last executing test programs: 2m53.216331414s ago: executing program 0 (id=1330): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}], 0x1, 0x28004145) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xfff0}, 0x0) 2m53.07290246s ago: executing program 0 (id=1331): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x4e22, 0xfffffffd, @local}, 0x0, {[0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x9]}}, 0x5c) r7 = socket$inet6(0xa, 0x400000000001, 0x7) sendto$inet6(r7, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0xffffffffffffff18) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x9}]}) fsopen(0x0, 0x1) close_range(r8, 0xffffffffffffffff, 0x2000000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x33f9, 0x72, 0x0, 0x7fff0000}]}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) chown(&(0x7f00000002c0)='./file0\x00', 0x0, r9) 2m50.183856392s ago: executing program 0 (id=1343): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x28}}, 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000100000008000100911b3d370c0004800500030080000000080002"], 0x30}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc5", 0xbf, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) accept4(r0, &(0x7f00000002c0)=@alg, &(0x7f0000000340)=0x80, 0xc0800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {0x0}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea9", 0x96}], 0x4}, 0x41) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m48.884528915s ago: executing program 0 (id=1346): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b27a9b3a6645cb3580000000400000001009a", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fsopen(0x0, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioperm(0x5, 0x6, 0x1) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x8040) socket(0x2, 0x80805, 0x0) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) read$FUSE(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r4 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000640)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}, 0x0, 0x0, 0x2, 0x100000000, 0xff, 0x1, 0xfffffffffffffffe, 0x9, 0x3, 0x7, r3, r4}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x4100149f, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0xffffffffffffffdd, 0x1000000000000001) socketpair$unix(0x1, 0x1, 0x0, 0x0) 2m46.66723219s ago: executing program 0 (id=1349): r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a5a44000000001010902440001fd00000009040000ff0202"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 2m40.593709066s ago: executing program 0 (id=1365): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000a80)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, '|6M', 0x6, 0x2f, 0xff, @mcast2, @private0, [@fragment={0x33, 0x0, 0x1a, 0x0, 0x0, 0x8, 0x66}]}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)={0x20, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) 2m25.281632761s ago: executing program 32 (id=1365): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000a80)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, '|6M', 0x6, 0x2f, 0xff, @mcast2, @private0, [@fragment={0x33, 0x0, 0x1a, 0x0, 0x0, 0x8, 0x66}]}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)={0x20, 0x40, 0x107, 0xfffffffe, 0x10000, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r0, 0x0) 2m21.865871648s ago: executing program 3 (id=1443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xb, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), 0x0}, 0x20) 2m21.68382823s ago: executing program 3 (id=1444): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) 2m21.555135112s ago: executing program 3 (id=1446): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap$KVM_VCPU(&(0x7f0000055000/0x2000)=nil, 0x0, 0x3000006, 0x4000010, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x7, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x2, 0x11, 0xf1, 0x0, 0x3, 0x7, 0x45, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x4000, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m21.217805257s ago: executing program 3 (id=1449): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r0 = getpid() setns(0xffffffffffffffff, 0x24020000) syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x98d0d9, 0x0) umount2(&(0x7f000001a100)='./file0\x00', 0x0) 2m20.878100863s ago: executing program 3 (id=1452): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x1003ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x9d1, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmsg$inet_nvme(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x2000) 2m20.368156729s ago: executing program 3 (id=1456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000000b400)={0xa, 0x4e22, 0x8, @mcast2, 0xe}, 0x1c) 2m19.95957298s ago: executing program 33 (id=1456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000000b400)={0xa, 0x4e22, 0x8, @mcast2, 0xe}, 0x1c) 1m15.522898568s ago: executing program 5 (id=1711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x2000c050) 1m13.763852923s ago: executing program 5 (id=1719): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x3, 0x7ffe}, 0x2f) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x3db}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) 1m10.859526155s ago: executing program 5 (id=1727): socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$MSR(&(0x7f0000000340), 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xffff7ffc) syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x1af}, &(0x7f00000004c0), &(0x7f0000000000), 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x21801, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x400302, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000000280)={0x0, 0x0}) 1m9.880115903s ago: executing program 5 (id=1732): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90a4edc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000236c52aef7bb4300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x8000000000000, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x40, 0x0, 0xffff, 0x70000, 0xe000, '\x00', 0x654}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m8.288136693s ago: executing program 5 (id=1737): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001e40)=@mangle={'mangle\x00', 0x2, 0x6, 0x540, 0x140, 0x210, 0x0, 0x0, 0x210, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xffffffff, 0x5, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x81, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffffffff, 0xfffffff6}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x570}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x3a1dc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x20004000) r4 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x80, 0x40) read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x81800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}, {@cache_loose}, {@loose}, {@cache_fscache}, {@noextend}, {@nodevmap}, {@privport}, {@access_user}, {@aname}, {@noxattr}], [{@pcr={'pcr', 0x3d, 0x3e}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_type={'obj_type', 0x3d, '.\\\\#'}}, {@obj_user={'obj_user', 0x3d, '+],\xbc'}}]}}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd, 0x13, r3, 0xa6a88000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1m7.817424416s ago: executing program 5 (id=1738): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x98f90a, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0xffffffffffffffff) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) prlimit64(0x0, 0xa, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYBLOB="2c7766646e6f3d4fc257126750dfaeda6526fbf8cae0376e592e5c9ff0898783ffeb3f069ba17c8710da0530845b9d895d93ae3e683d4016f9228f68099626808ecc7960d3a815cbb4a434758c5e9883", @ANYRESHEX]) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0) r6 = getpid() r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newtaction={0x128, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x114, 0x1, [@m_skbedit={0xc8, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x7a, 0x6, "047ad245cfe0809a910f88a4ee2ca5a95059ce5b198e4cbc8d3a058619ced43e63671fdbcb098ec84a4499f8864f3ab4630cd96367204f85d5f57cf65afe3b7a1c801608046f693439ccc2ea150a426e2a2a91d50bc7efa276052159391ef0dbc0998c3077c495100f7ed85f5223d84eff46873a1000"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) syz_pidfd_open(r6, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000001900)=@urb_type_iso={0x0, {0x3}, 0x8, 0x42, &(0x7f0000000880), 0x0, 0xffff, 0x3, 0x1, 0x7, 0x3, 0x0, [{0x7, 0x0, 0xfff}]}) mincore(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xfffffffffffffffc) 52.100350892s ago: executing program 34 (id=1738): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x98f90a, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0xffffffffffffffff) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) prlimit64(0x0, 0xa, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX, @ANYBLOB="2c7766646e6f3d4fc257126750dfaeda6526fbf8cae0376e592e5c9ff0898783ffeb3f069ba17c8710da0530845b9d895d93ae3e683d4016f9228f68099626808ecc7960d3a815cbb4a434758c5e9883", @ANYRESHEX]) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0) r6 = getpid() r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newtaction={0x128, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x114, 0x1, [@m_skbedit={0xc8, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x7a, 0x6, "047ad245cfe0809a910f88a4ee2ca5a95059ce5b198e4cbc8d3a058619ced43e63671fdbcb098ec84a4499f8864f3ab4630cd96367204f85d5f57cf65afe3b7a1c801608046f693439ccc2ea150a426e2a2a91d50bc7efa276052159391ef0dbc0998c3077c495100f7ed85f5223d84eff46873a1000"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) syz_pidfd_open(r6, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000001900)=@urb_type_iso={0x0, {0x3}, 0x8, 0x42, &(0x7f0000000880), 0x0, 0xffff, 0x3, 0x1, 0x7, 0x3, 0x0, [{0x7, 0x0, 0xfff}]}) mincore(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xfffffffffffffffc) 19.255185193s ago: executing program 6 (id=1911): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000400)={0x0, 0x0}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x9718c9bc129717fd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x6, 0x2, 0xf, 0x2, 0xd, 0x407d, 0x4, 0x3ff, 0x100, 0x941, 0x8001, 0xfff, 0xd, 0x4, 0x0, 0xfffffdfffffffffd], 0x1000, 0x20012}) 18.605568098s ago: executing program 6 (id=1914): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x48000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000980000/0x2000)=nil, 0x2000, 0xb, 0x28011, r2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1, 0x10000000000000}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) clock_getres(0x4, &(0x7f0000000080)) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240), 0x0, 0x800, 0x0, 0x0, 0x0}) 18.573023109s ago: executing program 7 (id=1915): r0 = creat(&(0x7f0000000180)='./bus\x00', 0xa2) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x2000, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r9, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r12, 0xae78, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) mount(&(0x7f0000000280)=@filename='./bus\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) unlink(&(0x7f0000001080)='./bus\x00') r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) dup(r13) 16.055955884s ago: executing program 7 (id=1916): r0 = socket$igmp(0x2, 0x3, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x28000) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x2, 0x1, 0x0, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000040)=0xffffff02, 0x4) 11.747528203s ago: executing program 2 (id=1919): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000700000000000000000000ea27b754112d8bde563a893a0f7e3e90c31649d1afff475743208d27d0b72fee1aaaf96f2e7bd719ad1473cdf42968f7f7acd170c55b774275448849a8aa7553fbca7ddf155c4edbe221805c69da37b61314f62c2e4226286e40b3398b4251127b78e4814f7a2c3b5d27586199e3224e3a62f7ddaba0c4ebc71a5baee0ee4e39819b9c89dcbd7f6b264f3f1bd87a20b0edd831df4341fea0f098f886ace4575b4f50fce03904d1f2158fe350a7023a868a1b0b1a481c047e3cfaaf4cd200aaee1123174819a666c397bb2e6250e23a01cdd63b6a4adc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdir(0x0, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000200)='pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r7 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r6) r8 = dup2(r7, r7) write$binfmt_script(r8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) move_mount(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x177) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x2}}}, 0x24}}, 0x40801) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000900)=r9, 0x4) 11.138738345s ago: executing program 7 (id=1920): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x63d4a000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x80002, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000008c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x2c, 0x0, 0x27f477fd3918db17, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0xffffff43}, 0x1, 0x0, 0x0, 0x2004c041}, 0x8c5) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x5}, 0x20) socket$kcm(0x21, 0x2, 0x2) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, 0x0}, 0x20) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x4}, [], {0x4, 0x2}, [], {0x10, 0x2}}, 0x24, 0x1) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xb9{\x0fQS\xa7\x02\x93\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\x86\v\x9cL\x8e1K\x00'/158, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 11.109789551s ago: executing program 6 (id=1921): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 10.972048606s ago: executing program 1 (id=1923): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e000000200"/58], 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x800) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x80) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0xfffffffe) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) 8.518525054s ago: executing program 2 (id=1927): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x13, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) r4 = fcntl$getown(r0, 0x9) r5 = getuid() openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000004d40)=[{{&(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x0, &(0x7f0000002980)=[{&(0x7f0000000780)="8e50623d31d257b67f633fd750e474fff79177251ca8de50b3ced80b48a4de529c4eeee4bf4723"}, {&(0x7f00000007c0)="27995dad3c43c25b430244fb882ab8a15c6e24b08c054bec4bc33dfe477f5aed1e5c42a8b88ca1da1807134e90a526420265559b7f0db9e112df5cab406667196f0cc6fafa981e268ed19b0b8310155ec618d29b"}, {&(0x7f0000000840)="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"}, {&(0x7f0000001840)="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"}, {&(0x7f0000001940)}, {&(0x7f0000001980)="c0c18eb02c14ab5316501a286b6c14793a938fe1944544b758f3a1071507b7930bb044111b3a59f0746d967503b24ebc0fc0fe87dd88733c8539311e48484729323381f8b1c8d29ebd1751cc412b15a281ff593e277ac41a2f0d8861589c92340b67636fdaaee07f2e49c21b020cb639ae270750c7f704f7e1d9b4b3fdbf50dd199fe4dc6c0d06be1b8df96f084b22cc862680d822660e17e0151ddab27da6207007035849e422df6f4d2f6e21c037932b8ecf4f442c6ba2b26fad39b1be33938953c5d17d9d4d42dbdbb18a402d21e1264257823fd79945ba67d171dbd03e7f019f2abb87bec7d31b5845f39e54a62a7644dd95d208b65a9135e57564671264ad8f26c8360e6776824b773d44b9d6ef6d3acc1cd06425b36d1f0d03d832c8d5409a3e09e3e1e6929f7961ba4a2792105a3a741b00a1ae7f864edf564983a69d87285243e99e8067541585585dd75c91e2d1992d79788d7d9bf8f17eac3da85e62d452d615ce41c90d221742751d84b58e7217e1789b2ee483d00bfb4aa4cfef75ccdb7d90d60dd7f5b10ffcf008f0f8e91131b4a1516df53d1d2f3de51601d72236adb41474c97f7a9109b67a8e2fbfe9788b4b599f6af83633f9d110546306d5b9d8f2ccd3afb54d4000d878c141a68047a838bce4d3c08931955506e6687826b7482cd9c250621b07813d844f4a6f9e8a2fec24dcbfd18ce4a5bd825d36c118a1053abfd2a05c82328f9e37745b256b188b5cdb3cbe463f3617a985e23408b4e988bdac0b559e169cf3ec2ee4a217b1bdf275721a057e7506f83857fd8d3dd2acf1b9f3654c47bb6f4adc8d641d9b9bf94ad0846f5c6d6eb4bd3dd6334e1c537181c54225cca4cdb6215ceac1b6e2f1f2b6e61c598699bcae2a2c492cb18f65d283321cd28ca2521a460ead9861deb07353b8060312921026cf57453832232b6a09e37c73f02b0d8fe97069fbb983d67b75d42fd88ef98d03f261520dc33b264ce766f93a1f9842f84efbddc78e122edc099fead0ca908e01f4fe97c99e5a4565241545c2a3ef4e82a19ea029b2ef9fa78f6b92e8da317738e134bb2b70ba77a2e379d146bb2f1ebc52c67ebaf0624fe8f04a672b7552cc2f6b415c6a08e57831ea08f9297f9921f0c058d7a6c45a4a0b6bc79546511005e80dcebd6c64a3b6db7979333aed20d7bafa978cfe280381af41c4c1a9c0de7ca1e4ae43a0c9cb2ac2c280dfece6deb9e5f201f7ad22bb56208d522a67d83ac3dbb9fa8eb396f67c30fb9ac703ec26121e697554dc3d0ccadaee84d4ca5212f1317090925436e80703b73d57866a67a8967f2c2ea1c914f5c598835c0af18c24fe0d95ae11591c5728518aa370a19b1ba445677fd6c252ae3d2e6002271ea2694df399a0acb604de095a9976f8a7bf419dfee40688c1886b7719c567b3b8e10c7dc086b4a100d4254c5ca3df5c6754c281ee5cc2eaea593302ed3c183b3ff163178d621be1c0c61b27dbbd1d16e0c293cc08e4029e10892c2169a6edcdea08cab646c73e3f1feb119338458ae5a96c178725921e07dc022ee6c79e55f30b7a047c777df4c2bf41a587e90196620642100b3f1b239fc535e3b61e9ebd9d322515d18f77e42bb5d6a4dfdd3a5d8005efd6b6c7e7de31ca47b46fa56eb4cd81622c0b56c172e1190fb8bb93e1ea20110d813b0dfef5afefd2e252d33cadb3f4d81b65d355607cbd1c85778bdaa928aebe42455af85764f44b0e0e0f6de429095e4a45d18f933165282432704a338eca70bcaf5ca132018a677732c1619d898bb8e611f4431c39acedf2755a953857dfc670f5ee29816e24d64f9a218b7b6d55f457b4e24069862511a61a68e67737d482e9b2136a29aaf3efa324c7c58de7a76ec388caa0ada1f856ee5036af6991bc388b6b54e6f0f12fbe92a1feca2d641721a4f8bbe0bd8fc254a4115f99e511232a365642f537e5240f2a96d1502c0cb5d2727c4c9c862c843e66cdbe17c73d365416d629661ea885ffe210a77381af900bd7e385855443d481232ee8d9a8a2ed581c26a2e3bf9be59abefa7f558baafe8eae65ea519fbe7b1a94a5d2b3289392aebe0d67ca028238143c13c9b54281627199fb3fe9abed5b707b09a8d671d14f1b7db3ba256bd03d300213b6451585a1bba22d3feff568ea926a2f6f19e807f0334e653e23e5e64ea1b28bf9b6a02ae403c47d8b9c3adb8a7cffa124c4fb1d0971999d1c62172bd8d34fd57b6b0e96da3dd0dd4bb417e0aed2f8fdbd3dbe35a7e90cc26cd1296f2964ce08169e622272c8b64bf20988f1c6540bef44dd2794b9d9a292557ecba8e8f556924e78d424028642c3b85ed7f8ac40360553ee670ccf489f7a604f3a96b5b15fd074ace5b145010b5d9d68a63d9397921a5531592a1ba792fd76a48d31460268eacc3eccb41cf2d594a497a67fdd8b21a8fb16b792ed0f99ee810ef065f35ed0b24390505bb9a77f4d854bf6b759dcf31a4e27354770392861e31e1b76350fdf21785da4f2337c27d3742d0685e0f6eb96f5a166279222f7b02c349fe43acce43e6b1cccdce00c9922ba9ea0a303d4183d66a2df4ee826491f76e2012e26988b0e0f08ee057c53b66a2db0937d54fd05c020aef9d80797ed2d7f7db6a2472604ba5e5ac749ee8dfa0005890ad55c1cda289e4ff541e8e2bea5757477adc816ee2d7bc04b7c89118e85d3be04f1ba8f10bf78c5b0a9a7ec38552ee208cbe74f64fdcbe1d50e7b93d0691a0ef133eda402967fde3da1ead16d60438e59d5fc263891e58396704cbfa04ede34335085ea13c883b150f0de5248188adb7dcb8e0721f2f828226c655f8ce68a073a75a35a2c8fca0bcd87b0d07ea8b4a3f37cb63ced9b8ecfd6c653481dade73862eff8583dc8fa20ff914b50a3c9b734c9ec1f9ef06aeb804b65b54188e102ccf31afecf72b7f194b05f8b9f1901edbc20d8b740e7e2f3a82442bf8222890921d05c9fa2a233e580d93e21f907718f9981d1ad5610bc0535349b94a9c42d1c75e6a034b25574d34662b77d3cf23824eb7058770ea8d3df3e79da45ad604942b04f0229c7b713f276dd54ed22afaae8eaeadcc409648c2a875b8ae677ca830a45c2b69edf4c213b89177cf787553d3b437d1b98bbac1835e200af6aa11d606acc7f1f2908157c6e0c185049ef51f6cda9dc1c45db7d624158d652762016017662d3290bc40d75e05f35f1b504d9ed36c59ef026032aa13bb0bc1389bc2d1b105ae18613495743cde7faf16ee54593527469a8f260430a07c7d51b8321e447615db3a6774046ec81a31339744f300af0f231e778cf82b54741ef6a070aec9e4ce3737ab5ab5b360a29f0957be8e405a82497056c7fc31a9089730dba48cd7c9f961e61c798ec055d6c5cc7bd8c5af162bb59216d18f1c091a02342c3165fadd6c58e732c904c0f75bf8c62008eccd62c43df769ab4d6c71ce07c5aa8a48ddd5a7b673edacaca843b24606222d4a54901c0e70adca399ab7c02d3050af2885bc74519d93772e44b672b23e892284692d4e17947361835903dba89a162d77424b4d19a96ab569bf627f1017e3eae7645e47e2dba786fc2d957b66eb085866ef4fb28f98b94299aa97f7951a7e5f61c71aa6a2fdeac4cda3cc6635747b10f3423c785c4ee930629c7bb57b7b36ecc396f22de2942ae99333f14a30f78980036bb112a68d541a55e4cc115c99f3b85b3a042405f2ab6a347e906e0ef44dd9896cb3d0a148f5daa48be3b901bbf5d5d1284b069823effb803d786a9d11108466e5cbd55d558f0dfcfe25442ffafe2dd184d69f79d46b314723fb899014ce42217d6f8fca07e193de8bb48f61f9d53b0161d76db4c1494ea86cfba6fbff40ce701c1bee7611cbd32176cf2dfba5042fc2aad46379e90e8e045c389e0056995f372884224e3a20fed2b27071a0f77c411825c0f9fae5fa010e3c67d837ce8f60832808aa735cc99c591fe636e336637dac3aa37794391474141d08b7f29bc480257863d298959e7c2c94948deb4a136030501cda4a10aca10686a1f92aa2dd385ceafd2f6083407bc0e149f4995c57d71ed6c80af1a8fd96c469afc7d28525c68a1c4fb23c773740de614d001d25e29232be840a7b206f0a0b4508510ab9fe042a573e26410f97e46a4847a99e2456139505e4fef3d4e277295172444ac06b9ce7c6530dd7153f20e4b7c68a82e7c34c928bffa90020cfedc577945bb03d9e5212cb6b3953d14ac81efe43b17367d8166d8637c1809cf35aef3a90d16227e67a2aa0172d5aacb2034efbb82164305f762c99ecc229a7e57e5b547088374b71b52eeddd876dd882a6a951eeadde59fbc9b52334172b1126f33710e0136743d58c0358aef51537b042b8ca9fbaf67bbe48e952b68b671c0721c520603d2801678aa28b9d3683b4d616606905c2110e9dc4acab32effb080a4ca9566ca0dfa1a4beb66e995793bafb87415c5134e240e4978da4b2e2b0274bf4f4aac772748846d5e46f36d0595450d1a6770a83dc31a6b19b2c7510ba7be92b286b9288a117a4697f46289b7c47ef486bf562deee4e78b6d6fbea5900828f639f7515d58ec0c14ca9566c90f205fb7469b920a607b6037f7a5dd1f36d33dccaf58758d0d293fc4efc296b95270f9af049147eb0cc5045b7fef13f8101b5ee09374a755836227280f38c19b6ca1b3bb40a0fd3d2720c867326f65b9258a7273b13a4f8daad2f286be5c101ba38f6f4487a064edbb86b63a826d7cc18ee13b5b49ef168a0018fdae5617d84f4c5980ad9d445a2013494427fb07375882c7db5d442c8313d90a06f20eca555a64cc4a4635c8f8d4fe7332f50f959e62d80b82f1fa44a1453c0a6d10a0ff1775b885e9378899938b2bc87e87725f14970f10605576858702526a979f3ac984bd5a3fae7aa1c62503be508eec34047411a4469eea3a20bcd4554040502d316be26d037d36dc4dc85230b6162f40b2d60d7c1610006b9720a3b5ff5ba2dc6b88422f2f52837034d30e6f538a78144d1285f6a1986c441cb68c98127fd3d7e41ff16a630e6c2b10dc50840096f151cf33529d799f9013bae5b9410106e994e822faf63936f363957666c42753585e21d9292472c41d3730ad7b0f39ee58e484df516c5a02704a05712ccd06105f78f5e3faeacbb16563e54ddd95ca649616d8dfad360af146f3621761f878c6a144410cc80b763b7db844c92f493bccf22b9a85efb5530fad7da33f51acf8effba5cc68cee678f7068a8e9d650b414129af2c337cd25c71c65b06e2a9133b46e169edf8846edbe47810079133fed99c7a521e99ee4d53fe120000340bf9638ab92a785f96e4e2c3cd8089c5ef9bb42475763320dca3c1232b68db3f5d66d06b7455a4bd93e9eec2040a2a5c5e20e999216c76d6c94a75951e2c9b49a471809eed42968ab0fa925a47647d6e353d90156187b7984272fd30e62ba6c44634a138fe8f720758cd3305e64cd822838f03ec421bf4db2b991e21c9af7f1bb94114956d47f87cf06cca3a96e4f25af58ef52f1f973a91509b9e87f206612374fe5e3297057b920437a97ea38142f0c133ebfe84fd555cb0577bbac21e1c3185b600764f60a75c14d1f1ae599c942e406aa9a746127d1cb4286626954be4afb0ae50693d31e785b544aebab6f3df19bbb3192d54acbf475c50b8211a4009dc8fa730ceac0ff08171facf44f857a245701666742ab842ed171bce194b661314f1b81a3c96d58aca2fec041699b0efde91c8fd6fa53ed96217d3986964cb"}], 0x0, &(0x7f0000004c80)=[@cred={{0x0, 0x1, 0x2, {r4, r5}}}, @rights={{0x0, 0x1, 0x1, [r0]}}, @cred={{0x0, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x0, 0x1, 0x2, {r1}}}, @cred={{0x0, 0x1, 0x2, {r1}}}], 0x0, 0x800}}], 0x40000d3, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000140)) prctl$PR_SET_IO_FLUSHER(0x50, 0xfffffffffffffffd) (async) setpgid(r1, r1) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000380)='iso9660\x00', 0x800000, 0x0) (async) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) (async) listen(0xffffffffffffffff, 0x5) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) sendto$packet(r7, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) (async) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r8, 0x40096102, &(0x7f0000000280)={{}, 0x7}) unshare(0x2c020400) r9 = syz_io_uring_setup(0x4c39, &(0x7f00000004c0)={0x0, 0x1de8, 0x20, 0x1, 0x19e}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f0000000700), 0x0) 7.5260112s ago: executing program 7 (id=1928): umount2(0x0, 0x2) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) mkdir(0x0, 0x0) chmod(0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) ftruncate(0xffffffffffffffff, 0x2007ffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@private1, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa417, 0x101}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x32}, 0xa, @in=@empty, 0x0, 0x3, 0x0, 0x3}}, 0xe8) write$tun(r2, 0x0, 0x29) 7.404016132s ago: executing program 2 (id=1929): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x9, 0x0) rename(0x0, &(0x7f0000000280)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x34) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$inet6(0xa, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40012100, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) 6.722376653s ago: executing program 6 (id=1931): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 6.591553644s ago: executing program 2 (id=1932): arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300010000000000fcffff0707000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a8010000580"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/shm\x00', 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_usb_connect(0x0, 0x59, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109024700010000080009046900000e010000082402010202"], 0x0) 5.528242566s ago: executing program 1 (id=1933): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x9, 0x0) mkdir(0x0, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x34) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$inet6(0xa, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40012100, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) 5.178762075s ago: executing program 4 (id=1935): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x1, 0xb, @empty, 0x10700}, 0x1c) 4.959547245s ago: executing program 4 (id=1936): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 4.66981159s ago: executing program 6 (id=1937): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) shmget$private(0x0, 0x1000, 0x1008, &(0x7f0000bcb000/0x1000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x3, 0x0, @a}, 0x48, 0xffffffffffffffff) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x8650bf77ffef8b55}}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e465c1c76e716c0be4b07", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) 4.298426989s ago: executing program 7 (id=1938): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001e40)=@mangle={'mangle\x00', 0x2, 0x6, 0x540, 0x140, 0x210, 0x0, 0x0, 0x210, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xffffffff, 0x5, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x81, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffffffff, 0xfffffff6}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x570}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x3a1dc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x20004000) r4 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x80, 0x40) read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x81800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_readahead}, {@cache_loose}, {@loose}, {@cache_fscache}, {@noextend}, {@nodevmap}, {@privport}, {@access_user}, {@aname}, {@noxattr}], [{@pcr={'pcr', 0x3d, 0x3e}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_type={'obj_type', 0x3d, '.\\\\#'}}, {@obj_user={'obj_user', 0x3d, '+],\xbc'}}]}}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd, 0x13, r3, 0xa6a88000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 4.095991628s ago: executing program 2 (id=1939): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f0000000100)=""/169, 0xa9}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1fbd0, 0x800) ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000040)=""/4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0xa, 0x300) fsopen(&(0x7f0000000400)='pstore\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') syz_fuse_handle_req(r6, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r7, 0x4b4a, &(0x7f0000000000)=""/183) ioctl$KDSIGACCEPT(r7, 0x5607, 0x4) ioctl$VT_ACTIVATE(r7, 0x5606, 0x4) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, &(0x7f0000000280)) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r8, 0x7c80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) 3.581087913s ago: executing program 1 (id=1940): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x25, 0x0, 0x1, 0xfffffffe}, {}, {0x6}]}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) ioctl$KVM_TDX_FINALIZE_VM(r2, 0xc008aeba, &(0x7f0000000080)) syz_emit_ethernet(0x56, &(0x7f0000000180)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@canfd={0xd, {{0x1, 0x0, 0x1, 0x1}, 0x14, 0x1, 0x0, 0x0, "533b8dbef3bf53be188734b0205aee9c52458b698db863511d562c8cb4d6e8652d68ccd42301e7b6b8d0cb6e21631db1633070fde58ad8928b877ee1936ce9d7"}}}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x3}}, 0x20) 3.059394695s ago: executing program 4 (id=1941): creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x62) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0x8, @capture={0x1000, 0x0, {0x0, 0x9}, 0x0, 0x83a7}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x10}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) r7 = landlock_create_ruleset(&(0x7f00000000c0)={0x40, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xfffffffc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d0000000000000000000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) 2.76271442s ago: executing program 2 (id=1942): r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a5a44000000001010902440001fd00000009040000ff0202"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 2.498384795s ago: executing program 1 (id=1943): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 2.293003319s ago: executing program 1 (id=1944): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x20, 0x0, @fd=r0, 0x100000000, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x1, 0xfffffffd, 0x9, 0x0, 0x600) 2.228527846s ago: executing program 4 (id=1945): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xdf914cd3c10f80a}, 0x24004080) 2.148772767s ago: executing program 1 (id=1946): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000140)=0xfffffffa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x200, 0x8, 0x0, 0x10001, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d6, 0x5}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) fremovexattr(r1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x2, r1, 0x0, 0x80000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100), 0x8) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x50) io_uring_enter(r3, 0x8ae, 0x6931, 0x17, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3ae}) sendfile(r5, r4, 0x0, 0x400000000000000) setreuid(0xee01, 0xffffffffffffffff) ioprio_set$uid(0x3, 0xee01, 0x2007) shmget$private(0x0, 0x2000, 0xfa71340b9fef182d, &(0x7f0000ffe000/0x2000)=nil) shutdown(r4, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 2.089979477s ago: executing program 4 (id=1947): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffff7, 0x294383) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sysfs$1(0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x3) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000040)={0x0, 0x0, 0x0}) 1.803799271s ago: executing program 7 (id=1948): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x3a1dc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x20004000) r3 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x80, 0x40) read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x81800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}, {@cache_loose}, {@loose}, {@cache_fscache}, {@noextend}, {@nodevmap}, {@privport}, {@access_user}, {@aname}, {@noxattr}], [{@pcr={'pcr', 0x3d, 0x3e}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@obj_type={'obj_type', 0x3d, '.\\\\#'}}, {@obj_user={'obj_user', 0x3d, '+],\xbc'}}]}}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd, 0x13, r2, 0xa6a88000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.586730148s ago: executing program 6 (id=1949): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @empty}], 0x10) socket$kcm(0x11, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x1, 0x106) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000061) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'batadv_slave_0\x00', 0x200}) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f00000004c0)='u', 0x1}, {&(0x7f00000003c0)="9d5a94dee0cfd1a0b0394e41a00d6ba8c2857c8ac12895867c3ce8e3b722f4703a859334378d54cfa5f767446f6f8c47f85581b4495ea9e0e813a62bf5f28e8e76aea21bd0a7199db0537ed6bb8545a9fc571133c068a2a18c89dc3455cdc4473e9b31b937bf91841d7f8cf9d785989648fdc2022d813c9fe1b13840a7e8688f0fa4252c089b63b6d494e60efd62d00e65eb12d96cb2e9ef77", 0x99}], 0x2, 0x0, 0x0, 0x804c040}, 0x881) dup(r0) 0s ago: executing program 4 (id=1950): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000180)='binfmt_misc\x00', 0x9, 0x0) mkdir(0x0, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x34) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111}}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$inet6(0xa, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40012100, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) kernel console output (not intermixed with test programs): ][ T30] audit: type=1326 audit(1780808112.194:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10971 comm="syz.4.1356" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbc7f9ce59 code=0x0 [ 516.936044][ T30] audit: type=1400 audit(1780808112.304:887): avc: denied { name_bind 0x1000000 } for pid=10971 comm="syz.4.1356" path="socket:[32437]" dev="sockfs" ino=32437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 516.980745][T10976] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 517.004727][ T804] usb 3-1: USB disconnect, device number 38 [ 517.040459][ T1881] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 517.105032][ T1881] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 518.044997][ T803] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 518.245332][ T803] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 518.267017][ T803] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 518.280547][ T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.297220][ T803] usb 3-1: Product: syz [ 518.307317][ T803] usb 3-1: Manufacturer: syz [ 518.318178][ T803] usb 3-1: SerialNumber: syz [ 518.338788][ T803] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 518.370792][ T803] usb 3-1: no configuration chosen from 1 choice [ 518.656262][ T803] usb 1-1: USB disconnect, device number 45 [ 518.872854][ T5733] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 519.242846][ T5733] usb 2-1: Using ep0 maxpacket: 32 [ 519.273341][ T5733] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 519.310631][ T5733] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 519.372998][ T5733] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 519.393126][ T5733] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 519.410222][ T5733] usb 2-1: config 0 interface 0 has no altsetting 0 [ 519.435058][ T5733] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 519.445515][ T5733] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 519.457289][ T5733] usb 2-1: Product: syz [ 519.461577][ T5733] usb 2-1: Manufacturer: syz [ 519.470089][ T5733] usb 2-1: SerialNumber: syz [ 519.838458][ T5733] usb 2-1: config 0 descriptor?? [ 519.867620][ T5733] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 519.884394][ T5733] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 520.178838][ T5733] usb 2-1: USB disconnect, device number 35 [ 520.203494][ T5733] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 520.781302][ T5733] usb 3-1: USB disconnect, device number 39 [ 521.188009][T11023] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1371'. [ 521.313483][T11007] comedi comedi0: reset error (fatal) [ 521.438794][T11032] netlink: 'syz.1.1373': attribute type 1 has an invalid length. [ 521.502292][T11038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1373'. [ 521.517784][T11032] 8021q: adding VLAN 0 to HW filter on device bond2 [ 521.538918][ T30] audit: type=1400 audit(1780808116.907:888): avc: denied { append } for pid=11033 comm="syz.2.1374" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 521.546461][T11041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.593101][T11038] bond2: entered promiscuous mode [ 521.601137][T11038] bond2: entered allmulticast mode [ 521.630607][T11041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.674488][T11032] bond2: (slave dummy0): making interface the new active one [ 521.691789][T11032] dummy0: entered promiscuous mode [ 521.828989][T11032] dummy0: entered allmulticast mode [ 521.842293][T11032] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 521.871381][ T5821] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 521.881326][ T5732] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 522.041366][ T5821] usb 2-1: Using ep0 maxpacket: 8 [ 522.041407][ T5732] usb 3-1: Using ep0 maxpacket: 16 [ 522.048383][ T5821] usb 2-1: config 0 has no interfaces? [ 522.057673][ T5821] usb 2-1: New USB device found, idVendor=1039, idProduct=2111, bcdDevice= 9.0f [ 522.065417][ T5732] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 522.067067][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.085045][ T5732] usb 3-1: config 8 has no interface number 0 [ 522.087458][ T5821] usb 2-1: config 0 descriptor?? [ 522.104542][ T5732] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 522.127816][ T5732] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 522.150978][ T5732] usb 3-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 522.164308][ T5732] usb 3-1: config 8 interface 206 has no altsetting 0 [ 522.174393][ T5732] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 522.183505][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.192470][ T5732] usb 3-1: Product: syz [ 522.196671][ T5732] usb 3-1: Manufacturer: syz [ 522.202516][ T5732] usb 3-1: SerialNumber: syz [ 522.459953][T11034] input: syz0 as /devices/virtual/input/input21 [ 523.250941][T11053] 9p: Bad value for 'wfdno' [ 523.540645][ T5821] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 523.740581][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 523.763879][ T5821] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 523.793762][ T5821] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 523.839685][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 523.881224][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 523.935014][ T5821] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 523.964284][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.995136][ T5821] usb 4-1: Product: syz [ 524.010111][ T5821] usb 4-1: Manufacturer: syz [ 524.051882][ T5821] usb 4-1: SerialNumber: syz [ 524.126026][ T5821] usb 4-1: config 0 descriptor?? [ 524.160581][T11053] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 524.191844][ T5821] hub 4-1:0.0: bad descriptor, ignoring hub [ 524.224005][ T5821] hub 4-1:0.0: probe with driver hub failed with error -5 [ 524.311520][ T5821] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22 [ 524.762942][ T804] usb 2-1: USB disconnect, device number 36 [ 525.242414][ T5732] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 525.381014][ T5732] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 525.393225][ T5732] usb 3-1: USB disconnect, device number 40 [ 525.426609][ T5732] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 525.456951][ T5821] usb 4-1: USB disconnect, device number 41 [ 525.462975][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 525.463913][ T5732] garmin_gps 3-1:8.206: device disconnected [ 525.586597][T11058] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1379'. [ 525.611319][T11058] CUSE: info not properly terminated [ 527.023491][ T9506] block nbd0: Possible stuck request ffff88802840e000: control (read@0,1024B). Runtime 60 seconds [ 527.035095][ T9506] block nbd0: Possible stuck request ffff88802840e1c0: control (read@1024,1024B). Runtime 60 seconds [ 527.046237][ T9506] block nbd0: Possible stuck request ffff88802840e380: control (read@2048,1024B). Runtime 60 seconds [ 527.060592][ T9506] block nbd0: Possible stuck request ffff88802840e540: control (read@3072,1024B). Runtime 60 seconds [ 527.158946][ T5732] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 527.388627][ T5732] usb 3-1: Using ep0 maxpacket: 16 [ 527.402109][ T5732] usb 3-1: unable to get BOS descriptor or descriptor too short [ 527.411142][ T30] audit: type=1400 audit(1780808122.779:889): avc: denied { mounton } for pid=11076 comm="syz.3.1386" path="/280/file0" dev="tmpfs" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 527.869117][ T5732] usb 3-1: config 3 has an invalid interface number: 74 but max is 0 [ 527.877260][ T5732] usb 3-1: config 3 has an invalid descriptor of length 172, skipping remainder of the config [ 527.889062][ T1882] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 527.896555][ T5732] usb 3-1: config 3 has no interface number 0 [ 527.896596][ T5732] usb 3-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 527.913980][ T30] audit: type=1800 audit(1780808122.920:890): pid=11078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1385" name="file0" dev="overlay" ino=1504 res=0 errno=0 [ 527.953944][ T5732] usb 3-1: config 3 interface 74 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 527.981056][ T5732] usb 3-1: config 3 interface 74 has no altsetting 0 [ 527.997365][ T5732] usb 3-1: New USB device found, idVendor=045e, idProduct=0468, bcdDevice=b2.9c [ 528.019835][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.036685][ T5732] usb 3-1: Product: syz [ 528.049687][ T5732] usb 3-1: Manufacturer: syz [ 528.059732][ T5732] usb 3-1: SerialNumber: syz [ 528.093914][ T1882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 528.164195][ T1882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.174466][ T1882] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 528.183795][ T1882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.197377][ T1882] usb 2-1: config 0 descriptor?? [ 528.326819][ T5732] usb 3-1: USB disconnect, device number 41 [ 528.513051][T11093] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 528.630910][ T1882] aquacomputer_d5next 0003:0C70:F0B6.000A: item fetching failed at offset 3/7 [ 528.656675][ T1882] aquacomputer_d5next 0003:0C70:F0B6.000A: probe with driver aquacomputer_d5next failed with error -22 [ 528.685434][ T30] audit: type=1400 audit(1780808124.050:891): avc: denied { write } for pid=11097 comm="syz.3.1393" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 528.742728][ T30] audit: type=1400 audit(1780808124.050:892): avc: denied { open } for pid=11097 comm="syz.3.1393" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 528.828508][ T30] audit: type=1400 audit(1780808124.200:893): avc: denied { setopt } for pid=11069 comm="syz.1.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 528.907072][T11106] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1383'. [ 528.978851][T11106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1383'. [ 530.201784][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1398'. [ 531.403304][ T30] audit: type=1400 audit(1780808126.771:894): avc: denied { search } for pid=11130 comm="syz.4.1405" name="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 531.442021][ T30] audit: type=1400 audit(1780808126.801:895): avc: denied { search } for pid=11130 comm="syz.4.1405" name="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 531.470897][ T30] audit: type=1400 audit(1780808126.801:896): avc: denied { read } for pid=11130 comm="syz.4.1405" name="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 531.497294][ T30] audit: type=1400 audit(1780808126.801:897): avc: denied { read open } for pid=11130 comm="syz.4.1405" path="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 531.521305][ T30] audit: type=1400 audit(1780808126.801:898): avc: denied { search } for pid=11130 comm="syz.4.1405" name="/" dev="configfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 531.594948][ T5733] usb 2-1: USB disconnect, device number 37 [ 531.843443][T11138] kvm: kvm [11135]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x60 [ 531.872046][T11138] kvm: kvm [11135]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 532.016564][ T5733] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 532.126610][ T5732] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 532.197046][ T5733] usb 2-1: unable to get BOS descriptor or descriptor too short [ 532.217422][ T5733] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 532.231303][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.246561][ T5733] usb 2-1: Product: syz [ 532.252353][ T5733] usb 2-1: Manufacturer: syz [ 532.257543][ T5733] usb 2-1: SerialNumber: syz [ 532.837330][ T5732] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 169, changing to 4 [ 532.878987][ T5732] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 532.903574][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.932132][ T5732] usb 4-1: Product: syz [ 532.952167][ T5732] usb 4-1: Manufacturer: syz [ 532.979342][ T5732] usb 4-1: SerialNumber: syz [ 533.052431][T11157] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 533.097305][ T5733] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 533.130176][ T5733] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 533.295480][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 533.295497][ T30] audit: type=1400 audit(1780808128.662:901): avc: denied { call } for pid=11160 comm="syz.4.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 533.374850][ T30] audit: type=1400 audit(1780808128.662:902): avc: denied { transfer } for pid=11160 comm="syz.4.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 533.380564][ T5732] usb 4-1: unit 4 not found! [ 533.441468][ T5733] usb 2-1: USB disconnect, device number 38 [ 533.721776][ T5732] usb 4-1: USB disconnect, device number 42 [ 533.801876][T10231] udevd[10231]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 533.846011][ T804] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 534.020293][ T804] usb 3-1: unable to get BOS descriptor or descriptor too short [ 534.049910][ T804] usb 3-1: not running at top speed; connect to a high speed hub [ 534.082969][ T804] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 534.116687][ T804] usb 3-1: config 4 has no interface number 0 [ 534.151254][ T804] usb 3-1: config 4 interface 147 altsetting 5 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 534.218136][ T804] usb 3-1: config 4 interface 147 altsetting 5 endpoint 0xD has invalid wMaxPacketSize 0 [ 534.266069][ T804] usb 3-1: config 4 interface 147 has no altsetting 0 [ 534.308495][ T804] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 9.d1 [ 534.352013][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.386252][ T804] usb 3-1: Product: syz [ 534.411410][ T804] usb 3-1: Manufacturer: syz [ 534.443839][ T804] usb 3-1: SerialNumber: syz [ 534.478328][T11191] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 534.491012][T11191] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 534.502108][T11191] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 534.512686][T11191] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 534.520840][T11191] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 534.815027][ T804] usb 3-1: USB disconnect, device number 42 [ 535.651715][T11188] lo speed is unknown, defaulting to 1000 [ 535.711873][T11221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.772576][T11221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.805379][T11224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1434'. [ 535.879677][ T30] audit: type=1400 audit(1780808131.254:903): avc: denied { create } for pid=11219 comm="syz.4.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 535.969608][ T30] audit: type=1400 audit(1780808131.254:904): avc: denied { write } for pid=11219 comm="syz.4.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 536.654014][ T4939] Bluetooth: hci5: command tx timeout [ 536.763903][ T1882] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 536.854811][T11188] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.904633][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.961000][T11188] bridge_slave_0: entered allmulticast mode [ 536.976792][ T1882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 536.993601][ T1882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.019241][T11188] bridge_slave_0: entered promiscuous mode [ 537.058825][ T1882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.075747][T11188] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.104451][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.129911][T11188] bridge_slave_1: entered allmulticast mode [ 537.152135][T11188] bridge_slave_1: entered promiscuous mode [ 537.177997][ T1882] usb 3-1: string descriptor 0 read error: -22 [ 537.221155][ T1882] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 537.271119][ T1882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.342331][T11188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.374506][ T1882] usb 3-1: selecting invalid altsetting 1 [ 537.401691][ T1882] usb 3-1: unit 6 not found! [ 537.415860][T11188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.561819][T11188] team0: Port device team_slave_0 added [ 537.603062][T11188] team0: Port device team_slave_1 added [ 537.622593][ T30] audit: type=1400 audit(1780808132.995:905): avc: denied { associate } for pid=11255 comm="syz.3.1444" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 537.744858][T11188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.773064][T11188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.828641][T11188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.873844][T11188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.911078][T11188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.985724][T11188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.017893][ T1882] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 538.209450][ T1882] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 538.260199][ T1882] usb 3-1: USB disconnect, device number 43 [ 538.290806][ T30] audit: type=1400 audit(1780808133.665:906): avc: denied { getopt } for pid=11269 comm="syz.4.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 538.357616][T11188] hsr_slave_0: entered promiscuous mode [ 538.396316][T11188] hsr_slave_1: entered promiscuous mode [ 538.430254][T11188] debugfs: 'hsr0' already exists in 'hsr' [ 538.441611][T11188] Cannot create hsr debugfs directory [ 538.724059][ T4939] Bluetooth: hci5: command tx timeout [ 539.110273][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.293716][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.361939][T11291] binder: 11288:11291 ioctl c0306201 2000000001c0 returned -14 [ 539.537514][ T57] team0: Port device netdevsim1 removed [ 539.545979][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.687105][T11191] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 539.716194][T11191] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 539.727036][T11191] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 539.738071][T11191] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 539.755743][T11191] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 539.999251][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.217199][T11188] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 540.249838][T11188] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 540.265139][T11188] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 540.316333][T11188] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 540.345708][T11188] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 540.383693][T11188] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 540.406504][T11188] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 540.440707][T11188] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 540.544721][ T5733] kernel read not supported for file /1041/fdinfo/4 (pid: 5733 comm: kworker/1:5) [ 540.650772][T11331] netlink: 'syz.4.1468': attribute type 8 has an invalid length. [ 540.654676][ T30] audit: type=1400 audit(1780808136.036:907): avc: denied { unmount } for pid=5629 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 540.802541][T11191] Bluetooth: hci5: command tx timeout [ 540.867360][ T57] bridge_slave_1: left allmulticast mode [ 540.886980][ T57] bridge_slave_1: left promiscuous mode [ 540.918197][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.961625][ T57] bridge_slave_0: left allmulticast mode [ 540.975395][ T57] bridge_slave_0: left promiscuous mode [ 540.987225][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.040217][ T57] pimreg: left allmulticast mode [ 541.057518][ T57] batman_adv: batadv0: Interface deactivated: gretap1 [ 541.431217][ T30] audit: type=1400 audit(1780808136.806:908): avc: denied { write } for pid=11342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.895371][ T30] audit: type=1400 audit(1780808136.917:909): avc: denied { map } for pid=11358 comm="syz.1.1476" path="socket:[34758]" dev="sockfs" ino=34758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 541.921490][T11191] Bluetooth: hci0: command tx timeout [ 541.968565][ T30] audit: type=1400 audit(1780808137.347:910): avc: denied { write } for pid=11371 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.028157][ T57] batman_adv: batadv0: Removing interface: gretap1 [ 542.138243][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.150152][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.166976][ T57] bond0 (unregistering): Released all slaves [ 542.203331][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 542.341542][ T57] tipc: Disabling bearer [ 542.358972][ T57] tipc: Left network mode [ 542.366618][T11296] lo speed is unknown, defaulting to 1000 [ 542.960845][T11191] Bluetooth: hci5: command tx timeout [ 543.005561][T11188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.646919][T11188] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.714912][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.722098][ T6518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.774488][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.781653][ T6525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.920338][ T5732] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 543.976953][ T30] audit: type=1400 audit(1780808139.338:911): avc: denied { write } for pid=11388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.000689][T11191] Bluetooth: hci0: command tx timeout [ 544.130202][ T5732] usb 2-1: Using ep0 maxpacket: 8 [ 544.138860][ T30] audit: type=1400 audit(1780808139.518:912): avc: denied { write } for pid=11407 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.163439][ T5732] usb 2-1: unable to get BOS descriptor or descriptor too short [ 544.191264][ T5732] usb 2-1: config 1 interface 0 has no altsetting 0 [ 544.202693][ T5732] usb 2-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 544.224798][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.243956][ T5732] usb 2-1: Product: syz [ 544.254520][ T5732] usb 2-1: Manufacturer: syz [ 544.264209][ T5732] usb 2-1: SerialNumber: syz [ 544.343854][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 544.555403][ T5732] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input23 [ 544.581574][ T57] hsr_slave_0: left promiscuous mode [ 544.602018][ T5732] usb 2-1: USB disconnect, device number 39 [ 544.608060][ T4973] bcm5974 2-1:1.0: could not read from device [ 544.627762][ T57] hsr_slave_1: left promiscuous mode [ 544.656741][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.682247][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.698677][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.713986][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.806440][ T57] virt_wifi0: left promiscuous mode [ 544.813646][ T57] veth1_macvtap: left promiscuous mode [ 544.821068][ T57] veth0_macvtap: left promiscuous mode [ 544.826693][ T57] veth1_vlan: left promiscuous mode [ 544.832298][ T57] veth0_vlan: left promiscuous mode [ 544.956396][ T30] audit: type=1400 audit(1780808140.328:913): avc: denied { write } for pid=11417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.075078][ T30] audit: type=1400 audit(1780808140.458:914): avc: denied { write } for pid=11435 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 545.181696][ T57] team0 (unregistering): Port device team_slave_1 removed [ 545.368482][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 545.566070][T11296] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.605443][T11296] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.629587][T11296] bridge_slave_0: entered allmulticast mode [ 545.663768][T11296] bridge_slave_0: entered promiscuous mode [ 545.684708][T11296] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.700600][T11296] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.722729][T11296] bridge_slave_1: entered allmulticast mode [ 545.730477][T11296] bridge_slave_1: entered promiscuous mode [ 545.867101][T11296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.897501][T11296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.999401][ T5821] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 546.015739][T11296] team0: Port device team_slave_0 added [ 546.034705][T11296] team0: Port device team_slave_1 added [ 546.052800][T11460] lo speed is unknown, defaulting to 1000 [ 546.079567][T11191] Bluetooth: hci0: command tx timeout [ 546.142528][ T57] IPVS: stop unused estimator thread 0... [ 546.161207][ T5821] usb 2-1: Using ep0 maxpacket: 8 [ 546.166995][T11296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.186309][ T5821] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 546.215217][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.249885][ T5821] usb 2-1: config 179 has no interface number 0 [ 546.280141][ T5821] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 546.298918][ T5821] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 546.320618][T11296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.339066][ T5821] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 546.362331][T11296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.369584][ T30] audit: type=1400 audit(1780808141.739:915): avc: denied { write } for pid=11467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.399435][ T5821] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 546.411179][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.445294][ T5821] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 546.471585][ T5821] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 546.489441][T11296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.509194][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.533992][T11461] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 546.615997][ T30] audit: type=1400 audit(1780808141.989:916): avc: denied { write } for pid=11488 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.712828][T11491] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 546.755172][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 546.807336][T11188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.955704][T11296] hsr_slave_0: entered promiscuous mode [ 546.967541][T11495] syz.2.1500 (11495) used obsolete PPPIOCDETACH ioctl [ 546.980516][T11296] hsr_slave_1: entered promiscuous mode [ 546.986896][T11296] debugfs: 'hsr0' already exists in 'hsr' [ 546.992853][T11296] Cannot create hsr debugfs directory [ 547.187599][ T5821] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input25 [ 547.322364][T11461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.354299][T11461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.452378][T11508] netlink: 'syz.4.1502': attribute type 4 has an invalid length. [ 547.652449][ T5821] usb 2-1: USB disconnect, device number 40 [ 547.658499][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 547.658548][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 547.847774][T11188] veth0_vlan: entered promiscuous mode [ 547.913263][T11188] veth1_vlan: entered promiscuous mode [ 548.111838][T11188] veth0_macvtap: entered promiscuous mode [ 548.137298][T11296] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 548.156772][T11296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 548.166448][T11188] veth1_macvtap: entered promiscuous mode [ 548.173339][T11191] Bluetooth: hci0: command tx timeout [ 548.192299][T11296] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 548.225435][T11296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 548.248272][T11296] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 548.277727][T11296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 548.301132][T11296] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 548.332349][T11296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 548.381695][T11188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.435341][T11188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.593081][ T6527] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.619392][ T6527] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.656024][ T6527] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.080301][ T6527] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.604696][T11565] input: syz1 as /devices/virtual/input/input26 [ 549.752666][T11561] lo speed is unknown, defaulting to 1000 [ 549.855525][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.866713][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.917152][T11570] lo speed is unknown, defaulting to 1000 [ 550.016419][T11579] tmpfs: Too small a size for current use [ 550.040956][ T6528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.052628][T11296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.063630][ T6528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.103819][ T30] audit: type=1400 audit(1780808145.481:917): avc: denied { mounton } for pid=11188 comm="syz-executor" path="/root/syzkaller.CTyBFN/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 550.147841][T11296] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.167613][ T30] audit: type=1400 audit(1780808145.481:918): avc: denied { mounton } for pid=11188 comm="syz-executor" path="/root/syzkaller.CTyBFN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 550.204259][ T30] audit: type=1400 audit(1780808145.481:919): avc: denied { mounton } for pid=11188 comm="syz-executor" path="/root/syzkaller.CTyBFN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=37708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 550.232713][ T30] audit: type=1400 audit(1780808145.621:920): avc: denied { mounton } for pid=11188 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 550.392313][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.399476][ T6522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.648453][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.656028][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.128989][T11566] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 551.272812][ T804] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 551.310357][T11566] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.342632][T11566] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 551.371179][T11566] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 551.402657][T11614] Bluetooth: MGMT ver 1.23 [ 551.408806][T11566] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.442229][T11566] usb 3-1: config 0 descriptor?? [ 551.453774][ T804] usb 6-1: Using ep0 maxpacket: 32 [ 551.486322][ T804] usb 6-1: unable to get BOS descriptor or descriptor too short [ 551.518992][ T804] usb 6-1: config 7 has an invalid interface number: 7 but max is 0 [ 551.537499][ T804] usb 6-1: config 7 has no interface number 0 [ 551.552086][ T804] usb 6-1: config 7 interface 7 altsetting 254 has a duplicate endpoint with address 0x5, skipping [ 551.552363][T11619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.578629][ T804] usb 6-1: config 7 interface 7 has no altsetting 0 [ 551.595378][T11619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.599312][ T804] usb 6-1: New USB device found, idVendor=10c4, idProduct=817c, bcdDevice=5d.d8 [ 551.627462][ T804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.646401][ T804] usb 6-1: Product: syz [ 551.654202][ T804] usb 6-1: Manufacturer: syz [ 551.665185][ T804] usb 6-1: SerialNumber: syz [ 551.758241][T11296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.866646][ T5740] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 551.885846][ T804] cp210x 6-1:7.7: cp210x converter detected [ 551.893008][ T804] cp210x 6-1:7.7: failed to get vendor val 0x370b size 1: -71 [ 551.902047][ T804] cp210x 6-1:7.7: querying part number failed [ 551.913344][ T804] usb 6-1: cp210x converter now attached to ttyUSB0 [ 551.935460][ T804] usb 6-1: USB disconnect, device number 2 [ 551.962983][ T804] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 551.983366][T11296] veth0_vlan: entered promiscuous mode [ 551.984480][ T804] cp210x 6-1:7.7: device disconnected [ 552.000122][T11296] veth1_vlan: entered promiscuous mode [ 552.028328][ T5740] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.043764][ T5740] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 552.060144][T11296] veth0_macvtap: entered promiscuous mode [ 552.071339][T11296] veth1_macvtap: entered promiscuous mode [ 552.078843][ T5740] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 552.096274][ T5740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 552.109508][T11566] Bluetooth: Can't get version to change to load ram patch err [ 552.112878][T11296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.124346][ T5740] usb 2-1: SerialNumber: syz [ 552.125659][T11566] Bluetooth: Loading sysconfig file failed [ 552.139520][T11566] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 552.149478][ T5740] usb 2-1: No union descriptors [ 552.160847][T11296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.179600][ T48] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.201111][T11566] usb 3-1: USB disconnect, device number 44 [ 552.224131][ T48] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.252033][ T48] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.272856][ T48] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.361550][ T5821] usb 2-1: USB disconnect, device number 41 [ 552.419039][ T6525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.445643][ T6525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.592525][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.605639][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.816353][ T5740] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 552.966082][ T5733] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 553.116343][ T5740] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 553.142087][ T5740] usb 6-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 553.152315][ T5740] usb 6-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid wMaxPacketSize 0 [ 553.173397][ T5740] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 553.186986][ T5740] usb 6-1: config 220 interface 0 has no altsetting 0 [ 553.195163][ T5740] usb 6-1: config 220 interface 1 has no altsetting 0 [ 553.209075][ T5733] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 144, changing to 7 [ 553.226739][ T5733] usb 7-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 553.242108][ T5740] usb 6-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 553.254892][ T5733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.263382][ T5740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.272459][ T5733] usb 7-1: Product: syz [ 553.277014][ T5740] usb 6-1: Product: syz [ 553.281240][ T5733] usb 7-1: Manufacturer: syz [ 553.287972][ T5740] usb 6-1: Manufacturer: syz [ 553.293530][ T5733] usb 7-1: SerialNumber: syz [ 553.300577][ T5740] usb 6-1: SerialNumber: syz [ 553.475696][ T1882] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 553.532256][ T5733] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 553.567318][ T5733] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 553.581248][ T5740] usb 6-1: selecting invalid altsetting 0 [ 553.624509][ T5740] uvcvideo 6-1:220.0: probe with driver uvcvideo failed with error -22 [ 553.641386][ T1882] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 553.652976][ T5740] usb 6-1: selecting invalid altsetting 0 [ 553.657218][ T1882] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 553.674109][ T1882] usb 2-1: config 0 interface 0 has no altsetting 0 [ 553.680938][ T5740] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 553.687846][ T5740] usb 6-1: USB disconnect, device number 3 [ 553.694101][ T1882] usb 2-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 553.705748][ T1882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.752049][ T1882] usb 2-1: config 0 descriptor?? [ 553.769274][ T5733] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 553.827015][ T5733] usb 7-1: USB disconnect, device number 2 [ 553.901261][ T6658] udevd[6658]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 554.057942][T11566] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 554.202027][ T1882] wacom 0003:056A:0116.000B: unknown main item tag 0x2 [ 554.219764][ T1882] wacom 0003:056A:0116.000B: unknown main item tag 0x6 [ 554.227152][T11566] usb 3-1: Using ep0 maxpacket: 32 [ 554.235025][ T1882] wacom 0003:056A:0116.000B: ignoring exceeding usage max [ 554.244814][T11566] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 554.258190][ T1882] wacom 0003:056A:0116.000B: unknown main item tag 0x4 [ 554.265190][T11566] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 554.288278][T11566] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.334685][T11566] usb 3-1: config 0 interface 0 has no altsetting 0 [ 554.347478][T11566] usb 3-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 554.357417][T11566] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.372922][T11680] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1553'. [ 554.375852][T11566] usb 3-1: config 0 descriptor?? [ 554.387261][ T1880] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 554.414701][ T1882] usb 2-1: USB disconnect, device number 42 [ 554.550549][ T1880] usb 7-1: Using ep0 maxpacket: 16 [ 554.571411][ T1880] usb 7-1: unable to get BOS descriptor or descriptor too short [ 554.611509][ T1880] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.775642][ T1880] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 554.973568][T11566] usbhid 3-1:0.0: can't add hid device: -71 [ 554.982458][ T1880] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 554.997298][ T1880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.005807][T11566] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 555.013541][ T1880] usb 7-1: Product: syz [ 555.022657][T11191] Bluetooth: hci5: unknown advertising packet type: 0x61 [ 555.029412][T11566] usb 3-1: USB disconnect, device number 45 [ 555.042658][ T1880] usb 7-1: Manufacturer: syz [ 555.047360][ T1880] usb 7-1: SerialNumber: syz [ 555.262087][ T1880] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 555.274845][ T1880] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 555.454574][ T1882] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 555.626706][ T1882] usb 6-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 555.682301][ T1880] usb 7-1: 2:1 : bogus bTerminalLink 6 [ 555.703166][ T1882] usb 6-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 555.788303][T11703] bond0: (slave bridge0): Releasing backup interface [ 555.804246][T11705] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1560'. [ 555.807810][ T1882] usb 6-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 555.885405][T11703] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.893494][T11703] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.915700][T11707] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 555.970736][ T1882] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 556.076700][ T1882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 556.177932][ T1882] usb 6-1: SerialNumber: syz [ 556.264508][ T1882] cdc_acm 6-1:253.0: Zero length descriptor references [ 556.264851][ T1880] usb 7-1: USB disconnect, device number 3 [ 556.280167][ T1882] cdc_acm 6-1:253.0: probe with driver cdc_acm failed with error -22 [ 556.292087][T11703] bond1: (slave bond0): Releasing active interface [ 556.350841][ T1882] usb-storage 6-1:253.0: USB Mass Storage device detected [ 556.599585][ T1882] usb-storage 6-1:253.0: Quirks match for vid 0525 pid a4a5: 10000 [ 558.475578][T11703] bond2: (slave dummy0): Releasing active interface [ 558.478665][ T9506] block nbd0: Possible stuck request ffff88802840e000: control (read@0,1024B). Runtime 90 seconds [ 558.493215][ T9506] block nbd0: Possible stuck request ffff88802840e1c0: control (read@1024,1024B). Runtime 90 seconds [ 558.507730][ T9506] block nbd0: Possible stuck request ffff88802840e380: control (read@2048,1024B). Runtime 90 seconds [ 558.520727][ T9506] block nbd0: Possible stuck request ffff88802840e540: control (read@3072,1024B). Runtime 90 seconds [ 558.541810][T11703] dummy0: left promiscuous mode [ 558.594866][T11703] dummy0: left allmulticast mode [ 558.610363][ T1882] usb 6-1: USB disconnect, device number 4 [ 559.043888][ T30] audit: type=1400 audit(1780808154.415:921): avc: denied { accept } for pid=11718 comm="syz.5.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 559.623635][T11703] bridge_slave_0: left allmulticast mode [ 559.637627][T11703] bridge_slave_0: left promiscuous mode [ 559.661438][T11703] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.670662][ T1882] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 559.836287][ T1882] usb 6-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 559.846378][T11703] bridge_slave_1: left allmulticast mode [ 559.863591][T11703] bridge_slave_1: left promiscuous mode [ 559.876464][ T1882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.892819][T11703] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.906270][ T1882] usb 6-1: Product: syz [ 559.915330][ T1882] usb 6-1: Manufacturer: syz [ 559.921329][ T1882] usb 6-1: SerialNumber: syz [ 559.941859][ T1882] usb 6-1: config 0 descriptor?? [ 559.960037][T11703] bond0: (slave bond_slave_0): Releasing backup interface [ 560.402917][T11703] bond0: (slave bond_slave_1): Releasing backup interface [ 560.454767][T11703] team0: Port device team_slave_0 removed [ 560.483279][T11703] team0: Port device team_slave_1 removed [ 560.497285][T11703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.512972][T11703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.540970][T11703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.559504][ T1882] libceph: connect (1)[c::]:6789 error -101 [ 560.565933][ T1882] libceph: mon0 (1)[c::]:6789 connect error [ 560.579217][T11703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.604671][T11703] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 560.657489][T11705] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1560'. [ 560.685702][T11724] tc_dump_action: action bad kind [ 560.718368][T11734] ceph: No mds server is up or the cluster is laggy [ 560.850030][T11566] libceph: connect (1)[c::]:6789 error -101 [ 560.858145][T11566] libceph: mon0 (1)[c::]:6789 connect error [ 560.994137][T11742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.861978][ T5732] usb 6-1: USB disconnect, device number 5 [ 562.001426][T11737] serio: Serial port ptm1 [ 562.061229][ T5740] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 562.242956][ T5740] usb 2-1: Using ep0 maxpacket: 8 [ 562.420002][ T5740] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 562.431660][ T5740] usb 2-1: config 0 has no interface number 0 [ 562.449934][ T5740] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 562.473299][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.479657][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.488128][ T5740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.520952][ T5740] usb 2-1: Product: syz [ 562.540560][ T5740] usb 2-1: Manufacturer: syz [ 563.027084][ T6527] Bluetooth: hci6: Frame reassembly failed (-84) [ 563.290970][ T5740] usb 2-1: SerialNumber: syz [ 563.311390][ T5740] usb 2-1: config 0 descriptor?? [ 564.547661][ T5740] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 564.581430][ T30] audit: type=1400 audit(1780808159.968:922): avc: denied { write } for pid=11738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.611481][ T5740] uvcvideo 2-1:0.31: Entity type for entity Output 32774 was not initialized! [ 564.653630][ T5740] usb 2-1: USB disconnect, device number 43 [ 564.878710][ T30] audit: type=1400 audit(1780808160.268:923): avc: denied { write } for pid=11776 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 564.968258][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1575'. [ 565.031150][T11191] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 565.041004][ T4939] Bluetooth: hci6: command 0xfc11 tx timeout [ 565.087740][T11779] bond2: entered promiscuous mode [ 565.093019][T11779] bond2: entered allmulticast mode [ 565.098478][T11779] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.335759][T11782] erspan1: entered allmulticast mode [ 565.594494][T11782] erspan1: entered promiscuous mode [ 565.625434][T11782] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 565.718899][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1575'. [ 565.775329][T11779] bond2 (unregistering): (slave erspan1): Releasing backup interface [ 565.788527][ T1881] libceph: connect (1)[c::]:6789 error -101 [ 565.805364][T11779] erspan1: left promiscuous mode [ 565.811191][ T1881] libceph: mon0 (1)[c::]:6789 connect error [ 565.832445][T11779] bond2 (unregistering): Released all slaves [ 565.871322][T11787] ceph: No mds server is up or the cluster is laggy [ 566.089527][ T5740] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 566.259141][ T5740] usb 7-1: Using ep0 maxpacket: 8 [ 566.278142][ T5740] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 566.308468][ T5740] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 566.320558][ T5740] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 566.333714][ T5740] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 566.353948][ T5740] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 566.392993][ T5740] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 566.422638][ T5740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.756037][ T5740] usb 7-1: usb_control_msg returned -32 [ 566.770295][ T5740] usbtmc 7-1:16.0: can't read capabilities [ 566.993010][ T5740] usb 7-1: USB disconnect, device number 4 [ 567.211508][ T30] audit: type=1400 audit(1780808162.589:924): avc: denied { write } for pid=11793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.379293][T11835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.416100][T11835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.515242][ T30] audit: type=1400 audit(1780808162.899:925): avc: denied { write } for pid=11836 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.560234][ T1881] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 567.749023][ T1881] usb 3-1: Using ep0 maxpacket: 16 [ 568.007340][ T1881] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 568.044671][ T1881] usb 3-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 568.102128][ T1881] usb 3-1: config 0 has no interface number 0 [ 568.136750][ T1881] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 568.183284][ T1881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.216439][ T1881] usb 3-1: Product: syz [ 568.236102][ T1881] usb 3-1: Manufacturer: syz [ 568.258679][ T1881] usb 3-1: SerialNumber: syz [ 568.286625][ T1881] usb 3-1: config 0 descriptor?? [ 568.374671][ T1881] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 568.437912][ T1881] uvcvideo 3-1:0.105: No valid video chain found. [ 568.558132][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1588'. [ 568.782091][T11566] usb 3-1: USB disconnect, device number 46 [ 569.235878][ T30] audit: type=1400 audit(1780808164.620:926): avc: denied { write } for pid=11854 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.628284][ T30] audit: type=1400 audit(1780808164.740:927): avc: denied { create } for pid=11873 comm="syz.6.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 569.667835][ T803] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 569.759314][ T30] audit: type=1400 audit(1780808165.101:928): avc: denied { write } for pid=11876 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.859511][ T30] audit: type=1400 audit(1780808165.251:929): avc: denied { prog_load } for pid=11878 comm="syz.2.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 569.880820][ T803] usb 7-1: config 0 has no interfaces? [ 569.893217][ T803] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 569.934424][ T30] audit: type=1400 audit(1780808165.271:930): avc: denied { bpf } for pid=11878 comm="syz.2.1590" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 569.956245][ T803] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.972742][ T803] usb 7-1: config 0 descriptor?? [ 570.092029][ T30] audit: type=1400 audit(1780808165.481:931): avc: denied { map_create } for pid=11878 comm="syz.2.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 570.119705][T11883] ubi: mtd0 is already attached to ubi16 [ 570.190878][ T803] usb 7-1: string descriptor 0 read error: -71 [ 570.301923][ T803] usb 7-1: USB disconnect, device number 5 [ 570.461120][ T30] audit: type=1400 audit(1780808165.851:932): avc: denied { write } for pid=11884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.573817][ T30] audit: type=1400 audit(1780808165.951:933): avc: denied { write } for pid=11899 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.142612][ T30] audit: type=1400 audit(1780808166.531:934): avc: denied { create } for pid=11902 comm="syz.1.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 571.201946][ T30] audit: type=1400 audit(1780808166.561:935): avc: denied { bind } for pid=11902 comm="syz.1.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 571.436562][ T5740] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 571.606792][ T5740] usb 7-1: Using ep0 maxpacket: 16 [ 571.625554][ T5740] usb 7-1: unable to get BOS descriptor or descriptor too short [ 571.657405][ T5740] usb 7-1: config 9 has an invalid interface number: 5 but max is 0 [ 571.691139][ T5740] usb 7-1: config 9 has no interface number 0 [ 571.704188][ T5740] usb 7-1: config 9 interface 5 has no altsetting 0 [ 571.720503][ T5740] usb 7-1: New USB device found, idVendor=15c2, idProduct=003d, bcdDevice=42.1f [ 571.743592][ T5740] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.763949][ T5740] usb 7-1: Product: syz [ 571.777744][ T5740] usb 7-1: Manufacturer: syz [ 571.786419][ T5740] usb 7-1: SerialNumber: syz [ 571.829195][ T30] audit: type=1400 audit(1780808167.222:936): avc: denied { perfmon } for pid=11910 comm="syz.4.1595" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 572.016311][T11717] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 572.143301][T11923] can0: slcan on ttyS3. [ 572.197058][T11717] usb 3-1: Using ep0 maxpacket: 16 [ 572.214421][T11717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.232711][T11717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.243590][T11717] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 572.244571][T11909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.270767][T11717] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 572.289635][T11717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.304673][T11909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.315939][T11923] can0 (unregistered): slcan off ttyS3. [ 572.354866][T11717] usb 3-1: config 0 descriptor?? [ 572.459332][ T5740] imon 7-1:9.5: unable to register, err -19 [ 572.513911][ T5740] usb 7-1: USB disconnect, device number 6 [ 572.847025][T11717] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 572.876683][ T5740] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 572.885038][T11717] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 572.986001][T11717] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000C/input/input27 [ 573.058590][ T5740] usb 7-1: config 0 has an invalid interface number: 158 but max is 0 [ 573.073026][ T5740] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.087214][ T5740] usb 7-1: config 0 has no interface number 0 [ 573.094338][ T5740] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 573.123879][ T5740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.263755][T11717] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 573.337173][ T5740] usb 7-1: config 0 descriptor?? [ 573.350820][T11717] usb 3-1: USB disconnect, device number 47 [ 573.633475][T11191] Bluetooth: hci5: unknown advertising packet type: 0x61 [ 573.920900][T11945] fido_id[11945]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 574.289744][T11961] usb usb8: usbfs: process 11961 (syz.6.1600) did not claim interface 0 before use [ 574.447831][T11969] 9p: Bad value for 'rfdno' [ 575.480452][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 575.480469][ T30] audit: type=1400 audit(1780808170.873:940): avc: denied { mount } for pid=11979 comm="syz.4.1606" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 576.017347][T11983] kAFS: unable to lookup cell 'ÿ' [ 576.347228][ T30] audit: type=1800 audit(1780808171.094:941): pid=11987 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1608" name="file0" dev="overlay" ino=1850 res=0 errno=0 [ 576.478317][ T24] usb 7-1: USB disconnect, device number 7 [ 576.594926][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'. [ 576.632321][ T30] audit: type=1400 audit(1780808172.024:942): avc: denied { mounton } for pid=11993 comm="syz.2.1610" path="/syzcgroup/unified/syz2" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 576.656510][T11996] gfs2: gfs2 mount does not exist [ 576.687783][ T30] audit: type=1400 audit(1780808172.084:943): avc: denied { getopt } for pid=11993 comm="syz.2.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 576.716565][ T30] audit: type=1400 audit(1780808172.104:944): avc: denied { map_read map_write } for pid=11998 comm="syz.1.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 576.927398][ T30] audit: type=1400 audit(1780808172.324:945): avc: denied { unmount } for pid=5628 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 576.958170][T11983] netlink: 'syz.5.1607': attribute type 10 has an invalid length. [ 576.958272][T11991] netlink: 'syz.5.1607': attribute type 10 has an invalid length. [ 577.064473][ T30] audit: type=1400 audit(1780808172.464:946): avc: denied { write } for pid=11966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.380139][ T30] audit: type=1400 audit(1780808172.774:947): avc: denied { write } for pid=12026 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.623070][T11983] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 578.383011][T12036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.396536][T12042] tmpfs: Bad value for 'mpol' [ 578.456393][ T1881] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 578.843864][ T1881] usb 7-1: Using ep0 maxpacket: 8 [ 578.908790][ T30] audit: type=1400 audit(1780808174.305:948): avc: denied { create } for pid=12043 comm="syz.1.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 579.248720][T12049] block device autoloading is deprecated and will be removed. [ 579.319604][ T1881] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 579.338132][ T1881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.351102][ T1881] usb 7-1: Product: syz [ 579.358102][ T1881] usb 7-1: Manufacturer: syz [ 579.362831][ T1881] usb 7-1: SerialNumber: syz [ 579.371714][ T1881] usb 7-1: config 0 descriptor?? [ 579.510576][T12059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.523556][T12059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.657039][T11983] team0: Port device netdevsim1 added [ 580.446259][ T30] audit: type=1400 audit(1780808175.846:949): avc: denied { write } for pid=12037 comm="syz.6.1621" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 580.480828][ T1881] usb write operation failed. (-71) [ 580.494532][ T1881] usb write operation failed. (-71) [ 580.503985][ T1881] usb write operation failed. (-71) [ 580.509701][ T30] audit: type=1400 audit(1780808175.856:950): avc: denied { ioctl } for pid=12037 comm="syz.6.1621" path="socket:[40233]" dev="sockfs" ino=40233 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 580.535872][ T1881] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 580.550344][T12082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.550630][ T1881] usb 7-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 580.571519][ T30] audit: type=1400 audit(1780808175.966:951): avc: denied { firmware_load } for pid=1881 comm="kworker/0:4" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 580.592717][ T1881] usb 7-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 580.592799][T12082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.924333][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1638'. [ 582.896681][T11566] libceph: connect (1)[c::]:6789 error -101 [ 582.907007][T11566] libceph: mon0 (1)[c::]:6789 connect error [ 582.982163][T12116] ceph: No mds server is up or the cluster is laggy [ 583.057837][ T30] audit: type=1400 audit(1780808178.457:952): avc: denied { bind } for pid=12119 comm="syz.4.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 584.002309][T12136] loop2: detected capacity change from 0 to 7 [ 584.045911][T12136] Dev loop2: unable to read RDB block 7 [ 584.062648][T12136] loop2: AHDI p1 p3 p4 [ 584.076318][T12136] loop2: partition table partially beyond EOD, truncated [ 584.123361][T12136] loop2: p1 size 100663296 extends beyond EOD, truncated [ 584.152567][T12136] loop2: p3 size 4261412863 extends beyond EOD, truncated [ 584.331547][ T4988] Dev loop2: unable to read RDB block 7 [ 584.348406][ T4988] loop2: AHDI p1 p3 p4 [ 584.363504][ T4988] loop2: partition table partially beyond EOD, truncated [ 584.386334][ T4988] loop2: p1 size 100663296 extends beyond EOD, truncated [ 584.418351][ T4988] loop2: p3 size 4261412863 extends beyond EOD, truncated [ 584.736173][T12140] fuse: Bad value for 'fd' [ 584.881721][T12143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1648'. [ 584.915947][T10232] udevd[10232]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 584.927108][T10231] udevd[10231]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 584.969609][T12143] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 585.006860][T12143] overlayfs: overlapping lowerdir path [ 585.159564][ T30] audit: type=1400 audit(1780808180.558:953): avc: denied { write } for pid=12154 comm="syz.6.1653" path="socket:[41048]" dev="sockfs" ino=41048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 585.460180][T12163] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 586.166599][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1657'. [ 588.332143][T12179] fuse: Bad value for 'fd' [ 588.708519][ T9506] block nbd0: Possible stuck request ffff88802840e000: control (read@0,1024B). Runtime 120 seconds [ 588.719980][ T9506] block nbd0: Possible stuck request ffff88802840e1c0: control (read@1024,1024B). Runtime 120 seconds [ 588.732843][ T9506] block nbd0: Possible stuck request ffff88802840e380: control (read@2048,1024B). Runtime 120 seconds [ 588.745487][ T9506] block nbd0: Possible stuck request ffff88802840e540: control (read@3072,1024B). Runtime 120 seconds [ 588.910891][T11717] libceph: connect (1)[c::]:6789 error -101 [ 588.920929][T11717] libceph: mon0 (1)[c::]:6789 connect error [ 588.928579][T12183] ceph: No mds server is up or the cluster is laggy [ 588.951394][ T30] audit: type=1400 audit(1780808184.350:954): avc: denied { map } for pid=12193 comm="syz.2.1661" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 588.977446][ T30] audit: type=1400 audit(1780808184.350:955): avc: denied { execute } for pid=12193 comm="syz.2.1661" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 590.277116][ T5733] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 590.988516][ T5733] usb 6-1: unable to get BOS descriptor or descriptor too short [ 591.029143][ T5733] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.041810][ T5733] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.065200][ T5733] usb 6-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40 [ 591.074690][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.219111][ T5733] usb 6-1: Product: syz [ 591.236003][ T5733] usb 6-1: Manufacturer: syz [ 591.260087][ T5733] usb 6-1: SerialNumber: syz [ 591.293010][T12227] fuse: Bad value for 'fd' [ 591.482513][T12231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'. [ 591.590592][T12207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.687841][T12207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.840494][ T5733] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 591.893627][ T5733] usb 6-1: MIDIStreaming interface descriptor not found [ 592.712921][ T5733] usb 6-1: USB disconnect, device number 6 [ 593.469199][T12250] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1679'. [ 593.583982][ T30] audit: type=1400 audit(1780808188.983:956): avc: denied { connect } for pid=12249 comm="syz.5.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 593.617169][T12252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57116 sclass=netlink_route_socket pid=12252 comm=syz.5.1679 [ 593.680621][ T30] audit: type=1400 audit(1780808189.083:957): avc: denied { ioctl } for pid=12246 comm="syz.2.1678" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 593.733670][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'. [ 594.177157][T12253] netlink: 'syz.2.1678': attribute type 1 has an invalid length. [ 594.196600][T12253] netlink: 'syz.2.1678': attribute type 2 has an invalid length. [ 594.226691][T12255] tipc: Enabling of bearer rejected, failed to enable media [ 594.333698][T12257] hpfs: Bad magic ... probably not HPFS [ 594.407975][ T30] audit: type=1400 audit(1780808189.813:958): avc: denied { read } for pid=12256 comm="syz.5.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 594.518277][T12261] siw: device registration error -23 [ 595.000335][T12268] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 595.406606][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1685'. [ 597.683444][ T30] audit: type=1326 audit(1780808193.085:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc7f9ce59 code=0x7ffc0000 [ 597.729952][T12309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.769814][T12309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.869125][ T30] audit: type=1326 audit(1780808193.085:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc7f9ce59 code=0x7ffc0000 [ 598.004926][ T30] audit: type=1326 audit(1780808193.125:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc7f9ce59 code=0x7ffc0000 [ 598.096141][ T30] audit: type=1326 audit(1780808193.125:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc7f9ce59 code=0x7ffc0000 [ 598.103207][ T5733] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 598.153571][ T30] audit: type=1326 audit(1780808193.135:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbc7f5d68e code=0x7ffc0000 [ 598.185144][ T30] audit: type=1326 audit(1780808193.135:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbc7f9caeb code=0x7ffc0000 [ 598.414403][ T5733] usb 6-1: config 5 has an invalid interface number: 123 but max is 0 [ 598.590706][T11717] libceph: connect (1)[c::]:6789 error -101 [ 598.603742][T11717] libceph: mon0 (1)[c::]:6789 connect error [ 598.624486][ T30] audit: type=1326 audit(1780808193.135:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcbc7f9caeb code=0x7ffc0000 [ 598.663663][ T30] audit: type=1326 audit(1780808193.225:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc7f9ce59 code=0x7ffc0000 [ 598.693567][ T30] audit: type=1326 audit(1780808193.245:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12308 comm="syz.4.1697" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc7f9ce59 code=0x7ffc0000 [ 598.723739][ T5733] usb 6-1: config 5 has no interface number 0 [ 598.755759][ T5733] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 598.795787][T12315] ceph: No mds server is up or the cluster is laggy [ 598.827382][ T5733] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 49768, setting to 64 [ 598.862834][ T5733] usb 6-1: config 5 interface 123 has no altsetting 0 [ 598.894681][ T5733] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 598.930975][ T5733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.966213][ T5733] usb 6-1: Product: syz [ 598.982000][ T5733] usb 6-1: Manufacturer: syz [ 598.995874][ T5733] usb 6-1: SerialNumber: syz [ 599.023459][T12312] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 601.439312][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 601.439340][ T30] audit: type=1400 audit(1780808196.846:1036): avc: denied { getopt } for pid=12343 comm="syz.6.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 601.540827][ T5733] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 601.740032][T12356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.080204][ T5733] usb 6-1: USB disconnect, device number 7 [ 603.792515][T12367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.828052][T12367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.440219][ T5740] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 604.632639][ T5740] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.676156][ T5740] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.718646][ T5740] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 604.768773][ T5740] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 604.810164][ T5740] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.870441][ T5740] usb 2-1: config 0 descriptor?? [ 605.017863][T12379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.052620][T12379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.093893][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1717'. [ 605.397280][ T5740] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 605.664743][ T5733] usb 2-1: USB disconnect, device number 44 [ 605.771495][ T5740] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 605.784455][ T30] audit: type=1400 audit(1780808201.199:1037): avc: denied { watch } for pid=12389 comm="syz.4.1720" path="/proc/1210/fd" dev="proc" ino=40854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 605.933767][ T5740] usb 6-1: Using ep0 maxpacket: 32 [ 605.946038][ T5740] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 605.955305][ T5740] usb 6-1: config 0 has no interface number 0 [ 605.963172][ T5740] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 605.978862][ T5740] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 606.004026][ T5740] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 606.017446][ T5740] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 606.029469][ T5740] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 606.097728][ T5740] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 606.138995][ T5740] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 606.153560][ T5740] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 14444, setting to 1024 [ 607.050314][ T5740] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 607.407622][ T5740] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.424452][ T5740] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 607.433777][ T5740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.442027][ T5740] usb 6-1: Product: syz [ 607.446257][ T5740] usb 6-1: Manufacturer: syz [ 607.451325][ T5740] usb 6-1: SerialNumber: syz [ 607.462055][ T5740] usb 6-1: config 0 descriptor?? [ 607.468986][T12388] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 607.476483][T12388] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 607.492311][ T5740] usb 6-1: will this work? Response EP is not usually 3 [ 607.520358][ T5740] usb 6-1: will this work? Image data EP is not usually 2 [ 607.545583][ T5740] scsi host1: microtekX6 [ 607.739606][ T5740] usb 6-1: USB disconnect, device number 8 [ 608.198197][ T10] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 608.674412][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 608.704162][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 608.734738][ T10] usb 3-1: can't read configurations, error -71 [ 609.958732][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 610.581720][ T30] audit: type=1800 audit(1780808205.601:1038): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1734" name="file0" dev="overlay" ino=2011 res=0 errno=0 [ 610.617248][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 610.638152][ T10] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 610.667740][ T10] usb 3-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 610.701078][ T10] usb 3-1: config 0 has no interface number 0 [ 610.728444][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 610.755763][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.780280][ T10] usb 3-1: Product: syz [ 610.788814][ T10] usb 3-1: Manufacturer: syz [ 610.798276][ T10] usb 3-1: SerialNumber: syz [ 610.848919][ T10] usb 3-1: config 0 descriptor?? [ 610.859436][ T10] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 610.866885][ T10] uvcvideo 3-1:0.105: No valid video chain found. [ 610.934473][T12453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.947479][T12453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.965164][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1736'. [ 611.092218][ T5740] usb 3-1: USB disconnect, device number 50 [ 612.752030][T12485] FAULT_INJECTION: forcing a failure. [ 612.752030][T12485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.795965][T12485] CPU: 0 UID: 0 PID: 12485 Comm: syz.4.1746 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.795987][T12485] Tainted: [L]=SOFTLOCKUP [ 612.795991][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 612.795998][T12485] Call Trace: [ 612.796002][T12485] [ 612.796007][T12485] dump_stack_lvl+0x100/0x190 [ 612.796025][T12485] should_fail_ex.cold+0x5/0xa [ 612.796042][T12485] _copy_from_user+0x2e/0xd0 [ 612.796057][T12485] move_addr_to_kernel+0x65/0x170 [ 612.796073][T12485] __sys_sendto+0x1c9/0x4b0 [ 612.796090][T12485] ? __pfx___sys_sendto+0x10/0x10 [ 612.796110][T12485] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 612.796124][T12485] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 612.796144][T12485] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 612.796170][T12485] __x64_sys_sendto+0xe0/0x1c0 [ 612.796185][T12485] ? do_syscall_64+0x90/0x870 [ 612.796200][T12485] ? lockdep_hardirqs_on+0x78/0x100 [ 612.796215][T12485] do_syscall_64+0x115/0x870 [ 612.796229][T12485] ? clear_bhb_loop+0x40/0x90 [ 612.796243][T12485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.796255][T12485] RIP: 0033:0x7fcbc7f5d68e [ 612.796265][T12485] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 612.796282][T12485] RSP: 002b:00007fcbc8e2be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 612.796294][T12485] RAX: ffffffffffffffda RBX: 00007fcbc8e2d6c0 RCX: 00007fcbc7f5d68e [ 612.796302][T12485] RDX: 000000000000001c RSI: 00007fcbc8e2c000 RDI: 0000000000000004 [ 612.796309][T12485] RBP: 0000000000000000 R08: 00007fcbc8e2bf04 R09: 000000000000000c [ 612.796316][T12485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 612.796323][T12485] R13: 00007fcbc8e2bf58 R14: 00007fcbc8e2c000 R15: 0000000000000000 [ 612.796338][T12485] [ 613.093852][T12489] netlink: 'syz.1.1748': attribute type 4 has an invalid length. [ 613.121023][T12494] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 613.127558][T12494] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 613.135303][T12494] vhci_hcd vhci_hcd.0: Device attached [ 613.135732][T12489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1748'. [ 613.156580][T12495] vhci_hcd: connection closed [ 613.157787][ T6527] vhci_hcd vhci_hcd.2: stop threads [ 613.160227][ T30] audit: type=1400 audit(1780808208.572:1039): avc: denied { bind } for pid=12488 comm="syz.1.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 613.162479][ T6527] vhci_hcd vhci_hcd.2: release socket [ 613.162500][ T6527] vhci_hcd vhci_hcd.2: disconnect device [ 613.176398][T12489] IPVS: Unknown mcast interface: [ 613.222459][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1748'. [ 614.053551][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.178533][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.328841][T11717] libceph: connect (1)[c::]:6789 error -101 [ 614.335977][T11717] libceph: mon0 (1)[c::]:6789 connect error [ 614.437907][T11717] libceph: connect (1)[c::]:6789 error -101 [ 614.455940][T11717] libceph: mon0 (1)[c::]:6789 connect error [ 614.470338][T12520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1756'. [ 614.540368][T12516] ceph: No mds server is up or the cluster is laggy [ 615.503684][T12537] lo speed is unknown, defaulting to 1000 [ 617.077653][T12556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1765'. [ 617.089617][T12556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1765'. [ 617.106815][T12556] fuse: Unknown parameter 'fe' [ 617.433777][T11717] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 617.623903][T11717] usb 3-1: Using ep0 maxpacket: 16 [ 617.682236][T11717] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 617.701906][T11717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.724705][T11717] usb 3-1: Product: syz [ 617.728995][T11717] usb 3-1: Manufacturer: syz [ 617.734201][T11717] usb 3-1: SerialNumber: syz [ 617.818962][T12563] FAULT_INJECTION: forcing a failure. [ 617.818962][T12563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.832293][T12563] CPU: 0 UID: 0 PID: 12563 Comm: syz.6.1768 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.832326][T12563] Tainted: [L]=SOFTLOCKUP [ 617.832333][T12563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 617.832344][T12563] Call Trace: [ 617.832353][T12563] [ 617.832360][T12563] dump_stack_lvl+0x100/0x190 [ 617.832392][T12563] should_fail_ex.cold+0x5/0xa [ 617.832421][T12563] _copy_from_user+0x2e/0xd0 [ 617.832456][T12563] futex_parse_waitv+0xf4/0x580 [ 617.832488][T12563] ? __pfx_futex_wake_mark+0x10/0x10 [ 617.832510][T12563] ? __pfx_futex_parse_waitv+0x10/0x10 [ 617.832539][T12563] ? trace_kmalloc+0xe3/0x110 [ 617.832565][T12563] ? __kmalloc_noprof+0x320/0x850 [ 617.832603][T12563] __do_sys_futex_waitv+0x22c/0x2b0 [ 617.832636][T12563] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 617.832678][T12563] ? rcu_is_watching+0x12/0xc0 [ 617.832714][T12563] do_syscall_64+0x115/0x870 [ 617.832741][T12563] ? clear_bhb_loop+0x40/0x90 [ 617.832768][T12563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.832790][T12563] RIP: 0033:0x7efd14d9ce59 [ 617.832807][T12563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.832828][T12563] RSP: 002b:00007efd15d06028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 617.832848][T12563] RAX: ffffffffffffffda RBX: 00007efd15015fa0 RCX: 00007efd14d9ce59 [ 617.832861][T12563] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001b00 [ 617.832874][T12563] RBP: 00007efd15d06090 R08: 0000000000000001 R09: 0000000000000000 [ 617.832887][T12563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.832900][T12563] R13: 00007efd15016038 R14: 00007efd15015fa0 R15: 00007ffd6df7eb08 [ 617.832928][T12563] [ 618.440922][T11717] r8152-cfgselector 3-1: Unknown version 0x0000 [ 618.452974][T11717] r8152-cfgselector 3-1: config 0 descriptor?? [ 618.555862][T12566] bond2: Removing last arp target with arp_interval on [ 618.563937][T12566] bond2: entered allmulticast mode [ 618.569463][T12566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 618.659096][T12572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.673223][T12572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.764504][ T9506] block nbd0: Possible stuck request ffff88802840e000: control (read@0,1024B). Runtime 150 seconds [ 618.775290][ T9506] block nbd0: Possible stuck request ffff88802840e1c0: control (read@1024,1024B). Runtime 150 seconds [ 618.786422][ T9506] block nbd0: Possible stuck request ffff88802840e380: control (read@2048,1024B). Runtime 150 seconds [ 618.797436][ T9506] block nbd0: Possible stuck request ffff88802840e540: control (read@3072,1024B). Runtime 150 seconds [ 619.028145][ T30] audit: type=1400 audit(1780808214.445:1040): avc: denied { read } for pid=12582 comm="syz.6.1775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 619.050827][T12583] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1775'. [ 619.072399][T12583] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1775'. [ 619.232652][ T5740] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 619.500620][ T5740] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 619.712982][ T5740] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 619.722222][ T5740] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 619.733400][ T5740] usb 2-1: Product: syz [ 619.738677][ T5740] usb 2-1: Manufacturer: syz [ 619.744859][ T5740] usb 2-1: SerialNumber: syz [ 619.763665][ T5740] usb 2-1: config 0 descriptor?? [ 620.003105][T12581] netlink: 408 bytes leftover after parsing attributes in process `syz.1.1774'. [ 620.016846][ T5740] usb 2-1: USB disconnect, device number 45 [ 620.125841][T11717] r8152-cfgselector 3-1: Unknown version 0x0000 [ 620.137561][T11717] r8152-cfgselector 3-1: No union descriptors [ 620.152210][T11717] r8152-cfgselector 3-1: USB disconnect, device number 51 [ 620.562625][T12600] FAULT_INJECTION: forcing a failure. [ 620.562625][T12600] name failslab, interval 1, probability 0, space 0, times 0 [ 620.576055][T12600] CPU: 0 UID: 0 PID: 12600 Comm: syz.1.1780 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.576075][T12600] Tainted: [L]=SOFTLOCKUP [ 620.576079][T12600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 620.576086][T12600] Call Trace: [ 620.576090][T12600] [ 620.576095][T12600] dump_stack_lvl+0x100/0x190 [ 620.576113][T12600] should_fail_ex.cold+0x5/0xa [ 620.576129][T12600] ? tomoyo_encode2+0xfb/0x3c0 [ 620.576147][T12600] should_failslab+0xc2/0x120 [ 620.576161][T12600] __kmalloc_noprof+0xe0/0x850 [ 620.576177][T12600] ? d_absolute_path+0x136/0x1b0 [ 620.576193][T12600] tomoyo_encode2+0xfb/0x3c0 [ 620.576216][T12600] tomoyo_encode+0x29/0x50 [ 620.576232][T12600] tomoyo_realpath_from_path+0x18c/0x690 [ 620.576254][T12600] tomoyo_path_number_perm+0x23c/0x580 [ 620.576269][T12600] ? tomoyo_path_number_perm+0x22e/0x580 [ 620.576285][T12600] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 620.576317][T12600] ? find_held_lock+0x2b/0x80 [ 620.576328][T12600] ? __fget_files+0x215/0x3d0 [ 620.576341][T12600] ? hook_file_ioctl_common+0x149/0x410 [ 620.576354][T12600] ? __fget_files+0x215/0x3d0 [ 620.576383][T12600] ? __fget_files+0x21f/0x3d0 [ 620.576413][T12600] security_file_ioctl+0xd3/0x230 [ 620.576438][T12600] __x64_sys_ioctl+0xb7/0x210 [ 620.576452][T12600] do_syscall_64+0x115/0x870 [ 620.576467][T12600] ? clear_bhb_loop+0x40/0x90 [ 620.576482][T12600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.576493][T12600] RIP: 0033:0x7f797739ce59 [ 620.576503][T12600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.576514][T12600] RSP: 002b:00007f7978189028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.576525][T12600] RAX: ffffffffffffffda RBX: 00007f7977615fa0 RCX: 00007f797739ce59 [ 620.576534][T12600] RDX: 0000200000000140 RSI: 0000000040187013 RDI: 0000000000000003 [ 620.576541][T12600] RBP: 00007f7978189090 R08: 0000000000000000 R09: 0000000000000000 [ 620.576548][T12600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.576554][T12600] R13: 00007f7977616038 R14: 00007f7977615fa0 R15: 00007ffff98e8288 [ 620.576570][T12600] [ 620.576581][T12600] ERROR: Out of memory at tomoyo_realpath_from_path. [ 621.367256][T12611] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1784'. [ 621.377941][ T30] audit: type=1400 audit(1780808216.796:1041): avc: denied { create } for pid=12610 comm="syz.4.1784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 621.405438][T12611] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=281 sclass=netlink_xfrm_socket pid=12611 comm=syz.4.1784 [ 621.515899][T12618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.526376][T12618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.431020][ T1882] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 622.592884][ T1882] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 622.606501][ T1882] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 622.617714][ T1882] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.627644][ T1882] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 622.640946][ T1882] usb 2-1: config 0 interface 0 has no altsetting 0 [ 622.647559][ T1882] usb 2-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 622.656676][ T1882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.666374][ T1882] usb 2-1: config 0 descriptor?? [ 623.403304][ T1882] usbhid 2-1:0.0: can't add hid device: -71 [ 623.445174][ T1882] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 623.517020][ T1882] usb 2-1: USB disconnect, device number 46 [ 623.883447][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.889801][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.601011][ T30] audit: type=1800 audit(1780808219.648:1042): pid=12653 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.1797" name="file0" dev="overlay" ino=268 res=0 errno=0 [ 624.630418][ T30] audit: type=1400 audit(1780808220.058:1043): avc: denied { read } for pid=12651 comm="syz.2.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 624.967408][T12660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.992213][T12660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.329090][ T803] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 626.538986][ T803] usb 3-1: Using ep0 maxpacket: 8 [ 627.130321][ T803] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 627.140950][ T803] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 627.151064][ T803] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 627.166160][ T803] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 627.185360][ T803] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.204994][ T803] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 627.223775][ T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.338000][ T4939] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 627.351518][ T4939] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 627.372878][ T4939] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 627.384304][ T4939] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 627.394399][ T4939] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 627.472341][T12684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1807'. [ 627.515844][T12684] l2tp_ppp: sess 2/0: no socket in recv [ 627.542689][ T803] usb 3-1: usb_control_msg returned -71 [ 627.574707][ T803] usbtmc 3-1:16.0: can't read capabilities [ 627.627493][ T803] usb 3-1: USB disconnect, device number 52 [ 628.445216][T12691] lo speed is unknown, defaulting to 1000 [ 629.679639][T11191] Bluetooth: hci6: command tx timeout [ 630.049403][ T30] audit: type=1400 audit(1780808225.461:1044): avc: denied { setattr } for pid=12724 comm="syz.2.1817" name="adsp1" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 630.227120][ T5733] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 630.294377][T12691] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.304339][T12691] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.313890][T12691] bridge_slave_0: entered allmulticast mode [ 630.325697][T12691] bridge_slave_0: entered promiscuous mode [ 630.336040][T12691] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.345123][T12691] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.352619][T12691] bridge_slave_1: entered allmulticast mode [ 630.360753][T12691] bridge_slave_1: entered promiscuous mode [ 630.377111][ T5733] usb 2-1: Using ep0 maxpacket: 16 [ 630.386037][ T5733] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 630.396130][ T5733] usb 2-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 630.406644][ T5733] usb 2-1: config 0 has no interface number 0 [ 630.416753][ T5733] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 630.444132][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.485827][ T5733] usb 2-1: Product: syz [ 630.505823][ T5733] usb 2-1: Manufacturer: syz [ 630.533349][ T5733] usb 2-1: SerialNumber: syz [ 630.571700][ T5733] usb 2-1: config 0 descriptor?? [ 630.580103][T12691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.618147][ T5733] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 630.629573][T12691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.639810][ T5733] uvcvideo 2-1:0.105: No valid video chain found. [ 630.731499][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1820'. [ 630.747982][T12737] l2tp_ppp: sess 2/0: no socket in recv [ 630.759832][T12691] team0: Port device team_slave_0 added [ 630.786408][T12691] team0: Port device team_slave_1 added [ 630.839332][ T5733] usb 2-1: USB disconnect, device number 47 [ 630.996262][T12691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.012627][T12691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.100719][T12691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.133585][T12691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.150299][T12691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.238324][T12691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.332456][ T30] audit: type=1400 audit(1780808226.751:1045): avc: denied { read } for pid=12738 comm="syz.2.1821" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 631.332509][ T30] audit: type=1400 audit(1780808226.751:1046): avc: denied { open } for pid=12738 comm="syz.2.1821" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 631.332551][ T30] audit: type=1400 audit(1780808226.751:1047): avc: denied { ioctl } for pid=12738 comm="syz.2.1821" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 631.379673][T12691] hsr_slave_0: entered promiscuous mode [ 631.382404][T12691] hsr_slave_1: entered promiscuous mode [ 631.383720][T12691] debugfs: 'hsr0' already exists in 'hsr' [ 631.383751][T12691] Cannot create hsr debugfs directory [ 631.491243][T12748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.494399][T12748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.615492][T12754] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1824'. [ 631.716483][T11191] Bluetooth: hci6: command tx timeout [ 632.377723][T12691] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 632.401188][T12691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 632.411800][T12691] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 632.426120][T12691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 632.436678][T12691] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 632.458598][T12691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 632.480030][T12691] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 632.515244][T12691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 632.705233][T12691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.771237][T12691] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.792773][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.799885][ T6522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.859985][T12772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1827'. [ 632.884529][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.891635][ T6525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.072916][T12773] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1827'. [ 633.923659][T11191] Bluetooth: hci6: command tx timeout [ 635.011234][ T30] audit: type=1400 audit(1780808230.433:1048): avc: denied { listen } for pid=12792 comm="syz.4.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 635.683025][T12691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.955127][ T4939] Bluetooth: hci6: command tx timeout [ 636.469728][T12819] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 636.698648][T12828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.778329][T12691] veth0_vlan: entered promiscuous mode [ 636.830250][T12691] veth1_vlan: entered promiscuous mode [ 637.170720][ T5740] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 637.221964][T12691] veth0_macvtap: entered promiscuous mode [ 637.296778][T12691] veth1_macvtap: entered promiscuous mode [ 637.347367][ T5740] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 637.381853][ T5740] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 637.402363][T12691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.412468][ T5740] usb 3-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 637.435365][T12691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.458084][ T5740] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 637.469754][ T30] audit: type=1400 audit(1780808232.894:1049): avc: denied { setopt } for pid=12836 comm="syz.1.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 637.492278][ T5740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 637.506118][ T1172] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.519511][ T5740] usb 3-1: SerialNumber: syz [ 637.519646][T12838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1841'. [ 637.524443][ T1172] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.574259][ T1172] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.587455][ T5740] cdc_acm 3-1:253.0: Zero length descriptor references [ 637.609070][ T5740] cdc_acm 3-1:253.0: probe with driver cdc_acm failed with error -22 [ 637.621081][ T5740] usb-storage 3-1:253.0: USB Mass Storage device detected [ 637.639797][ T1172] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.739458][ T5740] usb-storage 3-1:253.0: Quirks match for vid 0525 pid a4a5: 10000 [ 637.820364][ T6527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.829381][ T6527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.346615][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.356500][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.427366][ T30] audit: type=1400 audit(1780808233.855:1050): avc: denied { mounton } for pid=12691 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 639.398635][T11566] libceph: connect (1)[c::]:6789 error -101 [ 639.415425][T11566] libceph: mon0 (1)[c::]:6789 connect error [ 639.459024][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1847'. [ 639.544582][T12863] ceph: No mds server is up or the cluster is laggy [ 639.679833][T11566] usb 3-1: USB disconnect, device number 53 [ 639.705111][T12874] random: crng reseeded on system resumption [ 639.716492][T11717] libceph: connect (1)[c::]:6789 error -101 [ 639.723409][T11717] libceph: mon0 (1)[c::]:6789 connect error [ 639.948868][ T30] audit: type=1400 audit(1780808235.376:1051): avc: denied { block_suspend } for pid=12877 comm="syz.4.1849" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 640.120604][T12881] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12881 comm=syz.4.1849 [ 640.218543][T12880] netlink: 'syz.4.1849': attribute type 39 has an invalid length. [ 640.244003][T11566] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 640.384851][T12886] sctp: [Deprecated]: syz.6.1853 (pid 12886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 640.384851][T12886] Use struct sctp_sack_info instead [ 640.464966][T11566] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 640.494554][T11566] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 640.567691][T11566] usb 3-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 640.655715][T11566] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 640.700035][T11566] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 640.742623][T11566] usb 3-1: SerialNumber: syz [ 640.784590][T11566] cdc_acm 3-1:253.0: Zero length descriptor references [ 640.793335][T11566] cdc_acm 3-1:253.0: probe with driver cdc_acm failed with error -22 [ 640.802927][T11566] usb-storage 3-1:253.0: USB Mass Storage device detected [ 640.817706][T11566] usb-storage 3-1:253.0: Quirks match for vid 0525 pid a4a5: 10000 [ 642.003066][ T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 642.035217][T12911] xfrm0: entered allmulticast mode [ 642.171180][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 642.177658][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 642.185969][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 642.196643][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 642.207870][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 642.219256][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 642.232715][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 642.242248][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.455508][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 642.462023][ T24] usbtmc 2-1:16.0: can't read capabilities [ 642.711255][T12900] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 642.846847][ T24] usb 3-1: USB disconnect, device number 54 [ 642.917025][ T804] usb 2-1: USB disconnect, device number 48 [ 643.589742][ T24] libceph: connect (1)[c::]:6789 error -101 [ 643.623013][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 643.920687][ T24] libceph: connect (1)[c::]:6789 error -101 [ 643.929499][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 643.938139][T12926] ceph: No mds server is up or the cluster is laggy [ 644.028065][T12943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 644.124901][T12948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.137071][T12948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.355115][ T1881] usb 7-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 644.463243][ T1881] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 644.692736][T12955] IPVS: Error connecting to the multicast addr [ 645.019330][ T1881] usb 7-1: USB disconnect, device number 8 [ 645.108771][T12959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1874'. [ 645.588761][T12969] syzkaller0: entered promiscuous mode [ 645.605635][T12969] syzkaller0: entered allmulticast mode [ 645.949633][ T5733] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 646.130859][ T5733] usb 2-1: Using ep0 maxpacket: 16 [ 646.154187][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.184152][ T6524] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.215878][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.282447][ T5733] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 646.323852][ T5733] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 646.337287][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.378022][ T5733] usb 2-1: config 0 descriptor?? [ 646.663414][ T6524] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.187025][ T30] audit: type=1400 audit(1780808242.359:1052): avc: denied { read } for pid=12966 comm="syz.1.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 647.502725][ T6524] team0: Port device netdevsim1 removed [ 647.531360][ T6524] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.956592][ T9506] block nbd0: Possible stuck request ffff88802840e000: control (read@0,1024B). Runtime 180 seconds [ 648.956959][ T30] audit: type=1400 audit(1780808243.570:1053): avc: denied { connect } for pid=12995 comm="syz.4.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 648.968390][ T9506] block nbd0: Possible stuck request ffff88802840e1c0: control (read@1024,1024B). Runtime 180 seconds [ 649.000818][ T9506] block nbd0: Possible stuck request ffff88802840e380: control (read@2048,1024B). Runtime 180 seconds [ 649.013212][ T9506] block nbd0: Possible stuck request ffff88802840e540: control (read@3072,1024B). Runtime 180 seconds [ 649.522003][ T5740] libceph: connect (1)[c::]:6789 error -101 [ 649.548515][ T5740] libceph: mon0 (1)[c::]:6789 connect error [ 649.602406][ T5740] libceph: connect (1)[c::]:6789 error -101 [ 649.627300][T13002] ceph: No mds server is up or the cluster is laggy [ 649.639925][ T5740] libceph: mon0 (1)[c::]:6789 connect error [ 649.650622][ T5733] usbhid 2-1:0.0: can't add hid device: -71 [ 649.708979][ T5733] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 649.716907][T13006] tmpfs: User quota block hardlimit too large. [ 649.725591][T13008] tmpfs: User quota block hardlimit too large. [ 649.770583][ T5733] usb 2-1: USB disconnect, device number 49 [ 649.849808][ T6524] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.704803][ T6524] bridge_slave_1: left allmulticast mode [ 651.733219][ T6524] bridge_slave_1: left promiscuous mode [ 651.759295][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.830360][ T6524] bridge_slave_0: left allmulticast mode [ 651.860743][ T6524] bridge_slave_0: left promiscuous mode [ 651.874242][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.923432][ T30] audit: type=1400 audit(1780808249.343:1054): avc: denied { write } for pid=13037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.290839][ T30] audit: type=1400 audit(1780808249.723:1055): avc: denied { write } for pid=13065 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.397874][ T6524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.489030][ T6524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.560667][ T6524] bond0 (unregistering): Released all slaves [ 654.648099][T13046] lo speed is unknown, defaulting to 1000 [ 655.613090][T13072] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1899'. [ 655.962599][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 656.030519][T13068] xt_cgroup: path and classid specified [ 656.109404][T13082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1900'. [ 656.396739][T13090] netem: change failed [ 656.441365][T13094] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1904'. [ 656.560063][T13096] syzkaller0: entered promiscuous mode [ 656.577206][T13096] syzkaller0: entered allmulticast mode [ 656.848842][ T6524] hsr_slave_0: left promiscuous mode [ 656.881466][ T6524] hsr_slave_1: left promiscuous mode [ 656.906723][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.574438][ T30] audit: type=1400 audit(1780808252.985:1056): avc: denied { write } for pid=13089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.760708][ T30] audit: type=1400 audit(1780808253.195:1057): avc: denied { write } for pid=13116 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.993988][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.196969][ T6524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.413656][ T6524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.809578][T11566] libceph: connect (1)[c::]:6789 error -101 [ 658.820457][ T6524] veth1_macvtap: left promiscuous mode [ 658.827686][T11566] libceph: mon0 (1)[c::]:6789 connect error [ 658.848511][ T6524] veth0_macvtap: left promiscuous mode [ 658.869445][ T6524] veth1_vlan: left promiscuous mode [ 658.894407][ T6524] veth0_vlan: left promiscuous mode [ 658.959191][T13124] ceph: No mds server is up or the cluster is laggy [ 659.613869][T13132] CIFS: bad ip= option (%‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 660.096482][ T6524] team0 (unregistering): Port device team_slave_1 removed [ 660.180043][ T6524] team0 (unregistering): Port device team_slave_0 removed [ 660.199133][T13136] kvm: pic: non byte write [ 660.226526][T13139] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1912'. [ 661.922595][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 663.108647][ T30] audit: type=1400 audit(1780808258.547:1058): avc: denied { append } for pid=13146 comm="syz.6.1914" name="sg0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 663.794096][ T30] audit: type=1400 audit(1780808259.228:1059): avc: denied { recv } for pid=13146 comm="syz.6.1914" saddr=10.128.0.169 src=37812 daddr=10.128.1.32 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 667.345434][ T4988] udevd[4988]: worker [7706] /devices/virtual/block/nbd0 timeout; kill it [ 667.355548][ T4988] udevd[4988]: seq 16016 '/devices/virtual/block/nbd0' killed [ 667.366275][T13132] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1910'. [ 667.447822][T13157] dvmrp2: entered allmulticast mode [ 668.092956][T11191] Bluetooth: hci0: command 0x0406 tx timeout [ 668.369030][ T1881] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 668.550532][ T1881] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 668.624779][ T1881] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 668.714050][ T1881] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 668.786614][ T1881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.831158][T13186] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1925'. [ 669.167542][T13169] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 669.389099][ T1881] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 669.692959][ T1882] libceph: connect (1)[c::]:6789 error -101 [ 669.699580][ T1882] libceph: mon0 (1)[c::]:6789 connect error [ 669.750409][T13189] ceph: No mds server is up or the cluster is laggy [ 670.096144][ T1882] libceph: connect (1)[c::]:6789 error -101 [ 670.279102][ T1882] libceph: mon0 (1)[c::]:6789 connect error [ 671.159964][ T1881] usb 3-1: USB disconnect, device number 55 [ 671.819214][ T30] audit: type=1400 audit(1780808267.262:1060): avc: denied { write } for pid=13178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 671.973635][ T30] audit: type=1400 audit(1780808267.412:1061): avc: denied { write } for pid=13214 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 672.471149][ T30] audit: type=1400 audit(1780808267.912:1062): avc: denied { ioctl } for pid=13219 comm="syz.4.1930" path="socket:[46437]" dev="sockfs" ino=46437 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 672.513982][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 672.701661][T13227] kAFS: unparsable volume name [ 673.796325][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 673.966103][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 673.992099][ T24] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 674.026911][ T24] usb 3-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 674.049312][ T24] usb 3-1: config 0 has no interface number 0 [ 674.059672][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 674.087732][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.121396][ T24] usb 3-1: Product: syz [ 674.142368][ T24] usb 3-1: Manufacturer: syz [ 674.160740][ T24] usb 3-1: SerialNumber: syz [ 674.181189][ T24] usb 3-1: config 0 descriptor?? [ 674.202737][ T24] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 674.224748][ T24] uvcvideo 3-1:0.105: No valid video chain found. [ 674.481638][ T24] usb 3-1: USB disconnect, device number 56 [ 674.619419][ T30] audit: type=1400 audit(1780808270.063:1063): avc: denied { write } for pid=13229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.011164][ T30] audit: type=1400 audit(1780808270.433:1064): avc: denied { write } for pid=13258 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.642322][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 675.682811][T13272] dlm: non-version read from control device 169 [ 675.851552][ T30] audit: type=1326 audit(1780808271.294:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.1.1940" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f797739ce59 code=0x0 [ 676.234874][T13257] lo speed is unknown, defaulting to 1000 [ 676.498668][ T30] audit: type=1400 audit(1780808271.944:1066): avc: denied { write } for pid=13281 comm="syz.4.1941" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 676.843809][ T24] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 676.871435][T13288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1943'. [ 677.057310][ T24] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 677.109908][ T24] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 677.190687][ T24] usb 3-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 677.258561][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 677.300701][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 677.347878][ T24] usb 3-1: SerialNumber: syz [ 677.419251][ T24] cdc_acm 3-1:253.0: Zero length descriptor references [ 677.458417][ T24] cdc_acm 3-1:253.0: probe with driver cdc_acm failed with error -22 [ 677.503294][ T24] usb-storage 3-1:253.0: USB Mass Storage device detected [ 677.560099][ T24] usb-storage 3-1:253.0: Quirks match for vid 0525 pid a4a5: 10000 [ 679.534456][ T31] INFO: task syz.0.1365:11001 blocked for more than 143 seconds. [ 679.539158][ T9506] block nbd0: Possible stuck request ffff88802840e000: control (read@0,1024B). Runtime 210 seconds [ 679.563496][ T9506] block nbd0: Possible stuck request ffff88802840e1c0: control (read@1024,1024B). Runtime 210 seconds [ 679.576476][ T9506] block nbd0: Possible stuck request ffff88802840e380: control (read@2048,1024B). Runtime 210 seconds [ 679.610365][ T804] usb 3-1: USB disconnect, device number 57 [ 679.616348][ T31] Tainted: G L syzkaller #0 [ 679.616399][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 679.616434][ T31] task:syz.0.1365 state:D stack:25944 pid:11001 tgid:10997 ppid:5619 task_flags:0x400140 flags:0x00080002 [ 679.616764][ T31] Call Trace: [ 679.616796][ T31] [ 679.616908][ T31] __schedule+0x1295/0x67a0 [ 679.617116][ T31] ? __pfx___schedule+0x10/0x10 [ 679.617164][ T31] ? find_held_lock+0x2b/0x80 [ 679.617234][ T31] ? schedule+0x2bf/0x390 [ 679.617336][ T31] schedule+0xdd/0x390 [ 679.617578][ T31] schedule_preempt_disabled+0x13/0x30 [ 679.617632][ T31] __mutex_lock+0xced/0x1b10 [ 679.617712][ T31] ? bdev_open+0xa2/0xe40 [ 679.617817][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 679.617898][ T31] ? bd_prepare_to_claim+0x1e0/0x280 [ 679.617974][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 679.618052][ T31] ? file_init_path+0x48e/0x670 [ 679.618185][ T31] ? bdev_open+0xa2/0xe40 [ 679.618237][ T31] bdev_open+0xa2/0xe40 [ 679.618369][ T31] bdev_file_open_by_dev+0x179/0x210 [ 679.618460][ T31] setup_bdev_super+0x385/0x730 [ 679.618734][ T31] get_tree_bdev_flags+0x363/0x620 [ 679.618784][ T31] ? __pfx_exfat_fill_super+0x10/0x10 [ 679.618862][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 679.618939][ T31] ? __sanitizer_cov_trace_pc+0x44/0x70 [ 679.619018][ T31] ? security_capable+0x80/0x260 [ 679.619116][ T31] vfs_get_tree+0x92/0x320 [ 679.619186][ T31] path_mount+0x7d0/0x23d0 [ 679.626897][ T9506] block nbd0: Possible stuck request ffff88802840e540: control (read@3072,1024B). Runtime 210 seconds [ 680.067985][ T31] ? __pfx_path_mount+0x10/0x10 [ 680.082185][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 680.087880][ T31] ? putname+0xb1/0x110 [ 680.095559][ T31] ? kmem_cache_free+0x127/0x6c0 [ 680.101081][ T31] ? __x64_sys_mount+0x293/0x310 [ 680.106738][ T31] __x64_sys_mount+0x293/0x310 [ 680.112317][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 680.117899][ T31] ? rcu_is_watching+0x12/0xc0 [ 680.124480][ T31] do_syscall_64+0x115/0x870 [ 680.129730][ T31] ? clear_bhb_loop+0x40/0x90 [ 680.135498][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.141649][ T31] RIP: 0033:0x7f47e239ce59 [ 680.148076][ T31] RSP: 002b:00007f47e3186028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 680.158184][ T31] RAX: ffffffffffffffda RBX: 00007f47e2616180 RCX: 00007f47e239ce59 [ 680.171479][ T31] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00002000000000c0 [ 680.184332][ T31] RBP: 00007f47e2432d6f R08: 0000000000000000 R09: 0000000000000000 [ 680.193404][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.201924][ T31] R13: 00007f47e2616218 R14: 00007f47e2616180 R15: 00007ffe7b0cebc8 [ 680.212125][ T31] [ 680.215722][ T31] [ 680.215722][ T31] Showing all locks held in the system: [ 680.234202][ T31] 1 lock held by khungtaskd/31: [ 680.252386][ T31] #0: ffffffff8e7e5560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 680.263170][ T31] 2 locks held by kworker/0:2/804: [ 680.273685][ T31] #0: ffff8880b843b4e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 680.295809][ T31] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2f15/0x67a0 [ 680.320735][ T31] 4 locks held by kworker/u8:10/1172: [ 680.334709][ T31] 2 locks held by getty/5377: [ 680.351742][ T31] #0: ffff88803912e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 680.362459][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 680.374207][ T31] 1 lock held by syz-executor/5628: [ 680.386574][ T31] #0: ffffffff8e7f10a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 680.397233][ T31] 2 locks held by kworker/u8:19/6528: [ 680.402696][ T31] #0: ffff88801df7f140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 680.413764][ T31] #1: ffffc90004797d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 680.425846][ T31] 1 lock held by udevd/7706: [ 680.430510][ T31] #0: ffff888027f76350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 680.440311][ T31] 2 locks held by syz.0.1365/11001: [ 680.445607][ T31] #0: ffff888068f760d8 (&type->s_umount_key#92/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 680.456418][ T31] #1: ffff888027f76350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 680.466061][ T31] 4 locks held by dhcpcd/13321: [ 680.471068][ T31] #0: ffff88802a65e260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 680.481221][ T31] #1: ffffffff8e7f10a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 680.491751][ T31] #2: ffff8880b843b4e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 680.502240][ T31] #3: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2f15/0x67a0 [ 680.511255][ T31] [ 680.557839][ T31] ============================================= [ 680.557839][ T31] [ 680.570149][ T31] NMI backtrace for cpu 1 [ 680.570168][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 680.570199][ T31] Tainted: [L]=SOFTLOCKUP [ 680.570209][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 680.570221][ T31] Call Trace: [ 680.570228][ T31] [ 680.570237][ T31] dump_stack_lvl+0x100/0x190 [ 680.570266][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 680.570295][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 680.570322][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 680.570361][ T31] sys_info+0x141/0x190 [ 680.570393][ T31] watchdog+0xcb1/0x1030 [ 680.570423][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 680.570444][ T31] ? __pfx_watchdog+0x10/0x10 [ 680.570458][ T31] ? __kthread_parkme+0x18c/0x230 [ 680.570479][ T31] ? kthread+0x13a/0x450 [ 680.570491][ T31] ? __pfx_watchdog+0x10/0x10 [ 680.570503][ T31] kthread+0x370/0x450 [ 680.570516][ T31] ? __pfx_kthread+0x10/0x10 [ 680.570534][ T31] ret_from_fork+0x72b/0xd50 [ 680.570552][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 680.570567][ T31] ? __switch_to+0x800/0x1100 [ 680.570585][ T31] ? __pfx_kthread+0x10/0x10 [ 680.570599][ T31] ret_from_fork_asm+0x1a/0x30 [ 680.570622][ T31] [ 680.570640][ T31] Sending NMI from CPU 1 to CPUs 0: [ 680.701505][ C0] NMI backtrace for cpu 0 [ 680.701522][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 680.701550][ C0] Tainted: [L]=SOFTLOCKUP [ 680.701557][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 680.701569][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 680.701599][ C0] Code: a6 92 02 e9 43 44 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 02 22 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 680.701619][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 680.701634][ C0] RAX: 000000000253875b RBX: ffffffff8e4955c0 RCX: ffffffff8b899225 [ 680.701648][ C0] RDX: 0000000000000000 RSI: ffffffff8df0fbdb RDI: ffffffff8c1c4680 [ 680.701660][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 680.701672][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 680.701684][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d71950 [ 680.701698][ C0] FS: 0000000000000000(0000) GS:ffff888124387000(0000) knlGS:0000000000000000 [ 680.701716][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 680.701728][ C0] CR2: 000055bce602e168 CR3: 00000000737be000 CR4: 00000000003526f0 [ 680.701741][ C0] DR0: ffffffffffffffff DR1: 00000000000001fb DR2: 0000000000000002 [ 680.701753][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 680.701766][ C0] Call Trace: [ 680.701772][ C0] [ 680.701778][ C0] default_idle+0x9/0x10 [ 680.701805][ C0] default_idle_call+0x6c/0xb0 [ 680.701833][ C0] do_idle+0x464/0x590 [ 680.701864][ C0] ? __pfx_do_idle+0x10/0x10 [ 680.701896][ C0] cpu_startup_entry+0x4f/0x60 [ 680.701926][ C0] rest_init+0x251/0x260 [ 680.701942][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 680.701964][ C0] start_kernel+0x484/0x490 [ 680.701995][ C0] x86_64_start_reservations+0x24/0x30 [ 680.702014][ C0] x86_64_start_kernel+0x12b/0x130 [ 680.702033][ C0] common_startup_64+0x13e/0x148 [ 680.702067][ C0] [ 680.702579][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 680.702598][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 680.702628][ T31] Tainted: [L]=SOFTLOCKUP [ 680.702636][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 680.702649][ T31] Call Trace: [ 680.702657][ T31] [ 680.702666][ T31] dump_stack_lvl+0x100/0x190 [ 680.702693][ T31] vpanic+0x552/0x970 [ 680.702715][ T31] ? __pfx_vpanic+0x10/0x10 [ 680.702736][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 680.702773][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 680.702818][ T31] panic+0xd1/0xe0 [ 680.702839][ T31] ? __pfx_panic+0x10/0x10 [ 680.702863][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 680.702898][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 680.702933][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 680.702967][ T31] ? watchdog.cold+0x1ec/0x234 [ 680.702992][ T31] ? watchdog+0xcc1/0x1030 [ 680.703018][ T31] watchdog.cold+0x1fd/0x234 [ 680.703048][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 680.703075][ T31] ? __pfx_watchdog+0x10/0x10 [ 680.703101][ T31] ? __kthread_parkme+0x18c/0x230 [ 680.703139][ T31] ? kthread+0x13a/0x450 [ 680.703162][ T31] ? __pfx_watchdog+0x10/0x10 [ 680.703185][ T31] kthread+0x370/0x450 [ 680.703208][ T31] ? __pfx_kthread+0x10/0x10 [ 680.703235][ T31] ret_from_fork+0x72b/0xd50 [ 680.703263][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 680.703292][ T31] ? __switch_to+0x800/0x1100 [ 680.703323][ T31] ? __pfx_kthread+0x10/0x10 [ 680.703349][ T31] ret_from_fork_asm+0x1a/0x30 [ 680.703392][ T31] [ 681.064598][ T31] Kernel Offset: disabled [ 681.068896][ T31] Rebooting in 86400 seconds..