last executing test programs: 38.569136811s ago: executing program 2 (id=60): mount$fuse(0x0, 0x0, 0x0, 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004']) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="20150400000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0x21, 0xef, {0xef, 0x22, "a62051ac36f2c10833b9c9e9d0181a6200173afba7473042a8b3554d973300fd33cc568609789e28e5161ede3b547e25d46fb00105e85faf4a2323d64f916f614af03018e839586d75a32f72c7ad97bf84242f0394d793bb481626a5932e543a22bd67dcb02f71e1bc18c7313621ec893145c3880518550a27f143f4bb6170b7843d48e9990fe4058057986459291f53d5f111a23a5aca1000f1e33983ea50865aa046619579249a8d137895d1698bf51e537bbdbea8d2d955fe95e9291e855468b90ea6865c26be399728164b267c1f24edf0aa699a6829dd48b9779cef5b32c54dc037e3ec1e9fab5d390aa7"}}, &(0x7f0000000400)={0x0, 0x3, 0x61, @string={0x61, 0x3, "1bea433bb1142f38c2e01bbfb429621c72c0b87d9364caa3265651ce556f5d30411d1353f73d1a5a2ebb3fc6eea4a8c0a33e2ef797a1596451ecf667566d3ba6b1d632d40293a974e71683b1726bb71e49ae52d24bed451c4ba9a253432ccf"}}, &(0x7f0000000480)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0xa, 0x1}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x9, 0x7, 0x9, "8039432e", "a1de322e"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x78, 0x5, 0xf, 0x3, 0x3949, 0x8}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000580)={0x20, 0x16, 0xa6, "30830d9e7c583f347536f0f667bab8e5ef5fac7d49b3dcd13a471db8cdf8efe36b0d3d4ddcd0be07903c9d29c01db929aa50e7adf7b44e4d1e02d5c16f24b4d0ea27e937cc4ecde6638a2202d8c1c457b76037f672fa6ae92d2cf8837cd3d2c397b71b9076456b375070160e0eb094d87ca2151048264d99ffe15c6866e21e69d7f98826cddba88f8209a2ab3cea4d20849d6e7635f88b11d4dda5d73631335cdb6c3da87d2e"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000680)={0x0, 0x8, 0x1}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x40, 0x8}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xc2d}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000840)={0x40, 0xb, 0x2, "1efe"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x101}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000900)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000940)={0x40, 0x19, 0x2, "4081"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0xff}}) 38.566415562s ago: executing program 2 (id=64): r0 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={0x40, 0x5, 0x1, '/'}}) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = inotify_init() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x1, 0x58, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x20, 0x1, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xfc, 0x3, 0x4a}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x6, 0xc4}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x4, 0x9, 0x0, 0x40, 0x4}, 0x4d, &(0x7f0000000080)={0x5, 0xf, 0x4d, 0x1, [@generic={0x48, 0x10, 0x1, "3f06f46f5218fc1ddd82c93aa74b69f52dc3c6fab152d1c4b6111923218428eee1295b36b3cfa8ae5eb156589bb5fb3fbededfe4330bd0982913ff8eb570b03a290ec7718d"}]}, 0x2, [{0xaf, &(0x7f0000000100)=@string={0xaf, 0x3, "267203503f8316632f2f953a35a580aca2bd42347382672f8159724d5da420f6fef63624e2f3682f7a27b4f41e4cd4c960a10715f034a483306e502b5c08e496038fc5f056e1a19e31a7ce08a5523862820d46984323167ecb78e47568fb6e82b809b38e81f9b4f7498b71621d8ca6391b334119afde1d500414c1c04743b7ff713ccc0d78d97a8d2f4ee3403fa57a7d20c9a70c1ce48a3ce1d96ed689da3c3fcdcfeb4f6454192212698f713b"}}, {0x8, &(0x7f00000001c0)=@string={0x8, 0x3, "fe0171460a2b"}}]}) syz_usb_control_io$printer(r6, &(0x7f00000003c0)={0x14, &(0x7f0000000240)={0x20, 0x7, 0x8a, {0x8a, 0x23, "0b26d71c9c6c3d079cf888f4def95e8eef39ce072db00aee8c45b493f56a7f0ccecbc9ac0ae044b875d3cde770ba5edbc25e3d67eac510a72a5b564e7f9018cba003cb733d18a7ac835080755555b28c09179eb21c611f299f7c317c2abef0ce99d7014b1817880f94e0e90c14d0fa724ff89d1dd587941b8cf3ff7b57e8ed14fc36227ec4718f8c"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}}, &(0x7f0000000e00)={0x34, &(0x7f0000000b40)={0x40, 0x16, 0xe6, "452013f7a9b6b34879df48c8ea860c2aa3e4a7f0410e5dcc82da75c5d8db59e742dc8d49cbd755938d3803e8acc400f9c93d0039e75acf004b19dbcf63eeeb90b2a08b8ecb1aca480e5a7f002a59a024e08e76a767ddcffde09264aa2e6f9ec412e02eda38794683645454a86f4526e2cdd1a41e63789a0e7f8b41edeeab3e6cf250339456d009b721f3653ea95fde070e43c959f1e39b78ab4dcb9170ac985549de6365b1b129cae97435bb2b4eafa2e08d8584881db9ffe950c0e2e153ceb975a2191cad3d5ce862692d7a434b24a41f5e531926816980afa9c96ee0aa49dc28cbf2b0dfa5"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0xac}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000cc0)={0x20, 0x0, 0xa0, {0x9e, "5f8cf1949701900f1200d9beb3fcfc1956a7c0c770357bebe5bcac4f94501c0310ec9ad647bf21abef1d0c142118f6027c1957a4d666e0f1491be75fbeb71b03b19c71ce067772b456da6bdb31e1b6627553847c5dddaa862eb3c81f5706b09032447cdc3809dee7221e9486c032d940ed8986cb80de6f894ea2303133eefa398dc71b53c6e43b529fbc475ed46c46b9dab3f90861b795b85a517d8d156e"}}, &(0x7f0000000d80)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000dc0)={0x20, 0x0, 0x1, 0x4}}) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x40, 0x21, 0x2, {0xfffffffffffffe8a, 0xe}}, &(0x7f0000000680)={0x0, 0x3, 0x2d, @string={0x2d, 0x3, "4f290422e5dba00ab703ee07867110932051a1ecbf6259df6ca004d474baed3d81750d005bc54aef78b25e"}}, 0x0, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x6c, 0x1, 0xc9, "9b2a784a", '(\x00'}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa, 0x2, 0xf4, 0x8, 0x7, 0x5, 0x4800}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000580)={0x20, 0x130d7ca1e79d0b08, 0x60, "dfd4839165fe8a11f7cc099b54c6cfb6b9291e6a7c03c603d9116636f61c69719c2aacef5ccee0d4fbde8d8b735917c1413b1151e6ab4fd73de454d10633bac7aa6629874bdd3352d9e4ac5d40bd7dd9749665ae75c461a750ac28ebd5479b34"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0xfffffffffffffdf1, {0x3, 0x2}}, 0x0, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0xb}, &(0x7f0000000840)={0x40, 0xb, 0x2, '\a\x00'}, 0x0, &(0x7f00000008c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf4c6ca021e73a1f0}}, &(0x7f0000000900)={0x40, 0x17, 0x6}, &(0x7f0000000940)={0x40, 0x19, 0x2, '/T'}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000440)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0xb4}, 0x0}) syz_open_dev$usbfs(0x0, 0xb, 0x101301) getuid() socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) 37.124453518s ago: executing program 2 (id=69): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f00000006c0)="0156", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='=', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000003c0)='M', 0x1}], 0x1}}], 0x4, 0x119e75c40277adee) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000080)={0x100000001, 0x30, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 37.102020119s ago: executing program 2 (id=70): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0xfffc, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x76) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r1, 0x0, 0x1000009, 0x0) 37.040282161s ago: executing program 2 (id=71): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff}) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x8, 0x4, 0x9, 0x8000, 0x9, 0xffffffffffffffff}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) (async) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys_mount\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) fsopen(&(0x7f0000000000)='vfat\x00', 0x0) (async) r0 = fsopen(&(0x7f0000000000)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='bfq', 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) flistxattr(r4, 0x0, 0x0) (async) flistxattr(r4, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'pimreg1\x00', {0x2}, 0xdc3d}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'pimreg1\x00', {0x2}, 0xdc3d}) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x7b, @empty}, 0x1c) getsockopt$inet6_buf(r2, 0x29, 0xcc, &(0x7f0000000180)=""/159, &(0x7f0000000240)=0x9f) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x1000180, 0x4) close_range(r5, r2, 0x2) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 36.944713673s ago: executing program 2 (id=72): mount$fuse(0x0, 0x0, 0x0, 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004']) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="20150400000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0x21, 0xef, {0xef, 0x22, "a62051ac36f2c10833b9c9e9d0181a6200173afba7473042a8b3554d973300fd33cc568609789e28e5161ede3b547e25d46fb00105e85faf4a2323d64f916f614af03018e839586d75a32f72c7ad97bf84242f0394d793bb481626a5932e543a22bd67dcb02f71e1bc18c7313621ec893145c3880518550a27f143f4bb6170b7843d48e9990fe4058057986459291f53d5f111a23a5aca1000f1e33983ea50865aa046619579249a8d137895d1698bf51e537bbdbea8d2d955fe95e9291e855468b90ea6865c26be399728164b267c1f24edf0aa699a6829dd48b9779cef5b32c54dc037e3ec1e9fab5d390aa7"}}, &(0x7f0000000400)={0x0, 0x3, 0x61, @string={0x61, 0x3, "1bea433bb1142f38c2e01bbfb429621c72c0b87d9364caa3265651ce556f5d30411d1353f73d1a5a2ebb3fc6eea4a8c0a33e2ef797a1596451ecf667566d3ba6b1d632d40293a974e71683b1726bb71e49ae52d24bed451c4ba9a253432ccf"}}, &(0x7f0000000480)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0xa, 0x1}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x9, 0x7, 0x9, "8039432e", "a1de322e"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x78, 0x5, 0xf, 0x3, 0x3949, 0x8}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000580)={0x20, 0x16, 0xa6, "30830d9e7c583f347536f0f667bab8e5ef5fac7d49b3dcd13a471db8cdf8efe36b0d3d4ddcd0be07903c9d29c01db929aa50e7adf7b44e4d1e02d5c16f24b4d0ea27e937cc4ecde6638a2202d8c1c457b76037f672fa6ae92d2cf8837cd3d2c397b71b9076456b375070160e0eb094d87ca2151048264d99ffe15c6866e21e69d7f98826cddba88f8209a2ab3cea4d20849d6e7635f88b11d4dda5d73631335cdb6c3da87d2e"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000680)={0x0, 0x8, 0x1}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x40, 0x8}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xc2d}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000840)={0x40, 0xb, 0x2, "1efe"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x101}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000900)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000940)={0x40, 0x19, 0x2, "4081"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0xff}}) 21.872062869s ago: executing program 32 (id=72): mount$fuse(0x0, 0x0, 0x0, 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004']) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="20150400000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x20, 0x21, 0xef, {0xef, 0x22, "a62051ac36f2c10833b9c9e9d0181a6200173afba7473042a8b3554d973300fd33cc568609789e28e5161ede3b547e25d46fb00105e85faf4a2323d64f916f614af03018e839586d75a32f72c7ad97bf84242f0394d793bb481626a5932e543a22bd67dcb02f71e1bc18c7313621ec893145c3880518550a27f143f4bb6170b7843d48e9990fe4058057986459291f53d5f111a23a5aca1000f1e33983ea50865aa046619579249a8d137895d1698bf51e537bbdbea8d2d955fe95e9291e855468b90ea6865c26be399728164b267c1f24edf0aa699a6829dd48b9779cef5b32c54dc037e3ec1e9fab5d390aa7"}}, &(0x7f0000000400)={0x0, 0x3, 0x61, @string={0x61, 0x3, "1bea433bb1142f38c2e01bbfb429621c72c0b87d9364caa3265651ce556f5d30411d1353f73d1a5a2ebb3fc6eea4a8c0a33e2ef797a1596451ecf667566d3ba6b1d632d40293a974e71683b1726bb71e49ae52d24bed451c4ba9a253432ccf"}}, &(0x7f0000000480)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0xa, 0x1}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x9, 0x7, 0x9, "8039432e", "a1de322e"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x78, 0x5, 0xf, 0x3, 0x3949, 0x8}}}, &(0x7f0000000a80)={0x84, &(0x7f0000000580)={0x20, 0x16, 0xa6, "30830d9e7c583f347536f0f667bab8e5ef5fac7d49b3dcd13a471db8cdf8efe36b0d3d4ddcd0be07903c9d29c01db929aa50e7adf7b44e4d1e02d5c16f24b4d0ea27e937cc4ecde6638a2202d8c1c457b76037f672fa6ae92d2cf8837cd3d2c397b71b9076456b375070160e0eb094d87ca2151048264d99ffe15c6866e21e69d7f98826cddba88f8209a2ab3cea4d20849d6e7635f88b11d4dda5d73631335cdb6c3da87d2e"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000680)={0x0, 0x8, 0x1}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x40, 0x8}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xc2d}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000840)={0x40, 0xb, 0x2, "1efe"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x101}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000900)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000940)={0x40, 0x19, 0x2, "4081"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0xff}}) 19.624320687s ago: executing program 0 (id=204): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r1 = syz_clone(0x4000, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000001480)='environ\x00') capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000001040)=0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) pread64(r3, &(0x7f0000000240)=""/164, 0x131, 0x131) r6 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x87f64000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0xa00, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0x3, &(0x7f0000001900)=0x6, 0x4) recvmmsg(r7, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r7, 0xf50f, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) 19.50075742s ago: executing program 0 (id=205): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={0x12c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x7c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9922}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x400}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4e}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfff0}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4f3b}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffff81}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x94, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5e9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffff31}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x937d}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffe}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xa}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x200}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3ff}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14001a"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) write(r0, &(0x7f0000000800)='0', 0x1) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) syz_usb_connect(0x5, 0x6f, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010102dc86b1087b09f6619ad40102030109025d00010affb00109045b01000e0101060a240140001f000201020c2402020202060903000f4109240303000301060a052406000005240007000d240f010700000009000500000000000000a317a88b045e4f01a607c0ffcb7e392a"], &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0}) 18.279292531s ago: executing program 0 (id=211): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000010000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB="1000f8800400b10008002100", @ANYRES32=0x0, @ANYRESDEC=r0], 0x28}], 0x1}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x20, 0x700, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x4, 0xfffffffffffffdb0, 0x4, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000600)={'syz1\x00', {0xeac, 0x0, 0x9, 0x7}, 0x19, [0xffffffc0, 0xe, 0x0, 0x800, 0x2, 0x10001, 0x8001, 0xb, 0x40, 0xf, 0x5, 0x3, 0x5, 0x3, 0x2, 0x5, 0x5, 0x7, 0xcb0, 0x1, 0x2, 0x10000000, 0x100, 0x6, 0x11e0, 0xff, 0xce, 0x224, 0x1, 0x7, 0x8e, 0x1, 0x4, 0x7, 0x2, 0x0, 0xce, 0x8000, 0x800, 0x2, 0x100, 0x8, 0x10000, 0x6, 0xc, 0x9482, 0x1ff, 0x80000001, 0x5, 0x9, 0x10000001, 0x9, 0xd, 0xa63b, 0x3fba, 0x3, 0x7fffffff, 0x7e3, 0x1ff, 0x2, 0x829, 0x2, 0x7, 0x2c000000], [0x2, 0x3, 0x4, 0xfffffff7, 0x0, 0x9, 0xaf, 0x9, 0xc0, 0x88, 0x400, 0x6, 0xf, 0x8650, 0x8, 0x40, 0x12, 0x6, 0xff, 0x1, 0x7fff, 0x9, 0x8, 0x1, 0x2000, 0xd4, 0x0, 0x7, 0x7, 0x1, 0x43654853, 0x1, 0x1, 0x5, 0x6, 0x2, 0x2, 0x0, 0x80000000, 0xfffffff7, 0x4f, 0x7, 0x1, 0x0, 0x5, 0x3, 0xffff, 0x7ff, 0xef86, 0x7, 0xfffffffc, 0x8, 0xfffffff9, 0x5, 0x69, 0x2, 0x5, 0x9, 0x8, 0x8, 0x5, 0x1, 0x3, 0x80000001], [0xff, 0x8, 0x1, 0x8, 0x4, 0x1, 0x3, 0x0, 0x34, 0xa, 0x1, 0x5, 0x0, 0x2, 0xa, 0x1000, 0x57, 0xbfcf, 0x6, 0xfff, 0x1, 0x3, 0x1, 0x7fff, 0x7f, 0x0, 0x1, 0x4, 0xa6, 0xffff2412, 0x3, 0x1, 0x9, 0x8, 0x5, 0x2, 0xf, 0x800, 0x5, 0x4, 0xe4, 0x9, 0xbef, 0x0, 0x4b, 0x6c8, 0x8, 0x1, 0x3, 0x90, 0x2, 0x8000, 0x781, 0x5, 0xfffff001, 0x4, 0x5, 0x7, 0x2, 0x2, 0x8, 0x800, 0xfffffff7, 0x6], [0x81, 0x4, 0xf0, 0x5, 0x6, 0xffffffff, 0x80, 0x5, 0x3, 0x10, 0x4, 0x8, 0x8301, 0x2, 0x80, 0x9, 0x200, 0xd, 0x3498, 0x1, 0x800, 0x800, 0x77, 0x6, 0x4, 0xfffffde1, 0x1, 0x0, 0x9, 0x3ff, 0x0, 0x0, 0x3f08, 0xeaa, 0x4, 0x7, 0x6, 0xd87, 0x6, 0x2, 0x4, 0x0, 0x8, 0x6, 0x0, 0x5b6, 0x3d, 0x7, 0xb7, 0x9, 0x6, 0x10001, 0x577, 0x1, 0x7fff, 0x6, 0x0, 0x0, 0x3ff, 0x7, 0x9, 0x10001, 0x5]}, 0x45c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$UBLK_U_CMD_START_DEV(r4, 0xc0207506, &(0x7f00000001c0)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) capset(&(0x7f0000000240)={0x20080522, r6}, &(0x7f0000000280)={0xffffff66, 0x200, 0x10, 0x7f, 0x883, 0xf}) fcntl$setpipe(r5, 0x407, 0x0) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) socket$inet6(0xa, 0x6, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x9117}, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 18.188533464s ago: executing program 0 (id=215): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000e50"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000340)={0x20, 0x14, 0x1, "dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 16.037968859s ago: executing program 0 (id=220): mkdir(&(0x7f0000000280)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000a40)={0x0, &(0x7f0000000200)=[@code={0xa, 0x55, {"0f20c035000001000f22c00f01c5c4e1bdc28b0080000063400f1f003ec0a9b88919d600b99e0000400f320f20d835200000000f22d826650f01f82e450f072e450f01ca"}}], 0x55}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_kvm_add_vcpu$x86(r1, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @in_dx={0x69, 0x20, {0xa8a9, 0x3}}], 0x40}) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xc0000001, 0x4, 0x2, 0x31237648, 0x6, 0x9, 0x40000080}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000340)={[0x7, 0x7fffffffffffffff, 0x8, 0x3, 0x7, 0x4, 0x9, 0x10, 0x7, 0x8000000000000000, 0x77, 0xffffffffffdf9867, 0x3, 0x9, 0x5, 0x40000], 0x0, 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x7, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x1200}], 0x400000000000172, 0x4000000) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000440)={&(0x7f0000000340)=""/216, 0x205000, 0x0, 0x1, 0x2}, 0x20) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040)) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000001840), 0x4) ptrace(0x19, r8) 15.121911022s ago: executing program 0 (id=231): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x143142, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa600, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r9, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000001680)=""/4104, 0x1008}], 0x2}}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) write$tun(r7, &(0x7f0000000b40)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}, {[@timestamp={0x44, 0x4, 0xbb, 0x0, 0x7}]}}, {0x1234, 0x4e20, 0x8}}}, 0x2a) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0x200b2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 3.748293624s ago: executing program 4 (id=296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x150, r1, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x28}, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d377d6188b2641ff172db9370544b8ce5de211c7d4b76fa2"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8c91fca0fc5ea79473988bfbd36d4e7ddf6bc09057b70a1c"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x150}, 0x1, 0x0, 0x0, 0x810}, 0x24040) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffff000, 0x29}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x56, 0x8, 0x4, 0x2]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc048811}, 0x4000000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r2, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x8, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4008811}, 0x20000000) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000600)={r0, &(0x7f0000000500)=')\x00', 0x200, &(0x7f0000000540)={@align=0x7fffffffffffffff, {0xffff, 0x9, 0xa, 0x7fff}}, 0x80, &(0x7f0000000580), &(0x7f00000005c0)=0x8}) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x128, r1, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x10c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc0}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x57}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x54a}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9516}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x31}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3800}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10001}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4080}, 0x800) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r5) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xae}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}]}, 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, r8, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000d40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b80)={0x16c, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x36}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x12}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f9c52237d1775a5b49a46de0406117ec615ad97ac7b398d6"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0a0de59331bdfaf4d34c23b36e339bb49116479c5ba175d2"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5d0684b83869939c81a47d13d57b2aad8d73f9ad5a4dbe82"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) sendmsg$BATADV_CMD_SET_VLAN(r7, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x24, r6, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000ec0)={0x120, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x1000, 0x69}}}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'netpci0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3561c2823bfed59873fb92d958ca0e39dfe17f2c683c5ec4"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c5e4046727d190d10fc0d11c3a58edececcdece35aec2427"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f8785d8edd2bf3af73686eea5f8d1583a2a479f8fa905f9e"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "17ec3784eddb57f647890aa1177add4827b068f2c6101204"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "027ffcabb32b5bc60d3abd4b1e039411181a06733f0e4e8e"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ca8ec6c77a9f9eb83c22237bf9d235f6025b6e6526e7ea6c"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x14042000}, 0x4) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r7) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x84, r11, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x32}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x635d}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000010) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001280), r3) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r12, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc4) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000001440)={&(0x7f0000001380), &(0x7f00000013c0)=""/81, 0x51}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)=0x0) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f00000014c0)={r13}) r14 = syz_open_dev$usbfs(&(0x7f0000001500), 0x6, 0x10000) ioctl$XFS_IOC_PATH_TO_HANDLE(r14, 0xc0385869, &(0x7f0000001640)={r14, &(0x7f0000001540)='/[][&\\\x00', 0x880, &(0x7f0000001580)={@_ha_fsid={[0x5, 0x7c9]}, {0x304, 0x9, 0x8, 0x3}}, 0xa9, &(0x7f00000015c0), &(0x7f0000001600)=0x5}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r15, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x20, 0x2, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0xa801}, 0x40000) 3.676865155s ago: executing program 4 (id=297): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000600)=@vmx={0x1, 0x300, 0x2080, {0x10000, 0xeeee0000, {}, 0x0, 0x20000009a6}, {"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", "d07ee59115bfee5345dc58b23cffc5c643e81123cf65a8d185a9e53e7f9d20a2020cabd00e6cd5420c4fc8fe61efbb8012fec281c1550aa7087060b41a484b5b682068eca9d6936960d6477a239fe120e7433936c058ffa20f15e2ed6c32ae4bd9de18fd5fe31f20ab85f2fb01b792873e66a5cf610bb34322c830d921ca201a82c1557b5a2d7ba0c22555f03c65cc8d2df42064f60eef20d09c493c84c11857ffa5eb8130764e6e21b41a0fb263aedfc3c9be3390087ef0222481b049f72a52ad49e908223a367b40d567a52fde9fc9cc245e733edfdd1b4442a55ed7fe18226e3f7fd28b8d5fd88907fca2350c968c2918f0fe093c91cba0b87bb954b3280a000023025602d77ef2605b9d2720c269744d29ef36a79f700c0eab33eec64c5b8341d3143cc0d382133e6961216b5802820929b94a7bcb1f581110df1b4c52293b478694f8d147476bb3bc5e5a5018481950c395d42b423899a7c4e06b6befa46e2a67a70194a2d2e80234385db03c4ba693c61b84ff80571643f204ae1c7d42f5461f209f7b559bbb5a0c45d5ead100f30f615dbbccb6139a4afe8fa59496b1aaed900299f1c335ab35ee56a333fa22455c05b1ebb1b9bc3b0ca1e02abe0732b24a4ef6f9310db4dcaf37382f4a69e02829eb46bcf9a8132906f7e5c46afbac699a9618130cb39489d3ae793d8fcc43213198bc2cbe8a0fcffd1b69450d61e9c8e9ce80c19218335c48788ddde3d97c694611c783125d96392ad0295bd9600076978c64ec511106f9422e019b08041a43ef0b8abaec4cef8b8041b773f57068a38690056837008cfe86c143b821ddd9e4d517a2f6ca2e21bbbc3b1f0ea5f6d855c37f8814f15a00df3031328c804e360ca966287cce40b4d57e533e575263d48759428ca6df4154f4699d8f41b8c8e076aa225e0c1c0f278e21463a205bfc0a334f3516eae2c5222f87b57ef5e424505b9993d24a8d225b89517ed3015d5a64950bd265412d07a397bd454698571ab002c9752f7d0c8959025065eba27ea44574379a6a387ef7344a90f828a08afe8c27032c8431d30f323b56e7cbe9edb3c9327a2cabc3ea0dceccf4ec25b2861d5f8940823b57def9c184083586c6534f3402ba8d9d6ba1cfff07fba22d24d40bca43c96c56489ea10500b32b7359c2c296181ac4d5f7872377c40a819a8093859a42fa02a0a4f4b2ce4f44d87cabdb2433dcbc530a03516856417d25b06c38952c80f5348c96bf2549c72c8bb4735f958bf7e02c7a67e530611f2d80d547810bae4f52799a9eb6be5da14693d9d7c84dc0b2bef18e11c87a6977a669608ae4f1d1367687cfbeaec2308d1f2b24a95d8b25e4fe6c7cd47fc5800cc59c2467c778de641662e9a83431b5c014ff3a8cb777b92b5847318a8a525e44d45058fb03db60112a4b35b4370e9cc8e142a216308d987eea38d7b91f29b26535792c28ee9e9f7beb3668b765ca388cd3269f6f017d169196f55eea8f16280ceee95eafb1990b2eaacdb6a36386936a02a70cc8baed1ed7f75df629f618de95ccf62ca5f27fef54a22a94d313f1688526f34a834f14472c5a2d5fe91d828fb228c142c3bda3a7463a528d34d37ac32fa27e9b47fc9d817d91fb2dcec4c5c051cc46cfa47ee94f7843cfb8faa99da3569095245cd88674e5503ff2921852bde363894bfab4a13195c960e75940ea3625b3c6780580bc4694b5fe9bc118afa261bf51b8a5f79397cf4b27e84a15339bfe5f04f477ca9b0038a6a309c9ea89261e5da441f35598ee644eb7544d99b1e07f8a0e71b4f70e0faf47413518795a3d247e5f37863a80e83111bc8265dc7ab304e3097a8a825334ab4e507895be0862f5d219bff68ab180c307c6726b74e9197972da8bdc53f70e43c91406349b97d124622b4896c7471421047c8eca382953347c98df1959bcb269814ded7ee1e1bd5d724ba5d0a1af9d87ae96853de2de0798e7ae879513f2a561d3d7be2e04d382bfd2d0a27052c3e14aeae844cb6fcac2737d3f9f916715026a3d19c7401d2162add82a16b8e172c96ee8f0e4e645e7a201bcdf34271ee87eede9d36439c1962bb44b6433b19bad3c3bc841955be66176ceec74c5173a838a77fcc58ece7a7653c87f344c758278eb53b24142bf87472a6cb1367b0940154aac55dcc81dc8032987e9ea9856a5c844853616ffe3daaae85d50a20994126065e79e8e91022a5c8678a10870410361b74a0e37f9acc773c876f50da6776d43dcd80b3850fcbdd22d03cacad58fb8b408388efec93d42385fb266044178235fc5fe59dc35aef3eb8e89ada9c0ceb8f9379d9fe9045248196e918411bba64eb740337c0c8015540bebf581465d382f1e214f2f8a7b21b4983d8567de985d5e709ad9a8e0113be44e5f8f6aa9e592115669a494d1eddb3186a688a122ad66cc289e249c47d90168d499cac3fea3f2cac52eb840760837b485c6ce32e6ab2c4e1d2bce37f5105a1da6b34215bc19440189fbce47b4bf386c1ecde35ea39024fcf75e3b92a4d45a12452b8df5fd302faa71ab130d3d350907ff28dc4d62f01912eb5cfa84d2d818937d0ba7af08470128a92fb10e86d8a636c65be67c967f3bdd039a5eed1700e335ed92261b3600fb0f5ba72a8f5f86eaad9d51b8fc3c7fcc9ec7645079c4164398805cde129e8b7bf90c91d7bbdc411228a7f072920f40ab43074558ce7b48f9ef77f5fe6e845dcf0d23b12f3d61ea6435bf16b886bc9fb0af755fa472929f5536aa4a643783dc2749c33e4ec3c0ebf1824fcebceee319d346f34f1569b04dba2284bbe06f6c81794a94b6e470260290fea50c0a3645989ed557feef306815b67bc18025df1a3182b44d805903f438e70ff4dd59cecca60e755b7297c665462c768a1942b447e76d2a244e17295e94e77176f79f32b4734081138cc64f27243c1a2ebe7a094bf81b74208184b3212b769d55531d898eda1ac80c02b4c9564c9f2fd7882b605a445c963f40115908fd07587c4feed6253ba295922495e24d9a6779a8f1ed80ddac801b329ddb5ff32f654cde6c6faf1f917a036937a5d936b2bde8c547362322044d51ba758834a786814aec35c72c5c4f28a49cdb663876f0e82e73024f183823a4f12898bf6a71ec7bbe599e36f2c03186e8187b37856060d4f5d598e72b80672b8eed4206569c2d593b37d9c6cb64eec7d783c3d506c0568c0b205aa548bcac773732b56f8a0910f6c8b6a5cf846e84db67465ed7c3a88909d5ea256300566dc8bcdb279a36eb028e0577f3eedc7f0ae6111cef1445e29f0bf0a92b7c6601e75aecad62a9f21e5e1a4d744b652d4c60b434b9220b7f8169df36d5c195ea6ded7eabed08f91305e9f0748ae9cd56ed50418dc6eab2bc6d153a3d61834f16b3739d93afa510f2ddd26d3f913b6ef9278cb4c81c5b470b1002b63ef31432ca969c27fa3f463b3f3824cabeccfb35c8493d3b4d4dcad1305f37e607359ad219e4598ba7713aa3ca89f0b4ff710b83acf64ac1306d21a450422cc8bc9d0e4526655359ba2c3967dc0b4f7853b83043f66b2bab33d34510829e951cd13036474b2934fbea89b30137f0258b4c22d9e061e76c5cec96d72801295e47a1121bdd526196ce9ea6942197ae990c59a3a71447192ab4bc0bf0904b83a52413c157625a5df9547bc7015f3b48729eb1fcb462c1fe9fbcb2ea9d921107d5dadbce9a2a7f5fce1502b5132500b86978d4132e903f907c62d91d85cf5f5a315f7b8dcd9e143e5b7a66dcdd1411515586b13401b6038af4f4b01f76f438171aec9bfd0b45baf14301d54aa00e6936869f0c92109ec1a509000000000000008f0da6d47a8e5e24d92e678f63572371f85486ee1dcc071df165f0695df15f8b60587765f4cd49819880a779a7290cbd65b8df57c3f2d1139e8fc8383d9aee5466fbb97d66a85c7ab7091fe00806f862a39a51d998c6efec7727d953fe4e72f218858c5e848456429aeda5e92c40480d9e84e87ee61ade1a82f8838fe1f28bd294af45b9a2fe12462c78dde15bec8723c74825d0d83e9d071f91d57ebe0ba2fc1e6e75d6ef6859289b22fe9d90819d1e99043a365c608dd6ce89c23f62f9772fe6ad59383e01b8bbba61e836d66e7ba91e1e246c9755f023f6b05c452fdcb167b7ebe5e0a113c8681397316761e66239911ba677baf7552090d316bd75cd05fb0caf235c523cf607157b7d4cde8b144d49df4f339a65411a92ee68a4f1c2ddf9fbc3d22ffb986059b3ed0d3f82501554919b37e66cbb5bd75401dfda96092d114bc259860438cfb79ea33607ca30798ddaefef2715a3d91946fc26f94bd269ba7567dcd9c50ad11ee96347bccba629a784c7b662873a866f73f1dda2aa2082ba26d270d6471236823dc05b788de80f94e5c294af129128d34cfb44105a8b40d4f8441c21a098eb04e48bca616dc6915b52fa6a9fb0ab5eef802fd3d8dcf182258567951be20a0ebf49116216432e91033f6085fbf72ed1d60717739f3499b52b6b684e0d42e33f736657a898cb3fa5da70e8710d35fb11e2996031a82cce1d55d8fa4bead1a35e458b8811fd7ad70c566146daf8d9ac29288ca45ab50f7779526be7741ad9f39daac4195fa13914b7151115b06d2d07dd1a4af6efe38a225f7f8b183a43797d5a1d7c046613d78b19bf9d2316fbcdfc935fc54477b095295553bb417e527e3814d165cdeb43c552f05b1f66d13aca2496327760c93b8a1427c2272c405d8b94f8eb275249a0947c332049ee0bad7136669c7df63dc120ea62c79d04a39db50af4d76e9dd5dcd74a77b8fcd1981b6f138a048970e94fe6c4082b49f7e397e0f9b9fc7368aebaf3ba0c051d08f6770e6ddca26f8eca0415552bbe7b1c41e1e87f52981f2de74bded1a1d5bc41e60d19e4e05de1db2e9700256741fd6e86028fd21aaae7d3978d09baa4ebdf9a39aee448d344f2e5c050fe3293c6c74a7cb16755554747b010f10bff9b6f02c82da4f78b5b5596aafa01b5027ccaad437c125390416f36f1df42ef52a1d5af117e7866cc9f61b950ce922e3a1a6ff586e14add3e14781116d643e74124e570392572393c56e78906a24cec1ef196ccd22a7e492084a04b8ca069b95d5e12ad19e76b4ced072ce0bff78d7fe3a3750fe541ed053fb3fe08f29a773cb68d2cb8418f1b3bd4949720ae4104ed20d9aa5d2541317367d02db5f60f6b8df2ff596bd166692cee510b59da757532d88ddf3e8944f01a63ca0657ed24ea5b8110cb53731c539e94633e41d71fa59919d96287a505e8c4e9ac3d9b5e9180b93b670e37aeeec29bdabaac747f8bdf2a5275b61cb8f2081c5655fb047e9036d2273d4674e0382c5d5ebb50448ac02b07d851d66f8836fec1ac3e42c5405adcecb31f50b20e6573dad067999b78f7351bea9e8ca6536fc304eede9cdb905c24f475141349a1b00ad68198ca88898f29afcfb63ebf63d7d037529cf8219dbdb85d01cf5fc3d4b045c9400f672a6deb1ff4d197a28b2a7304e751541a046bc4812ba2fa9e430c79a0b34ab764933148ed337d34dfabf055608109bfd85c739f9c2353f1137582bc73a8d4310cb8ca1dd192b9335ce4ffca52907f37f29fd50e96be21e33b5074f0e16d11a08b274150eb876024ae815e67f3c13c6a3f158c4fd7a26bb2f5d19a2f097235d2fc235f67bdc9b11ffeef3168eb360388749f2f8b91fc3249edc58a959577aa205a105af400"}}) 3.626888127s ago: executing program 4 (id=298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f00000000c0)) r5 = epoll_create1(0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000080)={0x0, 0x0}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = syz_kvm_setup_syzos_vm$x86(r11, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r12, &(0x7f0000000040)={0x0, &(0x7f0000000f40)=[@wrmsr={0x65, 0x20, {0x40000002}}], 0x20}) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x5, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r9, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r9, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000080)={0xe000202b}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r13 = dup3(r2, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r13, &(0x7f0000000300)={0x200f}) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000180)={0x80, 0x0, 0x7fff}) 3.236701967s ago: executing program 4 (id=300): mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x80000, &(0x7f0000000140)='{\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x1, &(0x7f0000000680)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000540)='H', 0x1, 0x2}]) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r8, r5) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000000600)=@vmx={0x1, 0x0, 0x2080, {0x10000, 0xeeee0000, {}, 0x0, 0x20000009a6}, {"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", "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"}}) 3.080411121s ago: executing program 4 (id=301): socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000110800", @ANYRES8=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 3.039384302s ago: executing program 4 (id=302): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7}]}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x109181, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x56, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.816801323s ago: executing program 3 (id=306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000600)=@vmx={0x1, 0x0, 0x466, {0x10000, 0xeeee0000, {}, 0x0, 0x20000009a6}, {"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", "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"}}) 1.575259079s ago: executing program 3 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb180000000000000029000000360000002b35d9"], 0x40}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x14}}, 0x4014) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000440)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000004c0)={r7, 0x2, r2, 0x5, 0x80000}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.288371387s ago: executing program 3 (id=311): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000009c0)='./file7\x00', 0x61c0, 0x700) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0x80000000, 0xbb, 0x9, 0x401, 0xbdf}, {0x40000000, 0x3, 0x8, 0x40, 0x4}]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) sendmmsg$unix(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}], 0x20}}], 0x2, 0x4000010) 1.15720831s ago: executing program 3 (id=312): socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000210800", @ANYRES8=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1.044792873s ago: executing program 3 (id=313): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="0f3235004000000f300f01c8130f01d9300d76c4020a1bf7b805000000b90000c0feb805000000b9019000000f01c13cae0a41d941d9000f320f30660fc775022e0fba600c9864660ffc76002f3166b85766baa00066ed00d0", 0x59}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, 0x10}) ioctl$KVM_RUN(r2, 0xae80, 0x9502000000000000) 938.354466ms ago: executing program 3 (id=315): r0 = landlock_create_ruleset(0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = accept4$inet(r2, 0x0, &(0x7f00000001c0), 0x80800) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), 0xffffffffffffffff) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000000)={0xb, 0x8ffcc}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) sendmmsg$inet(r3, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="aadadfe3f4ffb00562af70007ead78447e78f87c86ef6df4b1de2e3df63be6bd7f5480697243109d3a67b0cccb38a8699b7b8a356a1498ad4cb354a4f91e0b793ba882e9064595caa752ea49f8ef8224118f0a6ae083feeb180193904c89200c62a70e8f21c3fcbeda9d55bf472f07b962ec05938b4e8b9f9b7fbee2790f20d911e60125c25c2c2cfdd5a956c27fdabe5c67b88b9eec063c32bac5728dd786056921d73c772e", 0xa6}, {&(0x7f00000003c0)="84ed0097e254d6d1f4380b76d2d54f3a4676cca71682b81c58c6184e13ba802ddbfc8f877590bec490c270d6e649a094", 0x30}, {&(0x7f0000000400)="792117a8dab7023f17d63305b2cac122e044989ad7cf0714864b7193110d003921a57a594bf46ff287b1c0bce872d89b2bea81c3bf1b6d851770b4953400f673789ae3ebef8c6115a8b566e15b4f0528983bea07ca4f99818b27b436c4", 0x5d}], 0x3, &(0x7f00000004c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xc}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000580)="8673a71f83cf2d0621c7938a91cc9ace3de4c47738003ad96b1e1b365c0ab883f5ec83a027d9676d3ff02e60ea98c27b0098f38e7e82651d8f6f11ef1a760b5db3857c24701e93ddc75c1aaa9adfb780441e273161582f9ae40c24d16a444bb09cc9f4be735cccc1a8e4e638f6a54db556fefd6655f9575080fc51fb4c74a79afd0f72328a504760feb4855f", 0x8c}, {&(0x7f0000000640)}, {&(0x7f0000000740)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000b80)="5e67731a236c748ca18fb1b10b1a84afa620dcfb0a77246c4e89a68b3022f8ab8699fde410ec0da4e939de1d078cd1be1dcdf36f7fd85a42cd60f67a73e249a8", 0x40}, {&(0x7f0000000d00)="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", 0xfd}, {&(0x7f0000000e00)="bbbd576a1618daa85872886392d55df6e9519b25fbfb267a474f0aa2861d178252c2e193e8c11e0b7a031740ba0a1bad0d811a535ac7d889c5364e47d167def8242ae6680b6d5bb5761193f4edb76039addb5d4c50f4d9973bf2953bc5e0a703cdf774802b7ff388720ac2203c13bc5bd892ab76ea969ae5a26a0a698cfdaef0256fc2e0b943cc4fb7a85347ba5ab27d85e2f922baad9a206c542b95ae16bd834bd67bd5975015d7e6", 0xa9}], 0x9, &(0x7f0000000200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x18}}], 0x2, 0x40008c0) close_range(r1, 0xffffffffffffffff, 0x0) 596.705714ms ago: executing program 1 (id=319): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000280)={{r0, &(0x7f0000000000)='-\x00', 0x28400, &(0x7f0000000040)={@_ha_fsid={[0x4, 0x8]}, {0x3ff, 0xd4, 0x2, 0x2}}, 0x6, &(0x7f0000000080), &(0x7f0000000100)=0x10001}, {[0x7, 0x7, 0xa, 0xe55e]}, 0x3, 0x53, &(0x7f0000000200)=""/83}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x20, 0x1002, 0x80000000}}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz0\x00', {0x6, 0x7, 0x5, 0x7}, 0x40, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x19, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x8000007, 0x3, 0x10, 0x3, 0x5, 0x8da8, 0x2e, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x1, 0x8000006f, 0x8, 0x407, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x72, 0x5], [0xa, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x5, 0x4, 0xe, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x10400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x9, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x3, 0x4, 0x800, 0x0, 0x6, 0x97, 0xfffffff9, 0x2, 0x0, 0x1000002, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x662, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0x4, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x100009, 0x80, 0x5, 0x80000001, 0xffff0000, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x3, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0xfffffffe, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x1000, 0x8000, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x6, 0x5], [0x80108a, 0xffff, 0x3, 0x3, 0x88, 0x80000001, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x7ff, 0x7f, 0x5, 0x8, 0x4, 0x4, 0x5, 0x3, 0x4, 0xe43, 0x4, 0x3, 0x1, 0x200, 0x2851, 0x6, 0x20000001, 0x5, 0x5, 0xa80e, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x27d8, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x8, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x2, 0x101, 0xf, 0xf, 0xffff8001, 0x20006]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000300)=""/63, 0x3f}], 0x1) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15, 0x0, 0x5}, 0x18) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x801, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, 0x0) write(r2, &(0x7f0000000800)='0', 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="c4e1c173d500440f20c03505000000440f22c00f001b660f3881bad48d00000fc79c1909000000c744240004000000c744240208000000c7442406000000000f01142466bad004b805000000efb805000000b9090000000f01d966baf80cb8e0033384ef66bafc0cb0e6ee66ba2100b000ee", 0x72}], 0x1, 0x30, &(0x7f00000003c0)=[@cstype3={0x5, 0x8}, @cstype3={0x5, 0x6}], 0x2) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r6, 0x4068aea3, &(0x7f0000000180)={0x80, 0x0, 0x7fff}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) 479.519097ms ago: executing program 1 (id=320): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(r0, &(0x7f000000c380)='./file0\x00', 0x10943, 0x15) r2 = getpgid(0x0) ptrace$getenv(0x4201, r2, 0xac3e, &(0x7f0000000180)) fcntl$setstatus(r1, 0x4, 0x42000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0xa) sendmsg$802154_dgram(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14, &(0x7f0000000100)={&(0x7f00000000c0)="3c1b2b45c64512b26c196a9b506fda6ff80772ddc94904765e77735d7182a96e472627735035729a025e83e95d7dd4fc8510cc5663f6046f", 0x38}, 0x1, 0x0, 0x0, 0x4000801}, 0x8800) fcntl$setstatus(r3, 0x4, 0x2400) 462.988778ms ago: executing program 1 (id=321): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x6}, 0x5, 0x6, 0x0, 0x100, 0x8000000000000004, 0x4540008, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010030bd7400fddbdf251f0000002000018008000100", @ANYRES32=r6, @ANYBLOB="14000200776731"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000340)={'syztnl2\x00', r2, 0x10, 0x80, 0x5, 0x2, {{0x30, 0x4, 0x0, 0x5, 0xc0, 0x67, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @multicast2, {[@timestamp={0x44, 0x14, 0xcb, 0x0, 0x9, [0x4, 0x6, 0x6, 0x2]}, @timestamp_prespec={0x44, 0xc, 0x8e, 0x3, 0x0, [{@multicast1, 0x5}]}, @lsrr={0x83, 0x7, 0xbc, [@rand_addr=0x64010100]}, @cipso={0x86, 0xb, 0x1, [{0x5, 0x5, "2bb06d"}]}, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x52, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}]}, @cipso={0x86, 0x6a, 0x3, [{0x0, 0x7, "538129964f"}, {0x6, 0x10, "d5a6ed836a7b434439789a4117ff"}, {0x1, 0x6, "08938dad"}, {0x1, 0xf, "704332b1c60837c6ca01242653"}, {0x5, 0x9, "0382771ae20302"}, {0x3, 0x12, "9ce76d71449f176e4fa48e2abc045d62"}, {0x2, 0xf, "a3ba55710bb19b46bf57119b38"}, {0x0, 0xe, "068679da9d77ba27765d6c02"}]}]}}}}}) r11 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f00000000c0)={0x1d, r12}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1f0, r5, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000881}, 0x8841) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r15, 0x112, 0xd, &(0x7f0000000080)=0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x0, r2}) sendmmsg$inet(r1, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x0, 0x0, 0x7, {[@rr={0x7, 0x0, 0x20, [@multicast2, @empty, @private=0xa010100, @remote]}, @rr={0x7, 0x0, 0xae, [@dev={0xac, 0x14, 0x14, 0x19}, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x0, 0x90, 0x0, 0x8, [0x27b4, 0x7f, 0x2b, 0x8]}, @noop, @noop, @timestamp_addr={0x44, 0x0, 0x27, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x1}, {@loopback, 0x80}, {@loopback, 0xb}]}]}}}], 0x20}}], 0x1, 0x0) 400.82058ms ago: executing program 1 (id=322): socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d974050100000000080002400000002f0800", @ANYRES8=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 400.170989ms ago: executing program 1 (id=323): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0100001000130400000000fadbdf2564010100000000000000000000000000ac1414bb000000000000000000000000000000004e2400000200202006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d432000000e00000010000000000000000000000000000000000000000020000000000000005000000000000001000000000008000ffffffffffffffff0000000000000000070000000002000000000000000000000000000000000000000400000000000004000000000000000004000000000000f6000040000000000700000026bd7000000000000a00040910000000000000004c001200726663343391172863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060"], 0x13c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRES8=r1, @ANYRESDEC=r0, @ANYBLOB="1f67026f75705f69643d5140ee5cb9de998f8901235ba886a0065c0e8284", @ANYRESDEC=0x0]) chdir(&(0x7f0000000040)='./cgroup\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000001480)="e6", 0x1}], 0x1) recvmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) close(r2) r4 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) ioctl$HIDIOCGUSAGE(r4, 0x501c4814, &(0x7f0000000000)={0x2, 0x100, 0x3, 0x0, 0x8}) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80840, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000380)='g', 0x1, 0x8812, 0x0, 0x0) recvmmsg(r6, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1}, 0x3}], 0x2, 0x10122, 0x0) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000040)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$FUSE(r8, 0x0, 0x0) landlock_restrict_self(r7, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000c00000/0x400000)=nil) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 279.343632ms ago: executing program 1 (id=324): pipe2(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00@', 0x9) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0x2) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 33 (id=231): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x143142, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa600, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r9, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000001680)=""/4104, 0x1008}], 0x2}}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) write$tun(r7, &(0x7f0000000b40)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}, {[@timestamp={0x44, 0x4, 0xbb, 0x0, 0x7}]}}, {0x1234, 0x4e20, 0x8}}}, 0x2a) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0x200b2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31b, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): cess permissive=1 [ 21.926529][ T36] audit: type=1400 audit(1785845229.070:63): avc: denied { siginh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 29.515830][ T36] audit: type=1400 audit(1785845236.670:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.520241][ T286] cgroup: Unknown subsys name 'net' [ 29.538519][ T36] audit: type=1400 audit(1785845236.670:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.566024][ T36] audit: type=1400 audit(1785845236.700:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.566453][ T286] cgroup: Unknown subsys name 'devices' [ 29.697699][ T286] cgroup: Unknown subsys name 'hugetlb' [ 29.703332][ T286] cgroup: Unknown subsys name 'rlimit' [ 29.800811][ T36] audit: type=1400 audit(1785845236.950:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.824029][ T36] audit: type=1400 audit(1785845236.950:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.848841][ T36] audit: type=1400 audit(1785845236.950:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.902164][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.911074][ T36] audit: type=1400 audit(1785845237.070:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 29.936592][ T36] audit: type=1400 audit(1785845237.070:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.969489][ T36] audit: type=1400 audit(1785845237.120:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.995091][ T36] audit: type=1400 audit(1785845237.120:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.995745][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.846166][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.853250][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.875386][ T293] bridge_slave_0: entered allmulticast mode [ 30.881924][ T293] bridge_slave_0: entered promiscuous mode [ 30.891340][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.898459][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.905577][ T293] bridge_slave_1: entered allmulticast mode [ 30.911804][ T293] bridge_slave_1: entered promiscuous mode [ 31.003453][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.010571][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.017735][ T297] bridge_slave_0: entered allmulticast mode [ 31.023986][ T297] bridge_slave_0: entered promiscuous mode [ 31.030813][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.037913][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.044983][ T297] bridge_slave_1: entered allmulticast mode [ 31.051430][ T297] bridge_slave_1: entered promiscuous mode [ 31.111369][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.118481][ T299] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.125590][ T299] bridge_slave_0: entered allmulticast mode [ 31.131918][ T299] bridge_slave_0: entered promiscuous mode [ 31.149573][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.156687][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.163749][ T299] bridge_slave_1: entered allmulticast mode [ 31.170097][ T299] bridge_slave_1: entered promiscuous mode [ 31.215858][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.222935][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.230049][ T298] bridge_slave_0: entered allmulticast mode [ 31.236383][ T298] bridge_slave_0: entered promiscuous mode [ 31.251745][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.258838][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.265961][ T298] bridge_slave_1: entered allmulticast mode [ 31.272197][ T298] bridge_slave_1: entered promiscuous mode [ 31.302249][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.309337][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.316657][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.323695][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.392627][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.399718][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.407030][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.414080][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.438459][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.445548][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.452828][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.459899][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.477552][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.485746][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.492907][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.500620][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.508251][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.521062][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.528118][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.566685][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.573739][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.581544][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.588619][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.612306][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.619403][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.631336][ T293] veth0_vlan: entered promiscuous mode [ 31.640477][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.647556][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.672558][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.679675][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.692288][ T293] veth1_macvtap: entered promiscuous mode [ 31.700919][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.707991][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.748768][ T298] veth0_vlan: entered promiscuous mode [ 31.770903][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.774021][ T297] veth0_vlan: entered promiscuous mode [ 31.801040][ T298] veth1_macvtap: entered promiscuous mode [ 31.820177][ T297] veth1_macvtap: entered promiscuous mode [ 31.832504][ T299] veth0_vlan: entered promiscuous mode [ 31.868066][ T299] veth1_macvtap: entered promiscuous mode [ 31.901181][ T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.986598][ T317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 32.269556][ T348] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9'. [ 32.475422][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.565265][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.636957][ T10] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 32.647948][ T10] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 32.657801][ T10] usb 3-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid wMaxPacketSize 0 [ 32.668137][ T10] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 32.681330][ T10] usb 3-1: config 220 interface 0 has no altsetting 0 [ 32.688163][ T10] usb 3-1: config 220 interface 1 has no altsetting 0 [ 32.696506][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 32.705675][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.713728][ T10] usb 3-1: Product: syz [ 32.718019][ T10] usb 3-1: Manufacturer: syz [ 32.722689][ T10] usb 3-1: SerialNumber: syz [ 32.728773][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 32.737597][ T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.747817][ T310] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 32.757060][ T310] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 32.767976][ T310] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 32.781170][ T310] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 32.792200][ T310] usb 4-1: config 1 interface 1 has no altsetting 0 [ 32.801804][ T310] usb 4-1: string descriptor 0 read error: -22 [ 32.808065][ T310] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 32.817143][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.018167][ T354] tmpfs: Unknown parameter 'no' [ 33.315286][ T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.453205][ T10] usb 3-1: selecting invalid altsetting 0 [ 33.461030][ T10] usb 3-1: USB disconnect, device number 2 [ 33.479365][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.491218][ T65] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 33.502410][ T65] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 33.516433][ T65] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 33.525697][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.533722][ T65] usb 2-1: Product: syz [ 33.538017][ T65] usb 2-1: Manufacturer: syz [ 33.542649][ T65] usb 2-1: SerialNumber: syz [ 33.633236][ T350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.641980][ T350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.749650][ T356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.758498][ T356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.915393][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.094180][ T376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 34.167603][ T310] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 34.192688][ T310] usb 4-1: USB disconnect, device number 2 [ 34.226000][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 34.243910][ T386] netlink: 140 bytes leftover after parsing attributes in process `syz.2.21'. [ 34.255492][ T387] netlink: 140 bytes leftover after parsing attributes in process `syz.2.21'. [ 34.281114][ T389] overlay: Unknown parameter 'dont_measure' [ 34.288060][ T65] usb 2-1: USB disconnect, device number 2 [ 34.307091][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.349709][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.385328][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 34.391738][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.402859][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 34.412586][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.423028][ T10] usb 1-1: config 0 descriptor?? [ 34.429819][ T10] hub 1-1:0.0: USB hub found [ 34.535264][ T310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.629473][ T10] hub 1-1:0.0: 1 port detected [ 34.675252][ T65] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.685368][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 34.691874][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.703067][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.712877][ T310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.725746][ T310] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 34.734796][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.744129][ T310] usb 4-1: config 0 descriptor?? [ 34.815257][ T65] usb 2-1: device descriptor read/64, error -71 [ 34.952603][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 34.952622][ T36] audit: type=1400 audit(1785845242.100:136): avc: denied { mount } for pid=381 comm="syz.3.20" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 34.957567][ T382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.988869][ T382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.065254][ T65] usb 2-1: device descriptor read/64, error -71 [ 35.199398][ T310] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 35.209635][ T310] microsoft 0003:045E:07DA.0001: unsupported Resolution Multiplier 0 [ 35.219243][ T310] microsoft 0003:045E:07DA.0001: implement() called with n (152) > 32! (kworker/0:2) [ 35.305300][ T65] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 35.398724][ T310] microsoft 0003:045E:07DA.0001: unsupported Resolution Multiplier 0 [ 35.407240][ T310] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 35.415591][ T310] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 35.427101][ T310] microsoft 0003:045E:07DA.0001: no inputs found [ 35.433333][ T46] usb 1-1: USB disconnect, device number 2 [ 35.433557][ T310] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 35.444786][ T65] usb 2-1: device descriptor read/64, error -71 [ 35.602455][ T382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.611102][ T382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.619829][ T310] usb 4-1: USB disconnect, device number 3 [ 35.695274][ T65] usb 2-1: device descriptor read/64, error -71 [ 35.805364][ T65] usb usb2-port1: attempt power cycle [ 35.955474][ T36] audit: type=1400 audit(1785845243.110:137): avc: denied { create } for pid=400 comm="syz.0.26" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.976726][ T36] audit: type=1400 audit(1785845243.110:138): avc: denied { ioctl } for pid=400 comm="syz.0.26" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3638 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.007706][ T36] audit: type=1400 audit(1785845243.160:139): avc: denied { read } for pid=400 comm="syz.0.26" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 36.110154][ T36] audit: type=1400 audit(1785845243.260:141): avc: denied { write } for pid=408 comm="syz.0.28" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 36.143147][ T36] audit: type=1400 audit(1785845243.260:140): avc: denied { write } for pid=408 comm="syz.0.28" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 36.169312][ T65] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 36.177383][ T36] audit: type=1400 audit(1785845243.260:142): avc: denied { create } for pid=408 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.207220][ T36] audit: type=1400 audit(1785845243.260:143): avc: denied { setopt } for pid=408 comm="syz.0.28" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.237697][ T65] usb 2-1: device descriptor read/8, error -71 [ 36.249047][ T36] audit: type=1400 audit(1785845243.260:144): avc: denied { connect } for pid=408 comm="syz.0.28" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.284155][ T36] audit: type=1400 audit(1785845243.260:145): avc: denied { write } for pid=408 comm="syz.0.28" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.338290][ T426] EXT4-fs: dax option not supported [ 36.376429][ T65] usb 2-1: device descriptor read/8, error -71 [ 36.385267][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.385665][ T315] Bluetooth: hci0: command 0x1003 tx timeout [ 36.434944][ T436] netlink: 'syz.0.39': attribute type 1 has an invalid length. [ 36.436184][ T434] syz.2.38 uses obsolete (PF_INET,SOCK_PACKET) [ 36.442865][ T436] netlink: 60 bytes leftover after parsing attributes in process `syz.0.39'. [ 36.515832][ T444] ======================================================= [ 36.515832][ T444] WARNING: The mand mount option has been deprecated and [ 36.515832][ T444] and is ignored by this kernel. Remove the mand [ 36.515832][ T444] option from the mount to silence this warning. [ 36.515832][ T444] ======================================================= [ 36.615295][ T65] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.636307][ T65] usb 2-1: device descriptor read/8, error -71 [ 36.735290][ T397] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.766272][ T65] usb 2-1: device descriptor read/8, error -71 [ 36.785538][ T310] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.865835][ T397] usb 1-1: device descriptor read/64, error -71 [ 36.875476][ T65] usb usb2-port1: unable to enumerate USB device [ 36.935294][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 36.942089][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.952763][ T310] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 127, changing to 10 [ 36.965174][ T310] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 36.974968][ T310] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 36.986594][ T310] usb 3-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice= 0.40 [ 36.995806][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.003947][ T310] usb 3-1: Product: syz [ 37.008533][ T310] usb 3-1: Manufacturer: syz [ 37.013192][ T310] usb 3-1: SerialNumber: syz [ 37.091522][ T453] netlink: 'syz.3.46': attribute type 13 has an invalid length. [ 37.145328][ T397] usb 1-1: device descriptor read/64, error -71 [ 37.269927][ T310] usb 3-1: invalid MIDI out EP 0 [ 37.278295][ T310] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 37.288619][ T310] usb 3-1: USB disconnect, device number 3 [ 37.341551][ T384] udevd[384]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.385553][ T397] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.393578][ T464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.402952][ T464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.535293][ T397] usb 1-1: device descriptor read/64, error -71 [ 37.575304][ T65] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 37.736956][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 37.745128][ T65] usb 4-1: not running at top speed; connect to a high speed hub [ 37.753956][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.764101][ T65] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 37.774649][ T65] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 37.783878][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.787160][ T351] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 37.792156][ T65] usb 4-1: Product: syz [ 37.799984][ T397] usb 1-1: device descriptor read/64, error -71 [ 37.803783][ T65] usb 4-1: Manufacturer: syz [ 37.814622][ T65] usb 4-1: SerialNumber: syz [ 37.825823][ T467] SELinux: security_context_str_to_sid (sytem_uÝGйÿÿ) failed with errno=-22 [ 37.915363][ T397] usb usb1-port1: attempt power cycle [ 37.956390][ T351] usb 2-1: config 127 has an invalid interface number: 57 but max is 0 [ 37.964754][ T351] usb 2-1: config 127 has no interface number 0 [ 37.971086][ T351] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 999, setting to 64 [ 37.983648][ T351] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 37.993188][ T351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.001237][ T351] usb 2-1: Product: syz [ 38.005444][ T351] usb 2-1: Manufacturer: syz [ 38.010056][ T351] usb 2-1: SerialNumber: syz [ 38.026562][ T463] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 38.038704][ T65] usb 4-1: 0:2 : does not exist [ 38.051672][ T65] usb 4-1: USB disconnect, device number 4 [ 38.063122][ T324] udevd[324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.165270][ T310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 38.235982][ T351] asix 2-1:127.57: probe with driver asix failed with error -71 [ 38.245974][ T351] usb 2-1: USB disconnect, device number 7 [ 38.255373][ T397] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.276468][ T397] usb 1-1: device descriptor read/8, error -71 [ 38.315247][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 38.321535][ T310] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 38.329892][ T310] usb 3-1: config 0 has no interface number 0 [ 38.336071][ T310] usb 3-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 38.348341][ T310] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 38.357437][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.365482][ T310] usb 3-1: Product: syz [ 38.369650][ T310] usb 3-1: Manufacturer: syz [ 38.374236][ T310] usb 3-1: SerialNumber: syz [ 38.379615][ T310] usb 3-1: config 0 descriptor?? [ 38.385564][ T310] smsc95xx v2.0.0 [ 38.389221][ T310] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 38.399324][ T310] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 38.416550][ T397] usb 1-1: device descriptor read/8, error -71 [ 38.559934][ T472] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.589671][ T46] usb 3-1: USB disconnect, device number 4 [ 38.655240][ T397] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 38.696377][ T397] usb 1-1: device descriptor read/8, error -71 [ 38.836240][ T397] usb 1-1: device descriptor read/8, error -71 [ 38.918086][ T482] pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 conventional PCI endpoint [ 38.932175][ T482] pci 0000:00:04.0: BAR 0 [io 0xc040-0xc07f] [ 38.941116][ T482] pci 0000:00:04.0: BAR 1 [mem 0xfe801000-0xfe80107f] [ 38.955847][ T397] usb usb1-port1: unable to enumerate USB device [ 38.973944][ T482] pci 0000:00:04.0: BAR 1 [mem 0xc0000000-0xc000007f]: assigned [ 38.983019][ T482] pci 0000:00:04.0: BAR 0 [io 0xc040-0xc07f]: assigned [ 38.996051][ T482] virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver [ 39.113650][ T520] Zero length message leads to an empty skb [ 39.335282][ T399] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 39.485527][ T46] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.494118][ T399] usb 4-1: config 154 has an invalid interface number: 128 but max is 0 [ 39.502740][ T399] usb 4-1: config 154 has no interface number 0 [ 39.509368][ T399] usb 4-1: config 154 interface 128 has no altsetting 0 [ 39.518749][ T399] usb 4-1: string descriptor 0 read error: -22 [ 39.525090][ T399] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice=58.09 [ 39.534505][ T399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.547242][ T399] ums-datafab 4-1:154.128: USB Mass Storage device detected [ 39.577340][ T399] ums-sddr55 4-1:154.128: USB Mass Storage device detected [ 39.635272][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 39.641539][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.652464][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 39.661608][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.670449][ T46] usb 3-1: config 0 descriptor?? [ 39.676518][ T46] hub 3-1:0.0: USB hub found [ 39.748890][ T399] usb 4-1: USB disconnect, device number 5 [ 39.876590][ T46] hub 3-1:0.0: 1 port detected [ 40.484210][ T46] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 40.484257][ T351] usb 3-1: USB disconnect, device number 5 [ 52.690339][ T36] kauditd_printk_skb: 52 callbacks suppressed [ 52.690358][ T36] audit: type=1400 audit(1785845259.840:198): avc: granted { setsecparam } for pid=563 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 52.773447][ T36] audit: type=1400 audit(1785845259.920:199): avc: denied { ioctl } for pid=575 comm="syz.0.66" path="/dev/usbmon9" dev="devtmpfs" ino=118 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.803138][ T36] audit: type=1400 audit(1785845259.950:200): avc: denied { append } for pid=577 comm="syz.0.67" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 52.827189][ T36] audit: type=1400 audit(1785845259.950:201): avc: denied { ioctl } for pid=577 comm="syz.0.67" path="socket:[5114]" dev="sockfs" ino=5114 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.861223][ T36] audit: type=1400 audit(1785845259.960:202): avc: denied { append } for pid=577 comm="syz.0.67" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.884936][ T397] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 52.892387][ T351] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 53.045330][ T397] usb 4-1: Invalid ep0 maxpacket: 32 [ 53.053554][ T351] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 53.062718][ T351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.070771][ T351] usb 3-1: Product: syz [ 53.075031][ T351] usb 3-1: Manufacturer: syz [ 53.079669][ T351] usb 3-1: SerialNumber: syz [ 53.095282][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 53.175242][ T46] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 53.175242][ T397] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 53.247823][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.257045][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.265065][ T31] usb 2-1: Product: syz [ 53.269401][ T31] usb 2-1: Manufacturer: syz [ 53.274012][ T31] usb 2-1: SerialNumber: syz [ 53.325262][ T397] usb 4-1: Invalid ep0 maxpacket: 32 [ 53.330767][ T397] usb usb4-port1: attempt power cycle [ 53.346707][ T46] usb 1-1: config 1 has an invalid interface number: 29 but max is 2 [ 53.354866][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.365023][ T46] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 53.374028][ T46] usb 1-1: config 1 has no interface number 0 [ 53.381706][ T46] usb 1-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 53.390835][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.399059][ T46] usb 1-1: Product: syz [ 53.403262][ T46] usb 1-1: Manufacturer: syz [ 53.407933][ T46] usb 1-1: SerialNumber: syz [ 53.490805][ T567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.499443][ T567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.532113][ T351] rtl8150 3-1:1.0: couldn't reset the device [ 53.538259][ T351] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 53.547879][ T351] usb 3-1: USB disconnect, device number 6 [ 53.695255][ T397] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 53.715638][ T397] usb 4-1: Invalid ep0 maxpacket: 32 [ 53.845288][ T397] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 53.865624][ T397] usb 4-1: Invalid ep0 maxpacket: 32 [ 53.871073][ T397] usb usb4-port1: unable to enumerate USB device [ 53.884611][ T36] audit: type=1400 audit(1785845261.030:203): avc: denied { connect } for pid=580 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.029412][ T36] audit: type=1400 audit(1785845261.180:204): avc: denied { name_bind } for pid=585 comm="syz.2.69" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.050926][ T36] audit: type=1400 audit(1785845261.180:205): avc: denied { node_bind } for pid=585 comm="syz.2.69" saddr=::ffff:172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 54.073903][ T36] audit: type=1400 audit(1785845261.180:206): avc: denied { read write } for pid=585 comm="syz.2.69" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.097747][ T36] audit: type=1400 audit(1785845261.180:207): avc: denied { open } for pid=585 comm="syz.2.69" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.124719][ T589] input: syz0 as /devices/virtual/input/input5 [ 54.322820][ T31] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 54.335265][ T31] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 54.344941][ T31] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 54.535935][ T581] capability: warning: `syz.1.68' uses 32-bit capabilities (legacy support in use) [ 54.556242][ T581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.564923][ T581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.692660][ T31] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 54.725887][ T31] usb 2-1: USB disconnect, device number 8 [ 54.732528][ T31] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 55.319720][ T626] input: syz1 as /devices/virtual/input/input6 [ 55.605279][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 55.749883][ T632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 55.776529][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.785776][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.793868][ T31] usb 2-1: Product: syz [ 55.798480][ T31] usb 2-1: Manufacturer: syz [ 55.803200][ T31] usb 2-1: SerialNumber: syz [ 55.819920][ T46] usb 1-1: 1:1 : format type 0 is detected, processed as PCM [ 55.835288][ T46] usb 1-1: 1:1 : unsupported sample bitwidth 7 in 14 bytes [ 55.852951][ T46] usb 1-1: 29:2 : does not exist [ 55.868956][ T46] usb 1-1: USB disconnect, device number 7 [ 55.922530][ T569] udevd[569]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.29/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.585267][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 56.745238][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 56.753102][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.779582][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.791892][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 56.801470][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.814663][ T9] usb 4-1: config 0 descriptor?? [ 56.825929][ T9] hub 4-1:0.0: USB hub found [ 56.867809][ T31] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 56.874331][ T31] cdc_ncm 2-1:1.0: dwNtbInMaxSize=5 is too small. Using 2048 [ 56.882130][ T31] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 57.023357][ T9] hub 4-1:0.0: 1 port detected [ 57.089466][ T31] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 57.105312][ T31] usb 2-1: USB disconnect, device number 9 [ 57.121745][ T31] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 57.697044][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 57.697061][ T36] audit: type=1400 audit(1785845264.850:224): avc: denied { execute } for pid=685 comm="syz.1.86" name="file0" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.725150][ T686] process 'syz.1.86' launched './file0' with NULL argv: empty string added [ 57.734975][ T36] audit: type=1400 audit(1785845264.880:225): avc: denied { execute_no_trans } for pid=685 comm="syz.1.86" path="/16/file0" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.775255][ T36] audit: type=1400 audit(1785845264.920:226): avc: denied { create } for pid=687 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 57.807240][ T36] audit: type=1400 audit(1785845264.930:227): avc: denied { write } for pid=687 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 57.850289][ T690] netlink: 96 bytes leftover after parsing attributes in process `syz.1.88'. [ 57.879757][ T36] audit: type=1400 audit(1785845265.030:228): avc: denied { bind } for pid=695 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.900926][ T696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 57.912379][ T36] audit: type=1400 audit(1785845265.050:229): avc: denied { setopt } for pid=695 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.934583][ T696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 57.960944][ T36] audit: type=1400 audit(1785845265.080:230): avc: denied { getopt } for pid=695 comm="syz.1.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.994238][ T36] audit: type=1400 audit(1785845265.140:231): avc: denied { create } for pid=701 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.014619][ T36] audit: type=1400 audit(1785845265.140:232): avc: denied { ioctl } for pid=701 comm="syz.1.92" path="socket:[6636]" dev="sockfs" ino=6636 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.055852][ T705] incfs_lookup_dentry err:-13 [ 58.078182][ T9] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 58.084734][ T9] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 58.106503][ T9] usbhid 4-1:0.0: can't add hid device: -32 [ 58.112518][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 58.126817][ T36] audit: type=1400 audit(1785845265.280:233): avc: denied { mounton } for pid=707 comm="syz.1.94" path="/proc/64/net/pfkey" dev="proc" ino=4026532465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 58.225261][ T310] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 58.285915][ T645] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.396413][ T310] usb 1-1: config 0 interface 0 has no altsetting 0 [ 58.403204][ T310] usb 1-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 58.412548][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.420807][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 58.429296][ T310] usb 1-1: config 0 descriptor?? [ 58.616766][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 58.625586][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 58.638543][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.648034][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.656270][ T9] usb 2-1: Product: ÐŒ [ 58.660487][ T9] usb 2-1: Manufacturer: 霹梔⎗䵯Šⱽ氀Ҥ׶䈷顤륳푕䗒ባ薕絺麴ჽ낇ì¨ê³Œæ¶¿æš§é«–麧 [ 58.672256][ T9] usb 2-1: SerialNumber: 욀ì–閌쓙ã„臩ŻⳲ᭘瀊뭞æ·ì‘¼ï¹™åžè©æ‰µí‘ã–ç‚䡮꒠⮡㦎ä¯ä¿Žæº– [ 58.688703][ T712] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 58.902418][ T712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.912433][ T712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.923244][ T9] cdc_ncm 2-1:1.0: bind() failure [ 58.929814][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 58.937019][ T9] cdc_ncm 2-1:1.1: bind() failure [ 58.945539][ T9] usb 2-1: USB disconnect, device number 10 [ 59.108661][ T310] usb 1-1: string descriptor 0 read error: -71 [ 59.117784][ T310] uclogic 0003:5543:3031.0002: failed retrieving string descriptor #200: -71 [ 59.126715][ T310] uclogic 0003:5543:3031.0002: failed retrieving pen parameters: -71 [ 59.134827][ T310] uclogic 0003:5543:3031.0002: failed probing pen v2 parameters: -71 [ 59.147241][ T310] uclogic 0003:5543:3031.0002: failed probing parameters: -71 [ 59.154832][ T310] uclogic 0003:5543:3031.0002: probe with driver uclogic failed with error -71 [ 59.169147][ T310] usb 1-1: USB disconnect, device number 8 [ 59.451473][ T718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 59.475954][ T310] usb 4-1: USB disconnect, device number 10 [ 59.806024][ T756] syzkaller1: entered promiscuous mode [ 59.811799][ T756] syzkaller1: entered allmulticast mode [ 59.849891][ T756] overlay: Unknown parameter '·Cm aIôþøjPz&¸˜`WÛÆ"81A¤‹TñË«£ ïß&­3.ÂVªÕøÞŠV¤p{Îz¢’Û8*wLO —XšÂè…ËÈðÄã?Ÿ1ôû¥y`KBß®#”CêÌGò÷±é6õP¤'Îã¢46ÅQ¡K•ÖúléÑ\&²c³§·¨S½Ý{® »ÐÝ*£´ J' [ 59.957519][ T777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 60.003232][ T779] netlink: 'syz.3.112': attribute type 10 has an invalid length. [ 60.023003][ T779] netlink: 40 bytes leftover after parsing attributes in process `syz.3.112'. [ 60.032274][ T779] veth1: entered promiscuous mode [ 60.075755][ T785] fuse: Bad value for 'fd' [ 60.080328][ T784] netlink: 'syz.3.113': attribute type 21 has an invalid length. [ 60.125227][ T364] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 60.186035][ T789] netlink: 'syz.1.111': attribute type 1 has an invalid length. [ 60.247456][ T793] overlayfs: statfs failed on './file0' [ 60.260901][ T794] overlayfs: statfs failed on './file0' [ 60.286366][ T364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.307581][ T364] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 60.328080][ T364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.350835][ T364] usb 1-1: config 0 descriptor?? [ 60.413015][ T797] 9pnet_fd: Insufficient options for proto=fd [ 60.426029][ T797] netlink: 140 bytes leftover after parsing attributes in process `syz.3.116'. [ 60.565799][ T364] usbhid 1-1:0.0: can't add hid device: -71 [ 60.572403][ T364] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 60.593576][ T364] usb 1-1: USB disconnect, device number 9 [ 60.888056][ T800] netlink: 72 bytes leftover after parsing attributes in process `syz.1.117'. [ 60.897076][ T364] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 60.991162][ T804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'. [ 61.001071][ T804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 61.012149][ T804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.119'. [ 61.021604][ T804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'. [ 61.032014][ T804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.119'. [ 61.041611][ T804] netlink: 128 bytes leftover after parsing attributes in process `syz.3.119'. [ 61.056358][ T364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.079228][ T364] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 61.094850][ T364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.107074][ T364] usb 1-1: config 0 descriptor?? [ 61.165282][ T46] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 61.251853][ T815] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 61.290770][ T817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 61.325236][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 61.330705][ T820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.125'. [ 61.336816][ T364] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 61.356834][ T46] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.369067][ T820] SELinux: policydb magic number 0x72666c65 does not match expected magic number 0xf97cff8c [ 61.377275][ T364] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 61.385925][ T820] SELinux: failed to load policy [ 61.388697][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 61.415975][ T46] usb 2-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 61.435429][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.445207][ T364] usb 1-1: USB disconnect, device number 10 [ 61.445221][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 61.454257][ T46] usb 2-1: config 0 descriptor?? [ 61.523167][ T832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.129'. [ 61.745291][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 61.877467][ T46] hid (null): unknown global tag 0xc [ 61.885937][ T46] kye 0003:0458:500F.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 61.896876][ T46] kye 0003:0458:500F.0003: unknown global tag 0xc [ 61.903394][ T46] kye 0003:0458:500F.0003: item 0 0 1 12 parsing failed [ 61.910719][ T46] kye 0003:0458:500F.0003: parse failed [ 61.916350][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 61.916775][ T46] kye 0003:0458:500F.0003: probe with driver kye failed with error -22 [ 61.927712][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 61.946002][ T9] usb 4-1: config 1 has an invalid interface number: 242 but max is 2 [ 61.954223][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.964614][ T9] usb 4-1: config 1 has no interface number 2 [ 61.970933][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 61.981918][ T9] usb 4-1: config 1 interface 1 has no altsetting 0 [ 61.991054][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 62.001572][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.009919][ T9] usb 4-1: Product: syz [ 62.014136][ T9] usb 4-1: Manufacturer: syz [ 62.019048][ T9] usb 4-1: SerialNumber: syz [ 62.228240][ T9] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 62.236303][ T9] usb 4-1: 1:1 : unsupported format bits 0x2004 [ 62.242609][ T9] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 62.253030][ T9] usb 4-1: selecting invalid altsetting 0 [ 62.262466][ T9] usb 4-1: selecting invalid altsetting 0 [ 62.275315][ T9] usb 4-1: USB disconnect, device number 11 [ 63.185239][ T364] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 63.221962][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 63.221982][ T36] audit: type=1400 audit(2000000001.540:267): avc: denied { name_bind } for pid=867 comm="syz.0.140" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 63.345240][ T364] usb 4-1: Using ep0 maxpacket: 32 [ 63.351653][ T364] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 63.366035][ T364] usb 4-1: config 0 has no interface number 0 [ 63.377622][ T364] usb 4-1: config 0 interface 184 has no altsetting 0 [ 63.387533][ T364] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 63.399031][ T364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.412558][ T36] audit: type=1400 audit(2000000001.730:268): avc: denied { bind } for pid=871 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.415355][ T364] usb 4-1: Product: syz [ 63.436901][ T36] audit: type=1400 audit(2000000001.730:269): avc: denied { name_bind } for pid=871 comm="syz.0.141" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 63.459930][ T36] audit: type=1400 audit(2000000001.730:270): avc: denied { node_bind } for pid=871 comm="syz.0.141" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 63.467521][ T364] usb 4-1: Manufacturer: syz [ 63.485117][ T364] usb 4-1: SerialNumber: syz [ 63.494299][ T364] usb 4-1: config 0 descriptor?? [ 63.505823][ T364] smsc75xx v1.0.0 [ 63.675239][ T310] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 63.713938][ T364] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 63.735261][ T364] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 63.750114][ T364] usb 4-1: USB disconnect, device number 12 [ 63.826668][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 63.834855][ T310] usb 1-1: not running at top speed; connect to a high speed hub [ 63.845404][ T310] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 63.863680][ T310] usb 1-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 63.873060][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.892190][ T310] usb 1-1: Product: syz [ 63.896661][ T310] usb 1-1: Manufacturer: syz [ 63.901314][ T310] usb 1-1: SerialNumber: syz [ 63.933531][ T364] usb 2-1: USB disconnect, device number 11 [ 63.960121][ T36] audit: type=1400 audit(2000000002.280:271): avc: denied { bind } for pid=882 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 64.118380][ T310] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 64.130391][ T310] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 64.145282][ T310] usb 1-1: 2:1: All rates were zero [ 64.168815][ T310] usb 1-1: USB disconnect, device number 11 [ 64.315288][ T46] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 64.476542][ T46] usb 4-1: No LPM exit latency info found, disabling LPM. [ 64.487038][ T46] usb 4-1: string descriptor 0 read error: -22 [ 64.493288][ T46] usb 4-1: New USB device found, idVendor=0499, idProduct=5001, bcdDevice= 0.40 [ 64.502744][ T364] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 64.510415][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.528806][ T46] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 64.539119][ T570] udevd[570]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.661781][ T899] tmpfs: Unknown parameter 'nMn¯odes' [ 64.667390][ T364] usb 2-1: Using ep0 maxpacket: 16 [ 64.676798][ T364] usb 2-1: unable to get BOS descriptor or descriptor too short [ 64.686463][ T364] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 64.694532][ T364] usb 2-1: can't read configurations, error -61 [ 64.723400][ T46] usb 4-1: USB disconnect, device number 13 [ 64.825270][ T364] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 64.985264][ T352] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 64.992941][ T364] usb 2-1: Using ep0 maxpacket: 16 [ 64.999872][ T364] usb 2-1: unable to get BOS descriptor or descriptor too short [ 65.009095][ T364] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 65.016911][ T364] usb 2-1: can't read configurations, error -61 [ 65.023415][ T364] usb usb2-port1: attempt power cycle [ 65.145239][ T352] usb 1-1: Using ep0 maxpacket: 16 [ 65.151632][ T352] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 65.162835][ T352] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.174324][ T352] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.184339][ T352] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 65.197614][ T352] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 65.206875][ T352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.225509][ T352] usb 1-1: config 0 descriptor?? [ 65.262033][ T904] syzkaller1: entered promiscuous mode [ 65.267666][ T904] syzkaller1: entered allmulticast mode [ 65.365265][ T364] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 65.395584][ T364] usb 2-1: Using ep0 maxpacket: 16 [ 65.402343][ T364] usb 2-1: unable to get BOS descriptor or descriptor too short [ 65.411383][ T364] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 65.419193][ T364] usb 2-1: can't read configurations, error -61 [ 65.505277][ T310] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 65.555260][ T364] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 65.605307][ T364] usb 2-1: Using ep0 maxpacket: 16 [ 65.612186][ T364] usb 2-1: unable to get BOS descriptor or descriptor too short [ 65.626304][ T364] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 65.633932][ T364] usb 2-1: can't read configurations, error -61 [ 65.645242][ T352] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0004/input/input9 [ 65.657421][ T364] usb usb2-port1: unable to enumerate USB device [ 65.667302][ T352] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0004/input/input10 [ 65.685207][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 65.698735][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 65.711031][ T352] kye 0003:0458:5013.0004: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 65.712609][ T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.754056][ T310] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 65.774899][ T310] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 65.784055][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.792238][ T310] usb 4-1: Product: syz [ 65.796566][ T310] usb 4-1: Manufacturer: syz [ 65.801226][ T310] usb 4-1: SerialNumber: syz [ 65.866544][ T9] usb 1-1: USB disconnect, device number 12 [ 66.020836][ T310] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 66.030098][ T310] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 66.041659][ T310] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 66.049229][ T310] usb 4-1: 3:0: cannot get min/max values for control 11 (id 3) [ 66.065478][ T310] usb 4-1: USB disconnect, device number 14 [ 66.788198][ T928] __nla_validate_parse: 3 callbacks suppressed [ 66.788218][ T928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 66.819082][ T36] audit: type=1400 audit(2000000005.140:272): avc: denied { write } for pid=929 comm="syz.0.162" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.860138][ T36] audit: type=1400 audit(2000000005.140:273): avc: denied { open } for pid=929 comm="syz.0.162" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.884322][ T36] audit: type=1400 audit(2000000005.170:274): avc: denied { ioctl } for pid=929 comm="syz.0.162" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x127d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 66.927621][ T934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.164'. [ 67.043334][ T941] netlink: 104 bytes leftover after parsing attributes in process `syz.0.166'. [ 67.053084][ T36] audit: type=1400 audit(2000000005.370:275): avc: denied { mount } for pid=940 comm="syz.0.166" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 67.082963][ T36] audit: type=1400 audit(2000000005.370:276): avc: denied { search } for pid=940 comm="syz.0.166" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 67.256199][ T949] syzkaller1: entered promiscuous mode [ 67.261814][ T949] syzkaller1: entered allmulticast mode [ 67.264971][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 67.296064][ T951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.170'. [ 67.321604][ T953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'. [ 67.385906][ T961] capability: warning: `syz.0.175' uses deprecated v2 capabilities in a way that may be insecure [ 67.397896][ T961] tipc: Started in network mode [ 67.402896][ T961] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 67.412190][ T961] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 67.420564][ T961] tipc: Enabled bearer , priority 10 [ 67.426891][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 67.447671][ T9] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 67.464784][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.473874][ T9] usb 4-1: Product: syz [ 67.478243][ T9] usb 4-1: Manufacturer: syz [ 67.482867][ T9] usb 4-1: SerialNumber: syz [ 67.736505][ T364] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 67.816098][ T985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 67.875769][ T995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.884940][ T995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.894238][ T936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.903478][ T995] SELinux: truncated policydb string identifier [ 67.907613][ T364] usb 2-1: unable to get BOS descriptor or descriptor too short [ 67.911721][ T936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.925606][ T364] usb 2-1: not running at top speed; connect to a high speed hub [ 67.926400][ T995] SELinux: failed to load policy [ 67.934831][ T364] usb 2-1: config 9 has an invalid interface number: 142 but max is 0 [ 67.952760][ T364] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 67.953269][ T992] SELinux: truncated policydb string identifier [ 67.969558][ T364] usb 2-1: config 9 has no interface number 0 [ 67.971584][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 67.983446][ T9] usb 4-1: unit 3 not found! [ 67.995308][ T364] usb 2-1: config 9 interface 142 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 68.006143][ T995] input: syz1 as /devices/virtual/input/input11 [ 68.017244][ T995] input: failed to attach handler leds to device input11, error: -6 [ 68.027861][ T364] usb 2-1: config 9 interface 142 has no altsetting 0 [ 68.028427][ T9] usb 4-1: USB disconnect, device number 15 [ 68.047688][ T364] usb 2-1: New USB device found, idVendor=04fd, idProduct=0115, bcdDevice= 1.33 [ 68.057391][ T364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.064030][ T992] SELinux: failed to load policy [ 68.073365][ T364] usb 2-1: Product: syz [ 68.077962][ T364] usb 2-1: Manufacturer: syz [ 68.083625][ T364] usb 2-1: SerialNumber: syz [ 68.215268][ T352] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 68.329092][ T364] usb 2-1: USB disconnect, device number 16 [ 68.365259][ T352] usb 1-1: Using ep0 maxpacket: 16 [ 68.371698][ T352] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.382120][ T352] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.395430][ T352] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.404789][ T352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.405374][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 68.413055][ T352] usb 1-1: Product: syz [ 68.426765][ T352] usb 1-1: Manufacturer: syz [ 68.431457][ T352] usb 1-1: SerialNumber: syz [ 68.535258][ T364] tipc: Node number set to 1 [ 68.585231][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 68.598584][ T9] usb 4-1: too many endpoints for config 32 interface 0 altsetting 20: 254, using maximum allowed: 30 [ 68.609777][ T9] usb 4-1: config 32 interface 0 altsetting 20 endpoint 0x2 has an invalid bInterval 251, changing to 11 [ 68.621213][ T9] usb 4-1: config 32 interface 0 altsetting 20 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 68.634559][ T9] usb 4-1: config 32 interface 0 has no altsetting 0 [ 68.647211][ T352] usb 1-1: 0:2 : does not exist [ 68.652571][ T9] usb 4-1: New USB device found, idVendor=046e, idProduct=5578, bcdDevice= 0.00 [ 68.661733][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.665615][ T352] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 68.688785][ T352] usb 1-1: USB disconnect, device number 13 [ 68.697171][ T570] udevd[570]: setting owner of /dev/bus/usb/001/013 to uid=0, gid=0 failed: No such file or directory [ 68.714302][ T570] udevd[570]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.916818][ T9] usbhid 4-1:32.0: can't add hid device: -71 [ 68.922923][ T9] usbhid 4-1:32.0: probe with driver usbhid failed with error -71 [ 68.937870][ T9] usb 4-1: USB disconnect, device number 16 [ 68.949044][ T1010] Invalid argument reading file caps for ./file0 [ 69.285226][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 69.418522][ T760] bridge_slave_1: left allmulticast mode [ 69.424246][ T760] bridge_slave_1: left promiscuous mode [ 69.430861][ T760] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.439405][ T760] bridge_slave_0: left allmulticast mode [ 69.445098][ T760] bridge_slave_0: left promiscuous mode [ 69.450705][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 69.450721][ T36] audit: type=1400 audit(2000000007.770:293): avc: denied { mounton } for pid=1019 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 69.478276][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 69.478362][ T760] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.485669][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 17, changing to 7 [ 69.503085][ T9] usb 4-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice= 0.40 [ 69.512297][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.520765][ T9] usb 4-1: Product: syz [ 69.525057][ T9] usb 4-1: Manufacturer: syz [ 69.529820][ T9] usb 4-1: SerialNumber: syz [ 69.639201][ T760] veth1_macvtap: left promiscuous mode [ 69.699223][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.706529][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.713667][ T1019] bridge_slave_0: entered allmulticast mode [ 69.720572][ T1019] bridge_slave_0: entered promiscuous mode [ 69.727467][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.734646][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.742793][ T1019] bridge_slave_1: entered allmulticast mode [ 69.754760][ T1019] bridge_slave_1: entered promiscuous mode [ 69.764254][ T9] usb 4-1: USB disconnect, device number 17 [ 69.807019][ T570] udevd[570]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.825829][ T1024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.191'. [ 69.851224][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.858528][ T1019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.865871][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.872939][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.887525][ T36] audit: type=1400 audit(2000000008.210:294): avc: denied { ioctl } for pid=1025 comm="syz.1.192" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 69.921809][ T761] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.929608][ T761] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.939930][ T758] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.947049][ T758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.956355][ T758] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.963420][ T758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.990646][ T1019] veth0_vlan: entered promiscuous mode [ 70.002399][ T1019] veth1_macvtap: entered promiscuous mode [ 70.021162][ T36] audit: type=1400 audit(2000000008.340:295): avc: denied { mount } for pid=1019 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.159833][ T36] audit: type=1400 audit(2000000008.480:296): avc: denied { write } for pid=1031 comm="syz.0.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.179222][ T310] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 70.305360][ T352] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.315283][ T310] usb 2-1: device descriptor read/64, error -71 [ 70.455265][ T352] usb 5-1: Using ep0 maxpacket: 8 [ 70.460784][ T352] usb 5-1: too many configurations: 15, using maximum allowed: 8 [ 70.474505][ T352] usb 5-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 70.483610][ T352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.492512][ T352] usb 5-1: config 0 descriptor?? [ 70.498788][ T352] hub 5-1:0.0: Invalid hub with more than one config or interface [ 70.506875][ T352] hub 5-1:0.0: probe with driver hub failed with error -22 [ 70.525355][ T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 70.565342][ T310] usb 2-1: device descriptor read/64, error -71 [ 70.615354][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 70.676632][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.686843][ T9] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 70.697350][ T9] usb 4-1: New USB device found, idVendor=249c, idProduct=9001, bcdDevice= 0.40 [ 70.706675][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.713659][ T352] usb 5-1: USB disconnect, device number 2 [ 70.715273][ T9] usb 4-1: Product: syz [ 70.725885][ T9] usb 4-1: Manufacturer: syz [ 70.730848][ T9] usb 4-1: SerialNumber: syz [ 70.766423][ T31] usb 1-1: config index 0 descriptor too short (expected 45, got 28) [ 70.774654][ T31] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 70.781974][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 70.796820][ T31] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 70.806602][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.814625][ T31] usb 1-1: Product: syz [ 70.818932][ T31] usb 1-1: Manufacturer: syz [ 70.823588][ T31] usb 1-1: SerialNumber: syz [ 70.825516][ T310] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 70.836657][ T31] rtl8150 1-1:1.0: couldn't find required endpoints [ 70.843419][ T31] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 70.937891][ T1041] netlink: 32 bytes leftover after parsing attributes in process `syz.3.196'. [ 70.951093][ T9] usb 4-1: USB disconnect, device number 18 [ 70.975329][ T310] usb 2-1: device descriptor read/64, error -71 [ 71.036400][ T31] usb 1-1: USB disconnect, device number 14 [ 71.215260][ T310] usb 2-1: device descriptor read/64, error -71 [ 71.325694][ T310] usb usb2-port1: attempt power cycle [ 71.463824][ T1058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 71.487261][ T36] audit: type=1400 audit(2000000009.810:297): avc: denied { create } for pid=1059 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 71.566433][ T36] audit: type=1400 audit(2000000009.890:298): avc: denied { mounton } for pid=1075 comm="syz.0.204" path="/proc/213/task" dev="proc" ino=7948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 71.589709][ T36] audit: type=1400 audit(2000000009.910:299): avc: denied { associate } for pid=1077 comm="syz.0.204" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.610984][ T351] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 71.619083][ T36] audit: type=1400 audit(2000000009.930:300): avc: denied { write } for pid=1075 comm="syz.0.204" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 71.676759][ T310] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 71.696354][ T310] usb 2-1: device descriptor read/8, error -71 [ 71.787022][ T351] usb 5-1: unable to get BOS descriptor or descriptor too short [ 71.795152][ T351] usb 5-1: not running at top speed; connect to a high speed hub [ 71.803927][ T351] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 71.816523][ T351] usb 5-1: New USB device found, idVendor=0582, idProduct=009a, bcdDevice= 0.40 [ 71.825919][ T351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.834057][ T351] usb 5-1: Product: syz [ 71.838289][ T351] usb 5-1: Manufacturer: syz [ 71.842986][ T351] usb 5-1: SerialNumber: syz [ 71.847949][ T310] usb 2-1: device descriptor read/8, error -71 [ 71.855397][ T1056] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 71.895251][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 72.045229][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 72.051860][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 72.060405][ T31] usb 1-1: config 10 has an invalid interface number: 91 but max is 0 [ 72.068704][ T31] usb 1-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 72.079310][ T31] usb 1-1: config 10 has no interface number 0 [ 72.085929][ T31] usb 1-1: config 10 interface 91 has no altsetting 0 [ 72.093507][ T36] audit: type=1400 audit(2000000010.410:301): avc: denied { map } for pid=1055 comm="syz.4.199" path="socket:[7953]" dev="sockfs" ino=7953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.097266][ T1056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.119252][ T310] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 72.127719][ T1056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.135124][ T36] audit: type=1400 audit(2000000010.410:302): avc: denied { read } for pid=1055 comm="syz.4.199" path="socket:[7953]" dev="sockfs" ino=7953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.140627][ T31] usb 1-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 72.169907][ T310] usb 2-1: device descriptor read/8, error -71 [ 72.173036][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.186876][ T31] usb 1-1: Product: syz [ 72.189536][ T1056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.191070][ T31] usb 1-1: Manufacturer: syz [ 72.191091][ T31] usb 1-1: SerialNumber: syz [ 72.208934][ T1056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.224031][ T351] usb 5-1: MIDIStreaming interface descriptor not found [ 72.233774][ T351] usb 5-1: USB disconnect, device number 3 [ 72.244693][ T569] udevd[569]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.306352][ T310] usb 2-1: device descriptor read/8, error -71 [ 72.399417][ T31] usb 1-1: USB disconnect, device number 15 [ 72.415592][ T310] usb usb2-port1: unable to enumerate USB device [ 72.605378][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 72.735265][ T9] usb 4-1: device descriptor read/64, error -71 [ 72.758732][ T1085] netlink: 'syz.4.208': attribute type 22 has an invalid length. [ 72.767735][ T1085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'. [ 72.790670][ T1087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 72.912609][ T1091] netlink: 'syz.0.211': attribute type 33 has an invalid length. [ 72.975298][ T9] usb 4-1: device descriptor read/64, error -71 [ 73.045327][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 73.196935][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 73.205370][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.215587][ T31] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 73.224583][ T31] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 73.225367][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 73.235554][ T31] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 73.243670][ T396] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 73.256494][ T31] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 73.275334][ T31] usb 5-1: config 1 interface 1 has no altsetting 0 [ 73.283771][ T31] usb 5-1: string descriptor 0 read error: -22 [ 73.290020][ T31] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 73.299095][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.315274][ T310] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 73.385344][ T9] usb 4-1: device descriptor read/64, error -71 [ 73.405228][ T396] usb 1-1: Using ep0 maxpacket: 16 [ 73.411628][ T396] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 73.419893][ T396] usb 1-1: config 1 has no interface number 0 [ 73.426940][ T396] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 73.436905][ T396] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 73.447018][ T396] usb 1-1: config 1 interface 105 has no altsetting 0 [ 73.455397][ T396] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 73.464471][ T396] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 73.472684][ T396] usb 1-1: Product: syz [ 73.476940][ T396] usb 1-1: Manufacturer: syz [ 73.481723][ T396] usb 1-1: SerialNumber: syz [ 73.487534][ T310] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 73.498253][ T310] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 73.507515][ T310] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 73.507967][ T1101] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 73.518734][ T310] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid wMaxPacketSize 0 [ 73.531350][ T1101] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 73.536153][ T310] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 73.556577][ T310] usb 2-1: config 220 interface 0 has no altsetting 0 [ 73.563587][ T310] usb 2-1: config 220 interface 1 has no altsetting 0 [ 73.572173][ T310] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 73.581309][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.589547][ T310] usb 2-1: Product: syz [ 73.593776][ T310] usb 2-1: Manufacturer: syz [ 73.598456][ T310] usb 2-1: SerialNumber: syz [ 73.695283][ T9] usb 4-1: device descriptor read/64, error -71 [ 73.755302][ T31] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 73.805904][ T9] usb usb4-port1: attempt power cycle [ 73.812518][ T310] usb 2-1: selecting invalid altsetting 0 [ 73.820221][ T310] usb 2-1: USB disconnect, device number 21 [ 73.966047][ T1101] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 73.973501][ T1101] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 74.145806][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 74.166379][ T9] usb 4-1: device descriptor read/8, error -71 [ 74.296972][ T9] usb 4-1: device descriptor read/8, error -71 [ 74.384083][ T396] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 74.401964][ T1110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 74.535333][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 74.556687][ T9] usb 4-1: device descriptor read/8, error -71 [ 74.619761][ T396] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 74.632446][ T396] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8e:31:8f:f8:fc:55 [ 74.646362][ T396] usb 1-1: USB disconnect, device number 16 [ 74.652862][ T396] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 74.664065][ T310] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 74.686277][ T9] usb 4-1: device descriptor read/8, error -71 [ 74.692774][ T396] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 74.702194][ T396] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 74.711785][ T396] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 74.805362][ T9] usb usb4-port1: unable to enumerate USB device [ 74.815384][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 74.822123][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 74.832491][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.842925][ T310] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7 [ 74.854109][ T310] usb 2-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 74.865100][ T310] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 74.878722][ T310] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 74.889709][ T310] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 74.901077][ T310] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 74.910293][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.918392][ T310] usb 2-1: Product: syz [ 74.922682][ T310] usb 2-1: Manufacturer: syz [ 74.927381][ T310] usb 2-1: SerialNumber: syz [ 75.139333][ T310] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 75.152664][ T310] usb 2-1: USB disconnect, device number 22 [ 75.170372][ T570] udevd[570]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 75.438406][ T1146] tap0: tun_chr_ioctl cmd 1074025675 [ 75.448163][ T1146] tap0: persist enabled [ 75.455562][ T1146] tap0: tun_chr_ioctl cmd 1074025675 [ 75.465334][ T1146] tap0: persist enabled [ 75.627008][ T1149] Restarting kernel threads ... done. [ 75.662808][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 75.662827][ T36] audit: type=1400 audit(2000000013.980:307): avc: denied { read append } for pid=1152 comm="syz.1.223" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.712183][ T36] audit: type=1400 audit(2000000014.020:308): avc: denied { map } for pid=1152 comm="syz.1.223" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.745442][ T1153] netlink: 'syz.1.223': attribute type 10 has an invalid length. [ 75.753252][ T1153] netlink: 40 bytes leftover after parsing attributes in process `syz.1.223'. [ 75.765347][ T1153] veth1: entered promiscuous mode [ 75.831323][ T352] usb 5-1: USB disconnect, device number 4 [ 75.918693][ T36] audit: type=1400 audit(2000000014.240:309): avc: denied { connect } for pid=1161 comm="syz.3.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 75.984991][ T1164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 76.019788][ T396] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 76.089929][ T1170] cgroup: none used incorrectly [ 76.094982][ T1167] overlayfs: statfs failed on './file0' [ 76.185213][ T396] usb 2-1: Using ep0 maxpacket: 8 [ 76.196485][ T396] usb 2-1: unable to get BOS descriptor or descriptor too short [ 76.205711][ T396] usb 2-1: config 9 has an invalid interface number: 212 but max is 0 [ 76.213930][ T396] usb 2-1: config 9 has no interface number 0 [ 76.224025][ T396] usb 2-1: config 9 interface 212 has no altsetting 0 [ 76.248365][ T396] usb 2-1: New USB device found, idVendor=0499, idProduct=1036, bcdDevice=cc.d5 [ 76.257679][ T61] device offline error, dev sda, sector 1122614 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 76.268262][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2029 starting block 140326) [ 76.279997][ T310] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 76.287665][ T61] Buffer I/O error on device sda1, logical block 140288 [ 76.294643][ T61] Buffer I/O error on device sda1, logical block 140289 [ 76.301655][ T61] Buffer I/O error on device sda1, logical block 140290 [ 76.308786][ T61] Buffer I/O error on device sda1, logical block 140291 [ 76.315823][ T61] Buffer I/O error on device sda1, logical block 140292 [ 76.322973][ T61] device offline error, dev sda, sector 1163574 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 76.333606][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 145446) [ 76.345236][ T61] Buffer I/O error on device sda1, logical block 145408 [ 76.352249][ T61] device offline error, dev sda, sector 1164078 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 76.362850][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 145509) [ 76.374591][ T61] Buffer I/O error on device sda1, logical block 145471 [ 76.381709][ T61] device offline error, dev sda, sector 1171758 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 76.392459][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 146469) [ 76.404090][ T61] Buffer I/O error on device sda1, logical block 146431 [ 76.411153][ T61] device offline error, dev sda, sector 1212726 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 76.421776][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 151590) [ 76.433432][ T61] Buffer I/O error on device sda1, logical block 151552 [ 76.440488][ T61] device offline error, dev sda, sector 1213230 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 76.451092][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 151653) [ 76.462744][ T61] Buffer I/O error on device sda1, logical block 151615 [ 76.469833][ T61] device offline error, dev sda, sector 1220910 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 76.473592][ T761] device offline error, dev sda, sector 1257662 op 0x1:(WRITE) flags 0x0 phys_seg 8 prio class 2 [ 76.480398][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 152613) [ 76.480585][ T61] device offline error, dev sda, sector 1241286 op 0x1:(WRITE) flags 0x0 phys_seg 12 prio class 2 [ 76.509845][ T761] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2028 starting block 157207) [ 76.513241][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 155160) [ 76.536467][ T396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.537443][ T745] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2035, error -5) [ 76.544492][ T396] usb 2-1: Product: syz [ 76.544513][ T396] usb 2-1: Manufacturer: syz [ 76.566308][ T73] device offline error, dev sda, sector 1050278 op 0x1:(WRITE) flags 0x9800 phys_seg 18 prio class 2 [ 76.571681][ T36] audit: type=1400 audit(2000000014.880:310): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 76.590364][ T761] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 159269) [ 76.603588][ T396] usb 2-1: SerialNumber: syz [ 76.615314][ T36] audit: type=1400 audit(2000000014.880:311): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.645696][ T73] Aborting journal on device sda1-8. [ 76.655474][ T73] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 76.664749][ T745] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2028, error -5) [ 76.687773][ T73] JBD2: I/O error when updating journal superblock for sda1-8. [ 76.695586][ T36] audit: type=1400 audit(2000000014.880:312): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.718668][ T745] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2032, error -5) [ 76.731693][ T745] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2027, error -5) [ 76.744617][ T36] audit: type=1400 audit(2000000014.880:313): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.765860][ T1179] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 76.774386][ T1179] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 76.783234][ T36] audit: type=1400 audit(2000000014.880:314): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.804052][ T1179] Buffer I/O error on dev sda1, logical block 213, lost async page write [ 76.807333][ T310] usb 4-1: config 24 has too many interfaces: 158, using maximum allowed: 32 [ 76.813465][ T1179] Buffer I/O error on dev sda1, logical block 221, lost async page write [ 76.821592][ T310] usb 4-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 76.830405][ T36] audit: type=1400 audit(2000000014.880:315): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.857832][ T1152] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.1.223: Detected aborted journal [ 76.863795][ T1179] Buffer I/O error on dev sda1, logical block 223, lost async page write [ 76.882558][ T36] audit: type=1400 audit(2000000014.880:316): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.884762][ T310] usb 4-1: config 24 has 1 interface, different from the descriptor's value: 158 [ 76.905747][ T1152] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 76.922746][ T1179] Buffer I/O error on dev sda1, logical block 224, lost async page write [ 76.931580][ T1179] Buffer I/O error on dev sda1, logical block 248, lost async page write [ 76.940179][ T310] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 76.940526][ T1152] EXT4-fs (sda1): I/O error while writing superblock [ 76.949584][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.957056][ T1179] Buffer I/O error on dev sda1, logical block 250, lost async page write [ 76.964155][ T310] usb 4-1: Product: syz [ 76.973074][ T1152] EXT4-fs (sda1): Remounting filesystem read-only [ 76.989171][ T310] usb 4-1: Manufacturer: syz [ 76.993852][ T310] usb 4-1: SerialNumber: syz [ 77.078411][ T1179] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 77.113485][ T396] snd-usb-audio 2-1:9.212: probe with driver snd-usb-audio failed with error -2 [ 77.137086][ T396] usb 2-1: USB disconnect, device number 23 [ 77.160920][ T570] udevd[570]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:9.212/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.237088][ T310] usb 4-1: 0:1 : does not exist [ 77.242184][ T310] usb 4-1: unit 80 not found! [ 77.249727][ T310] usb 4-1: USB disconnect, device number 23 [ 77.575272][ T352] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.725214][ T352] usb 5-1: Using ep0 maxpacket: 16 [ 77.736146][ T352] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.773762][ T352] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.782767][ T1193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 77.793887][ T352] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 77.803246][ T352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.826163][ T352] usb 5-1: config 0 descriptor?? [ 78.029851][ T1199] x_tables: unsorted underflow at hook 2 [ 78.085218][ T310] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 78.240818][ T352] cypress 0003:04B4:07B1.0005: unknown main item tag 0x6 [ 78.255399][ T352] cypress 0003:04B4:07B1.0005: ignoring exceeding usage max [ 78.256692][ T310] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 78.276225][ T352] cypress 0003:04B4:07B1.0005: hidraw0: USB HID v0.05 Device [HID 04b4:07b1] on usb-dummy_hcd.4-1/input0 [ 78.289781][ T310] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 78.308173][ T1209] udevd[1209]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 78.319840][ T310] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 78.357717][ T310] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.366890][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 78.374934][ T310] usb 4-1: SerialNumber: syz [ 78.514500][ T396] usb 5-1: USB disconnect, device number 5 [ 79.094272][ T1214] netlink: 'syz.4.244': attribute type 16 has an invalid length. [ 79.102781][ T1214] netlink: 'syz.4.244': attribute type 3 has an invalid length. [ 79.113083][ T310] cdc_acm 4-1:1.0: skipping garbage [ 79.122545][ T1214] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.244'. [ 79.133877][ T310] usb 4-1: USB disconnect, device number 24 [ 79.161473][ T1219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.195227][ T1219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.205942][ T1219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.214878][ T1221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 79.224928][ T1219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.234422][ T1219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.261307][ T1219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.274705][ T1219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.284303][ T1219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.293373][ T1219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.306584][ T1219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.526786][ T396] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 79.686620][ T396] usb 5-1: unable to get BOS descriptor or descriptor too short [ 79.702800][ T396] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 154, changing to 7 [ 79.735602][ T396] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 79.756365][ T396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.764427][ T396] usb 5-1: Product: syz [ 79.788900][ T396] usb 5-1: Manufacturer: syz [ 79.800163][ T396] usb 5-1: SerialNumber: syz [ 79.829393][ T1232] Write-error on swap-device (8:0:795702) [ 79.835382][ T1232] Write-error on swap-device (8:0:795710) [ 79.841282][ T1232] Write-error on swap-device (8:0:795718) [ 79.847286][ T1232] Write-error on swap-device (8:0:795726) May 18 03:33:38 [ 79.853294][ T1232] Write-error on swap-device (8:0:795734) syzkaller kern.a[ 79.860750][ T1232] Write-error on swap-device (8:0:795742) lert kernel: [ [ 79.867931][ T1232] Write-error on swap-device (8:0:795750) 79.829393][ T12[ 79.874965][ T1232] Write-error on swap-device (8:0:795758) 32] Write-error [ 79.882288][ T1232] Write-error on swap-device (8:0:795766) on swap-device ([ 79.889512][ T1232] Write-error on swap-device (8:0:795774) 8:0:795702) May 18 03:33:38 syzkaller kern.alert kernel: [ 79.835382][ T1232] Write-error on swap-device (8:0:795710) May 18 03:33:38 syzkaller kern.alert kernel: [ 79.841282][ T1232] Write-error on swap-device (8:0:795718) May 18 03:33:38 syzkaller kern.alert kernel: [ 79.847286][ T1232] Write-error on swap-device (8:0:795726) May 18 03:33:38 syzkaller kern.alert kernel: [ 79.853294][ T1232] Write-error on swap-device (8:0:795734) May 18 03:33:38 syzkaller kern.alert kernel: [ 79.860750][ T1232] Write-error on swap-device (8:0:795742) May 18 03:33:38 syzkaller kern.alert kernel: [ 79.867931][ T1232] Write-error on swap-device (8:0:795750) May 18 03:33:38 syzkaller kern.alert kernel: [ 79.874965][ T1232] Write-error on swap-device (8:0:795758) May 18 03:33:38 syzkaller kern.alert kernel: [ 79.882288][ T1232] Write-error on swap-device (8:0:795766) May 18 03:33:38 syzkaller kern.alert kernel: [ 79.889512][ T1232] Write-error on swap-device (8:0:795774) [ 80.016138][ T396] usb 5-1: BAAD GENERIC IO: no channels? [ 80.030222][ T396] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 80.058538][ T396] usb 5-1: USB disconnect, device number 6 [ 80.069953][ T570] udevd[570]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.282524][ T761] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.362985][ T1248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 80.767387][ T1270] FAULT_INJECTION: forcing a failure. [ 80.767387][ T1270] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.780716][ T1270] CPU: 0 UID: 0 PID: 1270 Comm: syz.4.263 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 80.780755][ T1270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.780777][ T1270] Call Trace: [ 80.780785][ T1270] [ 80.780795][ T1270] __dump_stack+0x21/0x30 [ 80.780839][ T1270] dump_stack_lvl+0x140/0x1c0 [ 80.780872][ T1270] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.780906][ T1270] ? __kasan_check_write+0x18/0x20 [ 80.780929][ T1270] ? kvm_arch_vcpu_load+0x665/0x8d0 [ 80.780952][ T1270] dump_stack+0x19/0x20 [ 80.780978][ T1270] should_fail_ex+0x3c2/0x510 [ 80.781001][ T1270] should_fail+0xf/0x20 [ 80.781021][ T1270] should_fail_usercopy+0x1e/0x30 [ 80.781047][ T1270] _copy_from_user+0x20/0xa0 [ 80.781076][ T1270] kvm_arch_vcpu_ioctl+0xd38/0x3120 [ 80.781097][ T1270] ? avc_has_perm+0x155/0x240 [ 80.781121][ T1270] ? __cfi_avc_has_perm+0x10/0x10 [ 80.781143][ T1270] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 80.781166][ T1270] ? selinux_file_open+0x46c/0x630 [ 80.781187][ T1270] ? __cfi_selinux_file_open+0x10/0x10 [ 80.781215][ T1270] ? is_bpf_text_address+0x17b/0x1a0 [ 80.781251][ T1270] ? kernel_text_address+0xa9/0xe0 [ 80.781283][ T1270] ? __kernel_text_address+0x11/0x40 [ 80.781315][ T1270] ? __asan_set_shadow_00+0x12/0x20 [ 80.781348][ T1270] ? do_vfs_ioctl+0x182d/0x2010 [ 80.781378][ T1270] ? arch_stack_walk+0x10a/0x170 [ 80.781421][ T1270] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 80.781452][ T1270] ? _parse_integer_limit+0x195/0x1e0 [ 80.781478][ T1270] ? _parse_integer+0x2e/0x40 [ 80.781502][ T1270] ? kstrtoull+0x13b/0x1e0 [ 80.781525][ T1270] ? kstrtouint+0x78/0xf0 [ 80.781548][ T1270] ? ioctl_has_perm+0x1bc/0x500 [ 80.781571][ T1270] ? __asan_memcpy+0x5a/0x80 [ 80.781595][ T1270] ? ioctl_has_perm+0x408/0x500 [ 80.781619][ T1270] ? __cfi_mutex_lock_killable+0x10/0x10 [ 80.781658][ T1270] ? proc_fail_nth_write+0x184/0x220 [ 80.781693][ T1270] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 80.781736][ T1270] kvm_vcpu_ioctl+0x7da/0x1000 [ 80.781761][ T1270] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 80.781784][ T1270] ? __cfi_vfs_write+0x10/0x10 [ 80.781808][ T1270] ? __kasan_check_write+0x18/0x20 [ 80.781832][ T1270] ? mutex_unlock+0x90/0x240 [ 80.781863][ T1270] ? __cfi_mutex_unlock+0x10/0x10 [ 80.781898][ T1270] ? bpf_lsm_file_ioctl+0xd/0x20 [ 80.781928][ T1270] ? security_file_ioctl+0x3e/0x110 [ 80.781963][ T1270] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 80.781986][ T1270] __se_sys_ioctl+0x132/0x1b0 [ 80.782014][ T1270] __x64_sys_ioctl+0x7f/0xa0 [ 80.782043][ T1270] x64_sys_call+0x1878/0x2ee0 [ 80.782065][ T1270] do_syscall_64+0x57/0xf0 [ 80.782090][ T1270] ? clear_bhb_loop+0x50/0xa0 [ 80.782122][ T1270] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.782152][ T1270] RIP: 0033:0x7efdecd9e019 [ 80.782172][ T1270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.782193][ T1270] RSP: 002b:00007efdedc8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.782219][ T1270] RAX: ffffffffffffffda RBX: 00007efded025fa0 RCX: 00007efdecd9e019 [ 80.782237][ T1270] RDX: 0000200000000600 RSI: 000000004080aebf RDI: 0000000000000005 [ 80.782253][ T1270] RBP: 00007efdedc8b090 R08: 0000000000000000 R09: 0000000000000000 [ 80.782269][ T1270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.782284][ T1270] R13: 00007efded026038 R14: 00007efded025fa0 R15: 00007ffea376d4c8 [ 80.782305][ T1270] [ 80.825407][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 81.265402][ T31] usb 2-1: device descriptor read/64, error -71 [ 81.505369][ T31] usb 2-1: device descriptor read/64, error -71 [ 81.530056][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 81.530075][ T36] audit: type=1400 audit(2000000019.850:328): avc: denied { accept } for pid=1277 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 81.755240][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 81.885265][ T31] usb 2-1: device descriptor read/64, error -71 [ 82.125313][ T31] usb 2-1: device descriptor read/64, error -71 [ 82.235353][ T31] usb usb2-port1: attempt power cycle [ 82.305246][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.311435][ T315] Bluetooth: hci0: command 0x1003 tx timeout [ 82.341147][ T1283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 82.575273][ T31] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 82.590595][ T1292] FAULT_INJECTION: forcing a failure. [ 82.590595][ T1292] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 82.604603][ T1292] CPU: 0 UID: 0 PID: 1292 Comm: syz.4.272 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 82.604641][ T1292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.604656][ T1292] Call Trace: [ 82.604664][ T1292] [ 82.604673][ T1292] __dump_stack+0x21/0x30 [ 82.604710][ T1292] dump_stack_lvl+0x140/0x1c0 [ 82.604743][ T1292] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.604777][ T1292] ? is_bpf_text_address+0x17b/0x1a0 [ 82.604813][ T1292] dump_stack+0x19/0x20 [ 82.604844][ T1292] should_fail_ex+0x3c2/0x510 [ 82.604872][ T1292] should_fail_alloc_page+0xec/0x110 [ 82.604903][ T1292] __alloc_pages_noprof+0x1c0/0x7e0 [ 82.604937][ T1292] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 82.604971][ T1292] ? stack_trace_save+0xaa/0x100 [ 82.605002][ T1292] alloc_vmcs_cpu+0x33/0x190 [ 82.605028][ T1292] alloc_loaded_vmcs+0x47/0x4a0 [ 82.605055][ T1292] enter_vmx_operation+0x35/0x680 [ 82.605076][ T1292] ? free_nested+0x210/0x7b0 [ 82.605116][ T1292] vmx_set_nested_state+0x4c0/0x1380 [ 82.605152][ T1292] kvm_arch_vcpu_ioctl+0x22ca/0x3120 [ 82.605179][ T1292] ? __cfi_avc_has_perm+0x10/0x10 [ 82.605206][ T1292] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 82.605232][ T1292] ? selinux_file_open+0x46c/0x630 [ 82.605255][ T1292] ? __cfi_selinux_file_open+0x10/0x10 [ 82.605284][ T1292] ? is_bpf_text_address+0x17b/0x1a0 [ 82.605319][ T1292] ? kernel_text_address+0xa9/0xe0 [ 82.605351][ T1292] ? __kernel_text_address+0x11/0x40 [ 82.605383][ T1292] ? __asan_set_shadow_00+0x12/0x20 [ 82.605417][ T1292] ? do_vfs_ioctl+0x182d/0x2010 [ 82.605444][ T1292] ? arch_stack_walk+0x10a/0x170 [ 82.605467][ T1292] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 82.605497][ T1292] ? _parse_integer_limit+0x195/0x1e0 [ 82.605523][ T1292] ? _parse_integer+0x2e/0x40 [ 82.605546][ T1292] ? kstrtoull+0x13b/0x1e0 [ 82.605570][ T1292] ? kstrtouint+0x78/0xf0 [ 82.605592][ T1292] ? ioctl_has_perm+0x1bc/0x500 [ 82.605616][ T1292] ? __asan_memcpy+0x5a/0x80 [ 82.605639][ T1292] ? ioctl_has_perm+0x408/0x500 [ 82.605664][ T1292] ? __cfi_mutex_lock_killable+0x10/0x10 [ 82.605698][ T1292] ? proc_fail_nth_write+0x184/0x220 [ 82.605732][ T1292] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 82.605766][ T1292] kvm_vcpu_ioctl+0x7da/0x1000 [ 82.605790][ T1292] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 82.605814][ T1292] ? __cfi_vfs_write+0x10/0x10 [ 82.605838][ T1292] ? __kasan_check_write+0x18/0x20 [ 82.605861][ T1292] ? mutex_unlock+0x90/0x240 [ 82.605893][ T1292] ? __cfi_mutex_unlock+0x10/0x10 [ 82.605927][ T1292] ? bpf_lsm_file_ioctl+0xd/0x20 [ 82.605958][ T1292] ? security_file_ioctl+0x3e/0x110 [ 82.605993][ T1292] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 82.606015][ T1292] __se_sys_ioctl+0x132/0x1b0 [ 82.606044][ T1292] __x64_sys_ioctl+0x7f/0xa0 [ 82.606073][ T1292] x64_sys_call+0x1878/0x2ee0 [ 82.606104][ T1292] do_syscall_64+0x57/0xf0 [ 82.606130][ T1292] ? clear_bhb_loop+0x50/0xa0 [ 82.606161][ T1292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.606192][ T1292] RIP: 0033:0x7efdecd9e019 [ 82.606213][ T1292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.606233][ T1292] RSP: 002b:00007efdedc8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.606258][ T1292] RAX: ffffffffffffffda RBX: 00007efded025fa0 RCX: 00007efdecd9e019 [ 82.606277][ T1292] RDX: 0000200000000600 RSI: 000000004080aebf RDI: 0000000000000005 [ 82.606293][ T1292] RBP: 00007efdedc8b090 R08: 0000000000000000 R09: 0000000000000000 [ 82.606309][ T1292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.606323][ T1292] R13: 00007efded026038 R14: 00007efded025fa0 R15: 00007ffea376d4c8 [ 82.606344][ T1292] [ 82.616168][ T31] usb 2-1: device descriptor read/8, error -71 [ 82.688669][ T396] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 82.826684][ T31] usb 2-1: device descriptor read/8, error -71 [ 83.075272][ T31] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 83.096410][ T31] usb 2-1: device descriptor read/8, error -71 [ 83.136313][ T396] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 83.146299][ T396] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 83.159076][ T396] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 83.169456][ T396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.177548][ T396] usb 4-1: Product: syz [ 83.181790][ T396] usb 4-1: Manufacturer: syz [ 83.186497][ T396] usb 4-1: SerialNumber: syz [ 83.195480][ T396] usb 4-1: config 0 descriptor?? [ 83.201007][ T1287] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 83.210154][ T1287] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 83.239346][ T31] usb 2-1: device descriptor read/8, error -71 [ 83.355347][ T31] usb usb2-port1: unable to enumerate USB device [ 83.426466][ T1287] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 83.439243][ T1287] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 83.455216][ T36] audit: type=1400 audit(2000000021.770:329): avc: denied { setopt } for pid=1306 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.495207][ T36] audit: type=1400 audit(2000000021.800:330): avc: denied { write } for pid=1306 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.611785][ T761] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.666489][ T1311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 83.695241][ T36] audit: type=1400 audit(2000000022.010:331): avc: denied { connect } for pid=1312 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.729970][ T36] audit: type=1400 audit(2000000022.010:332): avc: denied { write } for pid=1312 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.879666][ T1287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.889469][ T1287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.900156][ T396] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 84.109254][ T36] audit: type=1400 audit(2000000022.430:333): avc: denied { bind } for pid=1286 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.385963][ T1318] FAULT_INJECTION: forcing a failure. [ 84.385963][ T1318] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 84.399452][ T1318] CPU: 0 UID: 0 PID: 1318 Comm: syz.1.282 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 84.399495][ T1318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.399510][ T1318] Call Trace: [ 84.399518][ T1318] [ 84.399527][ T1318] __dump_stack+0x21/0x30 [ 84.399564][ T1318] dump_stack_lvl+0x140/0x1c0 [ 84.399596][ T1318] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.399630][ T1318] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 84.399656][ T1318] dump_stack+0x19/0x20 [ 84.399687][ T1318] should_fail_ex+0x3c2/0x510 [ 84.399714][ T1318] should_fail_alloc_page+0xec/0x110 [ 84.399745][ T1318] __alloc_pages_noprof+0x1c0/0x7e0 [ 84.399780][ T1318] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 84.399812][ T1318] ? stack_trace_save+0xaa/0x100 [ 84.399841][ T1318] ? __asan_memset+0x39/0x50 [ 84.399864][ T1318] get_free_pages_noprof+0x14/0x40 [ 84.399899][ T1318] alloc_loaded_vmcs+0x1a6/0x4a0 [ 84.399927][ T1318] enter_vmx_operation+0x35/0x680 [ 84.399949][ T1318] ? free_nested+0x210/0x7b0 [ 84.399979][ T1318] vmx_set_nested_state+0x4c0/0x1380 [ 84.400024][ T1318] kvm_arch_vcpu_ioctl+0x22ca/0x3120 [ 84.400050][ T1318] ? __cfi_avc_has_perm+0x10/0x10 [ 84.400077][ T1318] ? __cfi_kvm_arch_vcpu_ioctl+0x10/0x10 [ 84.400111][ T1318] ? selinux_file_open+0x46c/0x630 [ 84.400140][ T1318] ? __cfi_selinux_file_open+0x10/0x10 [ 84.400168][ T1318] ? is_bpf_text_address+0x17b/0x1a0 [ 84.400204][ T1318] ? kernel_text_address+0xa9/0xe0 [ 84.400236][ T1318] ? __kernel_text_address+0x11/0x40 [ 84.400268][ T1318] ? __asan_set_shadow_00+0x12/0x20 [ 84.400301][ T1318] ? do_vfs_ioctl+0x182d/0x2010 [ 84.400330][ T1318] ? arch_stack_walk+0x10a/0x170 [ 84.400354][ T1318] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 84.400384][ T1318] ? _parse_integer_limit+0x195/0x1e0 [ 84.400410][ T1318] ? _parse_integer+0x2e/0x40 [ 84.400433][ T1318] ? kstrtoull+0x13b/0x1e0 [ 84.400456][ T1318] ? kstrtouint+0x78/0xf0 [ 84.400478][ T1318] ? ioctl_has_perm+0x1bc/0x500 [ 84.400502][ T1318] ? __asan_memcpy+0x5a/0x80 [ 84.400524][ T1318] ? ioctl_has_perm+0x408/0x500 [ 84.400549][ T1318] ? __cfi_mutex_lock_killable+0x10/0x10 [ 84.400583][ T1318] ? proc_fail_nth_write+0x184/0x220 [ 84.400616][ T1318] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 84.400651][ T1318] kvm_vcpu_ioctl+0x7da/0x1000 [ 84.400676][ T1318] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 84.400699][ T1318] ? __cfi_vfs_write+0x10/0x10 [ 84.400723][ T1318] ? __kasan_check_write+0x18/0x20 [ 84.400746][ T1318] ? mutex_unlock+0x90/0x240 [ 84.400777][ T1318] ? __cfi_mutex_unlock+0x10/0x10 [ 84.400811][ T1318] ? bpf_lsm_file_ioctl+0xd/0x20 [ 84.400841][ T1318] ? security_file_ioctl+0x3e/0x110 [ 84.400877][ T1318] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 84.400899][ T1318] __se_sys_ioctl+0x132/0x1b0 [ 84.400928][ T1318] __x64_sys_ioctl+0x7f/0xa0 [ 84.400956][ T1318] x64_sys_call+0x1878/0x2ee0 [ 84.400978][ T1318] do_syscall_64+0x57/0xf0 [ 84.401004][ T1318] ? clear_bhb_loop+0x50/0xa0 [ 84.401036][ T1318] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.401067][ T1318] RIP: 0033:0x7fb813b9e019 [ 84.401086][ T1318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.401114][ T1318] RSP: 002b:00007fb814a7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.401152][ T1318] RAX: ffffffffffffffda RBX: 00007fb813e25fa0 RCX: 00007fb813b9e019 [ 84.401171][ T1318] RDX: 0000200000000600 RSI: 000000004080aebf RDI: 0000000000000005 [ 84.401188][ T1318] RBP: 00007fb814a7a090 R08: 0000000000000000 R09: 0000000000000000 [ 84.401203][ T1318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.401218][ T1318] R13: 00007fb813e26038 R14: 00007fb813e25fa0 R15: 00007ffcb99839b8 [ 84.401239][ T1318] [ 84.780355][ T396] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 84.791122][ T396] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 6e:4c:bb:05:d3:9e [ 84.804803][ T396] usb 4-1: USB disconnect, device number 26 [ 84.811375][ T396] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 84.865896][ T110] udevd[110]: worker [570] terminated by signal 7 (Bus error) [ 84.873540][ T110] udevd[110]: worker [570] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 84.902211][ T110] udevd[110]: worker [999] terminated by signal 7 (Bus error) [ 84.909992][ T110] udevd[110]: worker [999] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 84.963937][ T110] udevd[110]: worker [569] terminated by signal 7 (Bus error) [ 84.975262][ T110] udevd[110]: worker [569] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 85.165254][ T397] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 85.315229][ T397] usb 2-1: Using ep0 maxpacket: 8 [ 85.322344][ T397] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 85.340930][ T397] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 85.349788][ T397] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 85.360703][ T397] usb 2-1: config 250 has no interface number 0 [ 85.371070][ T397] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 85.382969][ T397] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 85.394147][ T397] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 85.406094][ T397] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 85.416878][ T397] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 85.430980][ T397] usb 2-1: config 250 interface 228 has no altsetting 0 [ 85.439340][ T397] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 85.448702][ T397] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 85.457141][ T397] usb 2-1: Product: syz [ 85.461446][ T397] usb 2-1: SerialNumber: syz [ 85.472745][ T397] hub 2-1:250.228: bad descriptor, ignoring hub [ 85.479323][ T397] hub 2-1:250.228: probe with driver hub failed with error -5 [ 85.665237][ T315] Bluetooth: hci0: command 0x1003 tx timeout [ 85.671469][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.680709][ T397] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 28 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 85.681771][ T1330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.716905][ T1330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.725817][ T1330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.742253][ T1330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.015260][ T399] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 86.037312][ T352] usb 2-1: USB disconnect, device number 28 [ 86.047446][ T352] usblp0: removed [ 86.177284][ T399] usb 5-1: config index 0 descriptor too short (expected 45, got 26) [ 86.187540][ T399] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 86.198048][ T399] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.212712][ T399] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 86.225223][ T399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.233419][ T399] usb 5-1: Product: syz [ 86.237909][ T399] usb 5-1: Manufacturer: syz [ 86.242546][ T399] usb 5-1: SerialNumber: syz [ 86.251216][ T399] rtl8150 5-1:1.0: couldn't find required endpoints [ 86.258265][ T399] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 86.345296][ T352] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 86.508267][ T352] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.520098][ T352] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 86.539423][ T352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.551879][ T397] usb 5-1: USB disconnect, device number 7 [ 86.555804][ T352] usb 2-1: Product: syz [ 86.563575][ T352] usb 2-1: Manufacturer: syz [ 86.571263][ T352] usb 2-1: SerialNumber: syz [ 86.580509][ T352] usb 2-1: config 0 descriptor?? [ 86.588236][ T352] CoreChips 2-1:0.0: probe with driver CoreChips failed with error -22 [ 86.787096][ T397] usb 2-1: USB disconnect, device number 29 [ 87.079277][ T1341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.290'. [ 87.314561][ T1353] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 87.402962][ T36] audit: type=1400 audit(2000000025.720:334): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 87.589180][ T36] audit: type=1400 audit(2000000025.910:335): avc: denied { block_suspend } for pid=1362 comm="syz.4.298" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 87.745222][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.025239][ T352] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 88.118821][ T1372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 88.156308][ T36] audit: type=1326 audit(2000000026.480:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.4.302" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdecd9e019 code=0x0 [ 88.181299][ T352] usb 4-1: Using ep0 maxpacket: 32 [ 88.186550][ T36] audit: type=1326 audit(2000000026.500:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.4.302" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=273 compat=0 ip=0x7efdecd5a46c code=0x0 [ 88.212135][ T36] audit: type=1326 audit(2000000026.510:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1373 comm="syz.4.302" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdecd9e019 code=0x0 [ 88.212225][ T352] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.248220][ T352] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.266034][ T352] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 88.275144][ T352] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 88.283607][ T352] usb 4-1: Product: syz [ 88.287928][ T352] usb 4-1: Manufacturer: syz [ 88.296669][ T352] hub 4-1:4.0: USB hub found [ 88.497933][ T1367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.506945][ T1367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.518392][ T352] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 88.545936][ T352] usb 4-1: USB disconnect, device number 27 [ 89.182979][ T36] audit: type=1400 audit(2000000027.500:339): avc: denied { setattr } for pid=1382 comm="syz.3.305" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 89.505274][ T315] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 90.055705][ T1404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'. [ 90.276665][ T758] Bluetooth: hci0: Frame reassembly failed (-84) [ 90.552406][ T1426] input: syz0 as /devices/virtual/input/input13 [ 90.612832][ T36] audit: type=1400 audit(2000000028.930:340): avc: denied { write } for pid=1425 comm="syz.1.319" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.747368][ T1433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 91.145277][ T397] usb 2-1: new high-speed USB device number 30 using dummy_hcd SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 91.186228][ T36] audit: type=1400 audit(2000000029.510:341): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2664]" dev="pipefs" ino=2664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 91.325211][ T397] usb 2-1: Using ep0 maxpacket: 16 [ 91.457243][ T758] bridge_slave_1: left allmulticast mode [ 91.462992][ T758] bridge_slave_1: left promiscuous mode [ 91.479959][ T758] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.486904][ T397] usb 2-1: device descriptor read/all, error -71 [ 91.494490][ T758] bridge_slave_0: left allmulticast mode [ 91.500266][ T758] bridge_slave_0: left promiscuous mode [ 91.506118][ T758] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.607543][ T758] veth1_macvtap: left promiscuous mode [ 91.613094][ T758] veth0_vlan: left promiscuous mode [ 91.837045][ T758] bridge_slave_1: left allmulticast mode [ 91.842719][ T758] bridge_slave_1: left promiscuous mode [ 91.848402][ T758] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.855924][ T758] bridge_slave_0: left allmulticast mode [ 91.861566][ T758] bridge_slave_0: left promiscuous mode [ 91.867537][ T758] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.875350][ T758] bridge_slave_1: left allmulticast mode [ 91.881003][ T758] bridge_slave_1: left promiscuous mode [ 91.886851][ T758] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.894404][ T758] bridge_slave_0: left allmulticast mode [ 91.900312][ T758] bridge_slave_0: left promiscuous mode [ 91.905990][ T758] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.057786][ T758] tipc: Disabling bearer [ 92.063149][ T758] tipc: Left network mode [ 92.068807][ T758] veth1_macvtap: left promiscuous mode [ 92.074353][ T758] veth0_vlan: left promiscuous mode [ 92.079976][ T758] veth0_vlan: left promiscuous mode [ 92.305280][ T315] Bluetooth: hci0: command 0x1003 tx timeout [ 92.305280][ T1359] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.438075][ T758] bridge_slave_1: left allmulticast mode [ 92.443748][ T758] bridge_slave_1: left promiscuous mode [ 92.449435][ T758] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.457066][ T758] bridge_slave_0: left allmulticast mode [ 92.462728][ T758] bridge_slave_0: left promiscuous mode [ 92.468512][ T758] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.557657][ T758] veth1_macvtap: left promiscuous mode