last executing test programs: 1m23.127459361s ago: executing program 3 (id=16): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000000b00030064756d6d7930000008001f4104ef0000180012000a00010064756d6d79"], 0x4c}], 0x1}, 0x0) 1m23.043143152s ago: executing program 3 (id=18): r0 = userfaultfd(0x80801) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001200010026bd7002fedbdf25feffffff0b00ce00000000000000000014002e800df30682"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f000070b000/0x2000)=nil, &(0x7f000071f000/0x4000)=nil, 0x2000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050009000d000000", 0x24) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TCFLSH(r3, 0x800455ca, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) clock_settime(0xfffffff4, &(0x7f00000001c0)={0x0, 0x3938700}) syz_usb_connect(0x2, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201100181acd840f60d56004bd20102030109022400017f00500f09043900027afa712c0905820220000705"], 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r2) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\xb4.\x00', 0x0, r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYRESOCT=r0], 0x80}, 0x1, 0x0, 0x0, 0x4004840}, 0x44080) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mprotect(&(0x7f0000207000/0x4000)=nil, 0x4000, 0x1000008) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'wlan0\x00', 0x4000}) r6 = openat$kvm(0x0, &(0x7f0000000340), 0x200, 0x0) close(r1) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000003c0)={0x6, 0x0, [{0x6, 0xfffffffc, 0x1, 0x9, 0x1, 0xea61, 0x2}, {0x80000001, 0x3, 0x0, 0x644, 0x5, 0x927, 0xcd}, {0x40000000, 0x1d, 0x2, 0x4, 0x1, 0x6, 0x6}, {0xb, 0x5, 0x1, 0x2, 0x3, 0x2, 0x10001}, {0x40000001, 0xffff8001, 0x3, 0xe, 0x5, 0x8, 0x80000006}, {0x80000008, 0x4, 0x0, 0x7, 0x2, 0x81, 0x5}]}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) 1m19.99925629s ago: executing program 3 (id=32): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000003200)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1m19.99744582s ago: executing program 3 (id=33): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000180)='\x00', 0x1, 0x8) write(0xffffffffffffffff, &(0x7f0000000000)="2700000014000707", 0x8) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000140)='./dev/cpu/0/msr\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x100000, 0x0) setreuid(r2, 0x0) syz_clone(0x2002000, 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8c1, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) 1m19.9971849s ago: executing program 3 (id=35): socket(0x400000000010, 0x3, 0x0) (async) r0 = fsopen(&(0x7f0000000580)='tracefs\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) 1m19.947131201s ago: executing program 3 (id=36): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a0f00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r7 = fsopen(&(0x7f00000000c0)='cgroup\x00', 0x1) ioctl$OCFS2_IOC_GROUP_ADD(r7, 0x40186f02, &(0x7f00000003c0)={0x7, 0x2, 0x1, 0x8c16}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r10}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0072c4bbbbbbbbbbbb9cf5fbebe45c430569"], 0x4c) 1m19.857185353s ago: executing program 32 (id=36): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a0f00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r7 = fsopen(&(0x7f00000000c0)='cgroup\x00', 0x1) ioctl$OCFS2_IOC_GROUP_ADD(r7, 0x40186f02, &(0x7f00000003c0)={0x7, 0x2, 0x1, 0x8c16}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x767a, 0x0, 0x7ffffffe, 0x257, 0x0, r10}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0072c4bbbbbbbbbbbb9cf5fbebe45c430569"], 0x4c) 1m14.443699892s ago: executing program 0 (id=91): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x93, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x12, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xeffd, 0xff, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xff, 0x1, 0x88}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000e00)=ANY=[@ANYBLOB="200512"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, &(0x7f0000000640)={0x14, &(0x7f0000000500)={0x0, 0x22, 0x5e, {0x5e, 0x26, "2f40437593686be469d879264c199ba1b8d33fda14daf9246f32d96e8b3d7d70fbd7a9776074f7d7ff9637ead4a5cf8fed6c4e4f22c6dbfb9728423464abd3e6a759daa2bbb6d8f6e678caac3b934d4956e18faff8d5993804bc8504"}}, &(0x7f0000000580)={0x0, 0x3, 0xa1, @string={0xa1, 0x3, "c943ca55717c22ecce9da099e83367a39cafc612c8c59840d89c42697c49567ed29ad90ef7ec58db32132b37bd46fef5a3a1e1fe4f7cbefd8efe09df8e46a2c727c087319829663be92c6d214bd0edf3805d63b63a5c0797ed3305cfffcc70e7517505793fd8629502efefcf98b08ef008da9642d2fce293602babd7c12c79c057ec750fa6aafa8a12cb9b3c9cc94af30954161a76183efda2fe652aad6647"}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x0, 0x13, 0xc5, "77d7d6a3c133aa488b22afc7a4c38d6d65c1a37d602fd7b0ca2400249c5e0f08086056e3c9b8fe6ae5159eb1df4301020e92af08a17f867318333de3aedbd8d72b2ef8ce89c4a2ad0967fc898ae55929ca0f69cd8fbe87b56e89b55c195f5d8bd88964c43d696a40d9ea61cc381f66b9945b77ff1e7e7af312c021c40522823a6bf68606982b5fff7e2ddf1dc8f8f15abe13e3e06322df15b3d9c4e8e89bba4de83e3448103ee7cbb8dedbf443f63768579ec5b0d564b6249419a161a7c5e08d1e12ee8c94"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000840)={0xc0, 0x5, 0x5, "0aba959834"}, &(0x7f0000000880)}) syz_usb_control_io$uac1(r1, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x0, 0x6, 0xd0, {0xd0, 0x5, "35e54ab733e3ffc3b2e8f29b1266d828594d1aded892f267d2f7b943e23beb134619a707dca75b98d5b64a07ff2d2b359a7d23d972cee155f285a0a7d9dfadc91739eddf79b3133724f56d61e816b296a2c78325e8e26ac70b4eb02393a46c8f7d8f7c1c8439ddf80576b31b2314a2d786312bd81488a026768378e5aa4c50c819fa7343977ae2ca2d00f75c2cc54ae5f8017a3db01a58c4266f36f3c4edc6dd2e86569ce16e7e3d33b489472aeb0dbb4309b0eea5491626448646b18d080c0afa3553f5c3e1e359c0dddf45590f"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}}, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x0, 0x18, 0x33, "5435933cfcdeaaded837beb205d3f2460be752f8cf0d1a2ba3a419ffaed67971e59110e3fe18361916e7dc026b3c78fefe1e67"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x24}, &(0x7f0000000340)={0x20, 0x81, 0x2, "aeb4"}, &(0x7f0000000380)={0x20, 0x82, 0x3, "785bdf"}, &(0x7f00000003c0)={0x20, 0x83, 0x3, "f24ae0"}, &(0x7f0000000400)={0x20, 0x84, 0x1, "1c"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "0d0fe4"}}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0xfffffffffffffc8b, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m13.488157196s ago: executing program 1 (id=102): syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0) 1m12.9259447s ago: executing program 0 (id=106): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0xfffffffc, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00000000000000001200", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) 1m12.906358441s ago: executing program 0 (id=107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000000001010100000000000000000200000a240001801400018008000100e000000108000200e00000010c000280050001000000000014000d80080002400021000808000240000007ff"], 0x4c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 1m12.868236192s ago: executing program 0 (id=108): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0), 0x401, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000c00)=""/4096, 0x1000) 1m12.867827782s ago: executing program 0 (id=109): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4607100709040000000000000003003e00f9ffffffd8010000e3ffffff3f0000000000ddff8a00000000002dff080000000600380001"], 0x78) close(r0) io_setup(0x3, 0x0) mkdir(0x0, 0x0) chdir(0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0xc030, 0x0) lsetxattr$security_selinux(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840), &(0x7f0000000880)='system_u:object_r:vhost_device_t:s0\x00', 0x24, 0x2) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1m11.299936312s ago: executing program 0 (id=125): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x93, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x12, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xeffd, 0xff, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xff, 0x1, 0x88}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x1, 0x1b, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x7f, 0xcf, 0xc0, 0x8, 0x10c4, 0x818b, 0x817, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x18, 0x6, 0x10, 0x40}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x436}}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x10000000007) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(0xffffffffffffffff, r3, 0x0, 0x8010002b) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) r5 = openat$kvm(0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000180)) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000940)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet(0x2, 0x1, 0x9) accept4$inet(r7, 0x0, 0x0, 0x80000) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000200)=0x10001, 0x4) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES64=r8], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m10.664250908s ago: executing program 2 (id=128): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x10000, 0x7}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x80001) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002080)=[{{&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000580)="fe3c75b276077f435911f546fac465645aa92c329d22ff3c788e506d852723e2337591365c05e594c38a11b4f2baff4d0f1602c0bdf4b0fb565d3bbb73642f782c7b44b540941631d4e319aad5acd0922cc47e1ad1af5118208a8887090b7589a06ee0cdfc4a91092393ff52aa49dad7112d45daf4da328a8e481f4e07e0bca05b5a8f87a1ae62d84ed98921b3f350c96432cf2513dffe75fde1", 0x9a}, {&(0x7f0000000640)="6c8c778bd61f52153eadf672a8afd4ac2cd4485dcd4ec767a7bc9928c1328c782cc6c00961536b8714456de68c0b95c356", 0x31}, {&(0x7f00000006c0)="0998b6d80a5faee59cbeec7bcfcf9c1e2063f5c7082c6896033bfc01320f555949aa7fb3aa9d03660281ad546de98f985dd938e4ed7e46ad0a835981830e04e89e6a70df4c3d0e95a4ff35c7fdcdc22db9305a009437df2d7eeb7d268c412a2a8b4dc9a4a82b330784399d9b907b59e310e590915cf77c7e8aebd679af6993193e5d6f9b2d040a353af1b5a36d640147dc4a59034dfb80c58eaf1ed1b1c0a1d6c26cd0e6238521f2e427", 0xaa}, {&(0x7f0000000780)="b36fb12aeed1fca7dbe86cf8a51fcba64a4500b788fff99c2fea82772ec33fc8474c776390bdeadd0d0163242a6aeee9f3746450", 0x34}, {&(0x7f00000007c0)="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", 0xff}, {&(0x7f00000008c0)="31946277d5b4c9c105a2a92b1e98324fc34ce8d02422aae3c9354b188b4bb4a8c3bd414116744915da40bf5b179a737da91f548183ab7ff9649cccb887fc70dfd0d28dd84bc2b9c5bd36e7f9c897b444913e21e08b876a83b893307500094467a82d6c07ba946979b96b3e6571939981e732aea59d55ca8dbe02a285e1adab2030768b4cfbeeed052ab0ced7d70e273a3f2077bbd71e96a7e1c4a2f30ffc021f202c5281e29fd207c2d86e90a64916574d5b10cc5269aae2fc62a7b65147cfa9ff2197bb6f74a9897d51a733133a96c80f3df653692e1afb295a05a227d2efca2660b8cc3b2b", 0xe6}, {&(0x7f00000009c0)="f0d185718a5c8f583ab65d1c2a353052b568ee6d88b355ea8a67c0a2a533b798c405b035da02fcacc043804886746a97c70f7a11411d5342a7744f1058d61a95f3231d1533269c14bb62600dbcbf8e1592c9bf54b4c95d00214d18c14bf3cc70c72c89a365097242f5fdf7c734b52e2a0e60a4f98eccb70d135c63cecef54540497dccc7cf7e281fc88fed", 0x8b}, {&(0x7f0000000a80)="f8da7940d759bc74ee991e2e903a24746048c90bd5fe34152132784e559e5c11bf", 0x21}], 0x8}}, {{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f00000037c0)="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", 0x177}], 0x1}}], 0x2, 0x2000c044) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002e80c1e10e80401a148040102031109021200281c0780fe09"], 0xfffffffffffffffe) close_range(r1, 0xffffffffffffffff, 0x200000000000000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x800) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000040)=0x16) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r3, &(0x7f0000000740)=""/377, 0x179) 1m10.415316964s ago: executing program 1 (id=129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000000001010100000000000000000200000a240001801400018008000100e000000108000200e00000010c000280050001000000000014000d8008000240003a000808000240000007ff"], 0x4c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 1m10.413783864s ago: executing program 1 (id=130): syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001e00050300000000fedbdf25000000000800fe00", @ANYRES32=0x0, @ANYBLOB="14000d"], 0x30}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x15) (async) listen(r1, 0x15) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) (async) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa041, 0x0) write$UHID_CREATE2(r2, &(0x7f00000003c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x8000, 0x0, 0x1b, 0x1, 0x6}}, 0x118) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000440)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) r4 = gettid() socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r5, 0x0, 0xa, 0x0, &(0x7f0000000200)=0xa4) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000940)={'sit0\x00', {0x2, 0x4e24, @multicast1}}) ptrace(0x10, r4) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d03010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB="06"], 0x0) 1m10.030956024s ago: executing program 4 (id=133): setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000180)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c, 0x0) sendmmsg$inet(r2, &(0x7f00000019c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000bc0)=[{&(0x7f00000000c0)="06705c04e173287d3988bc548748b05d2b238ca3531095e975193870ecc0daf39015aebc945b60dfd1fff45e9b900fd2ca202f67cf", 0x35}, {&(0x7f0000000240)="a30cf7d7eb3187f0aabdabb977d7c91b665b6592de0a798827bb2cf9f60b39706a978754730d1cbb765f10ab3422c2ec423f3adc35a9b1435f65d456c0ce9cbe9de256f417603942892e33e53447dc60722cfafba402996ba6e9f3b49908876138861d490e0b399e193099622e001495e4e398bec8694d72b8e7969d35bb935fe0610ce7db0d64dada76406ae5fd037f7f0b3eb42dcb5e7ecd09bbb4d6e805e28f508c7d93750b2879a765e2e3bd19e802592778292b2e710c7eb5837934af14a0936b9c42248b9e60a7478e00e07464d97aed1d48998292081e8affdebad9a2e28ebc9b6005d49a14", 0xe9}, {&(0x7f0000000440)="3e480d5cb84a7b673578668875176caaab31fae355a4bd165257d6722b72e6c2c852a47195ef51c536cce8cee9eef340269c125f324ed48a241bd6d54b78f22ddd43a635a871c61a84f35ac65023406186efca5fc1d62bb3a1b75bad21178044fa776662ff26cee9444d4784b2641698f28c8a5074ee657bac225cc54908976a3987dee5f7863090ecb753c71e6d1f83e2bd26301d03c30ee21c864137660f37f5962edc72cb0588592ce4235f26c278d4e167efed749b68c896bde5264a812662ea0e32bd6ef0892e27f379006db5d00e4d95", 0xd3}, {&(0x7f0000000540)="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", 0xfd}, {&(0x7f0000000a40)="b8ff9567c60da99ad0e4d022e3798cacbbf127908273d66abe196955a3550b9fc6ea53a8d54ffc0cc188ec395c6b2ab1a5d00a14ef4ef583069779b8785ca75747d825f5b802f25cce6d890e5b3b3f869830fb35436d1d2d9d6070de316f868ebc7dd7a06cdae900a1c49ce2f520e063cedef123280a0eca45d18f8df1fcd9a4890461a66f8e7589ab5b8f4ccfe566ca48182c40e65c0248a98c06b7ca24401bcc871e1a22b598b31348a1476ef5f9c0bc3486039a26e0359e452b821bd93f8064a5605bfcf5fc73a4ded11ca8a0ba43995e97f8d0c3ee66909e", 0xda}, {&(0x7f0000000b40)="6c3f9a0b", 0x4}, {&(0x7f0000000b80)="4080fd2650b7466bf354f28db2046a301821d3", 0x13}], 0x7}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000c40)="c882631c62c7264b6c678438a30dcf44cdea6ba5b6e82fe47ac81db2a1f753007d50bb9d0dadd1bad9e6a2b3af9732152111271f1637cb3475be84966a53294adfc61a6d67c7fa169876a9688287eb35cb98e07500186fb970a72cdcbb1eb86f386843db41b524188e01db5fa3e588c44e95d4ff784c2538308cefd7a18802691084a1844f730ff05cce5bf9675ce4bcc51f547493eaf1667a00559fcdc7312d056e9a4eea8cdf5e76e984d8aad5aaed447bcee15598", 0xb6}, {&(0x7f0000000d00)="5c6f81d9e8aee3a78f185dca88f2d96cd309529444cd04c7e2dc367ad95ef5cd18b9e251fe38f7819cf774bd7ee3abc2ce3c4e85120d622275614f333b390ed17d75f3b5a675624bf047ccd0a7215a80f1f79bb92a3aae9049c6e8430c4ba7c16df4fbab9b554bc3a88e08ae29b35513931bc3574b60c3585e4973316d9377c696b5a8450463f1dde12e10b385a61ec881b54447ac2d4532500685cf692cc9319792d951cfcea510839875ddc7251853408bfdff9e98451bf4596b6cc429fb824d1b45b5473b9363", 0xc8}, {&(0x7f0000000e00)="a74d9b2244f214dc10fef32d1ab655ac983fc104736266d4b1e0b98c130cf8796a4cede4c2496e", 0x27}, {&(0x7f0000000e40)="0370b39e9e95832efafd8b1449f4b6db45317c00f8a581c17244dd69200c64ce088f47766d0a80f3", 0x28}, {&(0x7f0000000e80)="b2a599df8640a7a951e63ddde967d47f7873482e20e39fc2c9b423b4a4dbe5f46b5b42054f364e7eeffc7f6955f0d1c1e5c5173b239c6e220725cdcf6bce028f1e36221dd503792ef5ee26443f02481a654cc517543b0f8f5d0726017eeda1bca4325e345bb7a05d63e0fa8771ee919e174efb143959557f90e59840cba77987f47f398e4963f5c7956c694df6b59830b6d035e721139b8f7b294f5e0caba0e171f32d", 0xa3}, {&(0x7f0000000f40)="1695d69267183d7f03e12501cbdde85c5da58b35955f738211e1c9887f2f3a49d3f33424bc7492555a7b1dcae85b9d158424f481f992d9055d8bef2529fd66973bd8f77ae04ba84689ff6774edda3ea094c750ff70f1a7faa2d1cd40c29567371913e9fabd7d90e3efcffeab0df6c44306c7fdc57a28cf50e2d4d4184010604ee90d5d189eb0940251ce78430518b03c7ac94dd05217c532b82d31669effe9", 0x9f}, {&(0x7f0000001000)="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", 0xfd}, {&(0x7f0000001100)="c2f35214890910214e3ecb6d07794eba6b45e5e3e9c2e8ed7b325152a893831c424809526877b447d41c76bea7f00e8660aa866880ca1e1acb3bf806a78f3dc9123e1c69259242a4d42b46273ff8beac6b942c210e64b546a1a1ad0e674226e92db4c3f078e1b7dd52ebc8d00c4cfc334a44855666b21e63665c69", 0x7b}], 0x8, 0xfffffffffffffffc}}, {{&(0x7f0000001200)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000001900)=[{&(0x7f0000001240)="c27e183f11d09c1a8e514711906306e9db388d3cc243de3dcac5d2a1310cc86b6c59d3ca9145e17867ac418ac3997a24237884eed7e58a129073778fdedcd71b409eab081d65d88b0a5c8886f3250926529910741c1d2efa0334754b94b90a0acb723f02516cb02d004fa9f9028c3e44123491f5da05473881f1a9097b33e5fa0e2cdbdd6210d332a5208c37b428c275c6d891e79988281595ae5a80e2bc70d8a24a4c8860152cd60c90fe6b9efe5a1a6bd299", 0xb3}, {&(0x7f0000001300)="53a84322598a9a6556e19cdec0730b722b302e83f5f9115beaee66493a4eb76d0998e8339e311596b4662548428b25efaf191cc9f883050fe96981152217561dcdaa650b0b320d690f92b6834b6767ec346a1bcddc2026dbac3ed9eae997ce4a3365128290d59040d9a086533eb2ed3e141baba109f0260985dacd2c8dd1ffdcbe378d5e2021d4876e26d969121abb1eb6cbeccab14b2ac6f7ddac8b304216ee90350b857f8240e64ba982d88b1e6b39d5583d293c32b5f379c2fc241157ee763446d9b480db5be931b4e7db0aaba204", 0xd0}, {&(0x7f0000001400)="869af08122f172c44dc1c1", 0xb}, {&(0x7f0000001440)="5cc6f7f0f5cc4824010a1d2ac7baf775d865ecc119f81382868bb5758e3c267f3fa70e18aa5e3bca05acf938b10458b2b08bfc9d1b7eed79e0ebacff0eb2d6e033a97d3d603ff63ed3b14f37b58108bfb12b6b50e07a1ee81cded99017a89cad56092b50582e8b7869339f30ed524e24743aa2d51e7129d33525f8271f93ad137462da7a48b553fcbaa28e308b397c599ba8386cbd89543052813e30909eb60f2167a8d55434ab60eb8dec8ff42d6883ef2d01b976fba6", 0xb7}, {&(0x7f0000001540)="10e647d027e210154e614977a01e0fcb6e3e7e5fe51cd0efa39cd0ee9bf21b3e4374d60d542c6ccae2912d16cbd1821579cc593d32106f56df265f3fdbb84e7ee31ad66e779b1b9247e4e8f1790cdb3755d2021d4ef8cbb8c7fbec547f8e50071b379d7fdd393eef12b74b9133a23405184e63e7880dc68a621f8609855435b5f289016c05ac4336d13ea91e556086ec339cebf78b672a", 0x97}, {&(0x7f0000010280)="d473bae708a6ef5600a6e33bcd368ebea5f7689625060000000000008ba39f426304dd738ae7f762f018650af642d9d58589944e75667d99e3401a0a9f7c3032b65c80b18d0000000000", 0x4a}, {&(0x7f0000001640)="421441cf466a81533ebb569ac4ca55804dd02beb602cda641e15e100af03e612fa13e8fa3934c6df0b3974b4ae942ee7e107baad3e66bcb1634454a4465d998c46191ba217272851bfe7577a20c3038c766422412700f178c3592c11aaa1ee7f5b077cfa133c13cbe3fde6be3f87850048f8029682ce4040c437eabe41b16dcdb6944b6138d1beca667ff14f2639fd80ba412fa2480ded494cc519730a22a73d2f322d340e2b6304695167b944e99217f1a99cb93d25873b40d5abd5ce871016f0e2d07c442b823aae037623d60af0c8b4818441219fe4461f718341ddb99e17ac141ac800b3f52a218e53dd737e3ae77055826434b0ab5c", 0xf8}, {&(0x7f0000001740)="1c13f51e0a72f187c035b91282e173f4b23b925ef1b8f440ac1f27e4a03c5b992f2adc72f22ea4da563bb85a66dc874980319d5534376f4d8bcf57a6f0b2415f6cdccd27dcfb566a9427861b0fae1ee7e2d5d19616e5e1c1530ed5b17d82116995abb161ba9b97ccca177c359dd8aee618a19ece56034a357eb48937ba89145f13843b34229e275a482b598547ba7f93af8983c321d6d61b9df948b7069a8d610165749b47f85a5f3e6eb74b6ca832e2ea62adbe772ccb25487252a03a11be7dd383267bbf2dbd7a1fcfb6f2e17872e61b2caead7055cb9a1ffa284558a9259e91b51eefd9ba2d8e5f797672e7646d694ef9a4b48b", 0xf5}, {&(0x7f0000001840)="6bd01bea92a9fec891cc86368678a4f8b76a4cff0f4484b6bba67514a413f745bc75274214eee71f37e80cd1080f0d54c69952c4cf97c8c2c3911b0a4765e88ce2ed2a0fe30cc0c316b7c05cfa2c9f06e1b93fdb6efb215545d8105fe5ba3e4dc368b32abb511123c4c0bdc9d82b27b108be9028ef38d8ac2d600132af8ac7822cf6f2e053b3b9af961b88b0c969ec456eb27b6842f4fdc90da7b223162a58d598afe7", 0xa3}], 0x9}}], 0x3, 0xc090) dup(r1) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f00000005c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000010300)=0x41, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x80801, 0x0) write(r4, &(0x7f0000000800)='1', 0x1) 1m9.979293865s ago: executing program 4 (id=134): setregid(0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8d, 0xfffa}, 0x2, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x20080, 0x2, 0x3, 0x7f, 0x6, 0x4004d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x5, 0x4, 0x2dec, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x3, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x128f24e2, 0x71, 0xfffffffb, 0x7, 0x0, 0x3, 0xd, 0x3e, 0x8f, 0x6, 0x10000002, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x4], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xfb, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x1, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x400005, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x801, 0x9, 0x0, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0xb, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0xf641, 0x2, 0xf38, 0x8, 0xdfe, 0x6d01, 0x12f7, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x91], [0x9, 0xbb31, 0x3, 0x2, 0x5, 0x938, 0x6, 0x6, 0xfffffffe, 0x5, 0x5, 0x1ff, 0x2, 0xf58, 0x5, 0x8, 0x101, 0x10000, 0x9, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x80000002, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x10000, 0xfffff000, 0xffff, 0x8, 0x3ff, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x810080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xb5, 0x5, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x0, 0x200, 0xffbf2441, 0xfff]}, 0x45c) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0xa}, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x4e21, 0x80, @private2, 0x1000}}, {{0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0xbd}}}, 0x108) 1m9.575720266s ago: executing program 4 (id=135): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1m9.034993789s ago: executing program 4 (id=136): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0xfffffffc, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff000000000000000000001200", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) 1m8.586886421s ago: executing program 4 (id=137): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001700)={0x2020}, 0x2020) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100040000c, 0x2) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) (async) recvfrom(r2, 0x0, 0x0, 0xc058ee1503c68355, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="60000000100001000100000000000000000000000000000000000900030063616e30000000003400643f6f329a49757afff75900028024000100ffffffff000000000000000000000000000000000000000000000000000000000000000000004159244ce07be5c2fc894caed85baf50ec0fd4742f04f6fe183a3cefcdb2fcb15b353976eecb279c073183787983f7ca2f2201bb99df0b", 0xffffffffffffffeb) 1m7.200287506s ago: executing program 4 (id=138): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x5f4c, &(0x7f0000000080)={0x0, 0xf3c0, 0x800, 0x2, 0x1}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe27, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x125, {0x0, 0x0, 0x0, 0x4, 0xfffffffb}}) 1m5.0832302s ago: executing program 2 (id=139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000000001010100000000000000000200000a240001801400018008000100e000000108000200e00000010c000280050001000000000014000d8008000240ff84000808000240000007ff"], 0x4c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 1m3.12584904s ago: executing program 1 (id=140): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580100001000130426bd700040000000ac1414bb000000000000000000000000ac1e01010000000000000000000000004e2000074e1f00000a00202067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000010000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000040"], 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) 55.401251247s ago: executing program 33 (id=125): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x93, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x12, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xeffd, 0xff, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xff, 0x1, 0x88}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x1, 0x1b, &(0x7f0000000380)={{0x12, 0x1, 0x201, 0x7f, 0xcf, 0xc0, 0x8, 0x10c4, 0x818b, 0x817, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x18, 0x6, 0x10, 0x40}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x436}}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x10000000007) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(0xffffffffffffffff, r3, 0x0, 0x8010002b) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) r5 = openat$kvm(0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000180)) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000940)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet(0x2, 0x1, 0x9) accept4$inet(r7, 0x0, 0x0, 0x80000) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000200)=0x10001, 0x4) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES64=r8], 0x0, 0x0, 0x0, 0x0}, 0x0) 51.732623331s ago: executing program 1 (id=142): setns(0xc9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000180)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c, 0x0) sendmmsg$inet(r2, &(0x7f00000019c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000bc0)=[{&(0x7f00000000c0)="06705c04e173287d3988bc548748b05d2b238ca3531095e975193870ecc0daf39015aebc945b60dfd1fff45e9b900fd2ca202f67cf", 0x35}, {&(0x7f0000000240)="a30cf7d7eb3187f0aabdabb977d7c91b665b6592de0a798827bb2cf9f60b39706a978754730d1cbb765f10ab3422c2ec423f3adc35a9b1435f65d456c0ce9cbe9de256f417603942892e33e53447dc60722cfafba402996ba6e9f3b49908876138861d490e0b399e193099622e001495e4e398bec8694d72b8e7969d35bb935fe0610ce7db0d64dada76406ae5fd037f7f0b3eb42dcb5e7ecd09bbb4d6e805e28f508c7d93750b2879a765e2e3bd19e802592778292b2e710c7eb5837934af14a0936b9c42248b9e60a7478e00e07464d97aed1d48998292081e8affdebad9a2e28ebc9b6005d49a14", 0xe9}, {&(0x7f0000000440)="3e480d5cb84a7b673578668875176caaab31fae355a4bd165257d6722b72e6c2c852a47195ef51c536cce8cee9eef340269c125f324ed48a241bd6d54b78f22ddd43a635a871c61a84f35ac65023406186efca5fc1d62bb3a1b75bad21178044fa776662ff26cee9444d4784b2641698f28c8a5074ee657bac225cc54908976a3987dee5f7863090ecb753c71e6d1f83e2bd26301d03c30ee21c864137660f37f5962edc72cb0588592ce4235f26c278d4e167efed749b68c896bde5264a812662ea0e32bd6ef0892e27f379006db5d00e4d95", 0xd3}, {&(0x7f0000000540)="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", 0xfd}, {&(0x7f0000000a40)="b8ff9567c60da99ad0e4d022e3798cacbbf127908273d66abe196955a3550b9fc6ea53a8d54ffc0cc188ec395c6b2ab1a5d00a14ef4ef583069779b8785ca75747d825f5b802f25cce6d890e5b3b3f869830fb35436d1d2d9d6070de316f868ebc7dd7a06cdae900a1c49ce2f520e063cedef123280a0eca45d18f8df1fcd9a4890461a66f8e7589ab5b8f4ccfe566ca48182c40e65c0248a98c06b7ca24401bcc871e1a22b598b31348a1476ef5f9c0bc3486039a26e0359e452b821bd93f8064a5605bfcf5fc73a4ded11ca8a0ba43995e97f8d0c3ee66909e", 0xda}, {&(0x7f0000000b40)="6c3f9a0b", 0x4}, {&(0x7f0000000b80)="4080fd2650b7466bf354f28db2046a301821d3", 0x13}], 0x7}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000c40)="c882631c62c7264b6c678438a30dcf44cdea6ba5b6e82fe47ac81db2a1f753007d50bb9d0dadd1bad9e6a2b3af9732152111271f1637cb3475be84966a53294adfc61a6d67c7fa169876a9688287eb35cb98e07500186fb970a72cdcbb1eb86f386843db41b524188e01db5fa3e588c44e95d4ff784c2538308cefd7a18802691084a1844f730ff05cce5bf9675ce4bcc51f547493eaf1667a00559fcdc7312d056e9a4eea8cdf5e76e984d8aad5aaed447bcee15598", 0xb6}, {&(0x7f0000000d00)="5c6f81d9e8aee3a78f185dca88f2d96cd309529444cd04c7e2dc367ad95ef5cd18b9e251fe38f7819cf774bd7ee3abc2ce3c4e85120d622275614f333b390ed17d75f3b5a675624bf047ccd0a7215a80f1f79bb92a3aae9049c6e8430c4ba7c16df4fbab9b554bc3a88e08ae29b35513931bc3574b60c3585e4973316d9377c696b5a8450463f1dde12e10b385a61ec881b54447ac2d4532500685cf692cc9319792d951cfcea510839875ddc7251853408bfdff9e98451bf4596b6cc429fb824d1b45b5473b9363", 0xc8}, {&(0x7f0000000e00)="a74d9b2244f214dc10fef32d1ab655ac983fc104736266d4b1e0b98c130cf8796a4cede4c2496e", 0x27}, {&(0x7f0000000e40)="0370b39e9e95832efafd8b1449f4b6db45317c00f8a581c17244dd69200c64ce088f47766d0a80f3", 0x28}, {&(0x7f0000000e80)="b2a599df8640a7a951e63ddde967d47f7873482e20e39fc2c9b423b4a4dbe5f46b5b42054f364e7eeffc7f6955f0d1c1e5c5173b239c6e220725cdcf6bce028f1e36221dd503792ef5ee26443f02481a654cc517543b0f8f5d0726017eeda1bca4325e345bb7a05d63e0fa8771ee919e174efb143959557f90e59840cba77987f47f398e4963f5c7956c694df6b59830b6d035e721139b8f7b294f5e0caba0e171f32d", 0xa3}, {&(0x7f0000000f40)="1695d69267183d7f03e12501cbdde85c5da58b35955f738211e1c9887f2f3a49d3f33424bc7492555a7b1dcae85b9d158424f481f992d9055d8bef2529fd66973bd8f77ae04ba84689ff6774edda3ea094c750ff70f1a7faa2d1cd40c29567371913e9fabd7d90e3efcffeab0df6c44306c7fdc57a28cf50e2d4d4184010604ee90d5d189eb0940251ce78430518b03c7ac94dd05217c532b82d31669effe9", 0x9f}, {&(0x7f0000001000)="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", 0xfd}, {&(0x7f0000001100)="c2f35214890910214e3ecb6d07794eba6b45e5e3e9c2e8ed7b325152a893831c424809526877b447d41c76bea7f00e8660aa866880ca1e1acb3bf806a78f3dc9123e1c69259242a4d42b46273ff8beac6b942c210e64b546a1a1ad0e674226e92db4c3f078e1b7dd52ebc8d00c4cfc334a44855666b21e63665c69", 0x7b}], 0x8, 0xfffffffffffffffc}}, {{&(0x7f0000001200)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000001900)=[{&(0x7f0000001240)="c27e183f11d09c1a8e514711906306e9db388d3cc243de3dcac5d2a1310cc86b6c59d3ca9145e17867ac418ac3997a24237884eed7e58a129073778fdedcd71b409eab081d65d88b0a5c8886f3250926529910741c1d2efa0334754b94b90a0acb723f02516cb02d004fa9f9028c3e44123491f5da05473881f1a9097b33e5fa0e2cdbdd6210d332a5208c37b428c275c6d891e79988281595ae5a80e2bc70d8a24a4c8860152cd60c90fe6b9efe5a1a6bd299", 0xb3}, {&(0x7f0000001300)="53a84322598a9a6556e19cdec0730b722b302e83f5f9115beaee66493a4eb76d0998e8339e311596b4662548428b25efaf191cc9f883050fe96981152217561dcdaa650b0b320d690f92b6834b6767ec346a1bcddc2026dbac3ed9eae997ce4a3365128290d59040d9a086533eb2ed3e141baba109f0260985dacd2c8dd1ffdcbe378d5e2021d4876e26d969121abb1eb6cbeccab14b2ac6f7ddac8b304216ee90350b857f8240e64ba982d88b1e6b39d5583d293c32b5f379c2fc241157ee763446d9b480db5be931b4e7db0aaba204", 0xd0}, {&(0x7f0000001400)="869af08122f172c44dc1c1", 0xb}, {&(0x7f0000001440)="5cc6f7f0f5cc4824010a1d2ac7baf775d865ecc119f81382868bb5758e3c267f3fa70e18aa5e3bca05acf938b10458b2b08bfc9d1b7eed79e0ebacff0eb2d6e033a97d3d603ff63ed3b14f37b58108bfb12b6b50e07a1ee81cded99017a89cad56092b50582e8b7869339f30ed524e24743aa2d51e7129d33525f8271f93ad137462da7a48b553fcbaa28e308b397c599ba8386cbd89543052813e30909eb60f2167a8d55434ab60eb8dec8ff42d6883ef2d01b976fba6", 0xb7}, {&(0x7f0000001540)="10e647d027e210154e614977a01e0fcb6e3e7e5fe51cd0efa39cd0ee9bf21b3e4374d60d542c6ccae2912d16cbd1821579cc593d32106f56df265f3fdbb84e7ee31ad66e779b1b9247e4e8f1790cdb3755d2021d4ef8cbb8c7fbec547f8e50071b379d7fdd393eef12b74b9133a23405184e63e7880dc68a621f8609855435b5f289016c05ac4336d13ea91e556086ec339cebf78b672a", 0x97}, {&(0x7f0000010280)="d473bae708a6ef5600a6e33bcd368ebea5f7689625060000000000008ba39f426304dd738ae7f762f018650af642d9d58589944e75667d99e3401a0a9f7c3032b65c80b18d0000000000", 0x4a}, {&(0x7f0000001640)="421441cf466a81533ebb569ac4ca55804dd02beb602cda641e15e100af03e612fa13e8fa3934c6df0b3974b4ae942ee7e107baad3e66bcb1634454a4465d998c46191ba217272851bfe7577a20c3038c766422412700f178c3592c11aaa1ee7f5b077cfa133c13cbe3fde6be3f87850048f8029682ce4040c437eabe41b16dcdb6944b6138d1beca667ff14f2639fd80ba412fa2480ded494cc519730a22a73d2f322d340e2b6304695167b944e99217f1a99cb93d25873b40d5abd5ce871016f0e2d07c442b823aae037623d60af0c8b4818441219fe4461f718341ddb99e17ac141ac800b3f52a218e53dd737e3ae77055826434b0ab5c", 0xf8}, {&(0x7f0000001740)="1c13f51e0a72f187c035b91282e173f4b23b925ef1b8f440ac1f27e4a03c5b992f2adc72f22ea4da563bb85a66dc874980319d5534376f4d8bcf57a6f0b2415f6cdccd27dcfb566a9427861b0fae1ee7e2d5d19616e5e1c1530ed5b17d82116995abb161ba9b97ccca177c359dd8aee618a19ece56034a357eb48937ba89145f13843b34229e275a482b598547ba7f93af8983c321d6d61b9df948b7069a8d610165749b47f85a5f3e6eb74b6ca832e2ea62adbe772ccb25487252a03a11be7dd383267bbf2dbd7a1fcfb6f2e17872e61b2caead7055cb9a1ffa284558a9259e91b51eefd9ba2d8e5f797672e7646d694ef9a4b48b", 0xf5}, {&(0x7f0000001840)="6bd01bea92a9fec891cc86368678a4f8b76a4cff0f4484b6bba67514a413f745bc75274214eee71f37e80cd1080f0d54c69952c4cf97c8c2c3911b0a4765e88ce2ed2a0fe30cc0c316b7c05cfa2c9f06e1b93fdb6efb215545d8105fe5ba3e4dc368b32abb511123c4c0bdc9d82b27b108be9028ef38d8ac2d600132af8ac7822cf6f2e053b3b9af961b88b0c969ec456eb27b6842f4fdc90da7b223162a58d598afe7", 0xa3}], 0x9}}], 0x3, 0xc090) dup(r1) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f00000005c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000010300)=0x41, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x80801, 0x0) write(r4, &(0x7f0000000800)='1', 0x1) 50.952991701s ago: executing program 34 (id=138): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0x5f4c, &(0x7f0000000080)={0x0, 0xf3c0, 0x800, 0x2, 0x1}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe27, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x125, {0x0, 0x0, 0x0, 0x4, 0xfffffffb}}) 49.204973555s ago: executing program 2 (id=144): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130400000000ffdbdf25fe80000000000000000000006000000000010000000000000000000100000000fffd00004e2400030200002000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000000000000020320000000000000000000000000000000000000100000000000000000700000000000000000000000000000004"], 0x150}}, 0x844) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYBLOB="009d24232bda"]) (async) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000940)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="00032d"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$uac3(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) userfaultfd(0x80001) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x448}}, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) syz_usb_control_io(r2, &(0x7f0000000f00)={0x2c, &(0x7f0000000b40)=ANY=[@ANYBLOB="20233d0000003d0e5f833a6bfa4003705dbe551c74807300fb0c35f497c00436a515d401b54c503155fb66e0fd06a3cfb288da18a38c2d37719eb1d56e121ad07d60a1"], 0x0, 0x0, &(0x7f0000000e80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x10, 0x6, 0x2, "34581ddb", "81d93856"}}, 0x0}, 0x0) (async) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) (async) brk(0x55555ede6001) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0xca, 0x0, 0x0) (async) syz_usb_control_io$uac2(r2, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x6, 0x11, {0x11, 0x21, "772ddd71e1fbb0648caae984d033a6"}}, &(0x7f0000000080)=ANY=[@ANYBLOB="000380000000800390ffa5c6305ae299908695f6fcfeb9dabfe697c91afccc03c1ecf62f060602a2b66d83c59f9604571fb964a6082ed4ac680137c7f6811f0ba9ebcd034b4181f2df2328f9f31aeffcaf62c1d1866ea626b63dc3b5d227b046fd2e6109dd1e16b9d3e1f537b0a0e02eb43ffd0e447c5f0692e0cad72f9e5de35e4bf3392ff3"]}, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000480)) 43.709777406s ago: executing program 2 (id=145): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000006", 0x39}], 0x1) 41.092638722s ago: executing program 1 (id=146): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=ANY=[@ANYBLOB="800100001200010a28bd7000000000000700000004003700660169802000088004006a800400ac800c00e10003000000000000000400088004005680080041"], 0x180}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) close_range(r1, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000001280)=""/4107, 0x100b) 30.021135015s ago: executing program 2 (id=147): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000000b00030064756d6d7930000008001f4104000021180012000a00010064756d6d79"], 0x4c}], 0x1}, 0x0) 23.868328301s ago: executing program 35 (id=146): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=ANY=[@ANYBLOB="800100001200010a28bd7000000000000700000004003700660169802000088004006a800400ac800c00e10003000000000000000400088004005680080041"], 0x180}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) close_range(r1, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000001280)=""/4107, 0x100b) 16.029148591s ago: executing program 2 (id=149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000180)="89e7ee2c7edad9b4b47380c988", 0xd}, {&(0x7f0000000440)="fb10ab", 0x3}, {&(0x7f0000000140)="c7095a40", 0x4}], 0x3) r1 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x11b67820) unshare(0x60000600) r2 = socket(0x10, 0x1, 0xfffffffe) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) write(r2, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042402000000ff02000300000000", 0x1e5) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x498) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001900010000000000fbdbdf650a0109001000128004001d8108001e000000fa"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0) 0s ago: executing program 36 (id=149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000180)="89e7ee2c7edad9b4b47380c988", 0xd}, {&(0x7f0000000440)="fb10ab", 0x3}, {&(0x7f0000000140)="c7095a40", 0x4}], 0x3) r1 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x11b67820) unshare(0x60000600) r2 = socket(0x10, 0x1, 0xfffffffe) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) write(r2, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042402000000ff02000300000000", 0x1e5) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x498) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001900010000000000fbdbdf650a0109001000128004001d8108001e000000fa"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. [ 29.714710][ T36] audit: type=1400 audit(1785759988.610:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.718483][ T286] cgroup: Unknown subsys name 'net' [ 29.737437][ T36] audit: type=1400 audit(1785759988.610:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.764784][ T36] audit: type=1400 audit(1785759988.640:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.765263][ T286] cgroup: Unknown subsys name 'devices' [ 29.879719][ T286] cgroup: Unknown subsys name 'hugetlb' [ 29.885423][ T286] cgroup: Unknown subsys name 'rlimit' [ 29.981706][ T36] audit: type=1400 audit(1785759988.880:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.004913][ T36] audit: type=1400 audit(1785759988.880:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.029921][ T36] audit: type=1400 audit(1785759988.880:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.046228][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.062058][ T36] audit: type=1400 audit(1785759988.960:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.087576][ T36] audit: type=1400 audit(1785759988.960:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.124788][ T36] audit: type=1400 audit(1785759989.020:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.126122][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.150408][ T36] audit: type=1400 audit(1785759989.020:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.054576][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.061723][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.068890][ T296] bridge_slave_0: entered allmulticast mode [ 31.075246][ T296] bridge_slave_0: entered promiscuous mode [ 31.081693][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.088785][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.095873][ T294] bridge_slave_0: entered allmulticast mode [ 31.102373][ T294] bridge_slave_0: entered promiscuous mode [ 31.109014][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.116082][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.123334][ T294] bridge_slave_1: entered allmulticast mode [ 31.129745][ T294] bridge_slave_1: entered promiscuous mode [ 31.137978][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.145051][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.152227][ T296] bridge_slave_1: entered allmulticast mode [ 31.158593][ T296] bridge_slave_1: entered promiscuous mode [ 31.200553][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.207676][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.214786][ T295] bridge_slave_0: entered allmulticast mode [ 31.221186][ T295] bridge_slave_0: entered promiscuous mode [ 31.227857][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.234926][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.242264][ T295] bridge_slave_1: entered allmulticast mode [ 31.249024][ T295] bridge_slave_1: entered promiscuous mode [ 31.273794][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.280912][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.288055][ T293] bridge_slave_0: entered allmulticast mode [ 31.294401][ T293] bridge_slave_0: entered promiscuous mode [ 31.303869][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.310999][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.318286][ T293] bridge_slave_1: entered allmulticast mode [ 31.324584][ T293] bridge_slave_1: entered promiscuous mode [ 31.471165][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.478282][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.485625][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.492708][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.503636][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.510744][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.518115][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.525166][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.534509][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.541617][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.548934][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.555976][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.604702][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.611803][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.619125][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.626168][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.648458][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.655790][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.663300][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.671215][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.678489][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.685679][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.693190][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.700583][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.721431][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.728521][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.736671][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.743745][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.752075][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.759168][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.766681][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.773759][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.808721][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.815809][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.827083][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.834216][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.845176][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.852312][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.866802][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.873980][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.901376][ T296] veth0_vlan: entered promiscuous mode [ 31.915311][ T294] veth0_vlan: entered promiscuous mode [ 31.930722][ T296] veth1_macvtap: entered promiscuous mode [ 31.962553][ T293] veth0_vlan: entered promiscuous mode [ 31.975643][ T295] veth0_vlan: entered promiscuous mode [ 31.994242][ T294] veth1_macvtap: entered promiscuous mode [ 32.001571][ T293] veth1_macvtap: entered promiscuous mode [ 32.010741][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.030985][ T295] veth1_macvtap: entered promiscuous mode [ 32.142799][ T313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 32.176213][ T326] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.192010][ T325] tipc: Started in network mode [ 32.206773][ T325] tipc: Node identity 5f0100000000002d000000000000002d, cluster identity 4711 [ 32.216248][ T325] tipc: Enabling of bearer rejected, failed to enable media [ 32.264068][ T332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7'. [ 32.497357][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.527237][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.647247][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 32.654328][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.664140][ T10] usb 1-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 32.673335][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.681730][ T10] usb 1-1: Product: syz [ 32.685917][ T10] usb 1-1: Manufacturer: syz [ 32.690721][ T335] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.698436][ T10] usb 1-1: SerialNumber: syz [ 32.704108][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.714585][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.725872][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 32.735039][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.743146][ T9] usb 4-1: Product: syz [ 32.747434][ T343] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.755198][ T9] usb 4-1: Manufacturer: syz [ 32.760064][ T9] usb 4-1: SerialNumber: syz [ 32.848377][ T335] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 32.858223][ T335] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 32.868245][ T335] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.882715][ T335] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 32.892124][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 32.900370][ T335] usb 2-1: Product: syz [ 32.904595][ T335] usb 2-1: Manufacturer: syz [ 32.909304][ T335] usb 2-1: SerialNumber: syz [ 32.918383][ T343] usb 3-1: config 1 has an invalid interface number: 153 but max is 0 [ 32.926777][ T343] usb 3-1: config 1 has no interface number 0 [ 32.933057][ T343] usb 3-1: config 1 interface 153 has no altsetting 0 [ 32.940142][ T343] usb 3-1: New USB device found, idVendor=07aa, idProduct=0056, bcdDevice=da.22 [ 32.949368][ T343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.966933][ T334] Zero length message leads to an empty skb [ 32.975201][ T334] veth1_to_bond: entered allmulticast mode [ 33.035171][ T334] veth1_to_bond: entered promiscuous mode [ 33.041494][ T333] veth1_to_bond: left promiscuous mode [ 33.047381][ T333] veth1_to_bond: left allmulticast mode [ 33.060634][ T9] usb 4-1: 0:1 : does not exist [ 33.065662][ T9] usb 4-1: BAAD SPEAKER p_chmask mismatch [ 33.073844][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 33.084298][ T9] usb 4-1: USB disconnect, device number 2 [ 33.095205][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.116683][ T335] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 33.164681][ T10] usb 1-1: MIDIStreaming interface descriptor not found [ 33.181083][ T10] usb 1-1: USB disconnect, device number 2 [ 33.271531][ T343] usb 3-1: string descriptor 0 read error: -71 [ 33.280464][ T343] usb 3-1: USB disconnect, device number 2 [ 33.368967][ T31] usb 2-1: USB disconnect, device number 2 [ 33.375832][ T31] usblp0: removed [ 33.658808][ T343] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.758065][ T363] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=363 comm=syz.3.16 [ 33.800250][ T370] netlink: 'syz.3.18': attribute type 46 has an invalid length. [ 33.818407][ T343] usb 3-1: device descriptor read/64, error -71 [ 34.047240][ T31] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 34.057473][ T343] usb 3-1: device descriptor read/64, error -71 [ 34.187239][ T31] usb 4-1: device descriptor read/64, error -71 [ 34.297665][ T343] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.427324][ T9] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 34.427343][ T31] usb 4-1: device descriptor read/64, error -71 [ 34.441158][ T343] usb 3-1: device descriptor read/64, error -71 [ 34.598404][ T9] usb 1-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.609620][ T9] usb 1-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 34.620665][ T9] usb 1-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.634126][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 34.640871][ T9] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 34.650146][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.659091][ T9] usb 1-1: config 0 descriptor?? [ 34.664562][ T379] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 34.677228][ T31] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 34.687235][ T343] usb 3-1: device descriptor read/64, error -71 [ 34.797517][ T343] usb usb3-port1: attempt power cycle [ 34.807237][ T31] usb 4-1: device descriptor read/64, error -71 [ 35.047333][ T31] usb 4-1: device descriptor read/64, error -71 [ 35.074906][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 35.081760][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 35.090831][ T9] usb 1-1: USB disconnect, device number 3 [ 35.137306][ T343] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.157348][ T31] usb usb4-port1: attempt power cycle [ 35.158812][ T343] usb 3-1: device descriptor read/8, error -71 [ 35.298587][ T343] usb 3-1: device descriptor read/8, error -71 [ 35.425785][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 35.425805][ T36] audit: type=1400 audit(1785759994.320:146): avc: denied { append } for pid=381 comm="syz.1.22" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.455591][ T36] audit: type=1400 audit(1785759994.330:147): avc: denied { name_bind } for pid=381 comm="syz.1.22" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 35.477117][ T36] audit: type=1400 audit(1785759994.330:148): avc: denied { node_bind } for pid=381 comm="syz.1.22" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 35.499103][ T31] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 35.518376][ T31] usb 4-1: device descriptor read/8, error -71 [ 35.537270][ T343] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.558565][ T343] usb 3-1: device descriptor read/8, error -71 [ 35.589625][ T36] audit: type=1400 audit(1785759994.490:149): avc: denied { remount } for pid=383 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 35.589650][ T384] ======================================================= [ 35.589650][ T384] WARNING: The mand mount option has been deprecated and [ 35.589650][ T384] and is ignored by this kernel. Remove the mand [ 35.589650][ T384] option from the mount to silence this warning. [ 35.589650][ T384] ======================================================= [ 35.644947][ T384] SELinux: security_context_str_to_sid (sytem_uÝGйÿÿ) failed with errno=-22 [ 35.658488][ T31] usb 4-1: device descriptor read/8, error -71 [ 35.687100][ T36] audit: type=1400 audit(1785759994.580:150): avc: denied { ioctl } for pid=390 comm="syz.0.25" path="socket:[3791]" dev="sockfs" ino=3791 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.688898][ T343] usb 3-1: device descriptor read/8, error -71 [ 35.711623][ T46] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.827350][ T343] usb usb3-port1: unable to enumerate USB device [ 35.867256][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 35.873565][ T46] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 35.882133][ T46] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 35.892101][ T46] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 35.902193][ T31] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 35.909796][ T46] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 35.919777][ T46] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 35.929821][ T46] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 35.942877][ T46] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 35.952042][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.961216][ T31] usb 4-1: device descriptor read/8, error -71 [ 36.098741][ T31] usb 4-1: device descriptor read/8, error -71 [ 36.207401][ T31] usb usb4-port1: unable to enumerate USB device [ 36.361933][ T36] audit: type=1400 audit(1785759995.260:151): avc: denied { setopt } for pid=396 comm="syz.0.34" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.383695][ T36] audit: type=1400 audit(1785759995.280:152): avc: denied { write } for pid=396 comm="syz.0.34" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.421117][ T404] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=404 comm=syz.0.27 [ 36.591851][ T414] tipc: Can't bind to reserved service type 0 [ 36.591860][ T36] audit: type=1400 audit(1785759995.490:153): avc: denied { bind } for pid=413 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.747280][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.783224][ T36] audit: type=1400 audit(1785759995.680:154): avc: denied { read write } for pid=415 comm="syz.0.31" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.807884][ T36] audit: type=1400 audit(1785759995.680:155): avc: denied { open } for pid=415 comm="syz.0.31" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 36.917411][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 36.924224][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.934647][ T31] usb 3-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 36.944520][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.952909][ T31] usb 3-1: Product: syz [ 36.957457][ T31] usb 3-1: Manufacturer: syz [ 36.962156][ T31] usb 3-1: SerialNumber: syz [ 36.978718][ T12] bridge_slave_1: left allmulticast mode [ 36.985514][ T12] bridge_slave_1: left promiscuous mode [ 36.991859][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.000043][ T12] bridge_slave_0: left allmulticast mode [ 37.005875][ T12] bridge_slave_0: left promiscuous mode [ 37.012045][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.121841][ T12] veth1_macvtap: left promiscuous mode [ 37.127515][ T12] veth0_vlan: left promiscuous mode [ 37.226517][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.233681][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.240876][ T424] bridge_slave_0: entered allmulticast mode [ 37.247543][ T424] bridge_slave_0: entered promiscuous mode [ 37.254375][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.262967][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.270688][ T424] bridge_slave_1: entered allmulticast mode [ 37.277194][ T424] bridge_slave_1: entered promiscuous mode [ 37.342465][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.349605][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.356968][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.364074][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.395907][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.403881][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.416279][ T31] usb 3-1: MIDIStreaming interface descriptor not found [ 37.427392][ T31] usb 3-1: USB disconnect, device number 7 [ 37.430814][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.440441][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.452932][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.471996][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.479164][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.503803][ T424] veth0_vlan: entered promiscuous mode [ 37.516528][ T424] veth1_macvtap: entered promiscuous mode [ 37.551310][ T430] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=430 comm=syz.4.37 [ 37.609854][ T436] tipc: Started in network mode [ 37.615026][ T436] tipc: Node identity 5f0100000000002d000000000000002d, cluster identity 4711 [ 37.624587][ T436] tipc: Enabling of bearer rejected, failed to enable media [ 37.662016][ T438] syzkaller1: entered promiscuous mode [ 37.667880][ T438] syzkaller1: entered allmulticast mode [ 37.951281][ T455] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=455 comm=syz.0.46 [ 37.978099][ T457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 38.107409][ T311] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 38.258692][ T311] usb 5-1: unable to get BOS descriptor or descriptor too short [ 38.267890][ T311] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.278171][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.287929][ T311] usb 5-1: string descriptor 0 read error: -22 [ 38.294343][ T311] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 38.306097][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.316351][ T465] tipc: Enabling of bearer rejected, failed to enable media [ 38.427221][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 38.433338][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 38.445161][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 38.456694][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 38.471371][ T31] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 38.480555][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.488751][ T31] usb 1-1: Product: syz [ 38.493049][ T31] usb 1-1: Manufacturer: syz [ 38.497700][ T31] usb 1-1: SerialNumber: syz [ 38.503199][ T31] usb 1-1: config 0 descriptor?? [ 38.712053][ T31] usb 1-1: USB disconnect, device number 4 [ 38.806362][ T343] usb 2-1: USB disconnect, device number 3 [ 38.894140][ T487] syzkaller1: entered promiscuous mode [ 38.899935][ T487] syzkaller1: entered allmulticast mode [ 38.928280][ T489] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=489 comm=syz.2.56 [ 38.940367][ T311] usb 5-1: 1:1: cannot get freq at ep 0x1 [ 38.959716][ T311] usb 5-1: USB disconnect, device number 2 [ 39.006435][ T492] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.247527][ T498] tipc: Started in network mode [ 39.252461][ T498] tipc: Node identity 5f0100000000002d000000000000002d, cluster identity 4711 [ 39.267246][ T498] tipc: Enabling of bearer rejected, failed to enable media [ 39.301082][ T501] netlink: 'syz.0.60': attribute type 4 has an invalid length. [ 39.596318][ T527] tipc: Enabling of bearer rejected, failed to enable media [ 39.637243][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.768371][ T31] usb 1-1: device descriptor read/64, error -71 [ 39.984050][ T536] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 39.992090][ T536] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 40.000832][ T536] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 40.008821][ T536] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 40.017240][ T31] usb 1-1: device descriptor read/64, error -71 [ 40.017444][ T428] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 40.177245][ T428] usb 2-1: Using ep0 maxpacket: 16 [ 40.182880][ T428] usb 2-1: too many configurations: 112, using maximum allowed: 8 [ 40.197847][ T428] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 40.206997][ T428] usb 2-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 40.215431][ T428] usb 2-1: Product: syz [ 40.219665][ T428] usb 2-1: Manufacturer: syz [ 40.226931][ T428] r8152-cfgselector 2-1: Unknown version 0x0000 [ 40.233279][ T428] r8152-cfgselector 2-1: config 0 descriptor?? [ 40.240518][ T428] cdc_acm 2-1:0.0: Zero length descriptor references [ 40.247304][ T428] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 40.257804][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.287232][ T343] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 40.387260][ T31] usb 1-1: device descriptor read/64, error -71 [ 40.438420][ T343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 40.449362][ T343] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 40.455424][ T428] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 40.462992][ T343] usb 5-1: New USB device found, idVendor=18c0, idProduct=0a25, bcdDevice= 0.00 [ 40.479354][ T343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.490591][ T343] usb 5-1: config 0 descriptor?? [ 40.495945][ T538] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 40.637277][ T31] usb 1-1: device descriptor read/64, error -71 [ 40.704138][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 40.704157][ T36] audit: type=1400 audit(1785759999.600:204): avc: denied { ioctl } for pid=537 comm="syz.4.73" path="socket:[5596]" dev="sockfs" ino=5596 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.736464][ T36] audit: type=1400 audit(1785759999.610:205): avc: denied { mounton } for pid=537 comm="syz.4.73" path="/file0" dev="ramfs" ino=5601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 40.747799][ T31] usb usb1-port1: attempt power cycle [ 40.758486][ T36] audit: type=1400 audit(1785759999.610:206): avc: denied { read } for pid=537 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.783794][ T343] usbhid 5-1:0.0: can't add hid device: -71 [ 40.789807][ T343] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 40.798543][ T343] usb 5-1: USB disconnect, device number 3 [ 41.097254][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 41.118767][ T31] usb 1-1: device descriptor read/8, error -71 [ 41.217253][ T343] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 41.262720][ T31] usb 1-1: device descriptor read/8, error -71 [ 41.274025][ T36] audit: type=1400 audit(1785760000.170:207): avc: denied { sqpoll } for pid=543 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 41.320669][ T36] audit: type=1400 audit(1785760000.220:208): avc: denied { execute } for pid=551 comm="syz.4.78" path="/15/file1" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 41.359819][ T554] tipc: Enabling of bearer rejected, failed to enable media [ 41.377213][ T343] usb 2-1: Using ep0 maxpacket: 16 [ 41.389136][ T343] usb 2-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= 0.40 [ 41.400979][ T343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.409207][ T343] usb 2-1: Product: syz [ 41.413553][ T343] usb 2-1: Manufacturer: syz [ 41.419225][ T343] usb 2-1: SerialNumber: syz [ 41.507243][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 41.528430][ T31] usb 1-1: device descriptor read/8, error -71 [ 41.628555][ T343] usb 2-1: 1:1: invalid format type 0x9978 is detected, processed as PCM [ 41.637492][ T343] usb 2-1: 1:1 : unsupported sample bitwidth 76 in 64 bytes [ 41.645061][ T343] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 41.654915][ T343] usb 2-1: USB disconnect, device number 5 [ 41.667636][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.668899][ T31] usb 1-1: device descriptor read/8, error -71 [ 41.797544][ T31] usb usb1-port1: unable to enumerate USB device [ 42.003491][ T560] netlink: 'syz.4.82': attribute type 4 has an invalid length. [ 42.012458][ T560] netlink: 'syz.4.82': attribute type 4 has an invalid length. [ 42.154274][ T576] Invalid logical block size (-4) [ 42.197235][ T36] audit: type=1400 audit(1785760001.090:209): avc: denied { create } for pid=581 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.217032][ T36] audit: type=1400 audit(1785760001.090:210): avc: denied { read } for pid=581 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.247784][ T36] audit: type=1400 audit(1785760001.150:211): avc: denied { ioctl } for pid=581 comm="syz.1.89" path="socket:[5118]" dev="sockfs" ino=5118 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.274126][ T583] bridge0: port 3(veth0_to_bridge) entered blocking state [ 42.281319][ T583] bridge0: port 3(veth0_to_bridge) entered disabled state [ 42.288586][ T583] veth0_to_bridge: entered allmulticast mode [ 42.294958][ T583] veth0_to_bridge: entered promiscuous mode [ 42.301259][ T583] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 42.313709][ T583] bridge0: port 3(veth0_to_bridge) entered blocking state [ 42.321004][ T583] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 42.326501][ T36] audit: type=1400 audit(1785760001.220:212): avc: denied { write } for pid=581 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.367252][ T343] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.419903][ T586] overlayfs: failed to resolve './file2': -2 [ 42.517206][ T343] usb 5-1: Using ep0 maxpacket: 16 [ 42.522969][ T343] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 42.531499][ T343] usb 5-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 42.540640][ T343] usb 5-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 42.550501][ T343] usb 5-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 42.559403][ T343] usb 5-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 42.569374][ T343] usb 5-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 42.578157][ T343] usb 5-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 42.588115][ T343] usb 5-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 42.596840][ T343] usb 5-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 42.606742][ T343] usb 5-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 42.615509][ T343] usb 5-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 42.627200][ T343] usb 5-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 42.636008][ T343] usb 5-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 42.646563][ T343] usb 5-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 42.655383][ T343] usb 5-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 42.665550][ T343] usb 5-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 42.674366][ T343] usb 5-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 42.684761][ T36] audit: type=1400 audit(1785760001.580:213): avc: denied { read append } for pid=573 comm="syz.4.85" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 42.711404][ T592] netlink: 'syz.2.93': attribute type 4 has an invalid length. [ 42.720737][ T592] netlink: 'syz.2.93': attribute type 4 has an invalid length. [ 42.745183][ T594] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=594 comm=syz.2.94 [ 42.827269][ T31] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 42.978913][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 42.990680][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=0093, bcdDevice= 0.00 [ 42.999795][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.008853][ T31] usb 1-1: config 0 descriptor?? [ 43.014188][ T588] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 43.077024][ T601] Invalid logical block size (-4) [ 43.118974][ T605] overlayfs: failed to resolve './file2': -2 [ 43.169015][ T609] incfs: Options parsing error. -22 [ 43.174308][ T609] incfs: mount failed -22 [ 43.179626][ T609] syz.1.101 uses obsolete (PF_INET,SOCK_PACKET) [ 43.241724][ T609] SELinux: Context system_u:object_r:devicekit_power_exec_t:s0 is not valid (left unmapped). [ 43.424300][ T588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.433094][ T588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.442258][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 43.448402][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 43.457523][ T31] usb 1-1: USB disconnect, device number 9 [ 43.617209][ T615] netlink: 'syz.2.103': attribute type 4 has an invalid length. [ 43.627430][ T46] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 43.627456][ T615] netlink: 'syz.2.103': attribute type 4 has an invalid length. [ 43.658841][ T617] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=617 comm=syz.2.104 [ 43.685010][ T619] sock: sock_timestamping_bind_phc: sock not bind to device [ 43.757253][ T46] usb 2-1: device descriptor read/64, error -71 [ 43.957860][ T621] Invalid logical block size (-4) [ 43.990427][ T625] overlayfs: failed to resolve './file2': -2 [ 43.997309][ T46] usb 2-1: device descriptor read/64, error -71 [ 44.016037][ T627] SELinux: Context system_u:object_r:vhost_device_t:s0 is not valid (left unmapped). [ 44.211256][ T629] process 'syz.2.110' launched './file0' with NULL argv: empty string added [ 44.237200][ T46] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 44.257195][ T335] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 44.305642][ T636] netlink: 'syz.2.113': attribute type 4 has an invalid length. [ 44.315944][ T636] netlink: 'syz.2.113': attribute type 4 has an invalid length. [ 44.367218][ T46] usb 2-1: device descriptor read/64, error -71 [ 44.408370][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.419460][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.429286][ T335] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 44.438439][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.447258][ T335] usb 1-1: config 0 descriptor?? [ 44.607220][ T46] usb 2-1: device descriptor read/64, error -71 [ 44.717312][ T46] usb usb2-port1: attempt power cycle [ 45.056584][ T335] usbhid 1-1:0.0: can't add hid device: -71 [ 45.057980][ T46] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 45.067059][ T335] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 45.079379][ T335] usb 1-1: USB disconnect, device number 10 [ 45.088470][ T46] usb 2-1: device descriptor read/8, error -71 [ 45.149457][ T343] usb 5-1: string descriptor 0 read error: -71 [ 45.155708][ T343] usb 5-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 45.179166][ T343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.196201][ T343] r8152-cfgselector 5-1: Unknown version 0x0000 [ 45.202721][ T343] r8152-cfgselector 5-1: rejected 8 configurations due to insufficient available bus power [ 45.213129][ T343] r8152-cfgselector 5-1: no configuration chosen from 8 choices [ 45.226745][ T343] r8152-cfgselector 5-1: USB disconnect, device number 4 [ 45.253045][ T46] usb 2-1: device descriptor read/8, error -71 [ 45.455825][ T654] netlink: 'syz.2.122': attribute type 4 has an invalid length. [ 45.465975][ T654] netlink: 'syz.2.122': attribute type 4 has an invalid length. [ 45.508254][ T46] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 45.519062][ T658] netlink: 65 bytes leftover after parsing attributes in process `syz.2.124'. [ 45.528108][ T343] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 45.559683][ T46] usb 2-1: device descriptor read/8, error -71 [ 45.688784][ T343] usb 5-1: unable to get BOS descriptor or descriptor too short [ 45.697529][ T343] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 45.709532][ T343] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 45.722769][ T343] usb 5-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 45.732218][ T343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.741559][ T343] usb 5-1: Product: syz [ 45.745889][ T343] usb 5-1: Manufacturer: syz [ 45.750771][ T343] usb 5-1: SerialNumber: syz [ 45.816614][ T46] usb 2-1: device descriptor read/8, error -71 [ 45.837225][ T335] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 45.932915][ T46] usb usb2-port1: unable to enumerate USB device [ 45.963796][ T343] usb 5-1: Can't get UAC3 power state for id 10 [ 45.973620][ T343] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 45.983793][ T343] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 45.998342][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 46.017273][ T335] usb 1-1: New USB device found, idVendor=056a, idProduct=0093, bcdDevice= 0.00 [ 46.036580][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.066068][ T335] usb 1-1: config 0 descriptor?? [ 46.077594][ T660] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 46.089999][ T343] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 46.104401][ T343] usb 5-1: USB disconnect, device number 5 [ 46.132093][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.526117][ T660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.535605][ T660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.601940][ T675] netlink: 'syz.4.132': attribute type 4 has an invalid length. [ 46.663691][ T673] netlink: 'syz.1.130': attribute type 13 has an invalid length. [ 46.677883][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 46.677917][ T36] audit: type=1400 audit(1785760005.580:233): avc: denied { write } for pid=669 comm="syz.1.130" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.719865][ T675] netlink: 'syz.4.132': attribute type 4 has an invalid length. [ 46.728960][ T676] kvm: user requested TSC rate below hardware speed [ 46.766313][ T36] audit: type=1400 audit(1785760005.610:235): avc: denied { open } for pid=669 comm="syz.1.130" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 46.860103][ T36] audit: type=1400 audit(1785760005.610:234): avc: denied { write } for pid=669 comm="syz.1.130" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 46.941823][ T36] audit: type=1400 audit(1785760005.730:236): avc: denied { mount } for pid=679 comm="syz.4.133" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 46.988763][ T36] audit: type=1400 audit(1785760005.730:237): avc: denied { setopt } for pid=679 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.027548][ T343] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 47.033237][ T36] audit: type=1400 audit(1785760005.790:238): avc: denied { unmount } for pid=424 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 47.277865][ T36] audit: type=1400 audit(1785760005.870:239): avc: denied { connect } for pid=683 comm="syz.4.134" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.181635][ T688] Invalid logical block size (-4) [ 49.330918][ T343] usb 2-1: Using ep0 maxpacket: 16 [ 49.347551][ T343] usb 2-1: no configurations [ 49.529235][ T343] usb 2-1: can't read configurations, error -22 [ 53.474345][ T335] usbhid 1-1:0.0: can't add hid device: -32 [ 53.482697][ T335] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 54.107157][ C1] sched: DL replenish lagged too much [ 73.202256][ T36] audit: type=1400 audit(1785760031.940:240): avc: denied { mounton } for pid=709 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 78.119406][ T343] usb 1-1: USB disconnect, device number 11 [ 83.647603][ T714] netlink: 'syz.2.145': attribute type 4 has an invalid length. [ 98.908116][ T719] netlink: 316 bytes leftover after parsing attributes in process `syz.1.146'. [ 99.927433][ T723] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=723 comm=syz.2.147 [ 102.773655][ T36] audit: type=1400 audit(1785760061.670:241): avc: denied { create } for pid=725 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 109.778539][ T12] bridge_slave_1: left allmulticast mode [ 109.798154][ T12] bridge_slave_1: left promiscuous mode [ 109.828342][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.027881][ T12] bridge_slave_0: left allmulticast mode [ 110.051840][ T12] bridge_slave_0: left promiscuous mode [ 110.158087][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.160529][ T727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.149'. [ 204.417404][ T12] tipc: Left network mode [ 220.058962][ T12] veth1_macvtap: left promiscuous mode [ 220.158160][ T12] veth0_vlan: left promiscuous mode [ 336.948842][ T37] INFO: task syz-executor:709 blocked for more than 122 seconds. [ 336.956743][ T37] Not tainted syzkaller #0 [ 336.978171][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.986908][ T37] task:syz-executor state:D stack:0 pid:709 tgid:709 ppid:1 flags:0x00004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 337.151209][ T36] audit: type=1400 audit(1785760295.960:242): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2820]" dev="pipefs" ino=2820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 337.288254][ T37] Call Trace: [ 337.291615][ T37] [ 337.294675][ T37] __schedule+0x1496/0x20b0 [ 337.519387][ T37] ? __sched_text_start+0x10/0x10 [ 337.524549][ T37] ? mutex_spin_on_owner+0x18d/0x460 [ 337.559146][ T37] ? mutex_spin_on_owner+0x1ea/0x460 [ 337.564548][ T37] ? __kasan_check_write+0x18/0x20 [ 337.611846][ T37] ? _raw_spin_lock+0x92/0x120 [ 337.616803][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 337.841712][ T37] schedule+0xc5/0x240 [ 337.845899][ T37] schedule_preempt_disabled+0x14/0x30 [ 337.883750][ T37] __mutex_lock+0x902/0x1b90 [ 337.907969][ T37] ? create_new_namespaces+0x390/0x6f0 [ 337.913525][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 337.957089][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 337.963152][ T37] ? __kasan_slab_free+0x6a/0x80 [ 338.002595][ T37] __mutex_lock_slowpath+0xe/0x20 [ 338.024549][ T37] mutex_lock+0x113/0x1d0 [ 338.044171][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 338.069683][ T37] ? __wake_up+0x169/0x190 [ 338.074177][ T37] rtnl_lock+0x19/0x20 [ 338.078349][ T37] ppp_exit_net+0x12d/0x360 [ 338.082892][ T37] ? __cfi_ppp_exit_net+0x10/0x10 [ 338.087980][ T37] ? mutex_is_locked+0x1b/0x50 [ 338.092780][ T37] ? nexthop_net_exit_batch_rtnl+0x22d/0x290 [ 338.098798][ T37] ? br_net_exit_batch_rtnl+0x157/0x1a0 [ 338.104471][ T37] setup_net+0x688/0x9b0 [ 338.108779][ T37] ? copy_net_ns+0xa20/0xa20 [ 338.113482][ T37] ? down_read_killable+0x7f/0x100 [ 338.118664][ T37] ? __cfi_down_read_killable+0x10/0x10 [ 338.124260][ T37] copy_net_ns+0x4fc/0xa20 [ 338.128765][ T37] create_new_namespaces+0x390/0x6f0 [ 338.134634][ T37] unshare_nsproxy_namespaces+0x124/0x180 [ 338.141266][ T37] ksys_unshare+0x4f9/0x8f0 [ 338.145816][ T37] ? __cfi_ksys_unshare+0x10/0x10 [ 338.150884][ T37] ? __kasan_check_write+0x18/0x20 [ 338.156018][ T37] __x64_sys_unshare+0x3c/0x50 [ 338.160848][ T37] x64_sys_call+0x2998/0x2ee0 [ 338.165572][ T37] do_syscall_64+0x57/0xf0 [ 338.170149][ T37] ? clear_bhb_loop+0x50/0xa0 [ 338.174957][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 338.180993][ T37] RIP: 0033:0x7f1e8c99f2e7 [ 338.185462][ T37] RSP: 002b:00007ffd94b16908 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 338.194088][ T37] RAX: ffffffffffffffda RBX: 00007f1e8cc25f40 RCX: 00007f1e8c99f2e7 [ 338.202290][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 338.210302][ T37] RBP: 00007f1e8cc267b8 R08: 0000000000000000 R09: 0000000000000000 [ 338.218412][ T37] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 338.226429][ T37] R13: 0000000000000003 R14: 00007ffd94b16b48 R15: 0000000000000000 [ 338.234525][ T37] [ 338.237838][ T37] NMI backtrace for cpu 0 [ 338.237858][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 338.237889][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.237902][ T37] Call Trace: [ 338.237917][ T37] [ 338.237926][ T37] __dump_stack+0x21/0x30 [ 338.237963][ T37] dump_stack_lvl+0x140/0x1c0 [ 338.237994][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 338.238027][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x711/0xa50 [ 338.238063][ T37] dump_stack+0x19/0x20 [ 338.238093][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 338.238118][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 338.238149][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 338.238174][ T37] ? sched_show_task+0x371/0x530 [ 338.238206][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 338.238237][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 338.238269][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 338.238300][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 338.238327][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 338.238359][ T37] watchdog+0xe45/0xf90 [ 338.238383][ T37] ? __kasan_check_write+0x18/0x20 [ 338.238409][ T37] ? __cfi_watchdog+0x10/0x10 [ 338.238432][ T37] ? __kasan_check_read+0x15/0x20 [ 338.238453][ T37] ? __kthread_parkme+0x12f/0x180 [ 338.238477][ T37] ? schedule+0xc5/0x240 [ 338.238504][ T37] kthread+0x2c7/0x360 [ 338.238530][ T37] ? __cfi_watchdog+0x10/0x10 [ 338.238553][ T37] ? __cfi_kthread+0x10/0x10 [ 338.238579][ T37] ret_from_fork+0x67/0xa0 [ 338.238612][ T37] ? __cfi_kthread+0x10/0x10 [ 338.238638][ T37] ret_from_fork_asm+0x1a/0x30 [ 338.238662][ T37] [ 338.238670][ T37] Sending NMI from CPU 0 to CPUs 1: [ 338.455972][ C1] NMI backtrace for cpu 1 [ 338.455989][ C1] CPU: 1 UID: 0 PID: 33 Comm: rcuop/1 Not tainted syzkaller #0 7f3b23dcf55806c758f3cdeb9210fc77c27c120f [ 338.456012][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.456022][ C1] RIP: 0010:ip6t_do_table+0x5e6/0x1510 [ 338.456046][ C1] Code: 42 80 3c 28 00 74 08 48 89 df e8 05 23 d6 fc 48 8b 1b 49 8d 7c 24 18 48 89 f8 48 c1 e8 03 42 80 3c 28 00 74 05 e8 ea 22 d6 fc <49> 33 5c 24 18 4d 8d 7c 24 38 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 [ 338.456060][ C1] RSP: 0018:ffffc90000230780 EFLAGS: 00000246 [ 338.456075][ C1] RAX: 1ffff1102615480b RBX: 0200000000000000 RCX: dffffc0000000000 [ 338.456089][ C1] RDX: ffff888103678000 RSI: 0000000000000000 RDI: ffff888130aa4058 [ 338.456101][ C1] RBP: ffffc90000230970 R08: ffffc900002308ef R09: 0000000000000000 [ 338.456112][ C1] R10: ffffc900002308d0 R11: fffff5200004611e R12: ffff888130aa4040 [ 338.456124][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888130aa4070 [ 338.456136][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 338.456150][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.456161][ C1] CR2: 00007fbee4155000 CR3: 000000010cba4000 CR4: 00000000003526b0 [ 338.456176][ C1] Call Trace: [ 338.456182][ C1] [ 338.456192][ C1] ? ip6t_do_table+0x1d2/0x1510 [ 338.456208][ C1] ? __cfi_ip6t_do_table+0x10/0x10 [ 338.456225][ C1] ip6table_mangle_hook+0x2b0/0x720 [ 338.456243][ C1] ? ip6t_do_table+0x1d2/0x1510 [ 338.456258][ C1] ? __cfi_ip6t_do_table+0x10/0x10 [ 338.456272][ C1] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 338.456290][ C1] ? __asan_memset+0x39/0x50 [ 338.456307][ C1] ? ip6_rcv_core+0xd42/0x12e0 [ 338.456329][ C1] ? __cfi_ip6table_mangle_hook+0x10/0x10 [ 338.456347][ C1] nf_hook_slow+0xd2/0x240 [ 338.456364][ C1] ipv6_rcv+0x1d3/0x240 [ 338.456386][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 338.456420][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 338.456444][ C1] process_backlog+0x472/0xaf0 [ 338.456472][ C1] __napi_poll+0xcd/0x600 [ 338.456495][ C1] net_rx_action+0x5dc/0xd70 [ 338.456521][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 338.456544][ C1] ? sched_balance_domains+0x874/0xa50 [ 338.456566][ C1] ? sched_balance_softirq+0xbd/0x170 [ 338.456582][ C1] handle_softirqs+0x1aa/0x620 [ 338.456600][ C1] ? __cfi_slab_free_after_rcu_debug+0x10/0x10 [ 338.456623][ C1] __do_softirq+0xf/0x16 [ 338.456643][ C1] do_softirq+0xb8/0x110 [ 338.456658][ C1] [ 338.456663][ C1] [ 338.456669][ C1] ? __cfi_do_softirq+0x10/0x10 [ 338.456684][ C1] ? __kasan_slab_free+0x6a/0x80 [ 338.456704][ C1] ? kfree_sensitive+0x61/0x70 [ 338.456722][ C1] __local_bh_enable_ip+0x74/0x80 [ 338.456737][ C1] rcu_do_batch+0x590/0xcb0 [ 338.456755][ C1] ? rcu_core+0xcc0/0xcc0 [ 338.456770][ C1] ? __kasan_check_write+0x18/0x20 [ 338.456787][ C1] ? __kasan_check_read+0x15/0x20 [ 338.456802][ C1] ? rcu_nocb_cb_kthread+0x51e/0xb60 [ 338.456819][ C1] rcu_nocb_cb_kthread+0x533/0xb60 [ 338.456837][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 338.456854][ C1] ? __kasan_check_write+0x18/0x20 [ 338.456869][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 338.456893][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 338.456912][ C1] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 338.456930][ C1] ? __cfi_try_to_wake_up+0x10/0x10 [ 338.456954][ C1] ? set_cpus_allowed_ptr+0xa1/0xf0 [ 338.456972][ C1] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 338.456990][ C1] ? __kasan_check_read+0x15/0x20 [ 338.457005][ C1] ? __kthread_parkme+0x12f/0x180 [ 338.457027][ C1] ? schedule+0xc5/0x240 [ 338.457050][ C1] kthread+0x2c7/0x360 [ 338.457072][ C1] ? __cfi_rcu_nocb_cb_kthread+0x10/0x10 [ 338.457094][ C1] ? __cfi_kthread+0x10/0x10 [ 338.457117][ C1] ret_from_fork+0x67/0xa0 [ 338.457147][ C1] ? __cfi_kthread+0x10/0x10 [ 338.457170][ C1] ret_from_fork_asm+0x1a/0x30 [ 338.457193][ C1]