last executing test programs: 1m54.880823407s ago: executing program 0 (id=593): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) io_setup(0x13ff, &(0x7f0000000140)=0x0) io_submit(r2, 0x0, &(0x7f0000000300)=[&(0x7f0000002240)={0x0, 0x0, 0x8, 0x8, 0x0, r1, 0x0, 0x0, 0x3d95}]) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000040)={0xa8, 0x0, 0x2}) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0xfffffffffffffffc) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000180)={r6, 0x82000004, 0x2, r6}) (async) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x46) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m54.770410626s ago: executing program 0 (id=596): r0 = socket(0x10, 0x3, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80000) 1m54.648575173s ago: executing program 0 (id=598): fcntl$getflags(0xffffffffffffffff, 0xb) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x333000) ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000040)={0x8, 0xb28}}) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f00000018c0)={0x1, [{0x1, 0x138, 0x7, &(0x7f00000000c0)="b532c0faca62c42b5c33ecdea11fba261fb2cc389ee2ee3032e4964e143125d633c5d8af18d6fc"}, {0x1, 0x6f0, 0xc5c0, &(0x7f0000000100)="b708a16a28bf40dba193058459f1fd2b5c7aad6fdaa02c23adb84c364cb316c9b47457e929d3c8ef360209938f223fe361010e87b9bafd48c01b77b57a7f87e1b2924d93390e2324da3ce0413aa3e8eb5b4d0e09af6ec2746cf2ef698816f8134e9e17eb1250b253c83f673a1f45d98c49de41139e3725683213b1c40a7c95f5f8ffc520f36709161770031b0b07e8d3b1feb07903dec85bc5687363bb664ade60a364b9b36dd2b5c0d75abd55184f08e798c87a803ea7493f450c39ea74cfd6f2e6ad0a075db02ba1d8f0719266042ba28730c19db99276c885c3d79364"}, {0x1, 0x248, 0xff, &(0x7f0000000200)="07f3dadf472a3f88a7b9daf9edb7103dc9647e83fc7742d6fd6a01a9641a33479575ec87bdc0a827c4b86be8cef1b390920d9a9859ced669a6e26c5703d098a1e937853215eeca68a2"}, {0x0, 0x308, 0x4, &(0x7f0000000280)="704cf670444ac95b2d9333d605c2246762399e9704b07c1971c8e1c605ea40085b5ee9dd220f567b3b0c69dc781e0d1c6ce5e1499fb9e1ccb2e6582fa8a806d8e105785d46039faf80f7cf711312aae1bdcead3c08bf92062fe44ce551a8173ad6"}, {0x3, 0x68, 0x7f, &(0x7f0000000300)="70e0c7089ed9199f7b82ce0cb9"}, {0x1, 0x6f0, 0x80000, &(0x7f0000000340)="ba421e158853d4828a0f200e5e3aa7cde4e27f130696d96c60e1cec3d3c34d273fc6a9700b5eb25ccbcffcf890c2cd7d2918b7b4e7f908fe8c041d7131d35eb8349530f2b53a72752c72f33b2c1739e81f143def81a3f1267c974501de9232b1c8c0b80b9a0f0888d09c89e866e7b51a5d5b66dbc67a8178fa68d74f6847401e17274a392dbfad97963ae59bd5402d82644303cca31c5da27945ce438e36e08a6c2b081636146fc26d45ef81c0c5a1f1d60ca2e8eadc2edc21b014e767b662630320a221f013c082279132891c044d21cd05970b8d7d43627af28b315bef"}, {0x3, 0x3f0, 0xfffffffe, &(0x7f0000000440)="6ef58bdf7574aa000de12a23f7e08e210632226ce9671cd0c99be194c7cdd0a8cce7d05a8f18a45edb6a5ec11fbed83d86963fa8e7866a5140b63e4171278c76baf9f48680cac9b4caabd4b794c00b430b257358fcc120e47ccd63f7031e3cdbbb68603608e226cdd97a58157a6ceeb5f27b95ddc3b3583656fed312dd15"}, {0x2, 0x430, 0x9, &(0x7f00000004c0)="a5636d335b72e71fe78d32abbfa2139e8c0f2b2aae41fb5419e26ab51a0a2104abf367d5c98b483682d321437a23c6f9df80ddf6db1a71168822a9fd2623ecfa6d508ddae70c548e1e72e677c3d3501712653bdc1bb0bac5098edf28b58306a32f0f3efa5cd342d45136452f087238981f0101cc985b6a40a0350c259bdadb6c28142e8cccbf"}, {0x3, 0x580, 0x7, &(0x7f0000000580)="06dbdf7b8989b57e9697d736650b4faba67067ef785d8242b37c90cf15b5d5166edd46cfaed22f02f76192d252a4c57333178e17fc45fc28b0c20e27d019956ba7b7831a96fe8775bf5bb7a857e99b6673b514bc99d4fba9e45a8dc59637cc96e5a062ba1e76bf49d82a8b9b71bcb6018c7fffec04a9b1596e9f6c6bc0608f5951bbebeae054d20654c682a15621343781301b53d42e4811864fe58e5160d04a141406d20b3bdbd194ee8866c678a459"}, {0x1, 0x28, 0x7fffffff, &(0x7f0000000640)="8fea1d8944"}, {0x2, 0x7c0, 0x9, &(0x7f0000000680)="87d3474c6de074a1a186638816d09c347b4ecf3370c439de4beb0065d7fdfba77dc35705420aae7dd3b0eb0802eb991a8a598bdef0eee3117c1ccd0a2801498f21c00c14da3ab15796800696717ec9279f61342999b02dec7a9204865cb4c539b2a476a1619fb47dc7bd53c13894491fb2e590cd92d8c2b1ae5d38786050016758168e63b99313b6aaba254cf39a52d87de32f4eabcd7bd5793ebe72171db313fc4014a2df564745734bc197c20a117701ae1b8f83e939235792788e96a753408bdae97b935b1baf36afa36fe50dcf6a0c0bc4df853b8d2573ae60a7f4b6e9e508a7abd4947520cf74618ceb4a68beff092f2b2e1a2e78bb"}, {0x2, 0x108, 0x8, &(0x7f0000000780)="366cbcd7235a84cb91f3622e5bceac2a4cdfabf4d40eaa63fd21e7a2ea14e4df2a"}, {0x2, 0x8000, 0x5, &(0x7f00000007c0)="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"}, {0x2, 0x1f0, 0x89d, &(0x7f00000017c0)="afd9afb78405308ffcea8021997facb23ee960647724cc449654af27a97458a6df8c0dba7dfd0e5a8e9c8d36328816d38958462675b0e7ec0b9e105f8c13"}, {0x2, 0x290, 0x9d, &(0x7f0000001800)="3044a9403bf46a07dacddf5dd834454044718f914dc3e1602aa566321d3f830f1f8bf1313da1320adacef8dca01521442d902504b02c231d5827aca029fcbe2daa9b8ccb68c51779204adb5dd3b92aea4b03"}, {0x1, 0x40, 0x7b7, &(0x7f0000001880)="12f87a3aacddb6cf"}]}) r1 = syz_open_dev$usbfs(&(0x7f0000001a80), 0xfffffffffffffff9, 0x800) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001ac0), 0x8000, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b40), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x24008880) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/tty/ldiscs\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001c80)={"35318d5a7b5702ddcb07f991fd6750a9527a0e279097cdaeeecb96ec1f659e6a978d5623023dfb3f59c30ae415d817f77a69d29567f6f657978819195aa18551d9d007ee68545b4f7dbc11a09dbad44d56c404f5697af22751193abbeb7ded31ae2f1b507b6add62855daa43ff62e49259e31b3b2623c40b52a02086252f8c19677921b1828c23cc49ce5af4d577c0b54b065e4669974e958e093ea06c0a3d31c4f92418ca0420269d12c50cd8311932c7702eef7dd075e89908364e92ac145b8278b324f153ae2bb248d248b7f8c7dad9f0dbd791d9242f5415e243056b5c612ad8f1366d9e9a605d25289bf09c6ff48b0d8b50330ba4434a7c03a692014d273d83b892d29328e2fc63822444ced196edcfb0390dba406342432bc6d594bbffd0fcef67ce6f23db686bc8a546ad022ca1ca166cf78c964266cf74f2d021772856067c07a45dde2f14a748c791da28d75e81527d21c8a68b9327fc4d9507c2ae1b3622dd2aafbb3699e1ab887fccdd17d614613890fe79fdee768fe7e4326dbf6052bfbc514768f19c78a5d1b3494ce441141a4aad40bacd68d599c2b9ecf0e0ff276332ff93829a985364f41fe8c0a8a8c31da2a09414722faf0a4047840fd002e05fbbdac62d9c40e3477bd856d73941cc5f9e4d3d5cae573cca7b3270857444f95d311cd704ce1e028437dfeeb3b414ebb7b0b07f3d29ae68048ba8cd100a9b255af582e465804aef745a8fce018433fccb2e8283606cb1977d46e904c05eb0c992b81f6565979c5160819f6ca166d51ddb64d183ba9d9744ac2379ecbe99e033df3d83477cf507aa25aa1a3813d5121a9a6056d7a2bcac085b1baea7a65e09ebdcced424a672938db8f9b4e5b11529295db274f75da9022fcdcaee1e3775a42c3863768b3ed2c1f95aa4c0fc29e72833e827b3479fff7ab691ff72389a26b44803829e0990378a7976377d8d3a47a5041ccdadf2bad3b3d30f4f710c196ed7c413990c7ef799cfd9f309a32c1768b41e1b85df9fd2803c606a6daa646f3fb3627ee12a7009a67db1309ff3f225d17aa33fc6c96a6d92d85ca3f1411d2078ad380482b5d1a5db3b7375ddbcc100d77ac914d8c6f8ccff88813e0706a42a84fde721bc8131af12b583e0353eb1de994f8ca124914495b9ac7f9465edfbcdcb3ec65448026be317c3bfdf9cc0e8e04aa66c841348288bc6710b50b8ac685f5159cbad6df47eb99f1f2f2ca0e97f3e942dba25e9881587e8b5bf538e8d70e5821118902b2298d2c615cad41378f04ad840ba992fef0ccda4a235eb2bc5372480eea53b8c859176b3a6c37d23da9b10f9a807c5254b4595235e86c70b3f403c557dc7e1477c682954b45e5b8f1c4f24f08339fda397857ce6105ec0d73c10eb78bb73da6ccd47916ef8e1321db6f748b054ceac2c22e43d717b1774ea8ce3d225"}) ioctl$XFS_IOC_GETBMAPX(r4, 0xc0205838, &(0x7f0000002080)={0x4, 0xe, 0x1, 0xb0, 0xff, 0x10, 0x5}) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$XFS_IOC_COMMIT_RANGE(r5, 0x40585883, &(0x7f00000020c0)={r4, 0x0, 0xa, 0xfffffffffffffffe, 0xe, 0x4, [0x2ed, 0x0, 0x1, 0x6, 0x7fff, 0x15]}) ioctl$KVM_TDX_GET_CPUID(r4, 0xc008aeba, &(0x7f0000002240)={0x5, 0x0, &(0x7f0000002140)={0x6, 0x0, [{0xc0000001, 0x800, 0x4, 0x4, 0xe, 0x4, 0x7}, {0x18000001d, 0xe, 0x1, 0x40, 0x3, 0x4, 0x5000000}, {0x40000001, 0xe, 0x4, 0xffffffff, 0x149, 0xc, 0x1ab}, {0x80000007, 0xfff, 0x1, 0xb7, 0x4, 0x1, 0xfffffff1}, {0x80000008, 0x9, 0x2, 0x4, 0x3, 0xa0, 0x10000}, {0x0, 0x5, 0x0, 0x4, 0x90, 0x8, 0x4}]}}) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f00000022c0)=@arm64_sve={0x60800000001505a0, &(0x7f0000002280)=0x7fffffffffffffff}) io_setup(0xe7, &(0x7f0000002300)=0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000002340), 0x2) r8 = eventfd2(0x977, 0x1) io_submit(r6, 0x2, &(0x7f00000024c0)=[&(0x7f0000002400)={0x0, 0x0, 0x0, 0x2, 0x5, r7, &(0x7f0000002380)="5eafd1da6de804a40eecd673677f0f069cee11a028f65795a13af82b0584b7ea8c7ffd7afb73ca96c8b8f8e6e6bae730211f2a1fedcfa1aebb3f664bc504be7c9c91cbd6794eb2fe8d32b41da83f0b5d28eb5b69d4173583a811f4e4f4d78af2fc6e9ff474726f558c68d5f2f0", 0x6d, 0x800000000, 0x0, 0x0, r8}, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, &(0x7f0000002440)="5328f6608ff51942a718bab108d2dc6e6046cb74791c93d19101540b4a4a631e834600dcdb5841a6b520ee297978eca6d7da38bce09a9c98648b5943", 0x3c, 0x7090, 0x0, 0x1}]) io_destroy(r6) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002540), r4) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x4c, r9, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xe}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcc4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x20000014) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000002680)={0xa}) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x584) getpeername$inet(r4, &(0x7f00000026c0)={0x2, 0x0, @broadcast}, &(0x7f0000002700)=0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000002840)={'gretap0\x00', &(0x7f00000027c0)={'syztnl2\x00', 0x0, 0x8, 0x80, 0xfffffffb, 0x800, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x9, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@ssrr={0x89, 0x17, 0xc2, [@private=0xa010101, @empty, @loopback, @broadcast, @private=0xa010102]}, @end, @ra={0x94, 0x4}]}}}}}) sendto$packet(r4, &(0x7f0000002740)="3540e12d450e8b6daa4cbfe548c387a8c4ad50d543e7fbc56d8322ce6adc352b6a687bbb342796a3770c2295ef9d1e30de48b305bb6d44d1e66d77db87b59a7815df7bc4cbb6b77272cb4ad9a2f4b599e20058e56737d71208897c40486f1f", 0x5f, 0x20000010, &(0x7f0000002880)={0x11, 0x5, r10, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f00000028c0)={0x1, 0x0, [{0x5d, 0xfff, 0x63, [0x81, 0x8a4, 0x7, 0x9, 0x6, 0x7, 0x30, 0x4]}]}) 1m54.520865068s ago: executing program 0 (id=601): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000740)='./file0/file0\x00', 0x0, 0x28dc82, 0x0) socket(0x80000000000000a, 0x2, 0x0) umount2(&(0x7f0000000140)='./file0/../file0\x00', 0x8) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000880)='idU\x88\xfe\xd7\x01y\xc1\v\xfd\x9c1\xa8y\'\xc0\x96\xf5r\xa2\x14v\xf3\xcb\xf5\x98\xba\x00\x1c~\xff\x01\x98Q\x06~\xf5U\tIx\xe9:\xc3\x1f\xff\x97\xc1\x05ZF\xb4\xe8\x84\x82\xcd\xec\xed\xa9\xcb<(\x15\x02l\x95\xa8\xf9z\xd6ZoL\xf1\x04c\xc6GE_}\xe29<\xbc\xab\x06\x1a\a\bH\xb3\x8a\xe4\x8d\xac\xe2\x85\xa8\xb2\xe4\xd6\xeb)\x14D\xae\xec\xfaV^\x9fJ#\xb6eN\xa4?\x13\xd0\xc1y\xac#\xf8=L&d\xcd=\xdaq\xb1\xa7\xf0=v0y\xef\x9cI\xcdm\xebn\xc1E\xbc\xdbLD\xc7\xb8\xde\xea\x9b`\x1am\xc9\xd7\x90\xa1c\x82\xbc\x9e\x92\xfb\x03r\x80}\xb6 \nK\x87\x80\xd5\x92\xcb\xb5T\xc2\xdc\xcb,7\xa7\xfdp\x161\n\xdaoT\xbbv\\\xbb$\x1d/\xa4\xber\\[}\xd2\x81\x93\xa4\t\xa6\xb4#[\x0e\x15DQ\xb7|\\\xb37\x10{\xb0\xa8v\xa19\x16\xbe\x8f\xfe\xd0\xc9\xee\x99Q\\\xce\xf8W(\xbd\xf0\x1bh\xbcyX5\x8a\x8a\x97\x17\xeb\n]\xb2\xec\x96\xec\x9e\v\x9d\xb2\xe2\xef\x98\xf8\xbd\x81\x99`\xe13)Y\xa6C\xaf\x14s\x14py\x16o\xa0\x15\xf5\xb3\rW\xf0\xab\xb5\xe6\xcd9l\rO\x8d\x05\xafm]\x0f\xc4>^U\xda\xb0Dk7D\x0flc9F\x85\x00'/352) 1m54.412793208s ago: executing program 0 (id=604): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x3ffffffd, 0xbf6, 0x5, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r1, 0x0) poll(&(0x7f0000000140)=[{r2, 0x1049}], 0x1, 0x9e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'wg1\x00', 0x7bb9c06b8d9f604e}) ioctl$KDMKTONE(r2, 0x4b30, 0x79ba) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0x2, 0x101}, 0x0, 0x0, 0x0, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'caif0\x00', @broadcast}) ioctl$TCXONC(r1, 0x540a, 0x1) r4 = dup3(r2, r1, 0x0) r5 = timerfd_create(0x1, 0x0) ppoll(&(0x7f0000000080)=[{r5, 0x2201}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000bc0)={0x2, 0xd808, 0x8, 0xfffffff7, 0x9, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x10005, 0xa6}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x8c1}, 0x24004844) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000002c0)={'macvtap0\x00', 0x10000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000080000000,\x00']) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000104050000000000000a000200000000020200000006000640000100000500010001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) syz_open_dev$tty1(0xc, 0x4, 0x3) 1m54.030780377s ago: executing program 0 (id=609): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000580)) (async) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000300)=0xffffffff, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x17b200, 0xa}, 0x18) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'veth1_to_team\x00', 0x4000}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x7}, 0x4) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000001940)={&(0x7f0000000480)={0xa, 0x4e21, 0x9, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="180000000000000029000000370000002b00000000000000180000000000000029000000370000002c0000000000000060"], 0x90}, 0x800) 1m53.949390981s ago: executing program 32 (id=609): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000580)) (async) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000300)=0xffffffff, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x17b200, 0xa}, 0x18) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'veth1_to_team\x00', 0x4000}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x7}, 0x4) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000001940)={&(0x7f0000000480)={0xa, 0x4e21, 0x9, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="180000000000000029000000370000002b00000000000000180000000000000029000000370000002c0000000000000060"], 0x90}, 0x800) 42.963775093s ago: executing program 2 (id=1162): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c46800c040001200000010000000200060001000000db00000038000000450300000800000001002000010204"], 0x58) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec) write$binfmt_elf32(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c46800c040001200000010000000200060001000000db00000038000000450300000800000001002000010204"], 0x58) close(r4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@local, 0x20801, 0x1, 0xff, 0x9, 0xfffd, 0x3}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05"], 0x0) renameat(r4, &(0x7f0000000100)='./file0/file0\x00', r2, &(0x7f0000000140)='./file0\x00') syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) flock(r0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x200, 0x464200) ioctl$EVIOCSABS20(r7, 0x401845e0, &(0x7f0000000080)={0x7f, 0x5261, 0x400, 0xa2312977, 0x3d, 0xb87}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 41.496090647s ago: executing program 2 (id=1169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x74}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r3, 0x1, 0x24, 0x0, &(0x7f0000000740)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000080)=0xf7d4, 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 40.455248901s ago: executing program 2 (id=1173): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_open_procfs(0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x20, 0x14, 0x6, "f99d5133974f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 40.414141963s ago: executing program 3 (id=1174): capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x81, 0xfffffdff, 0x5}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) capset(&(0x7f0000000140)={0x19980330, r2}, &(0x7f0000000240)={0x2b, 0x4, 0xffffffff, 0xffffffff, 0x7}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x2000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@ipv4={""/10, ""/2, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0x2b8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f, 0x0, r4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x80}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, [@algo_auth={0x10d, 0x1, {{'hmac(sha256-neon)\x00'}, 0x628, "6df88c8998680eff00a0e535c334f08e0e5fafedba5705f5d077fb2e742e0b1d42c0a48786ea77841baa199c9875462af5e20bc55df8e1a60c10c01f28db3fef9f72647035aa721940b690012bdb74a1a96ae55b25209164b1318a56741111cec44815f93e07f35b209b844af5ab5e98e11ed21499255bb085ce478e569b8dc52bb0d6adc7fbea61fb56ab426bee9243e02f350007af6ab6fa589dd53d98e846fac6b5baa992eec4e2dd835fa2a5fdc14ca2a060e875c8713b23f30967b94db7cdcc661e4a"}}, @algo_comp={0xe7, 0x3, {{'deflate\x00'}, 0x4f8, "8cc5c78cad4a085ba23d5b1e2867a2df6ee7bd5798724d5fc42d1c91e263d5ed1ccb5b787d7ad09479392b0959062ca8eb515e5d4823665811c36d3cdbe71736ef00ba82fce8c78658f7ed13d06f35e95d8921d1bdccb1797dc4d424e2cb6aa2f90acf0bd460c509945aa7044761900b2a3eae312d9271fbc42c053e2e47f704a516de15c75ec3f872f87b7c3495cd191085662fab83c27bc465383bee2a9e"}}, @etimer_thresh={0x8}]}, 0x2b8}}, 0xc0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_ERROR_INJECTION(r5, 0x40085874, &(0x7f0000000080)={r1, 0xffff4787}) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b80000001900010000002cee201403823ac4d4d61c3a0c40ecfcfa076aaef4b1000000000000e00000020000000000000000000080000800"/74, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000200000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x40048d5}, 0x2c000010) 40.169835057s ago: executing program 3 (id=1175): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}]}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x400002) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x0, 0x5}) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000100)={0x101ff, 0x1, 0x80a0000, 0x2000, &(0x7f000046d000/0x2000)=nil, 0x5, r4}) 40.118268368s ago: executing program 1 (id=1177): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0x305, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0xf6f, 0x5, 0x6f9, 0x4, 0xf, "223c5d2cffdd6b9b4bbfa0c7a37d718ac397e9"}) close_range(r0, 0xffffffffffffffff, 0x0) 39.933592843s ago: executing program 1 (id=1178): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[], 0x24}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x4002, 0x248, 0x401}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x80, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb0, 0x1, 0xa2b9, 0x6, 0x4, 0x7, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x80000001, 0xa, 0x2, 0x12a3, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10001, 0x0, 0x8d, 0x4, 0x4, 0x16, 0x1, 0x5, 0x401, 0x3, 0x405, 0x200000a7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffff, 0x9, 0x4], [0xe56, 0x3, 0x6, 0x9, 0x4, 0xa, 0xa8a9, 0x20000063, 0x8e, 0xd50, 0xb, 0x5, 0x2, 0x889, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400001, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x397, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x6, 0x6, 0x2, 0x5, 0x3ff, 0x5, 0x1, 0x7, 0x1, 0x1cb, 0x1, 0x1, 0x6, 0x2, 0x4, 0xb, 0x95, 0x7, 0x404, 0xfffffff9, 0x1, 0x1000, 0xe, 0x5], [0x2, 0x2, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x6, 0x18, 0x491, 0x8d3, 0x200006, 0x800d, 0x400, 0x2, 0x400, 0x41, 0x6, 0x1000, 0x2000002, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x8, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x0, 0x4, 0xbd92, 0x7, 0x3437, 0xc, 0xd, 0x7, 0x600, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x7, 0x8000, 0xf45, 0x3, 0xe, 0x8, 0x80000077, 0x9, 0x2, 0x10002, 0xdffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x4, 0x5, 0x7f, 0x5, 0x40, 0x100, 0x1005, 0x1, 0x7, 0x1e, 0x3, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x8, 0x140f2, 0x5396, 0x4000003, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0xfc, 0xd8d2, 0x7fffffff, 0x9, 0xc, 0x30d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x533a, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x9, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x40000000000035, 0xfff, 0xc, 0x40000000000181, 0xffffffffffffffff, 0x80000000, 0xf3, 0x9, 0xfffffffffffff801, 0x2000000000007, 0x8, 0x7, 0x0, 0x3, 0x4, 0x3], 0x25000, 0x1144}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0xe0fe) 39.854228238s ago: executing program 3 (id=1180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/43, 0x2b, 0x1, &(0x7f0000000280)=""/129, 0x81}, &(0x7f0000000100)=0x40) r2 = dup3(r0, r1, 0x0) sendmsg$inet6(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001500)="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", 0x1000}], 0x1}, 0x4004080) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffeaf, 0x0, 0x0}, &(0x7f0000000140)=0x40) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000400000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) 39.689633687s ago: executing program 2 (id=1181): add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000240)='keyring\x00', &(0x7f0000002380)={'syz', 0x2}, r0) mount$bpf(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000480)={[{@gid}]}) 39.550639401s ago: executing program 2 (id=1183): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) r1 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r1}], 0xec, 0x0, &(0x7f0000000080)="6aaac8aef4e2e147de44f00839ff23cd50831c53cad5e197678be97a15f6f08470624b155ac59c52a9ef1244e85633423286839cf1cdae5298888d97e6d9e336530340cbea046b3ee617f83d10cc95e5c2814b98420d89336290949d3736c02e9c21854ad413cab832da3298bfbd15f898f7b80d524c92a5727107fbb5f737732150c7f24f6ff0a52edb9e565c0f885d10c95bda865d4344fc12d4e02f992b2809df68617ff9472425d52cca6c94383b2577b4844cc8f60e0bb0a83d6d9da1b38aeeea672595c840d1e0eee3e71d13fc84bb36c3290bcc70fcde0c09818ca98515b7e44fbc88a6ffa3158605"}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000001c0)=0x1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000200)={0x8, 0xfffffffffffff801, 0x2, 0x148, 0x1, [0x5, 0x3e, 0x8, 0xfffffff8]}) r2 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000240)={0x0, 0xea60}, 0x10) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000280)) ioctl$FITHAW(r2, 0xc0045878) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, r3, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x800}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xa}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x400, 0x6}}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x430) renameat(r2, &(0x7f0000000500)='./file0\x00', r2, &(0x7f0000000540)='./file0\x00') r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000005c0)={0x4, 0x7, 0x5, 0x10000, 0x4, 0x0, [{0x80000000000, 0x100000000, 0xffffffffffffffff, '\x00', 0x800}, {0x9, 0x800, 0x4, '\x00', 0x1600}, {0x7f, 0x4727, 0x8, '\x00', 0x200}, {0x8, 0x400, 0x7c, '\x00', 0x2}]}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000006c0)={{0x7000, 0x0, 0x4, 0x9, 0xae, 0x8, 0x7, 0x2, 0x16, 0x7, 0x9, 0x1}, {0x8000000, 0xdddd1000, 0x3, 0x0, 0x81, 0xc, 0x3, 0x0, 0xd, 0x81, 0x6, 0x8}, {0x950ec80c59f82426, 0x2, 0xb, 0x2, 0x7, 0x9, 0x0, 0x0, 0x7, 0x3, 0x3, 0x3}, {0x100000, 0xffffffff, 0xb, 0x8, 0xe6, 0x0, 0x5, 0xe9, 0x3, 0x2, 0x9, 0x2}, {0x25000, 0x41000, 0x9, 0x7, 0xd, 0x6, 0xa4, 0x1d, 0x9, 0x1, 0x6, 0x9}, {0x1, 0xdddd0000, 0x9, 0xf0, 0x5, 0x8, 0xf5, 0x8, 0x2, 0x5, 0x2, 0x7}, {0x40000, 0x58000, 0x8, 0x10, 0x5, 0x2, 0x50, 0x8, 0x7, 0x1, 0x7, 0x5a}, {0x7000, 0x26000, 0xb, 0x7, 0x1, 0x73, 0xd, 0xa0, 0x6, 0x3, 0x8, 0x3}, {0x58000, 0x1b80}, {0xeeee8000, 0x7}, 0x4, 0x0, 0xdddd1000, 0x240200, 0x5, 0x9800, 0xddda4000, [0x5, 0x363cbf97, 0x8, 0x7ff]}) connect$vsock_stream(r6, &(0x7f0000000800)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000840)=0x2) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000900)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x3, &(0x7f0000000940)={@local, @loopback, 0x0}, &(0x7f0000000980)=0xc) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000009c0)={@private0, 0x0}, &(0x7f0000000a00)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000a40)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000a80)={0x0, @private, @initdev}, &(0x7f0000000ac0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000b00)={'vxcan1\x00', 0x0}) getsockname$packet(r6, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b80)=0x14) getsockopt$inet_mreqn(r2, 0x0, 0x4, &(0x7f0000000bc0)={@local, @multicast1, 0x0}, &(0x7f0000000c00)=0xc) getsockname$packet(r2, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000c80)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000001600)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001300)={0x2b8, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x24000091}, 0x40) 39.404146194s ago: executing program 2 (id=1185): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[], 0x24}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x4002, 0x248, 0x401}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x80, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb0, 0x1, 0xa2b9, 0x6, 0x4, 0x7, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x80000001, 0xa, 0x2, 0x12a3, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10001, 0x0, 0x8d, 0x4, 0x4, 0x16, 0x1, 0x5, 0x401, 0x3, 0x405, 0x200000a7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffff, 0x9, 0x4], [0xe56, 0x3, 0x6, 0x9, 0x4, 0xa, 0xa8a9, 0x20000063, 0x8e, 0xd50, 0xb, 0x5, 0x2, 0x889, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400001, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x397, 0x0, 0xfffffbf8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x6, 0x6, 0x2, 0x5, 0x3ff, 0x5, 0x1, 0x7, 0x1, 0x1cb, 0x1, 0x1, 0x6, 0x2, 0x4, 0xb, 0x95, 0x7, 0x404, 0xfffffff9, 0x1, 0x1000, 0xe, 0x5], [0x2, 0x2, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x6, 0x18, 0x491, 0x8d3, 0x200006, 0x800d, 0x400, 0x2, 0x400, 0x41, 0x6, 0x1000, 0x2000002, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x8, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x0, 0x4, 0xbd92, 0x7, 0x3437, 0xc, 0xd, 0x7, 0x600, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0x10000, 0x1, 0x2, 0x40000002, 0x7, 0x8000, 0xf45, 0x3, 0xe, 0x8, 0x80000077, 0x9, 0x2, 0x10002, 0xdffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x4, 0x5, 0x7f, 0x5, 0x40, 0x100, 0x1005, 0x1, 0x7, 0x1e, 0x3, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x8, 0x140f2, 0x5396, 0x4000003, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0xfc, 0xd8d2, 0x7fffffff, 0x9, 0xc, 0x30d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x533a, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x9, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x40000000000035, 0xfff, 0xc, 0x40000000000181, 0xffffffffffffffff, 0x80000000, 0xf3, 0x9, 0xfffffffffffff801, 0x2000000000007, 0x8, 0x7, 0x0, 0x3, 0x4, 0x3], 0x25000, 0x1144}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002208000000a22300c35daea01b6605e1d4c08a301f00d95196470f3884b0626f3331"], 0x0}, 0x0) r6 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 39.159974729s ago: executing program 1 (id=1187): unshare(0x66020000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x100021}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e00)='net/ip_tables_names\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x20, 0xffffffff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffe, 0x0, 0x4, 0x0, 0x0, @empty, @empty}}}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) read$FUSE(r2, &(0x7f0000000e40)={0x2020}, 0x2081) 38.94742891s ago: executing program 4 (id=1188): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) creat(&(0x7f0000000180)='./file0\x00', 0xf0) lsetxattr$trusted_overlay_upper(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x0, 0x0, 0x1) llistxattr(&(0x7f00000010c0)='./file0\x00', &(0x7f0000000080)=""/42, 0x2a) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x17, 0x9, 0x6, 0x13, 0xa, 0x100, 0x4, 0x131, 0xfffffffffffffffe}) 38.812174006s ago: executing program 4 (id=1189): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_open_procfs(0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[]}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000300)={0x20, 0x14, 0x6, "f99d5133974f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 38.794356402s ago: executing program 1 (id=1190): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000009b80)=""/102392, 0x18ff8) read$eventfd(r3, &(0x7f0000000080), 0x8) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000040)) 38.379830857s ago: executing program 1 (id=1191): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x0, 0x1}, 0x0, [0x1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1db, 0x1000, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xf], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x5d1d8547]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) (async) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x0) (async) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c3314, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') (async) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)={0x34, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x44, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r5], 0x0) 38.333262538s ago: executing program 3 (id=1192): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) madvise(&(0x7f00002d8000/0x1000)=nil, 0x1000, 0x3) (async, rerun: 64) r1 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) sendmsg$inet(r1, &(0x7f0000002380)={&(0x7f0000002200)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000002300)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x8e}, @rr={0x7, 0x3, 0x86}]}}}], 0x18}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "19fde941"}]}}, 0x0}, 0x0) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000380)=[@set_irq_handler={0xc8, 0x20, {0xb0, 0x65}}], 0x20}) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f00005ca000/0x4000)=nil) (async) syz_usb_connect$midi(0x2, 0xaf, &(0x7f0000000140)=ANY=[@ANYBLOB="120100030000004099043d1040000102030109029d00010103100a09040000060103307f07240109000700072401080007000f2403010104019810020306e11c0809050d0020003001060f25010b118304d3461343005677f609050910ff030700080625010247670905010440000b80050825010479928bd309050900ff03fb0b070a250106f1da16d3f75a79b6b00905030c080003fffa08250104b3d5d10b"], &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x4, 0xc, 0x40, 0x10, 0x1b}, 0xbc, &(0x7f00000002c0)={0x5, 0xf, 0xbc, 0x6, [@generic={0x76, 0x10, 0x1, "c5c81a95e48597e593869a5a5a37aeb1dc99a96812c5492061ac72094697e230634fca64b7cb3e98cec94c380446af281256973da38715fc932bfe18fae930535125824d994f2410f919cb47dd8edc8eb8513a11ff9d07653b946982af403406ea958d2e1ea75f5bf7638896157fd2722eebaf"}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x1dfd, 0x0, 0x7, [0xff0030, 0xcf, 0x30, 0xff00, 0x0]}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x7, 0x0, 0x101, [0x0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x1, 0x4, 0x9, 0xb}]}, 0x5, [{0x8b, &(0x7f0000000640)=@string={0x8b, 0x3, "871f23a18a942fe2b3eabc8e9392d3ca9d2d2b230f3219d271590b77a4d365b488278185645d2aa2eb89844e89629a4fe54255ca644f845256b58faeabbd52fce3bc139d5f5925fed283abe0b2d3133c23e5732b224e82bea8456b3321d382340093ded18a698eed2003f66e2b870cd15c30335f7a7813ccbd125112e8475f1cd0c886408f032691cb"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xe29521fbfeb09980}}, {0x27, &(0x7f0000000200)=@string={0x27, 0x3, "5b4dda7f3bf610f3bc9e47a029a70d27912932cbfb1cb82e2dd68eeb3aeaa2013f05bf2761"}}, {0xb2, &(0x7f0000000500)=@string={0xb2, 0x3, "89f6e50d4958eb7bd710bcd4282260465f4290ed162c6148d6813695e2be538c805209fadc3d97a9be0e3eeadedeb2bde844e634d1aaaaa1debd16b9a106fcc8ea2e2015606dd6645445daa1e421e3428678efdefa8cbf087648e96ad60f903d1caf3c213730e298d951675890139899e8832870ccf4007944848c9f7a3f84910435471268e6028bfe19b26ade77bd94850c471f29f43cc48a14f4c42830683a7f143147af69a6846633d6cf16415d3a"}}, {0x7f, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]}]}) (async) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000313"], 0x0, 0x0}, 0x0) 38.188488051s ago: executing program 1 (id=1193): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@private=0xa010102, @multicast1, 0xff, 0xff, 0x9, 0x4, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xfc6, 0x7f, 0xe9b, 0x4, 0x8, 0xe, 'veth1_to_team\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x284}, 0xc0, 0xe0}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0x7}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0xe47}) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x101001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000080)={0x10}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r7, 0x4001af83, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) syz_usb_connect(0x3, 0x1e0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) timerfd_settime(r8, 0x3, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x7000}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000000440)=@svm={0x8, 0x1, 0x1080, {0xfec00000}, {"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"}}) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) syz_clone(0x40227100, 0x0, 0x0, 0x0, 0x0, 0x0) 37.023491248s ago: executing program 3 (id=1194): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) (async) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'macsec0\x00', &(0x7f0000000000)=@ethtool_perm_addr}) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 36.070366563s ago: executing program 3 (id=1195): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[], 0x24}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x4002, 0x248, 0x401}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x80, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb0, 0x1, 0xa2b9, 0x6, 0x4, 0x7, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x80000001, 0xa, 0x2, 0x12a3, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10001, 0x0, 0x8d, 0x4, 0x4, 0x16, 0x1, 0x5, 0x401, 0x3, 0x405, 0x200000a7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffff, 0x9, 0x4], [0xe56, 0x3, 0x6, 0x9, 0x4, 0xa, 0xa8a9, 0x20000063, 0x8e, 0xd50, 0xb, 0x5, 0x2, 0x889, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400001, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x397, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x6, 0x6, 0x2, 0x5, 0x3ff, 0x5, 0x1, 0x7, 0x1, 0x1cb, 0x1, 0x1, 0x6, 0x2, 0x4, 0xb, 0x95, 0x7, 0x404, 0xfffffff9, 0x1, 0x1000, 0xe, 0x5], [0x2, 0x2, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x6, 0x18, 0x491, 0x8d3, 0x200006, 0x800d, 0x400, 0x2, 0x400, 0x41, 0x6, 0x1000, 0x2000002, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x8, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x0, 0x4, 0xbd92, 0x7, 0x3437, 0xc, 0xd, 0x7, 0x600, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x7, 0x8000, 0xf45, 0x3, 0xe, 0x8, 0x80000077, 0x9, 0x2, 0x10002, 0xdffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x4, 0x5, 0x7f, 0x5, 0x40, 0x100, 0x1005, 0x1, 0x7, 0x1e, 0x3, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x8, 0x140f2, 0x5396, 0x4000003, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0xfc, 0xd8d2, 0x7fffffff, 0x9, 0xc, 0x30d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x533a, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x9, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x40000000000035, 0xfff, 0xc, 0x40000000000181, 0xffffffffffffffff, 0x80000000, 0xf3, 0x9, 0xfffffffffffff801, 0x2000000000007, 0x8, 0x7, 0x0, 0x3, 0x4, 0x3], 0x25000, 0x1144}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x40000) 35.142864994s ago: executing program 4 (id=1196): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x8008af26, &(0x7f00000000c0)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x581a41, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000280)=0x1) syz_clone3(&(0x7f0000000080)={0x120296480, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) r5 = socket(0x10, 0x2, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x600900, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) write$tcp_mem(r7, &(0x7f0000000300), 0x48) process_madvise(r6, &(0x7f00000012c0)=[{&(0x7f0000000040)="1a558d4354c104f0198b4d8945edc94c745a3108d83b", 0x16}, {&(0x7f0000000200)="45d1e73756c7a4b371301e28d1017198acf04eaa58bb84649fe89f69eb634fcddd310a52c5e4039ff33107205dc5be207ca37581c96827ba3a288137936dad8c8a7a7476d1a2", 0x46}, {&(0x7f00000002c0)="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", 0x1000}], 0x3, 0x12, 0x0) unshare(0x22020600) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cgroup\x00') preadv(r8, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x10, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x6, 0x0, 0x0, 0x14, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) 31.060120687s ago: executing program 4 (id=1197): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async, rerun: 64) fsopen(0x0, 0x1) (rerun: 64) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46030707047d0000000000000003003e00fbffffbff80000000000000040000000000000008b00000000000000330d00000500b80003007c0004000900070000000800000002000000000000000500000000000000060000000000000000800000000000000800000000000000ff7f00000000000007000000876200000500000000000000940f00000000001776e91900000000007c0b0000000000000600000000000000040000000000000003000000090000002cffffffffffffffbb0000000000000005000000000000000700000000000000020000000000000006000000000000ec"], 0xe8) (async) close(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001e7ff000000000000000000000a18000000060a0b0400000000000000000200000004000480140000001100010000000000000000000000000a"], 0x40}}, 0x0) (rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="e0000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003b00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa0000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c0400000000000002000a0028001a00e0000002000000000000000000000000000000000000000000000000000000000a0002060c001c"], 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(r3, 0x4068aea3, &(0x7f0000000840)={0xb6, 0x0, 0x8001}) (async, rerun: 32) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async, rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x18, &(0x7f0000000300)=0xffffffff, 0x4) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r0, 0x4068aea3, &(0x7f00000003c0)={0x74, 0x0, 0xa}) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030601010405050724040501009c"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x73}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x20000040) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x59) 28.651169436s ago: executing program 4 (id=1198): socket$key(0xf, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r1, r1) r2 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000100)='map_files\x00') fchdir(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x1}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2}, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000440)={'\x00', 0x80, 0x25, 0xffffffff, 0x1, 0x0, 0x0}) fcntl$setownex(r5, 0xf, &(0x7f0000000500)={0x2, r6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f00000000c0)='FROZEN\x00', 0x7) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r9, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 23.022112075s ago: executing program 33 (id=1185): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[], 0x24}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x4002, 0x248, 0x401}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x80, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb0, 0x1, 0xa2b9, 0x6, 0x4, 0x7, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x80000001, 0xa, 0x2, 0x12a3, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10001, 0x0, 0x8d, 0x4, 0x4, 0x16, 0x1, 0x5, 0x401, 0x3, 0x405, 0x200000a7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffff, 0x9, 0x4], [0xe56, 0x3, 0x6, 0x9, 0x4, 0xa, 0xa8a9, 0x20000063, 0x8e, 0xd50, 0xb, 0x5, 0x2, 0x889, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400001, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x397, 0x0, 0xfffffbf8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x6, 0x6, 0x2, 0x5, 0x3ff, 0x5, 0x1, 0x7, 0x1, 0x1cb, 0x1, 0x1, 0x6, 0x2, 0x4, 0xb, 0x95, 0x7, 0x404, 0xfffffff9, 0x1, 0x1000, 0xe, 0x5], [0x2, 0x2, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x6, 0x18, 0x491, 0x8d3, 0x200006, 0x800d, 0x400, 0x2, 0x400, 0x41, 0x6, 0x1000, 0x2000002, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x8, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x0, 0x4, 0xbd92, 0x7, 0x3437, 0xc, 0xd, 0x7, 0x600, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0x10000, 0x1, 0x2, 0x40000002, 0x7, 0x8000, 0xf45, 0x3, 0xe, 0x8, 0x80000077, 0x9, 0x2, 0x10002, 0xdffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x4, 0x5, 0x7f, 0x5, 0x40, 0x100, 0x1005, 0x1, 0x7, 0x1e, 0x3, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x8, 0x140f2, 0x5396, 0x4000003, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0xfc, 0xd8d2, 0x7fffffff, 0x9, 0xc, 0x30d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x533a, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x9, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x40000000000035, 0xfff, 0xc, 0x40000000000181, 0xffffffffffffffff, 0x80000000, 0xf3, 0x9, 0xfffffffffffff801, 0x2000000000007, 0x8, 0x7, 0x0, 0x3, 0x4, 0x3], 0x25000, 0x1144}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002208000000a22300c35daea01b6605e1d4c08a301f00d95196470f3884b0626f3331"], 0x0}, 0x0) r6 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 20.31439144s ago: executing program 34 (id=1193): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@private=0xa010102, @multicast1, 0xff, 0xff, 0x9, 0x4, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xfc6, 0x7f, 0xe9b, 0x4, 0x8, 0xe, 'veth1_to_team\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x284}, 0xc0, 0xe0}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0x7}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0xe47}) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=@migrate={0xa0, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x101001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000080)={0x10}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r7, 0x4001af83, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) syz_usb_connect(0x3, 0x1e0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) timerfd_settime(r8, 0x3, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x7000}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000000440)=@svm={0x8, 0x1, 0x1080, {0xfec00000}, {"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"}}) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) syz_clone(0x40227100, 0x0, 0x0, 0x0, 0x0, 0x0) 17.926307683s ago: executing program 35 (id=1195): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[], 0x24}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff8, 0x4002, 0x248, 0x401}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x80, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb0, 0x1, 0xa2b9, 0x6, 0x4, 0x7, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x2, 0x80000001, 0xa, 0x2, 0x12a3, 0x6, 0x8, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x206, 0x10001, 0x0, 0x8d, 0x4, 0x4, 0x16, 0x1, 0x5, 0x401, 0x3, 0x405, 0x200000a7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0xfffffffe, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffff, 0x9, 0x4], [0xe56, 0x3, 0x6, 0x9, 0x4, 0xa, 0xa8a9, 0x20000063, 0x8e, 0xd50, 0xb, 0x5, 0x2, 0x889, 0x4, 0xa6, 0x1000, 0x6, 0x200b398, 0x400001, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x397, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x6, 0x6, 0x2, 0x5, 0x3ff, 0x5, 0x1, 0x7, 0x1, 0x1cb, 0x1, 0x1, 0x6, 0x2, 0x4, 0xb, 0x95, 0x7, 0x404, 0xfffffff9, 0x1, 0x1000, 0xe, 0x5], [0x2, 0x2, 0xf, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x6, 0x18, 0x491, 0x8d3, 0x200006, 0x800d, 0x400, 0x2, 0x400, 0x41, 0x6, 0x1000, 0x2000002, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x8, 0xc7, 0xfff, 0x6, 0x10000, 0x3fc, 0x0, 0x4, 0xbd92, 0x7, 0x3437, 0xc, 0xd, 0x7, 0x600, 0x101, 0xdd80, 0x60a0, 0x7b, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x7, 0x8000, 0xf45, 0x3, 0xe, 0x8, 0x80000077, 0x9, 0x2, 0x10002, 0xdffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x4, 0x5, 0x7f, 0x5, 0x40, 0x100, 0x1005, 0x1, 0x7, 0x1e, 0x3, 0x0, 0x3, 0x9d86, 0xd, 0x9, 0x8, 0x140f2, 0x5396, 0x4000003, 0x6, 0x80008001, 0x7777, 0x1, 0x80, 0xfc, 0xd8d2, 0x7fffffff, 0x9, 0xc, 0x30d, 0x5, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x800, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x533a, 0x0, 0x4, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x9, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x40000000000035, 0xfff, 0xc, 0x40000000000181, 0xffffffffffffffff, 0x80000000, 0xf3, 0x9, 0xfffffffffffff801, 0x2000000000007, 0x8, 0x7, 0x0, 0x3, 0x4, 0x3], 0x25000, 0x1144}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x40000) 17.378393002s ago: executing program 4 (id=1202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) (async, rerun: 32) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x5d) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 36 (id=1202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) (async, rerun: 32) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x5d) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): e USB device [ 154.734551][ T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 154.905054][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 154.913008][ T9] usb 4-1: config index 0 descriptor too short (expected 66, got 27) [ 154.921953][ T9] usb 4-1: config 2 has an invalid interface number: 1 but max is 0 [ 154.937024][ T9] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 154.947124][ T9] usb 4-1: config 2 has no interface number 0 [ 154.956759][ T9] usb 4-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 154.966473][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.974521][ T9] usb 4-1: Product: syz [ 154.978692][ T9] usb 4-1: Manufacturer: syz [ 154.983437][ T9] usb 4-1: SerialNumber: syz [ 155.120983][ T3556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.139696][ T3556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.207646][ T31] usb 4-1: USB disconnect, device number 63 [ 155.251086][ T419] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 155.265994][ T419] asix 5-1:2.88: probe with driver asix failed with error -71 [ 155.276672][ T419] usb 5-1: USB disconnect, device number 21 [ 155.810926][ T31] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 155.999569][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 156.032813][ T31] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 156.049708][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.066693][ T31] usb 5-1: Product: syz [ 156.078013][ T31] usb 5-1: Manufacturer: syz [ 156.082760][ T31] usb 5-1: SerialNumber: syz [ 156.109907][ T419] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 156.269185][ T419] usb 4-1: device descriptor read/64, error -71 [ 156.279442][ T36] kauditd_printk_skb: 762 callbacks suppressed [ 156.279473][ T36] audit: type=1400 audit(1772575497.923:24233): avc: denied { create } for pid=3591 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.310957][ T36] audit: type=1400 audit(1772575497.951:24234): avc: denied { create } for pid=3591 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.331668][ T36] audit: type=1400 audit(1772575497.951:24235): avc: denied { write } for pid=3591 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.358467][ T36] audit: type=1400 audit(1772575497.951:24236): avc: denied { read } for pid=3591 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.380817][ T31] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 156.399044][ T3594] syzkaller0: entered promiscuous mode [ 156.404721][ T31] usb 5-1: unit 13 not found! [ 156.410716][ T36] audit: type=1400 audit(1772575497.951:24237): avc: denied { read } for pid=3591 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.442361][ T31] usb 5-1: USB disconnect, device number 22 [ 156.470006][ T36] audit: type=1400 audit(1772575497.951:24238): avc: denied { write } for pid=3591 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 156.511128][ T36] audit: type=1400 audit(1772575498.073:24239): avc: denied { ioctl } for pid=3579 comm="syz.3.1083" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.553524][ T36] audit: type=1400 audit(1772575498.073:24240): avc: denied { ioctl } for pid=3579 comm="syz.3.1083" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.580062][ T36] audit: type=1400 audit(1772575498.082:24241): avc: denied { ioctl } for pid=3579 comm="syz.3.1083" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.605092][ T419] usb 4-1: device descriptor read/64, error -71 [ 156.662117][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 156.663111][ T3598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.687697][ T36] audit: type=1400 audit(1772575498.091:24242): avc: denied { ioctl } for pid=3579 comm="syz.3.1083" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.717709][ T3598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.866020][ T419] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 156.967677][ T3605] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 157.004548][ T419] usb 4-1: device descriptor read/64, error -71 [ 157.197182][ T31] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 157.271623][ T419] usb 4-1: device descriptor read/64, error -71 [ 157.289154][ T3614] FAULT_INJECTION: forcing a failure. [ 157.289154][ T3614] name failslab, interval 1, probability 0, space 0, times 0 [ 157.302086][ T3614] CPU: 0 UID: 0 PID: 3614 Comm: syz.4.1095 Not tainted syzkaller #0 e0984ef4b19b7a0d2e0df0f24afaf737f1320d97 [ 157.302118][ T3614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.302131][ T3614] Call Trace: [ 157.302138][ T3614] [ 157.302147][ T3614] __dump_stack+0x21/0x30 [ 157.302175][ T3614] dump_stack_lvl+0x140/0x1c0 [ 157.302199][ T3614] ? __cfi_dump_stack_lvl+0x10/0x10 [ 157.302225][ T3614] dump_stack+0x19/0x20 [ 157.302247][ T3614] should_fail_ex+0x3d7/0x530 [ 157.302268][ T3614] should_failslab+0xac/0x100 [ 157.302294][ T3614] kmem_cache_alloc_node_noprof+0x45/0x420 [ 157.302318][ T3614] ? dup_task_struct+0xc1/0xd50 [ 157.302339][ T3614] ? kasan_save_alloc_info+0x40/0x50 [ 157.302358][ T3614] ? __kasan_kmalloc+0x96/0xb0 [ 157.302384][ T3614] ? __kmalloc_cache_noprof+0x23c/0x470 [ 157.302408][ T3614] dup_task_struct+0xc1/0xd50 [ 157.302429][ T3614] ? __kasan_check_write+0x18/0x20 [ 157.302452][ T3614] ? _raw_spin_lock_irq+0x93/0x120 [ 157.302472][ T3614] ? copy_process+0x3220/0x3220 [ 157.302492][ T3614] ? __kasan_check_write+0x18/0x20 [ 157.302516][ T3614] copy_process+0x55a/0x3220 [ 157.302540][ T3614] ? __cfi_copy_process+0x10/0x10 [ 157.302561][ T3614] ? __kmalloc_cache_noprof+0x23c/0x470 [ 157.302585][ T3614] ? __kasan_check_write+0x18/0x20 [ 157.302615][ T3614] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 157.302647][ T3614] vhost_task_create+0x1f7/0x400 [ 157.302674][ T3614] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 157.302706][ T3614] ? __cfi_vhost_task_create+0x10/0x10 [ 157.302735][ T3614] ? __cfi_vhost_task_fn+0x10/0x10 [ 157.302761][ T3614] ? __kasan_check_write+0x18/0x20 [ 157.302784][ T3614] ? mutex_lock+0x97/0x1d0 [ 157.302805][ T3614] ? __cfi_mutex_lock+0x10/0x10 [ 157.302826][ T3614] ? kernel_text_address+0xa9/0xe0 [ 157.302854][ T3614] kvm_mmu_post_init_vm+0x161/0x300 [ 157.302879][ T3614] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 157.302902][ T3614] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 157.302922][ T3614] ? kstrtoull+0x13b/0x1e0 [ 157.302940][ T3614] ? kstrtouint+0x78/0xf0 [ 157.302958][ T3614] ? ioctl_has_perm+0x1bc/0x500 [ 157.302979][ T3614] ? __asan_memcpy+0x5a/0x80 [ 157.303001][ T3614] ? ioctl_has_perm+0x408/0x500 [ 157.303021][ T3614] ? has_cap_mac_admin+0xd0/0xd0 [ 157.303042][ T3614] ? __kasan_check_write+0x18/0x20 [ 157.303064][ T3614] ? mutex_lock_killable+0x97/0x1d0 [ 157.303087][ T3614] ? __cfi_mutex_lock_killable+0x10/0x10 [ 157.303111][ T3614] ? proc_fail_nth_write+0x184/0x220 [ 157.303133][ T3614] kvm_vcpu_ioctl+0xa48/0x1000 [ 157.303161][ T3614] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 157.303187][ T3614] ? __cfi_vfs_write+0x10/0x10 [ 157.303211][ T3614] ? __kasan_check_write+0x18/0x20 [ 157.303233][ T3614] ? mutex_unlock+0x90/0x240 [ 157.303256][ T3614] ? __cfi_mutex_unlock+0x10/0x10 [ 157.303277][ T3614] ? __fget_files+0x2c5/0x340 [ 157.303303][ T3614] ? __fget_files+0x2c5/0x340 [ 157.303324][ T3614] ? bpf_lsm_file_ioctl+0xd/0x20 [ 157.303341][ T3614] ? security_file_ioctl+0x3e/0x110 [ 157.303360][ T3614] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 157.303386][ T3614] __se_sys_ioctl+0x135/0x1b0 [ 157.303414][ T3614] __x64_sys_ioctl+0x7f/0xa0 [ 157.303439][ T3614] x64_sys_call+0x1878/0x2ee0 [ 157.303465][ T3614] do_syscall_64+0x57/0xf0 [ 157.303484][ T3614] ? clear_bhb_loop+0x50/0xa0 [ 157.303504][ T3614] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 157.303533][ T3614] RIP: 0033:0x7f6fb839c799 [ 157.303551][ T3614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.303569][ T3614] RSP: 002b:00007f6fb9276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.303592][ T3614] RAX: ffffffffffffffda RBX: 00007f6fb8615fa0 RCX: 00007f6fb839c799 [ 157.303615][ T3614] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 157.303628][ T3614] RBP: 00007f6fb9276090 R08: 0000000000000000 R09: 0000000000000000 [ 157.303642][ T3614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.303655][ T3614] R13: 00007f6fb8616038 R14: 00007f6fb8615fa0 R15: 00007ffc7267f978 [ 157.303673][ T3614] [ 157.420290][ T419] usb usb4-port1: attempt power cycle [ 157.709520][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 157.761957][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 157.784826][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 157.804670][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.817399][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.825561][ T31] usb 2-1: Product: syz [ 157.829728][ T31] usb 2-1: Manufacturer: syz [ 157.834322][ T31] usb 2-1: SerialNumber: syz [ 158.066303][ T31] usb 2-1: 1:1 : no UAC_FORMAT_TYPE desc [ 158.076673][ T31] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 158.102655][ T31] usb 2-1: USB disconnect, device number 69 [ 158.123655][ T419] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 158.143455][ T3629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.147135][ T419] usb 4-1: device descriptor read/8, error -71 [ 158.151971][ T3629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.202916][ T416] udevd[416]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 158.296228][ T419] usb 4-1: device descriptor read/8, error -71 [ 158.539209][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 158.560535][ T419] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 158.583828][ T419] usb 4-1: device descriptor read/8, error -71 [ 158.699086][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 158.715238][ T9] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 158.731668][ T9] usb 5-1: config 0 has no interface number 0 [ 158.739761][ T419] usb 4-1: device descriptor read/8, error -71 [ 158.748208][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 158.770089][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.788920][ T9] usb 5-1: Product: syz [ 158.793118][ T9] usb 5-1: Manufacturer: syz [ 158.803172][ T9] usb 5-1: SerialNumber: syz [ 158.816420][ T9] usb 5-1: config 0 descriptor?? [ 158.816452][ T3646] FAULT_INJECTION: forcing a failure. [ 158.816452][ T3646] name failslab, interval 1, probability 0, space 0, times 0 [ 158.830110][ T9] smsc95xx v2.0.0 [ 158.835513][ T3646] CPU: 1 UID: 0 PID: 3646 Comm: syz.1.1106 Not tainted syzkaller #0 e0984ef4b19b7a0d2e0df0f24afaf737f1320d97 [ 158.835544][ T3646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.835557][ T3646] Call Trace: [ 158.835563][ T3646] [ 158.835571][ T3646] __dump_stack+0x21/0x30 [ 158.835600][ T3646] dump_stack_lvl+0x140/0x1c0 [ 158.835622][ T3646] ? __cfi_dump_stack_lvl+0x10/0x10 [ 158.835646][ T3646] dump_stack+0x19/0x20 [ 158.835667][ T3646] should_fail_ex+0x3d7/0x530 [ 158.835687][ T3646] should_failslab+0xac/0x100 [ 158.835712][ T3646] __kmalloc_cache_node_noprof+0x46/0x430 [ 158.835735][ T3646] ? kasan_save_track+0x4f/0x80 [ 158.835759][ T3646] ? __get_vm_area_node+0x14d/0x3d0 [ 158.835778][ T3646] ? __kasan_slab_alloc+0x73/0x90 [ 158.835803][ T3646] ? kmem_cache_alloc_node_noprof+0x1ca/0x420 [ 158.835825][ T3646] ? dup_task_struct+0xc1/0xd50 [ 158.835846][ T3646] __get_vm_area_node+0x14d/0x3d0 [ 158.835865][ T3646] __vmalloc_node_range_noprof+0x30e/0x1480 [ 158.835891][ T3646] ? copy_process+0x55a/0x3220 [ 158.835914][ T3646] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 158.835935][ T3646] ? kasan_save_alloc_info+0x40/0x50 [ 158.835955][ T3646] ? __kasan_slab_alloc+0x73/0x90 [ 158.835980][ T3646] ? arch_dup_task_struct+0x5b/0xe0 [ 158.836003][ T3646] ? __asan_memcpy+0x5a/0x80 [ 158.836025][ T3646] dup_task_struct+0x5d6/0xd50 [ 158.836044][ T3646] ? copy_process+0x55a/0x3220 [ 158.836063][ T3646] ? _raw_spin_lock_irq+0x93/0x120 [ 158.836083][ T3646] ? copy_process+0x3220/0x3220 [ 158.836102][ T3646] ? __kasan_check_write+0x18/0x20 [ 158.836127][ T3646] copy_process+0x55a/0x3220 [ 158.836149][ T3646] ? __cfi_copy_process+0x10/0x10 [ 158.836169][ T3646] ? __kmalloc_cache_noprof+0x23c/0x470 [ 158.836192][ T3646] ? __kasan_check_write+0x18/0x20 [ 158.836212][ T3646] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 158.836242][ T3646] vhost_task_create+0x1f7/0x400 [ 158.836268][ T3646] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 158.836297][ T3646] ? __cfi_vhost_task_create+0x10/0x10 [ 158.836323][ T3646] ? __cfi_vhost_task_fn+0x10/0x10 [ 158.836349][ T3646] ? __kasan_check_write+0x18/0x20 [ 158.836370][ T3646] ? mutex_lock+0x97/0x1d0 [ 158.836392][ T3646] ? __cfi_mutex_lock+0x10/0x10 [ 158.836412][ T3646] ? kernel_text_address+0xa9/0xe0 [ 158.836435][ T3646] kvm_mmu_post_init_vm+0x161/0x300 [ 158.836464][ T3646] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 158.836487][ T3646] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 158.836510][ T3646] ? kstrtoull+0x13b/0x1e0 [ 158.836527][ T3646] ? kstrtouint+0x78/0xf0 [ 158.836544][ T3646] ? ioctl_has_perm+0x1bc/0x500 [ 158.836564][ T3646] ? __asan_memcpy+0x5a/0x80 [ 158.836585][ T3646] ? ioctl_has_perm+0x408/0x500 [ 158.836604][ T3646] ? has_cap_mac_admin+0xd0/0xd0 [ 158.836623][ T3646] ? __kasan_check_write+0x18/0x20 [ 158.836645][ T3646] ? mutex_lock_killable+0x97/0x1d0 [ 158.836667][ T3646] ? __cfi_mutex_lock_killable+0x10/0x10 [ 158.836690][ T3646] ? proc_fail_nth_write+0x184/0x220 [ 158.836711][ T3646] kvm_vcpu_ioctl+0xa48/0x1000 [ 158.836736][ T3646] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 158.836761][ T3646] ? __cfi_vfs_write+0x10/0x10 [ 158.836783][ T3646] ? __kasan_check_write+0x18/0x20 [ 158.836805][ T3646] ? mutex_unlock+0x90/0x240 [ 158.836825][ T3646] ? __cfi_mutex_unlock+0x10/0x10 [ 158.836846][ T3646] ? __fget_files+0x2c5/0x340 [ 158.836872][ T3646] ? __fget_files+0x2c5/0x340 [ 158.836896][ T3646] ? bpf_lsm_file_ioctl+0xd/0x20 [ 158.836913][ T3646] ? security_file_ioctl+0x3e/0x110 [ 158.836931][ T3646] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 158.836956][ T3646] __se_sys_ioctl+0x135/0x1b0 [ 158.836981][ T3646] __x64_sys_ioctl+0x7f/0xa0 [ 158.837015][ T3646] x64_sys_call+0x1878/0x2ee0 [ 158.837040][ T3646] do_syscall_64+0x57/0xf0 [ 158.837057][ T3646] ? clear_bhb_loop+0x50/0xa0 [ 158.837076][ T3646] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 158.837103][ T3646] RIP: 0033:0x7f47cbf9c799 [ 158.837120][ T3646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.837136][ T3646] RSP: 002b:00007f47ccdb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.837157][ T3646] RAX: ffffffffffffffda RBX: 00007f47cc215fa0 RCX: 00007f47cbf9c799 [ 158.837171][ T3646] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 158.837184][ T3646] RBP: 00007f47ccdb0090 R08: 0000000000000000 R09: 0000000000000000 [ 158.837197][ T3646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.837209][ T3646] R13: 00007f47cc216038 R14: 00007f47cc215fa0 R15: 00007ffc1946be88 [ 158.837226][ T3646] [ 158.837268][ T3646] syz.1.1106: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 159.050806][ T3637] can0: slcan on ptm0. [ 159.051676][ T419] usb usb4-port1: unable to enumerate USB device [ 159.074220][ T3646] ,cpuset= [ 159.154141][ T3649] bridge0: port 3(veth1_to_bridge) entered blocking state [ 159.164986][ T3646] syz1 [ 159.200259][ T3649] bridge0: port 3(veth1_to_bridge) entered disabled state [ 159.210863][ T3646] ,mems_allowed=0 [ 159.216743][ T3649] veth1_to_bridge: entered allmulticast mode [ 159.235280][ T3646] [ 159.244812][ T3649] veth1_to_bridge: entered promiscuous mode [ 159.251685][ T3646] CPU: 0 UID: 0 PID: 3646 Comm: syz.1.1106 Not tainted syzkaller #0 e0984ef4b19b7a0d2e0df0f24afaf737f1320d97 [ 159.251713][ T3646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 159.251725][ T3646] Call Trace: [ 159.251732][ T3646] [ 159.251743][ T3646] __dump_stack+0x21/0x30 [ 159.251771][ T3646] dump_stack_lvl+0x140/0x1c0 [ 159.251794][ T3646] ? __cfi_dump_stack_lvl+0x10/0x10 [ 159.251817][ T3646] dump_stack+0x19/0x20 [ 159.251838][ T3646] warn_alloc+0x1e7/0x2c0 [ 159.251857][ T3646] ? __kasan_kmalloc+0x28/0xb0 [ 159.251882][ T3646] ? __cfi_warn_alloc+0x10/0x10 [ 159.251900][ T3646] ? kasan_save_track+0x4f/0x80 [ 159.251923][ T3646] ? dup_task_struct+0xc1/0xd50 [ 159.251944][ T3646] ? __get_vm_area_node+0x3bd/0x3d0 [ 159.251963][ T3646] __vmalloc_node_range_noprof+0x333/0x1480 [ 159.251987][ T3646] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 159.252008][ T3646] ? kasan_save_alloc_info+0x40/0x50 [ 159.252029][ T3646] ? __kasan_slab_alloc+0x73/0x90 [ 159.252053][ T3646] ? arch_dup_task_struct+0x5b/0xe0 [ 159.252076][ T3646] ? __asan_memcpy+0x5a/0x80 [ 159.252098][ T3646] dup_task_struct+0x5d6/0xd50 [ 159.252124][ T3646] ? copy_process+0x55a/0x3220 [ 159.252144][ T3646] ? _raw_spin_lock_irq+0x93/0x120 [ 159.252161][ T3646] ? copy_process+0x3220/0x3220 [ 159.252181][ T3646] ? __kasan_check_write+0x18/0x20 [ 159.252202][ T3646] copy_process+0x55a/0x3220 [ 159.252224][ T3646] ? __cfi_copy_process+0x10/0x10 [ 159.252243][ T3646] ? __kmalloc_cache_noprof+0x23c/0x470 [ 159.252266][ T3646] ? __kasan_check_write+0x18/0x20 [ 159.252287][ T3646] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 159.252317][ T3646] vhost_task_create+0x1f7/0x400 [ 159.252342][ T3646] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 159.252370][ T3646] ? __cfi_vhost_task_create+0x10/0x10 [ 159.252397][ T3646] ? __cfi_vhost_task_fn+0x10/0x10 [ 159.252422][ T3646] ? __kasan_check_write+0x18/0x20 [ 159.252443][ T3646] ? mutex_lock+0x97/0x1d0 [ 159.252463][ T3646] ? __cfi_mutex_lock+0x10/0x10 [ 159.252484][ T3646] ? kernel_text_address+0xa9/0xe0 [ 159.252505][ T3646] kvm_mmu_post_init_vm+0x161/0x300 [ 159.252529][ T3646] kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0 [ 159.252553][ T3646] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 159.252574][ T3646] ? kstrtoull+0x13b/0x1e0 [ 159.252592][ T3646] ? kstrtouint+0x78/0xf0 [ 159.252608][ T3646] ? ioctl_has_perm+0x1bc/0x500 [ 159.252628][ T3646] ? __asan_memcpy+0x5a/0x80 [ 159.252649][ T3646] ? ioctl_has_perm+0x408/0x500 [ 159.252667][ T3646] ? has_cap_mac_admin+0xd0/0xd0 [ 159.252686][ T3646] ? __kasan_check_write+0x18/0x20 [ 159.252707][ T3646] ? mutex_lock_killable+0x97/0x1d0 [ 159.252729][ T3646] ? __cfi_mutex_lock_killable+0x10/0x10 [ 159.252751][ T3646] ? proc_fail_nth_write+0x184/0x220 [ 159.252771][ T3646] kvm_vcpu_ioctl+0xa48/0x1000 [ 159.252797][ T3646] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 159.252822][ T3646] ? __cfi_vfs_write+0x10/0x10 [ 159.252845][ T3646] ? __kasan_check_write+0x18/0x20 [ 159.252865][ T3646] ? mutex_unlock+0x90/0x240 [ 159.252886][ T3646] ? __cfi_mutex_unlock+0x10/0x10 [ 159.252906][ T3646] ? __fget_files+0x2c5/0x340 [ 159.252932][ T3646] ? __fget_files+0x2c5/0x340 [ 159.252971][ T3646] ? bpf_lsm_file_ioctl+0xd/0x20 [ 159.252988][ T3646] ? security_file_ioctl+0x3e/0x110 [ 159.253007][ T3646] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 159.253031][ T3646] __se_sys_ioctl+0x135/0x1b0 [ 159.253057][ T3646] __x64_sys_ioctl+0x7f/0xa0 [ 159.253081][ T3646] x64_sys_call+0x1878/0x2ee0 [ 159.253105][ T3646] do_syscall_64+0x57/0xf0 [ 159.253128][ T3646] ? clear_bhb_loop+0x50/0xa0 [ 159.253147][ T3646] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 159.253173][ T3646] RIP: 0033:0x7f47cbf9c799 [ 159.253190][ T3646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.253206][ T3646] RSP: 002b:00007f47ccdb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.253227][ T3646] RAX: ffffffffffffffda RBX: 00007f47cc215fa0 RCX: 00007f47cbf9c799 [ 159.253242][ T3646] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 159.253254][ T3646] RBP: 00007f47ccdb0090 R08: 0000000000000000 R09: 0000000000000000 [ 159.253267][ T3646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.253280][ T3646] R13: 00007f47cc216038 R14: 00007f47cc215fa0 R15: 00007ffc1946be88 [ 159.253296][ T3646] [ 159.253361][ T3646] Mem-Info: [ 159.263004][ T3649] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 159.271032][ T3646] active_anon:27566 inactive_anon:1 isolated_anon:0 [ 159.271032][ T3646] active_file:19410 inactive_file:2335 isolated_file:0 [ 159.271032][ T3646] unevictable:0 dirty:32 writeback:0 [ 159.271032][ T3646] slab_reclaimable:5663 slab_unreclaimable:72550 [ 159.271032][ T3646] mapped:25248 shmem:17646 pagetables:1810 [ 159.271032][ T3646] sec_pagetables:3 bounce:0 [ 159.271032][ T3646] kernel_misc_reclaimable:0 [ 159.271032][ T3646] free:1408992 free_pcp:1950 free_cma:0 [ 159.308841][ T3649] bridge0: port 3(veth1_to_bridge) entered blocking state [ 159.319019][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 159.319564][ T3649] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 159.322316][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 159.332082][ T3646] Node 0 active_anon:110264kB inactive_anon:4kB active_file:77640kB inactive_file:9340kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100992kB dirty:128kB writeback:0kB shmem:70584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6424kB pagetables:7240kB sec_pagetables:12kB all_unreclaimable? no [ 159.519693][ T418] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 159.525754][ T3646] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963368kB mlocked:0kB bounce:0kB free_pcp:5204kB local_pcp:5136kB free_cma:0kB [ 159.549440][ T9] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 159.555061][ T3646] lowmem_reserve[]: [ 159.559325][ T9] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 159.566178][ T3646] 0 [ 159.690190][ T418] usb 4-1: Using ep0 maxpacket: 32 [ 159.691890][ T3646] 3921 [ 159.700389][ T418] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 159.701966][ T3646] 3921 [ 159.725098][ T418] usb 4-1: config 0 has no interface number 0 [ 159.748721][ T3646] [ 159.759885][ T418] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 159.772010][ T3646] Normal free:2674304kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:110664kB inactive_anon:4kB active_file:77640kB inactive_file:9340kB unevictable:0kB writepending:128kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:5564kB local_pcp:1464kB free_cma:0kB [ 159.795214][ T418] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 159.839013][ T3646] lowmem_reserve[]: [ 159.851458][ T418] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.884765][ T3646] 0 [ 159.900863][ T418] usb 4-1: Product: syz [ 159.922676][ T3646] 0 [ 159.937683][ T418] usb 4-1: Manufacturer: syz [ 159.981902][ T3646] 0 [ 159.987880][ T418] usb 4-1: SerialNumber: syz [ 159.999791][ T3646] [ 160.058820][ T418] usb 4-1: config 0 descriptor?? [ 160.082853][ T3646] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 160.100221][ T3650] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 160.123704][ T3646] Normal: 49*4kB (ME) 38*8kB (UME) 512*16kB (UME) 410*32kB (UME) 434*64kB (UME) 112*128kB (UME) 58*256kB (UME) 27*512kB (UME) 34*1024kB (UME) 16*2048kB (UM) 614*4096kB (UM) = 2675124kB [ 160.147743][ T3636] can0 (unregistered): slcan off ptm0. [ 160.154151][ T9] usb 5-1: USB disconnect, device number 23 [ 160.201731][ T3646] 39395 total pagecache pages [ 160.206465][ T3646] 1 pages in swap cache [ 160.210634][ T3646] Free swap = 124420kB [ 160.222689][ T3646] Total swap = 124996kB [ 160.226941][ T3646] 2097051 pages RAM [ 160.230766][ T3646] 0 pages HighMem/MovableOnly [ 160.235481][ T3646] 352243 pages reserved [ 160.239656][ T3646] 0 pages cma reserved [ 160.246395][ T3646] Memory allocations: [ 160.250409][ T3646] 0 B 0 init/main.c:1477 func:do_initcalls [ 160.258753][ T3646] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 160.267575][ T3646] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 160.275255][ T3646] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 160.284157][ T3646] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 160.292997][ T3646] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 160.304339][ T3646] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 160.313172][ T3646] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 160.321622][ T3646] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 160.331388][ T3649] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 160.340138][ T3646] 0 B 0 init/initramfs.c:101 func:find_link [ 160.563223][ T418] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 160.579815][ T418] asix 4-1:0.188: probe with driver asix failed with error -61 [ 160.770375][ T419] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 160.787054][ T419] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.888578][ T3694] fido_id[3694]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 160.990418][ T418] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 161.050965][ T3703] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3703 comm=syz.1.1116 [ 161.150263][ T418] usb 5-1: Using ep0 maxpacket: 32 [ 161.157675][ T418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.169035][ T418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.178819][ T418] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 161.187939][ T418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.197588][ T418] usb 5-1: config 0 descriptor?? [ 161.323970][ T3714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.332500][ T3714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.346836][ T3714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.355333][ T3714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.363403][ T419] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 161.533941][ T419] usb 2-1: Invalid ep0 maxpacket: 64 [ 161.581818][ T3714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.590395][ T3714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.609139][ T36] kauditd_printk_skb: 838 callbacks suppressed [ 161.609157][ T36] audit: type=1400 audit(1772575502.933:25075): avc: denied { ioctl } for pid=3704 comm="syz.1.1117" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.646871][ T3717] netlink: 'syz.2.1121': attribute type 5 has an invalid length. [ 161.655474][ T3717] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1121'. [ 161.656820][ T418] zydacron 0003:13EC:0006.0016: unknown main item tag 0x0 [ 161.683957][ T419] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 161.691479][ T36] audit: type=1400 audit(1772575502.943:25076): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 161.703770][ T418] zydacron 0003:13EC:0006.0016: unknown main item tag 0x0 [ 161.738983][ T3719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.748560][ T3719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.755262][ T36] audit: type=1400 audit(1772575502.943:25077): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 161.781497][ T36] audit: type=1400 audit(1772575502.943:25078): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 161.783195][ T418] zydacron 0003:13EC:0006.0016: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.4-1/input0 [ 161.810562][ T36] audit: type=1400 audit(1772575502.961:25079): avc: denied { create } for pid=3716 comm="syz.2.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.839020][ T36] audit: type=1400 audit(1772575502.961:25080): avc: denied { create } for pid=3716 comm="syz.2.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.859644][ T36] audit: type=1400 audit(1772575502.961:25081): avc: denied { write } for pid=3716 comm="syz.2.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.892253][ T3692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.905830][ T36] audit: type=1400 audit(1772575502.961:25082): avc: denied { read } for pid=3716 comm="syz.2.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.926390][ T3692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.934203][ T419] usb 2-1: Invalid ep0 maxpacket: 64 [ 161.942727][ T332] usb 5-1: USB disconnect, device number 24 [ 161.961347][ T419] usb usb2-port1: attempt power cycle [ 161.968930][ T31] usb 4-1: USB disconnect, device number 68 [ 161.977586][ T36] audit: type=1400 audit(1772575502.961:25083): avc: denied { read } for pid=3716 comm="syz.2.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.004305][ T36] audit: type=1400 audit(1772575502.961:25084): avc: denied { write } for pid=3716 comm="syz.2.1121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.333230][ T419] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 162.384861][ T3733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.397701][ T419] usb 2-1: Invalid ep0 maxpacket: 64 [ 162.407002][ T3733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.525055][ T31] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 162.539595][ T419] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 162.580309][ T419] usb 2-1: Invalid ep0 maxpacket: 64 [ 162.599802][ T419] usb usb2-port1: unable to enumerate USB device [ 162.631193][ T3743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.653116][ T3743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.717761][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 162.733174][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 162.753561][ T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 162.814567][ T31] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 162.834106][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.852913][ T31] usb 4-1: Product: syz [ 162.858195][ T31] usb 4-1: Manufacturer: syz [ 162.862813][ T31] usb 4-1: SerialNumber: syz [ 163.644089][ T419] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 163.820601][ T3748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.843851][ T3748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.874087][ T3748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.897584][ T3748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.926928][ T3748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.951927][ T3748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.980856][ T3748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.004211][ T3748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.034312][ T3748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.064144][ T3748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.279690][ T419] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 164.333844][ T419] usb 5-1: can't read configurations, error -71 [ 164.924389][ T418] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 165.299778][ T418] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.329368][ T31] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 165.338965][ T418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.351457][ T31] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 165.352157][ T31] usb 4-1: failed to enable PITCH for EP 0x1 [ 165.354162][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 165.392483][ T418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.397161][ T31] usb 4-1: 1:1 : bogus bTerminalLink 5 [ 165.408361][ T31] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 165.413935][ T418] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 165.419679][ T31] usb 4-1: 1:1 : bogus bTerminalLink 5 [ 165.442578][ T31] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 165.457364][ T31] usb 4-1: USB disconnect, device number 69 [ 165.489835][ T418] usb 2-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 165.509125][ T419] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 165.644950][ T416] udevd[416]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 165.648802][ T418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.660801][ T419] usb 5-1: device descriptor read/64, error -71 [ 165.724946][ T418] usb 2-1: config 0 descriptor?? [ 165.925060][ T419] usb 5-1: device descriptor read/64, error -71 [ 165.961022][ T3753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.979686][ T31] usb 4-1: new low-speed USB device number 70 using dummy_hcd [ 165.990256][ T3753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.043620][ T419] usb usb5-port1: attempt power cycle [ 166.163608][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 166.173489][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 166.186596][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 166.197173][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 166.208335][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 166.218883][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 166.236411][ T31] usb 4-1: string descriptor 0 read error: -22 [ 166.238786][ T418] lg-g15 0003:046D:C227.0017: unknown main item tag 0x0 [ 166.253423][ T31] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 166.253457][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.255229][ T31] usb 4-1: config 0 descriptor?? [ 166.299806][ T418] lg-g15 0003:046D:C227.0017: unknown main item tag 0x2 [ 166.308428][ T3757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 166.311770][ T418] lg-g15 0003:046D:C227.0017: hidraw0: USB HID v0.00 Device [HID 046d:c227] on usb-dummy_hcd.1-1/input0 [ 166.404331][ T419] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 166.436779][ T1329] udevd[1329]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 166.448850][ T419] usb 5-1: device descriptor read/8, error -71 [ 166.493753][ T31] usb 2-1: USB disconnect, device number 74 [ 166.564313][ T484] usb 4-1: USB disconnect, device number 70 [ 166.620414][ T419] usb 5-1: device descriptor read/8, error -71 [ 166.647314][ T3762] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 166.894640][ T419] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 166.911049][ T3766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1136'. [ 166.931930][ T419] usb 5-1: device descriptor read/8, error -71 [ 166.996823][ T36] kauditd_printk_skb: 373 callbacks suppressed [ 166.996840][ T36] audit: type=1400 audit(1772575507.981:25458): avc: denied { create } for pid=3767 comm="syz.2.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.070804][ T36] audit: type=1400 audit(1772575508.019:25459): avc: denied { write } for pid=3767 comm="syz.2.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.115382][ T419] usb 5-1: device descriptor read/8, error -71 [ 167.162658][ T3771] FAULT_INJECTION: forcing a failure. [ 167.162658][ T3771] name failslab, interval 1, probability 0, space 0, times 0 [ 167.187191][ T36] audit: type=1400 audit(1772575508.019:25460): avc: denied { read write } for pid=3767 comm="syz.2.1137" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.253824][ T419] usb usb5-port1: unable to enumerate USB device [ 167.261466][ T3771] CPU: 1 UID: 0 PID: 3771 Comm: syz.1.1138 Not tainted syzkaller #0 e0984ef4b19b7a0d2e0df0f24afaf737f1320d97 [ 167.261507][ T3771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 167.261519][ T3771] Call Trace: [ 167.261526][ T3771] [ 167.261535][ T3771] __dump_stack+0x21/0x30 [ 167.261576][ T3771] dump_stack_lvl+0x140/0x1c0 [ 167.261601][ T3771] ? __cfi_dump_stack_lvl+0x10/0x10 [ 167.261626][ T3771] dump_stack+0x19/0x20 [ 167.261648][ T3771] should_fail_ex+0x3d7/0x530 [ 167.261670][ T3771] should_failslab+0xac/0x100 [ 167.261697][ T3771] __kmalloc_cache_noprof+0x41/0x470 [ 167.261722][ T3771] ? __check_object_size+0x527/0x830 [ 167.261746][ T3771] ? alloc_bprm+0x8d/0xb30 [ 167.261767][ T3771] alloc_bprm+0x8d/0xb30 [ 167.261787][ T3771] do_execveat_common+0x197/0xa80 [ 167.261809][ T3771] ? __kasan_check_write+0x18/0x20 [ 167.261831][ T3771] ? getname_flags+0x208/0x700 [ 167.261855][ T3771] __x64_sys_execve+0x96/0xb0 [ 167.261883][ T3771] x64_sys_call+0x12c4/0x2ee0 [ 167.261909][ T3771] do_syscall_64+0x57/0xf0 [ 167.261928][ T3771] ? clear_bhb_loop+0x50/0xa0 [ 167.261948][ T3771] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 167.261977][ T3771] RIP: 0033:0x7f47cbf9c799 [ 167.261995][ T3771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.262012][ T3771] RSP: 002b:00007f47ccdb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 167.262035][ T3771] RAX: ffffffffffffffda RBX: 00007f47cc215fa0 RCX: 00007f47cbf9c799 [ 167.262058][ T3771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 167.262077][ T3771] RBP: 00007f47ccdb0090 R08: 0000000000000000 R09: 0000000000000000 [ 167.262091][ T3771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.262110][ T3771] R13: 00007f47cc216038 R14: 00007f47cc215fa0 R15: 00007ffc1946be88 [ 167.262132][ T3771] [ 167.471290][ T36] audit: type=1400 audit(1772575508.019:25461): avc: denied { read write open } for pid=3767 comm="syz.2.1137" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.495438][ T36] audit: type=1400 audit(1772575508.019:25462): avc: denied { ioctl } for pid=3767 comm="syz.2.1137" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xaec1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.520048][ T36] audit: type=1400 audit(1772575508.019:25463): avc: denied { write } for pid=3767 comm="syz.2.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.540493][ T36] audit: type=1400 audit(1772575508.038:25464): avc: denied { read write } for pid=291 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.564581][ T36] audit: type=1400 audit(1772575508.038:25465): avc: denied { read write open } for pid=291 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.589967][ T36] audit: type=1400 audit(1772575508.038:25466): avc: denied { ioctl } for pid=291 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.615450][ T36] audit: type=1400 audit(1772575508.094:25467): avc: denied { read } for pid=3767 comm="syz.2.1137" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.801377][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 168.184127][ T419] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 168.404884][ T419] usb 2-1: unable to get BOS descriptor or descriptor too short [ 168.450262][ T419] usb 2-1: not running at top speed; connect to a high speed hub [ 168.460975][ T3788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.493478][ T3788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.514509][ T419] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 168.538082][ T3788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.574125][ T3788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.589092][ T419] usb 2-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 168.642970][ T484] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 168.650694][ T419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.686578][ T419] usb 2-1: Product: syz [ 168.690784][ T419] usb 2-1: Manufacturer: syz [ 168.741919][ T419] usb 2-1: SerialNumber: syz [ 168.792818][ T3777] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 168.823543][ T484] usb 5-1: Using ep0 maxpacket: 32 [ 168.880012][ T484] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 168.901323][ T484] usb 5-1: config 0 has no interface number 0 [ 168.908587][ T484] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 168.951439][ T484] usb 5-1: config 0 interface 196 has no altsetting 0 [ 168.963126][ T484] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 168.983631][ T484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.991676][ T484] usb 5-1: Product: syz [ 169.018798][ T484] usb 5-1: Manufacturer: syz [ 169.030740][ T484] usb 5-1: SerialNumber: syz [ 169.051946][ T484] usb 5-1: config 0 descriptor?? [ 169.073826][ T3786] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 169.221128][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 169.233578][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 169.245855][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 169.258177][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 169.270431][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 169.282666][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 169.294906][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 169.307141][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 169.319360][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 169.331787][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 169.419968][ T3794] SELinux: ebitmap: truncated map [ 169.456051][ T3794] SELinux: failed to load policy [ 169.567753][ T484] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 169.600656][ T484] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 169.644648][ T484] usb 5-1: USB disconnect, device number 29 [ 169.853692][ T3804] FAULT_INJECTION: forcing a failure. [ 169.853692][ T3804] name failslab, interval 1, probability 0, space 0, times 0 [ 169.907420][ T3804] CPU: 1 UID: 0 PID: 3804 Comm: syz.3.1149 Not tainted syzkaller #0 e0984ef4b19b7a0d2e0df0f24afaf737f1320d97 [ 169.907457][ T3804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.907472][ T3804] Call Trace: [ 169.907479][ T3804] [ 169.907490][ T3804] __dump_stack+0x21/0x30 [ 169.907521][ T3804] dump_stack_lvl+0x140/0x1c0 [ 169.907544][ T3804] ? __cfi_dump_stack_lvl+0x10/0x10 [ 169.907569][ T3804] dump_stack+0x19/0x20 [ 169.907591][ T3804] should_fail_ex+0x3d7/0x530 [ 169.907612][ T3804] should_failslab+0xac/0x100 [ 169.907639][ T3804] kmem_cache_alloc_noprof+0x42/0x410 [ 169.907663][ T3804] ? __kasan_kmalloc+0x96/0xb0 [ 169.907689][ T3804] ? mm_alloc+0x3b/0x140 [ 169.907707][ T3804] ? __kmalloc_cache_noprof+0x23c/0x470 [ 169.907732][ T3804] mm_alloc+0x3b/0x140 [ 169.907750][ T3804] alloc_bprm+0x2af/0xb30 [ 169.907772][ T3804] do_execveat_common+0x197/0xa80 [ 169.907793][ T3804] ? __kasan_check_write+0x18/0x20 [ 169.907816][ T3804] ? getname_flags+0x208/0x700 [ 169.907841][ T3804] __x64_sys_execve+0x96/0xb0 [ 169.907861][ T3804] x64_sys_call+0x12c4/0x2ee0 [ 169.907886][ T3804] do_syscall_64+0x57/0xf0 [ 169.907906][ T3804] ? clear_bhb_loop+0x50/0xa0 [ 169.907926][ T3804] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 169.907955][ T3804] RIP: 0033:0x7f60f219c799 [ 169.907973][ T3804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.907990][ T3804] RSP: 002b:00007f60f3012028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 169.908013][ T3804] RAX: ffffffffffffffda RBX: 00007f60f2415fa0 RCX: 00007f60f219c799 [ 169.908029][ T3804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 169.908051][ T3804] RBP: 00007f60f3012090 R08: 0000000000000000 R09: 0000000000000000 [ 169.908065][ T3804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.908078][ T3804] R13: 00007f60f2416038 R14: 00007f60f2415fa0 R15: 00007ffcaca67828 [ 169.908096][ T3804] [ 169.989440][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 170.081319][ T1868] Bluetooth: hci0: command 0x1003 tx timeout [ 170.417236][ T3806] overlayfs: failed to resolve 'xino=on': -2 [ 170.496868][ T3808] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 170.999522][ T419] usb 2-1: MIDIStreaming interface descriptor not found [ 171.027691][ T419] usb 2-1: USB disconnect, device number 75 [ 171.116093][ T484] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 171.156641][ T3818] usb usb8: usbfs: process 3818 (syz.3.1156) did not claim interface 0 before use [ 171.285969][ T3822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.321961][ T3822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.328031][ T484] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.365346][ T484] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.409499][ T484] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 171.447854][ T484] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.478592][ T484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.486610][ T484] usb 5-1: Product: syz [ 171.527889][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 171.573168][ T484] usb 5-1: Manufacturer: syz [ 171.590173][ T484] usb 5-1: SerialNumber: syz [ 171.619053][ T484] cdc_mbim 5-1:1.0: skipping garbage [ 171.892874][ T419] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 172.063403][ T419] usb 2-1: Using ep0 maxpacket: 32 [ 172.082683][ T419] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 172.116668][ T419] usb 2-1: config 0 has no interface number 0 [ 172.122828][ T419] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 172.157566][ T419] usb 2-1: config 0 interface 196 has no altsetting 0 [ 172.209131][ T419] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 172.231449][ T419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.252944][ T419] usb 2-1: Product: syz [ 172.263442][ T419] usb 2-1: Manufacturer: syz [ 172.284680][ T419] usb 2-1: SerialNumber: syz [ 172.328469][ T419] usb 2-1: config 0 descriptor?? [ 172.365196][ T3830] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 172.372622][ T36] kauditd_printk_skb: 358 callbacks suppressed [ 172.372644][ T36] audit: type=1400 audit(1772575513.020:25826): avc: denied { ioctl } for pid=3829 comm="syz.1.1159" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.474199][ T36] audit: type=1400 audit(1772575513.020:25827): avc: denied { ioctl } for pid=3829 comm="syz.1.1159" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.604985][ T36] audit: type=1400 audit(1772575513.020:25828): avc: denied { ioctl } for pid=3829 comm="syz.1.1159" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.693848][ T36] audit: type=1400 audit(1772575513.086:25829): avc: denied { ioctl } for pid=3829 comm="syz.1.1159" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.750116][ T36] audit: type=1400 audit(1772575513.086:25830): avc: denied { ioctl } for pid=3829 comm="syz.1.1159" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 172.805611][ T36] audit: type=1400 audit(1772575513.133:25831): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.922142][ T419] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 172.962836][ T419] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 172.972018][ T3842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.979402][ T36] audit: type=1400 audit(1772575513.133:25832): avc: denied { read write open } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.004123][ T3842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.033428][ T419] usb 2-1: USB disconnect, device number 76 [ 173.071470][ T342] udevd[342]: setting mode of /dev/bus/usb/002/076 to 020664 failed: No such file or directory [ 173.082491][ T36] audit: type=1400 audit(1772575513.133:25833): avc: denied { ioctl } for pid=290 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 173.082531][ T36] audit: type=1400 audit(1772575513.292:25834): avc: denied { ioctl } for pid=3814 comm="syz.4.1154" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 173.082575][ T36] audit: type=1400 audit(1772575513.302:25835): avc: denied { ioctl } for pid=3814 comm="syz.4.1154" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 173.119288][ T484] cdc_mbim 5-1:1.0: SET_NTB_FORMAT failed [ 173.225505][ T342] udevd[342]: setting owner of /dev/bus/usb/002/076 to uid=0, gid=0 failed: No such file or directory [ 173.238714][ T484] cdc_mbim 5-1:1.0: bind() failure [ 173.249451][ T484] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 173.256337][ T484] cdc_ncm 5-1:1.1: bind() failure [ 173.278405][ T484] usb 5-1: USB disconnect, device number 30 [ 173.298584][ T3842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.322245][ T3842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.843162][ T484] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 174.013836][ T484] usb 2-1: Using ep0 maxpacket: 16 [ 174.042297][ T484] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.061370][ T3861] syzkaller1: entered promiscuous mode [ 174.069015][ T3861] syzkaller1: entered allmulticast mode [ 174.089834][ T484] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 174.130682][ T484] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 174.154371][ T484] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.214168][ T484] usb 2-1: config 0 descriptor?? [ 174.331922][ T3868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1170'. [ 174.557399][ C0] net_ratelimit: 19549 callbacks suppressed [ 174.557424][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 174.575577][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 174.587876][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 174.600102][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 174.612381][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 174.624649][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 174.636949][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 174.649228][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 174.661498][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 174.673780][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 174.692354][ T484] usbhid 2-1:0.0: can't add hid device: -71 [ 174.705982][ T484] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 174.746336][ T484] usb 2-1: USB disconnect, device number 77 [ 175.088489][ T3876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.132869][ T3876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.420677][ T3885] rust_binder: 324: no such ref 2 [ 175.459368][ T3885] rust_binder: Write failure EINVAL in pid:324 [ 175.588429][ T3890] SELinux: Context KNáDd«5è·ÓQ3‘BkÙ”yb˜ÏðÓ­ü£sÐÿ¿„,~úÔ;c3˜poš¹ÍºÐfP×Ò¸62òùAi®]Ý is not valid (left unmapped). [ 175.889402][ T419] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 176.054108][ T419] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.091851][ T419] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 176.126331][ T419] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 176.139365][ T3907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.148951][ T3907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.159838][ T419] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 176.177932][ T419] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 176.207804][ T419] usb 4-1: Manufacturer: syz [ 176.231235][ T3894] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 176.477436][ T419] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 176.518878][ T419] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input25 [ 176.594132][ T419] usb 4-1: USB disconnect, device number 71 [ 176.598046][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 177.127142][ T3929] input: syz0 as /devices/virtual/input/input26 [ 177.274834][ T419] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 177.466667][ T31] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 177.488171][ T419] usb 5-1: Using ep0 maxpacket: 32 [ 177.548830][ T419] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 177.594558][ T419] usb 5-1: config 0 has no interface number 0 [ 177.623553][ T419] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 177.681747][ T419] usb 5-1: config 0 interface 196 has no altsetting 0 [ 177.699527][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.721767][ T36] kauditd_printk_skb: 413 callbacks suppressed [ 177.721783][ T36] audit: type=1400 audit(1772575518.040:26249): avc: denied { ioctl } for pid=3931 comm="syz.3.1192" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.768687][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.799018][ T419] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 177.861050][ T419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.874060][ T31] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 177.892973][ T484] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 177.914306][ T419] usb 5-1: Product: syz [ 177.934053][ T31] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 177.951950][ T36] audit: type=1400 audit(1772575518.096:26250): avc: denied { ioctl } for pid=3933 comm="syz.1.1193" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 177.979598][ T419] usb 5-1: Manufacturer: syz [ 177.984933][ T31] usb 4-1: Manufacturer: syz [ 177.989708][ T419] usb 5-1: SerialNumber: syz [ 178.014634][ T31] usb 4-1: config 0 descriptor?? [ 178.020996][ T419] usb 5-1: config 0 descriptor?? [ 178.039358][ T3925] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 178.052232][ T36] audit: type=1400 audit(1772575518.115:26251): avc: denied { ioctl } for pid=3922 comm="syz.4.1189" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.088335][ T36] audit: type=1400 audit(1772575518.115:26252): avc: denied { ioctl } for pid=3922 comm="syz.4.1189" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.113423][ T484] usb 2-1: Using ep0 maxpacket: 8 [ 178.144488][ T484] usb 2-1: unable to get BOS descriptor or descriptor too short [ 178.156365][ T484] usb 2-1: config 9 has an invalid interface number: 59 but max is 0 [ 178.170536][ T484] usb 2-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 178.179487][ T484] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 178.191218][ T36] audit: type=1400 audit(1772575518.115:26253): avc: denied { ioctl } for pid=3922 comm="syz.4.1189" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.216497][ T484] usb 2-1: config 9 has no interface number 0 [ 178.223682][ T484] usb 2-1: config 9 interface 59 altsetting 2 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 178.235489][ T36] audit: type=1400 audit(1772575518.125:26254): avc: denied { ioctl } for pid=3922 comm="syz.4.1189" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.262663][ T484] usb 2-1: config 9 interface 59 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 178.276541][ T484] usb 2-1: config 9 interface 59 has no altsetting 0 [ 178.290160][ T36] audit: type=1400 audit(1772575518.125:26255): avc: denied { ioctl } for pid=3922 comm="syz.4.1189" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.331611][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 178.337700][ T484] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=d2.ba [ 178.350719][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 178.394970][ T484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.426924][ T31] usb 4-1: USB disconnect, device number 72 [ 178.447153][ T484] usb 2-1: Product: syz [ 178.465160][ T36] audit: type=1400 audit(1772575518.125:26256): avc: denied { ioctl } for pid=3922 comm="syz.4.1189" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.500435][ T484] usb 2-1: Manufacturer: syz [ 178.526811][ T484] usb 2-1: SerialNumber: syz [ 178.602465][ T419] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 178.760883][ T36] audit: type=1400 audit(1772575518.125:26257): avc: denied { ioctl } for pid=3922 comm="syz.4.1189" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 178.889784][ T419] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 178.920350][ T419] usb 5-1: USB disconnect, device number 31 [ 179.896526][ C1] net_ratelimit: 31284 callbacks suppressed [ 179.896548][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.896631][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 179.902566][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.914726][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 179.926452][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.938530][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 179.950261][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.962413][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 179.974127][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 179.986184][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 180.603041][ T36] audit: type=1400 audit(1772575518.125:26258): avc: denied { ioctl } for pid=3922 comm="syz.4.1189" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.894275][ T484] usb 2-1: USB disconnect, device number 78 [ 183.519647][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 183.519668][ T36] audit: type=1400 audit(1772575523.426:26322): avc: denied { read write } for pid=3943 comm="syz.4.1196" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 183.787830][ T36] audit: type=1400 audit(1772575523.426:26323): avc: denied { read write open } for pid=3943 comm="syz.4.1196" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 184.635802][ T36] audit: type=1400 audit(1772575523.783:26324): avc: denied { ioctl } for pid=3943 comm="syz.4.1196" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 184.786410][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:9.59/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.235931][ C0] net_ratelimit: 91749 callbacks suppressed [ 185.235953][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 185.236006][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.242053][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.253860][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.265767][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.277646][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.289596][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 185.301475][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.313522][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.325519][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 185.963042][ T36] audit: type=1400 audit(1772575523.895:26325): avc: denied { sys_module } for pid=3943 comm="syz.4.1196" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 186.391660][ T36] audit: type=1400 audit(1772575524.027:26326): avc: denied { read } for pid=3946 comm="syz.3.1195" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 186.538330][ T3954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1197'. [ 186.618135][ T36] audit: type=1400 audit(1772575524.027:26327): avc: denied { read open } for pid=3946 comm="syz.3.1195" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 187.077796][ T36] audit: type=1400 audit(1772575524.036:26328): avc: denied { read } for pid=3946 comm="syz.3.1195" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 187.609960][ T36] audit: type=1400 audit(1772575524.036:26329): avc: denied { read open } for pid=3946 comm="syz.3.1195" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 188.658215][ T36] audit: type=1400 audit(1772575524.064:26330): avc: denied { ioctl } for pid=3946 comm="syz.3.1195" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 190.575202][ C1] net_ratelimit: 95680 callbacks suppressed [ 190.575224][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.575369][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 190.581277][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.593464][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.605240][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.617234][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.629093][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.641190][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 190.653041][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.665122][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.866594][ T36] audit: type=1400 audit(1772575524.336:26331): avc: denied { read } for pid=3946 comm="syz.3.1195" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 192.745903][ T36] audit: type=1400 audit(1772575524.336:26332): avc: denied { read open } for pid=3946 comm="syz.3.1195" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 193.064773][ T9] usb 3-1: USB disconnect, device number 29 [ 193.800302][ T36] audit: type=1400 audit(1772575524.336:26333): avc: denied { ioctl } for pid=3946 comm="syz.3.1195" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 194.500391][ T36] audit: type=1400 audit(1772575524.355:26334): avc: denied { read write } for pid=2251 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 195.914572][ C1] net_ratelimit: 94890 callbacks suppressed [ 195.914593][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.914699][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 195.920594][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.932608][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.944401][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.956466][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.968338][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 195.980298][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 195.992177][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.004216][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.376142][ T36] audit: type=1400 audit(1772575524.355:26335): avc: denied { read write open } for pid=2251 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 197.746532][ T36] audit: type=1400 audit(1772575524.355:26336): avc: denied { ioctl } for pid=2251 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 198.817880][ T36] audit: type=1400 audit(1772575524.374:26337): avc: denied { read write } for pid=3946 comm="syz.3.1195" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 199.181901][ T36] audit: type=1400 audit(1772575524.374:26338): avc: denied { read write open } for pid=3946 comm="syz.3.1195" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 201.253881][ C1] net_ratelimit: 122424 callbacks suppressed [ 201.253903][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.253946][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.260004][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.272078][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 201.283964][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.296025][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.307805][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.319694][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.331573][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.343526][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 204.273975][ C0] sched: DL replenish lagged too much [ 206.593237][ C0] net_ratelimit: 131978 callbacks suppressed [ 206.593258][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.593303][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.599321][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.611235][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.623184][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 206.635091][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.647111][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.658923][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.670937][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 206.682906][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.831340][ T36] audit: type=1400 audit(1772575524.374:26339): avc: denied { ioctl } for pid=3946 comm="syz.3.1195" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 209.228673][ T36] audit: type=1400 audit(1772575526.288:26340): avc: denied { create } for pid=3951 comm="syz.4.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 211.932576][ C1] net_ratelimit: 128255 callbacks suppressed [ 211.932597][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.932618][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.938665][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.950645][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 211.962615][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.974623][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.986379][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 211.998335][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.010242][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.022234][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 212.562542][ T36] audit: type=1400 audit(1772575526.288:26341): avc: denied { write } for pid=3951 comm="syz.4.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 213.610709][ T36] audit: type=1400 audit(1772575526.325:26342): avc: denied { nlmsg_write } for pid=3951 comm="syz.4.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.056148][ T36] audit: type=1400 audit(1772575526.626:26343): avc: denied { read write } for pid=2251 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 215.567110][ T36] audit: type=1400 audit(1772575526.626:26344): avc: denied { read write open } for pid=2251 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.625483][ T36] audit: type=1400 audit(1772575526.626:26345): avc: denied { ioctl } for pid=2251 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.271941][ C1] net_ratelimit: 120611 callbacks suppressed [ 217.271964][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.271975][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.272096][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.278048][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.290034][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.301911][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.313870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 217.325838][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.337891][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 217.349683][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.402541][ T36] audit: type=1400 audit(1772575533.325:26346): avc: denied { execmem } for pid=3958 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 221.151481][ T36] audit: type=1400 audit(1772575533.335:26347): avc: denied { create } for pid=3957 comm="syz.4.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 222.611305][ C0] net_ratelimit: 128046 callbacks suppressed [ 222.611327][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.611373][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.617447][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.629319][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.641199][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.653089][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.665041][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 222.676947][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.688979][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.700785][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 222.738579][ T36] audit: type=1400 audit(1772575533.485:26348): avc: denied { mounton } for pid=3957 comm="syz.4.1198" path="/122" dev="tmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 224.360561][ T36] audit: type=1400 audit(1772575533.494:26349): avc: denied { mount } for pid=3957 comm="syz.4.1198" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 227.950632][ C0] net_ratelimit: 126000 callbacks suppressed [ 227.950654][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.950687][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.956778][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.968681][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 227.980715][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 227.992807][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.004862][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.016677][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.028677][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.040738][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.191679][ T36] audit: type=1400 audit(1772575533.579:26350): avc: denied { create } for pid=3957 comm="syz.4.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.900458][ T36] audit: type=1400 audit(1772575533.616:26351): avc: denied { create } for pid=3957 comm="syz.4.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 229.795664][ T36] audit: type=1400 audit(1772575533.616:26352): avc: denied { write } for pid=3957 comm="syz.4.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 230.563976][ T36] audit: type=1400 audit(1772575533.635:26353): avc: denied { read } for pid=3957 comm="syz.4.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.023284][ T36] audit: type=1400 audit(1772575533.635:26354): avc: denied { read } for pid=3957 comm="syz.4.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.132169][ T36] audit: type=1400 audit(1772575536.638:26355): avc: denied { execmem } for pid=3967 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 233.088803][ T36] audit: type=1400 audit(1772575536.722:26356): avc: denied { unmount } for pid=2251 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 233.289968][ C1] net_ratelimit: 124983 callbacks suppressed [ 233.289990][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.290023][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 233.296114][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.308117][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.320004][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.331891][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.343744][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.355802][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 233.367672][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.379714][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 236.349379][ T36] audit: type=1400 audit(1772575536.741:26357): avc: denied { read write } for pid=2251 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.951042][ T36] audit: type=1400 audit(1772575536.741:26358): avc: denied { read write open } for pid=2251 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.629283][ C1] net_ratelimit: 129932 callbacks suppressed [ 238.629307][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.629334][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.635383][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.647358][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 238.659267][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.671295][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.683116][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.694992][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.706870][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.718906][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 240.311843][ T36] audit: type=1400 audit(1772575536.741:26359): avc: denied { ioctl } for pid=2251 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 241.777876][ T36] audit: type=1400 audit(1772575537.154:26360): avc: denied { execmem } for pid=3968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 243.968630][ C0] net_ratelimit: 132928 callbacks suppressed [ 243.968653][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.968700][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.974830][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 243.986772][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.998724][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.010591][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.022609][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.034511][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.046603][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 244.058508][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.209032][ T36] audit: type=1400 audit(1772575538.092:26361): avc: denied { read } for pid=3969 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 249.307954][ C1] net_ratelimit: 129491 callbacks suppressed [ 249.307976][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.308058][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 249.314062][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.326114][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.337923][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.349816][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.361791][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.373828][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 249.385736][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.397764][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.927014][ T36] audit: type=1400 audit(1772575538.092:26362): avc: denied { read open } for pid=3969 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 253.848460][ T36] audit: type=1400 audit(1772575538.092:26363): avc: denied { mounton } for pid=3969 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 254.338563][ T36] audit: type=1400 audit(1772575538.364:26364): avc: denied { sys_module } for pid=3969 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 254.647299][ C1] net_ratelimit: 133128 callbacks suppressed [ 254.647321][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.647386][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 254.653395][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.665343][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.677226][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.689207][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.701057][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.713017][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 254.724895][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.736906][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.768865][ T36] audit: type=1400 audit(1772575541.920:26365): avc: denied { read } for pid=3971 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 258.123788][ T36] audit: type=1400 audit(1772575541.920:26366): avc: denied { read open } for pid=3971 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 258.905734][ T36] audit: type=1400 audit(1772575547.485:26367): avc: denied { mounton } for pid=3971 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 259.513845][ T36] audit: type=1400 audit(1772575547.485:26368): avc: denied { sys_module } for pid=3971 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 259.986673][ C1] net_ratelimit: 128295 callbacks suppressed [ 259.986702][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.986733][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.992785][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.004683][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.016590][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.028645][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 260.040544][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.052630][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.064444][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.076358][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 260.880859][ T36] audit: type=1400 audit(1772575551.641:26369): avc: denied { read } for pid=3975 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 261.506470][ T36] audit: type=1400 audit(1772575551.641:26370): avc: denied { read open } for pid=3975 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 262.801277][ T36] audit: type=1400 audit(1772575551.641:26371): avc: denied { mounton } for pid=3975 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 264.570969][ T36] audit: type=1400 audit(1772575552.186:26372): avc: denied { read } for pid=3973 comm="syz.4.1202" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 265.326005][ C1] net_ratelimit: 127614 callbacks suppressed [ 265.326027][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.326123][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.332135][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.344084][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.355897][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.367952][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.379816][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.391931][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 265.403758][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.415693][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 265.585491][ T36] audit: type=1400 audit(1772575552.186:26373): avc: denied { read open } for pid=3973 comm="syz.4.1202" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 266.372206][ T36] audit: type=1400 audit(1772575552.261:26374): avc: denied { sys_module } for pid=3975 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 269.028980][ T36] audit: type=1400 audit(1772575552.401:26375): avc: denied { ioctl } for pid=3973 comm="syz.4.1202" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 270.665400][ C1] net_ratelimit: 128785 callbacks suppressed [ 270.665422][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.665461][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.671515][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.683473][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.695305][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.707253][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 270.719134][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.731192][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.742993][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 270.754858][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.728157][ T36] audit: type=1400 audit(1772575553.499:26376): avc: denied { execmem } for pid=3982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 275.558908][ T36] audit: type=1400 audit(1772575567.274:26377): avc: denied { read } for pid=3983 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 276.004703][ C1] net_ratelimit: 130406 callbacks suppressed [ 276.004724][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.004784][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 276.010814][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.022791][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.034598][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.046473][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.058342][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 276.070405][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 276.082535][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:6a:8b:7b:e8:f1:9f, vlan:0) [ 276.094517][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.170681][ T36] audit: type=1400 audit(1772575567.274:26378): avc: denied { read open } for pid=3983 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 278.726697][ T36] audit: type=1400 audit(1772575567.274:26379): avc: denied { mounton } for pid=3983 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 280.598642][ T36] audit: type=1400 audit(1772575569.544:26380): avc: denied { sys_module } for pid=3983 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 280.961854][ T36] audit: type=1400 audit(1772575569.573:26381): avc: denied { sys_module } for pid=3969 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 281.344098][ C1] net_ratelimit: 125334 callbacks suppressed [ 281.344121][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.344124][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 281.344255][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.350213][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.362213][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.374101][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.386041][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 281.397866][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.409895][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 281.421708][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.293349][ T36] audit: type=1400 audit(1772575569.582:26382): avc: denied { sys_module } for pid=3969 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 283.219947][ T36] audit: type=1400 audit(1772575569.582:26383): avc: denied { sys_module } for pid=3971 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 283.743235][ T36] audit: type=1400 audit(1772575569.591:26384): avc: denied { sys_module } for pid=3971 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 284.023358][ T36] audit: type=1400 audit(1772575569.788:26385): avc: denied { sys_module } for pid=3975 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 286.683433][ C1] net_ratelimit: 128289 callbacks suppressed [ 286.683455][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.683555][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 286.689556][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.701616][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.713442][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.725309][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.737182][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.749210][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 286.761137][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.773050][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 286.876555][ T36] audit: type=1400 audit(1772575593.443:26386): avc: denied { sys_module } for pid=3983 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 289.500789][ T36] audit: type=1400 audit(1772575593.453:26387): avc: denied { sys_module } for pid=3975 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 291.501116][ T36] audit: type=1400 audit(1772575593.472:26388): avc: denied { sys_module } for pid=3971 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 292.022781][ C1] net_ratelimit: 131942 callbacks suppressed [ 292.022803][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.022837][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.028880][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.040834][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 292.052734][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.064689][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.076491][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.088522][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.100385][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.112321][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 293.845343][ T36] audit: type=1400 audit(1772575594.072:26389): avc: denied { sys_module } for pid=3975 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 295.136687][ T36] audit: type=1400 audit(1772575594.138:26390): avc: denied { sys_module } for pid=3983 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 295.764360][ T36] audit: type=1400 audit(1772575594.400:26391): avc: denied { sys_module } for pid=3983 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 297.002549][ T36] audit: type=1400 audit(1772575596.315:26392): avc: denied { execmem } for pid=3984 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 297.362156][ C1] net_ratelimit: 131132 callbacks suppressed [ 297.362177][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.362198][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 297.368249][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.380239][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.392321][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.404277][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.416186][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.428364][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 297.440113][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.452165][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.554288][ T36] audit: type=1400 audit(1772575596.596:26393): avc: denied { execmem } for pid=3985 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 297.675689][ T36] audit: type=1400 audit(1772575601.062:26394): avc: denied { execmem } for pid=3986 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 298.440389][ T36] audit: type=1400 audit(1772575601.625:26395): avc: denied { read } for pid=3987 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 300.487367][ T36] audit: type=1400 audit(1772575601.625:26396): avc: denied { read open } for pid=3987 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 302.701461][ C0] net_ratelimit: 132036 callbacks suppressed [ 302.701483][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.701501][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.707615][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 302.719556][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.731602][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.743425][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.755299][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.767163][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.779213][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 302.791091][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.894299][ T36] audit: type=1400 audit(1772575601.625:26397): avc: denied { mounton } for pid=3987 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 306.445124][ T36] audit: type=1400 audit(1772575603.305:26398): avc: denied { sys_module } for pid=3987 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 307.743740][ T36] audit: type=1400 audit(1772575614.781:26399): avc: denied { read } for pid=3988 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 308.040821][ C0] net_ratelimit: 133764 callbacks suppressed [ 308.040843][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.040856][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.040926][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.046919][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.058857][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.070797][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 308.082648][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.094705][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.106557][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.118431][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.216126][ T36] audit: type=1400 audit(1772575614.781:26400): avc: denied { read open } for pid=3988 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 309.307694][ T36] audit: type=1400 audit(1772575614.818:26401): avc: denied { mounton } for pid=3988 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 310.131253][ T36] audit: type=1400 audit(1772575614.818:26402): avc: denied { sys_module } for pid=3988 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 313.380205][ C1] net_ratelimit: 126245 callbacks suppressed [ 313.380235][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.380439][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 313.386377][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.398416][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.410222][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.422117][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.433986][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.446149][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 313.457905][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.469862][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.393450][ T36] audit: type=1400 audit(1772575614.978:26403): avc: denied { read } for pid=3990 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 318.689713][ T36] audit: type=1400 audit(1772575614.978:26404): avc: denied { read open } for pid=3990 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 318.719542][ C0] net_ratelimit: 117053 callbacks suppressed [ 318.719563][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.719572][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.719647][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.725620][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.737530][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.749625][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 318.761302][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.773336][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.785233][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.797100][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.247098][ T36] audit: type=1400 audit(1772575614.978:26405): avc: denied { mounton } for pid=3990 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 321.501562][ T36] audit: type=1400 audit(1772575615.015:26406): avc: denied { sys_module } for pid=3990 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 324.058904][ C0] net_ratelimit: 119065 callbacks suppressed [ 324.058926][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 324.058985][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.065083][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.076949][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.088944][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 324.100830][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.112701][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.124564][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.136633][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 324.148425][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.255563][ T37] INFO: task syz.1.1193:3934 blocked for more than 122 seconds. [ 324.542740][ T36] audit: type=1400 audit(1772575615.025:26407): avc: denied { execmem } for pid=3989 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 324.827456][ T36] audit: type=1400 audit(1772575615.081:26408): avc: denied { sys_module } for pid=3990 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 324.855146][ T37] Not tainted syzkaller #0 [ 324.860138][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 324.868816][ T37] task:syz.1.1193 state:D stack:0 pid:3934 tgid:3933 ppid:291 flags:0x00004006 [ 324.879092][ T37] Call Trace: [ 324.882404][ T37] [ 324.885338][ T37] __schedule+0x134f/0x1ea0 [ 324.889889][ T37] ? __sched_text_start+0x10/0x10 [ 324.894947][ T37] ? __mutex_add_waiter+0xd0/0x2a0 [ 324.900073][ T37] ? __kasan_check_write+0x18/0x20 [ 324.905229][ T37] ? trace_contention_begin+0xc0/0xc0 [ 324.910618][ T37] ? get_signal+0x1398/0x14e0 [ 324.915340][ T37] schedule+0xc5/0x240 [ 324.919421][ T37] schedule_preempt_disabled+0x14/0x30 [ 324.924915][ T37] __mutex_lock+0x960/0x1bb0 [ 324.929519][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 324.936319][ T37] ? __cfi_tdp_mmu_free_sp_rcu_callback+0x10/0x10 [ 324.942748][ T37] ? __call_rcu_common+0x43b/0x720 [ 324.947907][ T37] ? call_rcu_hurry+0x30/0x30 [ 324.952597][ T37] __mutex_lock_slowpath+0xe/0x20 [ 324.957659][ T37] mutex_lock+0x113/0x1d0 [ 324.961999][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 324.966887][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x67b/0x6e0 [ 324.973404][ T37] rcu_barrier+0x4d/0x540 [ 324.977766][ T37] ? __kasan_check_write+0x18/0x20 [ 324.982890][ T37] ? kvm_destroy_vcpus+0x1c6/0x250 [ 324.988040][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 324.993425][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 324.998251][ T37] kvm_arch_destroy_vm+0x398/0x420 [ 325.003383][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 325.009085][ T37] ? __kasan_check_write+0x18/0x20 [ 325.014237][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 325.019916][ T37] ? free_pages+0x86/0x90 [ 325.024263][ T37] kvm_put_kvm+0xb04/0x12c0 [ 325.028815][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 325.033933][ T37] ? percpu_counter_add_batch+0xfc/0x1a0 [ 325.039677][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 325.044887][ T37] kvm_vm_release+0x47/0x70 [ 325.049413][ T37] __fput+0x1fb/0xa00 [ 325.053425][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 325.058976][ T37] ____fput+0x20/0x30 [ 325.062985][ T37] task_work_run+0x1e5/0x260 [ 325.067586][ T37] ? __cfi_task_work_run+0x10/0x10 [ 325.072724][ T37] ? __kasan_check_write+0x18/0x20 [ 325.077851][ T37] do_exit+0x9e3/0x2650 [ 325.082037][ T37] ? __kasan_check_read+0x15/0x20 [ 325.087069][ T37] ? futex_wake+0x627/0x950 [ 325.091581][ T37] ? __cfi_do_exit+0x10/0x10 [ 325.096206][ T37] ? futex_setup_timer+0xb4/0xd0 [ 325.101159][ T37] ? futex_wait+0x2ac/0x7b0 [ 325.105710][ T37] ? __kasan_check_write+0x18/0x20 [ 325.110832][ T37] ? _raw_spin_lock_irq+0x93/0x120 [ 325.115970][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 325.121525][ T37] do_group_exit+0x229/0x2f0 [ 325.126331][ T37] ? __kasan_check_write+0x18/0x20 [ 325.131463][ T37] get_signal+0x1398/0x14e0 [ 325.136011][ T37] arch_do_signal_or_restart+0xbc/0x760 [ 325.141573][ T37] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 325.147784][ T37] ? __kasan_check_write+0x18/0x20 [ 325.152915][ T37] syscall_exit_to_user_mode+0x57/0xb0 [ 325.158528][ T37] do_syscall_64+0x63/0xf0 [ 325.162959][ T37] ? clear_bhb_loop+0x50/0xa0 [ 325.167677][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 325.173601][ T37] RIP: 0033:0x7f47cbf9c799 [ 325.178062][ T37] RSP: 002b:00007f47ccdb00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 325.186488][ T37] RAX: fffffffffffffe00 RBX: 00007f47cc215fa8 RCX: 00007f47cbf9c799 [ 325.194499][ T37] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f47cc215fa8 [ 325.202940][ T37] RBP: 00007f47cc215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 325.210939][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.218916][ T37] R13: 00007f47cc216038 R14: 00007ffc1946bda0 R15: 00007ffc1946be88 [ 325.226943][ T37] [ 325.230020][ T37] INFO: task syz.3.1195:3946 blocked for more than 123 seconds. [ 325.239667][ T36] audit: type=1400 audit(1772575615.081:26409): avc: denied { sys_module } for pid=3987 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 325.269165][ T37] Not tainted syzkaller #0 [ 325.274146][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 325.282814][ T37] task:syz.3.1195 state:D stack:0 pid:3946 tgid:3946 ppid:292 flags:0x00004004 [ 325.293025][ T37] Call Trace: [ 325.296325][ T37] [ 325.299267][ T37] __schedule+0x134f/0x1ea0 [ 325.303782][ T37] ? __sched_text_start+0x10/0x10 [ 325.308835][ T37] ? __mutex_add_waiter+0xd0/0x2a0 [ 325.313968][ T37] ? __kasan_check_write+0x18/0x20 [ 325.319116][ T37] ? trace_contention_begin+0xc0/0xc0 [ 325.324501][ T37] schedule+0xc5/0x240 [ 325.328616][ T37] schedule_preempt_disabled+0x14/0x30 [ 325.334086][ T37] __mutex_lock+0x960/0x1bb0 [ 325.338710][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 325.345493][ T37] ? preempt_schedule_thunk+0x1a/0x40 [ 325.350915][ T37] ? _raw_spin_unlock_irq+0x45/0x70 [ 325.356124][ T37] ? wait_for_common+0x570/0x650 [ 325.361093][ T37] ? xas_start+0x31e/0x3e0 [ 325.365604][ T37] ? xas_load+0x394/0x3d0 [ 325.369962][ T37] __mutex_lock_slowpath+0xe/0x20 [ 325.375170][ T37] mutex_lock+0x113/0x1d0 [ 325.379508][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 325.384389][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x67b/0x6e0 [ 325.390907][ T37] ? xa_find+0x145/0x170 [ 325.395174][ T37] rcu_barrier+0x4d/0x540 [ 325.399509][ T37] ? __kasan_check_write+0x18/0x20 [ 325.404652][ T37] ? kvm_destroy_vcpus+0x1c6/0x250 [ 325.409776][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 325.415189][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 325.419965][ T37] kvm_arch_destroy_vm+0x398/0x420 [ 325.425114][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 325.430755][ T37] ? __kasan_check_write+0x18/0x20 [ 325.435889][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 325.441533][ T37] kvm_put_kvm+0xb04/0x12c0 [ 325.446062][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 325.451176][ T37] ? percpu_counter_add_batch+0xfc/0x1a0 [ 325.456830][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 325.462059][ T37] kvm_vm_release+0x47/0x70 [ 325.466584][ T37] __fput+0x1fb/0xa00 [ 325.470569][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 325.476125][ T37] ____fput+0x20/0x30 [ 325.480131][ T37] task_work_run+0x1e5/0x260 [ 325.484729][ T37] ? __cfi_task_work_run+0x10/0x10 [ 325.489866][ T37] ? __kasan_check_write+0x18/0x20 [ 325.494985][ T37] resume_user_mode_work+0x35/0x50 [ 325.500160][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 325.505631][ T37] do_syscall_64+0x63/0xf0 [ 325.510080][ T37] ? clear_bhb_loop+0x50/0xa0 [ 325.514763][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 325.520681][ T37] RIP: 0033:0x7f60f219c799 [ 325.525099][ T37] RSP: 002b:00007ffcaca67988 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 325.533537][ T37] RAX: 0000000000000000 RBX: 00007f60f2417da0 RCX: 00007f60f219c799 [ 325.541530][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 325.549513][ T37] RBP: 00007f60f2417da0 R08: 0000000000000006 R09: 0000000000000000 [ 325.557523][ T37] R10: 00007f60f2417cb0 R11: 0000000000000246 R12: 000000000002b4d9 [ 325.565519][ T37] R13: 00007f60f241609c R14: 000000000002b40f R15: 00007f60f2416090 [ 325.573519][ T37] [ 325.576596][ T37] INFO: task syz.3.1195:3947 blocked for more than 123 seconds. [ 325.605703][ T37] Not tainted syzkaller #0 [ 325.610850][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 325.624104][ T37] task:syz.3.1195 state:D stack:0 pid:3947 tgid:3946 ppid:292 flags:0x00004004 [ 325.634313][ T37] Call Trace: [ 325.637632][ T37] [ 325.640568][ T37] __schedule+0x134f/0x1ea0 [ 325.645090][ T37] ? __sched_text_start+0x10/0x10 [ 325.650170][ T37] ? __mutex_add_waiter+0xd0/0x2a0 [ 325.655303][ T37] ? __kasan_check_write+0x18/0x20 [ 325.660455][ T37] ? trace_contention_begin+0xc0/0xc0 [ 325.665841][ T37] schedule+0xc5/0x240 [ 325.669934][ T37] schedule_preempt_disabled+0x14/0x30 [ 325.675403][ T37] __mutex_lock+0x960/0x1bb0 [ 325.680032][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 325.680107][ T36] audit: type=1400 audit(1772575615.090:26410): avc: denied { sys_module } for pid=3987 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 325.686800][ T37] ? kvm_vm_release+0x47/0x70 [ 325.712750][ T37] ? call_rcu_hurry+0x30/0x30 [ 325.717449][ T37] ? __kasan_check_write+0x18/0x20 [ 325.722587][ T37] ? xas_clear_mark+0x1e8/0x430 [ 325.727453][ T37] __mutex_lock_slowpath+0xe/0x20 [ 325.732511][ T37] mutex_lock+0x113/0x1d0 [ 325.736861][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 325.741734][ T37] ? kvm_tdp_mmu_zap_invalidated_roots+0x67b/0x6e0 [ 325.748364][ T37] rcu_barrier+0x4d/0x540 [ 325.752700][ T37] ? __kasan_check_write+0x18/0x20 [ 325.754910][ T36] audit: type=1400 audit(1772575615.100:26411): avc: denied { sys_module } for pid=3987 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 325.757830][ T37] ? kvm_destroy_vcpus+0x1c6/0x250 [ 325.784199][ T37] kvm_mmu_uninit_tdp_mmu+0x1df/0x210 [ 325.789622][ T37] kvm_mmu_uninit_vm+0x27/0x60 [ 325.794401][ T37] kvm_arch_destroy_vm+0x398/0x420 [ 325.799550][ T37] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 325.805196][ T37] ? __kasan_check_write+0x18/0x20 [ 325.810349][ T37] ? mmu_notifier_unregister+0x2de/0x360 [ 325.815997][ T37] kvm_put_kvm+0xb04/0x12c0 [ 325.820533][ T37] ? kvm_irqfd_release+0x1b0/0x1d0 [ 325.825650][ T37] ? __cfi_kvm_vm_release+0x10/0x10 [ 325.828704][ T36] audit: type=1400 audit(1772575615.175:26412): avc: denied { sys_module } for pid=3990 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 325.830866][ T37] kvm_vm_release+0x47/0x70 [ 325.856611][ T37] __fput+0x1fb/0xa00 [ 325.860621][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 325.866178][ T37] ____fput+0x20/0x30 [ 325.870178][ T37] task_work_run+0x1e5/0x260 [ 325.874811][ T37] ? __cfi_task_work_run+0x10/0x10 [ 325.879962][ T37] ? __se_sys_ioctl+0x198/0x1b0 [ 325.884868][ T37] resume_user_mode_work+0x35/0x50 [ 325.889995][ T37] syscall_exit_to_user_mode+0x63/0xb0 [ 325.895498][ T37] do_syscall_64+0x63/0xf0 [ 325.900312][ T37] ? clear_bhb_loop+0x50/0xa0 [ 325.905018][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 325.910927][ T37] RIP: 0033:0x7f60f219c42b [ 325.915368][ T37] RSP: 002b:00007f60f3010450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.916784][ T36] audit: type=1400 audit(1772575615.184:26413): avc: denied { sys_module } for pid=3990 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 325.923792][ T37] RAX: 0000000000000000 RBX: 0000200000000000 RCX: 00007f60f219c42b [ 325.923810][ T37] RDX: 00007f60f3010bd0 RSI: 000000004020ae46 RDI: 0000000000000007 [ 325.923825][ T37] RBP: 0000000000000007 R08: 0000000000000001 R09: 0000000000000000 [ 325.923838][ T37] R10: 0000000000000007 R11: 0000000000000246 R12: 00000000fec00000 [ 325.923851][ T37] R13: 00007f60f3010bd0 R14: 0000200000001000 R15: 0000000000000001 [ 325.923867][ T37] [ 327.284420][ T37] NMI backtrace for cpu 0 [ 327.284442][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 e0984ef4b19b7a0d2e0df0f24afaf737f1320d97 [ 327.284471][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.284483][ T37] Call Trace: [ 327.284491][ T37] [ 327.284499][ T37] __dump_stack+0x21/0x30 [ 327.284529][ T37] dump_stack_lvl+0x140/0x1c0 [ 327.284553][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 327.284579][ T37] dump_stack+0x19/0x20 [ 327.284601][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 327.284630][ T37] ? rcu_read_unlock_special+0xb7/0x420 [ 327.284654][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 327.284682][ T37] ? sched_show_task+0x371/0x530 [ 327.284705][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 327.284727][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 327.284751][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 327.284774][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 327.284804][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 327.284827][ T37] watchdog+0xdad/0xf00 [ 327.284853][ T37] ? __kasan_check_write+0x18/0x20 [ 327.284877][ T37] ? __cfi_watchdog+0x10/0x10 [ 327.284903][ T37] ? __kasan_check_read+0x15/0x20 [ 327.284925][ T37] ? __kthread_parkme+0x137/0x180 [ 327.284959][ T37] ? schedule+0xc5/0x240 [ 327.284980][ T37] kthread+0x2c9/0x370 [ 327.284999][ T37] ? __cfi_watchdog+0x10/0x10 [ 327.285026][ T37] ? __cfi_kthread+0x10/0x10 [ 327.285044][ T37] ret_from_fork+0x64/0xa0 [ 327.285068][ T37] ? __cfi_kthread+0x10/0x10 [ 327.285087][ T37] ret_from_fork_asm+0x1a/0x30 [ 327.285115][ T37] [ 327.285123][ T37] Sending NMI from CPU 0 to CPUs 1: [ 327.487148][ C1] NMI backtrace for cpu 1 [ 327.487168][ C1] CPU: 1 UID: 0 PID: 1205 Comm: kworker/1:6 Not tainted syzkaller #0 e0984ef4b19b7a0d2e0df0f24afaf737f1320d97 [ 327.487195][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.487207][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 327.487232][ C1] RIP: 0010:stack_trace_consume_entry+0x143/0x2a0 [ 327.487251][ C1] Code: 8b 75 c0 49 89 37 41 8b 18 41 0f b6 44 15 00 84 c0 0f 85 42 01 00 00 41 3b 19 0f 92 c0 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f <5d> c3 cc cc cc cc cc 44 89 c1 80 e1 07 80 c1 03 38 c1 0f 8c db fe [ 327.487264][ C1] RSP: 0018:ffffc9000022fc58 EFLAGS: 00000286 [ 327.487276][ C1] RAX: 0000000000000001 RBX: ffffc9000022fd20 RCX: 000000000022fc00 [ 327.487288][ C1] RDX: dffffc0000000000 RSI: ffffffff847c71aa RDI: ffffc9000022fd20 [ 327.487300][ C1] RBP: ffffc9000022fc58 R08: ffffc9000022fd30 R09: ffffc9000022fd28 [ 327.487311][ C1] R10: 000000000000000a R11: ffffffff8175cdf0 R12: ffff88813a278000 [ 327.487322][ C1] R13: 00000000020ea001 R14: ffffffff8175cdf0 R15: ffffc9000022fc68 [ 327.487334][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 327.487347][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.487358][ C1] CR2: 000055556b78d888 CR3: 000000010c736000 CR4: 00000000003526b0 [ 327.487373][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 327.487384][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 327.487394][ C1] Call Trace: [ 327.487399][ C1] [ 327.487407][ C1] arch_stack_walk+0x12c/0x170 [ 327.487430][ C1] ? netif_receive_skb+0x22a/0x7b0 [ 327.487451][ C1] stack_trace_save+0xaa/0x100 [ 327.487465][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 327.487480][ C1] kasan_save_track+0x3e/0x80 [ 327.487499][ C1] ? kasan_save_track+0x3e/0x80 [ 327.487518][ C1] ? kasan_save_alloc_info+0x40/0x50 [ 327.487534][ C1] ? __kasan_slab_alloc+0x73/0x90 [ 327.487554][ C1] ? kmem_cache_alloc_noprof+0x1bf/0x410 [ 327.487578][ C1] ? dst_alloc+0x13c/0x250 [ 327.487591][ C1] ? ip_route_input_rcu+0x1a0e/0x2700 [ 327.487605][ C1] ? ip_route_input_noref+0xd4/0x150 [ 327.487627][ C1] ? arp_process+0x908/0x1790 [ 327.487644][ C1] ? NF_HOOK+0x181/0x1e0 [ 327.487660][ C1] ? arp_rcv+0x2f8/0x490 [ 327.487677][ C1] ? netif_receive_skb+0x22a/0x7b0 [ 327.487701][ C1] kasan_save_alloc_info+0x40/0x50 [ 327.487718][ C1] __kasan_slab_alloc+0x73/0x90 [ 327.487738][ C1] kmem_cache_alloc_noprof+0x1bf/0x410 [ 327.487755][ C1] ? __cfi___fib_lookup+0x10/0x10 [ 327.487775][ C1] ? dst_alloc+0x13c/0x250 [ 327.487790][ C1] dst_alloc+0x13c/0x250 [ 327.487803][ C1] ip_route_input_rcu+0x1a0e/0x2700 [ 327.487818][ C1] ? ip_route_input_noref+0x150/0x150 [ 327.487842][ C1] ? __asan_memcpy+0x5a/0x80 [ 327.487859][ C1] ? arpt_do_table+0x1ba7/0x1d80 [ 327.487877][ C1] ip_route_input_noref+0xd4/0x150 [ 327.487900][ C1] ? __cfi_ip_route_input_noref+0x10/0x10 [ 327.487924][ C1] ? __asan_memcpy+0x5a/0x80 [ 327.487941][ C1] arp_process+0x908/0x1790 [ 327.487960][ C1] ? __cfi_arp_process+0x10/0x10 [ 327.487978][ C1] ? __cfi_arp_process+0x10/0x10 [ 327.487995][ C1] NF_HOOK+0x181/0x1e0 [ 327.488010][ C1] ? __cfi_arp_process+0x10/0x10 [ 327.488028][ C1] ? arp_xmit+0x210/0x210 [ 327.488044][ C1] ? __cfi_arp_process+0x10/0x10 [ 327.488061][ C1] ? br_dev_queue_push_xmit+0x55c/0x700 [ 327.488084][ C1] arp_rcv+0x2f8/0x490 [ 327.488100][ C1] ? __cfi_arp_rcv+0x10/0x10 [ 327.488118][ C1] netif_receive_skb+0x22a/0x7b0 [ 327.488137][ C1] ? __cfi_netif_receive_skb+0x10/0x10 [ 327.488161][ C1] ? br_flood+0x67e/0x730 [ 327.488188][ C1] br_pass_frame_up+0x126/0x1b0 [ 327.488203][ C1] br_handle_frame_finish+0x1317/0x1760 [ 327.488226][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 327.488243][ C1] br_handle_frame+0x5a6/0xba0 [ 327.488258][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 327.488273][ C1] __netif_receive_skb_core+0xfb1/0x3ab0 [ 327.488293][ C1] ? dst_release+0xe3/0x240 [ 327.488309][ C1] ? __cfi_arp_process+0x10/0x10 [ 327.488326][ C1] ? qdisc_run_end+0x120/0x120 [ 327.488344][ C1] ? __cfi_arp_process+0x10/0x10 [ 327.488361][ C1] ? NF_HOOK+0x181/0x1e0 [ 327.488377][ C1] ? __cfi_arp_process+0x10/0x10 [ 327.488394][ C1] ? arp_xmit+0x210/0x210 [ 327.488410][ C1] ? __cfi_arp_process+0x10/0x10 [ 327.488427][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 327.488447][ C1] process_backlog+0x3e5/0xad0 [ 327.488469][ C1] __napi_poll+0xd3/0x610 [ 327.488488][ C1] net_rx_action+0x5ea/0xd80 [ 327.488509][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 327.488533][ C1] ? sched_clock+0x44/0x60 [ 327.488551][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 327.488570][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 327.488589][ C1] handle_softirqs+0x1aa/0x630 [ 327.488611][ C1] __do_softirq+0xf/0x16 [ 327.488627][ C1] do_softirq+0xb8/0x110 [ 327.488646][ C1] [ 327.488652][ C1] [ 327.488657][ C1] ? __cfi_do_softirq+0x10/0x10 [ 327.488677][ C1] ? _raw_write_lock_bh+0x96/0xf0 [ 327.488692][ C1] ? __cfi__raw_write_lock_bh+0x10/0x10 [ 327.488707][ C1] ? __switch_to_asm+0x3d/0x70 [ 327.488728][ C1] __local_bh_enable_ip+0x74/0x80 [ 327.488748][ C1] _raw_write_unlock_bh+0x33/0x70 [ 327.488764][ C1] neigh_periodic_work+0xa73/0xbc0 [ 327.488782][ C1] ? kick_pool+0xb9/0x550 [ 327.488798][ C1] process_scheduled_works+0x7d4/0x1020 [ 327.488822][ C1] worker_thread+0xc70/0x10b0 [ 327.488843][ C1] ? __cfi_try_to_wake_up+0x10/0x10 [ 327.488860][ C1] kthread+0x2c9/0x370 [ 327.488874][ C1] ? __cfi_worker_thread+0x10/0x10 [ 327.488895][ C1] ? __cfi_kthread+0x10/0x10 [ 327.488909][ C1] ret_from_fork+0x64/0xa0 [ 327.488927][ C1] ? __cfi_kthread+0x10/0x10 [ 327.488941][ C1] ret_from_fork_asm+0x1a/0x30 [ 327.488963][ C1] [ 328.344710][ T36] audit: type=1400 audit(1772575615.710:26414): avc: denied { sys_module } for pid=3988 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 328.700829][ T36] audit: type=1400 audit(1772575616.329:26415): avc: denied { sys_module } for pid=3988 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 329.398244][ C1] net_ratelimit: 98164 callbacks suppressed [ 329.398266][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.398305][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 329.404257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.416237][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.428116][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.440161][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 329.451974][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.464001][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.475798][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.487675][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 331.307871][ T36] audit: type=1400 audit(1772575617.014:26416): avc: denied { sys_module } for pid=3988 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)