last executing test programs: 6m55.041475865s ago: executing program 2 (id=1204): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffff7, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x8000, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x8004) 6m54.945067098s ago: executing program 2 (id=1206): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) 6m54.813070661s ago: executing program 2 (id=1210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0xfffffffffffffffe}) 6m54.635795961s ago: executing program 2 (id=1213): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 6m54.55622488s ago: executing program 2 (id=1215): r0 = fsopen(&(0x7f0000000380)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 6m54.098080934s ago: executing program 2 (id=1221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'team_slave_0\x00'}) 6m53.818971563s ago: executing program 32 (id=1221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'team_slave_0\x00'}) 4m46.3213493s ago: executing program 5 (id=3387): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000840)={0x0, 0x15, 0x5, "ed1ae17c3e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x2}, 0x0, 0x0, 0x0}) 4m45.785391866s ago: executing program 5 (id=3390): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_io_uring_setup(0x293, &(0x7f0000000140)={0x0, 0x6fdd, 0x808, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_CLOSE={0x13, 0xc, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c) 4m45.729985824s ago: executing program 5 (id=3391): r0 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4m45.632038473s ago: executing program 5 (id=3392): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', r0, 0x0, 0x261) 4m45.602061177s ago: executing program 5 (id=3393): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x484, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) 4m45.370104698s ago: executing program 5 (id=3395): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x2, 0x8d, 0x5be, 0x2, 0x6, 0x4, 0x19, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x1, 0x5, 0x9, 0x100}, [{0x6, 0x3, 0x1, 0x2d, 0x9, 0x15e, 0x8001, 0x5}]}, 0x58) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4m45.280230715s ago: executing program 33 (id=3395): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x2, 0x8d, 0x5be, 0x2, 0x6, 0x4, 0x19, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x1, 0x5, 0x9, 0x100}, [{0x6, 0x3, 0x1, 0x2d, 0x9, 0x15e, 0x8001, 0x5}]}, 0x58) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 2m50.843661133s ago: executing program 1 (id=5049): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, 0x2, 0x1}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@random="a5cddc490123", {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x3, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0xd0a9a00a8d77fbbc}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @private=0xa010102, @empty, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x318c) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xf, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x40) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000006c0)) 2m49.879705726s ago: executing program 1 (id=5067): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000007c40)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 2m49.570504787s ago: executing program 1 (id=5070): r0 = socket$can_bcm(0x1d, 0x2, 0x2) close(0x3) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40480d7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m49.134657769s ago: executing program 1 (id=5075): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2m48.204897649s ago: executing program 1 (id=5083): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0xf4}) 2m48.133758188s ago: executing program 1 (id=5086): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x105241) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab03, r1) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2m33.086607916s ago: executing program 34 (id=5086): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x105241) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(r0, 0xab03, r1) timer_create(0x7, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2m18.165967084s ago: executing program 0 (id=5503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xaf4, 0x0) shutdown(r0, 0x0) 2m18.136660832s ago: executing program 0 (id=5504): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2m18.052711804s ago: executing program 0 (id=5505): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@cgroup=r0, r0, 0x2e}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) close(0x3) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x0, r1}, 0x5) 2m17.935435835s ago: executing program 0 (id=5507): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m17.871243298s ago: executing program 0 (id=5509): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000f9a000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) 2m17.425084665s ago: executing program 0 (id=5512): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m17.285095404s ago: executing program 35 (id=5512): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m42.137531633s ago: executing program 8 (id=5970): capset(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) io_uring_enter(r0, 0x7277, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m41.838933209s ago: executing program 8 (id=5977): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x26, 0x6}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 1m41.426318125s ago: executing program 8 (id=5982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x3, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8008}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0x400}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0xb, 0x40}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x400004, 0x200, 0x9, 0xfffffffd, 0x9df}, {0x9, 0x1, 0x65, 0x8, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x1}, {0x7, 0x8, 0x7358, 0x7, 0x28, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x7, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x16, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xbffffffc, 0x7}, {0x6, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0xc}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x9, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0xfffff000}, {0x9, 0xfffffffa, 0x1000, 0x0, 0xb, 0xce5a}, {0x0, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffbfffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0x7ff, 0x1, 0x0, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0xfffffffe, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x0, 0x8, 0x7fff}, {0x0, 0x5, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0x6, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x7, 0x3, 0x4, 0x9, 0xfffbfffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffff8, 0x1, 0x3, 0xb61, 0x2}, {0x1, 0x4, 0x7fffffff, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x8002, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x8000004, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b5, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x8, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x6, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xc, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xc8, 0xfffc, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0xff, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x8, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x92, 0xbf1d, 0x7, 0x7, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x1}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {0x3}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1m41.261052962s ago: executing program 8 (id=5986): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x100) 1m41.051326876s ago: executing program 8 (id=5991): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) syz_open_dev$sndctrl(0x0, 0x1, 0xe8900) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x2c, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0xffff, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) close(0x4) 1m39.553744867s ago: executing program 8 (id=6007): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) 1m39.266397296s ago: executing program 36 (id=6007): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) 5.002931492s ago: executing program 6 (id=7070): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081", 0x7}], 0x1}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.932537846s ago: executing program 6 (id=7079): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x40, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 3.43318359s ago: executing program 6 (id=7083): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 3.180377519s ago: executing program 3 (id=7086): mount(0x0, 0x0, 0x0, 0x2390024, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2081, 0x0) writev(r1, &(0x7f0000001480)=[{&(0x7f0000000600)="0c37f8246f3e4c0f268894edcd5b1a9964c8dae6b413258a16aa77258ad9a416bb6c2ed80e4c948037035c05a300d188b7f720f619c3aed8885056565487fbfcf347f9759031056a5c6f6510bba78a970af194a3bfff9ee162bfd08f9d87b1", 0x5f}], 0x1) recvfrom(r0, 0x0, 0x0, 0x40000024, &(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x7, "f4246a2d32d4a1244a0f4199da95ffaec64dd75ac0bf853d57c04b97542440e5f4f6a97a07939d4ba70779d36bc810c3be469ef64526ca2988f202696ed214", 0x2c}, 0x7) 3.141611327s ago: executing program 6 (id=7087): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x3238, 0x400, 0xffffffff, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x438}, 0x0, 0x12f4c4729364eada, 0x1}) io_uring_enter(r2, 0x3516, 0xa00100, 0x0, 0x0, 0x0) 2.590095587s ago: executing program 4 (id=7091): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102384, 0x18ff0) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f00000054c0)={0xa, 0x4e20, 0x0, @empty, 0x7}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000040)={0x2b}, 0x8) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 2.426531239s ago: executing program 7 (id=7093): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000020601080000000000000000000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a697000f23d"], 0x44}}, 0x8000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2.312661244s ago: executing program 7 (id=7094): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x1, 0x0, 0x2000) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x7, 0x8000000000007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x0, 0x83, 0xd611, 0x10000006, 0x9, 0x0, 0x8000, 0x0, 0xee00, 0xee00, 0x3ff, 0x1}}, {0x0, 0x4}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 2.23637927s ago: executing program 3 (id=7095): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.185721867s ago: executing program 7 (id=7096): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x9c1, &(0x7f00000002c0)={0x0, 0x200002f, 0x1, 0x1000, 0x100020c}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x6000, @fd_index, 0xb, &(0x7f0000000100)=[{0x0}], 0x1, 0x13}) io_uring_enter(r2, 0x847ba, 0xa5bd, 0xa, 0x0, 0x0) 1.356884872s ago: executing program 6 (id=7098): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.278926339s ago: executing program 3 (id=7099): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000180)={0x0, 0x9}, 0x0, 0x0}) 958.189592ms ago: executing program 4 (id=7101): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}}, 0x24008844) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 879.351538ms ago: executing program 4 (id=7102): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 816.941456ms ago: executing program 7 (id=7103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x5000, 0x2000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0xb5}, {0xeeef0000, 0xf000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x4, 0x81}, {0x80a0000, 0xeeee0000, 0xb, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe, 0x4}, {0x10000, 0xd000, 0xb, 0x3, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb, 0x83}, {0x1000, 0x100000, 0xc, 0xc, 0xb1, 0x8, 0x21, 0xa0, 0x80, 0x3, 0x1, 0xb}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x1, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0x1000, 0x4, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x10000, 0x1000}, {0x10000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x3800, 0x3000, [0xaffe, 0x4, 0x80, 0xfff]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 808.640259ms ago: executing program 9 (id=7104): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 762.53924ms ago: executing program 4 (id=7105): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003}) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 739.126519ms ago: executing program 9 (id=7106): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x0) unshare(0x2040400) r3 = eventfd2(0x10000003, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0xfaa, 0x2, r3}) r4 = eventfd(0xf4) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r4, 0xd299, 0x1}) 670.997863ms ago: executing program 9 (id=7107): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x10000, 0x7, 0x2, 0x7e73, 0x7fffffffffffffff, 0x6, 0x95}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x40006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 589.278606ms ago: executing program 9 (id=7108): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) unshare(0x24060400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, 0x0, 0x0}, 0x20) 587.807286ms ago: executing program 4 (id=7109): socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x4000001e, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 534.331552ms ago: executing program 9 (id=7110): socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) 515.885417ms ago: executing program 7 (id=7111): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7bf4f2"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x47, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 444.823196ms ago: executing program 3 (id=7112): ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000001500)={[0x3, 0x7f, 0x8, 0x3, 0x0, 0x8, 0x81, 0x0, 0x1e1800, 0x2, 0x80000001, 0x2, 0x80000000, 0x3, 0x1, 0x8000, 0x1, 0x1, 0x6, 0x1, 0x4, 0x47, 0x401, 0x80000001, 0x2, 0x301, 0x0, 0xfffffffc, 0x1, 0x400, 0xfffffff3, 0xfffffff8, 0x1, 0xfe7, 0xa, 0x5, 0xffff0001, 0x80000001, 0xf592, 0x7, 0x7fff, 0x0, 0x80, 0x9, 0x53c, 0xfe1, 0xfffffffc, 0x400, 0xfffffffb, 0x7fff, 0x5, 0x732, 0x6, 0x1, 0x4, 0x3, 0x6, 0x101, 0x5, 0x1, 0x4, 0x8d8, 0x401, 0x8185, 0x6, 0x4, 0xfffffff4, 0x4, 0x7, 0x15, 0x3, 0x3, 0x2, 0x3, 0x6, 0x4, 0x8, 0x2, 0x8001, 0x80000001, 0x8, 0x3, 0xd, 0x1, 0x7, 0xfb, 0x3, 0x3f1, 0xffff, 0xff, 0x8001, 0x40, 0x9, 0x10000, 0x200, 0x3, 0x80000000, 0x1, 0x5, 0x3be, 0xfff, 0x6, 0x28d00, 0xe8de, 0x9, 0x8, 0x9, 0x3, 0x40, 0x101, 0x420, 0x1, 0x81, 0x8ab, 0x4, 0xf, 0x1, 0x4, 0x6, 0x0, 0x80003, 0x0, 0x3, 0x9, 0x8, 0x674, 0x7ff, 0x0, 0x4, 0x8, 0x8, 0xf550, 0x3, 0x5, 0x7f, 0xb314, 0x5b08, 0x9, 0xe, 0xffffffff, 0xffff56f6, 0x3, 0x4, 0x1, 0x4, 0x1197, 0x4, 0x8001, 0x2, 0x4, 0x3, 0x8000, 0x0, 0xfffffc01, 0x4, 0xffff4df7, 0x9, 0x8, 0x0, 0x80000001, 0x6, 0x3, 0xffffffff, 0x3ff, 0x7f, 0x7, 0x0, 0x7, 0x200c, 0x7, 0x3, 0x800, 0x6, 0x8001, 0x64, 0x9fd, 0xfffffffd, 0x400, 0x8954, 0x3ff, 0x6f, 0x3, 0x6, 0x2, 0xfffffff2, 0x9, 0x0, 0x4, 0x6, 0x9, 0x2, 0x2, 0xffff, 0x8, 0x2b5, 0x1000, 0x8, 0x5, 0x1, 0x2, 0x5, 0x0, 0x59c, 0x7, 0x9, 0x6, 0x817, 0x5, 0x4, 0x1, 0x8, 0x0, 0x2, 0x4, 0x800, 0xf, 0x200, 0x9, 0x9, 0x3ff, 0xff, 0x43a, 0x9, 0x9, 0x8, 0xffff, 0x7f, 0x2e8cd05c, 0x0, 0x1, 0x196, 0x9, 0xe2, 0x8000, 0x2, 0xfffffffb, 0x0, 0x1, 0x6, 0x2, 0x0, 0x0, 0x7, 0x3, 0x6411b5c3, 0x0, 0x800, 0x80000005, 0x9, 0x3, 0xfffffffc, 0x1, 0x800, 0xfffffffe, 0x9, 0x200, 0x8, 0xfff, 0x7, 0xa0, 0xcf40, 0x683, 0x1, 0x8, 0x8, 0x0, 0xfffffffa, 0xffff, 0x10000b, 0xf749, 0x5, 0x9, 0x9, 0x6, 0x2, 0x7, 0x0, 0x9, 0xc, 0x69fa, 0xffffff7f, 0x8, 0x8, 0x27, 0x3, 0x800, 0x8, 0x10001, 0x10, 0x5, 0xab, 0x4, 0x2, 0x3, 0x8000000, 0x7fff, 0x0, 0x9, 0x9, 0xe0, 0x80, 0xfffeffff, 0xfff, 0x10001, 0x9, 0xfffffff8, 0x7, 0x6, 0x4, 0x0, 0x7fffffff, 0x1, 0x5, 0x7, 0x8, 0x1, 0x0, 0x5, 0x0, 0x7, 0x800, 0x80000000, 0x6, 0x4, 0x9, 0x8, 0x200acd, 0xff, 0x2, 0x4, 0x4, 0x2, 0x3, 0x2, 0x7ffc, 0x5, 0x0, 0x1, 0x1ff, 0x6, 0xfffffff3, 0x6, 0x7f, 0x1, 0xb1d, 0x3, 0xfffff742, 0x400, 0x1, 0x8fdb, 0x4, 0x5, 0xa, 0x6, 0xe00, 0xdf5, 0x6, 0x4, 0x2, 0xe, 0xfffeffff, 0xfff000, 0x6, 0x1, 0x9, 0x8000, 0xae, 0x8, 0x5, 0x6, 0xe86, 0x4, 0x6, 0x80000000, 0x5, 0x9, 0x0, 0x2, 0x4, 0x8, 0xd, 0xc2f, 0x8, 0x6f, 0x2, 0x1000, 0x7fffffff, 0x569, 0x4, 0x7fff, 0x1, 0x101, 0x2, 0x2, 0x2008, 0xfffffffd, 0x0, 0x3, 0xf1, 0x9, 0x2, 0x9, 0x2, 0x2, 0x63df2402, 0x6, 0x4, 0x3, 0x7fff, 0x3, 0x6, 0x8, 0x4, 0x9, 0xe, 0x48ab31ef, 0x100, 0x100, 0x6, 0x1, 0x401, 0xd891, 0xd, 0x5, 0x8, 0x0, 0x7, 0x1, 0x5, 0x7fffffff, 0x7, 0x5, 0x1, 0x10000, 0xfffffffc, 0x0, 0x8001, 0xd, 0x9, 0x9, 0x2cb1e728, 0xfffffe01, 0x8, 0x4, 0x6, 0x401, 0x8, 0x1, 0x1, 0x8, 0x1, 0x3, 0x5f, 0x81, 0x0, 0x7ff, 0x7, 0x3, 0xffffffff, 0x4, 0x6, 0xee, 0x1, 0x0, 0x100, 0x2, 0x8, 0x0, 0x1, 0x8e82, 0x7, 0x0, 0x6, 0x0, 0x4, 0x100000, 0x82f, 0x100, 0x7, 0x5, 0x5, 0x2, 0x2, 0x9d47, 0x8000, 0x97cb3f8b, 0xae5d, 0x2, 0xb, 0x6b60, 0x200, 0x0, 0xd0, 0x0, 0xf, 0x9, 0xc7, 0x4, 0x9, 0x9ac00000, 0x899, 0xc, 0x400, 0x6, 0x6, 0x2, 0xae33, 0x2, 0x8359, 0x3, 0x0, 0xf9b6, 0x8, 0x8, 0x8000, 0xff, 0xcfa0, 0x0, 0x8000, 0x1, 0x0, 0xd, 0xf, 0xe, 0xffffff80, 0xe9, 0x7f, 0x2, 0x5, 0x4, 0x5, 0x1ff, 0x2, 0x8, 0x4, 0x80000001, 0x10000, 0x5, 0x6, 0x9eb9, 0x3, 0x2e, 0x1, 0x2, 0x5f, 0x9b, 0x115, 0x1, 0x7, 0x5, 0x4, 0x73, 0x8, 0x6, 0xee0, 0x18, 0x0, 0xffffff12, 0x1ff, 0x1, 0x9, 0x8, 0x3, 0x10, 0x3, 0x10, 0xffff, 0x2, 0x2, 0x8, 0xe, 0x80000000, 0x0, 0x1, 0x5, 0x95, 0x7, 0x4ec, 0x58, 0x4, 0xffffffff, 0x30, 0x1, 0xfff, 0x494c, 0x80000001, 0x7, 0xd, 0x2, 0x7fffffff, 0x4, 0x0, 0x3517c185, 0xb057, 0xc2, 0x344d, 0x0, 0x91, 0x1, 0x1, 0xd03b, 0x91, 0x5, 0x6, 0x7fffffff, 0x4cc, 0x400, 0x46d, 0x9, 0x1ff, 0x0, 0x1, 0xffffff66, 0x1, 0x43, 0x3, 0xfffffff8, 0x0, 0xfb63, 0xdff4, 0x6, 0x7, 0x9, 0x7, 0x7, 0x7, 0x6, 0x9, 0x4, 0x8, 0x101, 0x3, 0xf, 0x5, 0x7, 0x5, 0x2, 0x4, 0x2, 0x5, 0x9, 0x0, 0x4, 0x1, 0x4, 0x4, 0x9, 0x6, 0x8, 0xfffffff7, 0x33, 0x4, 0x0, 0x40000, 0x9, 0x0, 0xa3f5, 0x7, 0xc000, 0xcf, 0x1, 0xffff, 0x2, 0x3, 0x6, 0xf7e6, 0x4, 0x40, 0x8, 0x8, 0x10001, 0x7f, 0x80000001, 0x1ff, 0x7fffffff, 0xcab, 0x0, 0x5, 0x7, 0x4, 0x6, 0x7fffffff, 0x1, 0x5, 0x5, 0x6, 0xfffffff7, 0x1, 0x8, 0x4, 0x3, 0x400, 0x10, 0x401, 0x0, 0x6, 0x9, 0xfffffffb, 0x6, 0x3, 0x1, 0x5, 0x1, 0x7fff, 0xfffffff9, 0x8000, 0x6, 0x1, 0xe1, 0x5, 0x5, 0xfffffff6, 0x81c9, 0x401, 0x5, 0xfffffffc, 0x6, 0xfffffeff, 0x1, 0x4000ff, 0x8, 0x1, 0xfffffffd, 0x2, 0x8, 0x0, 0x81, 0x6, 0x0, 0x0, 0xff, 0x7b, 0x0, 0x0, 0xffffffff, 0x5d410d67, 0x7, 0x8, 0x101, 0x9, 0x1, 0x8, 0x80000001, 0x400, 0x7, 0x5, 0x5, 0x9, 0xf4e, 0x2, 0x1, 0x180, 0x9, 0x7fff, 0xa, 0x442c99d5, 0x3, 0x1000, 0x400, 0x1, 0x9, 0xfff, 0x800, 0x6, 0x8, 0x101, 0x3, 0x3, 0x1, 0x4, 0x5, 0x100, 0x0, 0xfffffffe, 0x7f, 0x40, 0x4, 0x7, 0x0, 0x7f, 0xfffffffd, 0x3, 0x4, 0x7, 0x5546, 0x9, 0x9, 0x1, 0x400, 0x71f5, 0x80, 0x7ff, 0x7, 0x10, 0x9, 0x7, 0x4, 0x7, 0x0, 0x0, 0x9, 0x43, 0xad, 0x0, 0x6, 0x1, 0x9254, 0x9, 0x1943, 0x6, 0x6, 0x4, 0x6e6, 0x315d160, 0xbe7, 0x10001, 0x4c, 0x2, 0xffffffff, 0x8, 0x48a, 0x800, 0x4c, 0x9, 0x5, 0xcfe, 0x0, 0x2281, 0x10000, 0x1, 0x5, 0x8, 0x0, 0x1800, 0x9, 0x7, 0x4f9, 0x6, 0x3, 0x7, 0x1, 0x1, 0x6, 0x8, 0x8, 0x4, 0x3, 0x5, 0x9, 0x11, 0x400, 0x8, 0x80000001, 0x3ff, 0x3, 0x6, 0x4, 0xadf, 0xd6b, 0x5, 0x1, 0x4, 0x1000, 0xe, 0x8, 0x5, 0x8, 0x7, 0x4, 0x1, 0x2, 0xfffffeff, 0x7ca0, 0x6, 0x5, 0xfffffff8, 0x96, 0xffff, 0x80000001, 0xa, 0x3, 0x0, 0x0, 0xca7, 0x2, 0xbc, 0x9, 0x14f, 0x0, 0x100, 0xffffff00, 0x7fff, 0xfffffffc, 0x824, 0xd67, 0x58, 0x513, 0x2, 0x2, 0x100, 0xc, 0x2, 0x1, 0x3, 0x5, 0xffffff5c, 0x8000, 0xc04, 0x665, 0x9, 0x55, 0x4, 0x5, 0x9, 0x9, 0x5, 0x7, 0xff, 0x7fff, 0x4c, 0x9, 0x0, 0xd7, 0x2, 0x200, 0x7, 0x9, 0xff, 0x4, 0x6, 0x1, 0x8, 0x7f, 0xb95, 0xfffffff9, 0x1, 0x6, 0x0, 0xfff, 0x19b, 0x1000, 0xfffffffd, 0x8, 0x3, 0x4, 0x6, 0x5, 0x6, 0x101, 0x2, 0xfffffff9, 0x5, 0x1c95, 0x7, 0x8001, 0x70b9, 0x49, 0x1, 0x8, 0x1, 0x9, 0x7, 0x5, 0x200, 0x6b, 0x27, 0x1ff, 0x9, 0x0, 0x8001, 0x9, 0x7fffffff, 0x899, 0x5, 0x7fff, 0x5, 0x7, 0x6, 0xfffe0000, 0x1, 0x1, 0x10001, 0x800, 0x3, 0x4, 0x8, 0xd8b, 0x0, 0x2, 0x3, 0x2, 0xa6, 0x934e, 0x9, 0x9d19, 0x0, 0x0, 0x83, 0x10001, 0x5, 0x4, 0x0, 0x3, 0x1, 0x2, 0x6, 0x6e, 0xb, 0x34f, 0x5, 0x8, 0x8, 0x2, 0x6, 0xc, 0xfffffff3, 0xd7d, 0x6, 0x8d, 0x3, 0xce7, 0x7f, 0x7, 0x2]}) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000440)={0x0, [{0x1, 0x4d88, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc5df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894cbed629ecc25c288b3d4556a85a1e2150cac5b686a8de29ab7c35040b77875bfa0e451dc0869cfe105bd115e7cf48f44dfdf26be65f3b727fd88d6395d051e49c060998e84b19377fcb20fe2eb392335e5a9d84555ef037aab37169ce761aa8a8ec08ea87e3a3b896f3d1b2380bc8256e0f7ea7dc488382e6112b53a7bb269d6261f87e0e0e0cef9152f8a67f412148f34880c970101fbd7b0e8fc49d6a5c87e487b7b175b15be26b6b8e1ed8527614dcefcfd80f8392560c8b706418b7de8fbb7a666a7e7f322dc70373606bf39efa04616cb99d662dfc591061bde5ed27a66aa7edbfec1eb0b1e843c372b84c3ed514a0aadf523b8669e526765d429824aeaa0a6f4c185754d437d977a1f586431dc256ce5aa7c25be259de3a0ae6e5bcdf56b4c7e8199fe6b461e78467cfac19de6956056ef57e93d3a7df8f646f4a9002b100edb0a6caa72b3f6eb29dc54de58120d27daff9cd61c64107e1bcb3b3212e1e2aa24fb24dc2dafc636c82ad25da9d934e46c7783d8f915337612feb348857ce2262240dfe51ec94d9d61074959f167b9840b20f003883bf167149228d7f03eafde851427cd1966a96aeae05b51ae4cd82f4b4dad60a070c01a8b500e2683f7136e331602e76845262825d7f3764cf1a05ad95d88aab71d41484f63fa6a43c044c7f03130552321933bc40b888fd0cc55939ff79a5059516f3b80c7ba8188ffb6a259a34567ee52c1f9df0f6c91737d688e36d076a49d1045cac30d5ed52a10381c96d9f22e469cc531bb06853d18b8f8625d2a917e795ffa4407fa75713510a3f5370e1ecbf7a5ff68a90a1eda077531cf4d399d4908f138c936e1931c72240070c6a6255f5fd03966e9a06c1d481e8e3d128e880776e572177780a3481c49bd86c174e152bafed245d58ef3428c645b08e48833960d1b5223d7be0c67a2b2c7531390d1837a84ed004a00cb4b0cd6e78824da032b48c49ec006d14206dc3d0c67d7ca87e9ea0faddc3e0b0c917c64eefeebf79e3a16c958db63a08a5d4d7210273aba3e56a4cd4cccb044750ff97749505ff1332b2dd30990849ab1500e1947d0abfb0c59760f0a502806ee1bce56fbb42251dd6ac8b709c73a6b8c548c2b23cf351dc498810e477bd082464e76702703b56d3cd2f3d8a2e00f19d8ffa3c236d3601f169c9dfe9c316f8cbe63c3801a51ea5ac785694a0c653cd28d68c5a81c2590d2aeea8c8688b2e88f46c4f99890e51b42cce485fcb4d91557fb3912b36b0dbeac8df44e945eb9937141402fb2aa1476185e1f8c37f6c98bc937f36d9c7237135132a54a03067b002b9c657ab0daa253af66eee78b0309cb8532dd2dee800c8349b731da0efa66ead82eebe0102279df5aa281fe1d86c0dbf154910d5e8a113ecbddbd046367b9e2acfa7cc406f61b472bbec6919534615ed81b664da956ce6586bf4c92d63ef371dfec5f9ce748931d585cadc9372a95a1372c7213e2c52fca253945afeee02e9f2de2d9452c85fd2dbdc87cb6c25697dfcbed8a0eba381835e6c360f3861367ec98a9a9ccf956d6cbfb706fee0d391cf82a0d4662792274f52fc2b5d72a43ec74a86400e62d3652f607774cfad1504bc0476570d532b527bf0d7012804b2e6fdf9a9414f10b16c9374f2b065348d865b309e37750d3a7e12394e356c48c9fa0d4a9a43f689f6cbf70b09a3b9782cc3d5d93480f8a7a21a049780fc6bf21f1eca938a37afcbb2b929a0c502e164d2571e78d214b359d97e3edc0ad5c7fd1625b4ece33e1f569676e9a7262ead857873f77ef149d2f8c5a09ab19ae384a7f957f612a24283c35327aa969b20711309644c5b3e6c89da94e1f5da54246bd771468a1adc8a8d601e0b12769604f0f07ca43ce2a8a2f4b5654c0b76b146c49038e07db54dae702580b97096911f034fc1797029de8b7c213c902d1d754e77ff85e6222e745db9d5d2d45c5d29a8b6de0f27e5701fdf12b09fd6c70baa0f85a424c21ce0796dbe1fd366b94fcdf64ea232b3e88b89a38d728de77e84decc804f07a48f2716ca6f76b24923cea1a4da0d1f1dc73611269e784c4fd921f9b26c11f35b5cda45842a81b603ce2155d95c273fa0743a571b52e68c9ea3f28009fc37406b9e329ce50fedfb20dfb4cdf3a94769aee2586c2a17e68a07abfcd18aceddfd3876b14558e4d092eadb9120796c44e89610494085117bc41b5c4619a8c160b97811df49fc7d9bf222d7a002640644337ef5af53ed50661131f7c042665b276c0adf0c9a74f3542729beb7632a6027e65eddff7bb27915826701ec9b6a4c672f08877eefd859e0aa6e75a2e841e1ea98dff994e5a58be628df86bff17497a4d0f92ab39db421eb1062a2a393656bbb1d92becbb91a59619156b51585cd2eafd8a18d6326166312efeaa7258bddad63e0c7372ffb7ce1f1adf1ac2ffa0f278e4be6684d762f8971ed7bb04096b96f8126bf5fd32142e745d421f495327dde0f1e2d9a1d8ba63c1453101396a2e54e89cdabac2c6a01f23a5c1d5a2dfa2a3c634176e97c9c62b41ea28102b5a08af2fba1d311bb323df086ea97726c9d8c7b7b53a3399a80f040d434fdcc2148fb1da3b7d7f0f3e3fd56471a310ee275da611c79f86be8ed6343f6ed0ad91dfeffebc3ab6389d0566d6db904c1db499ae7d2698fdc7170320f85cc3d3d0d9d0d0c7d45db7b53c5eb79a2fed2a048d9d74419532122fac62f6315a9e13b461cb4e26514491debd366927987271be963ea5805a49b8b480c6a393fda1b11fd5634890cf02948cb5bfea237afb30d081c7403cd334a02e5bb8db542c4d5fa5ec5c8a0dd36b62156881c98e01948b4775a502c5d8453439fd930df52caac9d71c28b712000b306b913c10918ca0bc194f2533334462e5cd2b2e6c978a4838febfbc2d4375b8108bd0aa32aeaf05e7ba30c781cace6470ead574f5cbfa68aa8c8d835e9b3ab2bd7dd90b5e3e6cd62d8e04c3b45326e1f560a8dd8f3db4177e9e5ccd61f21dacb5c40c8030559cdfe88f7aa98bdcde90c1214cf293b3df093d0630bc3073cbaffa025b1f5537b49d799731745de7d36cded4a9db25915a511ba505b4ddd885cd226c24ea37fd926dbd90b887"}, {0x0, 0x0, 0x10001, 0x0}, {0x0, 0x0, 0x100d5ba, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x2, 0x0, 0xd0, 0x0}, {0x0, 0x0, 0xff, 0x0}, {0x1, 0x0, 0xffffffff, 0x0}, {0x1, 0x0, 0xf41, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x1, 0x1c, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x2, 0xffffffffffffffe9, 0xbadb, 0x0}, {0x1, 0x0, 0x40005, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 373.190952ms ago: executing program 3 (id=7113): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100003040000b9193d"], 0x3c}, 0x1, 0xba01}, 0x0) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={[0x4]}, 0x8}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='5', 0x1, 0x8080, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 310.388477ms ago: executing program 6 (id=7114): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x9c1, &(0x7f00000002c0)={0x0, 0x200002f, 0x1, 0x1000, 0x100020c}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x6000, @fd_index, 0xb, &(0x7f0000000100)=[{0x0}], 0x1, 0x13}) io_uring_enter(r2, 0x847ba, 0xa5bd, 0xa, 0x0, 0x0) 309.635868ms ago: executing program 3 (id=7115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYBLOB="8613bc"], 0x0) syz_usb_ep_write(r1, 0x81, 0x0, &(0x7f0000000080)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 202.904442ms ago: executing program 4 (id=7116): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="06010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="6d0103000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 175.669171ms ago: executing program 9 (id=7117): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000100)) 0s ago: executing program 7 (id=7118): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup2(r0, r0) sendto$inet6(r1, &(0x7f0000000080)="c2fc4a", 0x3, 0x1004, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @private1, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x100, @private2, 0xdbd}, 0x1c) sendmmsg$inet_sctp(r1, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000000000008400000002000000368074"], 0x20, 0x90000}], 0x1, 0x2405c080) kernel console output (not intermixed with test programs): d [ 373.772939][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 373.805559][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 373.834762][ T10] usb 4-1: config 0 has no interface number 0 [ 373.840895][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 373.882905][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 373.904862][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 373.943050][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 373.992897][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 374.022277][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.063720][ T10] usb 4-1: config 0 descriptor?? [ 374.082353][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 374.263058][ T1162] block nbd1: Possible stuck request ffff8880267c8000: control (read@0,1024B). Runtime 240 seconds [ 374.273936][ T1162] block nbd1: Possible stuck request ffff8880267c8200: control (read@1024,1024B). Runtime 240 seconds [ 374.282885][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 374.285071][ T1162] block nbd1: Possible stuck request ffff8880267c8400: control (read@2048,1024B). Runtime 240 seconds [ 374.303579][ T1162] block nbd1: Possible stuck request ffff8880267c8600: control (read@3072,1024B). Runtime 240 seconds [ 374.463026][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 374.470906][ T24] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 374.515843][ T24] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 374.762909][ T24] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 374.793191][ T24] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 374.825485][ T24] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 374.842930][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.851102][ T24] usb 2-1: Product: syz [ 374.855398][ T24] usb 2-1: Manufacturer: syz [ 374.860464][ T24] usb 2-1: SerialNumber: syz [ 374.889630][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 374.909928][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input69 [ 375.038308][ T5922] usb 4-1: USB disconnect, device number 50 [ 375.056280][ T5922] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 375.093138][ T24] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 375.101668][ T24] (id 0x00) [ 375.165933][ T24] rc_core: IR keymap rc-imon-pad not found [ 375.171827][ T24] Registered IR keymap rc-empty [ 375.183328][ T24] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 375.203234][ T24] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 375.293844][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 375.322776][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input70 [ 375.384960][ T24] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:46> initialized [ 375.551852][ T5864] usb 2-1: USB disconnect, device number 46 [ 375.552674][T17963] imon:send_packet: packet tx failed (-71) [ 375.593143][T17963] imon:vfd_write: send packet #0 failed [ 376.140168][T18045] overlayfs: failed to clone upperpath [ 376.396909][T18057] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4926'. [ 376.644764][ T30] audit: type=1326 audit(1770386865.595:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.0.4929" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e4a99aeb9 code=0x0 [ 376.755423][T18078] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.4933'. [ 376.767249][T18078] netlink: Conntrack attr has 3 unknown bytes [ 377.168887][T18104] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4945'. [ 377.186459][T18105] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4944'. [ 377.216223][T18100] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4944'. [ 377.409048][ T30] audit: type=1804 audit(1770386866.355:972): pid=18115 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.4949" name="/newroot/1022/file1" dev="tmpfs" ino=5235 res=1 errno=0 [ 378.106438][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.242423][T18155] input: syz1 as /devices/virtual/input/input71 [ 378.523045][ T793] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 378.562567][T18166] netlink: 'syz.0.4970': attribute type 1 has an invalid length. [ 378.581442][T18166] 8021q: adding VLAN 0 to HW filter on device bond3 [ 378.606456][T18166] bond3: (slave geneve3): making interface the new active one [ 378.615490][T18166] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 378.686607][ T793] usb 5-1: unable to get BOS descriptor or descriptor too short [ 378.695368][ T793] usb 5-1: not running at top speed; connect to a high speed hub [ 378.704549][ T793] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.714976][ T793] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 378.726587][ T793] usb 5-1: string descriptor 0 read error: -22 [ 378.733189][ T793] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 378.742378][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.764012][ T793] usb 5-1: 0:2 : does not exist [ 379.019935][ T30] audit: type=1400 audit(1770386867.965:973): avc: denied { create } for pid=18187 comm="syz.1.4980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 379.071107][ T30] audit: type=1400 audit(1770386867.975:974): avc: denied { block_suspend } for pid=18186 comm="syz.6.4979" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 379.585259][T18213] tipc: Started in network mode [ 379.590157][T18213] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 379.603159][T18213] tipc: Enabling of bearer rejected, failed to enable media [ 379.975722][ T793] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 379.996912][ T793] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 380.016253][ T793] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 380.058272][ T793] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 380.079013][ T793] usb 5-1: USB disconnect, device number 42 [ 382.098599][T18324] overlayfs: failed to clone upperpath [ 382.549642][ T30] audit: type=1326 audit(1770386871.495:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18329 comm="syz.0.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4a99aeb9 code=0x7fc00000 [ 382.936511][T18350] 9pnet: p9_errstr2errno: server reported unknown error ÿ [ 383.162652][ T30] audit: type=1326 audit(1770386872.105:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18329 comm="syz.0.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1e4a99aeb9 code=0x7fc00000 [ 383.434293][T18377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5055'. [ 383.488511][T18377] bond0: entered promiscuous mode [ 383.488520][T18379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5055'. [ 383.538890][T18377] bond_slave_0: entered promiscuous mode [ 383.553039][T18377] bond_slave_1: entered promiscuous mode [ 383.569986][T18377] gretap0: entered promiscuous mode [ 383.583714][T18377] hsr1: entered promiscuous mode [ 384.032637][ T50] Bluetooth: hci5: Frame reassembly failed (-84) [ 384.053611][ T50] Bluetooth: hci5: Frame reassembly failed (-84) [ 384.140531][T18404] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 384.158003][ T30] audit: type=1400 audit(1770386873.105:977): avc: denied { create } for pid=18403 comm="syz.1.5067" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 384.256930][ T30] audit: type=1400 audit(1770386873.105:978): avc: denied { associate } for pid=18403 comm="syz.1.5067" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 384.391625][ T30] audit: type=1400 audit(1770386873.115:979): avc: denied { mounton } for pid=18403 comm="syz.1.5067" path="/1050/bus" dev="tmpfs" ino=5383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 384.562912][ T793] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 384.689654][T18416] ceph: No mds server is up or the cluster is laggy [ 384.689751][ T30] audit: type=1400 audit(1770386873.115:980): avc: denied { setattr } for pid=18403 comm="syz.1.5067" name="work" dev="tmpfs" ino=5384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 384.708940][ T30] audit: type=1400 audit(1770386873.125:981): avc: denied { write } for pid=18403 comm="syz.1.5067" name="work" dev="tmpfs" ino=5384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 384.875034][ T30] audit: type=1400 audit(1770386873.125:982): avc: denied { write open } for pid=18403 comm="syz.1.5067" path=2F202864656C6574656429 dev="tmpfs" ino=5385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 385.030979][ T30] audit: type=1400 audit(1770386873.125:983): avc: denied { write } for pid=18403 comm="syz.1.5067" name="work" dev="tmpfs" ino=5384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 385.144301][ T30] audit: type=1400 audit(1770386873.125:984): avc: denied { add_name } for pid=18403 comm="syz.1.5067" name="#3a" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 385.149196][ T793] usb 1-1: Using ep0 maxpacket: 16 [ 385.396214][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.412605][ T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.422964][ T793] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 385.436585][ T793] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 385.450018][ T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.489077][ T793] usb 1-1: config 0 descriptor?? [ 385.905528][ T793] HID 045e:07da: Invalid code 65791 type 1 [ 385.938178][ T793] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0036/input/input72 [ 386.001382][ T793] microsoft 0003:045E:07DA.0036: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 386.102962][T18399] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 386.110127][ T5810] Bluetooth: hci5: command 0x1003 tx timeout [ 386.120937][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 386.128151][ T52] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 386.153041][ T793] usb 1-1: USB disconnect, device number 50 [ 387.133043][T18508] netlink: 'syz.4.5104': attribute type 29 has an invalid length. [ 387.145619][T18508] netlink: 'syz.4.5104': attribute type 29 has an invalid length. [ 387.156273][T18508] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5104'. [ 388.630459][T18536] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5115'. [ 388.710823][T18536] gretap0: entered promiscuous mode [ 388.769928][T18540] gretap0: left promiscuous mode [ 388.818671][T18540] erspan0: left promiscuous mode [ 388.849190][T18540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.334190][ T5879] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 389.340884][T18564] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.5128'. [ 389.352245][T18564] netlink: Conntrack attr has 4 unknown bytes [ 389.502910][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 389.513965][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.543124][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 389.562884][ T5879] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 389.571925][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.606208][ T5879] usb 1-1: config 0 descriptor?? [ 390.030957][ T5879] HID 045e:07da: Invalid code 65791 type 1 [ 390.047560][ T5879] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0037/input/input73 [ 390.095115][ T5879] microsoft 0003:045E:07DA.0037: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 390.236460][T18582] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.5136'. [ 390.866940][ T5879] usb 1-1: USB disconnect, device number 51 [ 391.369139][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 391.369156][ T30] audit: type=1804 audit(1770386880.315:996): pid=18616 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.5149" name="/newroot/1049/file1" dev="tmpfs" ino=5406 res=1 errno=0 [ 391.574399][T18622] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 786440, id = 0 [ 391.585495][T18621] IPVS: stopping backup sync thread 18622 ... [ 392.032943][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 392.193103][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 392.205478][ T10] usb 5-1: config 0 has no interfaces? [ 392.212895][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.228347][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 392.251607][ T10] usb 5-1: SerialNumber: syz [ 392.258712][ T10] usb 5-1: config 0 descriptor?? [ 392.512949][ T10] usb 5-1: USB disconnect, device number 43 [ 392.704842][ T10] libceph: connect (1)[c::]:6789 error -101 [ 392.723062][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 392.784804][ T5922] libceph: connect (1)[b::]:6789 error -101 [ 392.791109][ T5922] libceph: mon0 (1)[b::]:6789 connect error [ 392.997851][ T10] libceph: connect (1)[c::]:6789 error -101 [ 393.066572][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 393.073259][ T5922] libceph: connect (1)[b::]:6789 error -101 [ 393.083289][ T5922] libceph: mon0 (1)[b::]:6789 connect error [ 393.463022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.483209][ T5922] libceph: connect (1)[c::]:6789 error -101 [ 393.489425][ T5922] libceph: mon0 (1)[c::]:6789 connect error [ 393.508925][T18663] ceph: No mds server is up or the cluster is laggy [ 393.517512][T18666] ceph: No mds server is up or the cluster is laggy [ 393.640714][T18694] ceph: No mds server is up or the cluster is laggy [ 393.903036][ T5922] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 394.061470][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.084854][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.096275][ T5922] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 394.108821][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.148078][ T5922] usb 1-1: config 0 descriptor?? [ 394.423931][ T30] audit: type=1400 audit(1770386883.375:997): avc: denied { wake_alarm } for pid=18721 comm="syz.4.5189" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 394.486837][T18724] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5190'. [ 395.529089][ T5922] uclogic 0003:256C:006D.0038: failed retrieving string descriptor #100: -71 [ 395.539205][ T5922] uclogic 0003:256C:006D.0038: failed retrieving pen parameters: -71 [ 395.550590][ T5922] uclogic 0003:256C:006D.0038: failed probing pen v1 parameters: -71 [ 395.560113][ T5922] uclogic 0003:256C:006D.0038: failed probing parameters: -71 [ 395.569322][ T5922] uclogic 0003:256C:006D.0038: probe with driver uclogic failed with error -71 [ 395.578705][T18752] netlink: 'syz.6.5201': attribute type 1 has an invalid length. [ 395.581500][ T5922] usb 1-1: USB disconnect, device number 52 [ 395.618318][T18752] 8021q: adding VLAN 0 to HW filter on device bond3 [ 395.963493][T18766] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5207'. [ 395.980015][T18766] team1: entered promiscuous mode [ 395.986075][T18766] team1: entered allmulticast mode [ 395.991420][T18766] 8021q: adding VLAN 0 to HW filter on device team1 [ 397.828922][T18825] SELinux: failed to load policy [ 398.329714][T18849] netlink: zone id is out of range [ 398.364773][T18849] netlink: get zone limit has 4 unknown bytes [ 398.955956][ T793] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 399.136806][ T793] usb 5-1: config 8 has an invalid interface number: 8 but max is 1 [ 399.148176][ T793] usb 5-1: config 8 has an invalid interface number: 8 but max is 1 [ 399.165354][ T793] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 399.185933][ T793] usb 5-1: config 8 has no interface number 0 [ 399.198663][ T793] usb 5-1: config 8 interface 8 has no altsetting 1 [ 399.226641][ T793] usb 5-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=33.93 [ 399.236305][ T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.252920][ T793] usb 5-1: Product: syz [ 399.262900][ T793] usb 5-1: Manufacturer: syz [ 399.272881][ T793] usb 5-1: SerialNumber: syz [ 399.403040][T18876] overlayfs: statfs failed on './file0' [ 399.521961][ T793] qmi_wwan 5-1:8.8: probe with driver qmi_wwan failed with error -22 [ 399.546211][ T793] usb 5-1: USB disconnect, device number 44 [ 399.582164][T18881] lo speed is unknown, defaulting to 1000 [ 399.661033][T18886] fuse: Bad value for 'fd' [ 399.845100][T18881] lo speed is unknown, defaulting to 1000 [ 400.043649][ T30] audit: type=1400 audit(1770386888.995:998): avc: denied { remount } for pid=18902 comm="syz.6.5261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 400.137052][ T30] audit: type=1400 audit(1770386889.085:999): avc: denied { ioctl } for pid=18900 comm="syz.3.5260" path="socket:[68037]" dev="sockfs" ino=68037 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 400.221584][ T30] audit: type=1400 audit(1770386889.165:1000): avc: denied { map_create } for pid=18910 comm="syz.4.5265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 400.266203][ T30] audit: type=1400 audit(1770386889.195:1001): avc: denied { write } for pid=18910 comm="syz.4.5265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 400.319304][ T30] audit: type=1400 audit(1770386889.255:1002): avc: denied { ioctl } for pid=18912 comm="syz.6.5264" path="socket:[68064]" dev="sockfs" ino=68064 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 400.550945][T18922] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5268'. [ 400.638091][ T30] audit: type=1400 audit(1770386889.585:1003): avc: denied { prog_load } for pid=18927 comm="syz.6.5271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 400.707127][ T30] audit: type=1400 audit(1770386889.655:1004): avc: denied { map_read map_write } for pid=18932 comm="syz.6.5273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 400.730808][ T30] audit: type=1400 audit(1770386889.655:1005): avc: denied { prog_run } for pid=18932 comm="syz.6.5273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 400.759237][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5274'. [ 400.770174][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5274'. [ 400.988787][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 401.000970][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 401.010553][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 401.018617][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 401.028019][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 401.128480][T18944] lo speed is unknown, defaulting to 1000 [ 401.343691][T18958] fuse: Bad value for 'fd' [ 401.401249][T18944] lo speed is unknown, defaulting to 1000 [ 401.549389][T18944] chnl_net:caif_netlink_parms(): no params data found [ 401.714317][T18944] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.721662][T18944] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.729369][T18944] bridge_slave_0: entered allmulticast mode [ 401.737705][T18944] bridge_slave_0: entered promiscuous mode [ 401.746121][T18944] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.753939][T18944] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.761432][T18944] bridge_slave_1: entered allmulticast mode [ 401.769187][T18944] bridge_slave_1: entered promiscuous mode [ 401.804153][T18944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.815870][T18944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.872774][T18944] team0: Port device team_slave_0 added [ 401.890064][T18944] team0: Port device team_slave_1 added [ 401.945664][T18944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.962899][T18944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.989086][T18944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.002115][T18944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.009589][T18944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.052913][T18944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.108427][T18944] hsr_slave_0: entered promiscuous mode [ 402.115992][T18944] hsr_slave_1: entered promiscuous mode [ 402.122296][T18944] debugfs: 'hsr0' already exists in 'hsr' [ 402.128634][T18944] Cannot create hsr debugfs directory [ 402.496423][T18944] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 402.533811][ T5922] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 402.566935][T18944] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 402.585486][T18997] netlink: 'syz.6.5296': attribute type 9 has an invalid length. [ 402.610940][T18944] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 402.619635][T18997] netlink: 'syz.6.5296': attribute type 11 has an invalid length. [ 402.643983][T18997] netlink: 'syz.6.5296': attribute type 12 has an invalid length. [ 402.651913][T18997] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.5296'. [ 402.665762][T18944] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 402.692298][T18997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5296'. [ 402.704205][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.724136][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.744255][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.767394][ T5922] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.787056][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.825561][ T5922] usb 1-1: config 0 descriptor?? [ 402.860253][T18944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.896111][T18944] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.921805][T17458] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.928970][T17458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.958629][T17458] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.965809][T17458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.046515][T18944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.157237][ T5810] Bluetooth: hci5: command tx timeout [ 403.175961][ T30] audit: type=1400 audit(1770386892.115:1006): avc: denied { shutdown } for pid=19019 comm="syz.3.5303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 403.245227][ T5922] plantronics 0003:047F:FFFF.0039: reserved main item tag 0xd [ 403.277009][ T5922] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 403.486013][T18944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.591909][ T5922] usb 1-1: USB disconnect, device number 53 [ 403.965259][T18944] veth0_vlan: entered promiscuous mode [ 403.981485][T18944] veth1_vlan: entered promiscuous mode [ 404.019626][T18944] veth0_macvtap: entered promiscuous mode [ 404.035543][T18944] veth1_macvtap: entered promiscuous mode [ 404.079280][T18944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.112288][T18944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.162664][T17456] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.192072][T17456] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.204273][T17456] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.223973][T17456] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.284189][ T30] audit: type=1400 audit(1770386893.225:1007): avc: denied { create } for pid=19047 comm="syz.0.5311" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 404.304598][ T5922] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 404.345824][ T1162] block nbd1: Possible stuck request ffff8880267c8000: control (read@0,1024B). Runtime 270 seconds [ 404.357036][ T1162] block nbd1: Possible stuck request ffff8880267c8200: control (read@1024,1024B). Runtime 270 seconds [ 404.368041][ T1162] block nbd1: Possible stuck request ffff8880267c8400: control (read@2048,1024B). Runtime 270 seconds [ 404.379109][ T1162] block nbd1: Possible stuck request ffff8880267c8600: control (read@3072,1024B). Runtime 270 seconds [ 404.457190][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 404.473550][ T5922] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 404.493275][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.531657][T17456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.543682][ T5922] usb 4-1: Product: syz [ 404.548125][ T5922] usb 4-1: Manufacturer: syz [ 404.563998][T17456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.581074][ T5922] usb 4-1: SerialNumber: syz [ 404.593895][T19052] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 404.604828][ T5922] r8152-cfgselector 4-1: Unknown version 0x0000 [ 404.633075][ T5922] r8152-cfgselector 4-1: config 0 descriptor?? [ 404.651013][T17457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.667586][T17457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.849785][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5309'. [ 404.899772][T19069] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 405.105441][T19044] tmpfs: Bad value for 'nr_inodes' [ 405.112460][ T10] r8152-cfgselector 4-1: USB disconnect, device number 51 [ 405.223515][ T5810] Bluetooth: hci5: command tx timeout [ 405.767630][T19101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5332'. [ 406.214395][T19121] binder: 19116:19121 unknown command 0 [ 406.221204][T19121] binder: 19116:19121 ioctl c0306201 200000000640 returned -22 [ 406.226605][T19117] binder: 19116:19117 ioctl c0306201 200000000540 returned -14 [ 406.499750][T19136] netlink: 'syz.0.5344': attribute type 1 has an invalid length. [ 406.753933][T19144] geneve3: entered promiscuous mode [ 406.804512][T17457] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.852553][T17457] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.897012][T17457] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.978296][T17457] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.206396][T19156] netlink: 'syz.0.5352': attribute type 29 has an invalid length. [ 407.216024][T19156] netlink: 'syz.0.5352': attribute type 29 has an invalid length. [ 407.303262][ T5810] Bluetooth: hci5: command tx timeout [ 407.355963][T19165] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5356'. [ 407.506033][T19181] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 407.591661][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 407.591675][ T30] audit: type=1400 audit(1770386896.535:1010): avc: denied { read } for pid=19185 comm="syz.3.5363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 408.122919][ T5808] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 408.503156][ T5808] usb 4-1: Using ep0 maxpacket: 16 [ 408.510115][ T5808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 408.524277][ T5808] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 408.538708][ T5808] usb 4-1: config 1 interface 0 has no altsetting 0 [ 408.549128][T19220] fuse: Bad value for 'fd' [ 408.549630][ T5808] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.40 [ 408.563148][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.572261][ T5808] usb 4-1: Product: syz [ 408.576632][ T5808] usb 4-1: Manufacturer: syz [ 408.581545][ T5808] usb 4-1: SerialNumber: syz [ 409.129782][T19235] overlayfs: failed to clone upperpath [ 409.383231][ T5810] Bluetooth: hci5: command tx timeout [ 409.413336][ T30] audit: type=1400 audit(1770386898.355:1011): avc: denied { read write } for pid=19252 comm="syz.0.5390" name="file0" dev="tmpfs" ino=5207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 409.471278][ T30] audit: type=1400 audit(1770386898.355:1012): avc: denied { ioctl } for pid=19252 comm="syz.0.5390" path="/1004/file0" dev="tmpfs" ino=5207 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 409.514565][ T5808] usbhid 4-1:1.0: can't add hid device: -71 [ 409.530800][ T5808] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 409.561098][ T5808] usb 4-1: USB disconnect, device number 52 [ 409.627366][ T30] audit: type=1400 audit(1770386898.565:1013): avc: denied { cmd } for pid=19262 comm="syz.4.5394" path="socket:[70178]" dev="sockfs" ino=70178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 410.231870][ T30] audit: type=1400 audit(1770386899.175:1014): avc: denied { read } for pid=19283 comm="syz.7.5403" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 410.265895][ T30] audit: type=1400 audit(1770386899.175:1015): avc: denied { open } for pid=19283 comm="syz.7.5403" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 410.291531][ T30] audit: type=1400 audit(1770386899.175:1016): avc: denied { ioctl } for pid=19283 comm="syz.7.5403" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 410.434566][T19292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5407'. [ 410.453787][T19292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5407'. [ 410.726736][T19299] bridge_slave_0 (unregistering): left allmulticast mode [ 410.734380][T19299] bridge_slave_0 (unregistering): left promiscuous mode [ 410.742421][T19299] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.992683][T19322] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5429'. [ 411.352096][T19342] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5431'. [ 411.470323][ T30] audit: type=1400 audit(1770386900.415:1017): avc: denied { create } for pid=19346 comm="syz.7.5435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 411.681541][T19362] netlink: 'syz.0.5439': attribute type 1 has an invalid length. [ 411.700835][T19364] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5438'. [ 411.716282][T19364] netlink: 'syz.6.5438': attribute type 6 has an invalid length. [ 411.750510][T19364] netlink: 'syz.6.5438': attribute type 5 has an invalid length. [ 411.758994][T19364] netlink: 'syz.6.5438': attribute type 4 has an invalid length. [ 411.772628][T19362] bond5: (slave bridge2): making interface the new active one [ 411.781047][T19362] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 412.055867][T19387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5449'. [ 412.312936][ T5808] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 412.464415][ T5808] usb 1-1: config 1 interface 0 has no altsetting 0 [ 412.479068][ T5808] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 412.501437][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.526581][ T5808] usb 1-1: Product: syz [ 412.537517][ T5808] usb 1-1: Manufacturer: syz [ 412.550188][ T5808] usb 1-1: SerialNumber: syz [ 412.771560][T19415] syzkaller1: entered promiscuous mode [ 412.777555][T19415] syzkaller1: entered allmulticast mode [ 412.829292][T19421] lo speed is unknown, defaulting to 1000 [ 413.029093][T19421] lo speed is unknown, defaulting to 1000 [ 413.173907][ T5808] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 253 proto 1 vid 0x04B8 pid 0x0202 [ 413.350921][ T30] audit: type=1400 audit(1770386902.295:1018): avc: denied { map } for pid=19434 comm="syz.4.5469" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 413.377949][ T30] audit: type=1400 audit(1770386902.325:1019): avc: denied { execute } for pid=19434 comm="syz.4.5469" path="/dev/video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 413.530153][ T5879] usb 1-1: USB disconnect, device number 54 [ 413.548441][ T5879] usblp0: removed [ 413.754468][T19446] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5473'. [ 413.768316][T19446] netlink: 'syz.6.5473': attribute type 7 has an invalid length. [ 413.798338][T19446] netlink: 'syz.6.5473': attribute type 8 has an invalid length. [ 413.818785][T19446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5473'. [ 413.892879][ T5879] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 414.053258][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 414.062515][ T5879] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 414.092987][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 414.107505][T19456] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 414.110199][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 414.147446][ T5879] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 414.166009][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.185727][ T5879] usb 4-1: Product: syz [ 414.190943][ T5879] usb 4-1: Manufacturer: syz [ 414.203388][ T5879] usb 4-1: SerialNumber: syz [ 414.223200][ T5879] usb 4-1: config 0 descriptor?? [ 414.272284][T19460] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5479'. [ 414.282933][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 414.294580][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.313611][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 414.313671][T19462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5480'. [ 414.324855][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.350853][ T24] usb 5-1: config 0 descriptor?? [ 414.374833][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 414.417332][ T5808] libceph: connect (1)[c::]:6789 error -101 [ 414.432573][ T5808] libceph: mon0 (1)[c::]:6789 connect error [ 414.435777][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 414.455368][ T5879] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input75 [ 414.471898][ T5879] imon:send_packet: packet tx failed (-71) [ 414.493166][ T5879] imon 4-1:0.0: panel buttons/knobs setup failed [ 414.557973][T19473] kernel read not supported for file /cpuacct.usage_percpu (pid: 19473 comm: syz.7.5482) [ 414.568002][ T5879] rc_core: IR keymap rc-imon-pad not found [ 414.574048][ T5879] Registered IR keymap rc-empty [ 414.578469][T19466] ceph: No mds server is up or the cluster is laggy [ 414.579508][ T30] audit: type=1800 audit(1770386903.525:1020): pid=19473 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.5482" name="cpuacct.usage_percpu" dev="mqueue" ino=71562 res=0 errno=0 [ 414.611309][ T5879] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 414.622168][ T5879] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 414.631932][ T5879] imon:send_packet: packet tx failed (-71) [ 414.652992][ T5879] imon 4-1:0.0: remote input dev register failed [ 414.671007][ T5879] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 414.758179][T19479] syzkaller1: entered promiscuous mode [ 414.764616][T19479] syzkaller1: entered allmulticast mode [ 414.774435][ T5879] imon 4-1:0.0: unable to initialize intf0, err 0 [ 414.783108][ T5879] imon:imon_probe: failed to initialize context! [ 414.798476][ T5879] imon 4-1:0.0: unable to register, err -19 [ 414.811074][T19482] syz_tun: entered allmulticast mode [ 414.822974][ T5879] usb 4-1: USB disconnect, device number 53 [ 414.857862][T19481] syz_tun: left allmulticast mode [ 415.122976][ T5879] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 415.189742][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5494'. [ 415.273042][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 415.283906][ T5879] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 415.299210][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 415.308612][ T5879] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 415.319753][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.327961][ T5879] usb 4-1: Product: syz [ 415.332138][ T5879] usb 4-1: Manufacturer: syz [ 415.338129][ T5879] usb 4-1: SerialNumber: syz [ 415.346065][ T5879] usb 4-1: config 0 descriptor?? [ 415.354779][T19510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5497'. [ 415.364003][T19510] netlink: 'syz.0.5497': attribute type 12 has an invalid length. [ 415.372332][T19510] netlink: 'syz.0.5497': attribute type 12 has an invalid length. [ 415.542594][T19516] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 415.568633][ T5879] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input77 [ 415.845540][ T24] usb 5-1: USB disconnect, device number 45 [ 415.866843][ T5879] rc_core: IR keymap rc-imon-pad not found [ 415.884888][ T5879] Registered IR keymap rc-empty [ 415.889857][ T5879] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 415.930420][ T5879] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 415.996134][ T5879] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 416.014827][ T5879] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input78 [ 416.037106][ T5879] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:54> initialized [ 416.387357][ C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 416.387605][ T793] usb 4-1: USB disconnect, device number 54 [ 416.673603][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 416.684483][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 416.694109][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 416.703529][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 416.711033][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 416.742592][T19542] lo speed is unknown, defaulting to 1000 [ 416.819558][T19542] lo speed is unknown, defaulting to 1000 [ 416.898514][T19542] chnl_net:caif_netlink_parms(): no params data found [ 416.977281][T19542] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.986558][T19542] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.994036][T19542] bridge_slave_0: entered allmulticast mode [ 417.001825][T19542] bridge_slave_0: entered promiscuous mode [ 417.010106][T19542] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.017303][T19542] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.024648][T19542] bridge_slave_1: entered allmulticast mode [ 417.031902][T19542] bridge_slave_1: entered promiscuous mode [ 417.061246][T19542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.073161][T19542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.104660][T19542] team0: Port device team_slave_0 added [ 417.113395][T19542] team0: Port device team_slave_1 added [ 417.139115][T19542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.147614][T19542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.174251][T19542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.186388][T19542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.193968][T19542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.219919][T19542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.264145][T19542] hsr_slave_0: entered promiscuous mode [ 417.270518][T19542] hsr_slave_1: entered promiscuous mode [ 417.276841][T19542] debugfs: 'hsr0' already exists in 'hsr' [ 417.282566][T19542] Cannot create hsr debugfs directory [ 417.469963][T19542] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 417.480855][T19542] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 417.508450][T19542] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 417.528096][T19542] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 417.605591][T19542] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.612930][T19542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.620415][T19542] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.627639][T19542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.694866][T19542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.728164][T17458] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.739669][T17458] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.758184][T19542] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.789845][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.797017][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.805833][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.812986][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.834366][ T30] audit: type=1400 audit(1770386906.785:1021): avc: denied { shutdown } for pid=19566 comm="syz.4.5518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 418.282759][T19542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.418632][ T24] libceph: connect (1)[c::]:6789 error -101 [ 418.429078][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 418.541546][T19542] veth0_vlan: entered promiscuous mode [ 418.555428][T19542] veth1_vlan: entered promiscuous mode [ 418.572353][T19582] ceph: No mds server is up or the cluster is laggy [ 418.596814][T19542] veth0_macvtap: entered promiscuous mode [ 418.621752][T19542] veth1_macvtap: entered promiscuous mode [ 418.659128][T19542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.690649][T19542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.726111][T17456] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.749049][ T52] Bluetooth: hci3: command tx timeout [ 418.750181][T17456] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.851762][T17456] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.863521][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.881359][T17456] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.978625][T19597] lo speed is unknown, defaulting to 1000 [ 419.030276][T17457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.052882][T17457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.113379][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.121935][T17457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.155235][T17457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.213442][ T30] audit: type=1400 audit(1770386908.165:1022): avc: denied { append } for pid=19605 comm="syz.7.5527" name="rt_cache" dev="proc" ino=4026533985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 419.377367][T19610] __nla_validate_parse: 1 callbacks suppressed [ 419.377386][T19610] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5530'. [ 419.392585][T19597] lo speed is unknown, defaulting to 1000 [ 419.416207][T19614] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5513'. [ 419.439389][ T5944] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.439522][T19610] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5530'. [ 419.534426][ T5944] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.585103][ T5944] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.683198][ T5944] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.781698][T19626] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5535'. [ 419.797392][T19626] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5535'. [ 420.497243][T19650] bridge0: port 3(erspan0) entered blocking state [ 420.509062][T19650] bridge0: port 3(erspan0) entered disabled state [ 420.527343][T19650] erspan0: entered allmulticast mode [ 420.563040][T19650] erspan0: entered promiscuous mode [ 420.602708][T19650] bridge0: port 3(erspan0) entered blocking state [ 420.609234][T19650] bridge0: port 3(erspan0) entered forwarding state [ 420.624570][T19655] erspan0: left allmulticast mode [ 420.635548][T19655] erspan0: left promiscuous mode [ 420.661786][T19655] bridge0: port 3(erspan0) entered disabled state [ 420.824528][ T52] Bluetooth: hci3: command tx timeout [ 421.864281][T19710] netlink: 176 bytes leftover after parsing attributes in process `syz.7.5565'. [ 422.001713][ T5879] IPVS: starting estimator thread 0... [ 422.182928][T19720] IPVS: using max 51 ests per chain, 122400 per kthread [ 422.481097][T19739] loop7: detected capacity change from 0 to 16384 [ 422.613139][T19744] loop7: detected capacity change from 16384 to 0 [ 422.619686][ C0] blk_print_req_error: 52 callbacks suppressed [ 422.619705][ C0] I/O error, dev loop7, sector 8192 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 422.928683][ T52] Bluetooth: hci3: command tx timeout [ 423.125950][T19764] netlink: 'syz.8.5589': attribute type 1 has an invalid length. [ 423.200021][T19764] netlink: 'syz.8.5589': attribute type 4 has an invalid length. [ 423.286815][T19764] netlink: 15334 bytes leftover after parsing attributes in process `syz.8.5589'. [ 423.453030][T19766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.915503][ T5808] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 423.926672][T19790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5597'. [ 424.084362][ T5808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.116065][ T5808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.183031][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.194169][ T5808] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 424.253008][ T5808] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 424.262173][ T5808] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.272178][ T5808] usb 9-1: config 0 descriptor?? [ 424.698083][ T5808] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 424.905089][T19811] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5606'. [ 424.915890][T19811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5606'. [ 424.925350][T19811] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5606'. [ 424.935086][T19811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5606'. [ 424.983097][ T52] Bluetooth: hci3: command tx timeout [ 425.329403][T19830] gretap0: entered promiscuous mode [ 425.340373][T19830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5614'. [ 425.352238][T19830] gretap0: left promiscuous mode [ 425.619313][ T30] audit: type=1400 audit(1770386914.565:1023): avc: denied { read write } for pid=19837 comm="syz.7.5618" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 425.698821][T19838] bond0: (slave bond_slave_0): Releasing backup interface [ 425.714767][ T30] audit: type=1400 audit(1770386914.565:1024): avc: denied { open } for pid=19837 comm="syz.7.5618" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 425.743949][T19838] bond_slave_0: left promiscuous mode [ 425.761653][T19838] bond0: (slave bond_slave_1): Releasing backup interface [ 425.772533][T19838] bond_slave_1: left promiscuous mode [ 425.791849][T19838] team0: Port device team_slave_0 removed [ 425.807255][T19838] team0: Port device team_slave_1 removed [ 425.813727][T19838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.821093][T19838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.830758][T19838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.838221][T19838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.848490][T19838] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 426.675483][T19899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5642'. [ 426.688705][ T24] usb 9-1: USB disconnect, device number 2 [ 426.690427][T19899] netlink: 'syz.4.5642': attribute type 11 has an invalid length. [ 426.728997][T19899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5642'. [ 426.768429][T19899] netlink: 'syz.4.5642': attribute type 11 has an invalid length. [ 427.258298][T19934] loop2: detected capacity change from 0 to 7 [ 427.273170][T19934] Dev loop2: unable to read RDB block 7 [ 427.279373][T19934] loop2: AHDI p1 p2 p3 [ 427.279421][T19936] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5659'. [ 427.283947][T19934] loop2: partition table partially beyond EOD, truncated [ 427.301927][T19934] loop2: p1 start 1601398130 is beyond EOD, truncated [ 427.352623][T19934] loop2: p2 start 1702059890 is beyond EOD, truncated [ 427.870415][ T30] audit: type=1400 audit(1770386916.815:1025): avc: denied { associate } for pid=19954 comm="syz.3.5666" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 427.987348][ T30] audit: type=1400 audit(1770386916.935:1026): avc: denied { listen } for pid=19955 comm="syz.8.5667" lport=57601 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 428.606379][T19970] overlayfs: failed to clone upperpath [ 429.012883][ T5864] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 429.189100][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 429.220521][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 429.274241][ T5864] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 429.293495][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.313099][ T5864] usb 5-1: Product: syz [ 429.317374][ T5864] usb 5-1: Manufacturer: syz [ 429.321982][ T5864] usb 5-1: SerialNumber: syz [ 429.358016][ T5864] usb 5-1: config 0 descriptor?? [ 429.387386][ T5864] hub 5-1:0.0: bad descriptor, ignoring hub [ 429.403087][ T5864] hub 5-1:0.0: probe with driver hub failed with error -5 [ 429.436785][ T5864] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input79 [ 429.710814][ T30] audit: type=1400 audit(1770386918.655:1027): avc: denied { create } for pid=19979 comm="syz.3.5679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 429.801332][ T30] audit: type=1400 audit(1770386918.675:1028): avc: denied { read } for pid=19975 comm="syz.4.5677" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 430.794875][ T52] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 430.901756][T20031] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 431.303533][T20045] netlink: zone id is out of range [ 431.308726][T20045] netlink: zone id is out of range [ 431.314293][T20045] netlink: zone id is out of range [ 431.319413][T20045] netlink: zone id is out of range [ 431.324602][T20045] netlink: zone id is out of range [ 431.329698][T20045] netlink: zone id is out of range [ 431.334831][T20045] netlink: zone id is out of range [ 431.339942][T20045] netlink: zone id is out of range [ 431.345064][T20045] netlink: zone id is out of range [ 431.350157][T20045] netlink: zone id is out of range [ 431.435689][T20043] batman_adv: batadv0: Removing interface: macvlan4 [ 431.476086][T20043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.515690][T20043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.554661][T20043] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 431.578684][T20043] bond0 (unregistering): Released all slaves [ 432.374401][T20088] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.5718'. [ 432.477635][T20092] bridge_slave_0: left allmulticast mode [ 432.493791][T20092] bridge_slave_0: left promiscuous mode [ 432.514571][T20092] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.538835][T20092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.564175][T20092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.970854][ T30] audit: type=1400 audit(1770387177.914:1029): avc: denied { watch_sb } for pid=20111 comm="syz.7.5728" path="/61" dev="tmpfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 433.497227][ T30] audit: type=1400 audit(1770387178.444:1030): avc: denied { read } for pid=20127 comm="syz.7.5735" name="file0" dev="fuse" ino=35184372088832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 433.534653][ T5864] usb 5-1: USB disconnect, device number 46 [ 433.593065][ T30] audit: type=1400 audit(1770387178.444:1031): avc: denied { open } for pid=20127 comm="syz.7.5735" path="/64/file0/file0" dev="fuse" ino=35184372088832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 433.706728][ T30] audit: type=1400 audit(1770387178.654:1032): avc: denied { allowed } for pid=20135 comm="syz.6.5738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 434.423753][ T1162] block nbd1: Possible stuck request ffff8880267c8000: control (read@0,1024B). Runtime 300 seconds [ 434.435395][ T1162] block nbd1: Possible stuck request ffff8880267c8200: control (read@1024,1024B). Runtime 300 seconds [ 434.446537][ T1162] block nbd1: Possible stuck request ffff8880267c8400: control (read@2048,1024B). Runtime 300 seconds [ 434.458204][ T1162] block nbd1: Possible stuck request ffff8880267c8600: control (read@3072,1024B). Runtime 300 seconds [ 435.126538][ T5879] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 435.319910][ T5879] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 435.346332][ T5879] usb 5-1: config 0 has no interface number 0 [ 435.358008][ T5879] usb 5-1: config 0 interface 41 has no altsetting 0 [ 435.403128][ T5879] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 435.424946][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.447217][ T5879] usb 5-1: Product: syz [ 435.461069][ T5879] usb 5-1: Manufacturer: syz [ 435.489742][ T5879] usb 5-1: SerialNumber: syz [ 435.524103][ T5879] usb 5-1: config 0 descriptor?? [ 436.356077][ T5879] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 436.762933][ T30] audit: type=1400 audit(1770387181.704:1033): avc: denied { map } for pid=20236 comm="syz.6.5773" path="socket:[75795]" dev="sockfs" ino=75795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 436.791349][ T5879] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 436.820864][ T5879] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 436.850802][ T5879] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 436.862702][ T5879] usb 5-1: USB disconnect, device number 47 [ 436.977851][T20247] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.5777'. [ 437.050839][ T30] audit: type=1400 audit(1770387181.994:1034): avc: denied { read } for pid=20248 comm="syz.8.5779" dev="nsfs" ino=4026534214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 437.109061][ T30] audit: type=1400 audit(1770387181.994:1035): avc: denied { open } for pid=20248 comm="syz.8.5779" path="net:[4026534214]" dev="nsfs" ino=4026534214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 437.185283][ T30] audit: type=1400 audit(1770387181.994:1036): avc: denied { ioctl } for pid=20248 comm="syz.8.5779" path="socket:[75335]" dev="sockfs" ino=75335 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 437.443839][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5784'. [ 437.466940][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5784'. [ 437.865095][ T30] audit: type=1400 audit(1770387182.795:1037): avc: denied { ioctl } for pid=20281 comm="syz.7.5792" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 437.925548][ T5864] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 438.010599][T20284] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5794'. [ 438.043900][T20284] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5794'. [ 438.074226][T20286] netlink: 'syz.8.5793': attribute type 1 has an invalid length. [ 438.085862][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 438.098162][T20286] netlink: 'syz.8.5793': attribute type 1 has an invalid length. [ 438.100454][ T5864] usb 5-1: config 0 has no interfaces? [ 438.126205][ T5864] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 438.160748][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.191628][ T5864] usb 5-1: config 0 descriptor?? [ 438.309504][ T30] audit: type=1400 audit(1770387183.198:1038): avc: denied { name_bind 0x1000000 } for pid=20302 comm="syz.7.5802" path="socket:[75413]" dev="sockfs" ino=75413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 438.462810][ T30] audit: type=1400 audit(1770387183.347:1039): avc: denied { sqpoll } for pid=20308 comm="syz.7.5805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 438.522171][ T5879] usb 5-1: USB disconnect, device number 48 [ 439.682354][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.215360][T20386] team0 (unregistering): Port device team_slave_0 removed [ 441.242801][T20386] team0 (unregistering): Port device team_slave_1 removed [ 441.542593][ T30] audit: type=1400 audit(1770387186.228:1040): avc: denied { create } for pid=20394 comm="syz.8.5838" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=chr_file permissive=1 [ 441.668269][T20403] overlayfs: failed to clone upperpath [ 442.682943][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 442.864800][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 442.878484][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 442.908394][ T24] usb 9-1: config 7 has an invalid interface number: 58 but max is 0 [ 442.917796][ T24] usb 9-1: config 7 has no interface number 0 [ 442.924427][ T24] usb 9-1: config 7 interface 58 altsetting 3 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 442.964238][ T24] usb 9-1: config 7 interface 58 altsetting 3 endpoint 0x8D has an invalid bInterval 82, changing to 10 [ 443.003544][ T24] usb 9-1: config 7 interface 58 altsetting 3 endpoint 0x8D has invalid maxpacket 57606, setting to 1024 [ 443.035606][ T24] usb 9-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 443.067655][ T24] usb 9-1: config 7 interface 58 has no altsetting 0 [ 443.080551][ T24] usb 9-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 443.099711][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.111948][ T24] usb 9-1: Product: syz [ 443.116143][ T24] usb 9-1: Manufacturer: syz [ 443.144745][ T24] usb 9-1: SerialNumber: syz [ 443.203422][ T30] audit: type=1400 audit(1770387187.781:1041): avc: denied { setopt } for pid=20442 comm="syz.3.5857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 443.454336][ T24] usb 9-1: USB disconnect, device number 3 [ 443.818535][T20468] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5866'. [ 443.922927][ T5871] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 444.094854][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 444.108214][ T5871] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 444.123646][ T5871] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 444.138557][ T5871] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 444.149044][ T5871] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 444.163591][ T5871] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 444.174048][ T5871] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.188814][ T5871] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 444.199688][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.443424][ T5871] usb 5-1: usb_control_msg returned -32 [ 444.449303][ T5871] usbtmc 5-1:16.0: can't read capabilities [ 444.788128][T20489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5874'. [ 444.806871][T17457] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.817175][T20489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5874'. [ 444.826760][T17457] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.853020][T17457] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.867346][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 444.874511][T17457] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.878640][T20491] usbtmc 5-1:16.0: Unable to send data, error -71 [ 444.902581][T20491] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 444.921570][ T24] usb 5-1: USB disconnect, device number 49 [ 445.102575][T20502] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5879'. [ 445.152479][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.457745][T17457] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 445.492694][T17457] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 445.515961][T17457] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 445.538716][T17457] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 445.868294][T20537] vivid-007: ================= START STATUS ================= [ 445.876973][T20537] vivid-007: Enable Output Cropping: true grabbed [ 445.888454][T20537] vivid-007: Enable Output Composing: true grabbed [ 445.899451][T20537] vivid-007: Enable Output Scaler: true grabbed [ 445.911133][T20537] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 445.927216][T20537] vivid-007: Transmit Mode: HDMI grabbed [ 445.933985][T20537] vivid-007: Hotplug Present: 0x00000000 [ 445.951231][T20537] vivid-007: RxSense Present: 0x00000000 [ 445.968782][T20537] vivid-007: EDID Present: 0x00000000 [ 445.984765][T20537] vivid-007: ================== END STATUS ================== [ 446.129679][T20547] Invalid source name [ 446.320361][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5899'. [ 446.344096][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5899'. [ 446.561784][T20560] overlayfs: missing 'lowerdir' [ 447.512360][T20609] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5922'. [ 447.525411][T20609] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5922'. [ 447.569822][T20613] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5923'. [ 447.891273][ T52] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 449.932744][T20661] bridge0: left promiscuous mode [ 450.003806][T20661] net_ratelimit: 35 callbacks suppressed [ 450.003817][T20661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.079193][ T5871] lo speed is unknown, defaulting to 1000 [ 450.085217][ T5871] syz0: Port: 1 Link ACTIVE [ 450.108292][ T5871] lo speed is unknown, defaulting to 1000 [ 451.734825][T20723] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5969'. [ 451.746013][T20723] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5969'. [ 451.808381][T20728] all: renamed from bridge_slave_0 (while UP) [ 452.899457][T20769] binder: 20768:20769 ioctl c0306201 0 returned -14 [ 453.096458][T20781] netlink: 'syz.7.5996': attribute type 10 has an invalid length. [ 453.132843][T20781] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 454.835817][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 454.847654][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 454.858144][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 454.867004][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 454.875158][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 454.943861][T20827] lo speed is unknown, defaulting to 1000 [ 455.043246][T20834] netlink: 'syz.3.6015': attribute type 1 has an invalid length. [ 455.089836][T20834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.136902][T20837] bond0: (slave gretap1): making interface the new active one [ 455.159102][T20837] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 455.323694][T20827] lo speed is unknown, defaulting to 1000 [ 455.421640][T20847] overlayfs: failed to clone upperpath [ 455.626975][T20827] chnl_net:caif_netlink_parms(): no params data found [ 455.815456][T20827] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.843330][T20827] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.850565][T20827] bridge_slave_0: entered allmulticast mode [ 455.865681][T20827] bridge_slave_0: entered promiscuous mode [ 455.878559][T20827] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.910740][T20827] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.944317][T20827] bridge_slave_1: entered allmulticast mode [ 455.974868][T20827] bridge_slave_1: entered promiscuous mode [ 456.033562][T20877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20877 comm=syz.7.6028 [ 456.047309][T20827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.072245][T20877] netlink: 'syz.7.6028': attribute type 1 has an invalid length. [ 456.083541][T20827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.209703][T20881] bond1: (slave bridge1): making interface the new active one [ 456.217989][T20881] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 456.240255][T20827] team0: Port device team_slave_0 added [ 456.249292][T20827] team0: Port device team_slave_1 added [ 456.281456][T20827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.288471][T20827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.339153][T20827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.365278][T20827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.404725][T20827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.492409][T20827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.848813][T20827] hsr_slave_0: entered promiscuous mode [ 456.877379][T20827] hsr_slave_1: entered promiscuous mode [ 456.899538][T20827] debugfs: 'hsr0' already exists in 'hsr' [ 456.906360][T20827] Cannot create hsr debugfs directory [ 457.126720][ T5810] Bluetooth: hci3: command tx timeout [ 457.174437][T20827] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 457.215438][T20827] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 457.242976][T20827] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 457.284565][T20827] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 457.323337][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6043'. [ 457.335727][T20915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6043'. [ 457.518979][T20827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.579309][T20827] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.605663][T17458] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.612828][T17458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.656986][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.664171][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.692696][ T5879] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 457.874281][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 457.884560][ T5879] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.917251][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 457.923901][ T5879] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 457.949264][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.972374][ T5879] usb 5-1: config 0 descriptor?? [ 458.035782][T20827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.451859][ T5879] nzxt-smart2 0003:1E71:2009.003B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 458.500070][T20827] veth0_vlan: entered promiscuous mode [ 458.529033][T20827] veth1_vlan: entered promiscuous mode [ 458.597413][T20827] veth0_macvtap: entered promiscuous mode [ 458.608202][T20978] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6061'. [ 458.631596][T20827] veth1_macvtap: entered promiscuous mode [ 458.667543][T20827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.691145][T20827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.745472][ T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.758639][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.793069][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.804334][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.911806][ T5944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.926826][ T5944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.969561][T17445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.986205][T17445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.017912][ T30] audit: type=1400 audit(1770387202.570:1042): avc: denied { mounton } for pid=20827 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 459.046621][ T5864] usb 5-1: USB disconnect, device number 50 [ 459.350416][ T5810] Bluetooth: hci3: command tx timeout [ 459.375595][T21002] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6071'. [ 459.558015][T21019] netlink: 'syz.3.6078': attribute type 1 has an invalid length. [ 459.602607][T21019] 8021q: adding VLAN 0 to HW filter on device bond2 [ 459.669572][T21023] netlink: 'syz.4.6079': attribute type 10 has an invalid length. [ 459.734604][ T793] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 459.742816][T21023] team0: Failed to send options change via netlink (err -105) [ 459.782655][T21029] netlink: 'syz.4.6079': attribute type 10 has an invalid length. [ 459.797843][T21023] team0: Port device dummy0 added [ 459.832297][T21029] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 459.861598][T21029] team0: Failed to send options change via netlink (err -105) [ 459.885384][T21029] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 459.895106][ T793] usb 10-1: Using ep0 maxpacket: 32 [ 459.905030][T21029] team0: Port device dummy0 removed [ 459.915520][T21029] dummy0: entered promiscuous mode [ 459.916395][ T793] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 459.923641][T21029] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 459.939145][ T793] usb 10-1: config 0 has no interface number 0 [ 459.965060][T21036] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6081'. [ 459.988106][ T793] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 460.011863][ T793] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 460.043175][ T793] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.053949][ T793] usb 10-1: Product: syz [ 460.070591][ T793] usb 10-1: Manufacturer: syz [ 460.075938][ T793] usb 10-1: SerialNumber: syz [ 460.097373][ T793] usb 10-1: config 0 descriptor?? [ 460.103342][T21016] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 460.193355][T21045] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.6084'. [ 460.301840][T21047] overlayfs: failed to clone lowerpath [ 460.330134][T21016] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 460.378005][ T30] audit: type=1400 audit(1770387203.851:1043): avc: denied { accept } for pid=21050 comm="syz.6.6089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 460.818674][T21065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6096'. [ 460.833427][T21065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6096'. [ 461.567448][T21087] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6105'. [ 461.574019][ T5810] Bluetooth: hci3: command tx timeout [ 461.643193][ T793] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 461.665169][ T793] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 461.701586][ T793] asix 10-1:0.188: probe with driver asix failed with error -71 [ 461.721886][ T793] usb 10-1: USB disconnect, device number 2 [ 461.798680][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 461.990046][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 461.996500][ T24] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 462.005661][ T24] usb 5-1: config 2 has no interface number 0 [ 462.015459][ T24] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 462.025679][ T24] usb 5-1: config 2 interface 88 has no altsetting 0 [ 462.034192][ T24] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 462.043650][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.052283][ T24] usb 5-1: Product: syz [ 462.057660][ T24] usb 5-1: Manufacturer: syz [ 462.062737][ T24] usb 5-1: SerialNumber: syz [ 462.070309][T21083] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 462.260546][ T30] audit: type=1400 audit(1770387205.610:1044): avc: denied { execmod } for pid=21111 comm="syz.9.6116" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=80694 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 462.310454][T21083] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 462.404624][ T30] audit: type=1400 audit(1770387205.741:1045): avc: denied { write } for pid=21113 comm="syz.9.6117" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 462.650689][T21126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6122'. [ 463.002389][T21144] overlayfs: failed to clone upperpath [ 463.640783][ T24] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 463.683275][ T24] asix 5-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 463.715932][ T24] asix 5-1:2.88: probe with driver asix failed with error -71 [ 463.773275][ T24] usb 5-1: USB disconnect, device number 51 [ 463.898115][ T5810] Bluetooth: hci3: command tx timeout [ 464.252036][T21179] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 465.722555][ T30] audit: type=1400 audit(1770387208.856:1046): avc: denied { listen } for pid=21220 comm="syz.9.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 465.762919][ T30] audit: type=1400 audit(1770387208.874:1047): avc: denied { accept } for pid=21220 comm="syz.9.6160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 465.825439][T21224] lo speed is unknown, defaulting to 1000 [ 465.948871][ T5864] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 465.992781][T21224] lo speed is unknown, defaulting to 1000 [ 466.035395][ T30] audit: type=1400 audit(1770387209.146:1048): avc: denied { create } for pid=21223 comm="syz.7.6161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 466.057709][ T30] audit: type=1400 audit(1770387209.164:1049): avc: denied { write } for pid=21223 comm="syz.7.6161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 466.138940][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 466.146631][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 466.166657][ T5864] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 466.176797][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.200076][ T5864] usb 5-1: config 0 descriptor?? [ 466.388229][ T1162] block nbd1: Possible stuck request ffff8880267c8000: control (read@0,1024B). Runtime 330 seconds [ 466.399098][ T1162] block nbd1: Possible stuck request ffff8880267c8200: control (read@1024,1024B). Runtime 330 seconds [ 466.410690][ T1162] block nbd1: Possible stuck request ffff8880267c8400: control (read@2048,1024B). Runtime 330 seconds [ 466.423659][ T1162] block nbd1: Possible stuck request ffff8880267c8600: control (read@3072,1024B). Runtime 330 seconds [ 466.445709][ T5864] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 466.607969][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6167'. [ 466.626795][T21243] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6167'. [ 466.637136][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6167'. [ 466.647183][T21243] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6167'. [ 466.657890][ T24] IPVS: starting estimator thread 0... [ 466.758155][T21246] IPVS: using max 42 ests per chain, 100800 per kthread [ 466.899868][ T5913] usb 5-1: USB disconnect, device number 52 [ 468.641038][T21304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6195'. [ 469.286135][T21323] lo speed is unknown, defaulting to 1000 [ 469.692745][T21323] lo speed is unknown, defaulting to 1000 [ 470.088672][ T30] audit: type=1400 audit(1770387212.934:1050): avc: denied { link } for pid=21342 comm="syz.9.6207" name="file1" dev="overlay" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 470.116373][ T30] audit: type=1400 audit(1770387212.962:1051): avc: denied { setattr } for pid=21342 comm="syz.9.6207" name="#53" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 470.139741][ T30] audit: type=1400 audit(1770387212.962:1052): avc: denied { rename } for pid=21342 comm="syz.9.6207" name="#53" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 470.195592][ T30] audit: type=1326 audit(1770387213.009:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.7.6200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe59e99aeb9 code=0x0 [ 471.300985][T21361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6215'. [ 471.553629][T21366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6219'. [ 471.829953][T21375] netlink: 'syz.6.6222': attribute type 1 has an invalid length. [ 471.900193][T21375] 8021q: adding VLAN 0 to HW filter on device bond4 [ 471.941556][T21379] bond4: (slave geneve3): making interface the new active one [ 471.961655][T21379] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 472.173723][T21375] bond4: entered promiscuous mode [ 472.188188][T21375] geneve3: entered promiscuous mode [ 472.233935][T21385] sd 0:0:1:0: PR command failed: 1026 [ 472.237410][ T30] audit: type=1400 audit(1770387214.945:1054): avc: denied { read } for pid=21384 comm="syz.9.6224" name="file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 472.244441][T21385] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 472.275439][T21385] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 472.313284][ T30] audit: type=1400 audit(1770387214.945:1055): avc: denied { open } for pid=21384 comm="syz.9.6224" path="/36/file0/file0" dev="fuse" ino=288230376151711744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 472.369164][ T30] audit: type=1400 audit(1770387214.945:1056): avc: denied { ioctl } for pid=21384 comm="syz.9.6224" path="/36/file0/file0" dev="fuse" ino=288230376151711744 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 472.378419][T21389] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6225'. [ 472.454054][T21392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.563107][T21392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.576894][T21398] overlayfs: failed to clone upperpath [ 472.600697][T21396] erspan0: entered promiscuous mode [ 472.615376][T21396] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6228'. [ 472.744815][ T5864] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 472.906566][ T5864] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.917153][ T5864] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 472.926392][ T5864] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.939794][ T5864] usb 10-1: config 0 descriptor?? [ 472.954071][ T5864] pwc: Askey VC010 type 2 USB webcam detected. [ 473.210332][ T30] audit: type=1326 audit(1770387215.852:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21415 comm="syz.3.6234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fced6d9aeb9 code=0x0 [ 473.377596][ T5864] pwc: recv_control_msg error -32 req 02 val 2b00 [ 473.384823][ T5864] pwc: recv_control_msg error -32 req 02 val 2700 [ 473.392289][ T5864] pwc: recv_control_msg error -32 req 02 val 2c00 [ 473.400517][ T5864] pwc: recv_control_msg error -32 req 04 val 1000 [ 473.412509][ T5864] pwc: recv_control_msg error -32 req 04 val 1300 [ 473.647598][ T5864] pwc: recv_control_msg error -71 req 02 val 2000 [ 473.668921][ T5864] pwc: recv_control_msg error -71 req 02 val 2100 [ 473.684609][ T5864] pwc: recv_control_msg error -71 req 04 val 1500 [ 473.704503][ T5864] pwc: recv_control_msg error -71 req 02 val 2500 [ 473.739295][ T5864] pwc: recv_control_msg error -71 req 02 val 2400 [ 473.765667][ T5864] pwc: recv_control_msg error -71 req 02 val 2600 [ 473.783291][ T5864] pwc: recv_control_msg error -71 req 02 val 2900 [ 473.797560][ T5864] pwc: recv_control_msg error -71 req 02 val 2800 [ 473.813250][ T5864] pwc: recv_control_msg error -71 req 04 val 1100 [ 473.828420][ T5864] pwc: recv_control_msg error -71 req 04 val 1200 [ 473.853809][ T5864] pwc: Registered as video103. [ 473.871881][ T5864] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input80 [ 474.020158][ T5864] usb 10-1: USB disconnect, device number 3 [ 474.202039][T21427] overlayfs: failed to clone upperpath [ 474.799997][T21451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6249'. [ 476.232051][T21475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6255'. [ 476.257441][T21475] netlink: 'syz.3.6255': attribute type 7 has an invalid length. [ 476.279822][T21475] netlink: 'syz.3.6255': attribute type 8 has an invalid length. [ 476.294593][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6255'. [ 476.643612][T21491] tipc: Enabling of bearer rejected, failed to enable media [ 476.702789][T21489] unsupported nlmsg_type 40 [ 476.924084][T21497] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 477.169269][T21513] xt_hashlimit: max too large, truncated to 1048576 [ 477.275640][T21517] fuse: Bad value for 'fd' [ 478.110047][T21535] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6278'. [ 478.143905][T21535] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6278'. [ 478.188410][T21534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6276'. [ 478.335245][T21544] veth0: entered promiscuous mode [ 478.342336][T21544] batadv_slave_1: entered promiscuous mode [ 478.349288][T21544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6280'. [ 478.394652][T21544] veth0 (unregistering): left promiscuous mode [ 478.603810][T21540] batadv_slave_1: left promiscuous mode [ 478.780911][T21550] lo speed is unknown, defaulting to 1000 [ 478.836756][T21557] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6286'. [ 478.846565][T21557] netlink: 'syz.9.6286': attribute type 7 has an invalid length. [ 478.854648][T21557] netlink: 'syz.9.6286': attribute type 8 has an invalid length. [ 478.862693][T21557] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6286'. [ 479.258996][T21550] lo speed is unknown, defaulting to 1000 [ 479.617886][T21571] fuse: Bad value for 'fd' [ 479.623607][T21568] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 479.927400][T21591] overlayfs: failed to clone upperpath [ 480.767449][T21606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6305'. [ 481.390949][T21631] overlayfs: failed to clone upperpath [ 481.457157][T21633] io-wq is not configured for unbound workers [ 481.610316][ T30] audit: type=1400 audit(1770387223.710:1058): avc: denied { listen } for pid=21638 comm="syz.4.6317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 481.885671][T21653] fuse: Bad value for 'fd' [ 482.103520][T21664] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6328'. [ 482.192469][T21664] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6328'. [ 482.765146][T21690] overlayfs: failed to clone upperpath [ 482.819688][T21693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6340'. [ 483.518362][T21711] fuse: Bad value for 'fd' [ 483.690564][ T30] audit: type=1400 audit(1770387225.655:1059): avc: denied { read } for pid=21712 comm="syz.9.6349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 483.713937][T21714] __nla_validate_parse: 1 callbacks suppressed [ 483.713958][T21714] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6349'. [ 483.998132][ T30] audit: type=1400 audit(1770387225.945:1060): avc: denied { unmount } for pid=21720 comm="syz.9.6352" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 486.067342][T21763] tipc: Started in network mode [ 486.082267][T21763] tipc: Node identity fffffffa, cluster identity 4711 [ 486.103979][T21763] tipc: Node number set to 4294967290 [ 486.306598][T21770] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6366'. [ 486.481361][T21777] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.6369'. [ 487.854971][T21823] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6389'. [ 488.045434][ T30] audit: type=1400 audit(1770387229.724:1061): avc: denied { cmd } for pid=21825 comm="syz.7.6390" path="socket:[84522]" dev="sockfs" ino=84522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 489.624467][T21866] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 490.731977][T21894] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6416'. [ 490.826767][T21894] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6416'. [ 490.972285][T21894] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6416'. [ 491.492195][T21911] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6422'. [ 491.895949][T21920] netlink: 'syz.6.6425': attribute type 1 has an invalid length. [ 491.916537][T21920] netlink: 'syz.6.6425': attribute type 4 has an invalid length. [ 491.939624][T21920] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.6425'. [ 491.979891][T21920] netlink: 'syz.6.6425': attribute type 1 has an invalid length. [ 492.002104][T21920] netlink: 'syz.6.6425': attribute type 4 has an invalid length. [ 492.021249][T21920] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.6425'. [ 493.414958][T21947] netlink: 'syz.9.6435': attribute type 12 has an invalid length. [ 493.422986][T21947] netlink: 'syz.9.6435': attribute type 29 has an invalid length. [ 493.430879][T21947] netlink: 148 bytes leftover after parsing attributes in process `syz.9.6435'. [ 493.443304][T21947] netlink: 'syz.9.6435': attribute type 2 has an invalid length. [ 493.451100][T21947] netlink: 35 bytes leftover after parsing attributes in process `syz.9.6435'. [ 493.704707][T21953] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 495.384346][T22034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22034 comm=syz.9.6466 [ 495.533162][ T30] audit: type=1400 audit(1770387236.730:1062): avc: denied { append } for pid=22042 comm="syz.4.6470" name="file0" dev="tmpfs" ino=6659 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 495.587232][T22043] input: syz0 as /devices/virtual/input/input81 [ 495.668769][ T30] audit: type=1400 audit(1770387236.861:1063): avc: denied { connect } for pid=22047 comm="syz.6.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 495.689772][ T30] audit: type=1400 audit(1770387236.861:1064): avc: denied { read } for pid=22047 comm="syz.6.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 495.788806][T22054] lo speed is unknown, defaulting to 1000 [ 495.878065][T22054] lo speed is unknown, defaulting to 1000 [ 496.381494][T22075] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 496.434700][T22082] overlayfs: failed to clone lowerpath [ 496.480952][T22082] overlayfs: failed to clone lowerpath [ 496.531886][T22084] lo speed is unknown, defaulting to 1000 [ 496.596500][T22089] netlink: 'syz.3.6485': attribute type 1 has an invalid length. [ 496.626367][T22089] bond3: entered promiscuous mode [ 496.639409][T22091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6487'. [ 496.659992][T22089] 8021q: adding VLAN 0 to HW filter on device bond3 [ 496.770544][T22089] bond3: (slave bridge2): making interface the new active one [ 496.788182][T22089] bridge2: entered promiscuous mode [ 496.795342][T22089] bridge2: left promiscuous mode [ 496.857839][T22084] lo speed is unknown, defaulting to 1000 [ 496.878063][T22085] dvmrp1: entered allmulticast mode [ 496.924318][ T30] audit: type=1400 audit(1770387238.031:1065): avc: denied { execute } for pid=22095 comm="syz.4.6488" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=85600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 497.539550][T22118] overlayfs: failed to clone upperpath [ 498.432018][T22136] sd 0:0:1:0: PR command failed: 1026 [ 498.441399][T22136] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 498.458992][T22136] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 498.515948][T22145] fuse: Bad value for 'fd' [ 498.520767][ T1162] block nbd1: Possible stuck request ffff8880267c8000: control (read@0,1024B). Runtime 360 seconds [ 498.531564][ T1162] block nbd1: Possible stuck request ffff8880267c8200: control (read@1024,1024B). Runtime 360 seconds [ 498.543048][ T1162] block nbd1: Possible stuck request ffff8880267c8400: control (read@2048,1024B). Runtime 360 seconds [ 498.555144][ T1162] block nbd1: Possible stuck request ffff8880267c8600: control (read@3072,1024B). Runtime 360 seconds [ 498.708603][T22149] lo speed is unknown, defaulting to 1000 [ 499.053671][T22149] lo speed is unknown, defaulting to 1000 [ 499.248685][ T30] audit: type=1800 audit(1770387240.210:1066): pid=22165 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.6516" name="cpu.stat" dev="tmpfs" ino=6621 res=0 errno=0 [ 499.509554][T22173] lo speed is unknown, defaulting to 1000 [ 499.662666][T22180] gtp0: entered promiscuous mode [ 499.706828][T22173] lo speed is unknown, defaulting to 1000 [ 499.977404][T22188] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6523'. [ 500.214668][T22197] overlayfs: failed to clone upperpath [ 500.284647][T22203] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6529'. [ 500.333546][T22203] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6529'. [ 500.699556][T22217] binder: 22216:22217 ioctl c0306201 2000000001c0 returned -14 [ 502.188376][T22268] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 502.340611][T22274] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6558'. [ 502.478608][T22280] overlayfs: failed to clone upperpath [ 502.922845][T22301] netlink: 'syz.9.6568': attribute type 13 has an invalid length. [ 502.938234][T22301] gretap0: refused to change device tx_queue_len [ 502.961076][T22301] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 504.112893][T22325] overlayfs: failed to clone upperpath [ 504.281397][T22334] xt_hashlimit: size too large, truncated to 1048576 [ 504.545508][T22342] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6582'. [ 504.594443][T22342] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6582'. [ 504.878814][T22350] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.6584'. [ 504.895179][T22350] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6584'. [ 504.959755][T22352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6586'. [ 505.174842][T22363] netlink: 'syz.4.6590': attribute type 13 has an invalid length. [ 505.226478][T22363] gretap0: refused to change device tx_queue_len [ 505.235900][T22363] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 505.366303][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.818862][T22424] netlink: 'syz.6.6614': attribute type 1 has an invalid length. [ 506.851920][T22426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6616'. [ 506.951114][T22424] 8021q: adding VLAN 0 to HW filter on device bond5 [ 507.106961][T22430] bond5: (slave veth3): Enslaving as an active interface with a down link [ 507.134622][T22431] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 507.176998][T22434] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 507.198023][T22434] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 507.248420][ T30] audit: type=1800 audit(1770387247.684:1067): pid=22417 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.6611" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 508.370458][ T30] audit: type=1400 audit(1770387248.741:1068): avc: denied { bind } for pid=22486 comm="syz.9.6639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 508.475779][T22491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6641'. [ 509.407139][T22536] overlayfs: failed to clone upperpath [ 509.924958][T22549] lo speed is unknown, defaulting to 1000 [ 510.590739][T22549] lo speed is unknown, defaulting to 1000 [ 510.835833][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.962668][T22562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6671'. [ 511.082098][ T30] audit: type=1400 audit(1770387251.285:1069): avc: denied { map } for pid=22564 comm="syz.6.6673" path="socket:[88789]" dev="sockfs" ino=88789 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 511.739805][T22596] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6683'. [ 511.933239][T22605] tipc: Can't bind to reserved service type 0 [ 513.115497][T22643] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6696'. [ 513.162730][T22644] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 513.200622][T22644] block device autoloading is deprecated and will be removed. [ 513.423831][T22652] overlayfs: failed to clone upperpath [ 513.875731][T22670] VFS: Mount too revealing [ 514.232403][T22681] bond1: entered promiscuous mode [ 514.244379][T22681] bond1: entered allmulticast mode [ 514.264094][T22681] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.624242][T22705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=22705 comm=syz.9.6717 [ 514.844954][ T24] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 514.942518][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6728'. [ 515.019443][T22725] bond4: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 515.032029][ T24] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 515.064383][T22725] bond4 (unregistering): Released all slaves [ 515.082683][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 515.146725][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 515.178406][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 515.199111][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 515.229310][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 515.243674][ T24] usb 5-1: Product: syz [ 515.247886][ T24] usb 5-1: Manufacturer: syz [ 515.272214][ T24] usb 5-1: SerialNumber: syz [ 515.279158][ T24] usb 5-1: config 0 descriptor?? [ 515.301255][T22699] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 515.320807][ T24] usb 5-1: selecting invalid altsetting 0 [ 515.558456][T22743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.820648][ T24] usb 5-1: USB disconnect, device number 53 [ 515.820654][ C0] usb 5-1: Unable to submit urb #2: -19 at snd_usb_queue_pending_output_urbs [ 515.821543][T22699] usb 5-1: cannot submit urb 0, error -19: no device [ 516.404641][T22757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6739'. [ 516.900126][T22768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6743'. [ 517.369045][T22790] 9p: Bad value for 'rfdno' [ 517.999368][T22806] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6759'. [ 518.009596][T22807] netlink: 'syz.4.6758': attribute type 4 has an invalid length. [ 518.054582][T22807] netlink: 'syz.4.6758': attribute type 4 has an invalid length. [ 518.209733][T22814] veth8: entered promiscuous mode [ 518.233846][T22814] veth8: entered allmulticast mode [ 518.476207][T22826] overlayfs: failed to clone upperpath [ 518.614442][ T30] audit: type=1326 audit(1770387258.319:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22829 comm="syz.9.6769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf8d59aeb9 code=0x0 [ 518.650085][ T5810] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 518.746851][T22837] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.6770'. [ 518.767875][T22837] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6770'. [ 519.311970][T22855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.363566][T22851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.188099][T22865] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.196177][T22865] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.306813][T22872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6784'. [ 520.351776][T22865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.367228][T22865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.809808][ T50] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.818937][ T50] netdevsim netdevsim6 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 520.829704][ T50] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.840148][ T50] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.886050][ T50] netdevsim netdevsim6 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 520.929557][ T50] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.953838][ T50] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.983210][ T50] netdevsim netdevsim6 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 520.995859][ T50] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.023253][ T50] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.032554][ T50] netdevsim netdevsim6 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 521.042275][ T50] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.846464][T22925] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6804'. [ 521.860142][T22925] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6804'. [ 521.900896][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 522.084475][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 522.112289][ T10] usb 5-1: config 0 has no interface number 0 [ 522.120962][ T10] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 522.131583][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.152479][ T10] usb 5-1: Product: syz [ 522.158313][ T10] usb 5-1: Manufacturer: syz [ 522.170379][ T10] usb 5-1: SerialNumber: syz [ 522.190413][ T10] usb 5-1: config 0 descriptor?? [ 522.412608][ T10] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 522.437812][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 522.463769][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 522.500315][ T10] usb 5-1: media controller created [ 522.517112][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 522.683227][T22945] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6813'. [ 522.980579][ T5810] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 522.989958][ T5810] Bluetooth: hci1: Injecting HCI hardware error event [ 522.999777][ T5810] Bluetooth: hci1: hardware error 0x00 [ 523.664583][ T10] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 524.122008][ T10] usb 5-1: USB disconnect, device number 54 [ 524.154185][T22975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6825'. [ 524.177161][T22975] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6825'. [ 524.188914][T22975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6825'. [ 524.198429][T22975] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6825'. [ 525.206935][ T5810] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 525.403865][T23017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6840'. [ 525.416696][T23017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6840'. [ 525.504961][ T30] audit: type=1804 audit(1770387264.764:1071): pid=23022 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.6842" name="/newroot/1349/file0" dev="tmpfs" ino=7018 res=1 errno=0 [ 526.185917][ T30] audit: type=1326 audit(1770387265.400:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23026 comm="syz.4.6844" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fc9d4794cd7 code=0x0 [ 526.319776][T23039] netlink: 'syz.6.6848': attribute type 2 has an invalid length. [ 526.362991][T23039] kAFS: unable to lookup cell '(,c¾ûL' [ 526.742241][T23052] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 527.981440][T23076] __nla_validate_parse: 1 callbacks suppressed [ 527.981453][T23076] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6860'. [ 528.253134][T23078] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6861'. [ 528.642633][T23089] netlink: 'syz.9.6865': attribute type 1 has an invalid length. [ 528.698198][T23089] 8021q: adding VLAN 0 to HW filter on device bond2 [ 528.884225][T23093] bond2: (slave veth13): Enslaving as an active interface with a down link [ 528.907247][T23089] bond2: (slave dummy0): making interface the new active one [ 528.918302][T23089] dummy0: entered promiscuous mode [ 528.927783][T23089] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 529.301536][T23097] bond2 (unregistering): (slave veth13): Releasing active interface [ 529.315190][T23097] bond2 (unregistering): (slave dummy0): Releasing active interface [ 529.325571][T23097] bond2 (unregistering): Released all slaves [ 529.485026][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 529.693709][ T5871] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 529.886146][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 529.893698][ T5871] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 529.938643][ T5871] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 529.982355][ T5871] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 529.991359][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 530.034953][ T5871] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 530.077485][ T5871] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 530.112963][ T5871] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 530.142655][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.249602][ T5871] usb 5-1: config 0 descriptor?? [ 530.678705][ T1162] block nbd1: Possible stuck request ffff8880267c8000: control (read@0,1024B). Runtime 390 seconds [ 530.690818][ T1162] block nbd1: Possible stuck request ffff8880267c8200: control (read@1024,1024B). Runtime 390 seconds [ 530.706463][ T1162] block nbd1: Possible stuck request ffff8880267c8400: control (read@2048,1024B). Runtime 390 seconds [ 530.720017][ T1162] block nbd1: Possible stuck request ffff8880267c8600: control (read@3072,1024B). Runtime 390 seconds [ 530.741864][ T5871] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 55 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 530.795117][ T5871] usb 5-1: USB disconnect, device number 55 [ 531.117315][ T5871] usblp0: removed [ 531.517483][T23169] overlayfs: failed to clone upperpath [ 532.455713][T23192] overlayfs: failed to clone upperpath [ 533.383830][T23213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6910'. [ 533.417588][T23213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6910'. [ 534.154754][ T30] audit: type=1400 audit(1770387272.865:1073): avc: denied { append } for pid=23232 comm="syz.4.6919" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 534.373743][T23235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6920'. [ 534.395437][T23235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6920'. [ 534.688184][ T30] audit: type=1804 audit(1770387273.351:1074): pid=23247 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.6926" name="file0" dev="tmpfs" ino=4285 res=1 errno=0 [ 534.997209][T23265] lo speed is unknown, defaulting to 1000 [ 535.090368][T23271] bond6: entered promiscuous mode [ 535.112549][T23271] macvlan2: entered promiscuous mode [ 535.118124][T23271] macvlan2: entered allmulticast mode [ 535.124907][T23271] bond6: (slave macvlan2): Opening slave failed [ 535.899530][T23265] lo speed is unknown, defaulting to 1000 [ 536.012552][ T30] audit: type=1326 audit(1770387274.605:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23264 comm="syz.9.6935" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf8d59aeb9 code=0x0 [ 538.271798][T23358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6959'. [ 540.182771][T23391] overlayfs: failed to clone upperpath [ 540.214025][T23387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6971'. [ 540.640426][T23402] overlayfs: failed to clone upperpath [ 540.652177][T23397] netlink: 'syz.9.6975': attribute type 6 has an invalid length. [ 540.700088][T23397] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6975'. [ 540.886387][T23408] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 540.892928][T23408] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 540.950209][T23408] vhci_hcd vhci_hcd.0: Device attached [ 541.068709][T23415] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 541.100673][T23411] vhci_hcd: connection closed [ 541.101252][T17451] vhci_hcd vhci_hcd.7: stop threads [ 541.122742][T17451] vhci_hcd vhci_hcd.7: release socket [ 541.142769][T17451] vhci_hcd vhci_hcd.7: disconnect device [ 541.914284][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 541.920858][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 541.936232][T23447] ceph: No mds server is up or the cluster is laggy [ 542.128510][T23466] overlayfs: failed to clone upperpath [ 542.584592][T23490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7010'. [ 542.607260][T23490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7010'. [ 543.504608][T23514] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7017'. [ 544.278734][T23524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7023'. [ 544.613558][T23536] lo speed is unknown, defaulting to 1000 [ 544.614615][T23540] xt_connbytes: Forcing CT accounting to be enabled [ 545.155199][T23536] lo speed is unknown, defaulting to 1000 [ 545.253428][T23552] xt_hashlimit: size too large, truncated to 1048576 [ 546.181029][T23590] syz_tun: entered allmulticast mode [ 546.204467][T23589] syz_tun: left allmulticast mode [ 547.688318][T23642] tipc: Failed to remove unknown binding: 66,1,1/0:503985546/503985548 [ 548.353639][T23652] netlink: 'syz.9.7061': attribute type 12 has an invalid length. [ 548.912781][T23671] netlink: 'syz.3.7069': attribute type 2 has an invalid length. [ 548.929904][T23671] tipc: Started in network mode [ 548.949294][T23671] tipc: Node identity 8, cluster identity 4 [ 548.972321][T23671] tipc: Node number set to 8 [ 551.390432][ T30] audit: type=1400 audit(1770387288.973:1076): avc: denied { write } for pid=23719 comm="syz.7.7090" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 552.754121][T23750] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.7098'. [ 553.940213][ T31] INFO: task syz.1.5086:18459 blocked for more than 143 seconds. [ 553.948503][ T31] Tainted: G L syzkaller #0 [ 553.969769][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 553.989358][ T31] task:syz.1.5086 state:D stack:28744 pid:18459 tgid:18458 ppid:5815 task_flags:0x400040 flags:0x00080002 [ 554.041394][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 554.069506][ T31] Call Trace: [ 554.072963][ T31] [ 554.076049][ T31] ? __schedule+0xf65/0x5e10 [ 554.081093][ T31] __schedule+0xfe4/0x5e10 [ 554.085632][ T31] ? __lock_acquire+0x4a5/0x2630 [ 554.091130][ T31] ? __pfx___schedule+0x10/0x10 [ 554.096101][ T31] ? find_held_lock+0x2b/0x80 [ 554.103465][ T31] ? schedule+0x2bf/0x390 [ 554.108435][ T31] schedule+0xdd/0x390 [ 554.113344][ T31] schedule_preempt_disabled+0x13/0x30 [ 554.118964][ T31] __mutex_lock+0xc9a/0x1b90 [ 554.123928][ T31] ? bdev_open+0x41a/0xe40 [ 554.128460][ T31] ? find_held_lock+0x2b/0x80 [ 554.133990][ T31] ? find_inode_fast+0x5de/0x910 [ 554.139069][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 554.144552][ T31] ? find_inode_fast+0x1fa/0x910 [ 554.149717][ T31] ? bdev_open+0x41a/0xe40 [ 554.154549][ T31] bdev_open+0x41a/0xe40 [ 554.158952][ T31] ? iput+0x3a/0x40 [ 554.162926][ T31] blkdev_open+0x34e/0x4f0 [ 554.168488][ T31] do_dentry_open+0x73e/0x1570 [ 554.175041][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 554.180829][ T31] vfs_open+0x82/0x3f0 [ 554.185049][ T31] path_openat+0x21dc/0x3120 [ 554.190146][ T31] ? __pfx_path_openat+0x10/0x10 [ 554.195250][ T31] do_filp_open+0x1f7/0x420 [ 554.200414][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 554.205739][ T31] ? _raw_spin_unlock+0x28/0x50 [ 554.211148][ T31] ? alloc_fd+0x476/0x790 [ 554.215672][ T31] do_sys_openat2+0x12e/0x220 [ 554.220574][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 554.227023][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 554.234705][ T31] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 554.241729][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 554.250899][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.259121][ T10] usb 5-1: Product: syz [ 554.263459][ T10] usb 5-1: Manufacturer: syz [ 554.268148][ T31] __x64_sys_openat+0x12d/0x210 [ 554.275979][ T10] usb 5-1: SerialNumber: syz [ 554.280600][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 554.287891][ T10] usb 5-1: config 0 descriptor?? [ 554.293049][ T31] ? do_user_addr_fault+0x8d6/0x12f0 [ 554.300191][ T10] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 554.309168][ T31] do_syscall_64+0xc9/0xf80 [ 554.314139][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.320039][ T31] RIP: 0033:0x7ff8d695b78e [ 554.324457][ T31] RSP: 002b:00007ff8d788ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 554.333904][ T31] RAX: ffffffffffffffda RBX: 00007ff8d788b6c0 RCX: 00007ff8d695b78e [ 554.343134][ T31] RDX: 0000000000105201 RSI: 00007ff8d788ac00 RDI: ffffffffffffff9c [ 554.352308][ T31] RBP: 00007ff8d788ac00 R08: 0000000000000000 R09: 0000000000000000 [ 554.360414][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 554.369040][ T31] R13: 00007ff8d6c16038 R14: 00007ff8d6c15fa0 R15: 00007fff8120e4b8 [ 554.377048][ T31] [ 554.380665][ T31] [ 554.380665][ T31] Showing all locks held in the system: [ 554.388403][ T31] 5 locks held by kworker/0:1/10: [ 554.395794][ T31] #0: ffff888142a8d148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 554.406834][ T31] #1: ffffc900000f7c98 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 554.418236][ T31] #2: ffff888144b00198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0 [ 554.427463][ T31] #3: ffff88802cfc9198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 554.437016][ T31] #4: ffff8880582a9160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 554.446675][ T31] 1 lock held by khungtaskd/31: [ 554.451655][ T31] #0: ffffffff8e5e32e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 554.461722][ T31] 2 locks held by getty/5565: [ 554.466753][ T31] #0: ffff88814d5d60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 554.476727][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 554.487037][ T31] 4 locks held by udevd/5795: [ 554.492470][ T31] #0: ffff88804a608d58 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 554.502814][ T31] #1: ffff888033139c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 554.517467][ T31] #2: ffff88806fc250f8 (kn->active#19){.+.+}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 554.555529][ T31] #3: ffff88802cfc9198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 554.565406][ T31] 1 lock held by udevd/5972: [ 554.570055][ T31] #0: ffff888025ef5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 554.579848][ T31] 3 locks held by kworker/u8:21/17458: [ 554.585504][ T31] 1 lock held by syz.1.5086/18459: [ 554.590720][ T31] #0: ffff888025ef5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 554.600460][ T31] [ 554.603079][ T31] ============================================= [ 554.603079][ T31] [ 554.611575][ T31] NMI backtrace for cpu 0 [ 554.611596][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 554.611622][ T31] Tainted: [L]=SOFTLOCKUP [ 554.611633][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 554.611643][ T31] Call Trace: [ 554.611649][ T31] [ 554.611657][ T31] dump_stack_lvl+0x100/0x190 [ 554.611684][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 554.611711][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 554.611734][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 554.611763][ T31] sys_info+0x141/0x190 [ 554.611784][ T31] watchdog+0xcc3/0xfe0 [ 554.611817][ T31] ? __pfx_watchdog+0x10/0x10 [ 554.611843][ T31] ? __kthread_parkme+0x18c/0x230 [ 554.611870][ T31] ? __pfx_watchdog+0x10/0x10 [ 554.611896][ T31] ? __pfx_watchdog+0x10/0x10 [ 554.611920][ T31] kthread+0x3b3/0x730 [ 554.611941][ T31] ? __pfx_kthread+0x10/0x10 [ 554.611958][ T31] ? ret_from_fork+0x79/0xaf0 [ 554.611977][ T31] ? ret_from_fork+0x79/0xaf0 [ 554.611998][ T31] ? rcu_is_watching+0x12/0xc0 [ 554.612021][ T31] ? __pfx_kthread+0x10/0x10 [ 554.612040][ T31] ret_from_fork+0x754/0xaf0 [ 554.612061][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 554.612083][ T31] ? __switch_to+0x7b9/0x10c0 [ 554.612108][ T31] ? __pfx_kthread+0x10/0x10 [ 554.612128][ T31] ret_from_fork_asm+0x1a/0x30 [ 554.612156][ T31] [ 554.612180][ T31] Sending NMI from CPU 0 to CPUs 1: [ 554.763836][ C1] NMI backtrace for cpu 1 [ 554.763852][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.763872][ C1] Tainted: [L]=SOFTLOCKUP [ 554.763878][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 554.763886][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 554.763904][ C1] Code: 56 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 ae 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 554.763918][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 554.763930][ C1] RAX: 0000000000375613 RBX: ffff88801e2ba4c0 RCX: ffffffff8b76d4b5 [ 554.763939][ C1] RDX: 0000000000000000 RSI: ffffffff8dc45bb3 RDI: ffffffff8bfa3620 [ 554.763948][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a673d [ 554.763959][ C1] R10: ffff8880b85339eb R11: 0000000000000000 R12: ffffed1003c57498 [ 554.763968][ C1] R13: 0000000000000001 R14: ffffffff90b749d0 R15: 0000000000000000 [ 554.763977][ C1] FS: 0000000000000000(0000) GS:ffff8881246d9000(0000) knlGS:0000000000000000 [ 554.763991][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.764001][ C1] CR2: 00007ff5c9de12f8 CR3: 0000000069012000 CR4: 00000000003526f0 [ 554.764010][ C1] Call Trace: [ 554.764015][ C1] [ 554.764020][ C1] default_idle+0x9/0x10 [ 554.764037][ C1] default_idle_call+0x6c/0xb0 [ 554.764053][ C1] do_idle+0x35b/0x4b0 [ 554.764073][ C1] ? __pfx_do_idle+0x10/0x10 [ 554.764094][ C1] cpu_startup_entry+0x4f/0x60 [ 554.764114][ C1] start_secondary+0x21d/0x2d0 [ 554.764129][ C1] ? __pfx_start_secondary+0x10/0x10 [ 554.764145][ C1] common_startup_64+0x13e/0x148 [ 554.764169][ C1] [ 554.936261][ T10] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 554.945662][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 554.952525][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 554.963206][ T31] Tainted: [L]=SOFTLOCKUP [ 554.967526][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 554.977577][ T31] Call Trace: [ 554.980848][ T31] [ 554.983772][ T31] dump_stack_lvl+0x100/0x190 [ 554.988439][ T31] vpanic+0x20d/0x630 [ 554.992424][ T31] panic+0xd1/0xd1 [ 554.996126][ T31] ? __pfx_panic+0x10/0x10 [ 555.000538][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 555.006681][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 555.012834][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 555.018985][ T31] ? watchdog.cold+0x198/0x1ca [ 555.023729][ T31] ? watchdog+0xcd3/0xfe0 [ 555.028049][ T31] watchdog.cold+0x1a9/0x1ca [ 555.032638][ T31] ? __pfx_watchdog+0x10/0x10 [ 555.037300][ T31] ? __kthread_parkme+0x18c/0x230 [ 555.042310][ T31] ? __pfx_watchdog+0x10/0x10 [ 555.046975][ T31] ? __pfx_watchdog+0x10/0x10 [ 555.051635][ T31] kthread+0x3b3/0x730 [ 555.055684][ T31] ? __pfx_kthread+0x10/0x10 [ 555.060251][ T31] ? ret_from_fork+0x79/0xaf0 [ 555.064911][ T31] ? ret_from_fork+0x79/0xaf0 [ 555.069570][ T31] ? rcu_is_watching+0x12/0xc0 [ 555.074317][ T31] ? __pfx_kthread+0x10/0x10 [ 555.078891][ T31] ret_from_fork+0x754/0xaf0 [ 555.083464][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 555.088560][ T31] ? __switch_to+0x7b9/0x10c0 [ 555.093220][ T31] ? __pfx_kthread+0x10/0x10 [ 555.097791][ T31] ret_from_fork_asm+0x1a/0x30 [ 555.102543][ T31] [ 555.105817][ T31] Kernel Offset: disabled [ 555.110118][ T31] Rebooting in 86400 seconds..