last executing test programs: 3m13.982260187s ago: executing program 0 (id=434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000480)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x10, 0x4, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0xe}, {0x6, 0xffeb}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x81, 0x0, 0x491, 0x7fffffff, 0x0, 0x0, 0x101, 0x4}}, {0xc, 0x1b, [0x0, 0x0, 0x2, 0x5]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x18da00, 0x0) 3m13.77743759s ago: executing program 0 (id=438): unshare(0x20000400) (async) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe133, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6(0xa, 0x3, 0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x7, @loopback, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0xffffffffffffffff, 0x8001}}, 0x48) (async, rerun: 32) fchdir(r0) (async, rerun: 32) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0x3}, 0x20) (async, rerun: 32) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) (async) sendmmsg(r3, &(0x7f0000007080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[], 0xc}}], 0x40000000000002b, 0x4000000) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @mcast1, 0xffffffc0}, 0x1c) (async, rerun: 32) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x8, 0x0, 0xc, 0x8, 0x4, 0xb, 0x3, 0x13, 0x5, 0x70, 0x0, 0xd, 0xb, 0x0, 0x0, 0x0, 0xce, '\x00', 0x4, 0x4}) (async, rerun: 32) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, r8, 0x0, &(0x7f00000001c0)='./file0\x00', 0x20, 0x20000, 0x23456, {0x0, r9}}) (async) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3m13.773509552s ago: executing program 0 (id=442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x5) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001600010325bd70000019000015"], 0x14}, 0x1, 0x0, 0x0, 0x4010050}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0xc000980}, 0x40080d4) 3m13.721003328s ago: executing program 0 (id=446): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, 0x0, 0x0, 0x13108, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000008c0)=0x400002) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x26, 0xd, 0x4}]}) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x90010, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r1, &(0x7f00000045c0)={0x2020}, 0x2020) 3m13.578167284s ago: executing program 0 (id=450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001240)=""/47, 0x2f}, {&(0x7f0000000080)=""/177, 0xb1}], 0x2}, 0x10002) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x131) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "a51b69ae9597407dc5518eada89d"}}]}, 0x30}}, 0x0) fchdir(0xffffffffffffffff) r6 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) (async) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) getdents(0xffffffffffffffff, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xaa80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{0x8, 0x74, 0x1, 0xffffffff}, {0x3547, 0x8, 0x8f}, {0x0, 0x8, 0x6, 0x10001}, {0xc2b1, 0xff, 0x2d, 0x5}, {0x67b, 0x2, 0xff, 0x10001}, {0x7, 0x8, 0x7, 0x7fff}, {0x8, 0x3, 0x1, 0x2c92}, {0x4, 0xb5, 0x10, 0x3}, {0x5, 0x40, 0xf8, 0x7}]}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000780040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000780040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$UHID_INPUT(r9, &(0x7f0000001480)={0xfc, {"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", 0xffffffffffffffb2}}, 0x1039) (async) write$UHID_INPUT(r9, &(0x7f0000001480)={0xfc, {"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", 0xffffffffffffffb2}}, 0x1039) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000640)={0x1, 0x0, [{0x49, 0x0, 0x1}]}) 3m13.302670662s ago: executing program 0 (id=455): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e40)=@getstats={0x1c, 0x5e, 0x631, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004885}, 0x20044044) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x21, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e40)=@getstats={0x1c, 0x5e, 0x631, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004885}, 0x20044044) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x21, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) (async) 3m13.219059015s ago: executing program 32 (id=455): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e40)=@getstats={0x1c, 0x5e, 0x631, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004885}, 0x20044044) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x21, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e40)=@getstats={0x1c, 0x5e, 0x631, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004885}, 0x20044044) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x21, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) (async) 2m59.472640721s ago: executing program 3 (id=593): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90000000051405012cbd7000fbdbdf25080001000000000008000300000000000800012ce379552fc285"], 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x3001, 0x0, 0x3, 0x7, 0x8, 0x0, 0xfd, 0x3, 0x0, 0x8, 0x6}, {0x0, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x8080000, 0x9, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xf000, 0xdddd0000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0x2}, {0x80a0000, 0x2000, 0x8, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x2}, {0x100000, 0xeeee0000, 0x0, 0x2, 0x80, 0xc, 0x2, 0xfb, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x1, 0x0, 0xa1, 0x20, 0x0, 0xff, 0x8}, {0xfec77002, 0x6000, 0xd, 0x0, 0x0, 0x7, 0x4, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x10}, {0xdddd1000}, 0x0, 0x0, 0x41000, 0x0, 0xc, 0xf801, 0x5000, [0x80000000, 0x0, 0xbf0d, 0x20000000000001]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r6, 0x29, 0xb, 0x0, &(0x7f0000000300)) 2m59.212837376s ago: executing program 3 (id=595): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001680)=@nat={'nat\x00', 0x19, 0x2, 0x90, [0x200000001400, 0x0, 0x0, 0x20000000150e, 0x200000001644], 0x0, 0x0, 0x0}, 0x108) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x80, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r3, 0x21, &(0x7f00000001c0)={0x0, 0xa30f, 0x20, 0x2, 0x9a, 0x0, r3}, 0x1) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) renameat(r3, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00004000008000004800128001000100687372003c000280060005000180000008000100", @ANYRES32=r1, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r0], 0x68}}, 0x0) 2m59.162751216s ago: executing program 3 (id=596): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000940)='securityfs\x00', 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xfffffffffffffff8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 2m59.162137196s ago: executing program 3 (id=597): prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x84, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x18000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0xf000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="9454b83847a5c639dccc1cc3aa288229ee8a8a45ab78b6638fd2636c7547f7afcc1711878b54b4a8bc9eda3358a5cafd58dbb8a9f638354fbf2e6ab22b8558896f959a8579d9a05c6dde4a9dcc1779d407440e34d6e555f793ec7c2979d1f4b82e4122ce3f815e2e5322b7e74e3439af393c3adad4bab28934e91efd14ebc482d56ce8cedb094afc27d5c1e6cc050411de76f5731640796ba1e233fa6da1bb14cd30662898a0595bf34af8eebc3d12716e62ae66fbb6cf070bef47415d593769c361fc054ea962c9d09ed46aecba2af20e0a40204d4d795d019895bc0d52d8cc032ee13ae832fb1f989b70ab35596dfe28c239d45c99016cadd05b87af7bd13d37c5efae45046d0e5f9860e35c2f08ef9f67c80c47b870e353c089bab87b74c588183c64b20b7ccbdb068390e4c59a848d9695f46fc8bdbde97a4400f2e8b7379a62c57fd4ef8bd4f8e3a4bf141e87156efc1b86e15f34591489db7112fcae399f83f9e4ee56a923ea3123b3fbff37ccdf92284137a1500cad979bc0331524168b5f1a5da3e2d6643b6b0f28eb15869ba7f609c4fc9e4aecca1183de7b6427e7564714ffe154c2e4db0042ada0561c58a4003191033a4fdbf0d09c9c49e8", 0x1be}], 0x1, 0x0, 0x0, 0x10}, 0x40000) add_key(&(0x7f0000000ac0)='asymmetric\x00', &(0x7f0000000b00)={'syz', 0x2}, &(0x7f0000000b40)="fc479c5868cc5f3be60ca131267200c06c823825055e14240e97093029f9654a25f0f3013e2a3d99", 0xfffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100), 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000000000400200000008000300", @ANYRES32=r3, @ANYBLOB="0c009900d308000079000000080026006c0900000800a08d1d4a2a3908002700"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='btrfs\x00', 0x0, &(0x7f0000000400)) r6 = syz_clone(0x201000, &(0x7f0000000440)="74225b9924c6d84ab04a9cd05a4ad9f6044ff8fa097b7dfb9c44fb47d53a0d41176169ab6f35106f558959c5624d45c80b77a58b4070c960c4fab2fa6600911dc4542c404f9d40c5351e582a080000000000000001306bfe22ec5ae952b5bf1be9edbb515dad6ca0cb9ff18b02e8b389089d02e63362827d1d985f86614d51df5cf75994451055f9b6b302ab4cc4a4969da34a950f20288712ede91fc56a7b8b226c131681b890b66c1af222100d5c09f85a00"/190, 0xbe, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000200)="e971a10ab1f55b70c1c26653d85fd1dc92c12aee7b172764c94c22e9b725e558df66071e53844e21329f9f7bb988437964b213188b3c1e9dcaa82dde0143892f725a903dfc405edce5df955dd0a22d76a00d0b0e094e084c46272b9a1a580556329e7597068dafdc6e54edf64f506153cada626cc126d2fa79c64caefd897bd7a0f17fb57be949f418a195fc1e05005843a58a68107e375dbdba8df6ac7a8a39e01b202fc9923a0ce63a1ab2708b59e7681fcc88995a4d385ab9902c129cdf59ffb010bc24930e4cefcf4bbad9660662") r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) r8 = syz_open_procfs(r6, &(0x7f0000000340)='mountinfo\x00') sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0xf, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x48090) read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) 2m58.932721468s ago: executing program 3 (id=598): syz_emit_ethernet(0x86, &(0x7f00000004c0)=ANY=[@ANYBLOB="e7842a3e00900180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0402907800000000600008100000110000000000000000000000ffff00000000fc0200000000000000000000000000000000000000000000052f000100000000fb36eeca6fad50b375a22a584d16ca5582dc65a6a9863a6b3adb9123a7feb41273cddad025ca57cb1a9b128bc94549ad54ea0c94a7aa82f683b65c2093eff2079fae39cdb0507b78b7e24de171b4f0895886dc5570"], 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000300)="429b5b0007f6b0885f57b0b77d75963f88a8", 0x12}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x1505, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010) 2m58.532598908s ago: executing program 3 (id=602): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010101}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x40}]}}}]}, 0x40}}, 0x0) (async) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0xd6) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x3}) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) (async) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r4, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) (async) setreuid(r4, 0x0) (async) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000140)={0xa0, 0xffffffffffffffda, r3, {{0x4, 0x0, 0x5, 0x10, 0x3, 0x1, {0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0xaced, 0x6, 0x2, 0x7, 0x1a000, 0x80000004, r4, r5, 0xb7e, 0x1}}, {0x0, 0x15}}}, 0xa0) 2m58.483093153s ago: executing program 33 (id=602): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010101}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x40}]}}}]}, 0x40}}, 0x0) (async) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0xd6) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x3}) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) (async) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r4, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) (async) setreuid(r4, 0x0) (async) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000140)={0xa0, 0xffffffffffffffda, r3, {{0x4, 0x0, 0x5, 0x10, 0x3, 0x1, {0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0xaced, 0x6, 0x2, 0x7, 0x1a000, 0x80000004, r4, r5, 0xb7e, 0x1}}, {0x0, 0x15}}}, 0xa0) 2m50.242518078s ago: executing program 5 (id=717): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=@polexpire={0xcc, 0x1b, 0x111, 0x70bd2d, 0x25dfdbfc, {{{@in6=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x0, 0x4e23, 0x3ff, 0x2, 0x60, 0x120, 0x73, 0x0, 0xffffffffffffffff}, {0x80000001, 0xfff, 0x6, 0x4, 0x10000000000, 0x7fffffff, 0x8, 0x7}, {0x1, 0x4c67, 0x9, 0x449f}, 0x9, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x6}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4090}, 0x4004) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="37aeeab270131f31d49eb566383119872c", @ANYBLOB="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", @ANYRES32, @ANYRESHEX=r3, @ANYRESDEC=r1, @ANYRESDEC=r2], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x400000b0, 0x0, 0xbc7d}]}) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x6, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r8, 0x2, 0x1}, 0x50) (async) r9 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x1, {0x60, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x10000, @dev={0xfe, 0x80, '\x00', 0x43}, 0xdd7b}, 0x1c) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m50.121085747s ago: executing program 5 (id=721): prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffccb}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x28420) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f080000000d0010000400060103000000005f30002e61", @ANYRESHEX], 0x0, 0x37, 0x0, 0xa}, 0x28) 2m49.551960329s ago: executing program 5 (id=734): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r2, 0x701, 0xffffffff, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) (async) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) (async) mmap$dsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x12, r3, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (rerun: 32) 2m49.441428442s ago: executing program 5 (id=737): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace(0x10, r0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000040)={@default, @bcast}) (async) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000040)={@default, @bcast}) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000500)={0xa9, 0xc6}) socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0xf2) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) (async) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000100)) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f00000003c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000001000ffff2cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="018000002064b717a5afd351adf86fd5900200140012800c0001006d6163766c62f9000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="0500110002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x40040) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=ANY=[@ANYBLOB="d80000002000000326bd7000fbdbdf2527000000640101010000000000000000000000003ff5cbe00000010000000000000000000000004e2400004e2400050200a00000000000", @ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="080018000400000084000500ac1414aa000000000000000000000000000004d5ff00000000000000fe80000000000000000000000000000d00350000020303008b0ca24800080000000000000000aa000004d4ff00000002000000e00000010000000000000000000000000535000000030200040000000100008000000080", @ANYBLOB="e4a4014343ed36843c5a087f933c1fb9949774b89b6cf6f5b1c5b83af1485f3eb03fa0f5ec16ad2bc1be1954512a98381ca9d390476e7b0a156e039480f37c208d7dda5e795df14cc01c0e6acef5aa7a6f1a3ee749efd250f32e04ec9741d374053019e2ef3d40d8ac049b25432d0c5f9ef77c5e4d49c253e9e04d332d6b99dc1423427b6d4340c105cb1de2efd0621b24a7e6d44b3cab58040fa78cd05b708d1db164313ba848c941aa3189136c7c556a6c0fc94e5a0e9e55dd39c7b6f00bbff490c93d6099fb101af68140636d6b24c545b302aabce31b0d07462bdc3238478f66ee40ea0c04e8"], 0xd8}}, 0x24000058) ioperm(0x0, 0x7fff, 0x15f9) (async) ioperm(0x0, 0x7fff, 0x15f9) r8 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) ptrace(0x10, r8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioperm(0x978, 0xeb, 0x4) ptrace$getregset(0x4204, r8, 0x201, &(0x7f0000000740)={0x0, 0x96}) signalfd(0xffffffffffffffff, &(0x7f0000000580)={[0x7]}, 0x8) 2m49.192581269s ago: executing program 5 (id=739): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x8000, 0x0, r3, r4, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, 0x0, 0x0) (async) dup2(r5, r1) write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x2d, 0x8, 0xffffffff80000000, 0x93a3, 0x9, 0x3, 0xc, 0x0, 0x0, 0x10, 0x3}}, 0x50) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000400)='b', 0x1}], 0x1) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000040), 0x4) (async) connect$llc(r0, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) 2m49.12906772s ago: executing program 5 (id=743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x26000, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xdddd8000, 0x18, 0x8, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x1a, 0xa8}, {0x10000, 0xd000, 0x8, 0x4, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x30000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xeeee8000, 0x3, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x5]}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x15358604}}, './file0\x00'}) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, &(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000080)="7e3911c4103d9bf5e665e9b2342843f456d9eeb3b0f251ea4297f7f758e179bee41544482314cdf5711f40c05bf2968a793ccb9c582b4941d3d3189ec994eb108fa42986837b7acbcba5fce587ee", 0x4e, 0x0, 0x8a1, 0x6}}, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xfe29, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5d) sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmmsg$inet6(r5, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="6d9f3c4769abd012301d4adc2b9df4ee98ae0324783c6b9cd791", 0x1a}], 0x1}}], 0x1, 0x2008000) sendto$inet6(r5, &(0x7f0000000940)="97389df07f0f5f99afd046", 0xb, 0x800, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000300)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (async) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x26000, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xdddd8000, 0x18, 0x8, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x1a, 0xa8}, {0x10000, 0xd000, 0x8, 0x4, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x30000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xeeee8000, 0x3, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x5]}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x15358604}}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, &(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000080)="7e3911c4103d9bf5e665e9b2342843f456d9eeb3b0f251ea4297f7f758e179bee41544482314cdf5711f40c05bf2968a793ccb9c582b4941d3d3189ec994eb108fa42986837b7acbcba5fce587ee", 0x4e, 0x0, 0x8a1, 0x6}}, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xfe29, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5d) (async) sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) (async) sendmmsg$inet6(r5, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="6d9f3c4769abd012301d4adc2b9df4ee98ae0324783c6b9cd791", 0x1a}], 0x1}}], 0x1, 0x2008000) (async) sendto$inet6(r5, &(0x7f0000000940)="97389df07f0f5f99afd046", 0xb, 0x800, 0x0, 0x0) (async) 2m44.546862872s ago: executing program 4 (id=805): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000240)={0x18, r1}) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2m43.631258875s ago: executing program 4 (id=815): r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f00000061c0)={0x0, 0x0, &(0x7f0000006180)={&(0x7f0000006100)={0x20, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000840) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd2a, 0xffffffff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x200004d0) (rerun: 32) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async, rerun: 32) r9 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) (rerun: 32) shmat(r9, &(0x7f0000ff7000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x34, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="725eb862"]}, @typed={0x8, 0x7, 0x0, 0x0, @u32=0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r5) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a050400000000000000000200000088000480340001800c0001007061796c6f6164002400028008000340000000000800024000000000080001400000001008000440000000022c0001800e000100696d6d6564696174650000001800028008000140000000140c000280050001002d00000024000180090001006d6574610000000014000280080001400000001408000240000000db0900010073797a30000000000900020073797a32"], 0xdc}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r12, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x30}, 0xc) (async) bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r10, &(0x7f00000002c0)="c84700a051c5cea52882ae2673b0", 0xe, 0x0, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 2m43.530057301s ago: executing program 4 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x0, 0x248}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000380)='v', &(0x7f0000000080)=@tcp6=r6, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r5, r2, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r7, &(0x7f0000000000)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) sendto$inet6(r7, &(0x7f0000000280)="020409fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) getsockname$packet(r10, &(0x7f00000001c0), &(0x7f0000000200)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f00000003c0), &(0x7f0000000040)=@tcp6=r6, 0x1}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) socketpair(0x29, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21909, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 2m43.162106499s ago: executing program 4 (id=823): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x170bd2c, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x20000000) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x4, 0x9, 0x4, 0xc08}}, 0x120) read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f00000000c0)={0x77359400}, 0x39) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$UHID_DESTROY(r5, &(0x7f0000000340), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'wg1\x00', &(0x7f00000002c0)=@ethtool_rxfh_indir={0x39}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x4040000}, 0x840) 2m42.999792254s ago: executing program 4 (id=825): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000780), 0x20000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000000c0)=""/168, 0xa8) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4, r3], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000080)={0xffffffffffffffcd, 0x0, 0x0}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) ioctl$KVM_X86_SETUP_MCE(r1, 0x7040, 0x0) 2m42.941182429s ago: executing program 4 (id=827): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$l2tp(0x2, 0x2, 0x73) bind(r2, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @multicast1}, 0x1, 0x2, 0x4, 0x2}}, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) setresgid(0xee00, 0xee01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x0, 0x8, 0x5, {0x2}, 0x8000}) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r6 = semget$private(0x0, 0x4000000009, 0x208) semop(r6, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semop(r6, &(0x7f0000000000)=[{0x0, 0xfffb}, {0x1, 0x0, 0x800}], 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000140)=[0x1ff]) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) syz_io_uring_setup(0x2fd, &(0x7f0000000100)={0x0, 0x83b5, 0x20, 0x0, 0xde, 0x0, r7}, 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r8, 0x80487436, &(0x7f0000000240)="a8d7c08913ed4dfad5e124524fefd9bae801356e8480c37cee") syz_emit_ethernet(0x7a, &(0x7f0000000040)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400442f00fc030000000000000000000000000000ff020000000000000000000000000001042088f70000fffd00000800000086dd080088be00000000100000000100000000000000080022eb0000000020fe00000200000000000000000000000800655800000004561c83b93af54f471e3cce430ba93dd341f6f076e6e502e64af6c491fbb2f6fd2584aee1b083cd3b3b8cd4a70553e3c5faaf8127a2c1ce84aa45dc8f46b906b625f3a0e1c6c615650239855d3e37dbbf27a589e532ed01bbd152e3a72bc7e7d920c1f5fd803ea0c7c502a22ab678cdeb3c10420509c73f45"], 0x0) 2m33.801945904s ago: executing program 34 (id=743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x26000, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xdddd8000, 0x18, 0x8, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x1a, 0xa8}, {0x10000, 0xd000, 0x8, 0x4, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x30000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xeeee8000, 0x3, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x5]}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x15358604}}, './file0\x00'}) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, &(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000080)="7e3911c4103d9bf5e665e9b2342843f456d9eeb3b0f251ea4297f7f758e179bee41544482314cdf5711f40c05bf2968a793ccb9c582b4941d3d3189ec994eb108fa42986837b7acbcba5fce587ee", 0x4e, 0x0, 0x8a1, 0x6}}, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xfe29, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5d) sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmmsg$inet6(r5, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="6d9f3c4769abd012301d4adc2b9df4ee98ae0324783c6b9cd791", 0x1a}], 0x1}}], 0x1, 0x2008000) sendto$inet6(r5, &(0x7f0000000940)="97389df07f0f5f99afd046", 0xb, 0x800, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000300)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (async) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x26000, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xdddd8000, 0x18, 0x8, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x3}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x1a, 0xa8}, {0x10000, 0xd000, 0x8, 0x4, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x30000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xeeee8000, 0x3, 0x82, 0x0, 0x10, 0x4, 0xe}, {0x6000}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x5]}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x15358604}}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, &(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000080)="7e3911c4103d9bf5e665e9b2342843f456d9eeb3b0f251ea4297f7f758e179bee41544482314cdf5711f40c05bf2968a793ccb9c582b4941d3d3189ec994eb108fa42986837b7acbcba5fce587ee", 0x4e, 0x0, 0x8a1, 0x6}}, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xfe29, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5d) (async) sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) (async) sendmmsg$inet6(r5, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="6d9f3c4769abd012301d4adc2b9df4ee98ae0324783c6b9cd791", 0x1a}], 0x1}}], 0x1, 0x2008000) (async) sendto$inet6(r5, &(0x7f0000000940)="97389df07f0f5f99afd046", 0xb, 0x800, 0x0, 0x0) (async) 2m27.816804586s ago: executing program 35 (id=827): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$l2tp(0x2, 0x2, 0x73) bind(r2, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @multicast1}, 0x1, 0x2, 0x4, 0x2}}, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) setresgid(0xee00, 0xee01, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x0, 0x8, 0x5, {0x2}, 0x8000}) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r6 = semget$private(0x0, 0x4000000009, 0x208) semop(r6, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1) semop(r6, &(0x7f0000000000)=[{0x0, 0xfffb}, {0x1, 0x0, 0x800}], 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000140)=[0x1ff]) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) syz_io_uring_setup(0x2fd, &(0x7f0000000100)={0x0, 0x83b5, 0x20, 0x0, 0xde, 0x0, r7}, 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r8, 0x80487436, &(0x7f0000000240)="a8d7c08913ed4dfad5e124524fefd9bae801356e8480c37cee") syz_emit_ethernet(0x7a, &(0x7f0000000040)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400442f00fc030000000000000000000000000000ff020000000000000000000000000001042088f70000fffd00000800000086dd080088be00000000100000000100000000000000080022eb0000000020fe00000200000000000000000000000800655800000004561c83b93af54f471e3cce430ba93dd341f6f076e6e502e64af6c491fbb2f6fd2584aee1b083cd3b3b8cd4a70553e3c5faaf8127a2c1ce84aa45dc8f46b906b625f3a0e1c6c615650239855d3e37dbbf27a589e532ed01bbd152e3a72bc7e7d920c1f5fd803ea0c7c502a22ab678cdeb3c10420509c73f45"], 0x0) 3.518937693s ago: executing program 2 (id=2413): syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB='W'], 0x0) 2.40936465s ago: executing program 1 (id=2421): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) listen(r0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f00000003c0)={'\x00', 0x7, 0xff7f, 0x31, 0x0, 0x7, 0x8076000, 0xffff1000, '\x00', 0x4}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.409028961s ago: executing program 6 (id=2423): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.407017866s ago: executing program 6 (id=2424): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x1, 0x2002) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) 2.274136422s ago: executing program 7 (id=2425): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000840)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x6}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) 2.27398246s ago: executing program 7 (id=2426): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, 0x0) 2.273872436s ago: executing program 7 (id=2427): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x3, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@wrmsr={0x1e, 0x20, {0x2a8, 0xfffffffffffffff8}}, @uexit={0x0, 0x18, 0x6}, @code={0xa, 0x42, {"3e0f005c7c002ef3643e640f064734000f23e8460f22470f013a8af50f005481bf67f2410f7082a9e70000f56736670f07"}}, @uexit={0x0, 0x18, 0x6}], 0x92}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10204, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.942065545s ago: executing program 7 (id=2428): kexec_load(0x8, 0x1, &(0x7f0000001440)=[{&(0x7f0000000140)="4d71193f75a4a6d0f2900900000000000000c1a1a9ddf69b19dd8fe2b704d306eea3d824e41f71f87ff755744d61f0aa3aa38e656ee521858cb9f87ea72d724f87eb1bc26d9118856d508c709e6f0ed99c96c4ee862f5daf1801767607c7135d60da352155665a3d17c3e73b01b989a7a0035e2ca70511778dd7f581431f25c45a2ff656d4eaf5e4c3e8ed1d6470a54437f9438c39a11ab161346303fab50b83acdc7909c5a85435d0260002257e87f52bac02f8f3d434402fd39cfa969825bb5a10ecf96d9d7706b1f88167e1412bd3", 0xd0, 0x18000}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)="65694c40212b71a5585daf3557cafb1b24c7cb861ff8b29c234bfa26a2da5897713a91daab555eec4f1527253582daf2dc97913d100951419ed3a989743c3a3d23750dd953baecbd", 0x48}], 0x1}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) ioctl$LOOP_SET_STATUS(r0, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xfffffffc, 0x6, 0x80415, 0x1, "4b8b3ea40100dfed0b2f3409000000dd5a9601040049918ae7fd1f0ececfe0f4fcdf997dd52115394d4d0008000000000000020000000000000000000000eaff", "090000041031eaabb9496e4d7e00000000000108000000ecff0200", [0x1000000000000911, 0xc]}) 1.865559655s ago: executing program 7 (id=2429): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.365849006s ago: executing program 6 (id=2430): syz_usb_connect(0x0, 0x24, &(0x7f0000000c40)={{0x12, 0x1, 0x250, 0x8, 0x76, 0x2e, 0x40, 0x19d2, 0x58, 0xb36f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xdf, 0x60, 0xc1, [{{0x9, 0x4, 0x88, 0x8, 0x0, 0x2, 0x6}}]}}]}}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0}) 1.280486735s ago: executing program 1 (id=2431): syz_emit_vhci(&(0x7f0000019200)=ANY=[@ANYBLOB="040e44117d0c"], 0x47) openat$ptmx(0xffffffffffffff9c, 0x0, 0x82, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x48c00, 0x0) 1.280192666s ago: executing program 1 (id=2432): openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000002c0)=@ethtool_pauseparam={0x1, 0x5, 0x8, 0x6f4}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() getpeername$inet6(r0, &(0x7f0000000100), &(0x7f00000001c0)=0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500feff0000000085100000faffffff95000000000000005dc4b7b6904caf9ddd06e45a73f6d6ce5d1111857be0fcb1da4e2bac932b48e3e1586c56ec6d3393e0451f80a5091ec995da30ddea6119dc5f5e4e8b5296a97499650b11cca7a003459c42b66fd72ed7137efc82fcf21fd24a594f82fb584b656cae857a09b2539950f935bb5c9d6bfaec9a566d9673438197407815c01e54a569fa8cd14cceddfb884fcc"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') 318.317163ms ago: executing program 7 (id=2433): ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x100) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000141e01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0)) 318.144578ms ago: executing program 2 (id=2434): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000040), 0x4) 214.844095ms ago: executing program 2 (id=2435): socket(0x10, 0x3, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x50) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r1, 0x10000) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x8000, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000040)=0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883", 0x4}], 0x1}}], 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 214.664208ms ago: executing program 2 (id=2436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 150.445844ms ago: executing program 2 (id=2437): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000de, 0x0) 150.244137ms ago: executing program 2 (id=2438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x1e0001, 0x0, {[0xb3, 0x200000001000, 0x100000004, 0x165, 0x7, 0x6, 0x5, 0xda]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 150.00665ms ago: executing program 1 (id=2439): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00001e9000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x6}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 75.989171ms ago: executing program 6 (id=2440): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 75.809477ms ago: executing program 6 (id=2441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000f0a010100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 75.661125ms ago: executing program 1 (id=2442): r0 = syz_io_uring_setup(0x114, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) 254.09µs ago: executing program 1 (id=2443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 6 (id=2444): timer_create(0x7, 0x0, &(0x7f0000000380)=0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000140)={r2, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r3, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): 072][T10902] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.427841][T10902] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.430230][T10902] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 160.432827][T10902] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 160.439459][T10902] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 160.444584][T10902] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 160.447327][T10902] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 160.450967][T10902] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 160.461801][T10902] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 160.463795][T10902] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 160.468477][T10902] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 160.581773][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1318'. [ 160.586110][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1318'. [ 160.598145][T10907] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.609458][T10907] bridge_slave_0 (unregistering): left allmulticast mode [ 160.612477][T10907] bridge_slave_0 (unregistering): left promiscuous mode [ 160.615529][T10907] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.727613][T10916] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 160.742543][T10916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 160.748286][T10916] netlink: 'syz.1.1322': attribute type 10 has an invalid length. [ 160.750761][T10916] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 160.752966][T10916] bond0: (slave wlan1): refused to change device type [ 160.813137][T10924] ufs: You didn't specify the type of your ufs filesystem [ 160.813137][T10924] [ 160.813137][T10924] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 160.813137][T10924] [ 160.813137][T10924] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 160.827942][T10924] ufs: ufstype=old is supported read-only [ 160.833269][T10924] ufs: ufs_fill_super(): bad magic number [ 160.874234][T10924] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 161.128216][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1330'. [ 161.174279][T10953] netlink: 'syz.6.1331': attribute type 2 has an invalid length. [ 161.347607][T10961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=297 sclass=netlink_route_socket pid=10961 comm=syz.1.1334 [ 161.394606][T10970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.398064][T10970] IPv6: NLM_F_CREATE should be set when creating new route [ 162.261877][T10988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=10988 comm=syz.7.1340 [ 162.423313][T10998] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 162.460338][T10999] sctp: [Deprecated]: syz.7.1342 (pid 10999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.460338][T10999] Use struct sctp_sack_info instead [ 162.494220][T10999] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 162.576830][ T5935] Bluetooth: hci1: command 0x0c1a tx timeout [ 162.576969][ T5288] Bluetooth: hci3: command 0x0419 tx timeout [ 162.577239][ T5926] Bluetooth: hci2: command 0x0c1a tx timeout [ 162.651544][ T5288] Bluetooth: hci4: command 0x0c1a tx timeout [ 162.653526][ T5288] Bluetooth: hci5: command 0x0405 tx timeout [ 162.671410][T11019] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.383129][T11061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=11061 comm=syz.7.1361 [ 163.490235][T11075] __nla_validate_parse: 5 callbacks suppressed [ 163.490253][T11075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1366'. [ 163.712441][T11089] netlink: 'syz.1.1371': attribute type 10 has an invalid length. [ 163.820530][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 163.820545][ T40] audit: type=1400 audit(1772168914.697:8583): avc: denied { getopt } for pid=11101 comm="syz.1.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 163.970835][T11113] kAFS: unparsable volume name [ 164.209216][T11139] vlan3: entered promiscuous mode [ 164.211406][T11139] bridge0: entered promiscuous mode [ 164.262623][T11144] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 164.267306][T11144] overlayfs: failed to set xattr on upper [ 164.269779][T11144] overlayfs: ...falling back to redirect_dir=nofollow. [ 164.274117][T11144] overlayfs: ...falling back to index=off. [ 164.276634][T11144] overlayfs: ...falling back to uuid=null. [ 164.285622][T11144] overlayfs: cleanup of 'bus/work' failed (-13) [ 164.287758][T11144] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 164.291399][T11144] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 164.295224][T11144] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 164.407204][ T40] audit: type=1400 audit(1772168915.250:8584): avc: denied { map } for pid=11146 comm="syz.1.1383" path="socket:[42115]" dev="sockfs" ino=42115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.416952][ T40] audit: type=1400 audit(1772168915.250:8585): avc: denied { accept } for pid=11146 comm="syz.1.1383" path="socket:[42115]" dev="sockfs" ino=42115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.530977][ T40] audit: type=1400 audit(1772168915.363:8586): avc: denied { read } for pid=11160 comm="syz.1.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.543237][ T40] audit: type=1400 audit(1772168915.363:8587): avc: denied { write } for pid=11160 comm="syz.1.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 164.793809][ T5288] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.815921][T11180] QAT: Stopping all acceleration devices. [ 164.850728][T11182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1392'. [ 164.853757][T11182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1392'. [ 164.868418][ T5288] Bluetooth: hci4: command 0x0c1a tx timeout [ 164.869038][ T5935] Bluetooth: hci5: command 0x0405 tx timeout [ 164.895628][ T40] audit: type=1400 audit(1772168915.710:8588): avc: denied { append } for pid=11185 comm="syz.7.1393" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 164.901266][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1393'. [ 165.648912][ T40] audit: type=1326 audit(1772168916.414:8589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.1.1392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1439c799 code=0x7fc00000 [ 165.656678][ T40] audit: type=1326 audit(1772168916.414:8590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.1.1392" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4e1439c799 code=0x7fc00000 [ 165.663667][ T40] audit: type=1326 audit(1772168916.414:8591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11175 comm="syz.1.1392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e1439c799 code=0x7fc00000 [ 165.759258][ T40] audit: type=1400 audit(1772168916.517:8592): avc: denied { setopt } for pid=11212 comm="syz.1.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.900991][T11223] netlink: 'syz.1.1401': attribute type 22 has an invalid length. [ 165.903775][T11223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'. [ 165.911905][ T9802] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.912008][T11223] netlink: 'syz.1.1401': attribute type 22 has an invalid length. [ 165.915324][ T9802] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.917828][T11223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1401'. [ 165.921266][ T9802] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.928177][ T9802] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.995930][T11246] netlink: 'syz.1.1404': attribute type 10 has an invalid length. [ 166.005413][T11246] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 166.010122][T11246] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 166.014146][T11246] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 166.127789][T11250] uprobe: syz.1.1406:11250 failed to unregister, leaking uprobe [ 166.212166][ T2305] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 166.381885][ T2305] usb 12-1: Using ep0 maxpacket: 8 [ 166.385224][ T2305] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.388678][ T2305] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.391557][ T2305] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.398551][ T2305] usb 12-1: config 0 descriptor?? [ 166.618330][ T2305] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 166.894933][ T1026] usb 12-1: USB disconnect, device number 6 [ 167.010856][ T5935] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.017423][T11288] netlink: 'syz.7.1415': attribute type 1 has an invalid length. [ 167.036529][T11288] bond1: entered promiscuous mode [ 167.038281][T11288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.047188][T11288] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1415'. [ 167.050044][T11288] bond1: entered allmulticast mode [ 167.059344][T11288] bond1: (slave bridge1): making interface the new active one [ 167.061687][T11288] bridge1: entered promiscuous mode [ 167.063468][T11288] bridge1: entered allmulticast mode [ 167.066544][T11288] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 167.085330][ T5935] Bluetooth: hci4: command 0x0c1a tx timeout [ 167.096051][ T5935] Bluetooth: hci5: command 0x0405 tx timeout [ 167.112049][T11291] kAFS: No cell specified [ 167.159670][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1417'. [ 167.162617][T11293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1417'. [ 167.169075][T11293] tipc: Started in network mode [ 167.171375][T11293] tipc: Node identity 080211000001, cluster identity 4711 [ 167.174337][T11293] tipc: Enabled bearer , priority 0 [ 167.258862][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1418'. [ 167.264000][T11296] xt_hashlimit: size too large, truncated to 1048576 [ 168.194264][T11188] uprobe: syz.6.1394:11188 failed to unregister, leaking uprobe [ 168.197267][T11188] uprobe: syz.6.1394:11188 failed to unregister, leaking uprobe [ 168.239013][ T59] tipc: Node number set to 134418688 [ 168.301105][T11333] overlayfs: failed to clone upperpath [ 168.319515][T11335] openvswitch: netlink: Duplicate or invalid key (type 0). [ 168.323138][T11335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.406578][T11345] ip_vti0: Master is either lo or non-ether device [ 168.708477][ T5935] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 168.854776][ T830] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 168.861515][T11387] __nla_validate_parse: 5 callbacks suppressed [ 168.861532][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'. [ 168.862303][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'. [ 168.864895][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'. [ 168.868592][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'. [ 169.014617][ T830] usb 11-1: Using ep0 maxpacket: 32 [ 169.018280][ T830] usb 11-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 169.021637][ T830] usb 11-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 169.025409][ T830] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.029821][ T830] usb 11-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 169.036399][ T830] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 169.039596][ T830] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.042386][ T830] usb 11-1: Product: syz [ 169.043976][ T830] usb 11-1: Manufacturer: syz [ 169.045482][ T830] usb 11-1: SerialNumber: syz [ 169.052143][ C0] imon 11-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 169.059743][ T830] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/input/input10 [ 169.075802][T11400] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1452'. [ 169.130339][T11402] tmpfs: Bad value for 'mpol' [ 169.227513][T11407] xt_hashlimit: size too large, truncated to 1048576 [ 169.281128][ T830] imon 11-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 169.284219][ T830] (id 0x00) [ 169.334366][ T830] rc_core: IR keymap rc-imon-pad not found [ 169.336693][ T830] Registered IR keymap rc-empty [ 169.338181][ T830] imon 11-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 169.341618][ T830] imon 11-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 169.506458][ T830] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0 [ 169.513089][ T830] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/rc/rc0/input11 [ 169.520870][ T830] imon 11-1:155.0: iMON device (15c2:ffdc, intf0) on usb<11:3> initialized [ 169.727047][ T2305] usb 11-1: USB disconnect, device number 3 [ 169.733026][T11425] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1460'. [ 169.818753][T11431] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1461'. [ 169.823159][T11431] /dev/nullb0: Can't lookup blockdev [ 169.826080][T11431] /dev/nullb0: Can't lookup blockdev [ 170.395739][T11464] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1471'. [ 170.582351][T11474] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 170.665599][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 170.665614][ T40] audit: type=1400 audit(1772168921.114:8596): avc: denied { create } for pid=11475 comm="syz.7.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 170.674468][T11476] bpq0: entered allmulticast mode [ 170.676423][ T40] audit: type=1400 audit(1772168921.123:8597): avc: denied { ioctl } for pid=11475 comm="syz.7.1476" path="socket:[41665]" dev="sockfs" ino=41665 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 170.678749][ T24] IPVS: starting estimator thread 0... [ 170.691843][T11476] bpq0: left allmulticast mode [ 170.784120][T11478] IPVS: using max 23 ests per chain, 55200 per kthread [ 170.821772][ T40] audit: type=1400 audit(1772168921.264:8598): avc: denied { ioctl } for pid=11483 comm="syz.2.1478" path="socket:[41668]" dev="sockfs" ino=41668 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 170.830832][ T40] audit: type=1400 audit(1772168921.264:8599): avc: denied { write } for pid=11483 comm="syz.2.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 170.841008][ T40] audit: type=1400 audit(1772168921.264:8600): avc: denied { ioctl } for pid=11483 comm="syz.2.1478" path="socket:[41673]" dev="sockfs" ino=41673 ioctlcmd=0x5864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 170.883575][T11487] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 170.970680][T11489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1480'. [ 170.974461][T11489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1480'. [ 171.077643][ T40] audit: type=1400 audit(1772168921.508:8601): avc: denied { write } for pid=11496 comm="syz.7.1483" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 171.093245][ T40] audit: type=1400 audit(1772168921.517:8602): avc: denied { ioctl } for pid=11496 comm="syz.7.1483" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 171.165864][T11501] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 171.295834][ T40] audit: type=1400 audit(1772168921.705:8603): avc: denied { execute } for pid=11511 comm="syz.1.1487" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=43233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 171.527055][ T5935] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 171.531606][T11534] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 171.690497][T11543] netlink: 'syz.6.1499': attribute type 6 has an invalid length. [ 171.698537][ T152] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.698605][T11543] netlink: 'syz.6.1499': attribute type 6 has an invalid length. [ 171.715035][ T152] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.718739][ T152] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.723929][ T152] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.866663][ T40] audit: type=1400 audit(1772168922.249:8604): avc: denied { connect } for pid=11547 comm="syz.6.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.977462][T11555] QAT: failed to copy from user cfg_data. [ 171.989250][T11556] netlink: 'syz.1.1505': attribute type 58 has an invalid length. [ 172.008269][ T40] audit: type=1400 audit(1772168922.362:8605): avc: denied { mount } for pid=11553 comm="syz.1.1505" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 172.055899][T11548] fuse: Bad value for 'group_id' [ 172.057883][T11548] fuse: Bad value for 'group_id' [ 172.111432][T11572] netlink: 'syz.1.1510': attribute type 1 has an invalid length. [ 172.127535][T11572] 8021q: adding VLAN 0 to HW filter on device bond5 [ 172.130470][T11575] QAT: failed to copy from user. [ 172.176249][T11572] bond5: (slave veth7): Enslaving as an active interface with a down link [ 172.196652][T11572] bond5: (slave dummy0): Enslaving as an active interface with a down link [ 172.203477][T11572] netlink: 'syz.1.1510': attribute type 10 has an invalid length. [ 172.205952][T11572] dummy0: entered promiscuous mode [ 172.209851][T11572] bond5: (slave dummy0): Releasing active interface [ 172.625663][T11611] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 173.159510][T11639] loop4: detected capacity change from 0 to 7 [ 173.169628][T11639] Dev loop4: unable to read RDB block 7 [ 173.172188][T11639] loop4: AHDI p1 p2 p3 [ 173.173826][T11639] loop4: partition table partially beyond EOD, truncated [ 173.177952][T11639] loop4: p1 start 1601398130 is beyond EOD, truncated [ 173.180393][T11639] loop4: p2 start 1702059890 is beyond EOD, truncated [ 173.387575][ T5935] Bluetooth: hci3: unexpected event for opcode 0x042f [ 173.477920][T11655] netlink: 'syz.7.1535': attribute type 1 has an invalid length. [ 173.494597][T11655] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.504739][T11655] vlan2: entered promiscuous mode [ 173.506400][T11655] bond2: entered promiscuous mode [ 173.508079][T11655] vlan2: entered allmulticast mode [ 173.509722][T11655] bond2: entered allmulticast mode [ 173.518947][T11655] bond2: (slave bridge3): making interface the new active one [ 173.521401][T11655] bridge3: entered promiscuous mode [ 173.523464][T11655] bridge3: entered allmulticast mode [ 173.526215][T11655] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 173.657711][ T9802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.661117][ T9802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.832382][T11686] IPv6: sit1: Disabled Multicast RS [ 173.983526][T11699] fuse: Unknown parameter 'rootoo' [ 174.164124][T11706] smb3: Unknown parameter 'rdma/ptmx' [ 175.005279][T11718] __nla_validate_parse: 10 callbacks suppressed [ 175.005299][T11718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 175.127049][T11725] Cannot find set identified by id 3 to match [ 175.149196][T11725] overlayfs: failed to clone lowerpath [ 175.154521][T11725] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:32789 [ 175.526541][T11744] netlink: 'syz.7.1562': attribute type 1 has an invalid length. [ 175.546977][T11744] bond3: (slave bridge4): Enslaving as a backup interface with an up link [ 175.551358][T11744] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1562'. [ 175.555044][T11744] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.555673][ T9802] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 175.566920][T11744] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1562'. [ 175.571467][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1562'. [ 175.574526][T11744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.583532][T11748] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1563'. [ 175.602236][T11744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.679774][ T9802] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 175.716755][T11761] netlink: 'syz.7.1566': attribute type 4 has an invalid length. [ 175.851854][T11768] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 176.013185][T11784] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1572'. [ 176.157849][T11788] uprobe: syz.7.1574:11788 failed to unregister, leaking uprobe [ 176.380171][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 176.413364][T11796] netlink: 'syz.7.1577': attribute type 2 has an invalid length. [ 176.421198][T11794] No control pipe specified [ 176.422017][T11796] netlink: 'syz.7.1577': attribute type 1 has an invalid length. [ 176.427738][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 176.427753][ T40] audit: type=1400 audit(1772168926.527:8617): avc: denied { checkpoint_restore } for pid=11793 comm="syz.2.1576" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.428074][T11794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1576'. [ 176.440139][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1577'. [ 176.448111][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1577'. [ 176.523243][ T40] audit: type=1326 audit(1772168926.612:8618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11803 comm="syz.7.1580" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f527c99c799 code=0x0 [ 176.546997][T11811] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 176.550041][T11811] overlayfs: failed to set xattr on upper [ 176.553229][T11811] overlayfs: ...falling back to redirect_dir=nofollow. [ 176.556330][T11811] overlayfs: ...falling back to index=off. [ 176.558748][T11811] overlayfs: ...falling back to uuid=null. [ 176.564861][T11811] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 176.570788][ T40] audit: type=1400 audit(1772168926.659:8619): avc: denied { listen } for pid=11808 comm="syz.6.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.585683][T11813] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 176.588322][T11813] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 176.591435][T11813] vhci_hcd vhci_hcd.0: Device attached [ 176.603330][T11815] vhci_hcd: connection closed [ 176.604469][ T152] vhci_hcd vhci_hcd.2: stop threads [ 176.608560][ T152] vhci_hcd vhci_hcd.2: release socket [ 176.610757][ T152] vhci_hcd vhci_hcd.2: disconnect device [ 177.217458][ T40] audit: type=1400 audit(1772168927.269:8620): avc: denied { append } for pid=11834 comm="syz.2.1588" name="frontend0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 177.551164][T11851] fuse: Bad value for 'fd' [ 177.819964][T11860] tipc: Enabling of bearer rejected, already enabled [ 177.877915][T11862] overlayfs: failed to resolve './cgroup/../file0': -2 [ 178.317113][T11841] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 178.321481][T11841] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 178.324223][T11841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 178.327688][T11841] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 178.330384][T11841] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 178.376421][ T40] audit: type=1400 audit(1772168928.357:8621): avc: denied { ioctl } for pid=11871 comm="syz.7.1602" path="socket:[42779]" dev="sockfs" ino=42779 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 178.450154][ T40] audit: type=1400 audit(1772168928.423:8622): avc: denied { write } for pid=11871 comm="syz.7.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 178.459383][T11875] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 178.676925][T11885] fuse: Unknown parameter '/dev/ptp0' [ 178.691242][T11887] /dev/nullb0: Can't lookup blockdev [ 178.696212][T11887] /dev/nullb0: Can't lookup blockdev [ 178.699421][T11887] /dev/nullb0: Can't lookup blockdev [ 178.701872][T11887] /dev/nullb0: Can't lookup blockdev [ 178.705298][T11887] /dev/nullb0: Can't lookup blockdev [ 178.707755][T11887] /dev/nullb0: Can't lookup blockdev [ 178.710293][T11887] /dev/nullb0: Can't lookup blockdev [ 178.712808][T11887] /dev/nullb0: Can't lookup blockdev [ 178.716014][T11887] /dev/nullb0: Can't lookup blockdev [ 178.718384][T11887] /dev/nullb0: Can't lookup blockdev [ 178.721020][T11887] /dev/nullb0: Can't lookup blockdev [ 178.723620][T11887] /dev/nullb0: Can't lookup blockdev [ 178.727321][T11887] /dev/nullb0: Can't lookup blockdev [ 178.729832][T11887] /dev/nullb0: Can't lookup blockdev [ 178.732433][T11887] /dev/nullb0: Can't lookup blockdev [ 178.734979][T11887] /dev/nullb0: Can't lookup blockdev [ 178.738954][T11887] /dev/nullb0: Can't lookup blockdev [ 178.741501][T11887] /dev/nullb0: Can't lookup blockdev [ 178.742992][T11885] /dev/nullb0: Can't lookup blockdev [ 178.744052][T11887] /dev/nullb0: Can't lookup blockdev [ 178.750362][T11887] /dev/nullb0: Can't lookup blockdev [ 178.752499][T11885] overlay: Unknown parameter 'fsname' [ 178.878879][T11901] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 178.996546][ T40] audit: type=1400 audit(1772168928.939:8623): avc: denied { ioctl } for pid=11910 comm="syz.2.1610" path="socket:[42797]" dev="sockfs" ino=42797 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 179.053178][T11918] Invalid ELF header type: 0 != 1 [ 179.055416][ T40] audit: type=1400 audit(1772168928.986:8624): avc: denied { module_load } for pid=11917 comm="syz.6.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 179.086154][ T40] audit: type=1400 audit(1772168929.014:8625): avc: denied { append } for pid=11922 comm="syz.2.1612" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 179.122080][ T40] audit: type=1400 audit(1772168929.061:8626): avc: denied { lock } for pid=11922 comm="syz.2.1612" path="/dev/qrtr-tun" dev="devtmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 179.294020][T11940] nla_validate_range_unsigned: 16 callbacks suppressed [ 179.294038][T11940] netlink: 'syz.2.1618': attribute type 11 has an invalid length. [ 179.369763][T11945] nbd: illegal input index -2146435068 [ 179.620894][ T5935] Bluetooth: hci2: command 0x0c1a tx timeout [ 179.647674][T11990] netlink: 'syz.6.1627': attribute type 1 has an invalid length. [ 179.669010][T11990] bond1: entered promiscuous mode [ 179.671301][T11990] bond1: entered allmulticast mode [ 179.674238][T11990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.689637][T11990] erspan1: entered allmulticast mode [ 179.695493][T11990] bond1: (slave erspan1): making interface the new active one [ 179.698569][T11990] erspan1: entered promiscuous mode [ 179.701747][T11990] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 179.764335][T12004] SELinux: syz.6.1634 (12004) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 179.791813][T12006] can0: slcan on ttyS3. [ 179.879761][T12006] can0 (unregistered): slcan off ttyS3. [ 179.928917][T12012] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 179.996350][T12016] deleting an unspecified loop device is not supported. [ 180.038444][T12020] Invalid ELF header magic: != ELF [ 180.483372][ T5935] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.483644][ T5288] Bluetooth: hci3: command 0x0419 tx timeout [ 180.485450][ T5935] Bluetooth: hci5: command 0x0405 tx timeout [ 180.488366][ T5288] Bluetooth: hci4: command 0x0c1a tx timeout [ 180.503506][T12063] syzkaller0: entered promiscuous mode [ 180.506524][T12063] syzkaller0: entered allmulticast mode [ 181.184546][T12095] netlink: 'syz.7.1663': attribute type 1 has an invalid length. [ 181.317820][T12101] __nla_validate_parse: 13 callbacks suppressed [ 181.317834][T12101] netlink: 7064 bytes leftover after parsing attributes in process `syz.7.1666'. [ 181.322736][T12101] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 181.498118][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1670'. [ 181.510529][T12113] : entered promiscuous mode [ 181.638561][T12115] loop5: detected capacity change from 0 to 2640 [ 181.642429][ T6032] buffer_io_error: 25 callbacks suppressed [ 181.642445][ T6032] Buffer I/O error on dev loop5, logical block 0, async page read [ 181.650006][ T6032] Buffer I/O error on dev loop5, logical block 0, async page read [ 181.653285][ T6032] Buffer I/O error on dev loop5, logical block 0, async page read [ 181.656688][ T6032] Buffer I/O error on dev loop5, logical block 0, async page read [ 181.659992][ T6032] Buffer I/O error on dev loop5, logical block 0, async page read [ 181.663427][ T6032] Buffer I/O error on dev loop5, logical block 0, async page read [ 181.666852][ T6032] Buffer I/O error on dev loop5, logical block 0, async page read [ 181.670073][ T6032] Buffer I/O error on dev loop5, logical block 0, async page read [ 181.673303][ T6032] ldm_validate_partition_table(): Disk read failed. [ 181.676289][ T6032] Buffer I/O error on dev loop5, logical block 0, async page read [ 181.679707][ T6032] Buffer I/O error on dev loop5, logical block 0, async page read [ 181.682969][ T6032] Dev loop5: unable to read RDB block 0 [ 181.685559][ T6032] loop5: unable to read partition table [ 181.690636][T12115] ldm_validate_partition_table(): Disk read failed. [ 181.694221][T12115] Dev loop5: unable to read RDB block 0 [ 181.695128][T12116] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1671'. [ 181.696799][T12115] loop5: unable to read partition table [ 181.705216][T12115] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 181.897535][T12123] netlink: 'syz.1.1674': attribute type 3 has an invalid length. [ 181.932650][T12126] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 181.999916][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 181.999932][ T40] audit: type=1400 audit(1772168931.753:8646): avc: denied { listen } for pid=12136 comm="syz.2.1677" lport=57583 faddr=::ffff:172.30.0.3 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.019535][ T40] audit: type=1400 audit(1772168931.763:8647): avc: denied { setopt } for pid=12136 comm="syz.2.1677" lport=57583 faddr=::ffff:172.30.0.3 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 182.071058][T12140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12140 comm=syz.1.1678 [ 182.263800][T12164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1683'. [ 182.371348][T12173] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1686'. [ 182.974306][ T40] audit: type=1326 audit(1772168932.663:8648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12201 comm="syz.2.1693" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4cbd9c799 code=0x0 [ 183.846776][T12223] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1698'. [ 183.849589][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1698'. [ 183.890257][ T40] audit: type=1400 audit(1772168933.526:8649): avc: denied { mounton } for pid=12224 comm="syz.7.1699" path="/proc/661" dev="proc" ino=46151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 184.084866][T12232] 9p: Could not find request transport: virtC¯& [ 184.134500][T12235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.176104][T12237] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.180776][T12237] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 184.210351][ T40] audit: type=1400 audit(1772168933.827:8650): avc: denied { unmount } for pid=9426 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 184.387973][T12246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1706'. [ 184.464263][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1708'. [ 184.495007][T12245] usb 1-1: reset high-speed USB device number 2 using ehci-pci [ 184.542272][T12255] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1709'. [ 185.242818][T12278] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 185.525554][T12278] geneve3: left promiscuous mode [ 185.527618][T12278] geneve3: left allmulticast mode [ 185.534843][ T152] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.546476][ T152] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.549707][ T152] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.552944][ T152] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.556284][ T152] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.561506][ T152] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.564753][ T152] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.578356][ T152] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.679472][T12316] Cannot find del_set index 4 as target [ 186.734389][ T40] audit: type=1400 audit(1772168936.200:8651): avc: denied { create } for pid=12317 comm="syz.1.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 186.789051][T12322] netlink: 'syz.7.1728': attribute type 22 has an invalid length. [ 186.791568][T12322] __nla_validate_parse: 3 callbacks suppressed [ 186.791578][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1728'. [ 186.800586][T12322] netlink: 'syz.7.1728': attribute type 22 has an invalid length. [ 186.803114][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1728'. [ 186.806178][ T9802] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.810221][ T9802] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.814610][ T9802] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.819739][ T9802] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.860750][T12330] hfsplus: unable to find HFS+ superblock [ 186.901239][T12332] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 186.935518][T12336] gfs2: error -5 reading superblock [ 186.951247][ T40] audit: type=1804 audit(1772168936.397:8652): pid=12332 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.1731" name="/newroot/224/file0" dev="tmpfs" ino=1235 res=1 errno=0 [ 186.952303][T12332] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -6661, delta: 1 [ 186.963926][T12332] ref_ctr increment failed for inode: 0x4d3 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888026bf6e40 [ 186.977502][T12331] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -6661, delta: -1 [ 186.980649][T12331] ref_ctr decrement failed for inode: 0x4d3 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888026bf6e40 [ 186.984111][T12331] uprobe: syz.7.1731:12331 failed to unregister, leaking uprobe [ 187.005670][T12343] netlink: 'syz.1.1735': attribute type 33 has an invalid length. [ 187.008229][T12343] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1735'. [ 187.085388][T12351] ubi: mtd0 is already attached to ubi31 [ 187.137524][T12354] overlayfs: failed to clone upperpath [ 187.404295][T12371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1747'. [ 187.411256][T12371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1747'. [ 187.433137][ T40] audit: type=1400 audit(1772168936.857:8653): avc: denied { read } for pid=12279 comm="syz.6.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.741916][ T1333] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 187.894126][ T40] audit: type=1400 audit(1772168937.279:8654): avc: denied { read } for pid=12390 comm="syz.6.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 187.901935][ T1333] usb 12-1: Using ep0 maxpacket: 16 [ 187.918172][ T1333] usb 12-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 64 [ 187.920659][T12393] ip6t_rpfilter: unknown options [ 187.921463][ T1333] usb 12-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.929674][ T1333] usb 12-1: config 1 interface 0 has no altsetting 0 [ 187.936096][ T1333] usb 12-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 187.944059][ T1333] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.947702][ T1333] usb 12-1: Product: syz [ 187.949593][ T1333] usb 12-1: Manufacturer: syz [ 187.955215][ T1333] usb 12-1: SerialNumber: syz [ 187.968992][T12379] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 187.972263][T12379] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 187.999733][T12395] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 188.092577][ T40] audit: type=1400 audit(1772168937.467:8655): avc: denied { execute } for pid=12401 comm="syz.2.1757" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=44793 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 188.181123][ T59] hid_parser_main: 7 callbacks suppressed [ 188.181141][ T59] hid-generic 00A0:0086:0005.0006: unknown main item tag 0x0 [ 188.187023][ T59] hid-generic 00A0:0086:0005.0006: unknown main item tag 0x0 [ 188.191358][ T59] hid-generic 00A0:0086:0005.0006: unknown main item tag 0x0 [ 188.197183][T12378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.199675][ T59] hid-generic 00A0:0086:0005.0006: unknown main item tag 0x0 [ 188.207852][ T59] hid-generic 00A0:0086:0005.0006: unknown main item tag 0x0 [ 188.211285][T12378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.229362][ T59] hid-generic 00A0:0086:0005.0006: unknown main item tag 0x0 [ 188.232965][ T59] hid-generic 00A0:0086:0005.0006: unknown main item tag 0x0 [ 188.236299][ T59] hid-generic 00A0:0086:0005.0006: unknown main item tag 0x0 [ 188.239808][ T59] hid-generic 00A0:0086:0005.0006: unknown main item tag 0x0 [ 188.248629][ T10] usb 12-1: USB disconnect, device number 7 [ 188.253239][ T59] hid-generic 00A0:0086:0005.0006: unknown main item tag 0x0 [ 188.261701][ T59] hid-generic 00A0:0086:0005.0006: hidraw1: HID v0.05 Device [syz1] on syz0 [ 188.327585][T12413] fido_id[12413]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 188.332978][T12419] netlink: 'syz.1.1760': attribute type 9 has an invalid length. [ 188.348043][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1760'. [ 188.351248][T12419] netlink: 'syz.1.1760': attribute type 9 has an invalid length. [ 188.353825][T12419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1760'. [ 188.647349][ T40] audit: type=1400 audit(1772168937.983:8656): avc: denied { append } for pid=12444 comm="syz.6.1769" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 188.669221][ T40] audit: type=1400 audit(1772168937.992:8657): avc: denied { ioctl } for pid=12444 comm="syz.6.1769" path="/dev/usbmon3" dev="devtmpfs" ino=746 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 189.030872][ T40] audit: type=1400 audit(1772168938.349:8658): avc: denied { create } for pid=12472 comm="syz.2.1778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 189.063373][T12461] overlayfs: statfs failed on './file0' [ 189.201791][ T40] audit: type=1400 audit(1772168938.508:8659): avc: denied { write } for pid=12481 comm="syz.6.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 189.223587][T12487] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 189.226503][T12487] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 189.226640][T12487] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 189.226758][T12487] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 189.226873][T12487] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 189.300537][T12491] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1782'. [ 189.304473][T12491] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.354226][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 189.367394][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1783'. [ 189.605491][T12506] syzkaller0: entered promiscuous mode [ 189.608627][T12506] syzkaller0: entered allmulticast mode [ 189.654021][T12508] bond6: invalid ARP target 0.0.0.0 specified for addition [ 189.656384][T12508] bond6: option arp_ip_target: invalid value (0) [ 189.659410][T12508] bond6 (unregistering): Released all slaves [ 189.861691][T12519] netlink: 'syz.1.1793': attribute type 1 has an invalid length. [ 189.866088][T12521] netlink: 'syz.1.1793': attribute type 1 has an invalid length. [ 190.097837][T12540] xt_hashlimit: invalid interval [ 190.100642][T12540] xt_hashlimit: invalid interval [ 190.103321][T12540] xt_hashlimit: invalid interval [ 190.106093][T12540] xt_hashlimit: invalid interval [ 190.109070][T12540] xt_hashlimit: invalid interval [ 190.111764][T12540] xt_hashlimit: invalid interval [ 190.114441][T12540] xt_hashlimit: invalid interval [ 190.117262][T12540] xt_hashlimit: invalid interval [ 190.122850][T12540] xt_hashlimit: invalid interval [ 190.125789][T12540] xt_hashlimit: invalid interval [ 190.201703][ T40] audit: type=1400 audit(1772168939.446:8660): avc: denied { write } for pid=12543 comm="syz.1.1801" path="socket:[45965]" dev="sockfs" ino=45965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 190.999407][T12556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=12556 comm=syz.7.1805 [ 191.003652][T12563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=12563 comm=syz.7.1805 [ 191.286307][ T9809] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.290036][ T9809] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.298244][ T9809] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.302211][ T58] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.330761][T12582] bridge10: entered promiscuous mode [ 191.397908][ T5926] Bluetooth: hci4: command 0x0c1a tx timeout [ 191.397943][ T5935] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.400419][ T5926] Bluetooth: hci3: command 0x0419 tx timeout [ 191.402798][ T5935] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.405297][ T5288] Bluetooth: hci5: command 0x0405 tx timeout [ 191.927172][T12619] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 192.099309][T12637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=12637 comm=syz.1.1826 [ 192.320323][T12643] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 192.322439][T12643] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 192.326494][T12643] vhci_hcd vhci_hcd.0: Device attached [ 192.332248][T12643] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 192.349781][T12644] vhci_hcd: connection closed [ 192.350006][ T152] vhci_hcd vhci_hcd.2: stop threads [ 192.354408][ T152] vhci_hcd vhci_hcd.2: release socket [ 192.356863][ T152] vhci_hcd vhci_hcd.2: disconnect device [ 192.421777][T12652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12652 comm=syz.2.1830 [ 192.469078][T12659] syz.6.1831: attempt to access beyond end of device [ 192.469078][T12659] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 192.476641][T12659] gfs2: error -5 reading superblock [ 192.570719][T12669] comedi comedi1: dmm32at: I/O port conflict (0x10003c4,16) [ 192.639875][T12675] overlayfs: failed lookup in lower (newroot/244, name='file0', err=-40): overlapping layers [ 192.647418][ T40] audit: type=1400 audit(1772168941.745:8661): avc: denied { link } for pid=12674 comm="syz.7.1837" name="#3a" dev="tmpfs" ino=1359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 192.655254][ T40] audit: type=1400 audit(1772168941.745:8662): avc: denied { rename } for pid=12674 comm="syz.7.1837" name="#3b" dev="tmpfs" ino=1359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 192.808588][ T40] audit: type=1400 audit(1772168941.886:8663): avc: denied { write } for pid=12677 comm="syz.7.1838" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 192.897610][T12697] __nla_validate_parse: 13 callbacks suppressed [ 192.897627][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1841'. [ 192.920285][T12699] program syz.7.1844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.005115][T12703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1845'. [ 193.053225][T12714] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 193.057957][T12716] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 193.069415][T12718] overlayfs: failed to clone lowerpath [ 193.071717][T12705] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=12705 comm=syz.6.1846 [ 193.078333][T12718] overlayfs: failed to clone lowerpath [ 193.102481][ T40] audit: type=1400 audit(1772168942.167:8664): avc: denied { append } for pid=12720 comm="syz.2.1850" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 193.107357][T12721] fuse: Unknown parameter '' [ 193.115132][T12721] support for the xor transformation has been removed. [ 193.117160][T12723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12723 comm=syz.1.1851 [ 193.136544][ T40] audit: type=1400 audit(1772168942.205:8665): avc: denied { ioctl } for pid=12704 comm="syz.6.1846" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 193.175979][ T40] audit: type=1400 audit(1772168942.233:8666): avc: denied { map } for pid=12720 comm="syz.2.1850" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 193.186431][ T40] audit: type=1400 audit(1772168942.233:8667): avc: denied { execute } for pid=12720 comm="syz.2.1850" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 193.199945][T12723] netlink: 'syz.1.1851': attribute type 4 has an invalid length. [ 193.204044][T12723] netlink: 'syz.1.1851': attribute type 4 has an invalid length. [ 193.255731][T12731] netlink: 'syz.6.1853': attribute type 13 has an invalid length. [ 193.457760][ T40] audit: type=1400 audit(1772168942.505:8668): avc: denied { write } for pid=12742 comm="syz.6.1857" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 193.502886][T12749] nfs4: Bad value for 'source' [ 193.529204][ T40] audit: type=1400 audit(1772168942.571:8669): avc: denied { write } for pid=12750 comm="syz.6.1860" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 193.697651][T12762] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 193.852334][ T40] audit: type=1400 audit(1772168942.880:8670): avc: denied { ioctl } for pid=12766 comm="syz.2.1864" path="socket:[50272]" dev="sockfs" ino=50272 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 203.595494][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.597949][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.249012][ T40] audit: type=1400 audit(1772168954.505:8671): avc: denied { accept } for pid=12773 comm="syz.7.1865" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.268192][T12778] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.307378][T12783] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 206.311244][ T40] audit: type=1400 audit(1772168954.561:8672): avc: denied { write } for pid=12784 comm="syz.6.1870" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 206.382737][ T9818] Bluetooth: hci0: Frame reassembly failed (-84) [ 206.548836][ T40] audit: type=1400 audit(1772168954.786:8673): avc: denied { name_connect } for pid=12794 comm="syz.1.1872" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 207.158197][ T40] audit: type=1800 audit(1772168955.358:8674): pid=12788 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1867" name="/" dev="fuse" ino=4 res=0 errno=0 [ 207.228646][T12805] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 207.232551][ T40] audit: type=1400 audit(1772168955.424:8675): avc: denied { relabelto } for pid=12804 comm="syz.2.1874" name="447" dev="tmpfs" ino=2374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 207.242764][ T40] audit: type=1400 audit(1772168955.424:8676): avc: denied { associate } for pid=12804 comm="syz.2.1874" name="447" dev="tmpfs" ino=2374 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 207.260926][ T40] audit: type=1400 audit(1772168955.452:8677): avc: denied { remove_name } for pid=5931 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 207.273218][ T40] audit: type=1400 audit(1772168955.452:8678): avc: denied { rmdir } for pid=5931 comm="syz-executor" name="447" dev="tmpfs" ino=2374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 207.323769][ T40] audit: type=1400 audit(1772168955.518:8679): avc: denied { append } for pid=12810 comm="syz.2.1878" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 207.838352][T12832] xt_hashlimit: max too large, truncated to 1048576 [ 208.526718][ T5935] Bluetooth: hci0: command 0x1003 tx timeout [ 208.529171][ T5288] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 208.720978][ T40] audit: type=1800 audit(1772168956.822:8680): pid=12837 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1883" name="/" dev="fuse" ino=4 res=0 errno=0 [ 208.968170][T12859] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.003561][T12861] IPv6: NLM_F_CREATE should be specified when creating new route [ 209.242651][T12869] vlan3: entered promiscuous mode [ 209.245023][T12869] bridge0: entered promiscuous mode [ 209.549677][ T1333] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 209.712823][ T1333] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 209.716709][ T1333] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.719243][T12879] netlink: 504 bytes leftover after parsing attributes in process `syz.6.1900'. [ 209.720260][ T1333] usb 12-1: Product: syz [ 209.725779][ T1333] usb 12-1: Manufacturer: syz [ 209.727810][ T1333] usb 12-1: SerialNumber: syz [ 209.730958][T12879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1900'. [ 209.735598][ T1333] usb 12-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 209.780135][ T59] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 211.338395][T12899] netlink: 'syz.1.1906': attribute type 1 has an invalid length. [ 211.368071][T12899] bond6: (slave geneve3): making interface the new active one [ 211.372001][T12899] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 211.377620][ T9818] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.380219][ T9818] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.381391][T12899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1906'. [ 211.383041][ T9818] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.388948][ T9818] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 211.394021][T12899] 8021q: adding VLAN 0 to HW filter on device bond6 [ 211.596503][ T59] usb 12-1: Service connection timeout for: 256 [ 211.598684][ T59] ath9k_htc 12-1:1.0: ath9k_htc: Unable to initialize HTC services [ 211.619690][ T59] ath9k_htc: Failed to initialize the device [ 211.631585][ T59] usb 12-1: ath9k_htc: USB layer deinitialized [ 211.860190][ T1458] usb 12-1: USB disconnect, device number 8 [ 212.483589][T12921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 212.792123][T12946] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1920'. [ 212.960410][ T830] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 213.144247][ T830] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.149064][ T830] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.156402][ T830] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.161959][ T830] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.173331][ T830] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.198603][ T830] usb 12-1: config 0 descriptor?? [ 213.237531][ T1458] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 213.399399][ T1458] usb 11-1: config 0 has an invalid interface number: 190 but max is 3 [ 213.402978][ T1458] usb 11-1: config 0 has an invalid interface number: 84 but max is 3 [ 213.407619][ T1458] usb 11-1: config 0 has an invalid interface number: 101 but max is 3 [ 213.411503][ T1458] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.415931][ T1458] usb 11-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 213.419835][ T1458] usb 11-1: config 0 has no interface number 0 [ 213.422553][ T1458] usb 11-1: config 0 has no interface number 1 [ 213.425370][ T1458] usb 11-1: config 0 has no interface number 2 [ 213.428028][ T1458] usb 11-1: config 0 interface 190 altsetting 128 bulk endpoint 0x4 has invalid maxpacket 1023 [ 213.432737][ T1458] usb 11-1: config 0 interface 190 altsetting 128 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 213.437456][ T1458] usb 11-1: config 0 interface 190 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 213.442273][ T1458] usb 11-1: config 0 interface 190 altsetting 128 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 213.457643][ T1458] usb 11-1: config 0 interface 190 altsetting 128 endpoint 0x84 has invalid maxpacket 32812, setting to 1024 [ 213.462480][ T1458] usb 11-1: config 0 interface 190 altsetting 128 bulk endpoint 0x84 has invalid maxpacket 1024 [ 213.466673][ T1458] usb 11-1: config 0 interface 190 altsetting 128 has a duplicate endpoint with address 0x7, skipping [ 213.470988][ T1458] usb 11-1: config 0 interface 190 altsetting 128 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 213.475414][ T1458] usb 11-1: config 0 interface 190 altsetting 128 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 213.479792][ T1458] usb 11-1: config 0 interface 190 altsetting 128 has a duplicate endpoint with address 0x4, skipping [ 213.484113][ T1458] usb 11-1: config 0 interface 190 altsetting 128 has a duplicate endpoint with address 0x7, skipping [ 213.487449][ T1458] usb 11-1: config 0 interface 190 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 213.490943][ T1458] usb 11-1: config 0 interface 190 altsetting 128 has a duplicate endpoint with address 0x3, skipping [ 213.494342][ T1458] usb 11-1: config 0 interface 190 altsetting 128 has a duplicate endpoint with address 0x6, skipping [ 213.497739][ T1458] usb 11-1: config 0 interface 190 altsetting 128 has a duplicate endpoint with address 0x3, skipping [ 213.501141][ T1458] usb 11-1: config 0 interface 190 altsetting 128 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 213.505342][ T1458] usb 11-1: too many endpoints for config 0 interface 84 altsetting 247: 50, using maximum allowed: 30 [ 213.508770][ T1458] usb 11-1: config 0 interface 84 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 50 [ 213.512738][ T1458] usb 11-1: config 0 interface 101 altsetting 91 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 213.517363][ T1458] usb 11-1: config 0 interface 190 has no altsetting 0 [ 213.519534][ T1458] usb 11-1: config 0 interface 84 has no altsetting 0 [ 213.521597][ T1458] usb 11-1: config 0 interface 101 has no altsetting 0 [ 213.525393][ T1458] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0084, bcdDevice=f7.93 [ 213.528209][ T1458] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.530742][ T1458] usb 11-1: Product: syz [ 213.532000][ T1458] usb 11-1: Manufacturer: syz [ 213.533383][ T1458] usb 11-1: SerialNumber: syz [ 213.539084][ T1458] usb 11-1: config 0 descriptor?? [ 213.541298][T12950] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 213.544513][T12950] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 213.546929][T12950] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 213.549664][T12950] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 213.552028][T12950] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 213.648809][ T830] hid_parser_main: 9 callbacks suppressed [ 213.648826][ T830] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 213.656166][ T830] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 213.659236][ T830] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 213.662325][ T830] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 213.665562][ T830] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 213.668694][ T830] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 213.671805][ T830] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 213.675002][ T830] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 213.677982][ T830] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 213.681099][ T830] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 213.692475][ T830] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 213.774435][ T1458] em28xx 11-1:0.190: New device syz syz @ 480 Mbps (0ccd:0084, interface 190, class 190) [ 213.777476][ T1458] em28xx 11-1:0.190: DVB interface 190 found: bulk [ 213.856830][ T1458] em28xx 11-1:0.190: unknown em28xx chip ID (0) [ 213.932445][ T1333] usb 12-1: USB disconnect, device number 9 [ 213.986830][ T1458] em28xx 11-1:0.190: reading from i2c device at 0xa0 failed (error=-5) [ 213.989525][ T1458] em28xx 11-1:0.190: board has no eeprom [ 214.058196][ T1458] em28xx 11-1:0.190: Identified as Terratec AV350 (card=68) [ 214.061310][ T1458] em28xx 11-1:0.190: dvb set to bulk mode. [ 214.065400][ T39] em28xx 11-1:0.190: Remote control support is not available for this card. [ 214.092664][T12967] dvmrp0: entered allmulticast mode [ 214.111701][ T1458] em28xx 11-1:0.101: audio device (0ccd:0084): interface 101, class 1 [ 214.120620][ T1458] usb 11-1: USB disconnect, device number 4 [ 214.137648][ T1458] em28xx 11-1:0.190: Disconnecting em28xx [ 214.141357][ T1458] em28xx 11-1:0.190: Closing input extension [ 214.209736][ T1458] em28xx 11-1:0.190: Freeing device [ 215.306363][ T39] usb 12-1: new full-speed USB device number 10 using dummy_hcd [ 215.480509][ T39] usb 12-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 215.484439][ T39] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.488896][ T39] usb 12-1: Product: syz [ 215.490603][ T39] usb 12-1: Manufacturer: syz [ 215.492607][ T39] usb 12-1: SerialNumber: syz [ 215.498605][ T39] usb 12-1: config 0 descriptor?? [ 215.719167][ T39] usb 12-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 216.080316][T13020] loop7: detected capacity change from 0 to 16384 [ 216.329133][T13021] loop7: detected capacity change from 16384 to 16383 [ 216.341894][ T9802] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.359024][ T9802] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.363813][ T9802] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 216.367477][ T9802] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.371506][ T9802] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.375182][ T9802] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 216.379085][ T9802] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.383394][ T9802] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.387298][ T9802] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 216.391117][ T9802] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.403158][ T9802] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.407225][ T9802] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 216.472557][ T5935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.476375][ T5935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.490123][ T5935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.495640][ T5935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.499780][ T5935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.607550][T13037] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.677251][T13037] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.750309][T13037] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.764703][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 216.764720][ T40] audit: type=1400 audit(1772168964.365:8684): avc: denied { write } for pid=13043 comm="syz.6.1959" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 216.779005][ T40] audit: type=1400 audit(1772168964.365:8685): avc: denied { open } for pid=13043 comm="syz.6.1959" path="/232/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 216.827134][T13037] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.838037][T13029] chnl_net:caif_netlink_parms(): no params data found [ 216.916031][T13029] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.918442][T13029] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.920744][T13029] bridge_slave_0: entered allmulticast mode [ 216.923552][T13029] bridge_slave_0: entered promiscuous mode [ 216.928266][T13029] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.930519][T13029] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.932939][T13029] bridge_slave_1: entered allmulticast mode [ 216.935696][T13029] bridge_slave_1: entered promiscuous mode [ 216.952658][T13029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.957508][T13029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.973663][T13029] team0: Port device team_slave_0 added [ 216.976862][T13029] team0: Port device team_slave_1 added [ 216.991220][T13029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.993531][T13029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.002636][T13029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.008435][T13029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.011365][T13029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.021706][T13029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.047414][T13029] hsr_slave_0: entered promiscuous mode [ 217.049665][T13029] hsr_slave_1: entered promiscuous mode [ 217.051838][T13029] debugfs: 'hsr0' already exists in 'hsr' [ 217.054132][T13029] Cannot create hsr debugfs directory [ 217.079693][ T78] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.096344][ T2305] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 217.100068][ T78] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.129538][ T78] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.132754][ T78] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.233084][ T39] dvb_usb_rtl28xxu 12-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 217.239421][ T39] usb 12-1: USB disconnect, device number 10 [ 217.279070][ T2305] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.283491][ T2305] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 217.290984][ T2305] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.294471][ T2305] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.297520][ T2305] usb 11-1: Product: syz [ 217.299006][ T2305] usb 11-1: Manufacturer: syz [ 217.300579][ T2305] usb 11-1: SerialNumber: syz [ 217.308184][ T2305] cdc_mbim 11-1:1.0: skipping garbage [ 217.520698][T13050] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 217.590439][ T40] audit: type=1400 audit(1772168965.144:8686): avc: denied { read } for pid=13054 comm="syz.2.1961" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 217.596803][ T40] audit: type=1400 audit(1772168965.144:8687): avc: denied { open } for pid=13054 comm="syz.2.1961" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 218.189626][T13050] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 218.198521][ T2305] cdc_mbim 11-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 218.200951][ T2305] cdc_mbim 11-1:1.0: setting rx_max = 2048 [ 218.255947][T13029] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 218.261832][T13029] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 218.268804][T13029] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 218.315155][T13029] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 218.409587][T13029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.412201][ T2305] cdc_mbim 11-1:1.0: setting tx_max = 184 [ 218.425264][T13029] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.427982][ T2305] cdc_mbim 11-1:1.0: cdc-wdm0: USB WDM device [ 218.432127][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.434757][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.439743][ T2305] wwan wwan0: port wwan0mbim0 attached [ 218.453834][ T2305] cdc_mbim 11-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 56:11:7e:c3:0f:a1 [ 218.456141][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.460461][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.628564][T13029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.629242][T13026] usb 11-1: USB disconnect, device number 5 [ 218.638412][T13026] cdc_mbim 11-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 218.676141][ T5288] Bluetooth: hci0: command tx timeout [ 218.683503][T13029] veth0_vlan: entered promiscuous mode [ 218.689906][T13029] veth1_vlan: entered promiscuous mode [ 218.728214][T13026] wwan wwan0: port wwan0mbim0 disconnected [ 218.744418][T13029] veth0_macvtap: entered promiscuous mode [ 218.879572][T13029] veth1_macvtap: entered promiscuous mode [ 219.010846][T13029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.021702][T13029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.032107][ T152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.035174][ T152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.051420][ T152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.054398][ T152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.096764][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.099298][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.137226][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.140043][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.475030][T13125] bridge_slave_1: left allmulticast mode [ 219.477582][T13125] bridge_slave_1: left promiscuous mode [ 219.480279][T13125] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.511955][T13125] bond0: (slave bond_slave_0): Releasing backup interface [ 219.603266][T13125] bond0: (slave bond_slave_1): Releasing backup interface [ 219.761618][ T40] audit: type=1400 audit(1772168967.180:8688): avc: denied { accept } for pid=13120 comm="syz.6.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 219.892007][T13125] team0: Port device team_slave_0 removed [ 219.912603][T13125] team0: Port device team_slave_1 removed [ 219.917695][T13125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.922061][T13125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.932294][T13125] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 219.978066][T13129] team0: Mode changed to "loadbalance" [ 220.199697][ T40] audit: type=1400 audit(1772168967.592:8689): avc: denied { listen } for pid=13137 comm="syz.7.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 220.756003][T13148] xt_hashlimit: size too large, truncated to 1048576 [ 220.890530][ T5288] Bluetooth: hci0: command tx timeout [ 220.931554][T13153] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 221.318875][T13167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1994'. [ 222.663225][ T40] audit: type=1326 audit(1772168969.910:8690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13186 comm="syz.7.2002" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527c99c799 code=0x7ffc0000 [ 222.674146][ T40] audit: type=1326 audit(1772168969.910:8691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13186 comm="syz.7.2002" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527c99c799 code=0x7ffc0000 [ 222.684241][ T40] audit: type=1326 audit(1772168969.910:8692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13186 comm="syz.7.2002" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527c99c799 code=0x7ffc0000 [ 222.693746][ T40] audit: type=1326 audit(1772168969.910:8693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13186 comm="syz.7.2002" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527c99c799 code=0x7ffc0000 [ 222.701468][ T40] audit: type=1326 audit(1772168969.910:8694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13186 comm="syz.7.2002" exe="/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f527c99c799 code=0x7ffc0000 [ 222.709046][ T40] audit: type=1326 audit(1772168969.910:8695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13186 comm="syz.7.2002" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f527c99c799 code=0x7ffc0000 [ 222.716313][ T40] audit: type=1326 audit(1772168969.910:8696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13186 comm="syz.7.2002" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f527c99c799 code=0x7ffc0000 [ 222.724363][ T40] audit: type=1326 audit(1772168969.910:8697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13186 comm="syz.7.2002" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f527c99c799 code=0x7ffc0000 [ 222.947938][ T2305] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 223.118457][ T2305] usb 6-1: Using ep0 maxpacket: 16 [ 223.119125][ T5288] Bluetooth: hci0: command tx timeout [ 223.128328][ T2305] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 223.132574][ T2305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.135848][ T2305] usb 6-1: Product: syz [ 223.137578][ T2305] usb 6-1: Manufacturer: syz [ 223.139728][ T2305] usb 6-1: SerialNumber: syz [ 223.144980][ T2305] usb 6-1: config 0 descriptor?? [ 223.152376][ T2305] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 224.291198][ T2305] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 224.295563][T13210] fuse: root generation should be zero [ 224.376994][ T2305] usb 6-1: USB disconnect, device number 12 [ 225.335156][ T5288] Bluetooth: hci0: command tx timeout [ 225.383938][T13233] netlink: 'syz.2.2016': attribute type 1 has an invalid length. [ 225.387253][T13233] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2016'. [ 226.128053][T13024] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 226.294407][T13024] usb 12-1: Using ep0 maxpacket: 32 [ 226.298872][T13024] usb 12-1: config 32 has an invalid interface number: 85 but max is 0 [ 226.301871][T13024] usb 12-1: config 32 has no interface number 0 [ 226.304354][T13024] usb 12-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.310720][T13024] usb 12-1: config 32 interface 85 has no altsetting 0 [ 226.315341][T13024] usb 12-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 226.319804][T13024] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.322790][T13024] usb 12-1: Product: syz [ 226.324306][T13024] usb 12-1: Manufacturer: syz [ 226.325880][T13024] usb 12-1: SerialNumber: syz [ 226.837111][ T2305] hid_parser_main: 5 callbacks suppressed [ 226.837125][ T2305] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 226.856140][ T2305] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 227.151025][T13024] appletouch 12-1:32.85: Geyser mode initialized. [ 227.155597][T13024] input: appletouch as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:32.85/input/input12 [ 227.185782][ C1] appletouch 12-1:32.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 227.403382][ T6287] usb 12-1: USB disconnect, device number 11 [ 227.407157][ C2] appletouch 12-1:32.85: atp_complete: usb_submit_urb failed with result -19 [ 227.492934][ T6287] appletouch 12-1:32.85: input: appletouch disconnected [ 227.780996][ T40] audit: type=1400 audit(1772168974.704:8698): avc: denied { write } for pid=13281 comm="syz.2.2033" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 227.874128][T13290] x_tables: ip_tables: osf match: only valid for protocol 6 [ 227.895864][T13292] syz_tun: entered allmulticast mode [ 227.902565][T13291] syz_tun: left allmulticast mode [ 228.422918][ T40] audit: type=1400 audit(1772168975.305:8699): avc: denied { create } for pid=13314 comm="syz.7.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 229.268340][T13026] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 229.281501][T13360] syzkaller0: entered promiscuous mode [ 229.283283][T13360] syzkaller0: entered allmulticast mode [ 229.428269][T13026] usb 12-1: Using ep0 maxpacket: 16 [ 229.431453][T13026] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.435086][T13026] usb 12-1: config 0 interface 0 has no altsetting 0 [ 229.437208][T13026] usb 12-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 229.440608][T13026] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.444697][T13026] usb 12-1: config 0 descriptor?? [ 229.679865][T13026] usbhid 12-1:0.0: can't add hid device: -71 [ 229.686656][T13026] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 229.695330][T13026] usb 12-1: USB disconnect, device number 12 [ 229.968536][ T40] audit: type=1400 audit(1772168976.759:8700): avc: denied { accept } for pid=13371 comm="syz.1.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 230.171191][ T40] audit: type=1400 audit(1772168976.946:8701): avc: denied { mount } for pid=13371 comm="syz.1.2067" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 230.917617][T13397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2077'. [ 230.972915][T13401] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 230.972915][T13401] The task syz.7.2076 (13401) triggered the difference, watch for misbehavior. [ 230.983467][T13404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2080'. [ 231.719768][ T1458] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 231.900928][ T1458] usb 11-1: Using ep0 maxpacket: 8 [ 231.903891][ T1458] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.907475][ T1458] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 231.910746][ T1458] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 231.926643][ T1458] usb 11-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 231.929577][ T1458] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.932117][ T1458] usb 11-1: Product: syz [ 231.933788][ T1458] usb 11-1: Manufacturer: syz [ 231.935275][ T1458] usb 11-1: SerialNumber: syz [ 231.940523][ T1458] usb 11-1: config 0 descriptor?? [ 232.028823][ T1458] rc_core: IR keymap rc-streamzap not found [ 232.030723][ T1458] Registered IR keymap rc-empty [ 232.032753][ T1458] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 232.037045][ T1458] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input13 [ 232.134613][T13444] kvm: Disabled LAPIC found during irq injection [ 232.193405][ T1458] usb 11-1: USB disconnect, device number 6 [ 232.344153][ T5999] kernel write not supported for file /input/event2 (pid: 5999 comm: kworker/2:3) [ 232.866798][ T5999] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 233.191282][ T5999] usb 12-1: Using ep0 maxpacket: 32 [ 233.195695][ T5999] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 233.199788][ T5999] usb 12-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 233.204165][ T5999] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 233.209427][ T5999] usb 12-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 233.212811][ T5999] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.215952][ T5999] usb 12-1: Product: syz [ 233.217659][ T5999] usb 12-1: Manufacturer: syz [ 233.219536][ T5999] usb 12-1: SerialNumber: syz [ 233.235496][ T5999] usb 12-1: config 0 descriptor?? [ 233.247257][ T5999] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/input/input14 [ 233.492573][T13024] usb 12-1: USB disconnect, device number 13 [ 233.492576][ C0] xpad 12-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 233.498839][ C0] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 234.063808][T13483] ip6tnl0: Caught tx_queue_len zero misconfig [ 234.066186][T13483] sch_fq: defrate 4294967295 ignored. [ 234.271119][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2112'. [ 234.287236][T13497] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.293597][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2112'. [ 234.296380][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2112'. [ 234.302921][T13497] netlink: 'syz.7.2112': attribute type 4 has an invalid length. [ 234.305423][T13497] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2112'. [ 234.308941][T13497] .`: renamed from bond0 [ 234.640409][ T5999] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 234.821669][ T5999] usb 12-1: Using ep0 maxpacket: 8 [ 234.826011][ T5999] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.830006][ T5999] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.836117][ T5999] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.840003][ T5999] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.846902][ T5999] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.850451][ T5999] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.200497][ T40] audit: type=1400 audit(1772168981.665:8702): avc: denied { mount } for pid=13520 comm="syz.6.2121" name="/" dev="hugetlbfs" ino=55381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 235.322387][ T5999] usb 12-1: GET_CAPABILITIES returned 0 [ 235.324143][ T5999] usbtmc 12-1:16.0: can't read capabilities [ 235.346447][ T5999] usb 12-1: USB disconnect, device number 14 [ 236.761613][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 236.924151][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 236.927644][ T24] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 236.930438][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.934780][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.939105][ T24] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 236.942198][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.947143][ T24] usb 6-1: config 0 descriptor?? [ 236.952162][ T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input15 [ 237.053180][ T40] audit: type=1326 audit(1772168983.411:8703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.6.2133" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234599c799 code=0x7ffc0000 [ 237.062895][ T40] audit: type=1326 audit(1772168983.420:8704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.6.2133" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234599c799 code=0x7ffc0000 [ 237.081097][ T40] audit: type=1326 audit(1772168983.429:8705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.6.2133" exe="/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f234599c799 code=0x7ffc0000 [ 237.090415][ T40] audit: type=1326 audit(1772168983.429:8706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.6.2133" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234599c799 code=0x7ffc0000 [ 237.111246][ T40] audit: type=1326 audit(1772168983.429:8707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.6.2133" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234599c799 code=0x7ffc0000 [ 237.328222][T13024] usb 6-1: USB disconnect, device number 13 [ 237.379214][T13563] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.390287][ T6287] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 237.401814][ T5321] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 237.560675][ T6287] usb 11-1: Using ep0 maxpacket: 8 [ 237.564076][ T6287] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.568236][ T6287] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 237.571195][ T6287] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 237.575089][ T6287] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 237.578933][ T6287] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 237.581797][ T6287] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.593460][ T6287] hub 11-1:1.0: bad descriptor, ignoring hub [ 237.598075][ T6287] hub 11-1:1.0: probe with driver hub failed with error -5 [ 237.600836][ T6287] cdc_wdm 11-1:1.0: skipping garbage [ 237.602590][ T6287] cdc_wdm 11-1:1.0: skipping garbage [ 237.605719][ T6287] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 237.607963][ T6287] cdc_wdm 11-1:1.0: Unknown control protocol [ 237.912449][T13566] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 237.915157][T13566] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 237.918357][T13566] vhci_hcd vhci_hcd.0: Device attached [ 237.923819][ T6287] usb 11-1: USB disconnect, device number 7 [ 237.926462][T13567] vhci_hcd: connection closed [ 237.927834][ T152] vhci_hcd vhci_hcd.1: stop threads [ 237.931725][ T152] vhci_hcd vhci_hcd.1: release socket [ 237.934064][ T152] vhci_hcd vhci_hcd.1: disconnect device [ 238.285567][T13024] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 238.447044][T13024] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.450651][T13024] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 238.453676][T13024] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 238.466629][T13024] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 238.469415][T13024] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.483181][T13559] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 238.486365][T13024] hub 11-1:1.0: bad descriptor, ignoring hub [ 238.489124][T13024] hub 11-1:1.0: probe with driver hub failed with error -5 [ 238.491632][T13024] cdc_wdm 11-1:1.0: skipping garbage [ 238.493276][T13024] cdc_wdm 11-1:1.0: skipping garbage [ 238.496461][T13024] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 238.498342][T13024] cdc_wdm 11-1:1.0: Unknown control protocol [ 238.544354][ T40] audit: type=1400 audit(1772168984.808:8708): avc: denied { read } for pid=13576 comm="syz.7.2142" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 238.554132][T13577] [ 238.695781][T13593] syz_tun: entered allmulticast mode [ 238.819714][ T5999] usb 11-1: USB disconnect, device number 8 [ 239.212991][T13024] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 239.383324][T13024] usb 12-1: Using ep0 maxpacket: 8 [ 239.386691][T13024] usb 12-1: config 0 has an invalid interface number: 55 but max is 0 [ 239.389268][T13024] usb 12-1: config 0 has no interface number 0 [ 239.391227][T13024] usb 12-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 239.394940][T13024] usb 12-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 239.398616][T13024] usb 12-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 239.402005][T13024] usb 12-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 239.406220][T13024] usb 12-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 239.409076][T13024] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.413007][T13024] usb 12-1: config 0 descriptor?? [ 239.417755][T13024] ldusb 12-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 239.576218][ T6287] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 239.639373][T13024] usb 12-1: USB disconnect, device number 15 [ 239.650940][T13024] ldusb 12-1:0.55: LD USB Device #0 now disconnected [ 239.748617][ T6287] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 239.752205][ T6287] usb 11-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 239.756203][ T6287] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 239.760355][ T6287] usb 11-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.765081][ T6287] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 239.769777][ T6287] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 239.775931][ T6287] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 239.780822][ T6287] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 239.784108][ T6287] usb 11-1: Product: syz [ 239.785885][ T6287] usb 11-1: Manufacturer: syz [ 239.791711][T13605] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 239.796089][ T6287] cdc_wdm 11-1:1.0: skipping garbage [ 239.798385][ T6287] cdc_wdm 11-1:1.0: skipping garbage [ 239.802293][ T6287] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 239.804741][ T6287] cdc_wdm 11-1:1.0: Unknown control protocol [ 239.923187][T13613] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 240.016007][ T40] audit: type=1400 audit(1772168986.188:8709): avc: denied { read write } for pid=13604 comm="syz.6.2152" name="cdc-wdm0" dev="devtmpfs" ino=3123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 240.024132][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 240.024242][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 240.026522][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 240.026534][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 240.028616][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 240.028627][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 240.030776][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 240.030786][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 240.032831][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 240.032842][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 240.035263][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 240.035273][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 240.037241][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 240.037252][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 240.044475][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 240.044488][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 240.046648][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 240.046659][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 240.048868][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 240.048879][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 240.071367][ T40] audit: type=1400 audit(1772168986.188:8710): avc: denied { open } for pid=13604 comm="syz.6.2152" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 240.130231][ T830] usb 11-1: USB disconnect, device number 9 [ 240.130290][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 241.312583][ T2305] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 241.408489][ T5999] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 241.472571][ T2305] usb 11-1: Using ep0 maxpacket: 32 [ 241.477303][ T2305] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 241.483600][ T2305] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 241.487425][ T2305] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 241.491960][ T2305] usb 11-1: Product: syz [ 241.494202][ T2305] usb 11-1: Manufacturer: syz [ 241.496157][ T2305] usb 11-1: SerialNumber: syz [ 241.506438][ T2305] usb 11-1: config 0 descriptor?? [ 241.509340][T13625] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 241.570632][ T5999] usb 6-1: unable to get BOS descriptor or descriptor too short [ 241.574566][ T5999] usb 6-1: not running at top speed; connect to a high speed hub [ 241.578901][ T5999] usb 6-1: config 3 has an invalid interface number: 189 but max is 0 [ 241.583233][ T5999] usb 6-1: config 3 has no interface number 0 [ 241.585963][ T5999] usb 6-1: config 3 interface 189 has no altsetting 0 [ 241.591171][ T5999] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f [ 241.594956][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.598248][ T5999] usb 6-1: Product: syz [ 241.600032][ T5999] usb 6-1: Manufacturer: syz [ 241.602764][ T5999] usb 6-1: SerialNumber: syz [ 241.796567][ T830] usb 11-1: USB disconnect, device number 10 [ 241.831291][ T5999] usb-storage 6-1:3.189: USB Mass Storage device detected [ 241.902352][ T5999] gspca_main: vc032x-2.14.0 probing 0ac8:0323 [ 241.905379][ T5999] gspca_vc032x: reg_r err -71 [ 241.907433][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.909717][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.911713][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.913337][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.915363][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.917567][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.919777][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.922084][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.924277][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.926630][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.928856][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.931449][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.933602][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.935809][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.938002][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.940194][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.942587][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.944789][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.946967][ T5999] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.949190][ T5999] gspca_vc032x: Unknown sensor... [ 241.951454][ T5999] vc032x 6-1:3.189: probe with driver vc032x failed with error -22 [ 241.956730][ T5999] usb 6-1: USB disconnect, device number 14 [ 242.358058][T13645] syzkaller0: entered promiscuous mode [ 242.359902][T13645] syzkaller0: entered allmulticast mode [ 242.405155][ T40] audit: type=1400 audit(1772168988.430:8711): avc: denied { write } for pid=13648 comm="syz.6.2169" lport=49539 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 243.626704][T13687] nvme_fabrics: missing parameter 'transport=%s' [ 243.629877][T13687] nvme_fabrics: missing parameter 'nqn=%s' [ 243.990031][T13703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.606882][ T5288] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 244.728854][T13715] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c0045005, magic 50 != 6b] [ 244.732052][ T40] audit: type=1400 audit(1772168990.607:8712): avc: denied { ioctl } for pid=13714 comm="syz.2.2194" path="/525/file0/file0" dev="fuse" ino=0 ioctlcmd=0x5005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 244.793101][ T40] audit: type=1400 audit(1772168990.663:8713): avc: denied { write } for pid=13722 comm="syz.2.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 245.032600][ T2305] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 245.184864][T13746] netlink: 'syz.2.2205': attribute type 1 has an invalid length. [ 245.193933][ T2305] usb 11-1: config 0 interface 0 has no altsetting 0 [ 245.198014][ T2305] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 245.201135][ T2305] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 245.204814][ T2305] usb 11-1: Product: syz [ 245.206396][ T2305] usb 11-1: Manufacturer: syz [ 245.208151][ T2305] usb 11-1: SerialNumber: syz [ 245.212448][ T2305] usb 11-1: config 0 descriptor?? [ 245.219113][ T2305] usb 11-1: selecting invalid altsetting 0 [ 245.435494][ T2305] usb 11-1: USB disconnect, device number 11 [ 245.618316][T13750] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 245.622599][T13750] block device autoloading is deprecated and will be removed. [ 246.588814][ T5999] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 246.621531][T13778] tipc: Started in network mode [ 246.625971][T13778] tipc: Node identity 7f000001, cluster identity 4711 [ 246.628972][T13778] tipc: Enabling of bearer rejected, failed to enable media [ 246.760771][ T5999] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.833821][ T5999] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 246.839162][ T5999] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.842202][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.845107][ T5999] usb 6-1: Product: syz [ 246.846488][ T5999] usb 6-1: Manufacturer: syz [ 246.848005][ T5999] usb 6-1: SerialNumber: syz [ 246.857147][ T5999] cdc_mbim 6-1:1.0: skipping garbage [ 247.086003][T13773] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 247.820125][T13773] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 247.822725][ T5999] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 247.825348][ T5999] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 248.037387][ T5999] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 248.041848][ T5999] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 248.053999][ T5999] wwan wwan0: port wwan0mbim0 attached [ 248.066898][ T5999] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 4a:e7:ea:33:a1:52 [ 248.155963][T13803] binder: 13802:13803 ioctl c0306201 0 returned -14 [ 248.240401][T13807] serio: Serial port ptm0 [ 248.252841][ T40] audit: type=1326 audit(1772168993.918:8714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.1.2216" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f032f99c799 code=0x0 [ 248.311346][ T5638] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 248.360602][ C0] wdm_int_callback: 303 callbacks suppressed [ 248.360617][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 248.365693][ C0] wdm_int_callback: 303 callbacks suppressed [ 248.365710][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 248.371112][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 248.374227][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 248.377132][ C0] cdc_mbim 6-1:1.0: nonzero urb status received: -71 [ 248.380218][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - 0 bytes [ 248.384660][ C0] cdc_mbim 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 248.389446][T13026] usb 6-1: USB disconnect, device number 15 [ 248.413992][T13026] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 248.585477][T13026] wwan wwan0: port wwan0mbim0 disconnected [ 248.603729][ T6287] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 248.780900][ T6287] usb 12-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 248.789814][ T6287] usb 12-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 248.793453][ T6287] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.796682][ T6287] usb 12-1: Product: syz [ 248.798588][ T6287] usb 12-1: Manufacturer: syz [ 248.805674][ T6287] usb 12-1: SerialNumber: syz [ 248.820814][ T6287] usb 12-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 249.039485][ T6287] usb 12-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 249.052179][ T6287] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 249.058891][ T6287] usb 12-1: media controller created [ 249.076113][ T6287] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.197144][ T6287] usb 12-1: USB disconnect, device number 16 [ 249.450981][T13853] tc_dump_action: action bad kind [ 249.484450][T13855] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2235'. [ 250.426283][ T2305] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 250.598798][ T2305] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.602464][ T2305] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.606761][ T2305] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 250.619397][ T2305] usb 11-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.627183][ T2305] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.631436][ T2305] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.634950][ T2305] usb 11-1: Product: syz [ 250.636862][ T2305] usb 11-1: Manufacturer: syz [ 250.638932][ T2305] usb 11-1: SerialNumber: syz [ 250.646628][ T2305] cdc_mbim 11-1:1.0: skipping garbage [ 250.866457][T13880] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 251.554406][T13880] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 251.576988][ T5999] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 251.747659][ T5999] usb 6-1: Using ep0 maxpacket: 8 [ 251.751238][ T5999] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.755106][ T5999] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 251.758166][ T5999] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 251.761899][ T5999] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 251.765700][ T5999] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 251.768923][ T5999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.791701][ T2305] cdc_mbim 11-1:1.0: bind() failure [ 251.800330][ T2305] cdc_ncm 11-1:1.1: probe with driver cdc_ncm failed with error -71 [ 251.803801][ T5999] hub 6-1:1.0: bad descriptor, ignoring hub [ 251.805738][ T5999] hub 6-1:1.0: probe with driver hub failed with error -5 [ 251.808255][ T5999] cdc_wdm 6-1:1.0: skipping garbage [ 251.809931][ T5999] cdc_wdm 6-1:1.0: skipping garbage [ 251.812630][ T2305] cdc_mbim 11-1:1.1: probe with driver cdc_mbim failed with error -71 [ 251.815882][ T2305] usbtest 11-1:1.1: probe with driver usbtest failed with error -71 [ 251.819950][ T2305] usb 11-1: USB disconnect, device number 12 [ 251.825395][ T5999] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 251.827377][ T5999] cdc_wdm 6-1:1.0: Unknown control protocol [ 252.195092][ T1026] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 252.366445][ T1026] usb 12-1: Using ep0 maxpacket: 32 [ 252.371501][ T1026] usb 12-1: config 0 has an invalid interface number: 255 but max is 0 [ 252.375204][ T1026] usb 12-1: config 0 has no interface number 0 [ 252.377996][ T1026] usb 12-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 252.382646][ T1026] usb 12-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 252.388454][ T1026] usb 12-1: config 0 interface 255 has no altsetting 0 [ 252.389184][T13026] usb 6-1: USB disconnect, device number 16 [ 252.393764][ T1026] usb 12-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 252.397682][ T1026] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.401182][ T1026] usb 12-1: Product: syz [ 252.403106][ T1026] usb 12-1: Manufacturer: syz [ 252.405120][ T1026] usb 12-1: SerialNumber: syz [ 252.411300][ T1026] usb 12-1: config 0 descriptor?? [ 252.417464][ T1026] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 252.421314][ T1026] dvb-usb: bulk message failed: -22 (4/0) [ 252.424242][ T1026] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 252.428617][ T1026] dvb-usb: bulk message failed: -22 (5/0) [ 252.432779][ T1026] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 252.440363][ T1026] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 252.444769][ T1026] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 252.448106][ T1026] usb 12-1: media controller created [ 252.460769][ T1026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.475126][ T1026] ttusb2: set interface to alts=3 failed [ 252.506319][ T1026] DVB: Unable to find symbol tda10086_attach() [ 252.508934][ T1026] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 252.512752][ T1026] dvb-usb: bulk message failed: -22 (4/0) [ 252.514925][ T1026] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 252.518166][ T1026] dvb-usb: bulk message failed: -22 (5/0) [ 252.520004][ T1026] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 252.523318][ T1026] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 252.642938][ T1026] usb 12-1: USB disconnect, device number 17 [ 252.664443][ T1026] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 253.946067][ T40] audit: type=1400 audit(1772168999.257:8715): avc: denied { map } for pid=13930 comm="syz.2.2264" path="socket:[56436]" dev="sockfs" ino=56436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 253.987094][T13934] syzkaller1: entered promiscuous mode [ 253.989118][T13934] syzkaller1: entered allmulticast mode [ 255.390567][ T6287] IPVS: starting estimator thread 0... [ 255.394021][T13965] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 255.488981][T13966] IPVS: using max 23 ests per chain, 55200 per kthread [ 256.220305][T13979] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2280'. [ 256.223566][T13979] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2280'. [ 256.353871][T13983] netlink: 'syz.2.2279': attribute type 1 has an invalid length. [ 256.671892][ T6287] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 256.842387][ T6287] usb 11-1: Using ep0 maxpacket: 8 [ 256.847640][ T6287] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 256.850556][ T6287] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.854465][ T6287] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.857877][ T6287] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.861345][ T6287] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.869134][ T6287] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 256.873376][ T6287] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.098569][ T6287] usb 11-1: usb_control_msg returned -32 [ 257.101321][ T6287] usbtmc 11-1:16.0: can't read capabilities [ 257.225353][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2288'. [ 257.477995][T14013] usbtmc 11-1:16.0: usb_control_msg returned -32 [ 257.481904][ T6287] usb 11-1: USB disconnect, device number 13 [ 257.611199][ T5288] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 257.745401][ T40] audit: type=1400 audit(1772169002.813:8716): avc: denied { read } for pid=14035 comm="syz.1.2303" path="socket:[55142]" dev="sockfs" ino=55142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 258.144439][T14049] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.148416][T14049] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.022847][T14060] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2313'. [ 259.152628][ T58] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.165938][ T58] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.170253][ T58] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.174132][ T58] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.178703][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2313'. [ 259.178748][ T58] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.186530][ T58] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.190591][ T58] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.194684][ T58] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.026794][T14118] netlink: 'syz.1.2332': attribute type 1 has an invalid length. [ 261.142584][T14122] kvm: pic: non byte write [ 261.219480][ T40] audit: type=1400 audit(1772169006.077:8717): avc: denied { search } for pid=14115 comm="syz.7.2331" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 261.228454][ T40] audit: type=1400 audit(1772169006.087:8718): avc: denied { search } for pid=14115 comm="syz.7.2331" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 261.236169][ T40] audit: type=1400 audit(1772169006.087:8719): avc: denied { read open } for pid=14115 comm="syz.7.2331" path="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 261.436247][ T830] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 261.542405][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2336'. [ 261.618915][ T830] usb 11-1: Using ep0 maxpacket: 16 [ 261.625377][ T830] usb 11-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 261.629497][ T830] usb 11-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 261.632922][ T830] usb 11-1: Product: syz [ 261.634884][ T830] usb 11-1: Manufacturer: syz [ 261.636908][ T830] usb 11-1: SerialNumber: syz [ 261.643976][ T830] usb 11-1: config 0 descriptor?? [ 261.867530][ T830] usb 11-1: USB disconnect, device number 14 [ 263.333479][T13026] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 263.493339][T13026] usb 6-1: Using ep0 maxpacket: 16 [ 263.576819][T13026] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.581343][T13026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.586470][T13026] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 263.593189][T13026] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 263.597173][T13026] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.603689][T13026] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 263.607477][T13026] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 263.612140][T13026] usb 6-1: Manufacturer: syz [ 263.617217][T13026] usb 6-1: config 0 descriptor?? [ 263.706829][ T830] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 263.866415][ T830] usb 11-1: Using ep0 maxpacket: 8 [ 263.869407][ T830] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 263.872499][ T830] usb 11-1: config 0 has no interface number 0 [ 263.874910][ T830] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 263.877062][T13026] rc_core: IR keymap rc-hauppauge not found [ 263.878608][ T830] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 263.883391][T13026] Registered IR keymap rc-empty [ 263.884803][ T830] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 263.887096][T13026] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 263.890565][ T830] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 263.897675][ T830] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 263.900647][ T830] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.904784][ T830] usb 11-1: config 0 descriptor?? [ 263.909181][T13026] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 263.911593][ T830] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 263.931620][T13026] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 263.938559][T13026] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input16 [ 263.946477][T13026] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 263.973091][T13026] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 263.994791][T13026] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.026461][T13026] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.047793][T13026] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.069094][T13026] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.090517][T13026] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.113723][T13026] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.132946][T13026] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.154254][T13026] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 264.178978][T13026] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 264.181905][T13026] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 264.184544][ T6287] usb 11-1: USB disconnect, device number 15 [ 264.184594][ C1] ldusb 11-1:0.55: usb_submit_urb failed (-19) [ 264.194461][ T6287] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 264.309316][T13026] usb 6-1: USB disconnect, device number 17 [ 264.717464][T14175] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2352'. [ 264.786824][T14177] sp0: Synchronizing with TNC [ 264.855955][ T40] audit: type=1400 audit(1772169009.474:8720): avc: denied { accept } for pid=14174 comm="syz.7.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 266.000940][T14208] xt_CT: No such helper "pptp" [ 267.026058][ T40] audit: type=1400 audit(1772169011.528:8721): avc: denied { create } for pid=14240 comm="syz.1.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 267.034322][ T40] audit: type=1400 audit(1772169011.538:8722): avc: denied { bind } for pid=14240 comm="syz.1.2373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 267.296304][T14254] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2379'. [ 267.302098][T14254] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2379'. [ 269.073238][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.284498][T14213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.931213][ T6287] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 270.113994][ T6287] usb 6-1: Using ep0 maxpacket: 32 [ 270.118267][ T6287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.122812][ T6287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.129158][ T6287] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 270.132940][ T6287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.139215][ T6287] usb 6-1: config 0 descriptor?? [ 270.765253][ T6287] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 270.941863][ T6287] ft260 0003:0403:6030.0009: chip code: 6421 8183 [ 271.155508][ T6287] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 271.584106][ T6287] ft260 0003:0403:6030.0009: failed to retrieve status: -71 [ 271.590270][ T6287] ft260 0003:0403:6030.0009: failed to reset I2C controller: -71 [ 271.612103][ T6287] usb 6-1: USB disconnect, device number 18 [ 271.765619][T14320] kAFS: No cell specified [ 272.127654][T14322] sctp: [Deprecated]: syz.6.2401 (pid 14322) Use of int in max_burst socket option deprecated. [ 272.127654][T14322] Use struct sctp_assoc_value instead [ 273.019691][T14336] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 273.366974][T14346] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2406'. [ 273.416640][ T6287] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 273.587523][ T6287] usb 6-1: Using ep0 maxpacket: 32 [ 273.590381][ T6287] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 273.593266][ T6287] usb 6-1: config 0 has no interface number 0 [ 273.595740][ T6287] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.599972][ T6287] usb 6-1: config 0 interface 85 has no altsetting 0 [ 273.604245][ T6287] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 273.607531][ T6287] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.610734][ T6287] usb 6-1: Product: syz [ 273.612084][ T6287] usb 6-1: Manufacturer: syz [ 273.613577][ T6287] usb 6-1: SerialNumber: syz [ 273.616409][ T6287] usb 6-1: config 0 descriptor?? [ 274.263238][ T6287] appletouch 6-1:0.85: Geyser mode initialized. [ 274.266418][ T6287] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.85/input/input17 [ 274.486087][ T6287] usb 6-1: USB disconnect, device number 19 [ 274.488747][ C3] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 274.782404][ T6287] appletouch 6-1:0.85: input: appletouch disconnected [ 274.904830][T14369] netlink: 'syz.7.2417': attribute type 10 has an invalid length. [ 274.912263][T14369] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 274.964023][T14369] bond4: option mode: unable to set because the bond device is up [ 275.082034][ T40] audit: type=1400 audit(1772169019.090:8723): avc: denied { listen } for pid=14379 comm="syz.1.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 275.583590][ T40] audit: type=1400 audit(1772169019.559:8724): avc: denied { kexec_image_load } for pid=14398 comm="syz.7.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 276.422454][T13026] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 276.590149][T13026] usb 11-1: unable to get BOS descriptor or descriptor too short [ 276.595041][T13026] usb 11-1: config 2 has an invalid interface number: 136 but max is 0 [ 276.597775][T13026] usb 11-1: config 2 has no interface number 0 [ 276.599865][T13026] usb 11-1: config 2 interface 136 has no altsetting 0 [ 276.611379][T13026] usb 11-1: New USB device found, idVendor=19d2, idProduct=0058, bcdDevice=b3.6f [ 276.614524][T13026] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.617168][T13026] usb 11-1: Product: syz [ 276.618608][T13026] usb 11-1: Manufacturer: syz [ 276.620181][T13026] usb 11-1: SerialNumber: syz [ 276.856369][T13026] usb 11-1: bad CDC descriptors [ 276.879345][T13026] usb 11-1: USB disconnect, device number 16 [ 277.224184][ T40] audit: type=1400 audit(1772169021.098:8725): avc: denied { setopt } for pid=14432 comm="syz.2.2434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 277.523804][T14454] ------------[ cut here ]------------ [ 277.526012][T14454] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002) [ 277.526024][T14454] WARNING: fs/exec.c:118 at path_noexec+0x1cf/0x230, CPU#3: syz.6.2444/14454 [ 277.533410][T14454] Modules linked in: [ 277.534504][ T40] audit: type=1400 audit(1772169021.389:8726): avc: denied { write } for pid=5861 comm="syz-executor" path="pipe:[6114]" dev="pipefs" ino=6114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 277.535632][T14454] CPU: 3 UID: 0 PID: 14454 Comm: syz.6.2444 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.547959][T14454] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 277.549881][T14454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 277.554475][T14454] RIP: 0010:path_noexec+0x1cf/0x230 [ 277.556962][T14454] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 3a fb 7d ff 83 e3 01 e8 52 00 7e ff 89 d8 5b 5d 41 5c e9 47 0c 08 09 e8 42 00 7e ff 90 <0f> 0b 90 e9 46 ff ff ff e8 04 61 ea ff e9 a3 fe ff ff e8 fa 60 ea [ 277.565205][T14454] RSP: 0018:ffffc9000e14fbd8 EFLAGS: 00010287 [ 277.567856][T14454] RAX: 00000000000000c6 RBX: 0000000000000000 RCX: ffffc90004469000 [ 277.571266][T14454] RDX: 0000000000080000 RSI: ffffffff828a9f5e RDI: ffff888012de8000 [ 277.574283][T14454] RBP: ffff88801f2ff520 R08: 0000000000000007 R09: 0000000000000000 [ 277.576944][T14454] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 277.579507][T14454] R13: 0000000000000001 R14: ffff888035567008 R15: 0000000000000000 [ 277.582099][T14454] FS: 00007f2343bf66c0(0000) GS:ffff8880d6647000(0000) knlGS:0000000000000000 [ 277.585488][T14454] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.588158][T14454] CR2: 000000110c372580 CR3: 00000000649f6000 CR4: 0000000000352ef0 [ 277.590721][T14454] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 277.593405][T14454] DR3: 00000000ffffdb67 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 277.596636][T14454] Call Trace: [ 277.597989][T14454] [ 277.598979][T14454] do_mmap+0x857/0x12f0 [ 277.600333][T14454] ? __pfx_do_mmap+0x10/0x10 [ 277.601841][T14454] ? __pfx_down_write_killable+0x10/0x10 [ 277.603771][T14454] vm_mmap_pgoff+0x29e/0x470 [ 277.605404][T14454] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 277.607091][T14454] ? __fget_files+0x215/0x3d0 [ 277.608657][T14454] ? __fget_files+0x21f/0x3d0 [ 277.610204][T14454] ksys_mmap_pgoff+0x3c8/0x650 [ 277.611781][T14454] ? __x64_sys_futex+0x34f/0x4d0 [ 277.613468][T14454] ? __x64_sys_futex+0x358/0x4d0 [ 277.615146][T14454] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 277.617162][T14454] ? xfd_validate_state+0x129/0x190 [ 277.619241][T14454] __x64_sys_mmap+0x125/0x190 [ 277.621217][T14454] do_syscall_64+0x106/0xf80 [ 277.623192][T14454] ? clear_bhb_loop+0x40/0x90 [ 277.625164][T14454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.627683][T14454] RIP: 0033:0x7f234599c799 [ 277.629592][T14454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.637783][T14454] RSP: 002b:00007f2343bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 277.641304][T14454] RAX: ffffffffffffffda RBX: 00007f2345c15fa0 RCX: 00007f234599c799 [ 277.644671][T14454] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 277.648132][T14454] RBP: 00007f2345a32bd9 R08: 0000000000000005 R09: 0000000000000000 [ 277.651490][T14454] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 277.654852][T14454] R13: 00007f2345c16038 R14: 00007f2345c15fa0 R15: 00007ffecafaaca8 [ 277.658276][T14454] [ 277.659725][T14454] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 277.663079][T14454] CPU: 3 UID: 0 PID: 14454 Comm: syz.6.2444 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.667664][T14454] Tainted: [L]=SOFTLOCKUP [ 277.669544][T14454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 277.673136][T14454] Call Trace: [ 277.674265][T14454] [ 277.675245][T14454] dump_stack_lvl+0x100/0x190 [ 277.676982][T14454] vpanic+0x552/0x970 [ 277.678705][T14454] ? __pfx_vpanic+0x10/0x10 [ 277.680479][T14454] panic+0xd1/0xe0 [ 277.682077][T14454] ? __pfx_panic+0x10/0x10 [ 277.684021][T14454] check_panic_on_warn.cold+0x19/0x34 [ 277.686176][T14454] ? path_noexec+0x1cf/0x230 [ 277.688089][T14454] __warn.cold+0x191/0x348 [ 277.689972][T14454] __report_bug+0x296/0x3d0 [ 277.691923][T14454] ? path_noexec+0x1cf/0x230 [ 277.693924][T14454] ? __pfx___report_bug+0x10/0x10 [ 277.695920][T14454] ? arch_get_unmapped_area_topdown+0x559/0xa50 [ 277.697976][T14454] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 277.700258][T14454] ? path_noexec+0x1cf/0x230 [ 277.702335][T14454] report_bug+0xb2/0x220 [ 277.704203][T14454] ? path_noexec+0x1cf/0x230 [ 277.706039][T14454] handle_bug+0x166/0x2a0 [ 277.707873][T14454] exc_invalid_op+0x17/0x50 [ 277.709595][T14454] asm_exc_invalid_op+0x1a/0x20 [ 277.711167][T14454] RIP: 0010:path_noexec+0x1cf/0x230 [ 277.712849][T14454] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 3a fb 7d ff 83 e3 01 e8 52 00 7e ff 89 d8 5b 5d 41 5c e9 47 0c 08 09 e8 42 00 7e ff 90 <0f> 0b 90 e9 46 ff ff ff e8 04 61 ea ff e9 a3 fe ff ff e8 fa 60 ea [ 277.719632][T14454] RSP: 0018:ffffc9000e14fbd8 EFLAGS: 00010287 [ 277.721642][T14454] RAX: 00000000000000c6 RBX: 0000000000000000 RCX: ffffc90004469000 [ 277.724047][T14454] RDX: 0000000000080000 RSI: ffffffff828a9f5e RDI: ffff888012de8000 [ 277.726594][T14454] RBP: ffff88801f2ff520 R08: 0000000000000007 R09: 0000000000000000 [ 277.729158][T14454] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 277.731691][T14454] R13: 0000000000000001 R14: ffff888035567008 R15: 0000000000000000 [ 277.734261][T14454] ? path_noexec+0x1ce/0x230 [ 277.735782][T14454] ? path_noexec+0x1ce/0x230 [ 277.737652][T14454] do_mmap+0x857/0x12f0 [ 277.739237][T14454] ? __pfx_do_mmap+0x10/0x10 [ 277.740737][T14454] ? __pfx_down_write_killable+0x10/0x10 [ 277.742593][T14454] vm_mmap_pgoff+0x29e/0x470 [ 277.744194][T14454] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 277.745845][T14454] ? __fget_files+0x215/0x3d0 [ 277.747440][T14454] ? __fget_files+0x21f/0x3d0 [ 277.749103][T14454] ksys_mmap_pgoff+0x3c8/0x650 [ 277.750737][T14454] ? __x64_sys_futex+0x34f/0x4d0 [ 277.752347][T14454] ? __x64_sys_futex+0x358/0x4d0 [ 277.753951][T14454] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 277.755688][T14454] ? xfd_validate_state+0x129/0x190 [ 277.757778][T14454] __x64_sys_mmap+0x125/0x190 [ 277.759819][T14454] do_syscall_64+0x106/0xf80 [ 277.761826][T14454] ? clear_bhb_loop+0x40/0x90 [ 277.763551][T14454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.765438][T14454] RIP: 0033:0x7f234599c799 [ 277.766916][T14454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.773163][T14454] RSP: 002b:00007f2343bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 277.775848][T14454] RAX: ffffffffffffffda RBX: 00007f2345c15fa0 RCX: 00007f234599c799 [ 277.778830][T14454] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 277.782073][T14454] RBP: 00007f2345a32bd9 R08: 0000000000000005 R09: 0000000000000000 [ 277.785425][T14454] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 277.788746][T14454] R13: 00007f2345c16038 R14: 00007f2345c15fa0 R15: 00007ffecafaaca8 [ 277.792105][T14454] [ 277.794439][T14454] Kernel Offset: disabled [ 277.796279][T14454] Rebooting in 86400 seconds..