last executing test programs: 11m1.094837508s ago: executing program 0 (id=1667): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x4}]}, 0x20}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="f3450fbc475aa766ba4200ed66baf80cb8398a888aef66bafc0cb0f0ee000000400f22c042a7a70f49f70f00d86536400f00d335000004000f22c066ba200066ed", 0x41}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m0.578691699s ago: executing program 0 (id=1671): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000001c0)='./file1\x00', 0x60) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat$null(r0, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x103) symlink(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='./file0\x00') 11m0.464521996s ago: executing program 0 (id=1673): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000000)=""/24, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r0, r2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000480)={0x0, r2}) 11m0.206120963s ago: executing program 0 (id=1675): syz_usb_connect(0x931df8e112793e69, 0x24, &(0x7f0000001280)=ANY=[], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x2, &(0x7f00000004c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_open_dev$I2C(0x0, 0x1, 0x402) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x94) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{0x0}], 0x1, 0x401, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}}, 0x20}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r7], &(0x7f0000000200), &(0x7f0000000580)=[r6], &(0x7f0000000040)}) keyctl$set_reqkey_keyring(0xe, 0x3) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r8, 0xee01, 0x0) keyctl$setperm(0x5, r8, 0x30925) 10m57.103968944s ago: executing program 0 (id=1688): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 10m55.669607645s ago: executing program 0 (id=1693): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) 10m39.960105754s ago: executing program 32 (id=1693): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) 10m35.513704965s ago: executing program 4 (id=1762): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x36}}, 0x4004815) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x78, 0x0, 0x7, {0xf, 0xcbff, 0x0, {0x5, 0x5, 0x3, 0x6c, 0x7, 0x6, 0x1, 0x6, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) r3 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000300)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x18000], [0x4]], '\x00', [{}, {0x0, 0x10}, {}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {}, {}, {0x0, 0x3}, {0x0, 0xfffffffe}], '\x00', 0x1000}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) prctl$PR_SET_VMA(0x53564d41, 0x500, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) fcntl$addseals(r3, 0x409, 0x8) 10m34.305045797s ago: executing program 4 (id=1766): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair(0x29, 0x100000005, 0x0, &(0x7f0000000000)) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000000)) 10m34.041209582s ago: executing program 4 (id=1769): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001100)={r1, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) 10m33.760339815s ago: executing program 4 (id=1770): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) 10m33.356667262s ago: executing program 4 (id=1772): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = getpgrp(0xffffffffffffffff) setpgid(r1, r1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r2, &(0x7f0000033240)=""/102384, 0x18ff0, 0x41c) 10m32.857352809s ago: executing program 4 (id=1774): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x77359400}}) 10m32.140570141s ago: executing program 33 (id=1774): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x77359400}}) 23.029161189s ago: executing program 5 (id=3274): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000140)={0xc, 0x0, 0x0, 0x0, 'syz0\x00'}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x108060a, 0x5, 0x0, 0x5, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006380)="7f5912d07634539c3b2e15a57b311187a3eb119eb4b279cacf0b94d44882da90bb8c7bf605806fd007bddf798e1fed05db9ef39d3dff16e6eb4e5e642774588b2020a414a4574d1e0aa3474184583a655385fb5e7e632304e818af022a134095ea51f1f77a9472dabe407b36f0c47e318bfdd7c6ecb5a5bc07f28701201245abe626ab4592fac5b1544570a665a5e559eecf9505a828f5b0199a5dc33934b75bebb03744f92918f93553eb072cd2a940a5931a5907f82fc99d519f02287cac4341c4637dd8110214e9634088fc6b5a77a5065c4798538f41b263c6329df4d668d018f7ac9634910969342c836d78c7baa9893cef90deb8cbaa8cac81c262016a8dac72fa5c3d5094a8b64abbf82594b8cb1dc876e01a39fc9a26874052c47ec3ed015bc85933a98a61bbc108292a6c7932421162c82ec64518ce13f0fda30adf97b5c0d70fb0c69398e78d9dabe99d3d408bfef6e2518c820217b4a1cee43704fa5b5c4d4013bb61f631b813b8272188d403821fafe0ee4b5e09671c177e34a2566939920fcda640007845e4d19e2ce3693cea27e7ec2482ee603589260503c567e3dd320923e651d2530afe927013724b1ccc22c390c9e53a47331789172fb44c442cf558f9990badcbf377b731aa83d7b73a6675c687f16c9b96b59e0a6e262da754b1bba316a31fc262561d4628e33de9969794b879eb7ceee36abb30f5f977198bed19fbc4c4f13f32a3909fa76a3beef541a5dfff9ff8609fbfaba986e3a02b23dc0938e7e5b476f5b256a3e3333caea34de6410f75d1daedf4176f6e5a9fb915647bb65302b49895cfb699131513e1d7d937f8e452fe350a78783de31c96535c742b35edc7b117bc2fd2df6cdbef0cfa1000bade8a6c8a06019592b7dc144ffa88a01fb1f6093e82f63b05830f414a07779226b4928f5edc6d592a294c030d518f7e350b2e2536a2bae2616a574b63415c952c28cf6a82553411d305fdc33d1447b7356b8726b67d23dc0749bbb1230b18abfdb6a0fd35cc1489fcdd90aa83edcc613a77db36dd42fc5b83635df5c2acfddab054303e7c859c8bd5a21493742d8fc1adb1ae3f68f6103d65709a8d917292e648c5621691425a203de2e82e9e6bcd53a7f3e90238e89b2b05202ceafc72bb2f997a99487aa993a72d0cb44b345b3982784a78aafe5e5b6ddf2a17e4dca9a5433481fd8e60195832b704a1c186dc3317888c8c0849f1029d0df6af3a5fc93c8e643287ee38580ff450a259dc4bd45343aa453f462e92302c020ce91f26b1c2b66764cac41d2e809a46e51ac50121172759ba4c791cfc8856f7676ad8020433e00bb80e46d9d7709e196565b3a7b18270508d1e0023960e5b335bd901465dc328a581ca918dd295a110aa9f25ebb51ae5523eb619431a9db2b6e046cd94aae4b985bd663c6c6769015f49cb40d3f4b520c1022683487b170c9e47ed306097f1208a92ecf6727f7f276d19bcdfb987ca8b7f54732d0908f98ccac0ba9f6905e194da99608598ee87a6992c4dd33fad2e5e463c995babd0c7dad010499ee2cbf0f2fb63c7678d681a8b63d8a1316fcac3a107f8723dc004aaf7d9224090b6c78212172884eda7089cac24f196db5d3bd2747649e6fee4ebafb3d883df077f99bb945220161a3323aaa09a5caba3348a2d78096a18625aece41aad5cf9fc9cdb590f0cabb882839474c53a14fdbd34772f69cdd369260309a9500af55572adb7b23d4fdbfaa807242ba1130f7029fbcffde2da9b8a0814840e9b241febe92d6247419ae4cd15f5b073c7dc03e4541e24291ac5b4e29cde2649ca6cb7952e81308ae249906ca9d97d8ceb129b0b2b44a84e268b12b8a373965b877028cae0ead133c8422052a8f91d92f6695b6a3e9c36661c0cb6d03dc795490b09f62210803d88dfb3777b16e1485c9c7ce4a4becc718c9da4aaa32f5d9da57ffbfe6633a302b10c676a0e047f1b24e8dac251dffc841a2906002abdd64334a2cc50db924e196b6cee0f9261a87793dcbf8dcf1363b91b33dfcbca15798e9089cab241884ddacd61fa07f8797cb21f9c1f4f1d7fd8d0f2e19b99b40173853282bbe94e5c867006949b55c1a27e12fef9f264d2a14700fb5c828e21293b38502dadfd2e96dbbe866547a460a737951e55803fe5ed0b448aa1fbe65de9117d066b2f46dbe658510434d2d3fabc734fc5632fd16a3ddf04a0da7067908f3fe7d9c046ec9d528808d0f4a755a4467609386b31104db69605b78507f83995c297d049d6b028ffe981f0ecd972f23ca43096a955d437f604355e49e1d9fac491f955fae46a150555bd91173091a016aeddc51399b8dd20bb6e8e3060da97180d79a8eea89562bbe4dd19f5c36686c3ab5de9cdce1a241b407c78b2a8886b3e316f5163ec082bb1de53ac1797a633587d9319f3626ce3b052107cd55a6c44b97e27aaf9bf5fe0d4475ae2090920865b0a0f32567351c4ac9859e57cdd8254a58d2dc5d67dd16b513a02954d7c99a9544ce5d8ea8a59a06321083690cf6007bb941cafccb17a3b81c96453964cb469e07e8543407f2c03105d88bbd2073cf9fdc51c9fcf58854417f49141efb66b0f98b36b89eccfb616992286ebaa8f325eb9ca85a45d8b1dfa7a18dd46516ad40d2f46365fac4cbb044624139bb5a0bb0ed062edfa0260ea03b9268f18a7d94d83d4411ee46896ef955aada3e31d29e83414ac0a64353b6498c8f1ef37d051b38291369f6f124913d3fef14af925ab93a34d58f569f3c4f12aa458c85b2b29249e4c868e0bce4791c7f7226bf050c23ad590f6231315f1c9a087b3041ce33f6971c4d5a20f85bb103edd586184e90a34dd5c9e3eb1fea74fe413c503c5d48c70e3fc1d210985644ce5ce0b5636751947ae22e3dd6fa39dcbe1ee3def6a3097c8d9836db3b9ce1bcff91451bc46ef3000b5dc66b007ff2ace898a81631c5728c9de7710c41691332a268b18f0eec37ed7944ad0049936e9fe4df157a8eb324ef0d9954ee8da259c700b05bea37e4238c7be1ead4ca18ef228a15d9828476e899b77821f27512ad3ca27e2bdc769890e6addc2bc1ade2a5434421d627d978b72ce2fab1ee5769646881a2ecea9743ec88b48442806e946c27213bd7fe137d3979dcf477eee9ebec8fbe72fd9b6123c0523e83045dc88ef385d961cb4b48320e16350846ebb36accdcfe95cf541347dbdd7817e3e7d91b71a1dcb23ba7156484f90f789ba880b8019cb6a248f3db56e5cf7af156c6e84f58e8ffdc322b76dcd1b4ca02cb6fdd1d210807c34febac4c49ddb8257aa18ad782efca3406f34c6500fb65cbfec98077b50ef7a21e366e0fad97c6f6ca5d69b93639f7c608dae3e6b5c282ce130a8ef23908a626ef98e38bb9255ab6db1fdb48ca0d8f2d469123acbf6a1a83ca4f08d21bbf638ffe553fb4faa83993d9fbff7a9af18e21c74ffb720f41e02912d4507aee16acd64a34d2727bed087fa30c34202b34003330c15fbde12d5ba8e7a88b23580000000000000008ea66e323579f0ffa9cbb40ebef25deb8a88f82a4e29441fdfcdb743bf98d1ac091677fd8fd3f172116697db4b2d1186303f68b71eae90dbcbee1cbd6eb49702dbf2de4f7f247bd071446fc2edeb68df92fb4436a3773ccc865587202f13083008f1dd964fc912c29bb0072f381b9d042d0fa058faba9d68886cd9fba2f41dd084ed13fbfe9e97afca35024025a83a6c6bbd798c8dae5bffdf486e88b6c32357b20b4b0fbea04c8cef7178a05d64bfcf836cd919216accd05b99ed4390b0016accac7e0fedacefb7ef4580ba6202aa241989fba902b5502bd4d6a3fb0c62c236f78969d395c67cf1ad2f5c250d8f8076189766d6e20ae9de72be45c2d68b5733a6d1f467db1b16a55da3245160188a217306298e5a86a4c4cad1ae72d6287c6b56684ab4452d54995322eb19c15724447b39c196e2056937fb2b956684c06bda117908000000f4524ddfab9c9fa5872f9fab3a5c3e1de343cb59744978ff286e037b2b8a122c6774291d713cd5b233ea9359764c528676e092840cfd716d995bdbae8dded68c71b8865490946df93c6c617b77ce830a1fb17b3459917ddb1797641ad2e5fa12a4ea8fdd0c914024913ea45237010d8f725c0d6ca6775a22285dab06c48432cee3faccfeda5c7756001121286c6ba8f52740a76a66632142fd84a088f5a0809d49b4cb513630a94acd1f5f246a997c85e90c7b0f9e55b3454a13cbc30518d3979789b76492afd411574ed54f0e9858693dd29b96a20aa55c6835a40c44c84d523054dcaded22718e48708958f977f94cdb360464878f67e97fe2140233f15924071c78fe5ea27b7f9e7eb0cc08fe19703df61906177cb8377c16d50ede70d62f1d8c0f8068323cd5eab2f6fba57ab3574c4742e06031d5a75f3d000b56051f43f987472a5f582a83f4c99a4366ac8c66673da6a312fe4804fb185f3fcbf6f3ffda91f5ebf6467ce6baa992a850765d37de2b3f16fd3ca44854993082e987ca1f520e0c149cdf92f727566c4c5ebe3ecf376c67a5fa7d51942784ff35236a0940a5f275a9ab8c0c5caf68421a14834edc9c29fd3adaedf4cca2802aaa33283ac811d97ef4affbba7315ce7fa5dd2783a067f223a4a8235fd67c23fa535efb4547202d171b51050d508081be9fb6467e9e7d052a7fa8fa8534c440f9f22c8f3d763d89666046951fe85f977a7ad816fc42037adbbec0352ed2b3454fa433e31a30159b9a3d5777944258f01dfe9d38f67af3e85dbdf23e5bb841401b40afeaa708f0a06a2efa2289f9ebda77c2a1390b887bf4b3dd90e418955d05431fd524b481b8b51c523fb1a3d0339bc3999c0a14d643a6ea69346f46a554bd25be3263a3c5ac0848b152d3eed833e7f2a6ce3b0d4100e49319120d4c2b520205fa2a344ab087bec0f73968768d0188007603a77428f12026cf3b296823f3138315ff0f95f3c62c060acb1a11850b46d361ab41b7ad241e45246b091ee2d0c1d444290ff6669a34f1fd0020795fe89d4b67bf07f16c88c8987e7f72480ad42109b43f37e4c753495661b0514553532364638ca8152782b99804b6f9da69fb2b5b7f93acad94ccbadf6e6d9547852088945d3d8c4c5702b1323c47fdd4fc77fcfd61c7ea8b26cfd0954be063cca429cb9915b8a937833ff4c1f2bd620b08dc00ddaab4fa5e13a5f4f2127f0b63b7140dd14b1dee95f178d2bc33cef7e820e609aaa20a733931625227529c714530574bb8cb38e6baef0cefe9a9e3277a4e1534f249abed7f06c8470ff3723c9140f5ed466ba7b79ab2ed2e61d2f5826d72a560c8cc6cf6a64fb9e70b1d15b80f22cd86bbd38b5c46741e054204476f63651f3cc9bce975600abb3133e104fe0145383d0d320367df2dd202daeb7b51b4a1e4e7d36fd1c847965efd71430b8bcef773163b1e378e1381f05083304ea41ee8d37ecd988cc671270101ad4800706cf0387bd038a7164d1586ef5e8791cd6bc3a91bdcf35982d46d841acc8342544d557d369cb4a84589082bf9503d45659791e522bec6a5f61f740ca5540787dc4a6a9f567bb6c0b13d618e80b2b348adde16fc63b2052f381eab8c120f14ab623a4110030847db00ed2d19c0101991f82a8671738b68b6e0efaa8f771de3cb6c2165298df69383b775fafb7c249fd78ad2ee46390c1b905b3853680a80a1849952a10e69fa64d680cdeaf5a451408c5b5d64e0f244ee362f21f37c66b795d73647964d12e297f7f6b760ee4e4b46ef502a54483d3838674e1767eb93f91454f1dfb629e45ed71646f139b685cdac6c73afc20bf62b3b2dcd81d9adf65b4f4a5f2a2a2fa7e079d944739546462519521e523db10cbff9489d7ce84a78ed5fa80b2d5361f4829bfa4bef5c351c984cf58a5f227687eadceb8c0cdc51825a008f8bb8ebb549864b6fba1da22da5aa0a0161464695fad60e636e45091b6dee20498f33ff9f91c1ef927c90215cbf4f5711805eb13e0e65cf326627bcfdaf0bf07d5e9c53520b884411ed632f9f5169db46d674fd660637ab8ee1ca1aefee8ea4ab3b41e6fc18842a0a254db125243e4e996db939aab80b04d70fb22f3c1cf7edb1d18cb5af99be7dd4f01e2ee265109abc51845dcb3f5c8e8477fd7fa8fe41bd83809120428ea9dfef010005964d66ef96c1648516f1b0cacebd95ab20c2a2e2647c967c48c6c9b7977441a0dfeffba2beaec54a66f863c9ef3a4e2fc77928291753648b7abf3fc26128cb4eea246468b05cac113b3464546442e14d5aa760a3d7c481d238b2a5226bfe0dfd2dd5b2a9a5ad738c6a83e21312e0e11ea3daedaa7a6e527ec166337d24b083ccf97af580edb453dc1a7b841b7266ea143b294291ac5ed5dce7dac20d14bb6e53b64eec515515ef817611d22d3a306170d4f358f0b890411454e1bdf85ccc42589ba1a1d75289523e4aae1eb46328d0dac43539eab1d3aeca3db300e605c53cccf04d3688e5db58fe283b01745dc39baea5ff49db07deb7adeac2d3df45fa72f9fccc9d1947556fd8594faa393a2854691016eeea88e96272ee1156874b9ba78a4f71022e3ec2e0776f8db400e6b967be079684d3d80645125c488f5bc0a69a3d7e12bf187a41a8acc9b2f7a610798fb6e2e438b85a9012d6f6990c7b9a557b98d32753cc1786868dc864edd3f0edd8bbf48924fd09d0d7a2334bfcbb5786752765c8f33fc8cdab048b81607b1ba098ce44e6d99d8b1b08b5d19d177f6661c32031d475381c0c804c63d2b7ae9a2198c0d6114e7bdd0e01a4cbfc5c41e858d28f157efe5a52ffd6d70f2bef2066a2d65ec68ac1ea678588f1cf0c9eb030f34a2d99138c4a6a0f85edd8a382324c2c823a7bfc3db3e6822faa0ab1801361c1f23aff0fdb8fb27cdc1db4226d62c0101561e78b704854893c6bf0de79b45f87da7a8e4f65875842230d2bfa152e96fecbe4a7465fb400cb7790102d0a89f105e84a23173141245d641051b8d614d3be26423bc0d042990c62ea3b7392e7a8117e250348d3cf79be1529c8a764da382f019b5a750ab848ad03cf53921c8548318db7aaef2be3acce1a3d9a9715ebf6a5b53da18ef20b932d5926c3cb44c1a4e6ef83f2a84f8afa382d44ea35f17bc147ae1dc792784cfd9edeb9fe09f422aca81ec59688baf429509a6b27ad0f6e21c977756a022979c8a47d983d42a913d0ea6ecfd8bc0aaf9fba62a36d542710161a088656dca539a940ec6dc79ab197eebb803988674d93c8d604a5bcdcdeba44c331c72e58ff9320f39031fe711bca2e0269b1028862c2d2a6c8871a0f92dddd30629eafc739165a070c61c12be11bf3d3cabb31decf449059c99fcc12a1684d8cb48e496df33920dc0a4fd225981c0f45b7220fd9d9189808e4bb39e5accc10fd7a8f3cf1335cb9dc31043a1e2eaf75e0ba500d5ca4497b2924725c0892033eb0ef944e2fc204e9f1e177862af3d59190e2335061a76d4d3bd922d9bb72553a339dd1672b61a91a0d0e23ddf6b08bd13cdf82451b5e8fd3842ba71eebdde40f8563124fba86c3c500f2ceb7246967f497f1dd3e5e42f14774a909199dbec4b469b8b3b6b25a95caa86f334084d38d71d93a395acb14c145298c503f7f494bb9867c564ad7e32aa1ca7bcfa2181dc712165247462db25192f7cba05cee92826c0561303bc473c9485a989793b8bfc2d0285dfbb13c11a426dff4e404435e2e47760d45b76f91b6c7bf04d4504c2502293fc7b49d24fda5b5fcfabf714087582d25a69ead80222da1d574d599b39a0c54ea7709dea1798b9eddea5cff504cc5ae40c561976c11a514f2ba359f6791830926fa13ac7f71e7614d0233305d3ec694b7d31ef320a44079af2614956ba31a66b959a11a3bfbdb683037d6ca42d0e9bbd2d83af74fd4a73dd6537e393b7026169d3c0e017a9e3392e03e8d76cc0f5f0caad4926b3169d61ea09b6cd45e5f62aba4ecab5b053d54cdf8ec5a69320094d520f702cbd218125f24e38a5934a2f5f4d74c12df05cc0c7b3c36a37db2863e918a8cbc496fa77bf6109008e20602636ddbd53aec45741384aafd05ebbac9d6ddd8aeb3d75775bae5124cbc7fb5db4ce9c8af96ad05035a8dcb64c0b02f0669c65b07f60c9cb81e99462ef8318d0ab65b97d6a9271042f4d46a5d8ee42b90783db78827d018b8d392ab3eab88e06b409878fcf74067b1a1fede92874741cfde10bdb444819fb991c36c9dd458c8794e0b4bd9e3f7cd383c485e6a60fa4238b318e14896934d97b4b7993472f4f9f246ca7523e5979c984fd16248b087cc3eafd706328a3ec47f88247357c4b759a2a1f0efde24f4129fb612f8c3742847b39996487653d6bcaf5862dc1bca501abed2d0b5a23c1d2a62eb968acb01763718b27a57e99bcd66c9910d6d0bedc7e6197bd58267cb1a8c61eeef9f19aaa6a0cab7cc268e8bec46db3fbcf4de3e8abe483bb01811087fec18bbe471628c3bc80194d3661efa6d9130a524089b07d8cdf6198018a24d23bfee4a1664e68ae7c30f77bbbcc7116d9bda8a4e6c01f047a4ee60a09ab23a63e1bcdeb3869043efe60eb3b7a6beb366d11e786002b2e3d36d44f91ed87152697e456f8ebd2b0e15df21a773b1ea876319fada12bd340314944f8d9d90ea26380cd83692a2f634c241bfa0868fd7ba52a841ad418c97e818195047d6d11ade0aafabe0d627a68721f61f3758c40dd14498521966380d59e0cb621953f0ea908fd297178899b2e60c210479a4a9ef9a8cf1d2a0c2e909043ce75d2f4fb766eb166b995b714cfb71bad7462525aa15d3fc8462808f8a0cee080502765bb9d1e9912a9ba937a94e48708b531d5ba71bdddb97fe77dfc7fcbcc0ddbef56c1f78feff399eabe15aac18b95f0c88a40dd5ebbdcb3ae45ba66dc990e9267c5290f7b357e1ae5e354c72edab117bcc394e4e8a91d99ca2f000420ff9cb32f87c663c6bb9692cab44c5c26212dad70a5426ce7eee219cdeb6bcb65d9b1f957c3e495a1198a60dcf446f4b192fa50d8c4426b8ba3ef0e06be2d04d7e142e825718828617220349408bd313df2ae8f860058b169b7ec3416f4c73fbfe509b442b8332a7049e7dd59b77d199079c187f7afb9b869ddd27864fb1bd0ba7e0ff67ceefc88f86362540a3020b9a90d07b9634358142a4b095f3becfc810b2ca5d78361403cf09e59c3b747953ff3535bb9f99bfd20da8a64082fd8552739f622e5d24d2fee438083d839402aac872f3d98f394d56bb4564c8caac19ec4873ffd2dae20a0bd8f0781fb92984755014695ba1f3a2e01ce4fa33206b53138afdacf34c2be54b56cd76a9948013538c7ed8fa60055e9b60aafde90f50b4e0cc9b3009f45823f674f23ddd6cb2439c479e20ab975139055bc8ad72315c3c466093be1e06ad27f7601b9cfbce93f172143c6523e239fed636ece9407caa423db7e64d6ee1163976dd7f19c333d02d788111de7243b7dd6dba0a1d9957e758acd4ad9ceba61d0be6c2be89b65d18f1a7f1cee89f9fee5dc682e12e78d2822f99f4b2a920c36d0650604c545b76c9e5755032a8ea94d0fb21d513a138b5a1ad86acdf0097d5f289a9629c7a3e570a96383980c067a702cdc198712adade467e0baf05595108dff0b342d1b1fe243cf8145d024b46f8008c20ded574da9f49b49163591a6cd2fcad74caad0e95dc5714a15cfa88ff11a7d30028326575217447100f4c5c97f0cc25d79960e39b94f0ab60f986fa3c919865f8e231bd77c2c759b166d8874728e9e131b9b3aa5cd166a9ae330ca439ea3ffb7581f1f4389ebf9334810d07981c5ea03b42ef5615ebc17005a0c9c02478353c08f4cca0b6a2e98de3d51d3174ee8101387f52b12b699b57a4c50452a978eb43c3a101ae69213fe93f2606fc6bf7b771e3dea5e578b85e5642791e9aa281c8f91cebde1095cbc23ce174a1ceec151703a226749176d42d72468d48f88012d18e0f2640c3018e08c8a2df197f273596ca5d48cf976b7ee051189b8081f0863e613258f267a5bcf30509c6285fc37c0d045c29c471b04f189cb3c69914ba0591cfba1c71ed909362aa8840be28e624e3a6b8393170e809231e10820326ecd03e23e11dfe29ae47adddf3d4f858d51f9ca33ee85a5077a1463caac5d034293bcacafe15b3e6cac7247a33ace000f164cf8a5243f89b89b8b11220b35a07679e7af900e540d965669fa23ca0d0d3b47d9b2cb0fa31a90c69e686d582f6c9c8c628875c002cc5e288a5e1b738842258569fe2a4de3dfd7dfd13b1fd7c8c29dfa4f58ea8d0c7e56222fb9b0d29c68c7cb8ba3fd79b04a14366f83bbef2531311a3f385bdad440ee85e2dd947f32a349f9d1eb750ceb0f7211980b0b970c7b81f16935d4d3e764869edae7a45cb45a0445e8c8ec27fac4edd6ea269563b6f12f394782fd970cbfc2752fc9f4892c731eaac8e3a315797b0449b2a9ae3d4bd25d0e8f1a43e29630b4e2e882ece16dc542fcbc1f165b2cefc4deb40c23bf61f3e51d5acbc81135d35f0c055d8a003e03c0625e83f95ab2349c222dbc6d62d34e0119938d0b384a86dbdfd00c1226d0ff1f834c3529361c9db6d5612009bc39a0d654de2940ee2b8a96bd3c297ecad0a3df1b2a85a400fab889648315415c4ddbd0c9752146496d3769b3c9148330a8324453d4431d19727ddd12493003bd7eaeb05b2f5c333a33cba442df3dc11dc23c80292a52b040f5e707784b5d29f4c46d3ac8ae0e159517c1a196103bfd6bf6d32afd687773bf224ef00c844f1f36365e7220c57a97aa0904219a0ab84def7095b280b971b554e0142d154c5422c918b4744bb3b9e61721a983f4d63cc79fd88295b67b24fec0ec1ce8a2e80a1ca4e97cdda6d2df44a571a74b941f049886355e2bb5ed908e646850d85095d099e3a189a4298f4a25c0798b4dc25cd630695561a04f43ff009e4f49177e01c11442593fbc23657a46f918a77231b3405d4931b6f2c01f0207d6933304bb2106c5dbce23378bc7ca66ff4f57550bbc36500f6c4ce21dc22a4575c315d2f4c4fb1fb8e12ebc2c037451611718d4371c6d0a00bab9f68a1dea6bd654d49232ab3c85e07a6ec8e2b19012c31d540f81d666d0a236e9e2a4b6d85c0974efa172d13003b63e94cd7a5652f4703d88712fb63521abaf0e2a0dd4b2e457e42d4a811db6a77310b1aff1b9055c9995ce9a0fe2e0c3657c52ae562738b6c12693cb2bffd1d3c41b6a73feec4008e63562bbc38a8c56c10efdb2b67fcef74f6a6f7e35baa4685f7764977348db378b242ac5f81a8a69c666c0247d1d326faf3b7dd4f07bfb16c08bb2703f6997e1a6cf042c0ff0fea27217ac2c78328bd573e8dd86263de6ffcf3d26d45d8be7234da9f24f1a08ab16f3df9e85861fb1251933eb8982b81999234d6d56759acd528ffcaee5a300e711e0b7f0b208612caa6dfeddfe4557161933a1910ec4b35ed89760fb91de6c19f766845979e36855a11d7ba6b892a717b32e8e17b367c5fd11b940de937a975470bbf872f8a1cd637c76fe0a9aba5fb9e", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x28, 0x0, 0xffffffffffff625c, {{0x7, 0x56, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) fcntl$lock(r7, 0x5, &(0x7f0000000200)={0x1}) 21.54381774s ago: executing program 5 (id=3276): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) execve(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1ce0ff000706010800000000000000000000000005000100060000"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000680)=""/4096, 0x1000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500380012800b0001006272696467650000280002800500190002000000050017000000000008000100810000000a0014080000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) setuid(0x0) 17.362049819s ago: executing program 5 (id=3283): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r4, &(0x7f0000000040)='./file1\x00', r4, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0xeeef0000, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0xff}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) recvmmsg(r2, &(0x7f000000e280), 0x58a, 0x42, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x120, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x78}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "12ef60041cf2fc34038d363978ffbf3538798383831e0c084bbf2ecf4c09b677a8"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x60) 16.113034507s ago: executing program 6 (id=3286): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, 0x0, 0x68) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x20201) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 15.076490254s ago: executing program 5 (id=3290): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0x5, 0x0, 0x0) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) fchdir(r7) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x44) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_create1(0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f00000004c0)={0x2, 0x3, 0x5, 0x7, '\x00', '\x00', '\x00', 0xb8, 0x3, 0x2, 0x49, "bf8c3768022f351d68b92c85ccfabdf0"}) ioctl$SIOCAX25CTLCON(r7, 0x89e8, 0x0) 13.72792568s ago: executing program 3 (id=3292): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r1, r1, 0x2, r3, r2) openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000008c0)={0xc0}) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x1) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 13.493870549s ago: executing program 2 (id=3293): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x3, 0x0, &(0x7f0000000280)=0xfffffffffffffdeb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYBLOB="bf7fec35ce3b35991ccfb1b001c81a29eb683a55a04ba4e01cc4b628484a1c2ee53fdcf785e635248c2654de888bbfc34065e5f56be2bce86ed828bf99f642d8a6328ccd1216a63bf4817abf6e89b0d81c61a268abbd27d7f444b846d6c24889302be9f8a74bd7e494880948593ced4dd298e5489d7ce50a9560d2243e3b28b23713a23efd7b1af8b72c3fbd32b4950f029ae61d229fa3a286e233a619a41be77e178e7106cc57ab3e989fd07eb2333797a4f3726aee2b721b8bb2087bc88a33633919ca663433db6242349dcda5214b2a4e6b23", @ANYRESDEC=r0, @ANYRES16=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, 0x0, 0x0) pipe2(&(0x7f0000000300), 0x4800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_dev$sndpcmp(0x0, 0x3, 0x5f3100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x80b, 0x6) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x0, 0x6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff9e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000150001030000000000"], 0x14}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) 12.204060208s ago: executing program 3 (id=3294): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) execve(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1ce0ff000706010800000000000000000000000005000100060000"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000680)=""/4096, 0x1000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500380012800b0001006272696467650000280002800500190002000000050017000000000008000100810000000a0014080000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) setuid(0x0) 11.396285462s ago: executing program 6 (id=3295): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004580)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x2, {0x6, 0x0, 0x0, 0x3, 0x4000, 0x0, {0x3, 0x7ff, 0x1, 0xffffffffffffffff, 0x403, 0x6, 0x20, 0x1, 0x2, 0x8000, 0x6, 0x0, 0x0, 0x800, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) flistxattr(r5, 0x0, 0x0) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r6, 0x1000000, 0x0) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x4a300, 0xcd) 11.17638421s ago: executing program 1 (id=3296): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.755627182s ago: executing program 2 (id=3297): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) read$dsp(r1, &(0x7f0000000200)=""/230, 0xe6) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x842, 0x0) write$dsp(r2, &(0x7f0000000340)="48201a54a70ed8ac5ab6453337f5583a23024de2bc38e9a2dc7d9f2327f0e5fe499600d93cd3de8f27d193845ed8197fd6748cc65772dc40112dfc21ff4bb6eccaaf727d8c4d4a8f242da94874cff33e1e3313c0e24a9ee414b06d15ab66311bdeb5ec3563bd0854fe2f1b7ffe28f4bc663f1631d2df84c1053879bedbdbef954f8e5ffff3cc85e6e0bb2ba94a2607ac799fd3eba78e3558aba839b76d04bd500bc12f2a9d12347049af0a264d5e230675124251e417508b35ab73b0c1c61f8f6181f760023f31b55b8fffa8980bb161b0cfdc62d726013db15fd39c2e86bf0c9435a82cfe8f4cfa7bfaf83e3875cfa582b9db720a0bca45f48dc246338d52f3985a6db3cd620d312a0db4e8d4754cb6f57288640fce796577f8f45cb51f50bce1dfe2143bca27e677fb15b91d3752dc0c537d149f7a2becbf95a2569deea87e9c808c43a492f3c2948cd72e0df9798cc0726866e7daf62d41a9f0302d73a578db8226526840b0c9fe030a940ddc6f9ec197afe90ba3f0bbf288fb6719ec64419019f5ed1c7c58fc71f9833138627f7ff18c18bb9b8d03df898f1a16a695cca0a1cda856a4d9335a967891e9de32aec0f337385039b4ae82eab2969749f22a110c1966aa252a487e8da24df1a4671eb6062510488c0d2123b23a2f1366ae1eb7e2680c8cecdc9a3518cdd9a86e4fb632da268295f11030a928d6d0c55754e6639f70527f2e55a127365740103e5cc25057404aa873c39d34af91e22bef2edf889d39b74e143c7b1a7b251605c7bb29ae3d5e1f0190dac9108ab3f143f1fe7d4a4e8dfd90cb0d934a1cbef78a41aaa5e2a550382c67068631427a088ec8c1c8c1acdac71075c08750e387dd272685adc97b2965e28a51e38c469d263284f2dbb934c271ecbdea32188c850d5a3f336c3bb51de04c60f8bd692a6d1a827cef4f4a2f6409a509e61c280d32d88ee69ad4ebd4b48d8aa043be480b038e3d4f104d8c75e06c9c0d4108adb2063294c03daf9151234b398aa9ec4eb7066128cc94fd6d446624031512f302dfdee379396e5a9857b553b31b223445dd528546ac2b9fc2f409501fa72680795932fd1d237a5a5c76e1c137967fe0d7d2a90701d65eeb24d14fa14ce7a578f9c4af397b36a1908f587a9c8e74157a2d7a4ec1448b86c7bee3e58b1e91dcd4450a82f22ab8c1a300032aff089b965388d7de042a17939d3e3d1203068f7538b13ef663dd031578be34353fd7dfef25fe49d8e3934676428fa85e3da1adb2375b885b574469d7cfe80cb1d61167e9d6f1ad2edcaa48e8b209bb426084de54bb51f6029c287cf57b10bd97cbf080ff135ed1fd6206028b13b06dfb07f5ca510cbd4c15989b1abfae0f2425ca773ffdfcfb35ad6d4c81247e40aa461168b6e2a65e473b379a8b4c13eef95d22c09118f27c92f9f48a0f060efb65ff0bf88d4f7dcabe6f3c64785beb93f92c598ad356a96b2cefc946104e8c6775dd8ce662dffd6d7a209bac69f414f149e2982d5a09c92b33f3c2a029555972f86407886a0e4a93fb53f62f9442b8a2e5667b7d2ec186fd1bda48497f9e25427056a92e5d3dbd89df17ee4386dae3f57e87bb77c92da9e7422021520be39d16f7ec8353145a09a0235fddaa4e70257feec760cd7b77c2c20f7a9f4942e6211e750a41a21ffb33f2afa4b91e55eeca575af46ec78b6585fecbff9064e945b728eb84a840b10750f6e6af24888baf548fd9d3de9247aede525b73471d8ef579e2d296128761711689804207ad7fed5f345d8b937160734cd1cc62bdb489da96425303032ba6ae40ffae6a88db24e3f1e2b0f389ac3b4c9788ce4cad8b74c6e8617465c966cbdc035b715e838a84c0dfdd8bc11616904e2db474dc486840666258586ee6ad404d0ba80a176cfc0f83eeb0274b1822aa9f5428e58099a35b3404acab368522a3af3bdf3018f86bc3dafa9c24318d40ad3e148f32e719c4a172feb4451fd4a21d42266d977c9c58f39c73f690937bf7688e8783efe4a46931162e09657ae5f1aa50bccd4401a5570ae6e625487513dd3872830bd1b4cfd0b2f32c076a5dfafe3dc316c3f42fdc947a6203ec5d2a5b8730d60699cec9426bffce3ffded16748b457f0967aeb2b7b0f45ede8594a9a779713862c3b85ded509532f61b76bd0f71c51cc443d3688a3aaa05eb53da1ef4832bb90c12fd11708a6738945fddb7e953fd4809e49d67e8c74b22d60d873edd0964c8d73908dfab05ae02008a239c2accf936ac75efac76d3b453555cb57b2f77c632c99da1ffa17b021d7f54af3344a572276a129821e512ff47c8fdd905c059794d1b67cffa5f09ba50427079b018ef1fabac8fafce9383b9b6634897dd4d2eace66e59615a1dc6ad4c0e6b5b971ce606b32183d6e61439abe9b8136fe0f814b2304ed8a88c4a25f63029567bf2a4711af5fb6223bff756ab96e8ab8f25d5c42be6ab59e41681e8771878fbd8e07d6fe2397729f9ac7490db254d2ec44ee4f002074218e14dfcf997167c5490d64bc674a42b1268717c423e6089510fe4859bd74a1a904264cd747f622dd6d8825fa58b7cb0f2c1229afc3abcc76d32bb4a3102dc9a6457e58476bdc405a8a39ac63e7a7a52587c108d2af20e365d15b70e8b3f460879d7ad61ffae4b96a85fb8a7d5250732780729dac65ff4002f4738e080f109b0385f45ad59d9e7a93c63a36b8c357ca88dc65384e3c99a2dcd328fc7a83e4d5f216bf837d3e91b0ebcb77d8b8e7bb78e7871cd562c499cfd36b773bac7855adc0703708a706db096644af4039cc4ee107ef0a1f80efff1cc4d88093251af2f852e493c8499c8aa4b2ecb63c8f207515442d6816f7584ea0e098e54d8e6fe6abd660e9e15a5a70a2eb3a9aa3f8e41bfd5861987a506df7d3cc5caa3b38438f7b0fcc738422e356b68f4af0ae3c25eee0e0fbf1ff847d7824e8a00330a8f7c91167fbc048d99ca79b9b584a7478fb00b4349170e9679d49b4a9a524a133777dd3e0ab66960235de92aad1b2528d3a70489dbe162e70b04999f70c7533cd28f321a2f8978b441fff353dde7308cdec8fbee4d9f470df87cb0f5307a40acd0550cb6b16d715833e6ca24516a5d5bc0dfebc24fcee1cceb273f77c437e6f452c0455530771249594ac9f0ac6afb182defef6c7428e88289b735ae706a0a4d7ce9df55df794faab35e416245fea0f952fc5cbf35fcddbf3e4f2cf2e20c199174d875abb59df3471dc1925669a1ab3ade9a20ed944c23d7c18f601e9d94a1bff2bf90977d1363ac9b3709d4b7b76e14ce79345ad3bbbf8fedc41e17f71984ce0ea90948f3264107705f4f7e276b7ea3ecc9f3bb0f2b309569bf18a87e0369984a97f223249713082d9051f0da719d1188dba2f0a67c32ac9f83e73a3991a0c0001ec294cc3faed7676e316f77f326f8c84e4024db512374eefec661869931618eba625f453324becabc825898ca407f274aa76532c1fa9c4a421d283a0878e89a07e7649afd2fe17a37bee7d77ddebb1959f3bd5c5a52d9a94e4af837e44a7b0a379f28cbbad6425c7160711113d69683f9926c1c32fd33744d8b0f95d4c54837a05c7d2a2e33b1a9595ee9a95f97a70d2c67ee1c83f42091b9bfc90ddc5b72bf387627f105d693457125c56891973d83e0cf0f881e0b71ab8d03565cc1eabfc4fdff62a40f405858980f4de25be276d55ffd4c1e7495b68c5b6e580c7b4365a256865ac9ae40d63c73edcc512842f7d9096c793cac3c1ae8abcc16ba7e24214a808b9eb8dfbe60e10aecdbe94374621fee2dd154ec38f6aeeabcbc70abfdb5745964bfe1e0dfbd3f68b77be62ee0c11299fdac7753ca9d9366071cabe3de77f60488b21b9b211df9346cca435f314c909e90c346fde43be514d62faf2abab14b4b732247d50e94d89da128e0687129430525edc713c7cebf0c6691ec52c0a6eb90af43d98d8a31193f72dc79", 0xb00) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x8000007ff, 0x913d, 0x0, 0x8, 0xf42, 0xfffffffffffffff7, 0x5}, {0x7, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in=@local, 0x4d6, 0x33}, 0x0, @in6=@empty, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0x3, 0x1}}, 0xe8) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)) sendmsg$nl_route_sched(r4, 0x0, 0x0) 10.649392961s ago: executing program 1 (id=3298): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000"], 0x0, 0x4e}, 0x28) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x6, 0x0, 0x2}}}, 0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4008}, 0x18) 9.83785375s ago: executing program 6 (id=3299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket(0x29, 0x5, 0x0) bind$inet(r5, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000002b000701fefffffffbdbdf25097c00000c0001800800060020193e5a3f6f"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) capset(0x0, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r9, &(0x7f00000021c0)={0x2020}, 0x2020) sendfile(r8, r8, 0x0, 0x8) 9.590237419s ago: executing program 1 (id=3300): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_socket_connect_nvme_tcp() recvmsg(r0, &(0x7f0000000800)={&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000000780)=[{&(0x7f0000000300)=""/64, 0x40}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000000480)=""/213, 0xd5}, {&(0x7f0000000580)=""/119, 0x77}, {&(0x7f0000000600)=""/237, 0xed}, {&(0x7f0000000700)=""/117, 0x75}], 0x6}, 0x40010040) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/188, 0xbc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) syz_usb_disconnect(r3) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000400)=0x1f) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000000)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$printer(r6, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81) 9.132259383s ago: executing program 5 (id=3301): request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000400)='\x00', 0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) syz_open_procfs(0x0, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x8080000, 0x0, &(0x7f0000000100)}, {0x5000, 0xf, &(0x7f00000001c0)=""/15}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0xadc) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000000)={0x2198, &(0x7f0000000040)}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x59) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket(0x14, 0x80000, 0x9) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x430, 0xffffffff, 0xffffffff, 0x430, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE0={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xd0}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x2b4) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) 8.134382463s ago: executing program 3 (id=3302): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008010}, 0x18004010) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r4 = io_uring_setup(0x1ec1, &(0x7f0000000040)={0x0, 0xcba1, 0x8, 0x3, 0x2c0}) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0xffffffc0}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x94) r5 = socket$kcm(0x29, 0x8, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000180), 0x4) 8.130326298s ago: executing program 6 (id=3303): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) socket$inet6_sctp(0xa, 0x801, 0x84) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) 7.462363434s ago: executing program 2 (id=3304): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[], 0x48) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000020c0)={&(0x7f0000002100)='sched_switch\x00', r4}, 0x18) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x42, 0x0) io_setup(0x20, &(0x7f00000000c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r5, &(0x7f0000000a80)='71\a', 0x3, 0x20000000000000}]) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10) close(r7) recvmsg(r8, 0x0, 0x40010000) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000700)={0x1f, @none}, 0x8) listen(0xffffffffffffffff, 0x0) 5.540144991s ago: executing program 6 (id=3305): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4008040) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x86, &(0x7f0000002600)}, 0x10) ioctl(0xffffffffffffffff, 0x1, &(0x7f00000001c0)="0feb79dba4d547dbfc1dd208eaa30956048fec8af59ac89db5fa9990264676e2986faafd3ea5dae7bc92a1bc24e351e85f1d5bd5ddeaca8f55b490bd77a9bdc487a1") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x80000001, 0x7ff, 0x24e, 0x80000000, 0x5}, &(0x7f0000000300)=0x98) sendmsg$nl_route(r0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r6 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r6, 0x6180, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x61e2, 0x0) write(r6, &(0x7f0000000000), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 5.332694962s ago: executing program 1 (id=3306): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x101, 0x8, 0x0, 0xb}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x10000}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002d000124b0c1f2646ab09241c867ca7159bd3f0026bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3}) 5.258230566s ago: executing program 3 (id=3307): time(0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000867700000000000000000000180100002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000002000000b7f6ffff0300125cf1"], 0x0, 0xd, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x7, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000400)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x0) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x94, 0x0, &(0x7f0000000680)=[@clear_death, @dead_binder_done, @exit_looper, @increfs_done, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@flat=@weak_handle={0x77682a85, 0x0, 0x2}, @fda={0x66646185, 0x0, 0x2, 0x26}, @fda={0x66646185, 0x5, 0x0, 0x37}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}, @dead_binder_done, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) 5.256953599s ago: executing program 2 (id=3308): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a) flock(r1, 0x5) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r0}, 0x18) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000002bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\x99K\xcd\xab\x1a\x034btY\xdb\v\x86\xca<\x02R\xd6a\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7\x80\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8\x88\'\x06f\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51\tz\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\x97\xad\xef~\x15\xfd\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\\L\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf1\xad&\x86\xcb\xf3\xad\x9e[\x8b\xc0\xd6\x1e\xe4N\x92\xf2\x905\xe0\x13\x90\xaeQ\xed\xea\xad\x9b\xcc\x9f\xc0P\xff_\xaa\xb2L\xf5\x1f\xc1\xa4[\xe51\xcb B*\xaa\a\x003\xc9\xae\x1f\x8c\xcdm\xb8\xce\x01\xdb\xaa\x1c\xc35\x16#\x04\xb7W4\xfd\'\xbe\x922\xde\xd6\x18\xf7`\xff\xfe%\x06\x02\xc6\x81Jr\x10\x88G\xea+^LA\x96\xed\x1d\xe1V\xbd\xebbyq\xd6\xb3', 0x7) io_submit(0x0, 0x1, &(0x7f0000000a00)=[0x0]) 4.166226066s ago: executing program 3 (id=3309): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x1a1) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) write$binfmt_script(r3, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000001b00), 0xfffffd9d) write$dsp(r3, &(0x7f0000000200), 0x0) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) mount$nfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)={[{'lock'}]}) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 3.449283438s ago: executing program 2 (id=3310): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000fc0)='/proc/meminfo\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000001040)={0x0, 0x8, 0x7, '\x00', &(0x7f0000001000)=0x8}) r1 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) getpid() r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x10d0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00', @ANYRES16, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f0000000400000007020000020000004000", @ANYBLOB="80378e8deb77cf5309000000000000", @ANYRES32, @ANYBLOB='\b\x00'/28], 0x50) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f028, 0x1}) 3.015525165s ago: executing program 3 (id=3311): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(0x0, 0x0, &(0x7f0000000000)="100c0681000000", 0x7, 0xfffffffffffffffc) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) open(0x0, 0x40000, 0x122) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r3 = socket(0x2b, 0x80801, 0x1) shutdown(r3, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0xffffffff, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x1, 0x6fd8e84b}, 0x3, 0xed}}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000200)=0xa0000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x326, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x7fff, 0x3, 0x1, {0x22, 0x53b}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xe, 0x3}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x4, 0x80, 0x4, 0xff, 0xff}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x2, [{0xf1, &(0x7f0000000440)=@string={0xf1, 0x3, "a99e6a558cab9704ffd8a5c938f5a55787c3c6eb7b8d350ba07b31f19b2e1d1c57ffc3bf99ae9e9591716ee0e51bec4a84b1b095f6bd48a7c6ad3799d1f36e0b2a65b5103de46802a2b6dd6d0ae63e0739ca1698c3b16251cc5d4e9d7143c0af114ffb67ff5659a92c1346acbdfef1fe1434f17bacc60e0f718394b38d041c9be95698823bc2960e221c5c3e1f0d73ac2653fccca0b519ac9aa5b266176b16b36cb331148ff212174eefe25a47f1edf2268faeb140de5e08faad7957fe022d35ddacb13baeecefd803d3b5b981697661b02a4c52f5ada483a0280a5b95bbe60040950c56aea8fd6f18ea9e36bfeeec"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc07}}]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 2.905042347s ago: executing program 2 (id=3312): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x1a1) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) write$binfmt_script(r3, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000001b00), 0xfffffd9d) write$dsp(r3, &(0x7f0000000200), 0x0) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) mount$nfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)={[{'lock'}]}) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 2.761741206s ago: executing program 5 (id=3313): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) execve(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1ce0ff000706010800000000000000000000000005000100060000"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000680)=""/4096, 0x1000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff030902"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500380012800b0001006272696467650000280002800500190002000000050017000000000008000100810000000a0014080000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) setuid(0x0) 1.455196293s ago: executing program 6 (id=3314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffd}}}}}, 0x0) 1.454176735s ago: executing program 1 (id=3315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) socket$inet6_sctp(0xa, 0x801, 0x84) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) 0s ago: executing program 1 (id=3316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x5) r3 = eventfd2(0x5, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r3, 0x4, 0x2, r2}) kernel console output (not intermixed with test programs): sive=1 [ 640.130652][T13192] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1959'. [ 640.142553][T13192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 640.269291][ T30] audit: type=1800 audit(640.272:595): pid=13198 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1960" name="nullb0" dev="tmpfs" ino=1941 res=0 errno=0 [ 640.667440][ T6018] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 640.734157][T13202] fuse: Bad value for 'fd' [ 641.573736][ T6018] usb 7-1: Using ep0 maxpacket: 8 [ 642.302435][ T6018] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.314701][ T6018] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 642.330201][ T6018] usb 7-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 642.341040][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.396756][ T6018] usb 7-1: config 0 descriptor?? [ 642.415547][ T6018] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 643.684701][T13186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.697542][T13226] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 643.736063][T13186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.071390][T13239] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1956'. [ 644.872935][ T5904] usb 7-1: USB disconnect, device number 6 [ 647.593580][T13285] syz.2.1977: attempt to access beyond end of device [ 647.593580][T13285] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 647.610270][T13285] EXT4-fs (nbd2): unable to read superblock [ 649.748695][ T30] audit: type=1400 audit(649.767:596): avc: denied { append } for pid=13298 comm="syz.5.1983" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 649.917133][T13305] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1982'. [ 650.670184][T13322] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1987'. [ 650.698394][T13322] vlan2: entered promiscuous mode [ 650.705458][T13322] bridge0: entered promiscuous mode [ 651.585095][T13333] Unsupported ieee802154 address type: 0 [ 652.459436][T13325] SELinux: failed to load policy [ 654.058263][T13363] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1999'. [ 654.701629][T13371] fuse: Bad value for 'fd' [ 656.519126][ T2153] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 656.787187][ T2153] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 656.826086][ T2153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.959426][ T2153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.960107][ T2153] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 656.967467][ T2153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.205784][ T2153] usb 3-1: config 0 descriptor?? [ 657.643499][ T2153] sony 0003:054C:024B.0039: unexpected long global item [ 657.684887][ T2153] sony 0003:054C:024B.0039: parse failed [ 657.840210][ T2153] sony 0003:054C:024B.0039: probe with driver sony failed with error -22 [ 658.007854][T13420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2013'. [ 658.744507][ T30] audit: type=1800 audit(658.761:597): pid=13428 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2014" name="/" dev="9p" ino=14355223812286978 res=0 errno=0 [ 659.027840][ T2153] usb 3-1: USB disconnect, device number 33 [ 661.271007][ T30] audit: type=1400 audit(661.283:598): avc: denied { bind } for pid=13442 comm="syz.6.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 661.496815][ T6018] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 661.561177][T13468] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 661.728129][ T6018] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 661.816257][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.395172][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.449633][ T6018] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 662.539198][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.594104][ T6018] usb 6-1: config 0 descriptor?? [ 663.492607][ T6018] sony 0003:054C:024B.003A: unexpected long global item [ 663.510033][ T6018] sony 0003:054C:024B.003A: parse failed [ 663.520068][ T6018] sony 0003:054C:024B.003A: probe with driver sony failed with error -22 [ 663.721618][T13502] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2031'. [ 665.271634][ T2153] usb 6-1: USB disconnect, device number 4 [ 665.825953][T13537] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2036'. [ 665.911162][T13538] (syz.6.2038,13538,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 665.922048][T13538] (syz.6.2038,13538,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 666.472584][T13537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.714404][T13543] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2037'. [ 667.097887][T13559] overlayfs: failed to clone upperpath [ 669.372592][ T2153] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 669.585565][ T2153] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 669.643625][ T2153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.690263][ T2153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.718199][ T2153] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 669.753825][ T2153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.812253][ T2153] usb 3-1: config 0 descriptor?? [ 670.290519][ T2153] sony 0003:054C:024B.003B: unexpected long global item [ 670.506466][ T2153] sony 0003:054C:024B.003B: parse failed [ 670.531607][ T2153] sony 0003:054C:024B.003B: probe with driver sony failed with error -22 [ 671.934958][T12541] usb 3-1: USB disconnect, device number 34 [ 672.715391][T12541] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 672.891705][T12541] usb 7-1: Using ep0 maxpacket: 32 [ 673.534644][T12541] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 673.811000][T12541] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 673.848313][T12541] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 673.875516][T12541] usb 7-1: Product: syz [ 673.907333][T12541] usb 7-1: Manufacturer: syz [ 673.928621][T12541] usb 7-1: SerialNumber: syz [ 673.961172][T12541] usb 7-1: config 0 descriptor?? [ 673.993366][T13616] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 674.782853][ T6018] usb 7-1: USB disconnect, device number 7 [ 675.155114][T13673] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2067'. [ 675.198410][T13673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.711700][T13677] bond1: entered promiscuous mode [ 675.717773][T13677] bond1: entered allmulticast mode [ 675.751358][ T6018] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 675.894701][T13677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 676.359130][ T6018] usb 7-1: device not accepting address 8, error -71 [ 677.139770][ T6018] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 677.335003][ T6018] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 677.361902][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.393458][ T6018] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.516597][ T6018] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 677.528709][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.012241][ T6018] usb 7-1: config 0 descriptor?? [ 678.364948][T13677] bond1 (unregistering): Released all slaves [ 678.442742][ T6018] sony 0003:054C:024B.003C: unexpected long global item [ 678.478954][T13740] binder_alloc: 13739: binder_alloc_buf size 17408 failed, no address space [ 678.514063][T13740] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 678.550150][ T6018] sony 0003:054C:024B.003C: parse failed [ 678.557024][ T6018] sony 0003:054C:024B.003C: probe with driver sony failed with error -22 [ 681.027562][ T6018] usb 7-1: USB disconnect, device number 9 [ 683.905326][ T6018] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 684.559673][ T6018] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 685.093376][ T6018] usb 3-1: config 0 has no interface number 0 [ 685.107837][ T6018] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 685.121501][ T6018] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 685.134655][ T6018] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 685.168342][ T6018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.180445][ T6018] usb 3-1: config 0 descriptor?? [ 685.189130][T13771] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 685.347595][ T6018] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 685.524410][T13800] siw: device registration error -23 [ 685.594192][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.035149][T12541] usb 3-1: USB disconnect, device number 35 [ 687.042291][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 688.938488][ T30] audit: type=1400 audit(688.936:599): avc: denied { cmd } for pid=13819 comm="syz.3.2091" path="socket:[39730]" dev="sockfs" ino=39730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 689.604233][T13834] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2096'. [ 692.720964][T10799] Bluetooth: hci5: command 0x0406 tx timeout [ 692.810091][T13872] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2099'. [ 694.527054][T13905] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2109'. [ 695.061383][T13915] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2111'. [ 695.073324][T13915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 695.091426][ C1] vkms_vblank_simulate: vblank timer overrun [ 695.198382][ T2153] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 695.218723][ T2153] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 703.055782][T10799] Bluetooth: hci1: command 0x0406 tx timeout [ 703.711712][T14028] loop6: detected capacity change from 0 to 63 [ 704.199121][T14028] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.213173][T14028] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.222824][T14028] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.232489][T14028] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.242084][T14028] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.251910][T14028] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.261647][T14028] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.271274][T14028] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.281009][T14028] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.290624][T14028] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.323293][ T30] audit: type=1400 audit(703.774:600): avc: denied { map } for pid=14017 comm="syz.5.2127" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 704.383716][ T30] audit: type=1400 audit(703.774:601): avc: denied { execute } for pid=14017 comm="syz.5.2127" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 704.603010][T14047] input: syz1 as /devices/virtual/input/input31 [ 705.994924][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 706.022837][ T30] audit: type=1400 audit(706.055:602): avc: denied { wake_alarm } for pid=14060 comm="syz.2.2134" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 706.214632][ T30] audit: type=1400 audit(706.255:603): avc: denied { mounton } for pid=14070 comm="syz.2.2138" path="/420/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 709.092244][ T30] audit: type=1326 audit(709.137:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14108 comm="syz.2.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe878ebe9 code=0x7fc00000 [ 709.161950][ T30] audit: type=1326 audit(709.137:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14108 comm="syz.2.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7febe878ebe9 code=0x7fc00000 [ 709.242557][ T30] audit: type=1326 audit(709.137:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14108 comm="syz.2.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe878ebe9 code=0x7fc00000 [ 709.344094][ T2153] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 709.710205][ T2153] usb 7-1: Using ep0 maxpacket: 32 [ 709.809383][ T2153] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 709.930369][ T2153] usb 7-1: config 0 has no interface number 0 [ 710.026129][ T2153] usb 7-1: config 0 interface 85 has no altsetting 0 [ 710.277756][ T2153] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 710.335303][ T2153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.406296][ T2153] usb 7-1: Product: syz [ 710.411316][ T2153] usb 7-1: Manufacturer: syz [ 710.449890][ T2153] usb 7-1: SerialNumber: syz [ 710.475209][ T2153] usb 7-1: config 0 descriptor?? [ 710.515632][ T2153] appletouch 7-1:0.85: Could not find int-in endpoint [ 710.708232][ T2153] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 710.736181][ T2153] usbhid 7-1:0.85: couldn't find an input interrupt endpoint [ 711.547012][T14168] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 711.560806][T14168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.570359][T12037] Bluetooth: hci3: Frame reassembly failed (-84) [ 711.916012][T14168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.130359][T12541] usb 7-1: USB disconnect, device number 10 [ 713.600626][ T5859] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 717.213542][T14249] bridge0: port 4(gretap0) entered blocking state [ 717.221420][T14249] bridge0: port 4(gretap0) entered disabled state [ 717.229312][T14249] gretap0: entered allmulticast mode [ 717.237177][T14249] gretap0: entered promiscuous mode [ 717.244054][T14249] bridge0: port 4(gretap0) entered blocking state [ 717.253312][T14249] bridge0: port 4(gretap0) entered forwarding state [ 718.950198][T14264] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2174'. [ 719.174098][T14266] geneve2: entered promiscuous mode [ 719.209415][T14266] geneve2: entered allmulticast mode [ 719.217988][ T1079] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 719.240185][ T1079] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 719.252035][ T1079] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 719.262952][ T1079] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 723.485350][ T30] audit: type=1400 audit(723.534:607): avc: denied { execute } for pid=14321 comm="syz.2.2190" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 724.994649][T12541] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 725.156547][T12541] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 725.193866][T12541] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.849242][T12541] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.861352][T12541] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 725.874832][T12541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.892219][T12541] usb 3-1: config 0 descriptor?? [ 726.156297][T14349] geneve2: entered promiscuous mode [ 726.228689][T14349] geneve2: entered allmulticast mode [ 726.263027][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 726.276305][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 726.315718][T12541] sony 0003:054C:024B.003E: unexpected long global item [ 726.328160][T12541] sony 0003:054C:024B.003E: parse failed [ 726.335004][T12541] sony 0003:054C:024B.003E: probe with driver sony failed with error -22 [ 726.388633][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 726.559217][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 727.154333][ T30] audit: type=1400 audit(727.206:608): avc: denied { listen } for pid=14366 comm="syz.1.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 727.183074][ T30] audit: type=1400 audit(727.236:609): avc: denied { accept } for pid=14366 comm="syz.1.2200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 727.364749][ T30] audit: type=1400 audit(727.416:610): avc: denied { setopt } for pid=14371 comm="syz.3.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 727.888769][T12541] usb 3-1: USB disconnect, device number 36 [ 731.072082][ T6018] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 731.601439][ T6018] usb 3-1: Using ep0 maxpacket: 32 [ 731.616647][ T6018] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 731.634665][ T6018] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 731.660028][ T6018] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 731.688132][ T6018] usb 3-1: Product: syz [ 731.714353][ T6018] usb 3-1: Manufacturer: syz [ 731.719906][ T6018] usb 3-1: SerialNumber: syz [ 731.889185][ T6018] usb 3-1: config 0 descriptor?? [ 731.902127][T14408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 732.001444][ T2153] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 732.161205][ T2153] usb 6-1: Using ep0 maxpacket: 8 [ 732.169118][ T2153] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 732.182580][ T2153] usb 6-1: config 0 has no interface number 1 [ 732.195509][ T5904] usb 3-1: USB disconnect, device number 37 [ 732.230505][ T2153] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 732.251807][ T5918] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 732.301810][ T2153] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 732.319032][ T2153] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 732.334803][ T2153] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 732.352261][ T2153] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 732.373028][ T2153] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 732.436150][ T2153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 732.461534][ T5918] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.475332][ T2153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 732.495181][ T5918] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 732.506998][ T5918] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 732.525173][ T2153] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 732.540526][ T2153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.556231][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.567291][ T2153] usb 6-1: Product: syz [ 732.582886][ T5918] usb 7-1: config 0 descriptor?? [ 732.597293][ T2153] usb 6-1: Manufacturer: syz [ 732.626937][ T2153] usb 6-1: SerialNumber: syz [ 732.645614][ T2153] usb 6-1: config 0 descriptor?? [ 732.653593][T14419] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 732.666454][ T2153] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 732.677934][ T2153] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 732.760936][ T5904] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 732.930733][ T30] audit: type=1400 audit(732.868:611): avc: denied { bind } for pid=14431 comm="syz.1.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 732.969449][ T5918] Bluetooth: Can't get state to change to load ram patch err [ 732.997231][ T2153] usb 6-1: USB disconnect, device number 5 [ 733.020705][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 733.028034][ T5918] Bluetooth: Loading patch file failed [ 733.043522][ T5904] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 733.065989][ T5918] ath3k 7-1:0.0: probe with driver ath3k failed with error -121 [ 733.092732][ T5904] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 733.124396][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 733.148946][ T5904] usb 3-1: Product: syz [ 733.166697][ T5904] usb 3-1: Manufacturer: syz [ 733.195876][ T5904] usb 3-1: SerialNumber: syz [ 733.214795][ T5904] usb 3-1: config 0 descriptor?? [ 733.226471][T14408] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 735.196239][ T5904] usb 7-1: USB disconnect, device number 11 [ 735.725267][ T5904] usb 3-1: USB disconnect, device number 38 [ 736.614816][T14468] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.002019][ T30] audit: type=1400 audit(737.061:612): avc: denied { create } for pid=14473 comm="syz.6.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 737.884729][ T30] audit: type=1400 audit(737.531:613): avc: denied { mount } for pid=14478 comm="syz.1.2230" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 738.470222][T14490] netlink: 'syz.2.2233': attribute type 1 has an invalid length. [ 738.672435][T14490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 738.766913][T14496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 738.781592][T14496] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 738.889513][T14496] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 739.058435][T14498] bond3: entered promiscuous mode [ 739.144591][T14490] macvlan2: entered promiscuous mode [ 739.238024][T14490] macvlan2: entered allmulticast mode [ 739.259543][T14490] bond2: entered promiscuous mode [ 739.379941][T14490] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 739.535453][T14490] bond2: left promiscuous mode [ 739.546693][T14506] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 740.067263][T14511] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2238'. [ 740.079434][T14511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 740.742256][T14509] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 740.752188][ T6018] IPVS: starting estimator thread 0... [ 740.857003][T14526] IPVS: using max 37 ests per chain, 88800 per kthread [ 741.265738][T14534] tipc: Started in network mode [ 741.278029][T14534] tipc: Node identity 82a1b728dfad, cluster identity 4711 [ 741.304735][T14534] tipc: Enabled bearer , priority 0 [ 741.333377][T14534] syzkaller0: entered promiscuous mode [ 741.341366][T14534] syzkaller0: entered allmulticast mode [ 741.389860][T14534] tipc: Resetting bearer [ 741.424565][T14540] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2246'. [ 741.437998][T14533] tipc: Resetting bearer [ 741.461060][T14533] tipc: Disabling bearer [ 741.912316][T14551] overlayfs: failed to clone lowerpath [ 742.485298][T14557] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2250'. [ 742.496328][T14557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 743.567961][T14571] tipc: Enabling of bearer rejected, failed to enable media [ 744.378431][T14581] befs: (nullb0): invalid magic header [ 744.785587][ T2153] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 746.396890][ T2153] usb 7-1: Using ep0 maxpacket: 32 [ 746.414629][ T2153] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 746.447728][ T2153] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 746.489835][ T2153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.554856][ T2153] usb 7-1: Product: syz [ 746.616118][ T2153] usb 7-1: Manufacturer: syz [ 746.621673][ T2153] usb 7-1: SerialNumber: syz [ 746.666169][ T2153] usb 7-1: config 0 descriptor?? [ 746.677085][T14577] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 747.622630][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.642317][ T2153] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input32 [ 748.064126][ T2153] usb 7-1: USB disconnect, device number 12 [ 748.064184][ C1] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 749.374876][ T30] audit: type=1800 audit(749.437:614): pid=14619 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2268" name="bus" dev="ramfs" ino=40698 res=0 errno=0 [ 749.832564][T14632] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2271'. [ 750.501375][T14616] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2267'. [ 750.971353][T14642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 753.555384][T14667] netlink: 'syz.1.2281': attribute type 1 has an invalid length. [ 753.585459][T14670] vlan1: entered allmulticast mode [ 753.614100][T14671] netfs: Couldn't get user pages (rc=-14) [ 753.627410][ T30] audit: type=1400 audit(753.679:615): avc: denied { map } for pid=14668 comm="syz.6.2282" path="/81/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 753.754253][T14667] 8021q: adding VLAN 0 to HW filter on device bond4 [ 754.067036][T14675] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 754.168082][T14675] kvm: pic: non byte read [ 754.181793][T14675] kvm: pic: level sensitive irq not supported [ 754.182630][T14675] kvm: pic: non byte read [ 754.260106][ T5918] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 754.750365][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 754.758312][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 754.813255][ T5918] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 754.862695][ T5918] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 754.899735][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 754.910048][ T5918] usb 3-1: Product: syz [ 754.915318][ T5918] usb 3-1: Manufacturer: syz [ 754.921566][ T5918] usb 3-1: SerialNumber: syz [ 754.957705][ T5918] usb 3-1: config 0 descriptor?? [ 754.962662][T14695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 755.266948][ T9] usb 3-1: USB disconnect, device number 39 [ 757.761907][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 758.602271][T14723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2295'. [ 758.803520][T14728] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2297'. [ 758.827465][T14728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 760.401204][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2299'. [ 763.925279][T14765] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2307'. [ 765.341171][T14784] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2310'. [ 765.748366][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2319'. [ 767.532893][ T30] audit: type=1400 audit(767.216:616): avc: denied { write } for pid=14798 comm="syz.3.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 770.023541][T14833] tipc: Enabling of bearer rejected, failed to enable media [ 773.138569][T14863] netlink: 'syz.3.2331': attribute type 10 has an invalid length. [ 773.184694][T14863] team0: Device hsr_slave_0 failed to register rx_handler [ 777.328492][T12541] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 777.643099][T12541] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.669255][T12541] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 777.723370][T12541] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.968578][T12541] usb 7-1: config 0 descriptor?? [ 778.359824][T14895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.375610][T14895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.757415][T12541] keytouch 0003:0926:3333.003F: fixing up Keytouch IEC report descriptor [ 778.826347][T12541] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.003F/input/input33 [ 780.148965][T12541] keytouch 0003:0926:3333.003F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 780.566407][T12541] usb 7-1: USB disconnect, device number 13 [ 782.042966][T14923] fido_id[14923]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 782.405372][T14934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2352'. [ 782.417617][T14934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2352'. [ 784.465697][ T6018] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 784.644960][ T6018] usb 7-1: Using ep0 maxpacket: 32 [ 784.666390][ T6018] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 784.768981][ T6018] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 784.814080][ T6018] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 784.853747][ T6018] usb 7-1: Product: syz [ 784.869755][ T6018] usb 7-1: Manufacturer: syz [ 784.888579][ T6018] usb 7-1: SerialNumber: syz [ 784.940218][ T6018] usb 7-1: config 0 descriptor?? [ 785.046169][T14949] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 785.614715][ T2153] usb 7-1: USB disconnect, device number 14 [ 787.243556][ T6018] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 790.741814][ T6018] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 790.961815][ T6018] usb 3-1: Using ep0 maxpacket: 16 [ 791.066459][ T6018] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 791.080118][ T6018] usb 3-1: config 0 has no interface number 0 [ 791.092960][ T6018] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 791.107743][ T6018] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 791.120862][ T6018] usb 3-1: config 0 interface 41 has no altsetting 0 [ 791.132750][ T6018] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 791.143983][ T6018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.203728][ T6018] usb 3-1: Product: syz [ 791.217257][ T6018] usb 3-1: Manufacturer: syz [ 791.227796][ T6018] usb 3-1: SerialNumber: syz [ 791.358763][ T6018] usb 3-1: config 0 descriptor?? [ 791.628042][T15000] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 791.755712][T15000] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 792.276058][T15000] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 792.314843][T15000] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 792.349043][T15022] syzkaller0: entered promiscuous mode [ 792.903887][T15022] syzkaller0 (unregistering): left promiscuous mode [ 793.620542][ T6018] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 794.977570][T15043] fuse: Bad value for 'fd' [ 795.302747][ T6018] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 795.315710][ T6018] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 795.866472][ T6018] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 795.884424][ T6018] usb 3-1: USB disconnect, device number 41 [ 796.150755][T15054] tipc: Enabled bearer , priority 0 [ 796.293183][T15054] syzkaller0: entered promiscuous mode [ 796.862499][T15054] syzkaller0: entered allmulticast mode [ 796.997542][T15054] tipc: Resetting bearer [ 797.088882][T15052] tipc: Resetting bearer [ 797.272891][ T6018] tipc: Node number set to 1561114408 [ 797.320219][T15052] tipc: Disabling bearer [ 798.811788][T15079] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2389'. [ 799.108122][T15089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2394'. [ 799.127162][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2394'. [ 799.307937][T15090] SELinux: failed to load policy [ 800.435894][T15094] tipc: Enabled bearer , priority 0 [ 801.037972][T15094] syzkaller0: entered promiscuous mode [ 801.067793][T15094] syzkaller0: entered allmulticast mode [ 801.147631][T15094] tipc: Resetting bearer [ 801.159078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.169304][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.290855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.300627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.330584][T15092] tipc: Resetting bearer [ 801.439259][T15092] tipc: Disabling bearer [ 802.113673][T15109] tipc: Enabling of bearer rejected, failed to enable media [ 803.150144][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2403'. [ 803.472684][T15133] tipc: Enabling of bearer rejected, failed to enable media [ 803.574527][T15136] tipc: Started in network mode [ 803.588612][T15136] tipc: Node identity 2e81327bf823, cluster identity 4711 [ 803.621277][T15136] tipc: Enabled bearer , priority 0 [ 803.651349][T15140] syzkaller0: entered promiscuous mode [ 803.680447][T15140] syzkaller0: entered allmulticast mode [ 803.911795][T15136] tipc: Resetting bearer [ 803.944893][T15146] tipc: Enabling of bearer rejected, failed to enable media [ 804.038435][T15135] tipc: Resetting bearer [ 804.124697][T15135] tipc: Disabling bearer [ 806.028570][T15170] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2411'. [ 808.462717][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.995180][T15228] kvm: kvm [15227]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 811.018030][T15222] kvm: kvm [15221]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x18c7 [ 811.409846][T15222] kvm: kvm [15221]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x1b37 [ 813.855675][T15258] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 814.111674][ T2153] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 814.314928][T15263] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 814.368210][ T2153] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 814.426724][ T2153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.461678][ T2153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.663817][ T2153] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 814.675768][ T2153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.195595][ T2153] usb 3-1: config 0 descriptor?? [ 815.286564][T15273] tipc: Enabled bearer , priority 0 [ 815.428679][T15274] syzkaller0: entered promiscuous mode [ 815.457769][T15274] syzkaller0: entered allmulticast mode [ 815.845532][ T2153] sony 0003:054C:024B.0040: unexpected long global item [ 815.863816][ T2153] sony 0003:054C:024B.0040: parse failed [ 815.878771][ T2153] sony 0003:054C:024B.0040: probe with driver sony failed with error -22 [ 815.906338][T15273] tipc: Resetting bearer [ 815.929529][T15271] tipc: Resetting bearer [ 815.957122][T15271] tipc: Disabling bearer [ 816.959071][ T6018] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 817.002094][ T2153] usb 3-1: USB disconnect, device number 42 [ 817.067084][T15291] Set syz1 is full, maxelem 65536 reached [ 817.210526][ T6018] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 817.228760][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.247662][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.792092][ T6018] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 817.803090][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.836302][ T6018] usb 6-1: config 0 descriptor?? [ 818.354854][ T6018] sony 0003:054C:024B.0041: unexpected long global item [ 818.376529][ T6018] sony 0003:054C:024B.0041: parse failed [ 818.400722][ T6018] sony 0003:054C:024B.0041: probe with driver sony failed with error -22 [ 818.979607][ T30] audit: type=1400 audit(819.011:617): avc: denied { connect } for pid=15301 comm="syz.3.2454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 819.734129][ T6018] usb 6-1: USB disconnect, device number 6 [ 821.100678][T15326] tipc: Enabling of bearer rejected, failed to enable media [ 823.020841][T15345] bridge0: port 3(gretap0) entered blocking state [ 823.028966][T15345] bridge0: port 3(gretap0) entered disabled state [ 823.036968][T15345] gretap0: entered allmulticast mode [ 823.044835][T15345] gretap0: entered promiscuous mode [ 825.124621][ T6018] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 825.289071][ T6018] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 825.308256][ T6018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.340698][ T6018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.362052][ T6018] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 825.401101][ T6018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.477162][ T6018] usb 3-1: config 0 descriptor?? [ 826.247086][ T6018] sony 0003:054C:024B.0042: unexpected long global item [ 826.259990][ T6018] sony 0003:054C:024B.0042: parse failed [ 826.271641][ T6018] sony 0003:054C:024B.0042: probe with driver sony failed with error -22 [ 826.783807][ T30] audit: type=1400 audit(826.875:618): avc: denied { watch_sb } for pid=15392 comm="syz.5.2474" path="/110" dev="tmpfs" ino=589 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 827.257100][ T2153] usb 3-1: USB disconnect, device number 43 [ 828.013689][ T30] audit: type=1400 audit(827.956:619): avc: denied { write } for pid=15397 comm="syz.3.2475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 828.166957][ T30] audit: type=1326 audit(828.206:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15408 comm="syz.5.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df718ebe9 code=0x7ffc0000 [ 828.604204][ T30] audit: type=1326 audit(828.206:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15408 comm="syz.5.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df718ebe9 code=0x7ffc0000 [ 828.694033][ T30] audit: type=1326 audit(828.206:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15408 comm="syz.5.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0df718ebe9 code=0x7ffc0000 [ 828.857386][ T30] audit: type=1326 audit(828.206:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15408 comm="syz.5.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df718ebe9 code=0x7ffc0000 [ 828.886248][ T30] audit: type=1326 audit(828.206:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15408 comm="syz.5.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df718ebe9 code=0x7ffc0000 [ 829.120370][ T30] audit: type=1326 audit(828.206:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15408 comm="syz.5.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0df718ebe9 code=0x7ffc0000 [ 829.595935][ T30] audit: type=1326 audit(828.206:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15408 comm="syz.5.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df718ebe9 code=0x7ffc0000 [ 829.719835][ T30] audit: type=1326 audit(828.206:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15408 comm="syz.5.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df718ebe9 code=0x7ffc0000 [ 829.799884][T15436] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2484'. [ 832.486236][T15476] fuse: Bad value for 'fd' [ 837.410721][T15513] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2502'. [ 838.541140][T15525] bridge0: entered promiscuous mode [ 838.548077][T15525] macvlan2: entered promiscuous mode [ 838.654219][ T2153] libceph: connect (1)[c::]:6789 error -101 [ 838.678763][T15528] ceph: No mds server is up or the cluster is laggy [ 838.702496][ T2153] libceph: mon0 (1)[c::]:6789 connect error [ 838.719326][T15534] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 838.729920][T15534] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 839.238614][T15537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2510'. [ 840.383953][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 840.383981][ T30] audit: type=1400 audit(840.492:655): avc: denied { setopt } for pid=15550 comm="syz.5.2514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 840.805641][T12541] IPVS: starting estimator thread 0... [ 840.916921][T15557] IPVS: using max 38 ests per chain, 91200 per kthread [ 841.046244][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2517'. [ 841.930604][T15566] vlan3: entered allmulticast mode [ 841.961960][T15566] bridge0: entered allmulticast mode [ 841.973073][T15566] bridge1: port 1(vlan3) entered blocking state [ 841.983666][T15566] bridge1: port 1(vlan3) entered disabled state [ 841.998912][T15566] vlan3: entered promiscuous mode [ 842.005297][T15566] bridge0: entered promiscuous mode [ 842.050531][T15561] gretap2: entered promiscuous mode [ 842.127129][T15561] bridge1: port 2(gretap2) entered blocking state [ 842.146960][T15561] bridge1: port 2(gretap2) entered disabled state [ 842.156761][T15561] gretap2: entered allmulticast mode [ 843.415868][ T5918] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 843.598136][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 843.652365][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.691575][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.758226][ T5918] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 843.777496][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.798849][ T5918] usb 3-1: config 0 descriptor?? [ 844.035542][T12541] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 844.910747][ T5918] sony 0003:054C:024B.0043: unexpected long global item [ 845.177739][ T5918] sony 0003:054C:024B.0043: parse failed [ 845.244628][ T5918] sony 0003:054C:024B.0043: probe with driver sony failed with error -22 [ 845.267920][T12541] usb 6-1: Using ep0 maxpacket: 16 [ 845.311883][T12541] usb 6-1: config 5 has an invalid interface number: 168 but max is 0 [ 845.317904][T15594] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2527'. [ 845.377520][T12541] usb 6-1: config 5 has no interface number 0 [ 845.476711][T12541] usb 6-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 845.594301][T12541] usb 6-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 845.613070][T12541] usb 6-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 845.785908][T12541] usb 6-1: config 5 interface 168 has no altsetting 0 [ 845.832237][T12541] usb 6-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 845.846530][T12541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.867464][T12541] usb 6-1: Product: syz [ 845.881587][T12541] usb 6-1: Manufacturer: syz [ 845.899066][T12541] usb 6-1: SerialNumber: syz [ 845.913107][T15581] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 845.922814][T15581] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 845.973773][ T5918] usb 3-1: USB disconnect, device number 44 [ 846.563591][ C0] usb 6-1: NFC: Urb failure (status -71) [ 847.041775][ C0] usb 6-1: NFC: Urb failure (status -71) [ 847.053901][ T30] audit: type=1800 audit(846.895:656): pid=15612 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2532" name="file1" dev="overlay" ino=2604 res=0 errno=0 [ 847.079857][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.093632][T12541] usb 6-1: NFC: Unable to get FW version [ 847.140848][T12541] pn533_usb 6-1:5.168: probe with driver pn533_usb failed with error -71 [ 847.839294][T12541] usb 6-1: USB disconnect, device number 7 [ 849.067032][T15635] overlayfs: failed to clone lowerpath [ 849.852040][T15642] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2539'. [ 851.119266][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2541'. [ 856.423814][T15672] Bluetooth: hci1: command 0x0406 tx timeout [ 856.547200][T15694] netlink: 'syz.6.2551': attribute type 8 has an invalid length. [ 859.027811][ T5918] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 859.389294][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 859.425559][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.440324][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.461268][ T5918] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 859.539311][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.589043][T15726] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2563'. [ 859.612551][ T5918] usb 3-1: config 0 descriptor?? [ 859.670689][ T30] audit: type=1400 audit(859.782:657): avc: denied { write } for pid=15727 comm="syz.3.2564" path="socket:[45540]" dev="sockfs" ino=45540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 860.087848][ T5918] sony 0003:054C:024B.0044: unexpected long global item [ 860.137627][ T5918] sony 0003:054C:024B.0044: parse failed [ 860.176355][ T5918] sony 0003:054C:024B.0044: probe with driver sony failed with error -22 [ 860.259219][ T30] audit: type=1400 audit(860.382:658): avc: denied { connect } for pid=15733 comm="syz.6.2566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 861.570806][ T5918] usb 3-1: USB disconnect, device number 45 [ 862.925690][ T5918] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 862.979877][T15769] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2577'. [ 863.401397][ T5918] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 863.466159][ T5918] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 863.478039][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 863.491272][ T5918] usb 6-1: Product: syz [ 863.497481][ T5918] usb 6-1: Manufacturer: syz [ 863.503160][ T5918] usb 6-1: SerialNumber: syz [ 864.474098][ T5918] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 864.575150][ T5918] usb 6-1: USB disconnect, device number 8 [ 864.587998][ T5918] usblp0: removed [ 865.030056][ T30] audit: type=1400 audit(865.125:659): avc: denied { read } for pid=15786 comm="syz.2.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 866.277342][T15807] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[15807] [ 866.358786][ T30] audit: type=1400 audit(866.455:660): avc: denied { relabelfrom } for pid=15806 comm="syz.1.2588" name="" dev="pipefs" ino=45678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 867.949812][T15824] netlink: 'syz.3.2593': attribute type 3 has an invalid length. [ 867.964447][T15824] netlink: 'syz.3.2593': attribute type 3 has an invalid length. [ 867.973998][T15824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2593'. [ 868.571723][T15827] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 869.093969][T12541] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 869.773054][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.862828][T12541] usb 7-1: Using ep0 maxpacket: 32 [ 869.875907][T12541] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 869.932365][T15845] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 870.052877][ T1079] Bluetooth: hci3: Frame reassembly failed (-84) [ 870.096992][T12541] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 870.108517][T15843] ALSA: seq fatal error: cannot create timer (-19) [ 870.162806][T12541] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 870.242520][T12541] usb 7-1: Product: syz [ 870.267856][T12541] usb 7-1: Manufacturer: syz [ 870.309999][T12541] usb 7-1: SerialNumber: syz [ 870.326892][T12541] usb 7-1: config 0 descriptor?? [ 870.349780][T15829] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 871.051751][ T5918] usb 7-1: USB disconnect, device number 16 [ 872.001188][T10799] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 872.980626][ T5918] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 877.983943][T15915] overlayfs: failed to clone lowerpath [ 885.438719][T15976] comedi comedi2: dt2817: I/O port conflict (0x9,5) [ 890.411159][T16007] netlink: 'syz.1.2640': attribute type 12 has an invalid length. [ 891.031762][T16008] tipc: Enabling of bearer rejected, failed to enable media [ 892.927190][T16048] input: syz0 as /devices/virtual/input/input34 [ 895.859253][T12541] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 896.184940][T12541] usb 6-1: Using ep0 maxpacket: 16 [ 896.196891][T12541] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 896.227032][T12541] usb 6-1: config 0 has no interface number 0 [ 896.705841][T12541] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 896.717127][T12541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.732303][T12541] usb 6-1: Product: syz [ 896.737493][T12541] usb 6-1: Manufacturer: syz [ 896.743749][T12541] usb 6-1: SerialNumber: syz [ 896.760279][T12541] usb 6-1: config 0 descriptor?? [ 896.778368][T12541] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 897.627602][T12541] gspca_spca1528: reg_w err -71 [ 897.658983][T12541] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 897.681322][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2665'. [ 897.820587][T12541] usb 6-1: USB disconnect, device number 9 [ 898.532259][ T30] audit: type=1400 audit(898.661:661): avc: denied { watch } for pid=16110 comm="syz.1.2668" path="/565/file0" dev="tmpfs" ino=2993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 901.852001][T16146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2678'. [ 901.863995][T16146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2678'. [ 903.510458][ T30] audit: type=1400 audit(903.624:662): avc: denied { create } for pid=16151 comm="syz.6.2680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 905.054184][T16168] syz.5.2684 (16168): drop_caches: 2 [ 905.994313][ T30] audit: type=1400 audit(906.115:663): avc: denied { firmware_load } for pid=16172 comm="syz.5.2686" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 906.203859][ T6018] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 906.353149][T16183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2687'. [ 906.893851][ T5918] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 907.086565][ T6018] usb 7-1: unable to get BOS descriptor or descriptor too short [ 907.097784][ T6018] usb 7-1: config 192 has an invalid interface number: 142 but max is 0 [ 907.108414][ T6018] usb 7-1: config 192 has no interface number 0 [ 907.124928][ T6018] usb 7-1: config 192 interface 142 altsetting 5 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 907.253505][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 907.280441][ T6018] usb 7-1: config 192 interface 142 has no altsetting 0 [ 907.291523][ T6018] usb 7-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=1e.52 [ 907.302051][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.313024][ T6018] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.326304][ T6018] usb 7-1: Product: syz [ 907.331324][ T6018] usb 7-1: Manufacturer: syz [ 907.341193][ T6018] usb 7-1: SerialNumber: syz [ 907.393068][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.470617][ T5918] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 907.509290][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.537693][ T5918] usb 3-1: config 0 descriptor?? [ 907.635940][ T6018] s2255 7-1:192.142: Could not find bulk-in endpoint [ 907.669630][ T6018] Sensoray 2255 driver load failed: 0xfffffff4 [ 907.698481][ T6018] s2255 7-1:192.142: probe with driver s2255 failed with error -12 [ 907.773052][ T6018] usb 7-1: USB disconnect, device number 18 [ 908.676979][ T5918] sony 0003:054C:024B.0045: unexpected long global item [ 908.711344][ T5918] sony 0003:054C:024B.0045: parse failed [ 908.722532][ T5918] sony 0003:054C:024B.0045: probe with driver sony failed with error -22 [ 910.070739][T12541] usb 3-1: USB disconnect, device number 46 [ 911.966091][T16240] tipc: Enabled bearer , priority 0 [ 912.098116][T16240] syzkaller0: entered promiscuous mode [ 912.538737][T16240] syzkaller0: entered allmulticast mode [ 912.740305][T16243] tipc: Resetting bearer [ 912.781132][T16239] tipc: Resetting bearer [ 912.870728][ T6018] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 912.880825][T16239] tipc: Disabling bearer [ 913.072680][ T6018] usb 7-1: Using ep0 maxpacket: 16 [ 913.096536][ T6018] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 913.108784][ T6018] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 913.121016][ T6018] usb 7-1: Product: syz [ 913.126168][ T6018] usb 7-1: Manufacturer: syz [ 913.132212][ T6018] usb 7-1: SerialNumber: syz [ 914.041270][ T6018] usb 7-1: config 0 descriptor?? [ 916.874420][ T6018] usb 7-1: USB disconnect, device number 19 [ 918.466977][ T30] audit: type=1400 audit(918.611:664): avc: denied { write } for pid=16293 comm="syz.5.2717" path="socket:[46592]" dev="sockfs" ino=46592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 919.838553][T16308] gretap0: entered promiscuous mode [ 919.847059][T16308] vlan2: entered promiscuous mode [ 921.402392][T16325] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2725'. [ 922.156803][ T30] audit: type=1400 audit(922.293:665): avc: denied { listen } for pid=16326 comm="syz.2.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 922.179575][ C0] vkms_vblank_simulate: vblank timer overrun [ 922.329335][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2729'. [ 922.342870][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2729'. [ 923.035707][ T5918] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 923.225540][ T5918] usb 7-1: Using ep0 maxpacket: 32 [ 923.233780][ T5918] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 923.248213][ T5918] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 923.261562][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 923.288203][ T5918] usb 7-1: Product: syz [ 923.302908][ T5918] usb 7-1: Manufacturer: syz [ 923.317920][ T5918] usb 7-1: SerialNumber: syz [ 923.336359][ T5918] usb 7-1: config 0 descriptor?? [ 923.358945][T16347] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 924.241830][ T5918] usb 7-1: USB disconnect, device number 20 [ 924.371755][ T30] audit: type=1400 audit(924.524:666): avc: denied { watch } for pid=16361 comm="syz.5.2734" path="/159/bus/file1" dev="overlay" ino=866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 924.398890][ C0] vkms_vblank_simulate: vblank timer overrun [ 924.705884][ T6018] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 924.864700][ T6018] usb 7-1: Using ep0 maxpacket: 32 [ 924.877455][ T6018] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 924.907311][ T6018] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 924.923058][ T6018] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 924.951480][ T6018] usb 7-1: Product: syz [ 924.967567][ T6018] usb 7-1: Manufacturer: syz [ 924.983289][ T6018] usb 7-1: SerialNumber: syz [ 925.008832][ T6018] usb 7-1: config 0 descriptor?? [ 925.023567][T16347] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 925.654492][ T5918] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 925.816944][ T5918] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 925.829325][ T5918] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 925.842114][ T5918] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 925.853294][ T5918] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 925.867063][ T5918] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 925.882632][ T5918] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 925.899466][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 925.926250][ T5918] usb 6-1: Product: syz [ 925.943600][ T5918] usb 6-1: Manufacturer: syz [ 925.960046][ T5918] cdc_wdm 6-1:1.0: skipping garbage [ 925.970695][ T5918] cdc_wdm 6-1:1.0: skipping garbage [ 925.979892][ T5918] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 925.987233][ T5918] cdc_wdm 6-1:1.0: Unknown control protocol [ 926.124086][T16375] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2736'. [ 927.743889][ T6018] usb 7-1: USB disconnect, device number 21 [ 928.076265][T12541] usb 6-1: USB disconnect, device number 10 [ 928.127837][T16382] netlink: 'syz.6.2740': attribute type 4 has an invalid length. [ 928.145689][T16382] netlink: 'syz.6.2740': attribute type 4 has an invalid length. [ 928.291063][T16382] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2740'. [ 929.634712][T16401] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2745'. [ 929.645936][T16401] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2745'. [ 930.203320][ T30] audit: type=1400 audit(930.337:667): avc: denied { name_connect } for pid=16394 comm="syz.1.2744" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 930.312010][ T30] audit: type=1400 audit(930.367:668): avc: denied { read } for pid=16394 comm="syz.1.2744" lport=45628 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 930.455200][ T30] audit: type=1400 audit(930.547:669): avc: denied { setopt } for pid=16394 comm="syz.1.2744" lport=45628 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 930.744697][T16417] ubi31: attaching mtd0 [ 930.763274][T16417] ubi31: scanning is finished [ 931.276935][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.930862][T16417] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 932.890554][ T5918] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 933.052274][ T5918] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 933.087588][ T5918] usb 6-1: config 0 has no interface number 0 [ 933.213806][ T5918] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 933.242804][ T5918] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 933.270497][ T5918] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 933.281448][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.305014][ T5918] usb 6-1: config 0 descriptor?? [ 933.331287][T16426] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 933.502212][ T5918] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 935.854297][T12541] usb 6-1: USB disconnect, device number 11 [ 940.470283][T16492] 8021q: VLANs not supported on lo [ 941.879681][T16503] binder: 16498:16503 ioctl c0306201 0 returned -14 [ 942.454309][T16508] trusted_key: encrypted_key: insufficient parameters specified [ 944.623240][T16518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 945.285633][ T5918] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 945.563802][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 945.622595][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.639593][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.657058][ T5918] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 945.668295][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.687359][ T5918] usb 3-1: config 0 descriptor?? [ 946.220994][ T5918] sony 0003:054C:024B.0046: unexpected long global item [ 946.269702][ T5918] sony 0003:054C:024B.0046: parse failed [ 946.415597][ T5918] sony 0003:054C:024B.0046: probe with driver sony failed with error -22 [ 947.819404][T12541] usb 3-1: USB disconnect, device number 47 [ 948.413367][T16553] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2789'. [ 948.715766][ T30] audit: type=1400 audit(947.893:670): avc: denied { mounton } for pid=16552 comm="syz.2.2789" path="/530/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 948.892549][T16562] snd_dummy snd_dummy.0: control 3:4:-2:syz0:2147483647 is already present [ 948.938918][T16562] NILFS (nullb0): couldn't find nilfs on the device [ 949.374570][T16553] orangefs_mount: mount request failed with -4 [ 954.402354][ T30] audit: type=1400 audit(953.159:671): avc: denied { ioctl } for pid=16601 comm="syz.5.2801" path="socket:[47701]" dev="sockfs" ino=47701 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 960.428306][ T2153] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 960.972581][ T2153] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 961.002070][ T2153] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.015825][ T2153] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.753704][T16669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 961.798225][ T2153] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 961.836236][ T2153] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.854439][ T2153] usb 7-1: config 0 descriptor?? [ 962.349107][ T2153] usbhid 7-1:0.0: can't add hid device: -71 [ 962.356704][ T2153] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 962.369872][ T2153] usb 7-1: USB disconnect, device number 22 [ 965.146382][ T30] audit: type=1400 audit(963.252:672): avc: denied { getopt } for pid=16712 comm="syz.2.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 965.992923][T16719] overlayfs: failed to clone lowerpath [ 966.012768][T16720] overlayfs: failed to clone upperpath [ 966.965057][T16729] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2828'. [ 966.976291][T16729] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2828'. [ 967.436862][ T30] audit: type=1400 audit(965.394:673): avc: denied { map } for pid=16728 comm="syz.3.2829" path="socket:[47847]" dev="sockfs" ino=47847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 968.213126][ T30] audit: type=1400 audit(965.404:674): avc: denied { read } for pid=16728 comm="syz.3.2829" path="socket:[47847]" dev="sockfs" ino=47847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 968.863662][ T30] audit: type=1400 audit(966.414:675): avc: denied { ioctl } for pid=16739 comm="syz.5.2831" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 968.982966][T16747] /dev/nullb0: Can't open blockdev [ 969.028415][T16747] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 969.083820][T16747] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 969.130478][T16747] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 969.174425][T16749] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 969.182294][T16749] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 969.213772][T16749] vhci_hcd vhci_hcd.0: Device attached [ 969.479000][T12541] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 970.497449][T16761] usb usb5: usbfs: process 16761 (syz.5.2835) did not claim interface 0 before use [ 970.929186][T16750] vhci_hcd: connection reset by peer [ 970.959215][ T1079] vhci_hcd: stop threads [ 970.967715][ T1079] vhci_hcd: release socket [ 970.975302][ T1079] vhci_hcd: disconnect device [ 974.229563][ T30] audit: type=1400 audit(971.736:676): avc: denied { listen } for pid=16784 comm="syz.5.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 974.252433][ C0] vkms_vblank_simulate: vblank timer overrun [ 975.380095][T12541] vhci_hcd: vhci_device speed not set [ 977.114707][ T30] audit: type=1400 audit(974.468:677): avc: denied { create } for pid=16811 comm="syz.2.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 979.624276][ T2153] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 980.289861][ T2153] usb 6-1: Using ep0 maxpacket: 32 [ 980.301093][T16832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.315555][T16832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.491307][T16853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2859'. [ 982.509513][T16853] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2859'. [ 982.803215][ T7055] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.851654][ T7055] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.420685][ T7053] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 983.439735][ T7053] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 984.419213][T16874] program syz.2.2863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 985.728550][ T2153] usb 6-1: unable to get BOS descriptor or descriptor too short [ 986.155863][ T2153] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 986.201150][ T2153] usb 6-1: can't read configurations, error -71 [ 988.106802][ T30] audit: type=1400 audit(984.748:678): avc: denied { getopt } for pid=16896 comm="syz.2.2869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 989.808922][T16913] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2873'. [ 990.049991][T16918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2875'. [ 990.900741][T16927] netlink: 'syz.2.2877': attribute type 9 has an invalid length. [ 990.916227][T16920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2875'. [ 990.941394][T16927] netlink: 'syz.2.2877': attribute type 9 has an invalid length. [ 991.685418][T16941] openvswitch: netlink: Message has 4 unknown bytes. [ 994.450304][T16964] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 995.854577][T12541] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 996.227109][T12541] usb 3-1: Using ep0 maxpacket: 32 [ 996.237463][T12541] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 996.277408][T16983] libceph: resolve '4..' (ret=-3): failed [ 996.299027][T12541] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 996.331567][T12541] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 996.353752][T12541] usb 3-1: Product: syz [ 996.375128][T12541] usb 3-1: Manufacturer: syz [ 996.392108][T12541] usb 3-1: SerialNumber: syz [ 996.545566][T12541] usb 3-1: config 0 descriptor?? [ 996.577453][T16971] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 996.675435][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 996.679627][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.721421][T16989] lo speed is unknown, defaulting to 1000 [ 996.923690][ T5918] usb 3-1: USB disconnect, device number 48 [ 997.562148][T16985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 997.779037][T16996] syz.3.2892 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 997.898386][ T5918] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 999.158280][T16998] vlan2: entered promiscuous mode [ 999.164357][T16998] bond0: entered promiscuous mode [ 999.170460][T16998] bond_slave_0: entered promiscuous mode [ 999.177381][T16998] bond_slave_1: entered promiscuous mode [ 1000.167453][T16999] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1000.406329][T16999] usb 6-1: Using ep0 maxpacket: 16 [ 1000.444356][T16999] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1000.558931][T17011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2896'. [ 1000.965860][T16999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1000.994744][T16999] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1001.009092][T16999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.022448][T16999] usb 6-1: Product: syz [ 1001.100801][T16999] usb 6-1: Manufacturer: syz [ 1001.145254][T16999] usb 6-1: SerialNumber: syz [ 1001.174609][T16999] usb 6-1: config 0 descriptor?? [ 1001.265138][T16999] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1001.291742][T16999] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1002.245197][T16999] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1002.833318][ T30] audit: type=1400 audit(998.517:679): avc: denied { mounton } for pid=17017 comm="syz.3.2899" path="/file0" dev="ramfs" ino=49382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1002.930594][T17022] overlayfs: failed to clone lowerpath [ 1003.060248][T16999] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1003.078035][T16999] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1003.211692][T16999] em28xx 6-1:0.0: No AC97 audio processor [ 1003.280245][T16999] usb 6-1: USB disconnect, device number 14 [ 1003.354317][T16999] em28xx 6-1:0.0: Disconnecting em28xx [ 1003.511326][T16999] em28xx 6-1:0.0: Freeing device [ 1006.590049][T16999] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1006.758271][T17074] Driver unsupported XDP return value 0 on prog (id 516) dev N/A, expect packet loss! [ 1007.208191][T16999] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1007.243356][T16999] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.296884][T16999] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.978577][T16999] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1010.006472][T16999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.130663][T16999] usb 7-1: config 0 descriptor?? [ 1010.152547][T16999] usb 7-1: can't set config #0, error -71 [ 1010.858636][ T30] audit: type=1400 audit(1005.907:680): avc: denied { getopt } for pid=17088 comm="syz.6.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1011.041559][T16999] usb 7-1: USB disconnect, device number 23 [ 1011.135340][ T30] audit: type=1400 audit(1006.281:681): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1011.295462][ T30] audit: type=1400 audit(1006.430:682): avc: denied { map } for pid=17093 comm="syz.3.2915" path="socket:[49452]" dev="sockfs" ino=49452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1011.469053][ T30] audit: type=1400 audit(1006.430:683): avc: denied { read accept } for pid=17093 comm="syz.3.2915" path="socket:[49452]" dev="sockfs" ino=49452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1012.096812][T17104] tipc: Started in network mode [ 1012.102985][T17104] tipc: Node identity 7f000001, cluster identity 4711 [ 1012.111478][T17104] tipc: New replicast peer: 0.0.0.0 [ 1012.129505][T17104] tipc: Enabled bearer , priority 10 [ 1013.066289][T17115] lo speed is unknown, defaulting to 1000 [ 1013.537637][T12541] tipc: Node number set to 2130706433 [ 1013.571493][T17114] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 1013.777483][ T30] audit: type=1400 audit(1008.750:684): avc: denied { remount } for pid=17122 comm="syz.5.2922" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1014.655209][ T30] audit: type=1400 audit(1009.573:685): avc: denied { ioctl } for pid=17122 comm="syz.5.2922" path="socket:[48855]" dev="sockfs" ino=48855 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1015.587025][ T5918] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1016.269304][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 1016.475005][ T5918] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1016.494679][ T5918] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1016.506037][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1016.516947][ T5918] usb 3-1: Product: syz [ 1016.531616][ T5918] usb 3-1: Manufacturer: syz [ 1017.018633][ T5918] usb 3-1: SerialNumber: syz [ 1017.072022][ T5918] usb 3-1: config 0 descriptor?? [ 1017.091332][T17139] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1017.226016][ T30] audit: type=1400 audit(1011.987:686): avc: denied { accept } for pid=17152 comm="syz.3.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1017.480936][T12541] usb 3-1: USB disconnect, device number 50 [ 1017.884369][T17164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2933'. [ 1017.902437][T17164] bridge_slave_1: left allmulticast mode [ 1017.909462][T17164] bridge_slave_1: left promiscuous mode [ 1017.917961][T17164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.116842][T17164] bridge_slave_0: left allmulticast mode [ 1018.123967][T17164] bridge_slave_0: left promiscuous mode [ 1018.134477][T17164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.672193][T17169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17169 comm=syz.1.2934 [ 1018.847623][ T5918] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1019.040150][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 1019.049220][ T5918] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1019.069922][ T5918] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1019.175085][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1019.224737][ T5918] usb 3-1: Product: syz [ 1019.361853][ T5918] usb 3-1: Manufacturer: syz [ 1019.377250][ T5918] usb 3-1: SerialNumber: syz [ 1019.405485][ T5918] usb 3-1: config 0 descriptor?? [ 1019.412178][T17139] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1021.640065][ T9] usb 3-1: USB disconnect, device number 51 [ 1023.369217][ T5918] IPVS: starting estimator thread 0... [ 1023.498137][T17199] IPVS: using max 67 ests per chain, 160800 per kthread [ 1025.080309][ T30] audit: type=1400 audit(1019.012:687): avc: denied { write } for pid=17212 comm="syz.5.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1026.125182][T17229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2947'. [ 1026.411997][T17226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.462766][T17237] 9pnet_fd: Insufficient options for proto=fd [ 1027.125605][ T30] audit: type=1400 audit(1021.116:688): avc: denied { shutdown } for pid=17238 comm="syz.2.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1027.361185][T17226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1027.406861][T17226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1027.885077][T17240] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1028.017772][ T1107] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.086489][ T1107] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.247599][ T1107] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1028.267718][ T1107] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.280857][ T1107] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.355245][ T1107] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1029.528398][ T1107] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1029.623975][ T1107] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.631282][T17253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2953'. [ 1029.647084][T17253] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2953'. [ 1029.869016][ T1107] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1029.884785][ T1107] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1029.895911][ T1107] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.995386][ T1107] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1031.163625][ T30] audit: type=1800 audit(1024.325:689): pid=17267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2955" name="bus" dev="overlay" ino=1004 res=0 errno=0 [ 1032.010624][T17276] syz.2.2957: attempt to access beyond end of device [ 1032.010624][T17276] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 1032.026698][T17276] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 1033.729509][ T30] audit: type=1400 audit(1027.337:690): avc: denied { setopt } for pid=17283 comm="syz.1.2960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1033.778119][ T30] audit: type=1400 audit(1027.337:691): avc: denied { bind } for pid=17283 comm="syz.1.2960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1034.021298][ T30] audit: type=1400 audit(1027.337:692): avc: denied { name_bind } for pid=17283 comm="syz.1.2960" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1034.668820][ T30] audit: type=1400 audit(1027.337:693): avc: denied { node_bind } for pid=17283 comm="syz.1.2960" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1034.971691][T17312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=17312 comm=syz.3.2966 [ 1035.038108][T17312] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2966'. [ 1035.424364][T17316] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2967'. [ 1036.455521][T17322] : Can't lookup blockdev [ 1038.817407][T17355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2979'. [ 1039.950331][T17368] pim6reg: entered allmulticast mode [ 1040.125049][ T30] audit: type=1326 audit(1033.220:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.1.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4be18ebe9 code=0x7ffc0000 [ 1040.163707][ T30] audit: type=1326 audit(1033.220:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.1.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fc4be18ebe9 code=0x7ffc0000 [ 1040.309537][ T30] audit: type=1326 audit(1033.220:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.1.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4be18ebe9 code=0x7ffc0000 [ 1040.353282][T17372] openvswitch: netlink: Message has 4 unknown bytes. [ 1040.479409][ T30] audit: type=1326 audit(1033.220:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.1.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4be18ebe9 code=0x7ffc0000 [ 1040.559882][T17362] pim6reg: left allmulticast mode [ 1040.621948][ T30] audit: type=1326 audit(1033.220:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.1.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc4be18ebe9 code=0x7ffc0000 [ 1040.734542][ T30] audit: type=1326 audit(1033.220:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.1.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4be18ebe9 code=0x7ffc0000 [ 1040.912756][ T30] audit: type=1326 audit(1033.220:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.1.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4be18ebe9 code=0x7ffc0000 [ 1040.961901][ T30] audit: type=1326 audit(1033.220:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.1.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4be18ebe9 code=0x7ffc0000 [ 1040.995106][ T30] audit: type=1326 audit(1033.220:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.1.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4be18ebe9 code=0x7ffc0000 [ 1041.098501][ T30] audit: type=1326 audit(1033.220:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17362 comm="syz.1.2982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4be18ebe9 code=0x7ffc0000 [ 1041.132376][T17354] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2973'. [ 1041.160128][T17382] netlink: 'syz.5.2985': attribute type 12 has an invalid length. [ 1045.574194][T17419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2998'. [ 1045.648845][T17419] bond_slave_0: entered promiscuous mode [ 1045.656171][T17419] bond_slave_1: entered promiscuous mode [ 1045.671453][T17419] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1051.377319][T17456] syz.6.3006 (17456): drop_caches: 2 [ 1051.807926][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 1051.807943][ T30] audit: type=1400 audit(1044.323:721): avc: denied { listen } for pid=17467 comm="syz.5.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1052.767208][ T30] audit: type=1400 audit(1044.323:722): avc: denied { accept } for pid=17467 comm="syz.5.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1054.301634][T17499] overlayfs: failed to resolve './file1': -2 [ 1054.490235][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1054.653438][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1054.813329][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.904094][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.006603][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1055.088963][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.123319][ T9] usb 6-1: config 0 descriptor?? [ 1055.257909][T17505] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3020'. [ 1055.270982][ T30] audit: type=1400 audit(1047.579:723): avc: denied { setopt } for pid=17504 comm="syz.3.3020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1055.393656][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3021'. [ 1055.410325][T17507] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1055.581143][ T9] sony 0003:054C:024B.0047: unexpected long global item [ 1055.602381][ T9] sony 0003:054C:024B.0047: parse failed [ 1055.609244][ T9] sony 0003:054C:024B.0047: probe with driver sony failed with error -22 [ 1056.950854][ T9] usb 6-1: USB disconnect, device number 15 [ 1057.126942][T17528] overlayfs: missing 'lowerdir' [ 1061.460492][ T30] audit: type=1400 audit(1053.331:724): avc: denied { mount } for pid=17553 comm="syz.3.3034" name="/" dev="rpc_pipefs" ino=51311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1062.478550][T17574] binder: 17568:17574 ioctl c0306201 200000000ac0 returned -14 [ 1062.588255][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.720396][T17597] overlayfs: failed to clone upperpath [ 1067.954846][T17627] /dev/nullb0: Can't lookup blockdev [ 1070.001243][ T30] audit: type=1400 audit(1061.329:725): avc: denied { lock } for pid=17638 comm="syz.2.3051" path="socket:[51492]" dev="sockfs" ino=51492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1075.337862][T17667] overlayfs: failed to clone upperpath [ 1076.515147][ T30] audit: type=1400 audit(1067.016:726): avc: denied { create } for pid=17671 comm="syz.1.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1078.672881][T17686] overlayfs: failed to resolve './file0': -2 [ 1080.332976][ T30] audit: type=1400 audit(1071.010:727): avc: denied { setcurrent } for pid=17681 comm="syz.6.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1080.862717][ T30] audit: type=1401 audit(1071.010:728): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1081.564497][T17702] lo speed is unknown, defaulting to 1000 [ 1082.490764][T17717] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3067'. [ 1082.625485][T17719] No buffer was provided with the request [ 1082.864270][ T30] audit: type=1400 audit(1073.171:729): avc: denied { node_bind } for pid=17709 comm="syz.5.3068" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1085.735713][T17750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3076'. [ 1086.146447][T17752] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3070'. [ 1087.451904][ T30] audit: type=1400 audit(1077.633:730): avc: denied { write } for pid=17755 comm="syz.5.3078" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1087.745669][ T30] audit: type=1400 audit(1077.633:731): avc: denied { ioctl } for pid=17755 comm="syz.5.3078" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1091.134022][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3085'. [ 1091.145095][T17796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3085'. [ 1091.715913][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3086'. [ 1091.727330][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3086'. [ 1092.343842][T17802] netlink: 'syz.2.3087': attribute type 1 has an invalid length. [ 1092.459414][T17806] vivid-001: disconnect [ 1093.010491][T17802] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3087'. [ 1093.202701][T17803] vivid-001: reconnect [ 1093.589262][T17815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=17815 comm=syz.2.3087 [ 1094.231533][T17815] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3087'. [ 1095.645920][T17840] netlink: 'syz.2.3095': attribute type 10 has an invalid length. [ 1095.706693][T17840] bridge0: port 3(team0) entered disabled state [ 1095.718289][T17840] team0: left allmulticast mode [ 1095.724602][T17840] team_slave_0: left allmulticast mode [ 1095.731296][T17840] team_slave_1: left allmulticast mode [ 1095.738062][T17840] team0: left promiscuous mode [ 1095.743928][T17840] team_slave_0: left promiscuous mode [ 1095.759880][T17840] team_slave_1: left promiscuous mode [ 1095.769808][T17840] bridge0: port 3(team0) entered disabled state [ 1096.108204][ T30] audit: type=1400 audit(1085.724:732): avc: denied { setopt } for pid=17837 comm="syz.3.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1096.152317][T17846] overlayfs: failed to clone upperpath [ 1098.033063][T17859] netlink: 'syz.1.3102': attribute type 4 has an invalid length. [ 1099.145562][T17878] netlink: 'syz.6.3106': attribute type 1 has an invalid length. [ 1099.193308][T17878] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3106'. [ 1099.386314][T17883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=17883 comm=syz.6.3106 [ 1099.411000][T17883] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3106'. [ 1100.519190][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3109'. [ 1100.530642][T17890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3109'. [ 1103.142500][T17919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3117'. [ 1103.280216][T17921] overlayfs: failed to clone upperpath [ 1104.015143][T17923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3118'. [ 1104.027530][T17923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3118'. [ 1105.260457][T17940] team0: No ports can be present during mode change [ 1105.631104][T17940] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1106.272936][T17940] vlan0: entered promiscuous mode [ 1106.466341][T17940] team0: Port device vlan0 added [ 1106.498022][T17942] tipc: Enabled bearer , priority 0 [ 1107.248311][ T5918] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1107.536348][T17967] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3130'. [ 1107.903632][T12541] tipc: Node number set to 3600953979 [ 1107.997404][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 1108.030068][ T5918] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1108.134608][ T5918] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1108.146048][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1108.156055][ T5918] usb 6-1: Product: syz [ 1108.161180][ T5918] usb 6-1: Manufacturer: syz [ 1108.166971][ T5918] usb 6-1: SerialNumber: syz [ 1108.192627][ T5918] usb 6-1: config 0 descriptor?? [ 1108.205168][T17959] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1108.813763][T12541] usb 6-1: USB disconnect, device number 16 [ 1109.367938][T12541] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1109.583727][T17983] binder: 17978:17983 ioctl c0306201 0 returned -14 [ 1109.622358][T12541] usb 6-1: Using ep0 maxpacket: 32 [ 1109.634928][T12541] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1109.695264][T12541] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1109.757291][T12541] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1109.844750][T12541] usb 6-1: Product: syz [ 1109.904377][T12541] usb 6-1: Manufacturer: syz [ 1109.971956][T12541] usb 6-1: SerialNumber: syz [ 1110.127089][T12541] usb 6-1: config 0 descriptor?? [ 1110.168973][T12541] usb 6-1: can't set config #0, error -71 [ 1110.227289][T12541] usb 6-1: USB disconnect, device number 17 [ 1110.518823][T17990] vivid-000: ================= START STATUS ================= [ 1110.611057][T17990] vivid-000: Radio HW Seek Mode: Bounded [ 1110.689034][T17990] vivid-000: Radio Programmable HW Seek: false [ 1110.819738][T17990] vivid-000: RDS Rx I/O Mode: Block I/O [ 1110.829261][T17990] vivid-000: Generate RBDS Instead of RDS: false [ 1110.844757][T17990] vivid-000: RDS Reception: true [ 1110.869010][T17990] vivid-000: RDS Program Type: 0 inactive [ 1110.879222][T17990] vivid-000: RDS PS Name: inactive [ 1110.903209][T17995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3135'. [ 1110.918403][T17990] vivid-000: RDS Radio Text: inactive [ 1110.957255][T17995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3135'. [ 1110.994505][T17990] vivid-000: RDS Traffic Announcement: false inactive [ 1111.004596][T17990] vivid-000: RDS Traffic Program: false inactive [ 1111.012559][T17990] vivid-000: RDS Music: false inactive [ 1111.019245][T17990] vivid-000: ================== END STATUS ================== [ 1113.051953][ T30] audit: type=1400 audit(1101.607:733): avc: denied { bind } for pid=18013 comm="syz.6.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1113.157986][T18019] 9pnet_virtio: no channels available for device syz [ 1114.245826][T18027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3143'. [ 1115.780568][T18030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3143'. [ 1116.740734][T18029] lo speed is unknown, defaulting to 1000 [ 1117.368473][ T30] audit: type=1400 audit(1105.639:734): avc: denied { listen } for pid=18053 comm="syz.6.3149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1117.412651][ T30] audit: type=1400 audit(1105.658:735): avc: denied { accept } for pid=18053 comm="syz.6.3149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1120.425665][T18065] lo speed is unknown, defaulting to 1000 [ 1124.591485][T18093] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3157'. [ 1127.967842][T18126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3165'. [ 1128.058429][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1130.404918][T18148] overlayfs: failed to clone upperpath [ 1135.686578][T18192] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3178'. [ 1139.284855][T18206] lo speed is unknown, defaulting to 1000 [ 1141.616247][ T5918] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1141.961527][T18219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1141.973377][ T5918] usb 6-1: device descriptor read/64, error -71 [ 1142.463257][ T5918] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1142.666347][ T5918] usb 6-1: device descriptor read/64, error -71 [ 1142.805523][ T5918] usb usb6-port1: attempt power cycle [ 1143.307990][ T5918] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1143.952973][T16999] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 1143.973807][ T5918] usb 6-1: device descriptor read/8, error -71 [ 1144.392544][T16999] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1144.409891][T18250] syz.5.3193: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1144.428678][T18250] CPU: 1 UID: 0 PID: 18250 Comm: syz.5.3193 Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(full) [ 1144.428711][T18250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1144.428728][T18250] Call Trace: [ 1144.428736][T18250] [ 1144.428744][T18250] dump_stack_lvl+0x16c/0x1f0 [ 1144.428773][T18250] warn_alloc+0x248/0x3a0 [ 1144.428797][T18250] ? __pfx_warn_alloc+0x10/0x10 [ 1144.428818][T18250] ? __pfx_stack_trace_save+0x10/0x10 [ 1144.428856][T18250] ? kasan_save_stack+0x42/0x60 [ 1144.428875][T18250] ? kasan_save_stack+0x33/0x60 [ 1144.428894][T18250] ? kasan_save_track+0x14/0x30 [ 1144.428913][T18250] ? xskq_create+0x52/0x1d0 [ 1144.428941][T18250] ? xsk_setsockopt+0x74e/0x9a0 [ 1144.428966][T18250] ? do_sock_setsockopt+0xf3/0x1d0 [ 1144.428993][T18250] ? xskq_create+0xfb/0x1d0 [ 1144.429023][T18250] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1144.429062][T18250] ? xskq_create+0xfb/0x1d0 [ 1144.429098][T18250] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1144.429136][T18250] ? xskq_create+0xfb/0x1d0 [ 1144.429165][T18250] vmalloc_user_noprof+0x9e/0xe0 [ 1144.429194][T18250] ? xskq_create+0xfb/0x1d0 [ 1144.429224][T18250] xskq_create+0xfb/0x1d0 [ 1144.429256][T18250] xsk_setsockopt+0x74e/0x9a0 [ 1144.429285][T18250] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1144.429313][T18250] ? find_held_lock+0x2b/0x80 [ 1144.429343][T18250] ? selinux_socket_setsockopt+0x6a/0x80 [ 1144.429379][T18250] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1144.429411][T18250] do_sock_setsockopt+0xf3/0x1d0 [ 1144.429441][T18250] __sys_setsockopt+0x1a0/0x230 [ 1144.429467][T18250] __x64_sys_setsockopt+0xbd/0x160 [ 1144.429486][T18250] ? do_syscall_64+0x91/0x4c0 [ 1144.429508][T18250] ? lockdep_hardirqs_on+0x7c/0x110 [ 1144.429528][T18250] do_syscall_64+0xcd/0x4c0 [ 1144.429552][T18250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.429573][T18250] RIP: 0033:0x7f0df718ebe9 [ 1144.429591][T18250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1144.429612][T18250] RSP: 002b:00007f0df807d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1144.429631][T18250] RAX: ffffffffffffffda RBX: 00007f0df73b6090 RCX: 00007f0df718ebe9 [ 1144.429645][T18250] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1144.429657][T18250] RBP: 00007f0df7211e19 R08: 0000000000000004 R09: 0000000000000000 [ 1144.429670][T18250] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1144.429683][T18250] R13: 00007f0df73b6128 R14: 00007f0df73b6090 R15: 00007ffe48d02318 [ 1144.429712][T18250] [ 1144.429759][T18250] Mem-Info: [ 1144.758693][T18250] active_anon:25138 inactive_anon:0 isolated_anon:0 [ 1144.758693][T18250] active_file:17052 inactive_file:41340 isolated_file:0 [ 1144.758693][T18250] unevictable:769 dirty:384 writeback:75 [ 1144.758693][T18250] slab_reclaimable:7553 slab_unreclaimable:126883 [ 1144.758693][T18250] mapped:30205 shmem:18209 pagetables:1499 [ 1144.758693][T18250] sec_pagetables:0 bounce:0 [ 1144.758693][T18250] kernel_misc_reclaimable:0 [ 1144.758693][T18250] free:1245620 free_pcp:29752 free_cma:0 [ 1144.813822][T18250] Node 0 active_anon:100552kB inactive_anon:0kB active_file:68164kB inactive_file:165144kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:120764kB dirty:1536kB writeback:300kB shmem:71300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12612kB pagetables:5780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1144.852708][T18250] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1144.888896][T18250] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1144.923758][T18250] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 1144.931013][T18250] Node 0 DMA32 free:1109552kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:100524kB inactive_anon:0kB active_file:68164kB inactive_file:163828kB unevictable:1540kB writepending:1836kB present:3129332kB managed:2539408kB mlocked:4kB bounce:0kB free_pcp:65192kB local_pcp:39976kB free_cma:0kB [ 1144.970123][T18250] lowmem_reserve[]: 0 0 1 1 1 [ 1144.976152][T18250] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 1145.011235][T18250] lowmem_reserve[]: 0 0 0 0 0 [ 1145.017220][T18250] Node 1 Normal free:3857560kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:216kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:53780kB local_pcp:24716kB free_cma:0kB [ 1145.055106][T18250] lowmem_reserve[]: 0 0 0 0 0 [ 1145.061239][T18250] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1145.077116][T18250] Node 0 DMA32: 1320*4kB (UME) 1064*8kB (UME) 859*16kB (UME) 801*32kB (UME) 260*64kB (UME) 165*128kB (UME) 75*256kB (UME) 36*512kB (UME) 18*1024kB (UME) 2*2048kB (ME) 234*4096kB (UM) = 1109552kB [ 1145.100978][T18250] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1145.115745][T18250] Node 1 Normal: 2*4kB (U) 12*8kB (UME) 9*16kB (UE) 111*32kB (UE) 13*64kB (UME) 5*128kB (ME) 2*256kB (M) 1*512kB (M) 3*1024kB (UME) 1*2048kB (E) 939*4096kB (UM) = 3857560kB [ 1145.137385][T18250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1145.149086][T18250] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1145.160482][T18250] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1145.172740][T18250] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1145.184137][T18250] 76597 total pagecache pages [ 1145.189965][T18250] 0 pages in swap cache [ 1145.195160][T18250] Free swap = 124996kB [ 1145.200244][T18250] Total swap = 124996kB [ 1145.205354][T18250] 2097051 pages RAM [ 1145.210053][T18250] 0 pages HighMem/MovableOnly [ 1145.415746][T18250] 430237 pages reserved [ 1145.450588][T16999] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1145.483827][T16999] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1145.511731][ T30] audit: type=1400 audit(1131.278:736): avc: denied { ioctl } for pid=18247 comm="syz.5.3193" path="socket:[52897]" dev="sockfs" ino=52897 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1145.552925][T16999] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1145.568546][T18250] 0 pages cma reserved [ 1145.586489][T16999] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1145.622387][T16999] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1145.631517][T16999] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1145.648248][T16999] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1145.667397][T16999] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1145.684923][T16999] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1145.763203][T18260] kAFS: unable to lookup cell '.,' [ 1145.805502][T16999] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1145.825989][T16999] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1145.863527][T16999] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1146.564350][T16999] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1146.639706][T16999] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1146.926699][T16999] usb 7-1: string descriptor 0 read error: -71 [ 1146.952335][T16999] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1146.969338][T16999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.005529][T16999] usb 7-1: can't set config #168, error -71 [ 1147.165544][T16999] usb 7-1: USB disconnect, device number 24 [ 1147.617722][T18276] lo speed is unknown, defaulting to 1000 [ 1148.739637][T18283] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1152.070392][T18307] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1152.268347][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1152.449259][ T9] usb 6-1: device descriptor read/64, error -71 [ 1152.988171][ T30] audit: type=1400 audit(1138.977:737): avc: denied { mount } for pid=18312 comm="syz.6.3208" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1153.561584][ T30] audit: type=1400 audit(1139.014:738): avc: denied { read } for pid=18312 comm="syz.6.3208" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1153.922227][ T30] audit: type=1400 audit(1139.454:739): avc: denied { open } for pid=18312 comm="syz.6.3208" path="/229/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1154.117140][ T30] audit: type=1400 audit(1140.034:740): avc: denied { unmount } for pid=12269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1154.307209][ T30] audit: type=1400 audit(1140.183:741): avc: denied { getopt } for pid=18314 comm="syz.1.3209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1156.686080][T18357] dummy0: entered allmulticast mode [ 1156.693892][T18357] dummy0: left allmulticast mode [ 1157.557384][T18362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1157.576130][ T30] audit: type=1400 audit(1142.877:742): avc: denied { map } for pid=18360 comm="syz.5.3218" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1157.604367][ C0] vkms_vblank_simulate: vblank timer overrun [ 1157.861602][T18368] siw: device registration error -23 [ 1162.006077][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1164.003797][T18405] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 1164.014657][T18405] ref_ctr increment failed for inode: 0xdf8 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807cddcb40 [ 1164.046405][ T30] audit: type=1804 audit(1149.275:743): pid=18405 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.3227" name="file0" dev="tmpfs" ino=3576 res=1 errno=0 [ 1164.093530][T18412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3226'. [ 1164.281105][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1164.429412][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1164.447374][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1164.462395][ T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1164.924132][ T9] usb 6-1: Product: syz [ 1164.929240][ T9] usb 6-1: Manufacturer: syz [ 1165.443411][ T9] usb 6-1: SerialNumber: syz [ 1165.599558][ T9] usb 6-1: config 0 descriptor?? [ 1165.790663][ T9] usb 6-1: can't set config #0, error -71 [ 1166.329241][ T9] usb 6-1: USB disconnect, device number 24 [ 1166.369980][T18435] netlink: 'syz.6.3232': attribute type 12 has an invalid length. [ 1166.425468][ T30] audit: type=1400 audit(1151.520:744): avc: denied { connect } for pid=18422 comm="syz.6.3232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1167.681530][T18450] syz.2.3237 (18450): drop_caches: 2 [ 1171.639185][T18473] random: crng reseeded on system resumption [ 1172.730993][T18482] netlink: 'syz.1.3247': attribute type 1 has an invalid length. [ 1172.763447][T18482] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1173.143358][T18482] bond5: (slave veth3): Enslaving as an active interface with a down link [ 1173.183559][T18482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3247'. [ 1173.978263][T18492] lo speed is unknown, defaulting to 1000 [ 1175.294213][ T6018] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1175.969465][ T6018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.999757][ T6018] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1176.015472][ T6018] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1176.031734][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.053917][ T6018] usb 6-1: config 0 descriptor?? [ 1176.352779][T18492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=18492 comm=syz.6.3249 [ 1177.809661][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3258'. [ 1177.882849][T18531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3258'. [ 1178.204591][ T6018] usb 6-1: USB disconnect, device number 25 [ 1179.036056][T18550] netlink: 'syz.1.3263': attribute type 3 has an invalid length. [ 1179.045417][T18550] netlink: 'syz.1.3263': attribute type 1 has an invalid length. [ 1179.055094][T18550] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3263'. [ 1180.222441][T16999] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1180.304371][T18558] siw: device registration error -23 [ 1180.382869][T16999] usb 6-1: Using ep0 maxpacket: 32 [ 1180.395710][T16999] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1180.463349][T16999] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1180.488055][T16999] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1180.663232][T16999] usb 6-1: Product: syz [ 1180.833816][T16999] usb 6-1: Manufacturer: syz [ 1180.947212][T16999] usb 6-1: SerialNumber: syz [ 1181.070216][T16999] usb 6-1: config 0 descriptor?? [ 1181.087934][T18547] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1181.853566][ T6018] usb 6-1: USB disconnect, device number 26 [ 1183.518366][ T30] audit: type=1400 audit(1167.534:745): avc: denied { create } for pid=18580 comm="syz.1.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1183.581785][T18581] netlink: 'syz.1.3272': attribute type 1 has an invalid length. [ 1183.635942][T18581] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1183.648994][T18581] bond6: (slave bond7): making interface the new active one [ 1183.694936][ T6018] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1183.695565][T18581] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1183.717712][ T30] audit: type=1400 audit(1167.534:746): avc: denied { write } for pid=18580 comm="syz.1.3272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1183.788607][T18588] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 1183.857408][ T6018] usb 6-1: Using ep0 maxpacket: 32 [ 1184.014838][ T6018] usb 6-1: device descriptor read/all, error -71 [ 1184.031477][T18581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3272'. [ 1184.122750][T18581] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1184.156630][T12541] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1184.530941][T12541] usb 3-1: Using ep0 maxpacket: 16 [ 1184.538844][T12541] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.538933][T12541] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.538993][T12541] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1184.539157][T12541] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1184.539217][T12541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.875436][T12541] usb 3-1: config 0 descriptor?? [ 1185.391560][T18590] random: crng reseeded on system resumption [ 1185.404243][ T30] audit: type=1400 audit(1169.293:747): avc: denied { write } for pid=18599 comm="syz.1.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1185.563942][T12541] input: HID 0955:7214 Haptics as /devices/virtual/input/input35 [ 1185.840290][T12541] shield 0003:0955:7214.0048: Registered Thunderstrike controller [ 1186.230832][T16999] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1186.322515][T12541] shield 0003:0955:7214.0048: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 1186.471810][ T9] shield 0003:0955:7214.0048: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1186.516402][T12541] usb 3-1: USB disconnect, device number 52 [ 1186.532633][T16999] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.536877][ T9] shield 0003:0955:7214.0048: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1186.613421][ T9] shield 0003:0955:7214.0048: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1186.650618][T16999] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1186.953360][ T30] audit: type=1400 audit(1170.733:748): avc: denied { ioctl } for pid=18613 comm="syz.6.3277" path="socket:[55312]" dev="sockfs" ino=55312 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1187.321237][ T9] shield 0003:0955:7214.0048: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1187.423342][T16999] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1187.447186][T16999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.475665][T16999] usb 6-1: config 0 descriptor?? [ 1187.763118][T12541] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1188.294509][T12541] usb 3-1: device descriptor read/64, error -71 [ 1188.561257][T12541] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1188.721607][T12541] usb 3-1: device descriptor read/64, error -71 [ 1188.852692][T12541] usb usb3-port1: attempt power cycle [ 1189.249040][T12541] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1189.337240][T12541] usb 3-1: device descriptor read/8, error -71 [ 1189.676329][T16999] usb 6-1: USB disconnect, device number 29 [ 1189.694574][T12541] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1189.745112][T12541] usb 3-1: device descriptor read/8, error -71 [ 1189.897614][T12541] usb usb3-port1: unable to enumerate USB device [ 1192.880302][T18667] netlink: 'syz.3.3289': attribute type 3 has an invalid length. [ 1192.889598][T18667] netlink: 'syz.3.3289': attribute type 1 has an invalid length. [ 1192.899013][T18667] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3289'. [ 1193.301527][T18671] overlayfs: failed to resolve './file1': -2 [ 1193.736766][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1193.885068][ T30] audit: type=1804 audit(1176.954:749): pid=18670 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.3290" name="file0" dev="ramfs" ino=55381 res=1 errno=0 [ 1194.011993][T18679] overlayfs: failed to clone upperpath [ 1196.119568][ T30] audit: type=1800 audit(1179.171:750): pid=18691 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3295" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1197.791085][T18705] netlink: 'syz.6.3299': attribute type 1 has an invalid length. [ 1197.800560][T18705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3299'. [ 1197.867480][ T30] audit: type=1400 audit(1180.611:751): avc: denied { bind } for pid=18702 comm="syz.6.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1202.489251][T18747] lo speed is unknown, defaulting to 1000 [ 1202.542919][T18753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3306'. [ 1202.839160][ T30] audit: type=1400 audit(1185.372:752): avc: denied { create } for pid=18739 comm="syz.6.3305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1204.413254][ T30] audit: type=1400 audit(1187.028:753): avc: denied { shutdown } for pid=18763 comm="syz.3.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1204.550241][ T6018] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1205.173235][ T6018] usb 3-1: Using ep0 maxpacket: 16 [ 1205.191415][ T6018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.256133][ T6018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.272492][ T6018] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1205.290930][ T6018] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1205.307808][ T6018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.328437][ T6018] usb 3-1: config 0 descriptor?? [ 1205.452246][ T5918] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1205.711458][ T5918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.724225][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1205.872484][T18767] random: crng reseeded on system resumption [ 1205.879758][ T6018] input: HID 0955:7214 Haptics as /devices/virtual/input/input36 [ 1205.922218][ T6018] shield 0003:0955:7214.0049: Registered Thunderstrike controller [ 1206.158197][T18782] overlayfs: failed to resolve './file1': -2 [ 1206.336971][ T6018] shield 0003:0955:7214.0049: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 1206.365815][ T5918] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1206.564470][ T30] audit: type=1400 audit(1189.011:754): avc: denied { mounton } for pid=18776 comm="syz.6.3314" path="/247/file0" dev="rpc_pipefs" ino=55603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 1207.100071][ T6018] shield 0003:0955:7214.0049: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1207.115681][ T9] usb 3-1: USB disconnect, device number 57 [ 1207.126013][ T6018] shield 0003:0955:7214.0049: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1207.175889][ T9] ------------[ cut here ]------------ [ 1207.182445][ T9] workqueue: work disable count underflowed [ 1207.189552][ T9] WARNING: CPU: 0 PID: 9 at kernel/workqueue.c:4326 enable_work+0x2f8/0x340 [ 1207.199958][ T9] Modules linked in: [ 1207.205015][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(full) [ 1207.219191][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1207.231268][ T9] Workqueue: usb_hub_wq hub_event [ 1207.237279][ T9] RIP: 0010:enable_work+0x2f8/0x340 [ 1207.243490][ T9] Code: 89 ee e8 0b 56 38 00 45 84 ed 0f 85 29 fe ff ff e8 1d 5b 38 00 c6 05 4a 4d 10 0f 01 90 48 c7 c7 c0 02 ac 8b e8 a9 f9 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 b7 b2 9e 00 e9 aa fe ff ff [ 1207.267062][ T9] RSP: 0018:ffffc900000e73c0 EFLAGS: 00010086 [ 1207.274397][ T9] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9001a052000 [ 1207.283940][ T9] RDX: 0000000000100000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 1207.293492][ T9] RBP: ffff888057310738 R08: 0000000000000001 R09: 0000000000000000 [ 1207.303055][ T9] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff9200001ce79 [ 1207.312613][ T9] R13: 0000000000000000 R14: ffff888057310698 R15: ffff888057310730 [ 1207.322176][ T9] FS: 0000000000000000(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 1207.332889][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1207.340789][ T9] CR2: 00007f1d78506834 CR3: 0000000057868000 CR4: 00000000003526f0 [ 1207.350359][ T9] Call Trace: [ 1207.354286][ T9] [ 1207.357791][ T9] ? __pfx_enable_work+0x10/0x10 [ 1207.363717][ T9] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 1207.370688][ T9] __cancel_work_sync+0xe7/0x130 [ 1207.376620][ T9] thermal_zone_device_unregister+0x28e/0x4d0 [ 1207.383903][ T9] ? __pfx_shield_remove+0x10/0x10 [ 1207.390043][ T9] power_supply_unregister+0x10a/0x150 [ 1207.396597][ T9] shield_remove+0x75/0x130 [ 1207.402004][ T9] ? __pfx_shield_remove+0x10/0x10 [ 1207.408132][ T9] hid_device_remove+0xce/0x260 [ 1207.413950][ T9] ? __pfx_hid_device_remove+0x10/0x10 [ 1207.420493][ T9] device_remove+0xcb/0x170 [ 1207.425876][ T9] device_release_driver_internal+0x44b/0x620 [ 1207.433162][ T9] bus_remove_device+0x22f/0x420 [ 1207.439076][ T9] device_del+0x396/0x9f0 [ 1207.444253][ T9] ? __pfx_device_del+0x10/0x10 [ 1207.450051][ T9] ? do_raw_spin_lock+0x12c/0x2b0 [ 1207.456062][ T9] hid_destroy_device+0x19c/0x240 [ 1207.462079][ T9] usbhid_disconnect+0xa0/0xe0 [ 1207.467775][ T9] usb_unbind_interface+0x1da/0x9e0 [ 1207.474001][ T9] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 1207.480731][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1207.487576][ T9] device_remove+0x122/0x170 [ 1207.493057][ T9] device_release_driver_internal+0x44b/0x620 [ 1207.500321][ T9] bus_remove_device+0x22f/0x420 [ 1207.506235][ T9] device_del+0x396/0x9f0 [ 1207.511408][ T9] ? __pfx_device_del+0x10/0x10 [ 1207.517209][ T9] ? kobject_put+0x210/0x5a0 [ 1207.522720][ T9] usb_disable_device+0x355/0x7d0 [ 1207.528754][ T9] usb_disconnect+0x2e1/0x9c0 [ 1207.534354][ T9] hub_event+0x1c81/0x4fe0 [ 1207.539651][ T9] ? __lock_acquire+0xb97/0x1ce0 [ 1207.545562][ T9] ? ZSTD_compressRleLiteralsBlock+0x218/0x220 [ 1207.552925][ T9] ? __pfx_hub_event+0x10/0x10 [ 1207.558615][ T9] ? interval_tree_iter_first+0xf0/0x250 [ 1207.565360][ T9] ? rcu_is_watching+0x12/0xc0 [ 1207.571052][ T9] process_one_work+0x9cc/0x1b70 [ 1207.576959][ T9] ? __pfx_process_one_work+0x10/0x10 [ 1207.583382][ T9] ? assign_work+0x1a0/0x250 [ 1207.588862][ T9] worker_thread+0x6c8/0xf10 [ 1207.594352][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1207.600454][ T9] kthread+0x3c5/0x780 [ 1207.605308][ T9] ? __pfx_kthread+0x10/0x10 [ 1207.610787][ T9] ? rcu_is_watching+0x12/0xc0 [ 1207.616475][ T9] ? __pfx_kthread+0x10/0x10 [ 1207.621952][ T9] ret_from_fork+0x5d7/0x6f0 [ 1207.627428][ T9] ? __pfx_kthread+0x10/0x10 [ 1207.632906][ T9] ret_from_fork_asm+0x1a/0x30 [ 1207.638610][ T9] [ 1207.642202][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1207.650903][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(full) [ 1207.665029][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1207.677071][ T9] Workqueue: usb_hub_wq hub_event [ 1207.683081][ T9] Call Trace: [ 1207.687004][ T9] [ 1207.690489][ T9] dump_stack_lvl+0x3d/0x1f0 [ 1207.695967][ T9] vpanic+0x6e8/0x7a0 [ 1207.700738][ T9] ? __pfx_vpanic+0x10/0x10 [ 1207.706124][ T9] ? enable_work+0x2f8/0x340 [ 1207.711636][ T9] panic+0xca/0xd0 [ 1207.716106][ T9] ? __pfx_panic+0x10/0x10 [ 1207.721393][ T9] check_panic_on_warn+0xab/0xb0 [ 1207.727286][ T9] __warn+0xf6/0x3c0 [ 1207.731924][ T9] ? __pfx_vprintk_emit+0x10/0x10 [ 1207.738341][ T9] ? enable_work+0x2f8/0x340 [ 1207.743821][ T9] report_bug+0x3c3/0x580 [ 1207.749006][ T9] ? enable_work+0x2f8/0x340 [ 1207.754486][ T9] handle_bug+0x184/0x210 [ 1207.759655][ T9] exc_invalid_op+0x17/0x50 [ 1207.765033][ T9] asm_exc_invalid_op+0x1a/0x20 [ 1207.770822][ T9] RIP: 0010:enable_work+0x2f8/0x340 [ 1207.777036][ T9] Code: 89 ee e8 0b 56 38 00 45 84 ed 0f 85 29 fe ff ff e8 1d 5b 38 00 c6 05 4a 4d 10 0f 01 90 48 c7 c7 c0 02 ac 8b e8 a9 f9 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 b7 b2 9e 00 e9 aa fe ff ff [ 1207.800532][ T9] RSP: 0018:ffffc900000e73c0 EFLAGS: 00010086 [ 1207.807803][ T9] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9001a052000 [ 1207.817441][ T9] RDX: 0000000000100000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 1207.826972][ T9] RBP: ffff888057310738 R08: 0000000000000001 R09: 0000000000000000 [ 1207.836516][ T9] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff9200001ce79 [ 1207.846069][ T9] R13: 0000000000000000 R14: ffff888057310698 R15: ffff888057310730 [ 1207.855640][ T9] ? __warn_printk+0x1a5/0x350 [ 1207.861380][ T9] ? __pfx_enable_work+0x10/0x10 [ 1207.867282][ T9] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 1207.874243][ T9] __cancel_work_sync+0xe7/0x130 [ 1207.880164][ T9] thermal_zone_device_unregister+0x28e/0x4d0 [ 1207.887440][ T9] ? __pfx_shield_remove+0x10/0x10 [ 1207.893658][ T9] power_supply_unregister+0x10a/0x150 [ 1207.900191][ T9] shield_remove+0x75/0x130 [ 1207.905564][ T9] ? __pfx_shield_remove+0x10/0x10 [ 1207.911664][ T9] hid_device_remove+0xce/0x260 [ 1207.917561][ T9] ? __pfx_hid_device_remove+0x10/0x10 [ 1207.924163][ T9] device_remove+0xcb/0x170 [ 1207.929542][ T9] device_release_driver_internal+0x44b/0x620 [ 1207.936804][ T9] bus_remove_device+0x22f/0x420 [ 1207.942718][ T9] device_del+0x396/0x9f0 [ 1207.947889][ T9] ? __pfx_device_del+0x10/0x10 [ 1207.953682][ T9] ? do_raw_spin_lock+0x12c/0x2b0 [ 1207.959694][ T9] hid_destroy_device+0x19c/0x240 [ 1207.965719][ T9] usbhid_disconnect+0xa0/0xe0 [ 1207.971428][ T9] usb_unbind_interface+0x1da/0x9e0 [ 1207.977649][ T9] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 1207.984420][ T9] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1207.991264][ T9] device_remove+0x122/0x170 [ 1207.996744][ T9] device_release_driver_internal+0x44b/0x620 [ 1208.004000][ T9] bus_remove_device+0x22f/0x420 [ 1208.009927][ T9] device_del+0x396/0x9f0 [ 1208.015095][ T9] ? __pfx_device_del+0x10/0x10 [ 1208.020889][ T9] ? kobject_put+0x210/0x5a0 [ 1208.026380][ T9] usb_disable_device+0x355/0x7d0 [ 1208.032390][ T9] usb_disconnect+0x2e1/0x9c0 [ 1208.037982][ T9] hub_event+0x1c81/0x4fe0 [ 1208.043278][ T9] ? __lock_acquire+0xb97/0x1ce0 [ 1208.049182][ T9] ? ZSTD_compressRleLiteralsBlock+0x218/0x220 [ 1208.056542][ T9] ? __pfx_hub_event+0x10/0x10 [ 1208.062231][ T9] ? interval_tree_iter_first+0xf0/0x250 [ 1208.068978][ T9] ? rcu_is_watching+0x12/0xc0 [ 1208.074680][ T9] process_one_work+0x9cc/0x1b70 [ 1208.080592][ T9] ? __pfx_process_one_work+0x10/0x10 [ 1208.087016][ T9] ? assign_work+0x1a0/0x250 [ 1208.092507][ T9] worker_thread+0x6c8/0xf10 [ 1208.097995][ T9] ? __pfx_worker_thread+0x10/0x10 [ 1208.104095][ T9] kthread+0x3c5/0x780 [ 1208.108945][ T9] ? __pfx_kthread+0x10/0x10 [ 1208.114420][ T9] ? rcu_is_watching+0x12/0xc0 [ 1208.120105][ T9] ? __pfx_kthread+0x10/0x10 [ 1208.125580][ T9] ret_from_fork+0x5d7/0x6f0 [ 1208.131054][ T9] ? __pfx_kthread+0x10/0x10 [ 1208.136529][ T9] ret_from_fork_asm+0x1a/0x30 [ 1208.142229][ T9] [ 1208.146078][ T9] Kernel Offset: disabled [ 1208.151235][ T9] Rebooting in 86400 seconds..