last executing test programs: 5.234602144s ago: executing program 1 (id=40): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)='N', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='bbr', 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) 5.051929148s ago: executing program 1 (id=41): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, 0x0) sync() write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'b', ' *:* ', 'rm\x00'}, 0x9) 4.854330784s ago: executing program 1 (id=42): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r2, 0x2000) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x0, 0x0) 4.335746647s ago: executing program 3 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000002080102000000000000000002000005090001007379"], 0x20}, 0x1, 0x0, 0x0, 0x20008094}, 0x800) 4.308993448s ago: executing program 3 (id=48): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x1a2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x8, 0x40040001, 0x334, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.47003172s ago: executing program 1 (id=52): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, 0xffffffffffffffff, 0x0) r4 = socket(0x28, 0x801, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r2) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x400e178479490073}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x2000c054) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000680)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x800000100000003, 0x3a, 'U\x01\x8e\xa1\xff\xd6\xecF\x8e\x00\x00\x00\x00\x00\x00\x00\xedJIh\x9b\x1a\xde*\xb0d.', 0x3a, '\xda\xb8\xfd\xcd\x9a$\xb6\xc9\x0f\xff}\xcc\x92\xba\xafp\xa3\xbd\xf9\xc7\xb6\x8aG\x845\x95YC\xfc\r-dont_appB\xcf&\xd7*\xab\xb6\xde\xcd8\xcc\xe6\x1eG\xb8D\xcd\xfc~Uv\xfc\xd6\x16\x0e\xc5\xcc\xadab5\xf2\x85\xc0\x9e\x9b\x1a\x85v4\x83\xc6\xcb\x83\xbd\xda\xfe\xe8yP[\t\xdd\xab\xbd\xd9\xd2m\xf9o#\x18\xbf\xb9\xd0\xb8\fR7\x9f\xcb\xc7\xf9=w\"8\x1b\xa0\xado=N\xe7(9\xf2\xa2\r\n{\x01BT\xed!\xac#\x95#Hl\x1cV\b\x852\xe0m\xd0t\x15N\x13\bG\xd8\x8d\xb9)\xd2/\xf9\xb8#0\x14m\x83f\xb2\xab\xe3\xc8$$\v\x17]\x7f\xd5\x84\xf4:y\xcf\xbf\xacN!\n8\xd3\x88\xba4\x8c\x02.F\xdfY\xaf!\xf8\xe1!Q2l*\xeca\\\xc5\xeb\xb5CpT[v\x1f2\x12kq\xf0\xf2\xc7XZ_[\x16\x81\xd1a\xad\x18L#<\x85\xc36\x00\f\xafD\xbc\xd5HPs\x90B#B\xdeQ\xd2\xec\xc1\x80\xf1\xf7\x1d\xe5\x9dE:<\xfd\xf8\xe6\x05\x92\xc9&0\xc5\x82\xa0\xffd\x8d1\xa3\x94h\x8f&\x85\x99QP\xf3u\xb9a\xa6\x90\x01\xe8\xbcJ#\xbf\xe8\xb9\xfcEd_\x7f\x06\x94\x195z\xbf\x1f_\xbd\x90n\xcb\x15\xd2A\xb0\xe8\x92\x9e*\x160\xd2V\xe3\x8a\xa4!\xb4\xba\xa6>\x8d\xcc\xc1\xd5\x9aI\x1f%\xf07\xe7\xd4\x80\xc0\xd6\x13I*\xa4E\xac\xc8\xf9-1\xd0\x92\xc6\xde\x10\xed\v]\x13\xf6\\\xbe\x11\xe0\xfe\x8bJ\x17\x96B\xdf_\xad\t\xd2p\xe0\x9f\x9bOs\xdd\'W\xf62b\x02\xce%)Sv\x9e\r_5x<\x18C9\xe1\x18U\x126\xf5|\x1f\xe97x\x1e\x7fr\xb9\x99\xbe\x85\x1cX\xfe\xe6\x99\xa9(q\xab\xef]c-}\x0fnU\xfa\xbfb)\xba\nyI\xd0\x0fb\xbe\xa4\xc3\xe8.\x82\xdf\xff^\x84S\xdf\x12\x93A\xe4\x85I\xce\x8b\x9dX\xa8\'\x0e\xcay\xb6\xb2\xd6%\xeeh\xe3O\x06<\x91\xce\xa6o\x8b^\x96\xd4\xfbT\xfd\x1e\xa6\xaf\xc1\xc9a\xdf\x02\xfe\xfa\xdb\x1fm\x10xJ\x00\xf6\x9b\xb2', 0x3a, './file0'}, 0x25c) r6 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) fcntl$notify(r7, 0x402, 0x80000021) readv(r7, 0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 3.214974086s ago: executing program 3 (id=54): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 3.153739368s ago: executing program 1 (id=55): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, 0x20100, 0x8900}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x20008045}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100005800c"], 0x34}}, 0x4000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) r6 = socket$nl_generic(0x10, 0x3, 0x10) setitimer(0x1, &(0x7f0000000000)={{}, {0x20000000000000}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 3.061037631s ago: executing program 3 (id=56): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'vlan0\x00', &(0x7f00000001c0)=@ethtool_channels={0x1, 0x1, 0x0, 0xffffffff, 0x0, 0xffffdffc, 0x3, 0xfffffffc, 0x7}}) 3.0481704s ago: executing program 3 (id=57): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) 2.875073285s ago: executing program 3 (id=58): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d05}]}) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.68786672s ago: executing program 1 (id=61): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) accept$unix(0xffffffffffffffff, 0x0, 0x0) 2.205497322s ago: executing program 0 (id=66): userfaultfd(0x80001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) 2.083666916s ago: executing program 0 (id=67): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0x9, 0xffffffffffffffff, 'id1\x00'}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x4, 0x2, 0xffffffffffff48c7, 0x10001, 0xb88, 0x6, 0x6, 0x0, 0xfffffffffffffff6, 0x9, 0x6, 0x5, 0x200, 0x3000000, 0xdb3], 0x25000, 0x18004}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x8, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r8 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r8, &(0x7f0000000c00)='./nfsd\x00', 0x2, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800e2ffffff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000950a559aa97ce560d4c8ab27cb446decd08f1ffc3f4d040000009a54e8e9051b25dbb489eff3801ded78443f25ef24c346697727f8e85cba1b859d8a23c7b39d2f728f352d312a92ac4b9b75ffb27c74905ea32fa7a770e060e4a3dc776bdadb06a93070e5ca68d93f972c5704efd8bb733812204433abf902c7d6c076ea1574fbc2f7b9dde7358bd6980230"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r7}, &(0x7f0000000840), &(0x7f0000000a00)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.231016318s ago: executing program 0 (id=70): open(0x0, 0x4c27e, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x10a, 0x8000000000002}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x6bb, 0x0) 863.806517ms ago: executing program 4 (id=76): r0 = socket$inet(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) 804.392519ms ago: executing program 2 (id=77): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x1, 0x8) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x5760, &(0x7f0000000000)) write$binfmt_script(r2, &(0x7f0000000180)={'#! ', './file0'}, 0xb) 740.017491ms ago: executing program 4 (id=78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x9, 0x20, 0xa7, 0x2, 0x5, 0x9, 0x3}, {0x0, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x0, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x20, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x1, 0x1000000000000004}], 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x3, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) 710.948792ms ago: executing program 2 (id=79): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xff, 0x81, 0x7, 0x7fffffff, 0x7, "a19961dc211f7b858c2e7ce1748d8b10688df6", 0xfffffffb, 0xffff}) 663.070613ms ago: executing program 4 (id=80): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000009000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a2288ff000000000000002bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0160516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead88d7acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980dc58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952fd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2acc5014f74e420988486de2ace27ce59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba194fc70973b39525123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49963a195e2fdffe6bdce6fa78ab2ded1ff74f9e54f1b82da2d444f9727be708710b90a872282f4dce55468a681e"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 532.038836ms ago: executing program 4 (id=81): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000f6130001"], 0x38}}, 0x0) 531.772556ms ago: executing program 4 (id=82): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 495.001387ms ago: executing program 4 (id=83): write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 459.998708ms ago: executing program 2 (id=84): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000540)="f4efe0430444425a1a9942a2f606", 0xe, 0x0, &(0x7f0000000640)={0x11, 0x4, r12, 0x1, 0xff, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r10, 0x0, 0x4000000) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 335.936271ms ago: executing program 0 (id=85): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@security={'security\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0xb0, 0xb0, 0x0, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "1350190dc437442c653ad51ff8a2eb7792321a9f25705424471e3da2b75b"}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0xe}, 0xffffff00, 0x0, 'xfrm0\x00', 'veth0\x00', {0xff}, {}, 0x2e, 0x2, 0x11}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x5, 0xb, [0x2f, 0x27, 0x25, 0x13, 0x7, 0x2c, 0x2e, 0x11, 0x3c, 0x3a, 0xa, 0x9, 0x30, 0x0, 0x2, 0x30], 0x1, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x5, 0x4}, {0x3, 0x1, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 335.656242ms ago: executing program 2 (id=86): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041090}, 0x4000020) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='md0', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r3, 0x40480923, &(0x7f0000000380)='\x00\x00\x00\x00\x00\x00') ioctl(r3, 0x40140921, &(0x7f0000000420)="0100") ioctl(r3, 0x90000915, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) 335.541311ms ago: executing program 0 (id=87): mmap(&(0x7f0000200000/0x200000)=nil, 0x200000, 0x3, 0x40032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0x0, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) 262.177063ms ago: executing program 2 (id=88): read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020}, 0x2020) syz_open_dev$loop(0x0, 0x0, 0x4002) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x0, 0x4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 203.701185ms ago: executing program 0 (id=89): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x1}, 0xfffffffffffffe3b) connect$inet6(r1, &(0x7f0000000280)={0x2, 0x4e23, 0x5, @mcast1, 0x4}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000440)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x406, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0xffffffffffffffe8, 0x0, 0x0, 0x6}, 0xf) ioprio_set$pid(0x0, r3, 0x4004) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x379c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000004000)=""/4099, 0x1003) getpid() socket(0x1e, 0x1, 0x8) 0s ago: executing program 2 (id=90): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) r2 = socket(0x1e, 0x5, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) ioctl$TCSBRKP(r1, 0x5425, 0xfffffffffffffffd) ioctl$TCSBRKP(r1, 0x5425, 0x80000000) socket$inet6(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000000000000010000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3024000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 22.246770][ T28] audit: type=1400 audit(1787543429.331:64): avc: denied { mounton } for pid=280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.250960][ T280] cgroup: Unknown subsys name 'net' [ 22.269494][ T28] audit: type=1400 audit(1787543429.331:65): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.296947][ T28] audit: type=1400 audit(1787543429.361:66): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.298456][ T280] cgroup: Unknown subsys name 'devices' [ 22.440338][ T280] cgroup: Unknown subsys name 'hugetlb' [ 22.445982][ T280] cgroup: Unknown subsys name 'rlimit' [ 22.551370][ T28] audit: type=1400 audit(1787543429.641:67): avc: denied { setattr } for pid=280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.574640][ T28] audit: type=1400 audit(1787543429.641:68): avc: denied { mounton } for pid=280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.599563][ T28] audit: type=1400 audit(1787543429.641:69): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.621218][ T282] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.631886][ T28] audit: type=1400 audit(1787543429.721:70): avc: denied { relabelto } for pid=282 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.657462][ T28] audit: type=1400 audit(1787543429.721:71): avc: denied { write } for pid=282 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.657753][ T280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.683846][ T28] audit: type=1400 audit(1787543429.721:72): avc: denied { read } for pid=280 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.717355][ T28] audit: type=1400 audit(1787543429.721:73): avc: denied { open } for pid=280 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.884068][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.891263][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.898856][ T289] device bridge_slave_0 entered promiscuous mode [ 23.929318][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.936390][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.943906][ T289] device bridge_slave_1 entered promiscuous mode [ 23.965778][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.972896][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.980428][ T292] device bridge_slave_0 entered promiscuous mode [ 23.988622][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.995683][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.003183][ T292] device bridge_slave_1 entered promiscuous mode [ 24.030572][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.037645][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.045283][ T291] device bridge_slave_0 entered promiscuous mode [ 24.055249][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.062384][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.069852][ T291] device bridge_slave_1 entered promiscuous mode [ 24.089945][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.097031][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.104563][ T288] device bridge_slave_0 entered promiscuous mode [ 24.111710][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.118834][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.126317][ T288] device bridge_slave_1 entered promiscuous mode [ 24.211146][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.218295][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.225717][ T290] device bridge_slave_0 entered promiscuous mode [ 24.232829][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.240038][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.247558][ T290] device bridge_slave_1 entered promiscuous mode [ 24.387761][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.394866][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.402186][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.409266][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.419043][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.426111][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.445907][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.453001][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.460324][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.467396][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.478116][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.485240][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.492604][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.499663][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.546419][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.553517][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.560826][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.567902][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.588446][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.595640][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.603722][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.611181][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.618631][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.625816][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.633119][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.640331][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.647491][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.654792][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.674477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.682751][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.689827][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.709693][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.717887][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.724968][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.733486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.741040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.748643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.756118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.763743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.772238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.780681][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.787713][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.796142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.804412][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.811489][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.827812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.836082][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.843154][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.851366][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.859989][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.867044][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.874487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.882832][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.889876][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.918999][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.927350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.935774][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.942854][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.950312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.959643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.967614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.975777][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.983933][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.992215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.000462][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.008636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.016571][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.024741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.032754][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.041058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.061392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.069582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.077563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.085757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.094775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.103303][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.120265][ T292] device veth0_vlan entered promiscuous mode [ 25.129757][ T289] device veth0_vlan entered promiscuous mode [ 25.139894][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.149235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.157541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.165765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.174084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.181805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.189359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.197342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.205602][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.213321][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.221069][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.229014][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.245490][ T289] device veth1_macvtap entered promiscuous mode [ 25.257545][ T292] device veth1_macvtap entered promiscuous mode [ 25.264604][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.273082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.281684][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.290123][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.297174][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.304793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.313380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.321661][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.328726][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.336142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.344852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.353140][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.360838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.369318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.398060][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.406278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.414700][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.422917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.431819][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.440228][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.448759][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.457014][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.465453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.473761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.482197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.490590][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.499174][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.506700][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.517020][ T288] device veth0_vlan entered promiscuous mode [ 25.536166][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.545608][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.554941][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 25.575370][ T288] device veth1_macvtap entered promiscuous mode [ 25.595424][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.603537][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.611163][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.629804][ T291] device veth0_vlan entered promiscuous mode [ 25.644341][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.653279][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.661787][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.676149][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.684914][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.692813][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.710581][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.719204][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.727642][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.736486][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.746151][ T290] device veth0_vlan entered promiscuous mode [ 25.758313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.770728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.786378][ T290] device veth1_macvtap entered promiscuous mode [ 25.801019][ T291] device veth1_macvtap entered promiscuous mode [ 25.808028][ T323] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.810468][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.846044][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.855038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.873740][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.882143][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.891141][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.899822][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.908225][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.043483][ T310] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.070343][ T342] process 'syz.0.10' launched '/dev/fd/3' with NULL argv: empty string added [ 26.238174][ T310] usb 5-1: Using ep0 maxpacket: 16 [ 26.244696][ T310] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 26.257518][ T310] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 26.266158][ T310] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 26.274940][ T310] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 26.283518][ T310] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 26.293190][ T310] usb 5-1: config 0 has no interface number 0 [ 26.299690][ T310] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 26.311125][ T310] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 26.321536][ T310] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 26.331932][ T310] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 26.345706][ T310] usb 5-1: config 0 interface 125 has no altsetting 0 [ 26.353176][ T310] usb 5-1: config 0 interface 125 has no altsetting 2 [ 26.368642][ T310] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 26.377887][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.386218][ T310] usb 5-1: Product: syz [ 26.390799][ T310] usb 5-1: Manufacturer: syz [ 26.395471][ T310] usb 5-1: SerialNumber: syz [ 26.400458][ T327] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.413949][ T310] usb 5-1: config 0 descriptor?? [ 26.608192][ T327] usb 1-1: Using ep0 maxpacket: 32 [ 26.614852][ T327] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 26.625991][ T327] usb 1-1: config 0 has no interface number 0 [ 26.633885][ T327] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 26.643269][ T327] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.651489][ T327] usb 1-1: Product: syz [ 26.655800][ T327] usb 1-1: Manufacturer: syz [ 26.660902][ T327] usb 1-1: SerialNumber: syz [ 26.667732][ T19] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.675610][ T327] usb 1-1: config 0 descriptor?? [ 26.690918][ T327] smsc95xx v2.0.0 [ 26.868285][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 26.874925][ T19] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.895285][ T19] usb 4-1: config 0 has no interfaces? [ 26.900928][ T19] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 26.928594][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.949843][ T19] usb 4-1: config 0 descriptor?? [ 27.086518][ T327] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 27.097379][ T327] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 27.194569][ T378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.26'. [ 27.359728][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 27.359744][ T28] audit: type=1400 audit(1787543434.451:143): avc: denied { map_read map_write } for pid=382 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.688223][ T309] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 27.859255][ T397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.867784][ T397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.877066][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 27.888699][ T28] audit: type=1400 audit(1787543434.981:144): avc: denied { create } for pid=320 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.890820][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.918453][ T309] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 27.931610][ T309] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 27.940886][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.947043][ T28] audit: type=1400 audit(1787543434.981:145): avc: denied { bind } for pid=320 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.959468][ T309] usb 3-1: config 0 descriptor?? [ 27.973696][ T28] audit: type=1400 audit(1787543434.981:146): avc: denied { write } for pid=320 comm="syz.3.7" path="socket:[15869]" dev="sockfs" ino=15869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.055672][ T28] audit: type=1400 audit(1787543435.141:147): avc: denied { mounton } for pid=408 comm="syz.1.38" path="/proc/40/task" dev="proc" ino=16910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 28.092834][ T28] audit: type=1400 audit(1787543435.181:148): avc: denied { create } for pid=410 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 28.848598][ T309] usb 3-1: string descriptor 0 read error: -71 [ 28.855603][ T309] usbhid 3-1:0.0: can't add hid device: -22 [ 28.861660][ T309] usbhid: probe of 3-1:0.0 failed with error -22 [ 28.869298][ T309] usb 3-1: USB disconnect, device number 2 [ 28.915449][ T327] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 28.925127][ T328] usb 4-1: USB disconnect, device number 2 [ 28.931120][ T327] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 28.951920][ T327] usb 1-1: USB disconnect, device number 2 [ 28.991385][ T28] audit: type=1400 audit(1787543436.081:149): avc: denied { create } for pid=431 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.012231][ T28] audit: type=1400 audit(1787543436.081:150): avc: denied { write } for pid=431 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.039711][ T28] audit: type=1400 audit(1787543436.081:151): avc: denied { nlmsg_write } for pid=431 comm="syz.3.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.079934][ T222] usb 5-1: USB disconnect, device number 2 [ 29.706956][ T28] audit: type=1400 audit(1787543436.341:152): avc: denied { map } for pid=436 comm="syz.3.48" path="socket:[16965]" dev="sockfs" ino=16965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 30.198172][ T222] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 30.878235][ T327] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.948945][ T481] serio: Serial port ttynull [ 31.089301][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.107663][ T327] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 31.129107][ T327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.148215][ T222] usb 5-1: Using ep0 maxpacket: 32 [ 31.148392][ T327] usb 4-1: config 0 descriptor?? [ 31.212940][ T486] netlink: 40 bytes leftover after parsing attributes in process `syz.4.50'. [ 31.254571][ T222] usb 5-1: unable to get BOS descriptor or descriptor too short [ 31.263449][ T222] usb 5-1: too many configurations: 80, using maximum allowed: 8 [ 31.281592][ T222] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 31.289290][ T222] usb 5-1: can't read configurations, error -71 [ 32.112745][ T327] usbhid 4-1:0.0: can't add hid device: -71 [ 32.118942][ T327] usbhid: probe of 4-1:0.0 failed with error -71 [ 32.139740][ T327] usb 4-1: USB disconnect, device number 3 [ 32.434492][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 32.434507][ T28] audit: type=1400 audit(1787543439.521:167): avc: denied { name_bind } for pid=505 comm="syz.2.73" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 32.497954][ T512] syz.4.76 uses obsolete (PF_INET,SOCK_PACKET) [ 32.500062][ T511] netlink: 164 bytes leftover after parsing attributes in process `syz.2.75'. [ 32.515315][ T327] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.527047][ T28] audit: type=1400 audit(1787543439.611:168): avc: denied { bind } for pid=510 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.613599][ T516] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 32.695164][ T28] audit: type=1400 audit(1787543439.781:169): avc: denied { prog_run } for pid=522 comm="syz.4.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.719378][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.736330][ T327] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 32.755628][ T327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.781087][ T327] usb 4-1: config 0 descriptor?? [ 32.905096][ T533] device syzkaller0 entered promiscuous mode [ 32.915594][ T533] tipc: Started in network mode [ 32.920916][ T533] tipc: Node identity 7ac047207fc, cluster identity 4711 [ 32.928627][ T533] tipc: Enabled bearer , priority 0 [ 32.936774][ T532] tipc: Resetting bearer [ 32.944219][ T532] tipc: Disabling bearer [ 33.018908][ T28] audit: type=1400 audit(1787543440.101:170): avc: denied { mount } for pid=536 comm="syz.2.86" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 33.020996][ T537] Zero length message leads to an empty skb [ 33.065140][ T28] audit: type=1400 audit(1787543440.151:171): avc: denied { mount } for pid=536 comm="syz.2.86" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 33.107651][ T28] audit: type=1400 audit(1787543440.181:172): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 33.128205][ T445] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 33.162433][ T28] audit: type=1400 audit(1787543440.191:173): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 33.288389][ T542] syz.2.88 (542) used greatest stack depth: 21800 bytes left [ 33.361817][ T547] ======================================================= [ 33.361817][ T547] WARNING: The mand mount option has been deprecated and [ 33.361817][ T547] and is ignored by this kernel. Remove the mand [ 33.361817][ T547] option from the mount to silence this warning. [ 33.361817][ T547] ======================================================= [ 33.405480][ T547] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 33.445994][ T547] overlayfs: failed to look up (tracing) for ino (-66) [ 33.538319][ T28] audit: type=1400 audit(1787543440.491:174): avc: denied { mount } for pid=543 comm="syz.0.89" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 33.664826][ T28] audit: type=1400 audit(1787543440.501:175): avc: denied { mount } for pid=543 comm="syz.0.89" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.689812][ T327] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 33.742494][ T327] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input4 [ 33.824005][ C1] ================================================================================ [ 33.833373][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 33.842034][ C1] index 33159 is out of range for type 'const int[34]' [ 33.849002][ C1] CPU: 1 PID: 289 Comm: syz-executor Not tainted syzkaller #0 [ 33.856497][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.866679][ C1] Call Trace: [ 33.869985][ C1] [ 33.872853][ C1] __dump_stack+0x21/0x24 [ 33.877278][ C1] dump_stack_lvl+0x110/0x170 [ 33.882004][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 33.887080][ C1] dump_stack+0x15/0x24 [ 33.891270][ C1] ubsan_epilogue+0xe/0x40 [ 33.895736][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 33.901502][ C1] aiptek_irq+0x2045/0x29b0 [ 33.906040][ C1] ? kcov_remote_start+0x2c4/0x370 [ 33.911200][ C1] __usb_hcd_giveback_urb+0x360/0x520 [ 33.916614][ C1] usb_hcd_giveback_urb+0x11f/0x3e0 [ 33.921941][ C1] dummy_timer+0xa25/0x3270 [ 33.926489][ C1] ? sched_clock_cpu+0x6e/0x260 [ 33.931380][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 33.936362][ C1] ? timerqueue_del+0xd3/0x120 [ 33.941181][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 33.946156][ C1] __hrtimer_run_queues+0x398/0x890 [ 33.951411][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 33.956628][ C1] hrtimer_run_softirq+0x19b/0x260 [ 33.961771][ C1] handle_softirqs+0x1d7/0x600 [ 33.966576][ C1] __irq_exit_rcu+0x52/0xf0 [ 33.971112][ C1] irq_exit_rcu+0x9/0x10 [ 33.975400][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 33.981116][ C1] [ 33.984072][ C1] [ 33.987074][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 33.993109][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80 [ 33.999564][ C1] Code: 80 db 0d 87 e8 7c f1 b5 fc 4c 89 f7 48 83 3d 01 dc 0c 02 00 74 30 e8 9e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d6 96 4b fc 65 8b 05 27 6e 01 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 34.019211][ C1] RSP: 0018:ffffc9000c66fb30 EFLAGS: 00000206 [ 34.025796][ C1] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000 [ 34.033801][ C1] RDX: 0000000000000000 RSI: 0000000000000a06 RDI: 0000000000000001 [ 34.041802][ C1] RBP: ffffc9000c66fb40 R08: ffffc9000c66fd17 R09: ffffc9000c66fd08 [ 34.049804][ C1] R10: dffffc0000000000 R11: fffff520018cdfa3 R12: 0000000000000a06 [ 34.057814][ C1] R13: ffffc9000c66fd00 R14: dffffc0000000000 R15: ffffc9000c66fd30 [ 34.065824][ C1] hrtimer_start_range_ns+0xa79/0xb90 [ 34.071260][ C1] do_nanosleep+0x125/0x540 [ 34.075796][ C1] ? __update_load_avg_cfs_rq+0xb1/0x2e0 [ 34.081468][ C1] ? usleep_range_state+0x130/0x130 [ 34.086714][ C1] ? memset+0x35/0x40 [ 34.090762][ C1] ? hrtimer_init_sleeper+0x10c/0x370 [ 34.096271][ C1] hrtimer_nanosleep+0x151/0x340 [ 34.101256][ C1] ? __cfi_hrtimer_nanosleep+0x10/0x10 [ 34.106767][ C1] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 34.112005][ C1] ? get_timespec64+0x116/0x1b0 [ 34.116909][ C1] ? __cfi_get_timespec64+0x10/0x10 [ 34.122150][ C1] ? __schedule+0xbea/0x14b0 [ 34.126790][ C1] common_nsleep+0x8f/0xb0 [ 34.131249][ C1] __se_sys_clock_nanosleep+0x31c/0x3b0 [ 34.136833][ C1] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 34.142529][ C1] ? __kasan_check_write+0x14/0x20 [ 34.147707][ C1] __x64_sys_clock_nanosleep+0x9b/0xb0 [ 34.153234][ C1] x64_sys_call+0x186/0x9a0 [ 34.157821][ C1] do_syscall_64+0x4c/0xa0 [ 34.162319][ C1] ? clear_bhb_loop+0x30/0x80 [ 34.167041][ C1] ? clear_bhb_loop+0x30/0x80 [ 34.171753][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.177714][ C1] RIP: 0033:0x7fa27b559257 [ 34.182186][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 34.201822][ C1] RSP: 002b:00007ffe7488f8a0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 34.210270][ C1] RAX: ffffffffffffffda RBX: 000055557b70c500 RCX: 00007fa27b559257 [ 34.218270][ C1] RDX: 00007ffe7488f8e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.226292][ C1] RBP: 00007ffe7488f94c R08: 0000000000000000 R09: 0000000000000000 [ 34.234324][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 34.242336][ C1] R13: 00000000000927c0 R14: 000000000000839a R15: 00007ffe7488f9a0 [ 34.250356][ C1] [ 34.253421][ C1] ================================================================================ [ 34.262719][ C1] ================================================================================ [ 34.272013][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 34.280629][ C1] index 33160 is out of range for type 'const int[34]' [ 34.287509][ C1] CPU: 1 PID: 289 Comm: syz-executor Not tainted syzkaller #0 [ 34.294999][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.305075][ C1] Call Trace: [ 34.308378][ C1] [ 34.311251][ C1] __dump_stack+0x21/0x24 [ 34.315622][ C1] dump_stack_lvl+0x110/0x170 [ 34.320330][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 34.325424][ C1] dump_stack+0x15/0x24 [ 34.329610][ C1] ubsan_epilogue+0xe/0x40 [ 34.334061][ C1] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 34.339814][ C1] aiptek_irq+0x1f14/0x29b0 [ 34.344380][ C1] ? kcov_remote_start+0x2c4/0x370 [ 34.349545][ C1] __usb_hcd_giveback_urb+0x360/0x520 [ 34.354989][ C1] usb_hcd_giveback_urb+0x11f/0x3e0 [ 34.360227][ C1] dummy_timer+0xa25/0x3270 [ 34.364772][ C1] ? sched_clock_cpu+0x6e/0x260 [ 34.369665][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 34.374638][ C1] ? timerqueue_del+0xd3/0x120 [ 34.379437][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 34.384405][ C1] __hrtimer_run_queues+0x398/0x890 [ 34.389662][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 34.394838][ C1] hrtimer_run_softirq+0x19b/0x260 [ 34.399984][ C1] handle_softirqs+0x1d7/0x600 [ 34.404791][ C1] __irq_exit_rcu+0x52/0xf0 [ 34.409325][ C1] irq_exit_rcu+0x9/0x10 [ 34.413601][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 34.419280][ C1] [ 34.422256][ C1] [ 34.425208][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 34.431237][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x55/0x80 [ 34.437690][ C1] Code: 80 db 0d 87 e8 7c f1 b5 fc 4c 89 f7 48 83 3d 01 dc 0c 02 00 74 30 e8 9e 0d 00 00 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 d6 96 4b fc 65 8b 05 27 6e 01 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 34.457338][ C1] RSP: 0018:ffffc9000c66fb30 EFLAGS: 00000206 [ 34.463443][ C1] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000 [ 34.471497][ C1] RDX: 0000000000000000 RSI: 0000000000000a06 RDI: 0000000000000001 [ 34.479501][ C1] RBP: ffffc9000c66fb40 R08: ffffc9000c66fd17 R09: ffffc9000c66fd08 [ 34.487513][ C1] R10: dffffc0000000000 R11: fffff520018cdfa3 R12: 0000000000000a06 [ 34.495511][ C1] R13: ffffc9000c66fd00 R14: dffffc0000000000 R15: ffffc9000c66fd30 [ 34.503525][ C1] hrtimer_start_range_ns+0xa79/0xb90 [ 34.508951][ C1] do_nanosleep+0x125/0x540 [ 34.513505][ C1] ? __update_load_avg_cfs_rq+0xb1/0x2e0 [ 34.519211][ C1] ? usleep_range_state+0x130/0x130 [ 34.524448][ C1] ? memset+0x35/0x40 [ 34.528455][ C1] ? hrtimer_init_sleeper+0x10c/0x370 [ 34.533867][ C1] hrtimer_nanosleep+0x151/0x340 [ 34.538871][ C1] ? __cfi_hrtimer_nanosleep+0x10/0x10 [ 34.544374][ C1] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 34.549605][ C1] ? get_timespec64+0x116/0x1b0 [ 34.554489][ C1] ? __cfi_get_timespec64+0x10/0x10 [ 34.559711][ C1] ? __schedule+0xbea/0x14b0 [ 34.564340][ C1] common_nsleep+0x8f/0xb0 [ 34.568790][ C1] __se_sys_clock_nanosleep+0x31c/0x3b0 [ 34.574380][ C1] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 34.578156][ C0] sched: RT throttling activated [ 34.584971][ C1] ? __kasan_check_write+0x14/0x20 [ 34.590101][ C1] __x64_sys_clock_nanosleep+0x9b/0xb0 [ 34.595585][ C1] x64_sys_call+0x186/0x9a0 [ 34.600112][ C1] do_syscall_64+0x4c/0xa0 [ 34.604549][ C1] ? clear_bhb_loop+0x30/0x80 [ 34.609238][ C1] ? clear_bhb_loop+0x30/0x80 [ 34.613929][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 34.619845][ C1] RIP: 0033:0x7fa27b559257 [ 34.624275][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 34.643909][ C1] RSP: 002b:00007ffe7488f8a0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 34.652348][ C1] RAX: ffffffffffffffda RBX: 000055557b70c500 RCX: 00007fa27b559257 [ 34.660368][ C1] RDX: 00007ffe7488f8e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 34.668360][ C1] RBP: 00007ffe7488f94c R08: 0000000000000000 R09: 0000000000000000 [ 34.676348][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 34.684342][ C1] R13: 00000000000927c0 R14: 000000000000839a R15: 00007ffe7488f9a0 [ 34.692332][ C1] [ 34.695362][ C1] ================================================================================ [ 34.855708][ T445] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 34.874761][ T445] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 34.886392][ T28] audit: type=1400 audit(1787543441.961:176): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 34.921068][ T445] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 34.931804][ T445] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.940081][ T445] usb 5-1: Product: syz [ 34.944490][ T445] usb 5-1: Manufacturer: syz [ 34.949798][ T445] usb 5-1: SerialNumber: syz [ 34.958465][ T445] usb 5-1: config 0 descriptor?? [ 34.969843][ T531] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 34.977559][ T531] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 34.993807][ T327] usb 4-1: USB disconnect, device number 4 [ 34.993845][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 35.187614][ T531] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 35.195190][ T531] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 35.260271][ T552] syz.2.90 (552) used greatest stack depth: 21096 bytes left [ 35.405338][ T445] Error reading MAC address [ 35.416120][ T445] usb 5-1: USB disconnect, device number 5