ 201.667965][ T44] audit: type=1400 audit(1789053354.764:570): avc: denied { ioctl } for pid=7334 comm="syz.2.286" path="/75/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 201.708734][ T66] usb 9-1: USB disconnect, device number 2 [ 201.893583][ T7340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=7340 comm=syz.0.287 [ 201.895065][ T7340] warning: `syz.0.287' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 201.937494][ T44] audit: type=1400 audit(1789053355.044:571): avc: denied { read } for pid=7341 comm="syz.5.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 202.084622][ T7344] sctp: [Deprecated]: syz.0.289 (pid 7344) Use of int in maxseg socket option. [ 202.084622][ T7344] Use struct sctp_assoc_value instead [ 202.261297][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.389799][ T44] audit: type=1400 audit(1789053355.474:572): avc: denied { getattr } for pid=7349 comm="syz.5.292" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 202.669503][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.280141][ T44] audit: type=1400 audit(1789053356.364:573): avc: denied { lock } for pid=7372 comm="syz.5.295" path="socket:[15287]" dev="sockfs" ino=15287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 203.363313][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.498049][ T7375] netlink: 'syz.5.295': attribute type 3 has an invalid length. [ 203.675641][ T44] audit: type=1400 audit(1789053356.774:574): avc: denied { bind } for pid=7377 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.787152][ T7378] __nla_validate_parse: 57 callbacks suppressed [ 203.787173][ T7378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.296'. [ 204.019568][ T44] audit: type=1400 audit(1789053357.104:575): avc: denied { read } for pid=7386 comm="syz.5.299" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 204.123966][ T5896] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 204.150866][ T7392] Invalid option length (480) for dns_resolver key [ 204.198709][ T44] audit: type=1400 audit(1789053357.304:576): avc: denied { getopt } for pid=7391 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 204.199429][ T7392] CIFS mount error: No usable UNC path provided in device string! [ 204.199429][ T7392] [ 204.199764][ T7392] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 204.251348][ T5896] usb 7-1: device descriptor read/64, error -71 [ 204.380149][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.488480][ T5896] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 204.598988][ T7409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.599127][ T7409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.599565][ T7409] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.604685][ T7412] netlink: 52 bytes leftover after parsing attributes in process `syz.5.306'. [ 204.619615][ T5896] usb 7-1: device descriptor read/64, error -71 [ 204.658022][ T7401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.658186][ T7401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.728747][ T5896] usb usb7-port1: attempt power cycle [ 204.962478][ T7436] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 204.962508][ T7436] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 204.962656][ T7436] overlayfs: failed to set uuid (19/file2, err=-13); falling back to uuid=null. [ 205.068506][ T5896] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 205.097249][ T5896] usb 7-1: device descriptor read/8, error -71 [ 205.286886][ T7438] WARNING! power/level is deprecated; use power/control instead [ 205.332682][ T5896] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 205.349049][ T5896] usb 7-1: device descriptor read/8, error -71 [ 205.410235][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.461666][ T5896] usb usb7-port1: unable to enumerate USB device [ 205.616906][ T7453] netlink: 'syz.5.315': attribute type 10 has an invalid length. [ 205.646789][ T7453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 205.649339][ T7453] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 205.728455][ T7453] FAULT_INJECTION: forcing a failure. [ 205.728455][ T7453] name failslab, interval 1, probability 0, space 0, times 0 [ 205.728487][ T7453] CPU: 1 UID: 0 PID: 7453 Comm: syz.5.315 Not tainted syzkaller #0 PREEMPT(full) [ 205.728527][ T7453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.728537][ T7453] Call Trace: [ 205.728545][ T7453] [ 205.728553][ T7453] dump_stack_lvl+0x100/0x190 [ 205.728581][ T7453] should_fail_ex.cold+0x5/0xa [ 205.728606][ T7453] should_failslab+0xc2/0x120 [ 205.728626][ T7453] __kmalloc_noprof+0xfc/0x840 [ 205.728645][ T7453] ? sock_kmalloc+0x111/0x170 [ 205.728682][ T7453] sock_kmalloc+0x111/0x170 [ 205.728732][ T7453] __tcp_md5_do_add+0x15f/0x500 [ 205.728762][ T7453] tcp_md5_do_add+0xae/0x430 [ 205.728797][ T7453] tcp_v4_parse_md5_keys+0x1df/0x6a0 [ 205.728825][ T7453] ? __pfx_tcp_v4_parse_md5_keys+0x10/0x10 [ 205.728870][ T7453] ? __local_bh_enable_ip+0xa5/0x120 [ 205.728891][ T7453] ? lockdep_hardirqs_on+0x7d/0x110 [ 205.728914][ T7453] do_tcp_setsockopt+0x1a78/0x2b50 [ 205.728932][ T7453] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 205.728952][ T7453] ? __pfx_sock_has_perm+0x10/0x10 [ 205.728975][ T7453] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 205.728994][ T7453] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 205.729017][ T7453] ? find_held_lock+0x2b/0x80 [ 205.729039][ T7453] ? __fget_files+0x215/0x3d0 [ 205.729061][ T7453] tcp_setsockopt+0xe2/0x100 [ 205.729075][ T7453] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 205.729096][ T7453] do_sock_setsockopt+0xf3/0x1d0 [ 205.729119][ T7453] __sys_setsockopt+0x195/0x220 [ 205.729139][ T7453] __x64_sys_setsockopt+0xbd/0x160 [ 205.729155][ T7453] ? do_syscall_64+0xae/0x790 [ 205.729173][ T7453] ? lockdep_hardirqs_on+0x7d/0x110 [ 205.729191][ T7453] do_syscall_64+0x123/0x790 [ 205.729211][ T7453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.729227][ T7453] RIP: 0033:0x7effeb99e159 [ 205.729241][ T7453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.729255][ T7453] RSP: 002b:00007effec7cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 205.729270][ T7453] RAX: ffffffffffffffda RBX: 00007effebc25fa0 RCX: 00007effeb99e159 [ 205.729280][ T7453] RDX: 000000000000000e RSI: 0000000000000006 RDI: 000000000000000a [ 205.729289][ T7453] RBP: 00007effeba3503b R08: 00000000000000d8 R09: 0000000000000000 [ 205.729298][ T7453] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 205.729306][ T7453] R13: 00007effebc26038 R14: 00007effebc25fa0 R15: 00007fff91c440f8 [ 205.729327][ T7453] [ 206.507639][ T7476] virtio-fs: tag not found [ 206.554225][ T7473] faux_driver vgem: [drm] Unknown color mode 2907; guessing buffer size. [ 206.589555][ T7477] ./dev/sda1: Can't lookup blockdev [ 206.731573][ T7482] netlink: 14 bytes leftover after parsing attributes in process `syz.0.326'. [ 206.802608][ T44] kauditd_printk_skb: 5 callbacks suppressed [ 206.802627][ T44] audit: type=1400 audit(1789053359.894:582): avc: denied { mount } for pid=7483 comm="syz.5.327" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 207.194146][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.332'. [ 207.354611][ T7502] xt_hashlimit: size too large, truncated to 1048576 [ 207.356435][ T44] audit: type=1400 audit(1789053360.454:583): avc: denied { ioctl } for pid=7501 comm="syz.0.334" path="socket:[17252]" dev="sockfs" ino=17252 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 207.356486][ T44] audit: type=1400 audit(1789053360.454:584): avc: denied { bind } for pid=7499 comm="syz.4.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 207.356518][ T44] audit: type=1400 audit(1789053360.454:585): avc: denied { node_bind } for pid=7499 comm="syz.4.335" saddr=127.0.0.1 src=32768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 207.361104][ T7498] bridge1: port 1(veth3) entered blocking state [ 207.361922][ T7498] bridge1: port 1(veth3) entered disabled state [ 207.362059][ T7498] veth3: entered allmulticast mode [ 207.363614][ T7498] veth3: entered promiscuous mode [ 207.498961][ T5831] net_ratelimit: 3 callbacks suppressed [ 207.498987][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.705743][ T7505] bridge1: port 2(veth5) entered blocking state [ 207.705828][ T7505] bridge1: port 2(veth5) entered disabled state [ 207.705964][ T7505] veth5: entered allmulticast mode [ 207.739165][ T7505] veth5: entered promiscuous mode [ 207.840732][ T44] audit: type=1400 audit(1789053360.944:586): avc: denied { write } for pid=7521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.093606][ T44] audit: type=1400 audit(1789053361.194:587): avc: denied { write } for pid=7533 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.529945][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.674246][ T7550] 9p: Bad value for 'source' [ 208.820667][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.972770][ T7556] netlink: 8 bytes leftover after parsing attributes in process `}'. [ 208.972792][ T7556] netlink: 24 bytes leftover after parsing attributes in process `}'. [ 208.973773][ T44] audit: type=1400 audit(1789053362.074:588): avc: denied { write } for pid=7554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.118796][ T44] audit: type=1400 audit(1789053362.214:589): avc: denied { write } for pid=7559 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.121456][ T44] audit: type=1400 audit(1789053362.224:590): avc: denied { bind } for pid=7560 comm="syz.5.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 209.125824][ T44] audit: type=1400 audit(1789053362.224:591): avc: denied { getopt } for pid=7560 comm="syz.5.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 209.599984][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.500725][ T7587] FAULT_INJECTION: forcing a failure. [ 210.500725][ T7587] name fail_futex, interval 1, probability 0, space 0, times 1 [ 210.500755][ T7587] CPU: 3 UID: 0 PID: 7587 Comm: syz.4.355 Not tainted syzkaller #0 PREEMPT(full) [ 210.500774][ T7587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 210.500785][ T7587] Call Trace: [ 210.500792][ T7587] [ 210.500799][ T7587] dump_stack_lvl+0x100/0x190 [ 210.500831][ T7587] should_fail_ex.cold+0x5/0xa [ 210.500859][ T7587] get_futex_key+0x1d0/0x14f0 [ 210.500886][ T7587] ? __pfx_get_futex_key+0x10/0x10 [ 210.500905][ T7587] ? find_held_lock+0x2b/0x80 [ 210.500929][ T7587] ? futex_wake+0x4ea/0x5e0 [ 210.500962][ T7587] futex_wake+0xf4/0x5e0 [ 210.500986][ T7587] ? futex_wait+0x11e/0x370 [ 210.501014][ T7587] ? __pfx_futex_wake+0x10/0x10 [ 210.501043][ T7587] ? rcu_read_lock_any_held+0x6a/0x90 [ 210.501067][ T7587] ? locks_remove_posix+0xff/0x4d0 [ 210.501091][ T7587] ? find_held_lock+0x2b/0x80 [ 210.501114][ T7587] ? __pfx_locks_remove_posix+0x10/0x10 [ 210.501137][ T7587] ? ksys_write+0x190/0x250 [ 210.501157][ T7587] do_futex+0x2b2/0x440 [ 210.501180][ T7587] ? __pfx_do_futex+0x10/0x10 [ 210.501210][ T7587] __x64_sys_futex+0x34f/0x4d0 [ 210.501236][ T7587] ? __pfx___x64_sys_futex+0x10/0x10 [ 210.501266][ T7587] do_syscall_64+0x123/0x790 [ 210.501293][ T7587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.501320][ T7587] RIP: 0033:0x7f5ad899e159 [ 210.501337][ T7587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.501355][ T7587] RSP: 002b:00007f5ad98320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 210.501375][ T7587] RAX: ffffffffffffffda RBX: 00007f5ad8c26098 RCX: 00007f5ad899e159 [ 210.501386][ T7587] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5ad8c2609c [ 210.501397][ T7587] RBP: 00007f5ad8c26090 R08: 0000000000000001 R09: 0000000000000000 [ 210.501408][ T7587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.501420][ T7587] R13: 00007f5ad8c26128 R14: 00007ffdea6ee410 R15: 00007ffdea6ee4f8 [ 210.501446][ T7587] [ 210.511871][ T7591] null_blk: disk nullb1 created [ 210.554091][ T7587] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 210.610206][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.660146][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.868847][ T44] kauditd_printk_skb: 10 callbacks suppressed [ 211.868877][ T44] audit: type=1400 audit(1789053364.944:602): avc: denied { write } for pid=7613 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.889204][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.184027][ T44] audit: type=1400 audit(1789053365.264:603): avc: denied { read write } for pid=7623 comm="syz.4.366" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 212.184079][ T44] audit: type=1400 audit(1789053365.264:604): avc: denied { open } for pid=7623 comm="syz.4.366" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 212.308621][ T44] audit: type=1400 audit(1789053365.414:605): avc: denied { write } for pid=7620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.314707][ T7631] misc userio: Begin command sent, but we're already running [ 212.319030][ T7631] misc userio: Begin command sent, but we're already running [ 212.319992][ T7634] misc userio: Begin command sent, but we're already running [ 212.342327][ T7633] misc userio: Can't change port type on an already running userio instance [ 212.377917][ T5851] logitech-hidpp-device 0003:046D:C082.0002: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 212.523306][ T44] audit: type=1400 audit(1789053365.614:606): avc: denied { write } for pid=7636 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.688728][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.876549][ T7635] fido_id[7635]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 212.904890][ T7649] netlink: 'syz.0.372': attribute type 1 has an invalid length. [ 212.906031][ T7649] netlink: 'syz.0.372': attribute type 1 has an invalid length. [ 213.145566][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 213.145588][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 213.145599][ T7658] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 213.181614][ T7661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.375'. [ 213.203786][ T44] audit: type=1400 audit(1789053366.304:607): avc: denied { mmap_zero } for pid=7659 comm="syz.5.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 213.216458][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.376'. [ 213.585266][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.648507][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 213.736128][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.821232][ T9] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 213.826023][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.826050][ T9] usb 5-1: Product: syz [ 213.826065][ T9] usb 5-1: Manufacturer: syz [ 213.826078][ T9] usb 5-1: SerialNumber: syz [ 214.311816][ T43] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 214.476895][ T43] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 214.477875][ T43] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 214.477898][ T43] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 214.477923][ T43] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.480512][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.480532][ T43] usb 7-1: Product: syz [ 214.480545][ T43] usb 7-1: Manufacturer: syz [ 214.480557][ T43] usb 7-1: SerialNumber: syz [ 214.516828][ T43] hub 7-1:1.0: bad descriptor, ignoring hub [ 214.516851][ T43] hub 7-1:1.0: probe with driver hub failed with error -5 [ 214.701793][ T5851] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 214.827185][ T43] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 214.872585][ T5851] usb 10-1: Using ep0 maxpacket: 16 [ 214.873547][ T5851] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 214.874807][ T5851] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.874829][ T5851] usb 10-1: config 0 has no interfaces? [ 214.877092][ T5851] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.877114][ T5851] usb 10-1: Product: syz [ 214.877128][ T5851] usb 10-1: Manufacturer: syz [ 214.877141][ T5851] usb 10-1: SerialNumber: syz [ 214.892473][ T5851] usb 10-1: config 0 descriptor?? [ 215.085119][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.088577][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.173496][ T44] audit: type=1400 audit(1789053368.274:608): avc: denied { watch_mount } for pid=7682 comm="syz.5.382" path="/44" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 215.178754][ T9] rtl8150 5-1:1.0: couldn't reset the device [ 215.179005][ T9] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 215.185283][ T9] usb 5-1: USB disconnect, device number 9 [ 215.283314][ T5853] usb 10-1: USB disconnect, device number 2 [ 215.609936][ T7705] netlink: 60 bytes leftover after parsing attributes in process `syz.4.386'. [ 215.626677][ T44] audit: type=1400 audit(1789053368.724:609): avc: denied { write } for pid=7702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.722967][ T7712] netlink: 604 bytes leftover after parsing attributes in process `syz.4.386'. [ 215.776687][ T44] audit: type=1400 audit(1789053368.874:610): avc: denied { write } for pid=7709 comm="rm" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.778562][ T7706] netlink: 60 bytes leftover after parsing attributes in process `syz.4.386'. [ 215.778912][ T7706] netlink: 60 bytes leftover after parsing attributes in process `syz.4.386'. [ 215.779093][ T7706] netlink: 60 bytes leftover after parsing attributes in process `syz.4.386'. [ 215.779262][ T7706] netlink: 60 bytes leftover after parsing attributes in process `syz.4.386'. [ 215.779420][ T7706] netlink: 60 bytes leftover after parsing attributes in process `syz.4.386'. [ 215.779731][ T7706] netlink: 60 bytes leftover after parsing attributes in process `syz.4.386'. [ 215.779915][ T7706] netlink: 60 bytes leftover after parsing attributes in process `syz.4.386'. [ 215.780093][ T7706] netlink: 60 bytes leftover after parsing attributes in process `syz.4.386'. [ 216.002533][ T9] usb 7-1: USB disconnect, device number 8 [ 216.008436][ T44] audit: type=1400 audit(1789053369.104:611): avc: denied { write } for pid=7718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1840 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.036974][ T9] usblp0: removed [ 216.195041][ T7726] jfs: Unknown parameter 'discardsu' [ 216.697311][ T7748] fuse: Bad value for 'group_id' [ 216.697333][ T7748] fuse: Bad value for 'group_id' [ 216.697600][ T7748] fuse: Bad value for 'group_id' [ 216.697614][ T7748] fuse: Bad value for 'group_id' [ 216.697888][ T7748] fuse: Bad value for 'group_id' [ 216.697901][ T7748] fuse: Bad value for 'group_id' [ 216.698154][ T7748] fuse: Bad value for 'group_id' [ 216.698165][ T7748] fuse: Bad value for 'group_id' [ 216.741896][ T7748] fuse: Bad value for 'group_id' [ 216.741915][ T7748] fuse: Bad value for 'group_id' [ 216.742160][ T7748] fuse: Bad value for 'group_id' [ 216.742171][ T7748] fuse: Bad value for 'group_id' [ 216.742422][ T7748] fuse: Bad value for 'group_id' [ 216.742433][ T7748] fuse: Bad value for 'group_id' [ 216.742683][ T7748] fuse: Bad value for 'group_id' [ 216.742693][ T7748] fuse: Bad value for 'group_id' [ 216.742926][ T7748] fuse: Bad value for 'group_id' [ 216.742938][ T7748] fuse: Bad value for 'group_id' [ 216.743177][ T7748] fuse: Bad value for 'group_id' [ 216.743189][ T7748] fuse: Bad value for 'group_id' [ 216.743423][ T7748] fuse: Bad value for 'group_id' [ 216.743434][ T7748] fuse: Bad value for 'group_id' [ 216.743716][ T7748] fuse: Bad value for 'group_id' [ 216.743728][ T7748] fuse: Bad value for 'group_id' [ 216.744021][ T7748] fuse: Bad value for 'group_id' [ 216.744033][ T7748] fuse: Bad value for 'group_id' [ 216.744289][ T7748] fuse: Bad value for 'group_id' [ 216.744301][ T7748] fuse: Bad value for 'group_id' [ 216.744537][ T7748] fuse: Bad value for 'group_id' [ 216.744550][ T7748] fuse: Bad value for 'group_id' [ 216.744799][ T7748] fuse: Bad value for 'group_id' [ 216.744811][ T7748] fuse: Bad value for 'group_id' [ 216.745063][ T7748] fuse: Bad value for 'group_id' [ 216.745075][ T7748] fuse: Bad value for 'group_id' [ 216.745323][ T7748] fuse: Bad value for 'group_id' [ 216.745333][ T7748] fuse: Bad value for 'group_id' [ 216.745567][ T7748] fuse: Bad value for 'group_id' [ 216.745579][ T7748] fuse: Bad value for 'group_id' [ 216.745821][ T7748] fuse: Bad value for 'group_id' [ 216.745832][ T7748] fuse: Bad value for 'group_id' [ 216.746076][ T7748] fuse: Bad value for 'group_id' [ 216.746087][ T7748] fuse: Bad value for 'group_id' [ 216.746458][ T7748] fuse: Bad value for 'group_id' [ 216.746471][ T7748] fuse: Bad value for 'group_id' [ 216.746713][ T7748] fuse: Bad value for 'group_id' [ 216.746724][ T7748] fuse: Bad value for 'group_id' [ 216.746973][ T7748] fuse: Bad value for 'group_id' [ 216.746984][ T7748] fuse: Bad value for 'group_id' [ 216.747230][ T7748] fuse: Bad value for 'group_id' [ 216.747242][ T7748] fuse: Bad value for 'group_id' [ 216.747472][ T7748] fuse: Bad value for 'group_id' [ 216.747482][ T7748] fuse: Bad value for 'group_id' [ 216.747738][ T7748] fuse: Bad value for 'group_id' [ 216.747749][ T7748] fuse: Bad value for 'group_id' [ 216.747965][ T7748] fuse: Bad value for 'group_id' [ 216.747975][ T7748] fuse: Bad value for 'group_id' [ 216.748207][ T7748] fuse: Bad value for 'group_id' [ 216.748217][ T7748] fuse: Bad value for 'group_id' [ 217.012175][ T44] kauditd_printk_skb: 4 callbacks suppressed [ 217.012194][ T44] audit: type=1400 audit(1789053370.114:616): avc: denied { append } for pid=7755 comm="syz.2.396" name="dvr0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 217.136773][ T44] audit: type=1400 audit(1789053370.214:617): avc: denied { load_policy } for pid=7755 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 217.145304][ T7756] SELinux: unknown common socke0 [ 217.145355][ T7756] SELinux: invalid class [ 217.153021][ T7756] SELinux: failed to load policy [ 217.480915][ T43] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 217.668588][ T44] audit: type=1400 audit(1789053370.764:618): avc: denied { create_files_as } for pid=7774 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=kernel_service permissive=1 [ 217.669736][ T43] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 217.670793][ T43] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.670831][ T43] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 217.670852][ T43] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 217.670871][ T43] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 217.670904][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.684175][ T7776] netfs: Cache "CacheFiles" added (type cachefiles) [ 217.684204][ T7776] CacheFiles: File cache on CacheFiles registered [ 217.691466][ T7777] IPv6: NLM_F_REPLACE set, but no existing node found! [ 217.736973][ T7763] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 217.737125][ T7763] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 217.852848][ T43] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 217.855309][ T43] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 217.855379][ T43] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 217.888114][ T44] audit: type=1400 audit(1789053370.984:619): avc: denied { connect } for pid=7782 comm="syz.2.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.941101][ T7774] CacheFiles: File cache on CacheFiles unregistering [ 217.941119][ T7774] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 218.003481][ T44] audit: type=1400 audit(1789053371.104:620): avc: denied { ioctl } for pid=7762 comm="syz.4.399" path="socket:[20029]" dev="sockfs" ino=20029 ioctlcmd=0x5864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 218.014841][ T43] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 218.029379][ T43] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 218.029450][ T43] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 218.047177][ T7777] netlink: 'syz.5.404': attribute type 10 has an invalid length. [ 218.069284][ T43] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 218.146010][ T7777] syz_tun: entered promiscuous mode [ 218.155141][ T7777] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 218.282893][ T5851] usb 9-1: USB disconnect, device number 3 [ 218.322951][ T5851] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 218.374548][ T5851] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 218.375164][ T5851] keyspan 9-1:1.0: device disconnected [ 218.941326][ T44] audit: type=1400 audit(1789053372.034:621): avc: denied { mount } for pid=7830 comm="syz.0.416" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 219.095282][ T7826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.138017][ T44] audit: type=1400 audit(1789053372.234:622): avc: denied { bind } for pid=7838 comm="syz.2.418" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.138284][ T44] audit: type=1400 audit(1789053372.234:623): avc: denied { node_bind } for pid=7838 comm="syz.2.418" saddr=fec0:ffff::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 219.145750][ T7839] syzkaller1: entered promiscuous mode [ 219.145768][ T7839] syzkaller1: entered allmulticast mode [ 219.155947][ T44] audit: type=1400 audit(1789053372.254:624): avc: denied { search } for pid=7838 comm="syz.2.418" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 219.171845][ T44] audit: type=1400 audit(1789053372.274:625): avc: denied { setopt } for pid=7838 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 219.226933][ T7826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.441275][ T7845] input: syz0 as /devices/virtual/input/input6 [ 220.293375][ T7859] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 220.448039][ T7869] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7869 comm=syz.0.430 [ 220.624864][ T7882] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 220.626571][ T7884] FAULT_INJECTION: forcing a failure. [ 220.626571][ T7884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.626601][ T7884] CPU: 2 UID: 0 PID: 7884 Comm: syz.0.435 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.626625][ T7884] Tainted: [L]=SOFTLOCKUP [ 220.626631][ T7884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.626642][ T7884] Call Trace: [ 220.626648][ T7884] [ 220.626655][ T7884] dump_stack_lvl+0x100/0x190 [ 220.626700][ T7884] should_fail_ex.cold+0x5/0xa [ 220.626724][ T7884] _copy_from_user+0x2e/0xd0 [ 220.626747][ T7884] ucma_listen+0x81/0x220 [ 220.626771][ T7884] ? __pfx_ucma_listen+0x10/0x10 [ 220.626794][ T7884] ? __pfx_ucma_listen+0x10/0x10 [ 220.626812][ T7884] ucma_write+0x1fb/0x330 [ 220.626831][ T7884] ? __pfx_ucma_write+0x10/0x10 [ 220.626848][ T7884] ? bpf_lsm_file_permission+0x9/0x10 [ 220.626870][ T7884] ? security_file_permission+0x76/0x210 [ 220.626891][ T7884] ? rw_verify_area+0xce/0x6d0 [ 220.626920][ T7884] vfs_write+0x2aa/0x1050 [ 220.626939][ T7884] ? __pfx_ucma_write+0x10/0x10 [ 220.626957][ T7884] ? lock_acquire+0x1d1/0x380 [ 220.626975][ T7884] ? __fget_files+0x34/0x3d0 [ 220.626997][ T7884] ? __pfx_vfs_write+0x10/0x10 [ 220.627013][ T7884] ? find_held_lock+0x2b/0x80 [ 220.627038][ T7884] ? __fget_files+0x215/0x3d0 [ 220.627059][ T7884] ? __fget_files+0x215/0x3d0 [ 220.627084][ T7884] ? __fget_files+0x21f/0x3d0 [ 220.627113][ T7884] ksys_write+0x1f8/0x250 [ 220.627130][ T7884] ? __pfx_ksys_write+0x10/0x10 [ 220.627156][ T7884] do_syscall_64+0x123/0x790 [ 220.627188][ T7884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.627207][ T7884] RIP: 0033:0x7f0bf879e159 [ 220.627229][ T7884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.627245][ T7884] RSP: 002b:00007f0bf96e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 220.627264][ T7884] RAX: ffffffffffffffda RBX: 00007f0bf8a25fa0 RCX: 00007f0bf879e159 [ 220.627277][ T7884] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 220.627288][ T7884] RBP: 00007f0bf96e6090 R08: 0000000000000000 R09: 0000000000000000 [ 220.627299][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.627310][ T7884] R13: 00007f0bf8a26038 R14: 00007f0bf8a25fa0 R15: 00007ffe402aab68 [ 220.627334][ T7884] [ 220.671896][ T7885] __nla_validate_parse: 35 callbacks suppressed [ 220.671916][ T7885] netlink: 32 bytes leftover after parsing attributes in process `syz.2.432'. [ 220.721564][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.4.437'. [ 220.761776][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'. [ 221.171638][ T7904] 9pnet_virtio: no channels available for device syz [ 221.394741][ T7911] FAULT_INJECTION: forcing a failure. [ 221.394741][ T7911] name failslab, interval 1, probability 0, space 0, times 0 [ 221.394776][ T7911] CPU: 2 UID: 0 PID: 7911 Comm: syz.4.446 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.394802][ T7911] Tainted: [L]=SOFTLOCKUP [ 221.394808][ T7911] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 221.394820][ T7911] Call Trace: [ 221.394827][ T7911] [ 221.394835][ T7911] dump_stack_lvl+0x100/0x190 [ 221.394868][ T7911] should_fail_ex.cold+0x5/0xa [ 221.394895][ T7911] should_failslab+0xc2/0x120 [ 221.394920][ T7911] __kmalloc_cache_noprof+0x91/0x6d0 [ 221.394949][ T7911] ? cma_alloc_port+0x9b/0x5f0 [ 221.394979][ T7911] cma_alloc_port+0x9b/0x5f0 [ 221.395005][ T7911] rdma_bind_addr_dst+0x1b44/0x2c70 [ 221.395040][ T7911] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 221.395069][ T7911] rdma_listen+0x10c/0xd90 [ 221.395102][ T7911] ? __pfx_rdma_listen+0x10/0x10 [ 221.395130][ T7911] ? __pfx_ucma_get_ctx+0x10/0x10 [ 221.395164][ T7911] ucma_listen+0x173/0x220 [ 221.395220][ T7911] ? __pfx_ucma_listen+0x10/0x10 [ 221.395251][ T7911] ? __pfx_ucma_listen+0x10/0x10 [ 221.395275][ T7911] ucma_write+0x1fb/0x330 [ 221.395298][ T7911] ? __pfx_ucma_write+0x10/0x10 [ 221.395321][ T7911] ? bpf_lsm_file_permission+0x9/0x10 [ 221.395349][ T7911] ? security_file_permission+0x76/0x210 [ 221.395377][ T7911] ? rw_verify_area+0xce/0x6d0 [ 221.395412][ T7911] vfs_write+0x2aa/0x1050 [ 221.395546][ T7911] ? __pfx_ucma_write+0x10/0x10 [ 221.395569][ T7911] ? lock_acquire+0x1d1/0x380 [ 221.395591][ T7911] ? __fget_files+0x34/0x3d0 [ 221.395618][ T7911] ? __pfx_vfs_write+0x10/0x10 [ 221.395639][ T7911] ? find_held_lock+0x2b/0x80 [ 221.395693][ T7911] ? __fget_files+0x215/0x3d0 [ 221.395714][ T7911] ? __fget_files+0x215/0x3d0 [ 221.396152][ T7911] ? __fget_files+0x21f/0x3d0 [ 221.396194][ T7911] ksys_write+0x1f8/0x250 [ 221.396215][ T7911] ? __pfx_ksys_write+0x10/0x10 [ 221.396244][ T7911] do_syscall_64+0x123/0x790 [ 221.396277][ T7911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.396300][ T7911] RIP: 0033:0x7f5ad899e159 [ 221.396318][ T7911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.396338][ T7911] RSP: 002b:00007f5ad9853028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 221.396378][ T7911] RAX: ffffffffffffffda RBX: 00007f5ad8c25fa0 RCX: 00007f5ad899e159 [ 221.396394][ T7911] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 221.396407][ T7911] RBP: 00007f5ad9853090 R08: 0000000000000000 R09: 0000000000000000 [ 221.396420][ T7911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.396432][ T7911] R13: 00007f5ad8c26038 R14: 00007f5ad8c25fa0 R15: 00007ffdea6ee4f8 [ 221.396462][ T7911] [ 221.687335][ T7927] Line length is too long: Should be less than 4094 [ 221.722751][ T66] libceph: connect (1)[c::]:6789 error -101 [ 221.722990][ T66] libceph: mon0 (1)[c::]:6789 connect error [ 221.724207][ T66] libceph: connect (1)[c::]:6789 error -101 [ 221.725045][ T66] libceph: mon0 (1)[c::]:6789 connect error [ 221.988949][ T66] libceph: connect (1)[c::]:6789 error -101 [ 221.989107][ T66] libceph: mon0 (1)[c::]:6789 connect error [ 222.222430][ T7952] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 222.505281][ T5853] libceph: connect (1)[c::]:6789 error -101 [ 222.505457][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 222.513137][ T7927] ceph: No mds server is up or the cluster is laggy [ 222.741624][ T7962] netlink: 'syz.4.463': attribute type 1 has an invalid length. [ 222.862193][ T7970] input: syz0 as /devices/virtual/input/input8 [ 222.944432][ T7977] netlink: 76 bytes leftover after parsing attributes in process `syz.2.466'. [ 222.983256][ T7969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.064286][ T7969] bond1: (slave bond2): making interface the new active one [ 223.233759][ T7969] bond1: (slave bond2): Enslaving as an active interface with an up link [ 223.278655][ T7980] gadgetfs: bound to dummy_udc driver [ 223.452821][ T7987] qrtr: Invalid version 48 [ 223.540635][ T7989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 223.548630][ T5851] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 223.548906][ C2] gadgetfs: connected [ 223.549295][ T5851] gadgetfs: disconnected [ 223.634948][ T7989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.681633][ T7978] gadgetfs: suspended from state 2 [ 223.690580][ T7993] bond1: entered promiscuous mode [ 223.737765][ T44] kauditd_printk_skb: 8 callbacks suppressed [ 223.737788][ T44] audit: type=1400 audit(1789053376.844:634): avc: denied { accept } for pid=7994 comm="syz.5.475" lport=53865 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 223.743793][ T44] audit: type=1400 audit(1789053376.844:635): avc: denied { setopt } for pid=7994 comm="syz.5.475" lport=53865 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 223.836989][ T44] audit: type=1400 audit(1789053376.934:636): avc: denied { append } for pid=7999 comm="syz.2.476" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 223.908001][ T5851] usb 5-1: device not accepting address 10, error -71 [ 223.968849][ T5895] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 224.022713][ T8002] netlink: 'syz.2.477': attribute type 1 has an invalid length. [ 224.022734][ T8002] netlink: 44 bytes leftover after parsing attributes in process `syz.2.477'. [ 224.110827][ T8007] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 224.231810][ T5895] usb 10-1: device descriptor read/64, error -71 [ 224.256340][ T44] audit: type=1400 audit(1789053377.364:637): avc: denied { read } for pid=8006 comm="syz.4.479" laddr=::ffff:172.20.20.170 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.316091][ T44] audit: type=1400 audit(1789053377.414:638): avc: denied { nlmsg_read } for pid=8006 comm="syz.4.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 224.518914][ T5895] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 224.676021][ T5895] usb 10-1: device descriptor read/64, error -71 [ 224.779562][ T5895] usb usb10-port1: attempt power cycle [ 224.806093][ T8023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.483'. [ 224.806131][ T8023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.483'. [ 225.038165][ T8041] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8041 comm=syz.4.488 [ 225.082175][ T8042] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.489'. [ 225.083443][ T8042] tipc: Enabling of bearer rejected, failed to enable media [ 225.128878][ T8042] netlink: 40 bytes leftover after parsing attributes in process `syz.0.489'. [ 225.131896][ T5895] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 225.162760][ T5895] usb 10-1: device descriptor read/8, error -71 [ 225.406048][ T5895] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 225.468416][ T5895] usb 10-1: device descriptor read/8, error -71 [ 225.530769][ T44] audit: type=1400 audit(1789053378.624:639): avc: denied { shutdown } for pid=8051 comm="syz.0.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.569766][ T5895] usb usb10-port1: unable to enumerate USB device [ 225.780640][ T8054] wlan1 speed is unknown, defaulting to 1000 [ 226.008876][ T44] audit: type=1400 audit(1789053379.104:640): avc: denied { watch } for pid=8055 comm="syz.0.495" path="/127/net_prio.prioidx" dev="tmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 226.008968][ T44] audit: type=1400 audit(1789053379.104:641): avc: denied { watch_sb watch_reads } for pid=8055 comm="syz.0.495" path="/127/net_prio.prioidx" dev="tmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 226.113650][ T8061] netlink: 'syz.2.496': attribute type 12 has an invalid length. [ 226.589953][ T44] audit: type=1400 audit(1789053379.694:642): avc: denied { create } for pid=8066 comm="syz.4.498" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 226.608439][ T7814] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 226.771130][ T7814] usb 7-1: device descriptor read/64, error -71 [ 226.987095][ T44] audit: type=1400 audit(1789053380.084:643): avc: denied { read } for pid=8078 comm="syz.5.502" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 227.102470][ T7814] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 227.252981][ T7814] usb 7-1: device descriptor read/64, error -71 [ 227.308323][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.507'. [ 227.384309][ T7814] usb usb7-port1: attempt power cycle [ 227.637733][ T7294] IPVS: starting estimator thread 0... [ 227.744584][ T7814] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 227.744725][ T8103] IPVS: using max 30 ests per chain, 72000 per kthread [ 227.758538][ T8099] orangefs_devreq_write_iter: failed to copy head. [ 227.836741][ T7814] usb 7-1: device descriptor read/8, error -71 [ 227.935881][ T8115] netlink: 9152 bytes leftover after parsing attributes in process `syz.4.516'. [ 227.956384][ T8119] netlink: 40 bytes leftover after parsing attributes in process `syz.5.514'. [ 228.016929][ T8122] FAULT_INJECTION: forcing a failure. [ 228.016929][ T8122] name failslab, interval 1, probability 0, space 0, times 0 [ 228.016963][ T8122] CPU: 2 UID: 0 PID: 8122 Comm: syz.0.517 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.016988][ T8122] Tainted: [L]=SOFTLOCKUP [ 228.016995][ T8122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.017006][ T8122] Call Trace: [ 228.017013][ T8122] [ 228.017020][ T8122] dump_stack_lvl+0x100/0x190 [ 228.017053][ T8122] should_fail_ex.cold+0x5/0xa [ 228.017080][ T8122] should_failslab+0xc2/0x120 [ 228.017104][ T8122] __kmalloc_cache_noprof+0x91/0x6d0 [ 228.017133][ T8122] ? cm_alloc_id_priv+0x98/0x500 [ 228.017159][ T8122] ? __pfx_cma_ib_req_handler+0x10/0x10 [ 228.017183][ T8122] cm_alloc_id_priv+0x98/0x500 [ 228.017202][ T8122] ? __pfx_cm_alloc_id_priv+0x10/0x10 [ 228.017230][ T8122] ? __pfx_cma_ib_req_handler+0x10/0x10 [ 228.017255][ T8122] ib_cm_insert_listen+0x25/0x1c0 [ 228.017281][ T8122] rdma_listen+0x508/0xd90 [ 228.017305][ T8122] ? rdma_restrack_add+0x1d1/0x760 [ 228.017333][ T8122] ? __pfx_rdma_listen+0x10/0x10 [ 228.017359][ T8122] ? do_raw_spin_unlock+0x145/0x1e0 [ 228.017382][ T8122] ? _raw_spin_unlock+0x28/0x50 [ 228.017409][ T8122] cma_listen_on_dev+0x57f/0x8f0 [ 228.017437][ T8122] rdma_listen+0x96f/0xd90 [ 228.017465][ T8122] ? __pfx_rdma_listen+0x10/0x10 [ 228.017489][ T8122] ? __pfx_ucma_get_ctx+0x10/0x10 [ 228.017518][ T8122] ucma_listen+0x173/0x220 [ 228.017539][ T8122] ? __pfx_ucma_listen+0x10/0x10 [ 228.017565][ T8122] ? __pfx_ucma_listen+0x10/0x10 [ 228.017584][ T8122] ucma_write+0x1fb/0x330 [ 228.017601][ T8122] ? __pfx_ucma_write+0x10/0x10 [ 228.017618][ T8122] ? bpf_lsm_file_permission+0x9/0x10 [ 228.017639][ T8122] ? security_file_permission+0x76/0x210 [ 228.017662][ T8122] ? rw_verify_area+0xce/0x6d0 [ 228.017691][ T8122] vfs_write+0x2aa/0x1050 [ 228.017709][ T8122] ? __pfx_ucma_write+0x10/0x10 [ 228.017733][ T8122] ? lock_acquire+0x1d1/0x380 [ 228.017752][ T8122] ? __fget_files+0x34/0x3d0 [ 228.017775][ T8122] ? __pfx_vfs_write+0x10/0x10 [ 228.017791][ T8122] ? find_held_lock+0x2b/0x80 [ 228.017815][ T8122] ? __fget_files+0x215/0x3d0 [ 228.017836][ T8122] ? __fget_files+0x215/0x3d0 [ 228.017863][ T8122] ? __fget_files+0x21f/0x3d0 [ 228.017893][ T8122] ksys_write+0x1f8/0x250 [ 228.017911][ T8122] ? __pfx_ksys_write+0x10/0x10 [ 228.017938][ T8122] do_syscall_64+0x123/0x790 [ 228.017967][ T8122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.017987][ T8122] RIP: 0033:0x7f0bf879e159 [ 228.018003][ T8122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.018026][ T8122] RSP: 002b:00007f0bf96e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.018046][ T8122] RAX: ffffffffffffffda RBX: 00007f0bf8a25fa0 RCX: 00007f0bf879e159 [ 228.018057][ T8122] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 228.018070][ T8122] RBP: 00007f0bf96e6090 R08: 0000000000000000 R09: 0000000000000000 [ 228.018079][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.018090][ T8122] R13: 00007f0bf8a26038 R14: 00007f0bf8a25fa0 R15: 00007ffe402aab68 [ 228.018115][ T8122] [ 228.018128][ T8122] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -12 [ 228.100215][ T7814] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 228.150199][ T7814] usb 7-1: device descriptor read/8, error -71 [ 228.246666][ T8128] netlink: 112 bytes leftover after parsing attributes in process `syz.4.518'. [ 228.281745][ T7814] usb usb7-port1: unable to enumerate USB device [ 228.511684][ T8141] netlink: 52 bytes leftover after parsing attributes in process `syz.5.526'. [ 228.539079][ T8141] input: syz0 as /devices/virtual/input/input9 [ 228.569151][ T8144] FAULT_INJECTION: forcing a failure. [ 228.569151][ T8144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.569183][ T8144] CPU: 1 UID: 0 PID: 8144 Comm: syz.4.528 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.569206][ T8144] Tainted: [L]=SOFTLOCKUP [ 228.569212][ T8144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.569222][ T8144] Call Trace: [ 228.569228][ T8144] [ 228.569235][ T8144] dump_stack_lvl+0x100/0x190 [ 228.569267][ T8144] should_fail_ex.cold+0x5/0xa [ 228.569293][ T8144] _copy_to_user+0x32/0xd0 [ 228.569314][ T8144] simple_read_from_buffer+0xcb/0x170 [ 228.569339][ T8144] proc_fail_nth_read+0x1af/0x230 [ 228.569363][ T8144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.569384][ T8144] ? rw_verify_area+0xce/0x6d0 [ 228.569408][ T8144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.569429][ T8144] vfs_read+0x1e4/0xb40 [ 228.569448][ T8144] ? lock_acquire+0x1d1/0x380 [ 228.569466][ T8144] ? __fget_files+0x34/0x3d0 [ 228.569488][ T8144] ? __pfx_vfs_read+0x10/0x10 [ 228.569503][ T8144] ? find_held_lock+0x2b/0x80 [ 228.569526][ T8144] ? __fget_files+0x215/0x3d0 [ 228.569549][ T8144] ? __fget_files+0x21f/0x3d0 [ 228.569576][ T8144] ksys_read+0x12a/0x250 [ 228.569590][ T8144] ? __pfx_ksys_read+0x10/0x10 [ 228.569613][ T8144] do_syscall_64+0x123/0x790 [ 228.569638][ T8144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.569655][ T8144] RIP: 0033:0x7f5ad895e98e [ 228.569670][ T8144] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 228.569686][ T8144] RSP: 002b:00007f5ad9852fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 228.569703][ T8144] RAX: ffffffffffffffda RBX: 00007f5ad98536c0 RCX: 00007f5ad895e98e [ 228.569714][ T8144] RDX: 000000000000000f RSI: 00007f5ad98530a0 RDI: 0000000000000004 [ 228.569731][ T8144] RBP: 00007f5ad9853090 R08: 0000000000000000 R09: 0000000000000000 [ 228.569741][ T8144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.569751][ T8144] R13: 00007f5ad8c26038 R14: 00007f5ad8c25fa0 R15: 00007ffdea6ee4f8 [ 228.569772][ T8144] [ 228.584958][ T8141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.585128][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.644592][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.669041][ T8148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.995579][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.532'. [ 229.043797][ T66] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 229.259716][ T8158] SELinux: invalid class [ 229.296745][ T8164] FAULT_INJECTION: forcing a failure. [ 229.296745][ T8164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.296779][ T8164] CPU: 3 UID: 0 PID: 8164 Comm: syz.2.535 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.296803][ T8164] Tainted: [L]=SOFTLOCKUP [ 229.296810][ T8164] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.296829][ T8164] Call Trace: [ 229.296836][ T8164] [ 229.296843][ T8164] dump_stack_lvl+0x100/0x190 [ 229.296873][ T8164] should_fail_ex.cold+0x5/0xa [ 229.296898][ T8164] _copy_from_user+0x2e/0xd0 [ 229.296918][ T8164] xfrm_user_policy+0x4f3/0x920 [ 229.296942][ T8164] ? __pfx_xfrm_user_policy+0x10/0x10 [ 229.296960][ T8164] ? cap_capable+0x107/0x430 [ 229.296986][ T8164] ? bpf_lsm_capable+0x9/0x10 [ 229.297013][ T8164] ? ns_capable+0xd2/0xf0 [ 229.297033][ T8164] do_ip_setsockopt+0x1b64/0x3310 [ 229.297061][ T8164] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 229.297085][ T8164] ? avc_has_perm+0x135/0x1e0 [ 229.297109][ T8164] ? __pfx___mutex_lock+0x10/0x10 [ 229.297135][ T8164] ? get_pid_task+0x106/0x250 [ 229.297163][ T8164] ip_setsockopt+0x5a/0xf0 [ 229.297190][ T8164] tcp_setsockopt+0xa7/0x100 [ 229.297211][ T8164] smc_setsockopt+0x1b6/0xa40 [ 229.297229][ T8164] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 229.297255][ T8164] ? __pfx_smc_setsockopt+0x10/0x10 [ 229.297273][ T8164] ? __fget_files+0x215/0x3d0 [ 229.297297][ T8164] ? selinux_socket_setsockopt+0x6a/0x80 [ 229.297325][ T8164] ? __pfx_smc_setsockopt+0x10/0x10 [ 229.297345][ T8164] do_sock_setsockopt+0xf3/0x1d0 [ 229.297370][ T8164] __sys_setsockopt+0x195/0x220 [ 229.297395][ T8164] __x64_sys_setsockopt+0xbd/0x160 [ 229.297412][ T8164] ? do_syscall_64+0xae/0x790 [ 229.297434][ T8164] ? lockdep_hardirqs_on+0x7d/0x110 [ 229.297456][ T8164] do_syscall_64+0x123/0x790 [ 229.297480][ T8164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.297499][ T8164] RIP: 0033:0x7fef71d9e159 [ 229.297513][ T8164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.297528][ T8164] RSP: 002b:00007fef72c9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 229.297545][ T8164] RAX: ffffffffffffffda RBX: 00007fef72025fa0 RCX: 00007fef71d9e159 [ 229.297557][ T8164] RDX: 0008008000000010 RSI: 0000000000000000 RDI: 0000000000000003 [ 229.297567][ T8164] RBP: 00007fef72c9b090 R08: 00000000000000b8 R09: 0000000000000000 [ 229.297578][ T8164] R10: 0000200000005e40 R11: 0000000000000246 R12: 0000000000000001 [ 229.297588][ T8164] R13: 00007fef72026038 R14: 00007fef72025fa0 R15: 00007fffbeb957d8 [ 229.297613][ T8164] [ 229.353168][ T8158] SELinux: failed to load policy [ 229.548779][ T66] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 229.651873][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.713597][ T66] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 229.727598][ T66] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x61, changing to 0x1 [ 229.727657][ T66] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x1 has invalid maxpacket 26465, setting to 64 [ 229.727729][ T66] usb 5-1: config 0 interface 0 has no altsetting 0 [ 229.733510][ T66] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 229.733534][ T66] usb 5-1: Product: syz [ 229.733546][ T66] usb 5-1: Manufacturer: syz [ 229.733558][ T66] usb 5-1: SerialNumber: syz [ 229.755158][ T66] usb 5-1: config 0 descriptor?? [ 229.758438][ T8147] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 229.762669][ T66] usb 5-1: selecting invalid altsetting 0 [ 229.968570][ T2395] usb 5-1: USB disconnect, device number 12 [ 230.146161][ T8176] netlink: 36 bytes leftover after parsing attributes in process `syz.4.539'. [ 230.187761][ T44] kauditd_printk_skb: 7 callbacks suppressed [ 230.187779][ T44] audit: type=1400 audit(1789053383.284:651): avc: denied { bind } for pid=8172 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 230.269911][ T8179] ./mnt: Can't lookup blockdev [ 230.366274][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.543'. [ 230.366309][ T8183] netlink: 'syz.5.543': attribute type 13 has an invalid length. [ 230.366321][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.543'. [ 230.394448][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.543'. [ 230.394483][ T8183] netlink: 'syz.5.543': attribute type 13 has an invalid length. [ 230.398878][ T8184] netlink: 'syz.5.543': attribute type 13 has an invalid length. [ 230.399648][ T8184] netlink: 'syz.5.543': attribute type 13 has an invalid length. [ 230.403043][ T5824] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.403081][ T5824] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.403106][ T5824] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.403130][ T5824] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.586055][ T8188] lo: entered allmulticast mode [ 230.597850][ T8188] bond0: entered allmulticast mode [ 230.599204][ T8188] dummy0: entered allmulticast mode [ 230.599542][ T8188] eql: entered allmulticast mode [ 230.599814][ T8188] ifb0: entered allmulticast mode [ 230.600049][ T8188] ifb1: entered allmulticast mode [ 230.615951][ T8188] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 230.622459][ T7815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.642345][ T8188] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 230.646272][ T8188] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 230.646396][ T8188] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 230.646864][ T8188] hwsim0: entered allmulticast mode [ 230.647111][ T8188] ieee802154 phy0 wpan0: entered allmulticast mode [ 230.647598][ T8188] ieee802154 phy1 wpan1: entered allmulticast mode [ 230.647880][ T8188] teql0: entered allmulticast mode [ 230.648083][ T8188] tunl0: entered allmulticast mode [ 230.648198][ T8188] gre0: entered allmulticast mode [ 230.648282][ T8188] gretap0: entered allmulticast mode [ 230.648476][ T8188] erspan0: entered allmulticast mode [ 230.648560][ T8188] ip_vti0: entered allmulticast mode [ 230.648672][ T8188] ip6_vti0: entered allmulticast mode [ 230.648744][ T8188] sit0: entered allmulticast mode [ 230.648823][ T8188] ip6tnl0: entered allmulticast mode [ 230.648944][ T8188] ip6gre0: entered allmulticast mode [ 230.649031][ T8188] lapb0: entered allmulticast mode [ 230.651320][ T8188] lapb1: entered allmulticast mode [ 230.651809][ T8188] lapb2: entered allmulticast mode [ 230.652059][ T8188] lapb3: entered allmulticast mode [ 230.665854][ T8188] lapb4: entered allmulticast mode [ 230.666513][ T8188] lapb5: entered allmulticast mode [ 230.666616][ T8188] lapb6: entered allmulticast mode [ 230.667029][ T8188] lowpan0: entered allmulticast mode [ 230.667203][ T8188] macvlan0: entered allmulticast mode [ 230.667540][ T8188] lapb7: entered allmulticast mode [ 230.667745][ T8188] macvlan1: entered allmulticast mode [ 230.668084][ T8188] lapb8: entered allmulticast mode [ 230.669459][ T8188] netdevsim netdevsim1 eth2: entered allmulticast mode [ 230.671362][ T8188] netdevsim netdevsim1 eth3: entered allmulticast mode [ 230.683866][ T8188] netdevsim netdevsim1 eth4: entered allmulticast mode [ 230.692104][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.693591][ T8188] netdevsim netdevsim1 eth5: entered allmulticast mode [ 230.725965][ T8188] netdevsim netdevsim3 eth6: entered allmulticast mode [ 230.726699][ T8188] netdevsim netdevsim3 eth7: entered allmulticast mode [ 230.727365][ T8188] netdevsim netdevsim3 eth8: entered allmulticast mode [ 230.728106][ T8188] netdevsim netdevsim3 eth9: entered allmulticast mode [ 230.966204][ T8196] FAULT_INJECTION: forcing a failure. [ 230.966204][ T8196] name failslab, interval 1, probability 0, space 0, times 0 [ 230.966239][ T8196] CPU: 2 UID: 0 PID: 8196 Comm: syz.0.546 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.966262][ T8196] Tainted: [L]=SOFTLOCKUP [ 230.966268][ T8196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.966277][ T8196] Call Trace: [ 230.966283][ T8196] [ 230.966291][ T8196] dump_stack_lvl+0x100/0x190 [ 230.966322][ T8196] should_fail_ex.cold+0x5/0xa [ 230.966347][ T8196] should_failslab+0xc2/0x120 [ 230.966384][ T8196] __kmalloc_cache_noprof+0x91/0x6d0 [ 230.966410][ T8196] ? lock_acquire+0x1d1/0x380 [ 230.966429][ T8196] ? xfrm_policy_alloc+0x9f/0x420 [ 230.966461][ T8196] xfrm_policy_alloc+0x9f/0x420 [ 230.966482][ T8196] pfkey_compile_policy+0x26d/0xab0 [ 230.966508][ T8196] xfrm_user_policy+0x363/0x920 [ 230.966530][ T8196] ? __pfx_xfrm_user_policy+0x10/0x10 [ 230.966548][ T8196] ? cap_capable+0x107/0x430 [ 230.966574][ T8196] ? bpf_lsm_capable+0x9/0x10 [ 230.966602][ T8196] ? ns_capable+0xd2/0xf0 [ 230.966622][ T8196] do_ip_setsockopt+0x1b64/0x3310 [ 230.966651][ T8196] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 230.966685][ T8196] ? avc_has_perm+0x135/0x1e0 [ 230.966714][ T8196] ? __pfx___mutex_lock+0x10/0x10 [ 230.966740][ T8196] ? get_pid_task+0x106/0x250 [ 230.966767][ T8196] ip_setsockopt+0x5a/0xf0 [ 230.966794][ T8196] tcp_setsockopt+0xa7/0x100 [ 230.966815][ T8196] smc_setsockopt+0x1b6/0xa40 [ 230.966834][ T8196] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 230.966861][ T8196] ? __pfx_smc_setsockopt+0x10/0x10 [ 230.966879][ T8196] ? __fget_files+0x215/0x3d0 [ 230.966902][ T8196] ? selinux_socket_setsockopt+0x6a/0x80 [ 230.966930][ T8196] ? __pfx_smc_setsockopt+0x10/0x10 [ 230.966951][ T8196] do_sock_setsockopt+0xf3/0x1d0 [ 230.966976][ T8196] __sys_setsockopt+0x195/0x220 [ 230.967000][ T8196] __x64_sys_setsockopt+0xbd/0x160 [ 230.967017][ T8196] ? do_syscall_64+0xae/0x790 [ 230.967038][ T8196] ? lockdep_hardirqs_on+0x7d/0x110 [ 230.967059][ T8196] do_syscall_64+0x123/0x790 [ 230.967081][ T8196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.967099][ T8196] RIP: 0033:0x7f0bf879e159 [ 230.967114][ T8196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.967130][ T8196] RSP: 002b:00007f0bf96e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 230.967148][ T8196] RAX: ffffffffffffffda RBX: 00007f0bf8a25fa0 RCX: 00007f0bf879e159 [ 230.967159][ T8196] RDX: 0008008000000010 RSI: 0000000000000000 RDI: 0000000000000003 [ 230.967168][ T8196] RBP: 00007f0bf96e6090 R08: 00000000000000b8 R09: 0000000000000000 [ 230.967178][ T8196] R10: 0000200000005e40 R11: 0000000000000246 R12: 0000000000000001 [ 230.967188][ T8196] R13: 00007f0bf8a26038 R14: 00007f0bf8a25fa0 R15: 00007ffe402aab68 [ 230.967213][ T8196] [ 231.363442][ T44] audit: type=1400 audit(1789053384.464:652): avc: denied { write } for pid=8208 comm="syz.4.551" name="functions" dev="configfs" ino=12484 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 231.739101][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.905163][ T8224] No control pipe specified [ 231.978732][ T8215] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 232.053572][ T44] audit: type=1400 audit(1789053385.154:653): avc: denied { setattr } for pid=8229 comm="syz.2.558" name="NETLINK" dev="sockfs" ino=22112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.062953][ T8215] bond1 (unregistering): Released all slaves [ 232.513683][ T8241] FAULT_INJECTION: forcing a failure. [ 232.513683][ T8241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.513724][ T8241] CPU: 2 UID: 0 PID: 8241 Comm: syz.0.563 Tainted: G L syzkaller #0 PREEMPT(full) [ 232.513757][ T8241] Tainted: [L]=SOFTLOCKUP [ 232.513765][ T8241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 232.513776][ T8241] Call Trace: [ 232.513784][ T8241] [ 232.513792][ T8241] dump_stack_lvl+0x100/0x190 [ 232.513830][ T8241] should_fail_ex.cold+0x5/0xa [ 232.513860][ T8241] _copy_from_user+0x2e/0xd0 [ 232.513884][ T8241] copy_from_sockptr_offset.constprop.0+0x12c/0x150 [ 232.513911][ T8241] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 232.513940][ T8241] ? tcp_setsockopt+0xae/0x100 [ 232.513962][ T8241] smc_setsockopt+0x299/0xa40 [ 232.513983][ T8241] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 232.514015][ T8241] ? __pfx_smc_setsockopt+0x10/0x10 [ 232.514036][ T8241] ? __fget_files+0x215/0x3d0 [ 232.514066][ T8241] ? selinux_socket_setsockopt+0x6a/0x80 [ 232.514100][ T8241] ? __pfx_smc_setsockopt+0x10/0x10 [ 232.514125][ T8241] do_sock_setsockopt+0xf3/0x1d0 [ 232.514155][ T8241] __sys_setsockopt+0x195/0x220 [ 232.514183][ T8241] __x64_sys_setsockopt+0xbd/0x160 [ 232.514205][ T8241] ? do_syscall_64+0xae/0x790 [ 232.514233][ T8241] ? lockdep_hardirqs_on+0x7d/0x110 [ 232.514259][ T8241] do_syscall_64+0x123/0x790 [ 232.514298][ T8241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.514319][ T8241] RIP: 0033:0x7f0bf879e159 [ 232.514338][ T8241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.514357][ T8241] RSP: 002b:00007f0bf96e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 232.514379][ T8241] RAX: ffffffffffffffda RBX: 00007f0bf8a25fa0 RCX: 00007f0bf879e159 [ 232.514392][ T8241] RDX: 0008008000000010 RSI: 0000000000000000 RDI: 0000000000000003 [ 232.514405][ T8241] RBP: 00007f0bf96e6090 R08: 00000000000000b8 R09: 0000000000000000 [ 232.514418][ T8241] R10: 0000200000005e40 R11: 0000000000000246 R12: 0000000000000001 [ 232.514432][ T8241] R13: 00007f0bf8a26038 R14: 00007f0bf8a25fa0 R15: 00007ffe402aab68 [ 232.514462][ T8241] [ 232.771882][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.950890][ T8248] __nla_validate_parse: 7 callbacks suppressed [ 232.950911][ T8248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 232.973414][ T8249] jffs2: notice: (8249) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 233.110624][ T8252] qrtr: Invalid version 0 [ 233.141678][ T44] audit: type=1400 audit(1789053386.244:654): avc: denied { module_request } for pid=8254 comm="syz.0.569" kmod="nfnetlink-subsys-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 233.655314][ T7815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.756173][ T44] audit: type=1400 audit(1789053386.864:655): avc: denied { write } for pid=8273 comm="syz.2.573" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 233.815005][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.165752][ T8284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.577'. [ 234.208532][ T44] audit: type=1400 audit(1789053387.314:656): avc: denied { shutdown } for pid=8283 comm="syz.4.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.209008][ T44] audit: type=1400 audit(1789053387.314:657): avc: denied { block_suspend } for pid=8283 comm="syz.4.575" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 234.239488][ T8285] netlink: 'syz.4.575': attribute type 1 has an invalid length. [ 234.367552][ T8296] FAULT_INJECTION: forcing a failure. [ 234.367552][ T8296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.367613][ T8296] CPU: 2 UID: 0 PID: 8296 Comm: syz.0.581 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.367639][ T8296] Tainted: [L]=SOFTLOCKUP [ 234.367646][ T8296] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 234.367657][ T8296] Call Trace: [ 234.367664][ T8296] [ 234.367671][ T8296] dump_stack_lvl+0x100/0x190 [ 234.367703][ T8296] should_fail_ex.cold+0x5/0xa [ 234.367729][ T8296] _copy_from_iter+0x1f4/0x1690 [ 234.367752][ T8296] ? __pfx__copy_from_iter+0x10/0x10 [ 234.367770][ T8296] ? trace_kmalloc+0xeb/0x110 [ 234.367793][ T8296] ? __kasan_kmalloc+0xaa/0xb0 [ 234.367813][ T8296] ? __kmalloc_noprof+0x350/0x840 [ 234.367832][ T8296] ? qrtr_tun_write_iter+0xc1/0x1b0 [ 234.367856][ T8296] qrtr_tun_write_iter+0xe7/0x1b0 [ 234.367877][ T8296] vfs_write+0x6af/0x1050 [ 234.367895][ T8296] ? __pfx_qrtr_tun_write_iter+0x10/0x10 [ 234.367916][ T8296] ? __pfx_vfs_write+0x10/0x10 [ 234.367932][ T8296] ? find_held_lock+0x2b/0x80 [ 234.367973][ T8296] ksys_write+0x12a/0x250 [ 234.367991][ T8296] ? __pfx_ksys_write+0x10/0x10 [ 234.368015][ T8296] do_syscall_64+0x123/0x790 [ 234.368042][ T8296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.368060][ T8296] RIP: 0033:0x7f0bf879e159 [ 234.368076][ T8296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.368093][ T8296] RSP: 002b:00007f0bf96e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.368112][ T8296] RAX: ffffffffffffffda RBX: 00007f0bf8a25fa0 RCX: 00007f0bf879e159 [ 234.368123][ T8296] RDX: 00000000000000c8 RSI: 00002000000002c0 RDI: 0000000000000003 [ 234.368134][ T8296] RBP: 00007f0bf96e6090 R08: 0000000000000000 R09: 0000000000000000 [ 234.368144][ T8296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.368155][ T8296] R13: 00007f0bf8a26038 R14: 00007f0bf8a25fa0 R15: 00007ffe402aab68 [ 234.368180][ T8296] [ 234.850618][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.111998][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.586'. [ 235.115657][ T8317] IPv6: sit1: Disabled Multicast RS [ 235.116509][ T8317] sit1: entered allmulticast mode [ 235.256577][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.586'. [ 235.355840][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.355877][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.355900][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.355921][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.355941][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.355961][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.355982][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356002][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356023][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356043][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356064][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356085][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356105][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356124][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356144][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356163][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356191][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356212][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356233][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356251][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356270][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356290][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356309][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356327][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356348][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356371][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356392][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356411][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356432][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356451][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356471][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356489][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356509][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356529][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356548][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356567][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356586][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356606][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356624][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356643][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356663][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356682][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356704][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356725][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356744][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356764][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356785][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356804][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356823][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356843][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356860][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356879][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356899][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356919][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356938][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356957][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356975][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.356994][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.357014][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.357034][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.357055][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.357075][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.357096][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.357118][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.357138][ T8322] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20003 [ 235.445786][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.445800][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.445868][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.445875][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.445942][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.445949][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.446052][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.446060][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.446130][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.446136][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.446203][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.446209][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.446275][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.446282][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.446345][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.446351][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.446413][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.446420][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.446484][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.446490][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.446550][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.446557][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.446622][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.446628][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.446703][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.446709][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.446775][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.446782][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.446847][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.446854][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.446919][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.446925][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.446993][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.447000][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.447066][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.447072][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.447138][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.447144][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.447210][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.447216][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.447285][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.447292][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.447351][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.447357][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.447414][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.447421][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.447480][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.447485][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.447543][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.447550][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.447642][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.447649][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.447723][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.447730][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.447797][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.447803][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.448236][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.448243][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.448312][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.448318][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.448484][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.448492][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.448559][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.448565][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.448636][ T8326] binder: BINDER_SET_CONTEXT_MGR already set [ 235.448643][ T8326] binder: 8321:8326 ioctl 4018620d 200000000240 returned -16 [ 235.464984][ T44] audit: type=1400 audit(1789053388.534:658): avc: denied { set_context_mgr } for pid=8321 comm="syz.2.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 235.665740][ T8331] netlink: 32 bytes leftover after parsing attributes in process `syz.5.589'. [ 235.851001][ T2395] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 235.889213][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.029317][ T2395] usb 9-1: New USB device found, idVendor=19d2, idProduct=0089, bcdDevice=d8.af [ 236.030461][ T2395] usb 9-1: config 10 has an invalid interface number: 57 but max is 2 [ 236.030482][ T2395] usb 9-1: config 10 has an invalid interface number: 154 but max is 2 [ 236.030499][ T2395] usb 9-1: config 10 has an invalid interface number: 217 but max is 2 [ 236.030513][ T2395] usb 9-1: config 10 has no interface number 0 [ 236.030525][ T2395] usb 9-1: config 10 has no interface number 1 [ 236.030537][ T2395] usb 9-1: config 10 has no interface number 2 [ 236.030578][ T2395] usb 9-1: config 10 interface 57 altsetting 8 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 236.030598][ T2395] usb 9-1: config 10 interface 57 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 236.030613][ T2395] usb 9-1: config 10 interface 57 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 236.030630][ T2395] usb 9-1: config 10 interface 57 altsetting 8 has an endpoint descriptor with address 0x14, changing to 0x4 [ 236.030648][ T2395] usb 9-1: config 10 interface 57 altsetting 8 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 236.030667][ T2395] usb 9-1: config 10 interface 57 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 236.030681][ T2395] usb 9-1: config 10 interface 57 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 236.030697][ T2395] usb 9-1: config 10 interface 57 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 236.030720][ T2395] usb 9-1: config 10 interface 154 altsetting 3 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 236.030740][ T2395] usb 9-1: config 10 interface 154 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 236.030772][ T2395] usb 9-1: config 10 interface 154 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 236.030788][ T2395] usb 9-1: config 10 interface 154 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 236.030803][ T2395] usb 9-1: config 10 interface 154 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 236.030820][ T2395] usb 9-1: config 10 interface 154 altsetting 3 endpoint 0xA has an invalid bInterval 0, changing to 4 [ 236.030839][ T2395] usb 9-1: config 10 interface 154 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 236.030855][ T2395] usb 9-1: config 10 interface 154 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 236.030872][ T2395] usb 9-1: config 10 interface 154 altsetting 3 endpoint 0x8 has an invalid bInterval 64, changing to 4 [ 236.030890][ T2395] usb 9-1: config 10 interface 154 altsetting 3 endpoint 0x8 has invalid maxpacket 1024, setting to 1023 [ 236.030911][ T2395] usb 9-1: config 10 interface 154 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 236.030934][ T2395] usb 9-1: config 10 interface 217 altsetting 197 has a duplicate endpoint with address 0xB, skipping [ 236.030951][ T2395] usb 9-1: config 10 interface 57 has no altsetting 0 [ 236.030965][ T2395] usb 9-1: config 10 interface 154 has no altsetting 0 [ 236.030978][ T2395] usb 9-1: config 10 interface 217 has no altsetting 0 [ 236.031465][ T2395] usb 9-1: string descriptor 0 read error: -22 [ 236.031558][ T2395] usb 9-1: Dual-Role OTG device on HNP port [ 236.031861][ T2395] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.124141][ T8325] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 236.126229][ T2395] option 9-1:10.57: GSM modem (1-port) converter detected [ 236.139069][ T2395] option 9-1:10.154: GSM modem (1-port) converter detected [ 236.360408][ T8346] bond0: Unable to set up delay as MII monitoring is disabled [ 236.365965][ T8346] bond0 (unregistering): Released all slaves [ 236.449637][ T44] audit: type=1400 audit(1789053389.554:659): avc: denied { mount } for pid=8324 comm="syz.4.588" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 236.546420][ T8348] qrtr: Invalid version 0 [ 236.681870][ T5853] usb 9-1: USB disconnect, device number 4 [ 236.685132][ T5853] option 9-1:10.57: device disconnected [ 236.698828][ T7815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.733684][ T5853] option 9-1:10.154: device disconnected [ 236.930233][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.113096][ T8359] netlink: 32 bytes leftover after parsing attributes in process `syz.0.598'. [ 237.214626][ T44] audit: type=1400 audit(1789053390.314:660): avc: denied { write } for pid=8360 comm="syz.0.599" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 237.238603][ T44] audit: type=1400 audit(1789053390.324:661): avc: denied { unmount } for pid=6516 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 237.326104][ T8367] qrtr: Invalid version 0 [ 237.326152][ T8367] FAULT_INJECTION: forcing a failure. [ 237.326152][ T8367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.326188][ T8367] CPU: 1 UID: 0 PID: 8367 Comm: syz.2.602 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.326211][ T8367] Tainted: [L]=SOFTLOCKUP [ 237.326217][ T8367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.326227][ T8367] Call Trace: [ 237.326233][ T8367] [ 237.326239][ T8367] dump_stack_lvl+0x100/0x190 [ 237.326267][ T8367] should_fail_ex.cold+0x5/0xa [ 237.326291][ T8367] _copy_to_user+0x32/0xd0 [ 237.326312][ T8367] simple_read_from_buffer+0xcb/0x170 [ 237.326333][ T8367] proc_fail_nth_read+0x1af/0x230 [ 237.326354][ T8367] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.326373][ T8367] ? rw_verify_area+0xce/0x6d0 [ 237.326396][ T8367] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.326415][ T8367] vfs_read+0x1e4/0xb40 [ 237.326431][ T8367] ? lock_acquire+0x1d1/0x380 [ 237.326448][ T8367] ? __fget_files+0x34/0x3d0 [ 237.326468][ T8367] ? __pfx_vfs_read+0x10/0x10 [ 237.326482][ T8367] ? find_held_lock+0x2b/0x80 [ 237.326505][ T8367] ? __fget_files+0x215/0x3d0 [ 237.326529][ T8367] ? __fget_files+0x21f/0x3d0 [ 237.326554][ T8367] ksys_read+0x12a/0x250 [ 237.326571][ T8367] ? __pfx_ksys_read+0x10/0x10 [ 237.326594][ T8367] do_syscall_64+0x123/0x790 [ 237.326619][ T8367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.326637][ T8367] RIP: 0033:0x7fef71d5e98e [ 237.326652][ T8367] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 237.326666][ T8367] RSP: 002b:00007fef72c9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 237.326682][ T8367] RAX: ffffffffffffffda RBX: 00007fef72c9b6c0 RCX: 00007fef71d5e98e [ 237.326693][ T8367] RDX: 000000000000000f RSI: 00007fef72c9b0a0 RDI: 0000000000000004 [ 237.326702][ T8367] RBP: 00007fef72c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 237.326711][ T8367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.326721][ T8367] R13: 00007fef72026038 R14: 00007fef72025fa0 R15: 00007fffbeb957d8 [ 237.326744][ T8367] [ 237.530276][ T44] audit: type=1400 audit(1789053390.634:662): avc: denied { read } for pid=8377 comm="syz.5.605" dev="nsfs" ino=4026532896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 237.530628][ T44] audit: type=1400 audit(1789053390.634:663): avc: denied { open } for pid=8377 comm="syz.5.605" path="net:[4026532896]" dev="nsfs" ino=4026532896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 237.533943][ T8379] qrtr: Invalid version 0 [ 237.641170][ T5831] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 237.768452][ T5831] usb 9-1: device descriptor read/64, error -71 [ 237.806258][ T44] audit: type=1400 audit(1789053390.904:664): avc: denied { create } for pid=8380 comm="syz.2.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 237.821969][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.822016][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.863043][ T8390] FAULT_INJECTION: forcing a failure. [ 237.863043][ T8390] name failslab, interval 1, probability 0, space 0, times 0 [ 237.863074][ T8390] CPU: 3 UID: 0 PID: 8390 Comm: syz.5.610 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.863096][ T8390] Tainted: [L]=SOFTLOCKUP [ 237.863109][ T8390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 237.863117][ T8390] Call Trace: [ 237.863123][ T8390] [ 237.863129][ T8390] dump_stack_lvl+0x100/0x190 [ 237.863158][ T8390] should_fail_ex.cold+0x5/0xa [ 237.863180][ T8390] should_failslab+0xc2/0x120 [ 237.863199][ T8390] kmem_cache_alloc_noprof+0x92/0x6a0 [ 237.863218][ T8390] ? do_getname+0x35/0x390 [ 237.863242][ T8390] do_getname+0x35/0x390 [ 237.863264][ T8390] do_sys_openat2+0xc7/0x1e0 [ 237.863284][ T8390] ? __pfx_do_sys_openat2+0x10/0x10 [ 237.863304][ T8390] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 237.863334][ T8390] __x64_sys_openat+0x12d/0x210 [ 237.863355][ T8390] ? __pfx___x64_sys_openat+0x10/0x10 [ 237.863382][ T8390] do_syscall_64+0x123/0x790 [ 237.863402][ T8390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.863417][ T8390] RIP: 0033:0x7effeb95e98e [ 237.863431][ T8390] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 237.863445][ T8390] RSP: 002b:00007effec7cef18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 237.863461][ T8390] RAX: ffffffffffffffda RBX: 00007effec7cf6c0 RCX: 00007effeb95e98e [ 237.863471][ T8390] RDX: 0000000000000000 RSI: 00007effeba34776 RDI: ffffffffffffff9c [ 237.863504][ T8390] RBP: 00007effeba3503b R08: 0000000000000000 R09: 0000000000000000 [ 237.863515][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.863525][ T8390] R13: 00007effebc26038 R14: 00007effebc25fa0 R15: 00007fff91c440f8 [ 237.863547][ T8390] [ 237.867972][ T8381] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 237.867994][ T8381] overlayfs: failed to set xattr on upper [ 237.867999][ T8381] overlayfs: ...falling back to redirect_dir=nofollow. [ 237.868005][ T8381] overlayfs: ...falling back to index=off. [ 237.868010][ T8381] overlayfs: ...falling back to uuid=null. [ 238.009335][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.068730][ T5831] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 238.113293][ T8394] netlink: 16 bytes leftover after parsing attributes in process `syz.5.611'. [ 238.118769][ T8398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.157898][ T8400] syzkaller1: entered promiscuous mode [ 238.157920][ T8400] syzkaller1: entered allmulticast mode [ 238.159869][ T44] audit: type=1400 audit(1789053391.244:665): avc: denied { read } for pid=8393 comm="syz.5.611" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 238.164755][ T8387] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 238.170934][ T8387] netlink: 'syz.0.609': attribute type 10 has an invalid length. [ 238.170953][ T8387] netlink: 55 bytes leftover after parsing attributes in process `syz.0.609'. [ 238.198463][ T5831] usb 9-1: device descriptor read/64, error -71 [ 238.216248][ T8399] BUG: using smp_processor_id() in preemptible [00000000] code: syz.2.612/8399 [ 238.216273][ T8399] caller is net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 238.216308][ T8399] CPU: 3 UID: 0 PID: 8399 Comm: syz.2.612 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.216328][ T8399] Tainted: [L]=SOFTLOCKUP [ 238.216333][ T8399] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.216342][ T8399] Call Trace: [ 238.216347][ T8399] [ 238.216353][ T8399] dump_stack_lvl+0x100/0x190 [ 238.216375][ T8399] check_preemption_disabled+0xd2/0xe0 [ 238.216398][ T8399] ? tun_queue_purge+0x1ee/0x340 [ 238.216411][ T8399] net_dm_packet_trace_kfree_skb_hit+0x119/0x350 [ 238.216431][ T8399] ? tun_queue_purge+0x1ee/0x340 [ 238.216445][ T8399] trace_kfree_skb+0x18b/0x230 [ 238.216466][ T8399] sk_skb_reason_drop+0xb7/0x1b0 [ 238.216484][ T8399] tun_queue_purge+0x1ee/0x340 [ 238.216502][ T8399] __tun_detach+0xb70/0x1850 [ 238.216515][ T8399] ? locks_remove_file+0xd1/0x600 [ 238.216543][ T8399] ? __pfx_tun_chr_close+0x10/0x10 [ 238.216557][ T8399] tun_chr_close+0xc2/0x220 [ 238.216571][ T8399] ? __pfx_tun_chr_close+0x10/0x10 [ 238.216584][ T8399] __fput+0x3ff/0xb50 [ 238.216612][ T8399] task_work_run+0x150/0x240 [ 238.216634][ T8399] ? __pfx_task_work_run+0x10/0x10 [ 238.216660][ T8399] exit_to_user_mode_loop+0x1d8/0x700 [ 238.216678][ T8399] ? rcu_is_watching+0x13/0xc0 [ 238.216698][ T8399] do_syscall_64+0x661/0x790 [ 238.216718][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.216734][ T8399] RIP: 0033:0x7fef71d9e159 [ 238.216746][ T8399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.216759][ T8399] RSP: 002b:00007fffbeb95938 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 238.216774][ T8399] RAX: 0000000000000000 RBX: 00007fffbeb95a20 RCX: 00007fef71d9e159 [ 238.216783][ T8399] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 238.216791][ T8399] RBP: 000000000003a0e3 R08: 0000000000000001 R09: 0000000000000000 [ 238.216799][ T8399] R10: 0000001b33320000 R11: 0000000000000246 R12: 00007fffbeb95a60 [ 238.216808][ T8399] R13: 00007fef72025fac R14: 000000000003a126 R15: 00007fef72025fa0 [ 238.216828][ T8399] [ 238.335343][ T5831] usb usb9-port1: attempt power cycle [ 238.706384][ T5831] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 238.719146][ T5831] usb 9-1: device descriptor read/8, error -71 [ 238.981211][ T5831] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 239.011839][ T5831] usb 9-1: device descriptor read/8, error -71 [ 239.088874][ T5836] net_ratelimit: 33 callbacks suppressed [ 239.088895][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.118922][ T5831] usb usb9-port1: unable to enumerate USB device [ 240.128794][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.849864][ T7814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.178159][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.210295][ T2395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.251362][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.892287][ T7815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.288863][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.328944][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.370821][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.929673][ T7815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.416922][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.051739][ T7799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog