last executing test programs: 1m54.040865393s ago: executing program 3 (id=161): io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfffffffffffffcf6, 0x80800}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x7}, 0x10}, 0x94) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000200)={{0x32, @broadcast, 0x4e24, 0x1, 'lc\x00', 0x1, 0x1, 0x20}, {@private=0xa010102, 0x4e20, 0x4, 0x3, 0x8, 0x7}}, 0x44) ioctl$CDROMREADRAW(r4, 0x5314, &(0x7f0000000580)={0xda, 0x3, 0x7, 0xc, 0x8, 0x2}) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m53.940817209s ago: executing program 3 (id=162): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x10b) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000200)='./file0/file1\x00') r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001500)={0x14, 0x2, 0x8, 0x801, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x9}}, 0x14}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a4001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000240)="b8910200000f23d80f21f835000000600f23f8262e0f2243b916090000b800000000ba000000000f300f783ff38055f7000f35b9800000c00f3235000100000f3026660f177120b8008800000f23d00f21f835300000000f23f80f21a2", 0x5d}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="f2000000080000005a000a"]) 1m53.938322635s ago: executing program 3 (id=163): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000440)={'geneve0\x00', &(0x7f0000000600)=@ethtool_dump={0x40, 0x8cc, 0x4}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000040), 0x4) ioctl$EXT4_IOC_MIGRATE(r1, 0xff07) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0xfbffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x17}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}]}, 0x3c}}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd0900008100000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000ac00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020100"/28], 0x50) ptrace$pokeuser(0x6, r0, 0x2, 0x10001) 1m53.78999578s ago: executing program 3 (id=164): r0 = syz_open_dev$audion(&(0x7f0000000100), 0x1, 0x40100) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x203e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xffffffffffffffda, 0x0, {0x80000, 0x0, 0x100, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2000, 0xfffffdfd, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x240080c1) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="000100000000000000040000000000000010000000001900002000000000000000401b0e6c6557b309c7d1b983f4e1b4380916cc07c9681e60b4fa13639a52679a368b2a27c69784d273c9af3965552c8ba3885f2b66179f4962d533867bdcb88fdb326389cab8ed83abf6f09eee7d56e7a241aa25bd0f630959f87eb94f3b"], 0x24, 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x200013, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000000d80)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x9, @empty, 0x1000}, 0x1c, 0x0}}], 0x1, 0x855) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f61640000000010000501e9e7010073797a32000000000900010073797a30000600000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0xd, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b3, 0x0, 0xd]}}, 0x5c) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_out(r9, 0x5460, 0x0) 1m53.676778905s ago: executing program 3 (id=166): ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000000)={0x21, &(0x7f00000001c0)=[{0x3c, '\x00', @buffer={"38912e14b96acbb942644cd1944750bafecc30dc6f1f636f0e7ece59a75ceef1", 0x20}, 0x9}]}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202", @ANYRESHEX], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000700)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m53.390782248s ago: executing program 3 (id=169): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0x40000) (async, rerun: 64) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async, rerun: 64) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='0x1d6b\x00', 0x7) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r6, &(0x7f0000000800)='0x0104\x00', 0x7) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) close(0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r7, &(0x7f0000001600)='2', 0x1) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x91b565aabd3fab5b) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r11], 0x54}}, 0x0) 1m53.332671953s ago: executing program 32 (id=169): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0x40000) (async, rerun: 64) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async, rerun: 64) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='0x1d6b\x00', 0x7) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r6, &(0x7f0000000800)='0x0104\x00', 0x7) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) close(0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/functions/uac1.usb0/c_ssize\x00', 0x1, 0x0) write(r7, &(0x7f0000001600)='2', 0x1) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x91b565aabd3fab5b) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r11], 0x54}}, 0x0) 1m31.29639345s ago: executing program 2 (id=484): shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, 0x0) shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x78000c00, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_URING_CMD=@ublk_cmd_sqes=@ublk_ctrl_cmd_sqes={0x2e, 0x22, 0x0, 0xffffffffffffffff, 0xc0207510, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x0, r4, '\x00', @any_cmd={0x8f2, 0xffff, 0x1000, 0x1, 0x6f}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) r5 = userfaultfd(0x1) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000, 0x1}) socketpair(0xb, 0x4, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0xbc}}}]}, 0x3c}}, 0x400c000) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42}, 0x2000401c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@broadcast, @remote, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$inet_mreqn(r5, 0x0, 0x76c9d7c08035deec, &(0x7f0000000300)={@remote, @private, 0x0}, &(0x7f0000000480)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000700)={&(0x7f0000000180), 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x11c, r7, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8010}, 0xc040) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1, 0x2) 1m31.215861963s ago: executing program 2 (id=485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a01010000000000000000010002000900010073797a300000000009000b"], 0x1a4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1m31.215345225s ago: executing program 2 (id=486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000160a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000280008"], 0x160}}, 0x0) 1m31.150400111s ago: executing program 2 (id=487): mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g_syz/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='syzkaller%d', 0xb) close(r0) symlink(&(0x7f0000000180)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', &(0x7f0000004200)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_syz/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00), 0x0) close(r1) nanosleep(0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004095}, 0x404c0c1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r3 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mlockall(0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x81, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 1m31.040160448s ago: executing program 2 (id=488): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x538}}, './file0\x00'}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) tee(r0, r0, 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9) r1 = syz_open_dev$vcsa(&(0x7f0000000280), 0x0, 0x101000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) futex(&(0x7f00000002c0)=0x2, 0x3, 0x0, &(0x7f0000000300), &(0x7f0000000340)=0x2, 0x1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x31, '\x00', 0x0, r0, 0x5, 0x4}, 0x50) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000400)="1ed9ed391a94eaf653f02aa1ad7e845481a11467be92acf29dcf8d418636e9143c3b78ff5a8316b6befac7eb3de0a7813c41e7bd771b83349d571378", 0x3c}, {&(0x7f0000000440)="e73c7dd632233053c42be024c2376a4a1aed1f8d2644badf888077d6eeaba98388c445958cf2ac864b7a56ad336daa1db5203bef4a73764b87f88785c06137c10a0ae0140664570a2f444c094f4e255da8d10f6d1109107e071cd29538373b00975d9bf6f2c8aa0a38d2", 0x6a}, {&(0x7f00000004c0)="0befc1b31fc8028feeff0077978844a2114c23b3aed69a0c028db1b4924d954df058a5b0d15e9154d43c1583c87db0adc4e952b609a032574f5918f99bb12dd2bd3c", 0x42}, {&(0x7f0000000540)="0fe7552044ecdd0e3fde993f53ce2b9b6819fe09f6ca973b8cd6ab6cb332c610c0804553b60193da69fcb322b57b2696d804f9cee9b8eb8697", 0x39}], 0x4) setxattr$trusted_overlay_nlink(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640)={'L-'}, 0x16, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000007c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/40, 0x28, 0x1, &(0x7f00000006c0)=""/201, 0xc9}, &(0x7f0000000800)=0x40) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000840)=0xe140c) move_pages(0x0, 0x2, &(0x7f0000000880)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f00000008c0)=[0xd34], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xf, 0x185002f8, 0x4, 0x27, 0x1008, 0xffffffffffffffff, 0xaacd, '\x00', 0x0, r1, 0x5, 0x0, 0x2}, 0x50) fsync(r2) r3 = syz_open_dev$vbi(&(0x7f00000009c0), 0x3, 0x2) ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f0000000ac0)={0x3, 0x24, &(0x7f0000000a00)="a41b41ab568bb5e843287c5ab8bc5d5233cb1a62a2024365a1f76ec3b13eb8a50656e421d5563f6851df142dbc583d65b6ce6b6d9a6eb859f8b7f2447dedb35fe2b5dfc1e87ea05e2101bc30b83b16146b50f844325eff5383232bd30502b9b3cea8a552852bd9ebd85770ba2e98dd436997cc51f62a24d14b072f79297cd0147a2b364478d697e98129", {0xb, 0x29f, 0x3436324d, 0x9, 0xfab, 0x1, 0x9c9b81ca1c1addb, 0x5}}) pivot_root(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x50, r5, 0x205839d006af3d88, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6}, {0x8, 0x15, 0x4}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000d80), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000dc0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r6, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8045}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00), &(0x7f0000000f40)={0x0, 0xfb, 0xe6, 0x1, 0xf, "3365303be484a5e39597d904fd8480a3", "1fd190744e32d96c5e0cd806240ac4a8bc7c92738624da1297069d6f2aa53af222d89d3515e59417c70d148dbc3b309692fa32c26aaf3a53e3b6923ead898d74fe8ffad25a07670b791512c556f0c204e29033fe24e0c4b84362262c89ca09c9ae3f4e6ffa5eb34d80c1a2f95536162ac6654d3ed8967993541963431ea54cfabe9d3de1824821ce6f7a21e6d8dfe2f0a776af2ed8fbbc15bf227731a0a9ab74bd96e8dbf471dff6ab05f402182cdc056f89aa75bccbb3dfda426e62b64b15a7bf15ac47df80cff7a4d7b08f83a7157699"}, 0xe6, 0x0) r8 = fsmount(r1, 0x1, 0x9) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) r9 = openat(r8, &(0x7f0000001040)='./file0\x00', 0x222000, 0x0) mq_timedsend(r9, &(0x7f0000001080)="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", 0x1000, 0x4, &(0x7f0000002080)) 1m30.805143707s ago: executing program 2 (id=490): mq_open(&(0x7f00000000c0)=',):\x00', 0x40, 0xf4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) (async) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000040)={0x4, @multicast2, 0x4e23, 0x1, 'sed\x00', 0x12, 0xfbe, 0x1d}, 0x2c) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) (async) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x3) getdents64(0xffffffffffffffff, 0x0, 0x0) (async) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002840)={'syztnl1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002840)={'syztnl1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat(r2, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x28c0, 0x12) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) write(r4, &(0x7f0000000200)='1', 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) r5 = fsopen(&(0x7f0000000280)='devpts\x00', 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000008) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000001c0)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "b97bf0ffcd13321ce26df79cc27dd53ca86b282bac73059fceeb82863914f749", "e6a6cc61d7756ece92ae74f551862233", {"966e19b8f47358d3692ac170d1d3bda1", "de50400a079b9e55ec52707fef81723f"}}}}}}}}, 0x8a) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) 1m30.748845232s ago: executing program 33 (id=490): mq_open(&(0x7f00000000c0)=',):\x00', 0x40, 0xf4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) (async) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000040)={0x4, @multicast2, 0x4e23, 0x1, 'sed\x00', 0x12, 0xfbe, 0x1d}, 0x2c) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) (async) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x3) getdents64(0xffffffffffffffff, 0x0, 0x0) (async) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002840)={'syztnl1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002840)={'syztnl1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat(r2, &(0x7f0000000180)='./proc/sys/net/ipv4/conf/lo/forwarding\x00', 0x28c0, 0x12) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) write(r4, &(0x7f0000000200)='1', 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) r5 = fsopen(&(0x7f0000000280)='devpts\x00', 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000008) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000001c0)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x4000, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x17c1, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "b97bf0ffcd13321ce26df79cc27dd53ca86b282bac73059fceeb82863914f749", "e6a6cc61d7756ece92ae74f551862233", {"966e19b8f47358d3692ac170d1d3bda1", "de50400a079b9e55ec52707fef81723f"}}}}}}}}, 0x8a) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) 18.248239967s ago: executing program 5 (id=1617): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000280)=[@acquire={0x400c6313, 0x1}], 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) timer_gettime(r0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) 16.730340972s ago: executing program 5 (id=1626): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x94, &(0x7f00000005c0)=@string={0x94, 0x3, "209ae590b6ec48f1422b3189a07a5626c79b79ec911fe44dc3c43e3a632bd4ff689026490094a736fe96d01e7e746b455778e3a4999b1bb7722be7da591a2b9daa1acabbd0e46e26df2fd2a776b91698dd45e1c2c5ed837948f3566f3a1463ad22add11f4ca186b467b27f325b85857c13ad7d1518b533469066682f341127c6b82ff268caa4beab6ebe252dc56c52f94638"}}, {0xda, &(0x7f0000000680)=@string={0xda, 0x3, "366e6f3cb8f2b79cf78a844c330a2b55a4ff6dd130e110aa59adaa1254bacddfab447c02d374d66d17d0f3aedeaecdb33a73ddfccc8aaf9e1985c869eaafaf5be0daa6698d8c120bbb340c3b8fdf5a5dd92bd48af4392191c2d06d3f445583f467720694d1225920980462c2218e9b7b67358144383acad47579f922f6778df91675b7e9c6c1b3d052b27231c857c39714c7ec6def944ce53613d43cf6483191443566c78cc8c16ec21e7a99ca7ee060989041f7d3e6e2727dab348903a262cd7952d1bab7e55c4e08b7e239413ab525da90124f5633104a"}}, {0x3c, &(0x7f0000000780)=@string={0x3c, 0x3, "133a9650f22ba77e2ed92f905fcb0e8a7c01c82e9930c5a07603d5043832e6283abb4d6877880349df8bf32f0cb9e3897a773679f78222cbd171"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xf4ff}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) socket(0x11, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'veth0_to_team\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x48}}, 0x20000000) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x60, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000d70c00", @ANYRES16=r1, @ANYBLOB="00082dbd7000fddbdf256700e5000c00990005000000260000001256fc8caa964e6a3178307929a8b15ae9ba62136babcffe31fc9c20e6da46c57cd9cfcbec0b8958520d8a6e38e791e80b2bf28be53de695f11e05f46077ef385717c95b0097f3edf4ca3ec4f4fffb7daa0be3b8610c67e813e4750d473847cfc4dc7179b636d2f0a8aacb1a4523b1c687dc1373ab2a0224da7d752ec014b38e187e853c513d81d408c6f27bab7000290704afc9fa2a00000000f0d9bea1e4f50f5af445f3a361"], 0x20}, 0x1, 0x0, 0x0, 0x48810}, 0x48010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000080)=r3, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000028100000086dd60164508001806fffe8000000000000000000000000000aafe8004000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078200004020000"], 0x0) 13.440190985s ago: executing program 5 (id=1636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x3) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x880) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f00000000c0)={0x2, 0xe, 0x11, 0x0, "579c26f7fa58d254ebce6eb2edd24ac194af3721e757596d9dcc5f3377a46716"}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.487904389s ago: executing program 5 (id=1647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r1, 0x4068aea3, &(0x7f0000000640)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="40a2e01d7efeb052b1e20000ffdbdf49d2000000", @ANYRESHEX=r2, @ANYBLOB="15c1dbc1e025a2cb1f01b9cce21ea981e9eeb6bcd69967d00efb98f8081d083b1377e6acc4953a4b0b50b93e5ad686187a43638b9161d899336be372b3636a6aa81cbf51005883e30bab584c9210ebb727f8f5f6596e76e9e1233bdb08a52713b9a8b56c04cbe22251d8a3300180194b1849ffe5362fa4684be599be89c18c3ac9c5858336e4f23e2c194fd5481a58b0fdd012ea0f3a4ee6c94ae61c23cb277bbe2c10b78de0ade7a08b55f95694780a6c2aab88ce036d0767220ebbd330d81831554f3f76e4d43820e9f6f434c0e061bc01211729fa9ef85c21b106ca25f7aa3cc528a939d163df520b8de2b3", @ANYRESOCT=r1], 0x40}}, 0x2006004) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000006c0)={0x2, 0xc7, "2ffecfecaaf8a1847adc6ff7df8f277b88fd6c75eaa1ec4d402d12c25fc0e4e6df6f33bbac5e2abfab2cf462f6f48a594b1bd1b42bd43f870d9e925175b0bc79b6a16ead526c69e2adfb2895bad4072e1f01fcfee9a7c211061fa60447de0428bb8b2f4ebadea0bc1f96ddb2336b570a0f245db9dfb6a2a8590cef74af05b03bbed19dab4fa68f75a75925cf30fe2af0199178bf03e4f64cd2245512a9c1e46638a3118cb6a2c07a18e5d46948e909acec6d88ab6a6518271d5980cef74a9b52e9c54b6612c5d5"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x4, 0x1c, 0x67, 0x0, 0x7, 0x1, 0x0, @rand_addr=0x64010100, @multicast1}, @address_reply={0x12, 0x0, 0x0, 0x5}}}}}, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000040)={0xf0, 0x258, 0xa0, 0x640, 0x0, 0x0, 0x10, 0x2, {0x1, 0x7fff, 0x1}, {0x3, 0x8f}, {0x1000, 0x3}, {0xf9a, 0x4}, 0x2, 0x2, 0x800, 0x1, 0x0, 0x6, 0x9, 0x4, 0x10, 0x1, 0x9, 0x1, 0x0, 0x100, 0x1, 0x8}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x40080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f00000005c0)={0x40000, 0x0, {[0x101, 0x9, 0xfffffffffffffff9, 0x9, 0x18000000000000, 0x10, 0x6, 0xb4]}}) 12.299048395s ago: executing program 5 (id=1650): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x7fff}) r1 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getflags(r2, 0x40a) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0xfac3, 0x2, 0x2, 0x2}]}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0x40104d05, &(0x7f0000000900)="00000fffff00000000000100") ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x1, 0x7, {{0xb, 0x4, 0x1, 0x35, 0x2c, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@lsrr={0x83, 0x17, 0x1f, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x44}, @empty, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x20, 0x14, 0x8, 0x5, {{0x3d, 0x4, 0x3, 0x11, 0xf4, 0x64, 0x0, 0xa, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@noop, @noop, @timestamp_prespec={0x44, 0x3c, 0x8f, 0x3, 0xe, [{@multicast1, 0x7fff}, {@loopback, 0x3}, {@loopback, 0x2}, {@local, 0x100}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x6ad}, {@remote, 0xfffffff9}, {@broadcast}]}, @timestamp_addr={0x44, 0xc, 0x48, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0xd}, 0xdaa}]}, @cipso={0x86, 0x33, 0x0, [{0x2, 0xf, "abdd5c149de575f8fbc3455ccd"}, {0x0, 0xe, "4f21dc87953d166128dd68fc"}, {0x7, 0x10, "991b148c575ffe8ad09807a9a90a"}]}, @timestamp_prespec={0x44, 0xc, 0x69, 0x3, 0x6, [{@rand_addr=0x64010101, 0x5}]}, @ssrr={0x89, 0x2b, 0x8, [@rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010101, @private=0xa010100, @multicast1]}, @lsrr={0x83, 0x2b, 0x10, [@loopback, @rand_addr=0x64010102, @multicast2, @remote, @local, @remote, @rand_addr=0x64010102, @multicast1, @broadcast, @loopback]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x12, 0x0, 0x70bd2b, 0x25dfdbfe, {0x18, 0x5, 0x7, 0xbb, {0x4e22, 0x4e24, [0x0, 0xfbc, 0x2, 0x3], [0x4, 0x5, 0x4, 0x749], r5, [0x3ff, 0x394]}, 0x3, 0xfffffff7}}, 0x4c}, 0x1, 0x0, 0x0, 0x410}, 0x4008881) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000004580)={0x0, 0x0, &(0x7f00000034c0), &(0x7f00000044c0), 0xcfd8, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0xce4, r0}, 0x38) 12.176905551s ago: executing program 5 (id=1653): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xc}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x1}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x3a1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5ff}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x351}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000001) (async) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000240)={0xffffffff, 0x80000, 0xffffffffffffffff}) read$nci(r4, &(0x7f0000000280)=""/61, 0x3d) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f00000002c0)=0x9) (async) ioctl$OCFS2_IOC_RESVSP64(r4, 0x4030582a, &(0x7f0000000300)={0x1, 0x2, 0x4ab0, 0xfffffffffffffffc, 0x4, 0x7}) (async) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000340)) (async) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000380)=""/204) (async) write$nci(r4, &(0x7f0000000480)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x1, 0x2, 0x4, 0xc}, 0x4) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r4) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x40080) (async) ioctl$int_in(r4, 0x5452, &(0x7f0000000600)=0x7) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x1, 0x8, 0x1, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000008}, 0x20008880) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000000740)={'erspan0\x00', 0x0, 0x40, 0x8, 0xffffff74, 0x2, {{0xa, 0x4, 0x0, 0x11, 0x28, 0x67, 0x0, 0x0, 0x4, 0x0, @remote, @broadcast, {[@end, @timestamp={0x44, 0x10, 0x7a, 0x0, 0x8, [0x4, 0x200000, 0x6]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000840)={'erspan0\x00', &(0x7f0000000800)={'gre0\x00', r6, 0x8000, 0x7, 0x7fffffff, 0x1, {{0x6, 0x4, 0x0, 0x1c, 0x18, 0x68, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@noop]}}}}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r8, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) syz_open_dev$sndmidi(&(0x7f00000009c0), 0xc0000000000000, 0x20000) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000a00)='net/route\x00') connect(r4, &(0x7f0000000a40)=@in6={0xa, 0x4e20, 0xc05, @local, 0x8}, 0x80) (async) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r9) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, r10, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x18, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x40) (async) ioctl$DVB_DVR_DMX_EXPBUF(r9, 0xc00c6f3e, &(0x7f0000000dc0)={0x4, 0x80000, r9}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={r11}, 0x4) 3.770189106s ago: executing program 0 (id=1752): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1000\n', 0x5) close(r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), r2) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, r4, 0x9, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0xecd1b6298f1309e7}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600af0900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/mpls/conf/lo/input\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='1\n', 0x2) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe0000010000000008000100000181000800040001000000"], 0x2c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a00010000000000000000001c00000000000000000000000800010000018100"], 0x24}}, 0x0) 3.7697544s ago: executing program 0 (id=1753): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2880, 0x100, &(0x7f00000000c0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_emit_ethernet(0x3e, &(0x7f0000000cc0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00083a00fe800000000000000000000000000000fe8000000000000000000000000000aa8000907800000000b866421b2bcd6cf448ca34ecfe2f44c7a1377517f59ab1caa6bb88004399ab541a067b604d03d7087b5031afc10411ade4ec56792b69d116ae531c9a5920f2b862ea7c009022a022009ba45c54bdd624f7a2838c7ca22f2c3afc3429371ab0d50bf5924880974012109347c47398ea515fe51b546605721935e957fd1e9e24aca7dfe7ba3ac6f4c3abd289ab50b9a2b824f2410d20000000000000"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000002c0)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x201}, 0x0, 0x0, 0x0) r3 = socket(0x2000000015, 0x80005, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xf4daaaba4d84d77b, 0x1}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74", 0xd}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r4 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg(r5, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000000700)=""/169, 0xa9}, {&(0x7f0000000880)=""/233, 0xe9}, {&(0x7f0000000a00)=""/119, 0x77}, {&(0x7f0000000a80)=""/101, 0x65}, {&(0x7f0000000b40)}], 0x6}, 0x54d}], 0x1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in, @in=@multicast2}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) 3.590156565s ago: executing program 0 (id=1754): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20020, &(0x7f0000000500)={[{@gid}]}) (fail_nth: 11) 3.589724198s ago: executing program 0 (id=1755): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r2, r1, 0x4, r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4620000000000000000000000002003e"], 0x146) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'bridge0\x00', {0x2}, 0xdd3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0xffd}}) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0x2000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000380)={{r5, 0x7, 0x5, 0x7, 0x3, 0x4, 0x9, 0x5, 0x4, 0x0, 0x5, 0x9, 0x0, 0x9, 0x8}}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d04, 0x0, 0x1}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) ppoll(&(0x7f0000000040)=[{r4, 0x20}, {r0, 0x13}], 0x2, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r9) sendmsg$NLBL_MGMT_C_VERSION(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="14000000300650598302a63dbc67db58dbe9f299af84eef01e0819373ee41dac2d0ac4c565a3e02424febbcb59970f190f8bd04b310b94a7f4384c687cd36c8e6c0e39a7b47e79d610e818ee70bd8cf1cc4d3c5a8a804d9aa67432b38dffcff27c0d7a3df6786bc0b27b908cb51f2d73af4649227f94082f93c3cc341bcd41e5b23c68577df0f4e196f8232331433ccc71afe783bec71834efe6f704bf8436012777a935f2ee3dbd0b4368a97b52977d29c00c9e5bf03fe418c1de7b9e", @ANYRES16=r10, @ANYBLOB="010027bd7000ffdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x40004) syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), 0xffffffffffffffff) 2.529249474s ago: executing program 0 (id=1765): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0x2, 0x0, &(0x7f0000000100)="469d", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x6e}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @local, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)={0x87, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}, 0x10) 2.449579744s ago: executing program 0 (id=1766): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x94, &(0x7f00000005c0)=@string={0x94, 0x3, "209ae590b6ec48f1422b3189a07a5626c79b79ec911fe44dc3c43e3a632bd4ff689026490094a736fe96d01e7e746b455778e3a4999b1bb7722be7da591a2b9daa1acabbd0e46e26df2fd2a776b91698dd45e1c2c5ed837948f3566f3a1463ad22add11f4ca186b467b27f325b85857c13ad7d1518b533469066682f341127c6b82ff268caa4beab6ebe252dc56c52f94638"}}, {0xda, &(0x7f0000000680)=@string={0xda, 0x3, "366e6f3cb8f2b79cf78a844c330a2b55a4ff6dd130e110aa59adaa1254bacddfab447c02d374d66d17d0f3aedeaecdb33a73ddfccc8aaf9e1985c869eaafaf5be0daa6698d8c120bbb340c3b8fdf5a5dd92bd48af4392191c2d06d3f445583f467720694d1225920980462c2218e9b7b67358144383acad47579f922f6778df91675b7e9c6c1b3d052b27231c857c39714c7ec6def944ce53613d43cf6483191443566c78cc8c16ec21e7a99ca7ee060989041f7d3e6e2727dab348903a262cd7952d1bab7e55c4e08b7e239413ab525da90124f5633104a"}}, {0x3c, &(0x7f0000000780)=@string={0x3c, 0x3, "133a9650f22ba77e2ed92f905fcb0e8a7c01c82e9930c5a07603d5043832e6283abb4d6877880349df8bf32f0cb9e3897a773679f78222cbd171"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0xf4ff}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) socket(0x11, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r4, @ANYRES32=r5], 0x48}}, 0x20000000) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x60, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000d70c00", @ANYRES16=r1, @ANYBLOB="00082dbd7000fddbdf256700e5000c00990005000000260000001256fc8caa964e6a3178307929a8b15ae9ba62136babcffe31fc9c20e6da46c57cd9cfcbec0b8958520d8a6e38e791e80b2bf28be53de695f11e05f46077ef385717c95b0097f3edf4ca3ec4f4fffb7daa0be3b8610c67e813e4750d473847cfc4dc7179b636d2f0a8aacb1a4523b1c687dc1373ab2a0224da7d752ec014b38e187e853c513d81d408c6f27bab7000290704afc9fa2a00000000f0d9bea1e4f50f5af445f3a361"], 0x20}, 0x1, 0x0, 0x0, 0x48810}, 0x48010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000080)=r3, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000028100000086dd60164508001806fffe8000000000000000000000000000aafe8004000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078200004020000"], 0x0) 1.750168083s ago: executing program 1 (id=1767): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000040)=0xdc66987) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1.680278555s ago: executing program 1 (id=1768): openat$rtc(0xffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r0, @ANYBLOB="07279f"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', '', [{}, {0x20, '\x05{+\x0f+{'}, {0x20, '}'}, {0x20, 'configfs\x00'}]}, 0x18) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500007700000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write(r1, &(0x7f0000000780)="3139857e7e4dd15bf89c632ebc9aa1b2b5083e1da61e29b1eabeaa53057b1f7955c7701f07601c04e6a7e21dcf0d02cf93fd90ed7528f593fea5b0315283293331b09b6ad822f76ea6b16cdc41fc4465944aaf6bf605b37ebafed4e5a776c63698c8a5f653177beba266e4d69293edda4fae4550f9a5a333bf1d0c31d9262de0a08cb8d9acfa9617bca6c4fe3770540600"/168, 0xa8) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000540)='2', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='2', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0) write(r3, &(0x7f0000000840)='3', 0x1) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000000940)='dummy_udc.0', 0xb) ioctl$XFS_IOC_SCRUB_METADATA(r4, 0xc040583c, &(0x7f0000000000)={0x3, 0x20, 0xa, 0x9, 0x48002}) 1.620113013s ago: executing program 1 (id=1769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) keyctl$dh_compute(0x17, &(0x7f0000001200), 0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={'hmac(streebog512)\x00'}}) 1.549064008s ago: executing program 1 (id=1772): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = dup3(r1, r0, 0x80000) write$FUSE_CREATE_OPEN(r2, &(0x7f00000002c0)={0xa0, 0x0, 0x0, {{0x4, 0x1, 0xc, 0x6, 0x7, 0x3627, {0x4, 0xbd5, 0x6, 0xffffffff, 0x6, 0x67, 0x3, 0x4, 0xfff, 0xa000, 0x80000001, 0x0, 0x0, 0xa2}}, {0x0, 0x4}}}, 0xa0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="262ef30f090f01ca2e0fc7b80f00f30f090f01df6766c7442400f0ffff7f6766c7442402000000006766c744240600000000670f011c24640f01c30f4abb00000f01f02e640f01c2", 0x48}], 0x1, 0x46, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd1638000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025d0339c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000e0ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c2c28e5b0000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdf9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f00000004c0)=0xfffffffd) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x4, 0xf}, 0x30, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r7, &(0x7f00000001c0)=""/64, 0xfdef) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="66baf80cb834ba4585ef66bafc0cb8185e7960efb9e00100000f32b9f2020000b8896a0000ba000000000f3066b8c8008ee09a008000001d01b9800000c00f3235000400000f30ea5f6ec9581b00c4e2719e9cf40c0000000f400d0a0000000f35", 0x61}], 0x1, 0x2, &(0x7f0000000480)=[@cstype3={0x5, 0x8}, @cstype0={0x4, 0xc}], 0x2) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) landlock_restrict_self(r6, 0xd) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000002c00070100000000fddbdf25017c000008000180020000001c000280180001"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) openat$cgroup_procs(r2, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x4, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xc, 0xb}, {0x9, 0x3}, {0xfff1, 0x2}}, ["", "", ""]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x33, 0x2c, 0xd2b, 0x70bd2b, 0x2ddfdbfb, {0x0, 0x0, 0x0, r11, {0x8}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_DIVISOR={0x8, 0x4, 0x4}]}}]}, 0x40}}, 0x24040084) 468.893746ms ago: executing program 4 (id=1781): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x200200, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x54, 0x2c, 0xd2f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r7 = fsopen(&(0x7f0000000200)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)='source\x00', &(0x7f0000000280)='127\t\x00\x00\x00.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000002c0)='addr\x00', &(0x7f0000000300)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r8, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_delvlan={0x7c, 0x71, 0x300, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x12}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xe}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x20, 0x2}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r9, 0xc0046d00, &(0x7f0000000240)=0x1) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f00000004c0), &(0x7f0000000480), 0xa}, 0x20) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r12, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) connect$pppl2tp(r11, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r12, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r12, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) r13 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r13, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r7}}, './file0\x00'}) writev(r11, &(0x7f0000000180)=[{&(0x7f0000000280)='v', 0x1}], 0x1) 350.152618ms ago: executing program 4 (id=1782): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f71f0f01c5650f00db652e0f01cfb8000a8ed83a420466b9800000c00f326635000100000f3066b9800000c00f326635000400000f300f017855650f8829ea", 0x3f}], 0x1, 0x41, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) utime(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xcd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x92c, 0x3, 0x1000000000007f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x200000801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20000000000000, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x2, 0x0, 0x4000100000001]}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'rose0\x00', 0x300}) r7 = fsmount(r5, 0x0, 0x0) r8 = syz_open_dev$audion(&(0x7f0000000140), 0x1, 0x30200) ioctl$BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f00000002c0)={{r7}, 0x4, &(0x7f0000000180)=[0x2, 0x1, 0x401, 0x0], 0x10, 0xc, 0x1}) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffd}}], 0x18}}], 0x2, 0x40800) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000240000000000000001f"], 0x14}}, 0x0) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@empty, @empty}, 0x10) 189.620469ms ago: executing program 4 (id=1783): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@quota}]}) 189.268666ms ago: executing program 4 (id=1784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') pread64(r1, &(0x7f00000024c0)=""/4122, 0x101a, 0x1000000000000095) (async) readv(r1, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000440)=""/153, 0x99}, {0x0}, {&(0x7f0000000600)=""/34, 0x22}], 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000ac0), 0x8, r0}, 0x38) (async) r2 = memfd_create(&(0x7f0000000600)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99Jv\x9f{b[\x1e\xd6\x04R\x05\xaf\xa2\xea5\f\xcc\x03\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\x98\xa1\x17*l\xad\xe6P\xac2\xae0\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|\x82f\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy\x12\x12oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xacM\x84\x97\xa5\'s\xe9\xdc=)I\xabLt', 0x1) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) pread64(r2, 0x0, 0x0, 0x1) 119.010789ms ago: executing program 4 (id=1785): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x8000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket(0x2b, 0x1000, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000930000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) pipe2$9p(&(0x7f0000000000), 0x80880) socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x2, 0x0) socket$kcm(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f0000002b40)='/$!}\\\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04383d2109"], 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYRESOCT=r3, @ANYBLOB="1ec60cde0ad288d612af021f822fa2cb9cbafae0bf4e2920c6cad75b05f4e4d46ff9ae4879e0b3e543160e6556ede9beaabc5f1f69872e26623c793c0a01f6dc495ffe09e904"], 0x22) getsockname$packet(r0, 0x0, 0x0) 118.382913ms ago: executing program 1 (id=1786): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x100, 0x8) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 118.221747ms ago: executing program 4 (id=1787): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000000ec0)={0x0, [{0x0, 0x0, 0xf047, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x3, 0x0, 0xb66, 0x0}, {0x3, 0x0, 0xfff, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x79, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}]}) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x7, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x16f) symlink(&(0x7f0000001200)='control/header/h\x00', &(0x7f0000001300)='control/class/ss/h\x00') symlink(&(0x7f0000000080)='control/class/ss/h\x00', &(0x7f0000001500)='streaming/header/h/u\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x4c, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2b, 0x40, 0xd8, 0x3, {0x4e22, 0x4e21, [0xffff64ac, 0x1014, 0x4, 0x6], [0xb3a, 0x80000001, 0xec, 0x5ae], 0x0, [0xffff0001, 0x9]}, 0x6, 0x9}}, 0x4c}}, 0xc4) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000040)=0x4) 0s ago: executing program 1 (id=1788): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(r1, r2, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) connect$inet6(r0, &(0x7f0000000080)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x1000, 0x761) r5 = open(&(0x7f0000000400)='./file0\x00', 0x80002, 0x1ae) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x16) write$binfmt_misc(r5, &(0x7f0000000040)="dd5c24662b", 0x5) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x2204000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}, {@msize={'msize', 0x3d, 0x76f2b80}}]}}) ioctl$int_in(r4, 0x5452, &(0x7f0000000200)=0x100000001) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108f000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): 메䒫ɼ瓓淖퀗껳껞돍猺ﳝ諌麯蔙槈꿪宯榦貍଒㒻㬌嵚⯙諔㧴鄡탂㽭啄牧鐆⋑⁙Ҙ쉢踡箛㕧䒁㨸퓊祵⋹矶轢甖쇆킳뉒ㅲ埈韃윔淬铯ጶ㳔䣶鄱㕄읦좌滁Ể饺绊惠邘狢ꭽ褴ꈃ쵢剹뫑乜뜈㧢㩁▵郚伒㍖䨐 [ 119.317482][ T10] usb 6-1: SerialNumber:  [ 119.444354][ T5886] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 119.464111][ T5886] usb 9-1: device descriptor read/8, error -71 [ 119.703268][ T5886] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 119.723931][ T5886] usb 9-1: device descriptor read/8, error -71 [ 119.726007][ T10] legousbtower 6-1:14.57: interrupt endpoints not found [ 119.833482][ T5886] usb usb9-port1: unable to enumerate USB device [ 120.128189][ T10] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 120.132274][ T10] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 120.288895][ T9538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.371921][ T9589] /dev/nullb0: Can't lookup blockdev [ 120.480667][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1016'. [ 120.527684][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'. [ 120.566122][ T9608] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1020'. [ 120.607260][ T9606] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1016'. [ 120.680987][ T9614] cgroup2: Unknown parameter 'memory_hugetlb_accountinzmemory_recursiveprot' [ 120.948421][ T1483] usb 6-1: USB disconnect, device number 13 [ 120.960463][ T1483] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 121.282940][ T9636] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 121.557741][ T9643] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.560593][ T9643] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 121.594268][ T9643] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.597229][ T9643] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 121.641470][ T42] kauditd_printk_skb: 98 callbacks suppressed [ 121.641482][ T42] audit: type=1400 audit(1785187299.853:1303): avc: denied { write } for pid=9648 comm="syz.5.1036" path="socket:[32521]" dev="sockfs" ino=32521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.641486][ T9650] Bluetooth: MGMT ver 1.23 [ 121.656101][ T1358] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 121.710371][ T42] audit: type=1400 audit(1785187299.923:1304): avc: denied { read } for pid=9653 comm="syz.5.1037" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 121.720678][ T42] audit: type=1400 audit(1785187299.923:1305): avc: denied { open } for pid=9653 comm="syz.5.1037" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 121.730923][ T42] audit: type=1400 audit(1785187299.933:1306): avc: denied { ioctl } for pid=9653 comm="syz.5.1037" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 121.804956][ T1358] usb 9-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.809951][ T1358] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 121.816841][ T1358] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 121.825386][ T1358] usb 9-1: config 0 interface 0 has no altsetting 0 [ 121.832118][ T1358] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 121.836122][ T1358] usb 9-1: New USB device strings: Mfr=9, Product=0, SerialNumber=2 [ 121.839555][ T1358] usb 9-1: Manufacturer: syz [ 121.841497][ T1358] usb 9-1: SerialNumber: syz [ 121.846394][ T1358] usb 9-1: config 0 descriptor?? [ 121.853066][ T1358] usb 9-1: selecting invalid altsetting 0 [ 121.900147][ T42] audit: type=1400 audit(1785187300.113:1307): avc: denied { ioctl } for pid=9659 comm="syz.0.1039" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=34083 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.900308][ T9660] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 122.054230][ T42] audit: type=1400 audit(1785187300.273:1308): avc: denied { connect } for pid=9665 comm="syz.5.1042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.099487][ T42] audit: type=1400 audit(1785187300.313:1309): avc: denied { map_read map_write } for pid=9671 comm="syz.0.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.132639][ T42] audit: type=1400 audit(1785187300.343:1310): avc: denied { write } for pid=9665 comm="syz.5.1042" path="socket:[32597]" dev="sockfs" ino=32597 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.146412][ T10] usb 9-1: USB disconnect, device number 15 [ 122.166147][ T9677] tipc: Enabled bearer , priority 10 [ 122.224155][ T5815] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.227050][ T5815] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.230092][ T5815] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.238258][ T5815] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.252152][ T42] audit: type=1400 audit(1785187300.463:1311): avc: denied { create } for pid=9681 comm="syz.0.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.262528][ T42] audit: type=1400 audit(1785187300.473:1312): avc: denied { bind } for pid=9681 comm="syz.0.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 122.331951][ T9686] ubi0: attaching mtd0 [ 122.337984][ T9686] ubi0: scanning is finished [ 122.339870][ T9686] ubi0: empty MTD device detected [ 122.341867][ T9686] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 122.401905][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1048'. [ 122.405837][ T9689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1048'. [ 122.491815][ T9686] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 122.861241][ T9711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.194325][ T9720] netlink: 'syz.0.1060': attribute type 16 has an invalid length. [ 123.196856][ T9720] netlink: 'syz.0.1060': attribute type 3 has an invalid length. [ 123.199393][ T9720] netlink: 'syz.0.1060': attribute type 1 has an invalid length. [ 123.201864][ T9720] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1060'. [ 123.203353][ T6339] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 123.357174][ T6339] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 123.361051][ T6339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.365221][ T6339] usb 6-1: Product: syz [ 123.367015][ T6339] usb 6-1: Manufacturer: syz [ 123.368998][ T6339] usb 6-1: SerialNumber: syz [ 123.423087][ T55] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 123.551762][ T9775] overlayfs: failed to get inode (-116) [ 123.555564][ T9775] overlayfs: failed to get inode (-116) [ 123.578656][ T1169] Bluetooth: hci4: Frame reassembly failed (-84) [ 123.583642][ T1169] Bluetooth: hci4: Frame reassembly failed (-84) [ 123.644583][ T9783] binder: 9782:9783 ioctl 4018620d 200000000240 returned -22 [ 123.743500][ T9785] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1077'. [ 123.761962][ T9785] openvswitch: netlink: IP tunnel dst address not specified [ 124.042347][ T9803] 9p: Bad value for 'rfdno' [ 124.045427][ T9803] Invalid argument reading file caps for ./file0 [ 124.125388][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1083'. [ 124.492039][ T9852] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1089'. [ 124.493371][ T55] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 124.504917][ T9852] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1089'. [ 124.505721][ T55] ath9k_htc: Failed to initialize the device [ 124.566055][ T55] usb 6-1: ath9k_htc: USB layer deinitialized [ 124.717183][ T9858] netlink: 'syz.5.1090': attribute type 63 has an invalid length. [ 124.963255][ T5887] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 125.125082][ T5887] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.129061][ T5887] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 125.132506][ T5887] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 125.136350][ T5887] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.141382][ T5887] usb 10-1: config 0 descriptor?? [ 125.154843][ T5887] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 125.157544][ T5887] dvb-usb: bulk message failed: -22 (3/0) [ 125.162956][ T5887] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 125.166404][ T5887] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 125.169267][ T5887] usb 10-1: media controller created [ 125.172713][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.180765][ T5887] dvb-usb: bulk message failed: -22 (6/0) [ 125.185158][ T5887] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 125.189677][ T5887] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input26 [ 125.198595][ T5887] dvb-usb: schedule remote query interval to 150 msecs. [ 125.202396][ T5887] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 125.221157][ T9873] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.1093'. [ 125.225428][ T9873] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.1093'. [ 125.347283][ T5887] usb 10-1: USB disconnect, device number 13 [ 125.364980][ T5887] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 125.614797][ T5096] Bluetooth: hci4: command 0x1003 tx timeout [ 125.618834][ T5746] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 125.729527][ T9876] xt_ipcomp: unknown flags 1D [ 125.744062][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1094'. [ 125.746920][ T9876] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1094'. [ 125.978836][ T5887] usb 6-1: USB disconnect, device number 14 [ 126.008949][ T9890] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1098'. [ 126.188327][ T9904] netlink: 'syz.4.1104': attribute type 9 has an invalid length. [ 126.264115][ T9911] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 126.270344][ T9911] 8021q: VLANs not supported on gre0 [ 126.308071][ T9917] 9p: Could not find request transport: 'B [ 126.308071][ T9917] `<0xffffffffffffffff [ 126.340427][ T9923] kvm: user requested TSC rate below hardware speed [ 126.521647][ T9940] raw_sendmsg: syz.5.1113 forgot to set AF_INET. Fix it! [ 126.664071][ T42] kauditd_printk_skb: 86 callbacks suppressed [ 126.664087][ T42] audit: type=1400 audit(1785187305.882:1399): avc: denied { bind } for pid=9948 comm="syz.5.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.677133][ T42] audit: type=1400 audit(1785187305.902:1400): avc: denied { getopt } for pid=9944 comm="syz.1.1115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.716361][ T42] audit: type=1400 audit(1785187305.932:1401): avc: denied { bind } for pid=9948 comm="syz.5.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.722624][ T42] audit: type=1400 audit(1785187305.932:1402): avc: denied { write } for pid=9948 comm="syz.5.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.764386][ T42] audit: type=1400 audit(1785187305.972:1403): avc: denied { write } for pid=9962 comm="syz.4.1119" name="usb_gadget" dev="configfs" ino=3347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.774317][ T42] audit: type=1400 audit(1785187305.982:1404): avc: denied { bind } for pid=9948 comm="syz.5.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.774403][ T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xb [ 126.780352][ T42] audit: type=1400 audit(1785187305.982:1405): avc: denied { listen } for pid=9948 comm="syz.5.1117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 126.780378][ T42] audit: type=1400 audit(1785187305.982:1406): avc: denied { map } for pid=9948 comm="syz.5.1117" path="socket:[34542]" dev="sockfs" ino=34542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 126.780401][ T42] audit: type=1400 audit(1785187306.002:1407): avc: denied { write } for pid=9962 comm="syz.4.1119" name="functions" dev="configfs" ino=33420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.780423][ T42] audit: type=1400 audit(1785187306.002:1408): avc: denied { write } for pid=9962 comm="syz.4.1119" name="configs" dev="configfs" ino=33421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.861827][ T9949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.976152][ T9976] loop5: detected capacity change from 0 to 7 [ 126.987876][ T9976] Dev loop5: unable to read RDB block 7 [ 126.989706][ T9976] loop5: unable to read partition table [ 126.991600][ T9976] loop5: partition table beyond EOD, truncated [ 126.994003][ T9976] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 127.022116][ T9980] cgroup: No subsys list or none specified [ 127.030511][ T9980] qnx4: no qnx4 filesystem (no root dir). [ 127.374606][T10014] overlay: Unknown parameter 'workdW{:kir' [ 127.918946][T10044] openvswitch: netlink: Flow actions attr not present in new flow. [ 127.965555][T10049] Bluetooth: MGMT ver 1.23 [ 127.980283][T10051] fuse: Bad value for 'fd' [ 128.010773][T10054] netlink: 'syz.1.1150': attribute type 1 has an invalid length. [ 128.019629][T10055] /dev/nullb0: Can't lookup blockdev [ 128.103631][ T10] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 128.258617][ T10] usb 10-1: config index 0 descriptor too short (expected 39, got 27) [ 128.266311][ T10] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 128.272653][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 128.285708][ T10] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.290634][ T10] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.294413][ T10] usb 10-1: Product: syz [ 128.296212][ T10] usb 10-1: Manufacturer: syz [ 128.296260][T10087] __nla_validate_parse: 15 callbacks suppressed [ 128.296272][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 128.298172][ T10] usb 10-1: SerialNumber: syz [ 128.307526][ T10] usb 10-1: config 0 descriptor?? [ 128.310640][ T10] hub 10-1:0.0: bad descriptor, ignoring hub [ 128.312837][ T10] hub 10-1:0.0: probe with driver hub failed with error -5 [ 128.318373][ T10] usb 10-1: selecting invalid altsetting 0 [ 128.580539][T10104] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 128.585180][T10104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.614813][ T5887] usb 10-1: USB disconnect, device number 14 [ 128.619727][T10109] netlink: 'syz.0.1172': attribute type 9 has an invalid length. [ 128.682572][T10120] binder: 10119:10120 ioctl c0306201 200000000480 returned -14 [ 128.698349][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 128.760245][T10126] netfs: Duplicate cookie detected [ 128.762698][T10126] netfs: O-cookie c=00000009 [fl=4008 na=0 nA=0 s=-] [ 128.765784][T10126] netfs: O-cookie V=00000005 [9p,syz,] [ 128.768224][T10126] netfs: O-key=[8] '7d38ac0400000000' [ 128.770363][T10126] netfs: N-cookie c=0000000a [fl=8 na=0 nA=0 s=-] [ 128.774052][T10126] netfs: N-cookie V=00000005 [9p,syz,] [ 128.776255][T10126] netfs: N-key=[8] '7d38ac0400000000' [ 128.856322][ T10] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 128.859353][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.862000][ T10] usb 9-1: Product: syz [ 128.863498][ T10] usb 9-1: Manufacturer: syz [ 128.864993][ T10] usb 9-1: SerialNumber: syz [ 128.878091][ T5830] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 128.992885][T10135] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 129.053926][T10140] hpfs: Bad magic ... probably not HPFS [ 129.055241][T10143] /dev/nbd0: Can't lookup blockdev [ 129.086527][T10059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.089192][T10145] fuse: Bad value for 'fd' [ 129.094288][T10059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.290008][T10163] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 129.293101][T10164] uhci_hcd 0000:00:1d.0: remove, state 4 [ 129.298490][T10164] usb usb1: USB disconnect, device number 1 [ 129.304814][ T10] usb 9-1: USB disconnect, device number 16 [ 129.359224][T10164] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 129.428613][T10167] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 129.435784][T10167] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 129.451152][T10167] pci 0000:00:1d.0: Adding to iommu group 7 [ 129.463105][T10167] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 129.518490][T10173] syzkaller0: entered promiscuous mode [ 129.520918][T10173] syzkaller0: entered allmulticast mode [ 129.525389][T10172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=10172 comm=syz.1.1192 [ 129.527860][T10167] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 58949 usecs [ 129.570357][T10167] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 129.583766][T10167] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 129.587081][T10167] uhci_hcd 0000:00:1d.0: detected 2 ports [ 129.597532][T10167] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 129.613958][T10167] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 129.618497][T10167] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 129.621789][T10167] usb usb1: Product: UHCI Host Controller [ 129.624487][T10167] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 129.627000][T10167] usb usb1: SerialNumber: 0000:00:1d.0 [ 129.642158][T10167] hub 1-0:1.0: USB hub found [ 129.646950][T10167] hub 1-0:1.0: 2 ports detected [ 129.731510][T10175] syzkaller0: entered promiscuous mode [ 129.733454][T10175] syzkaller0: entered allmulticast mode [ 129.782607][T10179] dvmrp8: entered allmulticast mode [ 129.788943][T10179] ubi16: attaching mtd0 [ 129.792933][T10179] ubi16: scanning is finished [ 129.794998][T10179] ubi16: empty MTD device detected [ 129.936444][ T5830] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 129.940213][ T5830] ath9k_htc: Failed to initialize the device [ 129.941604][T10179] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 129.945951][T10179] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 129.954128][T10179] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 129.954847][ T10] usb 9-1: ath9k_htc: USB layer deinitialized [ 129.960322][T10179] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 129.977454][T10179] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 129.986543][T10179] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 129.990707][T10179] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 585075474 [ 129.994274][T10179] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 129.999740][T10191] ubi16: background thread "ubi_bgt16d" started, PID 10191 [ 130.066074][T10161] 9pnet_fd: p9_fd_create_tcp (10161): problem connecting socket to 127.0.0.1 [ 130.156164][T10210] capability: warning: `syz.5.1204' uses 32-bit capabilities (legacy support in use) [ 130.169126][T10207] bond2 (unregistering): Released all slaves qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 130.463092][ T55] IPVS: starting estimator thread 0... [ 130.465380][ T5886] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 130.512262][T10241] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 130.553268][T10239] IPVS: using max 43 ests per chain, 103200 per kthread [ 130.626315][ T5886] usb 10-1: not running at top speed; connect to a high speed hub [ 130.633993][ T5886] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 130.640086][ T5886] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 130.646085][ T5886] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.657784][ T5886] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected [ 130.672673][ T5886] usb 10-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 130.693757][T10251] xt_CT: No such helper "netbios-ns" [ 130.735692][T10257] fuse-io-uring is disabled [ 130.864021][ T60] usb 10-1: USB disconnect, device number 15 [ 130.878838][ T60] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 130.883232][ T60] garmin_gps 10-1:1.0: device disconnected [ 130.883998][T10274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10274 comm=syz.4.1223 [ 131.003061][T10280] syz_tun: entered allmulticast mode [ 131.005526][T10280] lo: entered allmulticast mode [ 131.087874][T10279] syz_tun: left allmulticast mode [ 131.225385][ T60] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 131.363464][T10299] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 131.369377][T10299] bond2: (slave lo): Enslaving as an active interface with an up link [ 131.372199][T10299] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 131.403021][T10302] fuse: Bad value for 'fd' [ 131.404439][ T60] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 131.408154][ T60] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 131.411281][ T60] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 131.414789][ T60] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 131.417646][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.422627][T10214] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 131.425627][T10214] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 131.429144][ T60] garmin_gps 10-1:1.0: Garmin GPS usb/tty converter detected [ 131.434638][ T60] usb 10-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 131.527401][T10306] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1234'. [ 131.850213][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1241'. [ 131.870266][ T42] kauditd_printk_skb: 85 callbacks suppressed [ 131.870278][ T42] audit: type=1400 audit(1785187311.082:1494): avc: denied { write } for pid=10329 comm="syz.1.1242" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.870574][T10327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10327 comm=syz.0.1241 [ 131.872690][ T42] audit: type=1400 audit(1785187311.082:1495): avc: denied { ioctl } for pid=10329 comm="syz.1.1242" path="/dev/ppp" dev="devtmpfs" ino=731 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.940611][T10333] kernel profiling enabled (shift: 5) [ 131.945021][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1242'. [ 131.948451][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1242'. [ 131.976274][T10336] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1244'. [ 132.013309][ T42] audit: type=1400 audit(1785187311.222:1496): avc: denied { setopt } for pid=10340 comm="syz.4.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.031284][ T42] audit: type=1400 audit(1785187311.242:1497): avc: denied { getopt } for pid=10340 comm="syz.4.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 132.093369][ T42] audit: type=1400 audit(1785187311.312:1498): avc: denied { bind } for pid=10347 comm="syz.0.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 132.097968][T10348] openvswitch: netlink: IPv4 tunnel dst address is zero [ 132.100980][ T42] audit: type=1400 audit(1785187311.312:1499): avc: denied { node_bind } for pid=10347 comm="syz.0.1248" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 132.103744][T10348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.111286][ T42] audit: type=1400 audit(1785187311.312:1500): avc: denied { bind } for pid=10347 comm="syz.0.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.121587][ T42] audit: type=1400 audit(1785187311.312:1501): avc: denied { setopt } for pid=10347 comm="syz.0.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.179386][T10354] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 132.185241][T10354] openvswitch: netlink: Multiple metadata blocks provided [ 132.230859][ T42] audit: type=1400 audit(1785187311.442:1502): avc: denied { name_bind } for pid=10358 comm="syz.0.1253" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 132.269720][T10362] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1254'. [ 132.348225][ T42] audit: type=1400 audit(1785187311.562:1503): avc: denied { read } for pid=10365 comm="syz.0.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.530189][T10369] syz_tun: entered allmulticast mode [ 132.537417][T10369] pimreg: entered allmulticast mode [ 132.540601][T10368] syz_tun: left allmulticast mode [ 132.613004][T10374] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1259'. [ 132.665402][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.666732][T10380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1261'. [ 132.670490][T10380] bond0: entered allmulticast mode [ 132.672116][T10380] bond_slave_0: entered allmulticast mode [ 132.674207][T10380] bond_slave_1: entered allmulticast mode [ 132.747849][T10387] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1263'. [ 132.787782][T10391] netlink: 'syz.0.1265': attribute type 6 has an invalid length. [ 132.790638][T10391] netlink: 'syz.0.1265': attribute type 5 has an invalid length. [ 132.794150][T10391] netlink: 'syz.0.1265': attribute type 4 has an invalid length. [ 132.858336][T10397] netlink: 'syz.0.1268': attribute type 1 has an invalid length. [ 132.869756][T10397] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.890684][T10397] bond3: (slave geneve2): making interface the new active one [ 132.894350][T10397] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 132.897700][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.900661][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.907792][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.910574][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.939315][T10401] siw: device registration error -23 [ 133.164187][ T60] usb 10-1: USB disconnect, device number 16 [ 133.181518][ T60] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 133.185735][ T60] garmin_gps 10-1:1.0: device disconnected [ 133.279261][T10417] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 133.282650][T10417] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 133.287888][T10419] VFS: file-max limit 0 reached [ 133.294878][T10417] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 133.301514][T10417] overlayfs: missing 'lowerdir' [ 133.325104][T10421] __nla_validate_parse: 3 callbacks suppressed [ 133.325120][T10421] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1277'. [ 133.332359][T10421] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1277'. [ 133.391161][T10423] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 133.393938][T10423] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 133.490720][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'. [ 133.743252][ T5887] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 133.914635][ T5887] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 133.918017][ T5887] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.920927][ T5887] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.924913][ T5887] usb 10-1: config 0 interface 0 has no altsetting 0 [ 133.927022][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'. [ 133.927893][ T5887] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.929941][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 133.932838][ T5887] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.936265][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1294'. [ 133.939032][ T5887] usb 10-1: config 0 interface 0 has no altsetting 0 [ 133.941719][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 133.944965][ T5887] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.949909][ T5887] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.953360][ T5887] usb 10-1: config 0 interface 0 has no altsetting 0 [ 133.956477][ T5887] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.959452][ T5887] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.963030][ T5887] usb 10-1: config 0 interface 0 has no altsetting 0 [ 133.966106][ T5887] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.969062][ T5887] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.972533][ T5887] usb 10-1: config 0 interface 0 has no altsetting 0 [ 133.975792][ T5887] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.978879][ T5887] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.982398][ T5887] usb 10-1: config 0 interface 0 has no altsetting 0 [ 133.985491][ T5887] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.988430][ T5887] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 133.991984][ T5887] usb 10-1: config 0 interface 0 has no altsetting 0 [ 133.995022][ T5887] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 133.997936][ T5887] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.001462][ T5887] usb 10-1: config 0 interface 0 has no altsetting 0 [ 134.005428][ T5887] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 134.008758][ T5887] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 134.011474][ T5887] usb 10-1: Product: syz [ 134.012904][ T5887] usb 10-1: Manufacturer: syz [ 134.014572][ T5887] usb 10-1: SerialNumber: syz [ 134.021218][ T5887] usb 10-1: config 0 descriptor?? [ 134.030149][ T5887] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 134.061477][T10478] IPv6: NLM_F_CREATE should be specified when creating new route [ 134.231548][ T1358] usb 10-1: USB disconnect, device number 17 [ 134.235535][ T1358] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 134.293518][ T5886] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 134.353416][ T5887] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 134.464932][ T5886] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.470600][ T5886] usb 9-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 134.474503][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 134.477480][ T5886] usb 9-1: Product: syz [ 134.479136][ T5886] usb 9-1: Manufacturer: syz [ 134.485603][ T5886] usb_debug 9-1:1.0: debug converter detected [ 134.492503][ T5886] usb 9-1: debug converter now attached to ttyUSB0 [ 134.513393][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 134.517288][ T5887] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 134.520696][ T5887] usb 6-1: config 179 has no interface number 0 [ 134.522704][ T5887] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 134.525381][T10483] netlink: 'syz.0.1300': attribute type 1 has an invalid length. [ 134.526346][ T5887] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 134.532015][ T5887] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.535499][ T5887] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 134.539022][ T5887] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 134.543028][ T5887] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 134.546457][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.550757][T10483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1300'. [ 134.551262][T10481] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 134.563364][T10483] 8021q: adding VLAN 0 to HW filter on device bond4 [ 134.748613][ T5887] usb 9-1: USB disconnect, device number 17 [ 134.775012][ T5887] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 134.781792][ T5887] usb_debug 9-1:1.0: device disconnected [ 134.791754][ T1358] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input28 [ 134.976710][ T5886] usb 6-1: USB disconnect, device number 15 [ 134.976834][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 134.981905][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 135.288029][T10520] netlink: 'syz.4.1312': attribute type 4 has an invalid length. [ 135.290549][T10520] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1312'. [ 135.295901][T10520] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.1312'. [ 135.372607][T10522] netlink: 'syz.4.1313': attribute type 3 has an invalid length. [ 135.423327][ T5887] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 135.447052][T10527] geneve1: entered allmulticast mode [ 135.504648][T10534] netlink: 'syz.1.1317': attribute type 1 has an invalid length. [ 135.583334][ T5887] usb 10-1: Using ep0 maxpacket: 32 [ 135.591489][ T5887] usb 10-1: unable to get BOS descriptor or descriptor too short [ 135.596589][ T5887] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 135.599224][ T5887] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 135.601826][ T5887] usb 10-1: config 14 has no interface number 0 [ 135.606810][ T5887] usb 10-1: config 14 has no interface number 1 [ 135.608811][ T5887] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 135.612154][ T5887] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 135.616138][ T5887] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 135.619958][ T5887] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 135.623694][ T5887] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 135.627145][ T5887] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.631053][ T5887] usb 10-1: config 14 interface 57 has no altsetting 0 [ 135.633242][ T5887] usb 10-1: config 14 interface 228 has no altsetting 0 [ 135.636898][ T5887] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 135.639759][ T5887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.642263][ T5887] usb 10-1: Product: 㨓傖⯲级逯쭟討ż⻈゙ꃅͶӕ㈸⣦묺桍衷䤃诟⿳뤌解睺礶苷쬢燑 [ 135.648656][ T5887] usb 10-1: Manufacturer: 渶㱯鲷諷䲄ਲ਼唫ﾤ텭ꨐ굙ኪ메䒫ɼ瓓淖퀗껳껞돍猺ﳝ諌麯蔙槈꿪宯榦貍଒㒻㬌嵚⯙諔㧴鄡탂㽭啄牧鐆⋑⁙Ҙ쉢踡箛㕧䒁㨸퓊祵⋹矶轢甖쇆킳뉒ㅲ埈韃윔淬铯ጶ㳔䣶鄱㕄읦좌滁Ể饺绊惠邘狢ꭽ褴ꈃ쵢剹뫑乜뜈㧢㩁▵郚伒㍖䨐 [ 135.658564][ T5887] usb 10-1: SerialNumber:  [ 135.814954][T10559] xfrm0 speed is unknown, defaulting to 1000 [ 136.075821][ T5887] legousbtower 10-1:14.57: interrupt endpoints not found [ 136.178247][T10570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.221636][T10572] sit0: entered promiscuous mode [ 136.227873][T10572] netlink: 'syz.4.1326': attribute type 1 has an invalid length. [ 136.236719][T10572] program syz.4.1326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.239569][T10572] ata1.00: invalid transfer count 0 [ 136.269099][T10574] netlink: 'syz.4.1327': attribute type 1 has an invalid length. [ 136.286581][T10574] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.302773][T10574] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.305636][T10574] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 136.309194][T10574] bond3: (slave gre1): Error -95 calling set_mac_address [ 136.351953][T10576] gretap1: entered promiscuous mode [ 136.476363][ T5887] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 136.480350][ T5887] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 136.648920][T10606] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 136.682723][T10608] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.141708][ T42] kauditd_printk_skb: 63 callbacks suppressed [ 137.141722][ T42] audit: type=1400 audit(1785187316.352:1567): avc: denied { accept } for pid=10637 comm="syz.1.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.311871][ C0] usb 10-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 137.314884][ T1483] usb 10-1: USB disconnect, device number 18 [ 137.329803][ T1483] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected [ 137.722292][ T42] audit: type=1400 audit(1785187316.932:1568): avc: denied { mount } for pid=10684 comm="syz.1.1360" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 137.729390][ T42] audit: type=1400 audit(1785187316.932:1569): avc: denied { remount } for pid=10684 comm="syz.1.1360" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 137.769205][T10685] ufs: You didn't specify the type of your ufs filesystem [ 137.769205][T10685] [ 137.769205][T10685] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 137.769205][T10685] [ 137.769205][T10685] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 137.781695][T10685] ufs: ufstype=old is supported read-only [ 137.787863][T10685] ufs: ufs_fill_super(): bad magic number [ 137.871937][ T42] audit: type=1400 audit(1785187317.082:1570): avc: denied { unmount } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 137.908920][ T42] audit: type=1400 audit(1785187317.122:1571): avc: denied { write } for pid=10700 comm="syz.4.1365" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 137.952798][ T42] audit: type=1400 audit(1785187317.162:1572): avc: denied { mounton } for pid=10707 comm="syz.5.1367" path="/174/file0" dev="tmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 138.550810][T10731] __nla_validate_parse: 14 callbacks suppressed [ 138.550822][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'. [ 138.577786][ T42] audit: type=1400 audit(1785187317.792:1573): avc: denied { setopt } for pid=10734 comm="syz.0.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 138.584068][ T42] audit: type=1400 audit(1785187317.792:1574): avc: denied { listen } for pid=10734 comm="syz.0.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 138.590489][ T42] audit: type=1400 audit(1785187317.792:1575): avc: denied { accept } for pid=10734 comm="syz.0.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 138.597094][ T42] audit: type=1400 audit(1785187317.812:1576): avc: denied { execute } for pid=10736 comm="syz.1.1376" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 138.600134][T10740] Invalid option length (480) for dns_resolver key [ 138.609406][T10738] rdma_rxe: rxe_newlink: failed to add vcan0 [ 138.783247][ T5886] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 138.862955][T10788] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 138.865939][T10788] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 138.868699][T10788] overlayfs: missing 'lowerdir' [ 138.909115][T10792] futex_wake_op: syz.1.1391 tries to shift op by 144; fix this program [ 138.911976][T10792] futex_wake_op: syz.1.1391 tries to shift op by 144; fix this program [ 138.944412][ T5886] usb 9-1: Using ep0 maxpacket: 32 [ 138.948074][ T5886] usb 9-1: unable to get BOS descriptor or descriptor too short [ 138.951526][ T5886] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 138.954474][ T5886] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 138.957074][ T5886] usb 9-1: config 14 has no interface number 0 [ 138.959063][ T5886] usb 9-1: config 14 has no interface number 1 [ 138.961101][ T5886] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 138.965085][ T5886] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 138.969690][ T5886] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 138.973301][ T5886] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 138.977561][ T5886] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 138.982033][ T5886] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.987258][ T5886] usb 9-1: config 14 interface 57 has no altsetting 0 [ 138.989247][ T5886] usb 9-1: config 14 interface 228 has no altsetting 0 [ 138.994224][ T5886] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 138.997260][ T5886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.999844][ T5886] usb 9-1: Product: 㨓傖⯲级逯쭟討ż⻈゙ꃅͶӕ㈸⣦묺桍衷䤃诟⿳뤌解睺礶苷쬢燑 [ 139.004257][ T5886] usb 9-1: Manufacturer: 渶㱯鲷諷䲄ਲ਼唫ﾤ텭ꨐ굙ኪ메䒫ɼ瓓淖퀗껳껞돍猺ﳝ諌麯蔙槈꿪宯榦貍଒㒻㬌嵚⯙諔㧴鄡탂㽭啄牧鐆⋑⁙Ҙ쉢踡箛㕧䒁㨸퓊祵⋹矶轢甖쇆킳뉒ㅲ埈韃윔淬铯ጶ㳔䣶鄱㕄읦좌滁Ể饺绊惠邘狢ꭽ褴ꈃ쵢剹뫑乜뜈㧢㩁▵郚伒㍖䨐 [ 139.015299][ T5886] usb 9-1: SerialNumber:  [ 139.188364][T10800] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1393'. [ 139.424793][ T5886] legousbtower 9-1:14.57: interrupt endpoints not found [ 139.509415][T10802] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1394'. [ 139.512641][T10802] nfs4: Bad value for 'source' [ 139.604292][T10807] overlayfs: invalid origin (0000) [ 139.662154][T10809] syz_tun: entered allmulticast mode [ 139.667228][T10809] syz_tun: left allmulticast mode [ 139.830756][ T5886] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 139.840619][T10824] SELinux: Context system_u:object_r:sound_device_t:s0 is not valid (left unmapped). [ 139.841935][ T5886] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 139.857548][T10824] netlink: 'syz.5.1402': attribute type 4 has an invalid length. [ 139.860483][T10824] netlink: 'syz.5.1402': attribute type 4 has an invalid length. [ 139.882305][T10826] syz_tun: entered allmulticast mode [ 139.884940][T10826] syz_tun: left allmulticast mode [ 139.941119][T10828] ufs: You didn't specify the type of your ufs filesystem [ 139.941119][T10828] [ 139.941119][T10828] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 139.941119][T10828] [ 139.941119][T10828] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 139.951468][T10828] ufs: ufstype=old is supported read-only [ 139.953572][T10828] ufs: ufs_fill_super(): bad magic number [ 139.987623][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'. [ 139.991784][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1407'. [ 140.588105][T10849] ref_ctr increment failed for inode: 0xa53 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888025fcf2c0 [ 140.598796][T10848] uprobe: syz.0.1413:10848 failed to unregister, leaking uprobe [ 140.647734][ T5886] usb 9-1: USB disconnect, device number 18 [ 140.652949][ T5886] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 141.161440][T10866] /dev/nullb0: Can't lookup blockdev [ 141.239322][T10881] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1423'. [ 141.298700][T10885] bridge_slave_0 (unregistering): left allmulticast mode [ 141.306391][T10885] bridge_slave_0 (unregistering): left promiscuous mode [ 141.309745][T10885] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.485599][T10897] tipc: Started in network mode [ 141.487341][T10897] tipc: Node identity ac1414aa, cluster identity 4711 [ 141.494223][T10897] tipc: New replicast peer: 172.20.20.187 [ 141.496674][T10897] tipc: Enabled bearer , priority 10 [ 141.734108][ T5830] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 141.836888][T10910] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1431'. [ 141.883938][ T5830] usb 9-1: Using ep0 maxpacket: 32 [ 141.887719][ T5830] usb 9-1: unable to get BOS descriptor or descriptor too short [ 141.891796][ T5830] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 141.899679][ T5830] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 141.903708][ T5830] usb 9-1: config 14 has no interface number 0 [ 141.905804][ T5830] usb 9-1: config 14 has no interface number 1 [ 141.908455][ T5830] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 141.912345][ T5830] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 141.917460][ T5830] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 141.921111][ T5830] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 141.925432][ T5830] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 141.928975][ T5830] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.933621][ T5830] usb 9-1: config 14 interface 57 has no altsetting 0 [ 141.935978][ T5830] usb 9-1: config 14 interface 228 has no altsetting 0 [ 141.950571][ T5830] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 141.953796][ T5830] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.956351][ T5830] usb 9-1: Product: 㨓傖⯲级逯쭟討ż⻈゙ꃅͶӕ㈸⣦묺桍衷䤃诟⿳뤌解睺礶苷쬢燑 [ 141.961652][ T5830] usb 9-1: Manufacturer: 渶㱯鲷諷䲄ਲ਼唫ﾤ텭ꨐ굙ኪ메䒫ɼ瓓淖퀗껳껞돍猺ﳝ諌麯蔙槈꿪宯榦貍଒㒻㬌嵚⯙諔㧴鄡탂㽭啄牧鐆⋑⁙Ҙ쉢踡箛㕧䒁㨸퓊祵⋹矶轢甖쇆킳뉒ㅲ埈韃윔淬铯ጶ㳔䣶鄱㕄읦좌滁Ể饺绊惠邘狢ꭽ褴ꈃ쵢剹뫑乜뜈㧢㩁▵郚伒㍖䨐 [ 141.971605][ T5830] usb 9-1: SerialNumber:  [ 142.042135][T10916] e1000e 0000:00:02.0 eth1: removed PHC [ 142.158325][ T42] kauditd_printk_skb: 172 callbacks suppressed [ 142.158336][ T42] audit: type=1400 audit(1785187321.372:1749): avc: denied { write } for pid=10927 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.170426][ T42] audit: type=1400 audit(1785187321.382:1750): avc: denied { remove_name } for pid=10927 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=6876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.180737][ T42] audit: type=1400 audit(1785187321.382:1751): avc: denied { unlink } for pid=10927 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=6876 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 142.205063][T10916] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 142.313894][ T42] audit: type=1400 audit(1785187321.532:1752): avc: denied { write } for pid=10930 comm="syz.5.1435" name="radio3" dev="devtmpfs" ino=995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 142.325674][ T42] audit: type=1400 audit(1785187321.542:1753): avc: denied { read } for pid=5449 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 142.381096][ T5830] legousbtower 9-1:14.57: interrupt endpoints not found [ 142.382357][ T42] audit: type=1400 audit(1785187321.592:1754): avc: denied { name_connect } for pid=10935 comm="syz.5.1436" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 142.391182][ T42] audit: type=1400 audit(1785187321.602:1755): avc: denied { write } for pid=10933 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.439235][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1436'. [ 142.441723][ T42] audit: type=1400 audit(1785187321.652:1756): avc: denied { write } for pid=10938 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.442927][T10939] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1436'. [ 142.445581][T10939] program syz.5.1436 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.452942][ T42] audit: type=1400 audit(1785187321.662:1757): avc: denied { append } for pid=10935 comm="syz.5.1436" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 142.464566][ T42] audit: type=1400 audit(1785187321.662:1758): avc: denied { ioctl } for pid=10935 comm="syz.5.1436" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0xaa03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 142.512549][ T9] tipc: Node number set to 2886997162 [ 142.530394][T10921] pci 0000:00:02.0: [8086:10d3] type 00 class 0x020000 PCIe Root Complex Integrated Endpoint [ 142.540908][T10921] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff] [ 142.543764][T10921] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff] [ 142.547897][T10921] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f] [ 142.549972][T10921] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff] [ 142.552221][T10921] pci 0000:00:02.0: ROM [mem 0xfea00000-0xfea3ffff pref] [ 142.554773][T10921] pci 0000:00:02.0: enabling Extended Tags [ 142.574777][T10921] pci 0000:00:02.0: Adding to iommu group 2 [ 142.598386][T10921] pci 0000:00:02.0: ROM [mem 0x80000000-0x8003ffff pref]: assigned [ 142.601939][T10921] pci 0000:00:02.0: BAR 0 [mem 0x80040000-0x8005ffff]: assigned [ 142.604699][T10921] pci 0000:00:02.0: BAR 1 [mem 0x80060000-0x8007ffff]: assigned [ 142.607633][T10921] pci 0000:00:02.0: BAR 3 [mem 0x80080000-0x80083fff]: assigned [ 142.610277][T10921] pci 0000:00:02.0: BAR 2 [io 0x2000-0x201f]: assigned [ 142.615127][T10952] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1438'. [ 142.619048][T10952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.667340][T10921] e1000e 0000:00:02.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 142.735915][T10921] e1000e 0000:00:02.0 0000:00:02.0 (uninitialized): registered PHC clock [ 142.785418][ T5830] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 142.792915][ T5830] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 142.839640][T10921] e1000e 0000:00:02.0 eth1: (PCI Express:2.5GT/s:Width x1) 52:54:00:12:34:56 [ 142.842435][T10921] e1000e 0000:00:02.0 eth1: Intel(R) PRO/1000 Network Connection [ 142.845425][T10921] e1000e 0000:00:02.0 eth1: MAC: 3, PHY: 8, PBA No: 000000-000 [ 143.022256][T10987] fuse: Bad value for 'fd' [ 143.215795][ T5830] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 143.357631][T11011] 9p: Bad value for 'version' [ 143.373560][ T5830] usb 6-1: Using ep0 maxpacket: 8 [ 143.381974][ T5830] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.393647][ T5830] usb 6-1: config 0 has no interfaces? [ 143.395458][ T5830] usb 6-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 143.400890][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.410407][ T5830] usb 6-1: config 0 descriptor?? [ 143.567133][ T5449] 8021q: adding VLAN 0 to HW filter on device eth1 [ 143.598217][ T5886] usb 9-1: USB disconnect, device number 19 [ 143.608349][ T5886] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 143.617355][T10970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.626124][T10970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.630914][ T5830] usb 6-1: USB disconnect, device number 16 [ 143.857919][T11053] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1454'. [ 143.898454][T11056] geneve1: entered promiscuous mode [ 143.901672][T11056] batadv0: entered promiscuous mode [ 143.904888][T11056] debugfs: 'hsr1' already exists in 'hsr' [ 143.907195][T11056] Cannot create hsr debugfs directory [ 143.909029][T11056] hsr1: Slave A (geneve1) is not up; please bring it up to get a fully working HSR network [ 143.912241][T11056] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 143.919674][T11056] geneve1: left promiscuous mode [ 143.921772][T11056] batadv0: left promiscuous mode [ 143.963986][T11057] kvm: user requested TSC rate below hardware speed [ 143.989290][T11056] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 143.991833][T11056] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 144.037877][ T6339] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 144.429971][T11082] xfrm0 speed is unknown, defaulting to 1000 [ 144.493097][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1470'. [ 144.497096][T11082] trusted_key: encrypted_key: keylen parameter is missing [ 144.683327][ T5830] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 144.700506][T11130] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 144.704835][T11130] batman_adv: batadv0: Adding interface: gretap1 [ 144.706941][T11130] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.714992][T11130] batman_adv: batadv0: Interface activated: gretap1 [ 144.762881][T11142] /dev/nullb0: Can't lookup blockdev [ 144.826610][T11152] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1483'. [ 144.836237][T11152] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1483'. [ 144.843301][ T5830] usb 9-1: Using ep0 maxpacket: 32 [ 144.847246][ T5830] usb 9-1: unable to get BOS descriptor or descriptor too short [ 144.852730][ T5830] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 144.856396][ T5830] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 144.859598][ T5830] usb 9-1: config 14 has no interface number 0 [ 144.862226][ T5830] usb 9-1: config 14 has no interface number 1 [ 144.865181][ T5830] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 144.868560][ T5830] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 144.872144][ T5830] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 144.876073][ T5830] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 144.879625][ T5830] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 144.883357][ T5830] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.887624][ T5830] usb 9-1: config 14 interface 57 has no altsetting 0 [ 144.890036][ T5830] usb 9-1: config 14 interface 228 has no altsetting 0 [ 144.897341][ T5830] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 144.901022][ T5830] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.903841][ T5830] usb 9-1: Product: 㨓傖⯲级逯쭟討ż⻈゙ꃅͶӕ㈸⣦묺桍衷䤃诟⿳뤌解睺礶苷쬢燑 [ 144.907543][ T5830] usb 9-1: Manufacturer: 渶㱯鲷諷䲄ਲ਼唫ﾤ텭ꨐ굙ኪ메䒫ɼ瓓淖퀗껳껞돍猺ﳝ諌麯蔙槈꿪宯榦貍଒㒻㬌嵚⯙諔㧴鄡탂㽭啄牧鐆⋑⁙Ҙ쉢踡箛㕧䒁㨸퓊祵⋹矶轢甖쇆킳뉒ㅲ埈韃윔淬铯ጶ㳔䣶鄱㕄읦좌滁Ể饺绊惠邘狢ꭽ褴ꈃ쵢剹뫑乜뜈㧢㩁▵郚伒㍖䨐 [ 144.920589][ T5830] usb 9-1: SerialNumber:  [ 144.932213][T11168] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1487'. [ 145.003728][T11172] Invalid source name [ 145.005404][T11172] UBIFS error (pid: 11172): cannot open "./file0", error -22 [ 145.008823][T11174] binder: 11173:11174 ioctl c00c620f 200000000500 returned -22 [ 145.036680][T11176] tipc: Enabled bearer , priority 10 [ 145.080074][T11182] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1493'. [ 145.084737][T11182] sock: sock_set_timeout: `syz.5.1493' (pid 11182) tries to set negative timeout [ 145.088943][T11183] tipc: Enabling of bearer rejected, already enabled [ 145.298998][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1494'. [ 145.305638][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1494'. [ 145.310165][T11189] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1494'. [ 145.326712][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1497'. [ 145.330612][ T5830] legousbtower 9-1:14.57: interrupt endpoints not found [ 145.566647][T11222] nbd: must specify at least one socket [ 145.572061][T11224] netlink: 'syz.1.1502': attribute type 1 has an invalid length. [ 145.733823][ T5830] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 145.737761][ T5830] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 145.894426][T11235] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 146.190257][T11244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.489515][T11253] tipc: Enabling of bearer rejected, failed to enable media [ 146.539344][ T5830] usb 9-1: USB disconnect, device number 20 [ 146.544977][ T5830] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 146.594004][ T6339] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 146.761312][T11264] bond0: entered allmulticast mode [ 146.764022][T11264] bond_slave_0: entered allmulticast mode [ 146.765860][T11264] bond_slave_1: entered allmulticast mode [ 146.767663][T11264] batadv0: entered allmulticast mode [ 146.786754][T11268] fuse: Bad value for 'fd' [ 146.788864][T11268] fuse: Bad value for 'fd' [ 147.596133][ T42] kauditd_printk_skb: 78 callbacks suppressed [ 147.596180][ T42] audit: type=1400 audit(1785187326.812:1837): avc: denied { create } for pid=11284 comm="syz.0.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 147.607458][ T42] audit: type=1400 audit(1785187326.812:1838): avc: denied { mount } for pid=11285 comm="syz.1.1522" name="/" dev="configfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 147.616865][ T42] audit: type=1400 audit(1785187326.812:1839): avc: denied { search } for pid=11285 comm="syz.1.1522" name="/" dev="configfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.626165][ T42] audit: type=1400 audit(1785187326.812:1840): avc: denied { search } for pid=11285 comm="syz.1.1522" name="usb_gadget" dev="configfs" ino=3347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.635765][ T42] audit: type=1400 audit(1785187326.812:1841): avc: denied { search } for pid=11285 comm="syz.1.1522" name="g1" dev="configfs" ino=18176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.646542][ T42] audit: type=1400 audit(1785187326.812:1842): avc: denied { write } for pid=11285 comm="syz.1.1522" name="idVendor" dev="configfs" ino=40734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 147.653643][ T42] audit: type=1400 audit(1785187326.812:1843): avc: denied { open } for pid=11285 comm="syz.1.1522" path="/356/config/usb_gadget/g1/idVendor" dev="configfs" ino=40734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 147.661393][ T42] audit: type=1400 audit(1785187326.842:1844): avc: denied { write } for pid=11285 comm="syz.1.1522" name="functions" dev="configfs" ino=18177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.669228][ T42] audit: type=1400 audit(1785187326.842:1845): avc: denied { add_name } for pid=11285 comm="syz.1.1522" name="Loopback.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 147.675963][ T42] audit: type=1400 audit(1785187326.842:1846): avc: denied { create } for pid=11285 comm="syz.1.1522" name="Loopback.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 148.103253][ T1358] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 148.269238][T11318] tmpfs: Bad value for 'mpol' [ 148.273232][ T1358] usb 6-1: Using ep0 maxpacket: 32 [ 148.276449][ T1358] usb 6-1: unable to get BOS descriptor or descriptor too short [ 148.282234][ T1358] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 148.284895][ T1358] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 148.287384][ T1358] usb 6-1: config 14 has no interface number 0 [ 148.289381][ T1358] usb 6-1: config 14 has no interface number 1 [ 148.291291][ T1358] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 148.294624][ T1358] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 148.298171][ T1358] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 148.301632][ T1358] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 148.306151][ T1358] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 148.310042][ T1358] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.314497][ T1358] usb 6-1: config 14 interface 57 has no altsetting 0 [ 148.316839][ T1358] usb 6-1: config 14 interface 228 has no altsetting 0 [ 148.320653][ T1358] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 148.323553][ T1358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.325959][ T1358] usb 6-1: Product: 㨓傖⯲级逯쭟討ż⻈゙ꃅͶӕ㈸⣦묺桍衷䤃诟⿳뤌解睺礶苷쬢燑 [ 148.329865][ T1358] usb 6-1: Manufacturer: 渶㱯鲷諷䲄ਲ਼唫ﾤ텭ꨐ굙ኪ메䒫ɼ瓓淖퀗껳껞돍猺ﳝ諌麯蔙槈꿪宯榦貍଒㒻㬌嵚⯙諔㧴鄡탂㽭啄牧鐆⋑⁙Ҙ쉢踡箛㕧䒁㨸퓊祵⋹矶轢甖쇆킳뉒ㅲ埈韃윔淬铯ጶ㳔䣶鄱㕄읦좌滁Ể饺绊惠邘狢ꭽ褴ꈃ쵢剹뫑乜뜈㧢㩁▵郚伒㍖䨐 [ 148.340187][ T1358] usb 6-1: SerialNumber:  [ 148.380308][T11330] fuse: Bad value for 'fd' [ 148.473956][ T6339] IPVS: starting estimator thread 0... [ 148.554784][T11347] netlink: 'syz.0.1540': attribute type 19 has an invalid length. [ 148.573590][T11336] IPVS: using max 25 ests per chain, 60000 per kthread [ 148.594978][T11352] input: syz1 as /devices/virtual/input/input29 [ 148.750915][ T1358] legousbtower 6-1:14.57: interrupt endpoints not found [ 148.868810][T11380] __nla_validate_parse: 7 callbacks suppressed [ 148.868822][T11380] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1549'. [ 148.965279][T11390] binder: 11389:11390 ioctl 4048ae9b 200000001400 returned -22 [ 149.158493][ T1358] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 149.167093][ T1358] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 149.305838][T11448] autofs4:pid:11448:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 149.335342][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1567'. [ 149.352875][T11452] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.388563][T11452] 8021q: VLANs not supported on ip6tnl0 [ 149.464486][T11441] VFS: file-max limit 0 reached [ 149.559519][T11469] file system registered [ 149.597419][T11469] read descriptors [ 149.608761][T11469] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 149.698459][ T7619] ffs_data_put(): freeing [ 149.781964][T11479] netlink: 'syz.4.1571': attribute type 11 has an invalid length. [ 149.875554][T11483] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1574'. [ 149.875781][T11484] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1574'. [ 149.878962][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1574'. [ 149.882757][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1574'. [ 149.890257][T11484] netlink: 'syz.5.1574': attribute type 34 has an invalid length. [ 149.896816][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1574'. [ 149.968621][ T60] usb 6-1: USB disconnect, device number 17 [ 149.982780][ T60] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 150.069805][T11502] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 150.072815][T11502] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 150.081919][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1579'. [ 150.251238][T11520] netlink: 'syz.5.1585': attribute type 4 has an invalid length. [ 150.458390][T11542] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 150.609995][T11566] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1598'. [ 150.810123][T11584] "syz.1.1606" (11584) uses obsolete ecb(arc4) skcipher [ 150.829297][T11592] syzkaller0: entered promiscuous mode [ 150.829413][T11584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1606'. [ 150.831591][T11592] syzkaller0: entered allmulticast mode [ 150.846489][T11592] tipc: Enabled bearer , priority 0 [ 150.906516][T11580] xfrm0 speed is unknown, defaulting to 1000 [ 150.970097][T11590] tipc: Resetting bearer [ 150.971787][T11608] netlink: 'syz.1.1612': attribute type 11 has an invalid length. [ 150.987704][T11590] tipc: Disabling bearer [ 151.088562][T11612] openvswitch: netlink: Message has 5 unknown bytes. [ 151.783201][ T5887] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 151.869985][T11644] SELinux: policydb string length 0 does not match expected length 8 [ 151.874132][T11644] SELinux: failed to load policy [ 151.933339][ T5887] usb 9-1: Using ep0 maxpacket: 32 [ 151.935286][T11645] ehci-pci 0000:00:1d.7: remove, state 4 [ 151.936365][ T5887] usb 9-1: config 0 has no interfaces? [ 151.941201][T11645] usb usb2: USB disconnect, device number 1 [ 151.945457][ T5887] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 151.948762][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.953949][ T5887] usb 9-1: Product: syz [ 151.955276][ T5887] usb 9-1: Manufacturer: syz [ 151.958469][ T5887] usb 9-1: SerialNumber: syz [ 151.978733][ T5887] usb 9-1: config 0 descriptor?? [ 152.012608][T11645] ehci-pci 0000:00:1d.7: USB bus 2 deregistered [ 152.283645][ T60] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 152.293199][ T6339] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 152.443206][ T6339] usb 6-1: Using ep0 maxpacket: 8 [ 152.446411][ T6339] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 152.449363][ T6339] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 152.460095][ T6339] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 152.464780][ T6339] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 152.468345][ T6339] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 152.469785][ T60] usb 1-1: not running at top speed; connect to a high speed hub [ 152.474429][ T6339] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.474459][ T6339] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.474472][ T6339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.516306][ T60] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 152.523448][ T60] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 152.526452][ T60] usb 1-1: Product: QEMU USB Tablet [ 152.528113][ T60] usb 1-1: Manufacturer: QEMU [ 152.533445][ T60] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 152.577433][ T60] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0006/input/input30 [ 152.667657][ T60] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 152.693014][ T6339] usb 6-1: GET_CAPABILITIES returned 0 [ 152.698840][ T6339] usbtmc 6-1:16.0: can't read capabilities [ 152.718723][T11646] usb 1-1: USB disconnect, device number 2 [ 152.819676][T11657] fido_id[11657]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb1/1-1/report_descriptor': No such file or directory [ 152.897878][T11646] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 152.912911][T11646] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 152.919864][T11646] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 152.973364][ T60] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 152.993687][T11646] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 153.002880][T11646] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 153.006179][T11646] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 153.009718][T11646] usb usb2: Product: EHCI Host Controller [ 153.011502][T11646] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 153.013653][T11646] usb usb2: SerialNumber: 0000:00:1d.7 [ 153.034356][T11646] hub 2-0:1.0: USB hub found [ 153.041701][T11646] hub 2-0:1.0: 6 ports detected [ 153.099514][T11646] hub 3-0:1.0: USB hub found [ 153.104399][T11646] hub 3-0:1.0: 2 ports detected [ 153.154184][ T60] usb 10-1: Using ep0 maxpacket: 32 [ 153.164649][T11646] hub 4-0:1.0: USB hub found [ 153.167040][ T60] usb 10-1: unable to get BOS descriptor or descriptor too short [ 153.174353][ T60] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 153.177355][ T60] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 153.180238][ T60] usb 10-1: config 14 has no interface number 0 [ 153.182663][ T60] usb 10-1: config 14 has no interface number 1 [ 153.186318][ T42] kauditd_printk_skb: 67 callbacks suppressed [ 153.186332][ T42] audit: type=1400 audit(1785187332.402:1914): avc: denied { wake_alarm } for pid=11660 comm="syz.0.1628" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.187349][T11646] hub 4-0:1.0: 2 ports detected [ 153.191907][ T42] audit: type=1400 audit(1785187332.402:1915): avc: denied { lock } for pid=11660 comm="syz.0.1628" path="socket:[41851]" dev="sockfs" ino=41851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 153.198418][ T60] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 153.227565][ T60] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 153.238283][ T60] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 153.245164][T11645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.248646][ T60] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 153.252721][ T60] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 153.257569][T11645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.261038][ T60] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.266499][ T60] usb 10-1: config 14 interface 57 has no altsetting 0 [ 153.269519][ T60] usb 10-1: config 14 interface 228 has no altsetting 0 [ 153.274897][ T60] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 153.278777][ T60] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.282128][ T60] usb 10-1: Product: 㨓傖⯲级逯쭟討ż⻈゙ꃅͶӕ㈸⣦묺桍衷䤃诟⿳뤌解睺礶苷쬢燑 [ 153.287197][ T60] usb 10-1: Manufacturer: 渶㱯鲷諷䲄ਲ਼唫ﾤ텭ꨐ굙ኪ메䒫ɼ瓓淖퀗껳껞돍猺ﳝ諌麯蔙槈꿪宯榦貍଒㒻㬌嵚⯙諔㧴鄡탂㽭啄牧鐆⋑⁙Ҙ쉢踡箛㕧䒁㨸퓊祵⋹矶轢甖쇆킳뉒ㅲ埈韃윔淬铯ጶ㳔䣶鄱㕄읦좌滁Ể饺绊惠邘狢ꭽ褴ꈃ쵢剹뫑乜뜈㧢㩁▵郚伒㍖䨐 [ 153.289391][T11646] hub 1-0:1.0: USB hub found [ 153.302151][ T60] usb 10-1: SerialNumber:  [ 153.304414][T11646] hub 1-0:1.0: 2 ports detected [ 153.333282][ T1483] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 153.528257][ T1483] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 153.532860][ T1483] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 153.537533][ T1483] usb 2-1: Product: QEMU USB Tablet [ 153.539300][ T1483] usb 2-1: Manufacturer: QEMU [ 153.540862][ T1483] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 153.577096][ T1483] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0007/input/input31 [ 153.648257][ T1483] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 153.737177][ T60] legousbtower 10-1:14.57: interrupt endpoints not found [ 153.802676][ T42] audit: type=1400 audit(1785187333.012:1916): avc: denied { write } for pid=11663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.857667][ T42] audit: type=1400 audit(1785187333.072:1917): avc: denied { write } for pid=11666 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.140663][ T60] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 154.149169][ T60] legousbtower 10-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 154.635817][ T60] usb 9-1: USB disconnect, device number 21 [ 154.877980][ T5887] usb 6-1: USB disconnect, device number 18 [ 154.919395][T11677] __nla_validate_parse: 1 callbacks suppressed [ 154.919412][T11677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1631'. [ 154.980999][ T42] audit: type=1400 audit(1785187334.192:1918): avc: denied { getattr } for pid=11681 comm="syz.1.1632" name="/" dev="9p" ino=78395259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 154.983924][T11682] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 155.007268][ T42] audit: type=1400 audit(1785187334.222:1919): avc: denied { setattr } for pid=11681 comm="syz.1.1632" name="file0" dev="overlay" ino=78395519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.015242][ T42] audit: type=1400 audit(1785187334.222:1920): avc: denied { write open } for pid=11681 comm="syz.1.1632" path=2F202864656C6574656429 dev="tmpfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.022620][ T42] audit: type=1400 audit(1785187334.222:1921): avc: denied { link } for pid=11681 comm="syz.1.1632" name="#2084" dev="tmpfs" ino=2084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.037065][T11682] netlink: 'syz.1.1632': attribute type 29 has an invalid length. [ 155.040092][T11682] netlink: 'syz.1.1632': attribute type 3 has an invalid length. [ 155.043010][T11682] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1632'. [ 155.049051][ T42] audit: type=1400 audit(1785187334.262:1922): avc: denied { read } for pid=11681 comm="syz.1.1632" name="rtc0" dev="devtmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.056794][ T42] audit: type=1400 audit(1785187334.262:1923): avc: denied { ioctl } for pid=11681 comm="syz.1.1632" path="/dev/rtc0" dev="devtmpfs" ino=945 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 155.843360][ T60] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 155.968592][ T1358] usb 10-1: USB disconnect, device number 19 [ 155.990844][ T1358] legousbtower 10-1:14.228: LEGO USB Tower #-159 now disconnected [ 155.995770][ T60] usb 9-1: config 0 interface 0 has no altsetting 0 [ 155.999056][ T60] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 156.001809][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.011614][ T60] usb 9-1: config 0 descriptor?? [ 156.052200][T11699] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 156.304307][T11705] fuse: Bad value for 'fd' [ 156.384921][T11704] xfrm0 speed is unknown, defaulting to 1000 [ 156.638596][T11717] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 156.671734][ T60] usbhid 9-1:0.0: can't add hid device: -71 [ 156.677933][ T60] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 156.709190][ T60] usb 9-1: USB disconnect, device number 22 [ 156.786285][T11721] bond5: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 156.834615][T11726] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 156.841240][T11726] bond4 (unregistering): Released all slaves [ 157.014436][T11736] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 157.063291][ T60] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 157.179597][T11743] base or size exceeds the MTRR width [ 157.223368][ T60] usb 9-1: Using ep0 maxpacket: 32 [ 157.227333][ T60] usb 9-1: unable to get BOS descriptor or descriptor too short [ 157.231573][ T60] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 157.235797][ T60] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 157.238934][ T60] usb 9-1: config 14 has no interface number 0 [ 157.240962][ T60] usb 9-1: config 14 has no interface number 1 [ 157.243775][ T60] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 157.250066][ T60] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 157.254798][ T60] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 157.259832][ T60] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 157.264001][ T60] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 157.268301][ T60] usb 9-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.272933][ T60] usb 9-1: config 14 interface 57 has no altsetting 0 [ 157.275662][ T60] usb 9-1: config 14 interface 228 has no altsetting 0 [ 157.280534][ T60] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 157.283800][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.286965][ T60] usb 9-1: Product: 㨓傖⯲级逯쭟討ż⻈゙ꃅͶӕ㈸⣦묺桍衷䤃诟⿳뤌解睺礶苷쬢燑 [ 157.290264][ T60] usb 9-1: Manufacturer: 渶㱯鲷諷䲄ਲ਼唫ﾤ텭ꨐ굙ኪ메䒫ɼ瓓淖퀗껳껞돍猺ﳝ諌麯蔙槈꿪宯榦貍଒㒻㬌嵚⯙諔㧴鄡탂㽭啄牧鐆⋑⁙Ҙ쉢踡箛㕧䒁㨸퓊祵⋹矶轢甖쇆킳뉒ㅲ埈韃윔淬铯ጶ㳔䣶鄱㕄읦좌滁Ể饺绊惠邘狢ꭽ褴ꈃ쵢剹뫑乜뜈㧢㩁▵郚伒㍖䨐 [ 157.302251][ T60] usb 9-1: SerialNumber:  [ 157.521472][T11755] e1000e 0000:00:02.0 eth1: removed PHC [ 157.629926][T11755] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 157.715236][ T60] legousbtower 9-1:14.57: interrupt endpoints not found [ 157.863636][T11778] macsec0: entered promiscuous mode [ 157.865324][T11778] macsec0: entered allmulticast mode [ 157.869034][T11778] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1659'. [ 157.875125][T11780] program syz.1.1659 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.878383][T11780] ata1.00: non-matching transfer count (1730108969/0) [ 157.979380][T11792] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1663'. [ 158.090585][T11801] overlayfs: invalid origin (0000) [ 158.116120][ T60] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 158.129931][ T60] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 158.162652][T11809] netlink: 'syz.1.1668': attribute type 1 has an invalid length. [ 158.215691][T11809] veth5: entered promiscuous mode [ 158.221734][T11809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1668'. [ 158.227351][T11820] scsi_dev_info_list_add_str: bad dev info string 've' '' '' [ 158.229427][T11809] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.237457][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 158.237471][ T42] audit: type=1400 audit(1785187337.452:1968): avc: denied { write } for pid=11821 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.257831][ T42] audit: type=1400 audit(1785187337.472:1969): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 158.270170][ T42] audit: type=1400 audit(1785187337.472:1970): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 158.314764][ T42] audit: type=1400 audit(1785187337.532:1971): avc: denied { write } for pid=11824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.323621][ T42] audit: type=1400 audit(1785187337.542:1972): avc: denied { remount } for pid=11828 comm="syz.1.1674" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 158.324629][T11832] /dev/sg0: Can't lookup blockdev [ 158.333377][ T42] audit: type=1400 audit(1785187337.542:1973): avc: denied { mounton } for pid=11828 comm="syz.1.1674" path="/392/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 158.375301][ T42] audit: type=1400 audit(1785187337.592:1974): avc: denied { write } for pid=11835 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.415084][ T42] audit: type=1400 audit(1785187337.632:1975): avc: denied { mounton } for pid=11844 comm="syz.0.1677" path="/proc/1758/task" dev="proc" ino=45079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 158.458084][ T42] audit: type=1400 audit(1785187337.672:1976): avc: denied { write } for pid=11846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 158.460033][T11849] /dev/sr0: Can't lookup blockdev [ 158.470796][T11850] /dev/sr0: Can't lookup blockdev [ 158.481266][ T42] audit: type=1400 audit(1785187337.692:1977): avc: denied { mounton } for pid=11838 comm="syz.1.1676" path="/393/file0" dev="tmpfs" ino=2199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 158.519013][T11855] sctp: [Deprecated]: syz.0.1679 (pid 11855) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.519013][T11855] Use struct sctp_sack_info instead [ 158.614646][T11851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1676'. [ 158.924584][ T60] usb 9-1: USB disconnect, device number 23 [ 158.937345][ T60] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 159.497342][T11870] SELinux: invalid class [ 159.505085][T11870] SELinux: failed to load policy [ 159.620407][T11876] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1683'. [ 159.625682][T11876] netlink: 'syz.4.1683': attribute type 1 has an invalid length. [ 159.668451][T11878] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 159.677295][T11878] batman_adv: batadv0: Adding interface: gretap2 [ 159.679515][T11878] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.687983][T11878] batman_adv: batadv0: Interface activated: gretap2 [ 160.012068][T11906] netlink: 11396 bytes leftover after parsing attributes in process `syz.0.1692'. [ 160.036928][T11907] block device autoloading is deprecated and will be removed. [ 160.068400][T11909] FAULT_INJECTION: forcing a failure. [ 160.068400][T11909] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 160.072316][T11909] CPU: 2 UID: 0 PID: 11909 Comm: syz.0.1693 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.072334][T11909] Tainted: [L]=SOFTLOCKUP [ 160.072338][T11909] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.072344][T11909] Call Trace: [ 160.072348][T11909] [ 160.072353][T11909] dump_stack_lvl+0x100/0x190 [ 160.072382][T11909] should_fail_ex.cold+0x5/0xa [ 160.072396][T11909] strncpy_from_user+0x3b/0x2d0 [ 160.072417][T11909] do_getname+0x78/0x390 [ 160.072432][T11909] user_path_at+0x26/0x60 [ 160.072443][T11909] __x64_sys_mount+0x1fb/0x310 [ 160.072458][T11909] ? __pfx___x64_sys_mount+0x10/0x10 [ 160.072477][T11909] do_syscall_64+0x115/0x870 [ 160.072495][T11909] ? clear_bhb_loop+0x40/0x90 [ 160.072508][T11909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.072520][T11909] RIP: 0033:0x7f3d96b9de99 [ 160.072530][T11909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.072540][T11909] RSP: 002b:00007f3d94df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 160.072551][T11909] RAX: ffffffffffffffda RBX: 00007f3d96e25fa0 RCX: 00007f3d96b9de99 [ 160.072558][T11909] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 160.072564][T11909] RBP: 00007f3d94df6090 R08: 0000200000000500 R09: 0000000000000000 [ 160.072571][T11909] R10: 0000000000020020 R11: 0000000000000246 R12: 0000000000000001 [ 160.072577][T11909] R13: 00007f3d96e26038 R14: 00007f3d96e25fa0 R15: 00007fff9b7f8518 [ 160.072591][T11909] [ 160.234073][T11921] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 160.374211][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.405064][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.418446][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.422297][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.425839][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.453454][ T5746] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.457283][ T5746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.459714][ T5746] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.465034][ T5746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.468662][ T5746] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.635319][T11944] FAULT_INJECTION: forcing a failure. [ 160.635319][T11944] name failslab, interval 1, probability 0, space 0, times 1 [ 160.641905][T11944] CPU: 2 UID: 0 PID: 11944 Comm: syz.4.1703 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.641933][T11944] Tainted: [L]=SOFTLOCKUP [ 160.641939][T11944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.641949][T11944] Call Trace: [ 160.641955][T11944] [ 160.641963][T11944] dump_stack_lvl+0x100/0x190 [ 160.641991][T11944] should_fail_ex.cold+0x5/0xa [ 160.642016][T11944] should_failslab+0xc2/0x120 [ 160.642041][T11944] __kmalloc_noprof+0xfc/0x820 [ 160.642060][T11944] ? __lock_acquire+0x49f/0x1a40 [ 160.642083][T11944] ? tomoyo_encode2+0xfb/0x3c0 [ 160.642106][T11944] tomoyo_encode2+0xfb/0x3c0 [ 160.642127][T11944] tomoyo_encode+0x29/0x50 [ 160.642143][T11944] tomoyo_mount_acl+0x14c/0x8b0 [ 160.642169][T11944] ? is_bpf_text_address+0x8a/0x1a0 [ 160.642195][T11944] ? bpf_ksym_find+0x128/0x1c0 [ 160.642222][T11944] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 160.642245][T11944] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 160.642271][T11944] ? kernel_text_address+0x8d/0x100 [ 160.642292][T11944] ? unwind_get_return_address+0x59/0xa0 [ 160.642337][T11944] ? tomoyo_domain+0xb2/0x150 [ 160.642356][T11944] ? tomoyo_profile+0x47/0x60 [ 160.642378][T11944] tomoyo_mount_permission+0x214/0x460 [ 160.642401][T11944] ? tomoyo_mount_permission+0x1f6/0x460 [ 160.642427][T11944] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 160.642464][T11944] security_sb_mount+0xdd/0x270 [ 160.642491][T11944] path_mount+0x158/0x23d0 [ 160.642520][T11944] ? __pfx_path_mount+0x10/0x10 [ 160.642548][T11944] ? lockdep_hardirqs_on+0x78/0x100 [ 160.642572][T11944] ? putname+0xb1/0x110 [ 160.642591][T11944] ? kmem_cache_free+0x127/0x6b0 [ 160.642618][T11944] ? __x64_sys_mount+0x293/0x310 [ 160.642640][T11944] __x64_sys_mount+0x293/0x310 [ 160.642663][T11944] ? __pfx___x64_sys_mount+0x10/0x10 [ 160.642692][T11944] do_syscall_64+0x115/0x870 [ 160.642711][T11944] ? clear_bhb_loop+0x40/0x90 [ 160.642733][T11944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.642751][T11944] RIP: 0033:0x7fca7139de99 [ 160.642767][T11944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.642784][T11944] RSP: 002b:00007fca7223d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 160.642802][T11944] RAX: ffffffffffffffda RBX: 00007fca71625fa0 RCX: 00007fca7139de99 [ 160.642815][T11944] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 160.642826][T11944] RBP: 00007fca7223d090 R08: 0000200000000500 R09: 0000000000000000 [ 160.642838][T11944] R10: 0000000000020020 R11: 0000000000000246 R12: 0000000000000001 [ 160.642849][T11944] R13: 00007fca71626038 R14: 00007fca71625fa0 R15: 00007fff997343f8 [ 160.642875][T11944] [ 160.760334][T11947] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 160.814838][T11930] xfrm0 speed is unknown, defaulting to 1000 [ 160.990931][T11930] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.993276][T11930] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.997578][T11930] bridge_slave_0: entered allmulticast mode [ 161.000160][T11930] bridge_slave_0: entered promiscuous mode [ 161.003846][T11930] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.006247][T11930] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.008741][T11930] bridge_slave_1: entered allmulticast mode [ 161.011735][T11930] bridge_slave_1: entered promiscuous mode [ 161.012649][T11966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11966 comm=syz.4.1708 [ 161.019486][T11966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=11966 comm=syz.4.1708 [ 161.028751][T11930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.033979][T11930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.060165][T11930] team0: Port device team_slave_0 added [ 161.065509][T11930] team0: Port device team_slave_1 added [ 161.092257][T11930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.094622][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.102710][T11930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.107664][T11930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.110225][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.119248][T11930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.139584][T11973] syzkaller0: entered promiscuous mode [ 161.141485][T11973] syzkaller0: entered allmulticast mode [ 161.147581][T11973] 0: reclassify loop, rule prio 0, protocol 800 [ 161.152958][T11973] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1711'. [ 161.157752][T11973] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1711'. [ 161.158180][T11930] hsr_slave_0: entered promiscuous mode [ 161.165099][T11930] hsr_slave_1: entered promiscuous mode [ 161.168437][T11930] debugfs: 'hsr0' already exists in 'hsr' [ 161.170933][T11930] Cannot create hsr debugfs directory [ 161.287277][T11930] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.383079][T11930] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.416719][T11984] program syz.4.1713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.419683][T11984] ata1.00: invalid service action 3 [ 161.491593][T11930] team0: Port device netdevsim1 removed [ 161.494978][T11930] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.549616][T11989] netlink: 'syz.4.1714': attribute type 1 has an invalid length. [ 161.554426][T11989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1714'. [ 161.587214][T11930] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.687491][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'. [ 161.705995][T12001] 8021q: adding VLAN 0 to HW filter on device bond5 [ 161.723230][T12001] macvlan1: entered allmulticast mode [ 161.725597][T12001] veth1_vlan: entered allmulticast mode [ 161.728676][T12001] bond5: (slave macvlan1): Enslaving as an active interface with an up link [ 161.788592][T12001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.803413][T12001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.809055][T11930] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 161.812998][T11930] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.815872][T11930] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.825606][T11930] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.828398][T11930] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 161.832374][T11930] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.835357][T11930] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 161.842936][T11930] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 161.905330][T11930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.917754][T11930] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.927725][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.930608][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.941067][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.944125][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.964384][T12022] tracefs: Bad value for 'gid' [ 161.965983][T12022] tracefs: Bad value for 'gid' [ 161.998516][T12025] 9pnet: Found fid 0 not clunked [ 162.209239][T11930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.228310][ T5887] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 162.241917][ T5887] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz1] on syz0 [ 162.249895][T11930] veth0_vlan: entered promiscuous mode [ 162.256115][T11930] veth1_vlan: entered promiscuous mode [ 162.274175][T11930] veth0_macvtap: entered promiscuous mode [ 162.278490][T11930] veth1_macvtap: entered promiscuous mode [ 162.289729][T11930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.297836][T11930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.305688][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.308724][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.312021][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.316367][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.396937][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.403201][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.418445][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.421084][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.461772][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1698'. [ 162.473697][T12046] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 162.494509][ T5096] Bluetooth: hci4: command tx timeout [ 162.518648][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 162.522259][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 162.595702][T12068] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 162.595702][T12068] The task syz.0.1730 (12068) triggered the difference, watch for misbehavior. [ 162.635253][T12070] team0 (unregistering): left promiscuous mode [ 162.637361][T12070] team_slave_0: left promiscuous mode [ 162.639811][T12070] team_slave_1: left promiscuous mode [ 162.644052][T12070] team0 (unregistering): Port device team_slave_0 removed [ 162.647355][T12070] team0 (unregistering): Port device team_slave_1 removed [ 162.661597][T12072] syzkaller0: entered promiscuous mode [ 162.666242][T12072] syzkaller0: entered allmulticast mode [ 162.675625][T12074] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 162.704571][T12072] tipc: Enabled bearer , priority 0 [ 162.708091][T12071] tipc: Resetting bearer [ 162.723100][T12071] tipc: Disabling bearer [ 163.458827][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1737'. [ 163.498977][T12088] netlink: 'syz.1.1738': attribute type 1 has an invalid length. [ 163.514867][T12088] 8021q: adding VLAN 0 to HW filter on device bond7 [ 163.589362][T12095] FAULT_INJECTION: forcing a failure. [ 163.589362][T12095] name failslab, interval 1, probability 0, space 0, times 0 [ 163.594024][T12095] CPU: 3 UID: 0 PID: 12095 Comm: syz.1.1741 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.594043][T12095] Tainted: [L]=SOFTLOCKUP [ 163.594048][T12095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.594055][T12095] Call Trace: [ 163.594059][T12095] [ 163.594064][T12095] dump_stack_lvl+0x100/0x190 [ 163.594082][T12095] should_fail_ex.cold+0x5/0xa [ 163.594097][T12095] should_failslab+0xc2/0x120 [ 163.594113][T12095] __kmalloc_cache_noprof+0x91/0x6c0 [ 163.594134][T12095] ? alloc_fs_context+0x57/0xf40 [ 163.594152][T12095] alloc_fs_context+0x57/0xf40 [ 163.594171][T12095] path_mount+0xcf7/0x23d0 [ 163.594189][T12095] ? __pfx_path_mount+0x10/0x10 [ 163.594203][T12095] ? lockdep_hardirqs_on+0x78/0x100 [ 163.594218][T12095] ? putname+0xb1/0x110 [ 163.594231][T12095] ? kmem_cache_free+0x127/0x6b0 [ 163.594247][T12095] ? __x64_sys_mount+0x293/0x310 [ 163.594265][T12095] __x64_sys_mount+0x293/0x310 [ 163.594281][T12095] ? __pfx___x64_sys_mount+0x10/0x10 [ 163.594301][T12095] do_syscall_64+0x115/0x870 [ 163.594313][T12095] ? clear_bhb_loop+0x40/0x90 [ 163.594328][T12095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.594340][T12095] RIP: 0033:0x7fdc7559de99 [ 163.594350][T12095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.594362][T12095] RSP: 002b:00007fdc764d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 163.594374][T12095] RAX: ffffffffffffffda RBX: 00007fdc75825fa0 RCX: 00007fdc7559de99 [ 163.594381][T12095] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 163.594388][T12095] RBP: 00007fdc764d9090 R08: 0000200000000500 R09: 0000000000000000 [ 163.594395][T12095] R10: 0000000000020020 R11: 0000000000000246 R12: 0000000000000001 [ 163.594402][T12095] R13: 00007fdc75826038 R14: 00007fdc75825fa0 R15: 00007fff4b00b518 [ 163.594416][T12095] [ 163.681061][T12097] program syz.1.1742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.686362][T12097] netlink: 'syz.1.1742': attribute type 3 has an invalid length. [ 163.689607][T12097] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1742'. [ 163.983234][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 164.133291][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 164.136462][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 164.139960][ T24] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 164.152323][ T24] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 164.154919][ T24] usb 6-1: config 14 has no interface number 0 [ 164.156829][ T24] usb 6-1: config 14 has no interface number 1 [ 164.158734][ T24] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 164.162078][ T24] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 164.165907][ T24] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 164.169741][ T24] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 164.174120][ T24] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 164.177646][ T24] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.181697][ T24] usb 6-1: config 14 interface 57 has no altsetting 0 [ 164.184878][ T24] usb 6-1: config 14 interface 228 has no altsetting 0 [ 164.188647][ T24] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 164.191539][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.194695][ T24] usb 6-1: Product: 㨓傖⯲级逯쭟討ż⻈゙ꃅͶӕ㈸⣦묺桍衷䤃诟⿳뤌解睺礶苷쬢燑 [ 164.198054][ T24] usb 6-1: Manufacturer: 渶㱯鲷諷䲄ਲ਼唫ﾤ텭ꨐ굙ኪ메䒫ɼ瓓淖퀗껳껞돍猺ﳝ諌麯蔙槈꿪宯榦貍଒㒻㬌嵚⯙諔㧴鄡탂㽭啄牧鐆⋑⁙Ҙ쉢踡箛㕧䒁㨸퓊祵⋹矶轢甖쇆킳뉒ㅲ埈韃윔淬铯ጶ㳔䣶鄱㕄읦좌滁Ể饺绊惠邘狢ꭽ褴ꈃ쵢剹뫑乜뜈㧢㩁▵郚伒㍖䨐 [ 164.208148][ T24] usb 6-1: SerialNumber:  [ 164.217721][ T42] kauditd_printk_skb: 85 callbacks suppressed [ 164.217734][ T42] audit: type=1400 audit(1785187343.432:2063): avc: denied { append } for pid=12113 comm="syz.0.1748" name="nbd0" dev="devtmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.225369][T12114] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 164.514669][ T42] audit: type=1400 audit(1785187343.732:2064): avc: denied { ioctl } for pid=12124 comm="syz.0.1749" path="socket:[48329]" dev="sockfs" ino=48329 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 164.573284][ T5096] Bluetooth: hci4: command tx timeout [ 164.642737][ T24] legousbtower 6-1:14.57: interrupt endpoints not found [ 165.047655][ T24] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 165.055921][ T24] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 165.073194][T12127] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1750'. [ 165.078941][T12127] netlink: 'syz.0.1750': attribute type 10 has an invalid length. [ 165.084039][T12127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.632958][T12130] netlink: 'syz.0.1751': attribute type 10 has an invalid length. [ 165.641226][T12132] dvmrp0: entered allmulticast mode [ 165.685108][T12135] smc: net device bond_slave_1 applied user defined pnetid SYZ2 [ 165.851671][ C1] usb 6-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 165.854933][ T24] usb 6-1: USB disconnect, device number 19 [ 165.855805][T12142] FAULT_INJECTION: forcing a failure. [ 165.855805][T12142] name failslab, interval 1, probability 0, space 0, times 0 [ 165.861088][T12142] CPU: 3 UID: 0 PID: 12142 Comm: syz.0.1754 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.861113][T12142] Tainted: [L]=SOFTLOCKUP [ 165.861119][T12142] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 165.861128][T12142] Call Trace: [ 165.861134][T12142] [ 165.861140][T12142] dump_stack_lvl+0x100/0x190 [ 165.861166][T12142] should_fail_ex.cold+0x5/0xa [ 165.861187][T12142] should_failslab+0xc2/0x120 [ 165.861209][T12142] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 165.861232][T12142] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 165.861258][T12142] kmemdup_nul+0x49/0xd0 [ 165.861277][T12142] vfs_parse_fs_qstr+0x112/0x1c0 [ 165.861299][T12142] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 165.861326][T12142] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 165.861349][T12142] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 165.861369][T12142] vfs_parse_monolithic_sep+0x195/0x210 [ 165.861393][T12142] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 165.861417][T12142] ? alloc_fs_context+0x65a/0xf40 [ 165.861442][T12142] path_mount+0xd74/0x23d0 [ 165.861467][T12142] ? __pfx_path_mount+0x10/0x10 [ 165.861492][T12142] ? lockdep_hardirqs_on+0x78/0x100 [ 165.861514][T12142] ? putname+0xb1/0x110 [ 165.861532][T12142] ? kmem_cache_free+0x127/0x6b0 [ 165.861555][T12142] ? __x64_sys_mount+0x293/0x310 [ 165.861575][T12142] __x64_sys_mount+0x293/0x310 [ 165.861596][T12142] ? __pfx___x64_sys_mount+0x10/0x10 [ 165.861623][T12142] do_syscall_64+0x115/0x870 [ 165.861641][T12142] ? clear_bhb_loop+0x40/0x90 [ 165.861662][T12142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.861679][T12142] RIP: 0033:0x7fd2f219de99 [ 165.861693][T12142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.861709][T12142] RSP: 002b:00007fd2f3112028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 165.861726][T12142] RAX: ffffffffffffffda RBX: 00007fd2f2425fa0 RCX: 00007fd2f219de99 [ 165.861736][T12142] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000000 [ 165.861746][T12142] RBP: 00007fd2f3112090 R08: 0000200000000500 R09: 0000000000000000 [ 165.861756][T12142] R10: 0000000000020020 R11: 0000000000000246 R12: 0000000000000002 [ 165.861766][T12142] R13: 00007fd2f2426038 R14: 00007fd2f2425fa0 R15: 00007ffecec8fa68 [ 165.861789][T12142] [ 165.864574][ T24] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 166.391292][ T42] audit: type=1400 audit(1785187345.602:2065): avc: denied { name_connect } for pid=12154 comm="syz.1.1758" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 166.541336][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1760'. [ 166.653224][ T5096] Bluetooth: hci4: command tx timeout [ 166.727466][T12168] FAULT_INJECTION: forcing a failure. [ 166.727466][T12168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.732205][T12168] CPU: 3 UID: 0 PID: 12168 Comm: syz.1.1763 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.732224][T12168] Tainted: [L]=SOFTLOCKUP [ 166.732228][T12168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.732234][T12168] Call Trace: [ 166.732238][T12168] [ 166.732243][T12168] dump_stack_lvl+0x100/0x190 [ 166.732261][T12168] should_fail_ex.cold+0x5/0xa [ 166.732276][T12168] _copy_to_user+0x32/0xd0 [ 166.732293][T12168] simple_read_from_buffer+0xcb/0x170 [ 166.732306][T12168] proc_fail_nth_read+0x1af/0x230 [ 166.732324][T12168] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.732343][T12168] ? rw_verify_area+0xce/0x6d0 [ 166.732358][T12168] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.732375][T12168] vfs_read+0x1e4/0xb40 [ 166.732394][T12168] ? __pfx_vfs_read+0x10/0x10 [ 166.732411][T12168] ? __fget_files+0x215/0x3d0 [ 166.732426][T12168] ? __fget_files+0x21f/0x3d0 [ 166.732441][T12168] ksys_read+0x12a/0x250 [ 166.732458][T12168] ? __pfx_ksys_read+0x10/0x10 [ 166.732479][T12168] do_syscall_64+0x115/0x870 [ 166.732492][T12168] ? clear_bhb_loop+0x40/0x90 [ 166.732505][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.732522][T12168] RIP: 0033:0x7fdc7555e6ce [ 166.732531][T12168] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 166.732542][T12168] RSP: 002b:00007fdc764d8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.732553][T12168] RAX: ffffffffffffffda RBX: 00007fdc764d96c0 RCX: 00007fdc7555e6ce [ 166.732560][T12168] RDX: 000000000000000f RSI: 00007fdc764d90a0 RDI: 0000000000000003 [ 166.732566][T12168] RBP: 00007fdc764d9090 R08: 0000000000000000 R09: 0000000000000000 [ 166.732573][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.732580][T12168] R13: 00007fdc75826038 R14: 00007fdc75825fa0 R15: 00007fff4b00b518 [ 166.732594][T12168] [ 166.822614][ T42] audit: type=1400 audit(1785187346.032:2066): avc: denied { getopt } for pid=12169 comm="syz.1.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.947010][ T42] audit: type=1400 audit(1785187346.162:2067): avc: denied { read } for pid=12174 comm="syz.0.1765" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 166.963251][ T42] audit: type=1400 audit(1785187346.162:2068): avc: denied { open } for pid=12174 comm="syz.0.1765" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 167.243450][ T5830] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 167.393285][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 167.396530][ T5830] usb 5-1: unable to get BOS descriptor or descriptor too short [ 167.399849][ T5830] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 167.402462][ T5830] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 167.406304][ T5830] usb 5-1: config 14 has no interface number 0 [ 167.408941][ T5830] usb 5-1: config 14 has no interface number 1 [ 167.411523][ T5830] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 167.416605][ T5830] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 167.421570][ T5830] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 167.426619][ T5830] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 167.431350][ T5830] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 167.436551][ T5830] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.440945][ T5830] usb 5-1: config 14 interface 57 has no altsetting 0 [ 167.444124][ T5830] usb 5-1: config 14 interface 228 has no altsetting 0 [ 167.448674][ T5830] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 167.452228][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.456364][ T5830] usb 5-1: Product: 㨓傖⯲级逯쭟討ż⻈゙ꃅͶӕ㈸⣦묺桍衷䤃诟⿳뤌解睺礶苷쬢燑 [ 167.460576][ T5830] usb 5-1: Manufacturer: 渶㱯鲷諷䲄ਲ਼唫ﾤ텭ꨐ굙ኪ메䒫ɼ瓓淖퀗껳껞돍猺ﳝ諌麯蔙槈꿪宯榦貍଒㒻㬌嵚⯙諔㧴鄡탂㽭啄牧鐆⋑⁙Ҙ쉢踡箛㕧䒁㨸퓊祵⋹矶轢甖쇆킳뉒ㅲ埈韃윔淬铯ጶ㳔䣶鄱㕄읦좌滁Ể饺绊惠邘狢ꭽ褴ꈃ쵢剹뫑乜뜈㧢㩁▵郚伒㍖䨐 [ 167.473983][ T5830] usb 5-1: SerialNumber:  [ 167.525993][ T42] audit: type=1400 audit(1785187346.742:2069): avc: denied { connect } for pid=12150 comm="syz.4.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.526526][T12152] xt_hashlimit: size too large, truncated to 1048576 [ 167.696498][ T42] audit: type=1400 audit(1785187346.912:2070): avc: denied { read } for pid=12181 comm="syz.1.1767" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.712891][ T42] audit: type=1400 audit(1785187346.912:2071): avc: denied { open } for pid=12181 comm="syz.1.1767" path="/dev/ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.771165][ T42] audit: type=1400 audit(1785187346.982:2072): avc: denied { write } for pid=12183 comm="syz.1.1768" name="c.1" dev="configfs" ino=34248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 167.835048][T12190] netlink: 'syz.4.1770': attribute type 7 has an invalid length. [ 167.884710][ T5830] legousbtower 5-1:14.57: interrupt endpoints not found [ 167.895559][T12194] usb usb8: usbfs: process 12194 (syz.4.1771) did not claim interface 0 before use [ 167.924963][T12194] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 168.173819][ T10] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 168.242380][T12200] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1774'. [ 168.286930][ T5830] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 168.292080][ T5830] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 168.339068][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 168.342097][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 168.346400][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.350965][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 168.355997][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 168.361315][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 168.364612][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 168.368693][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.372188][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 168.375737][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 168.380826][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 168.383686][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 168.387787][ T10] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.392386][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 168.396829][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 168.404328][ T10] usb 6-1: string descriptor 0 read error: -22 [ 168.406811][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 168.410142][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.419532][ T10] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 168.728618][T12196] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1772'. [ 168.733297][ T5096] Bluetooth: hci4: command tx timeout [ 168.801343][ C0] usb 5-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 168.804348][ T1483] usb 6-1: USB disconnect, device number 20 [ 168.847902][T12206] comedi comedi4: bad chanlist[0]=0x0000ffff chan=65535 range length=2 [ 168.853191][T12206] binder: 12205:12206 ioctl 401870cb 200000000080 returned -22 [ 168.856809][T12206] comedi comedi4: bad chanlist[0]=0x0000ffff chan=65535 range length=2 [ 169.152433][T12224] overlayfs: failed to resolve './bus': -2 [ 169.156197][T12224] SELinux: ebitmap: start bit 0 comes after start bit 0 [ 169.158302][T12224] SELinux: failed to load policy [ 169.165582][T12224] pimreg: entered allmulticast mode [ 169.339096][T12237] netlink: 'syz.1.1786': attribute type 1 has an invalid length. [ 169.401596][T12237] bridge3: entered promiscuous mode [ 169.408748][T12237] bond8: (slave bridge3): making interface the new active one [ 169.411729][T12237] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 169.446408][T12243] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input32 [ 169.456536][T12245] KVM: debugfs: duplicate directory 12245-5 [ 169.468907][T12245] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 169.487909][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 169.487921][ T42] audit: type=1400 audit(1785187348.702:2076): avc: denied { write } for pid=12239 comm="syz.4.1787" name="functions" dev="configfs" ino=18177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.510847][ T42] audit: type=1400 audit(1785187348.722:2077): avc: denied { write } for pid=12239 comm="syz.4.1787" name="header" dev="configfs" ino=45730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.515967][T12243] [ 169.518282][ T42] audit: type=1400 audit(1785187348.722:2078): avc: denied { write } for pid=12239 comm="syz.4.1787" name="header" dev="configfs" ino=45744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.519038][T12243] ====================================================== [ 169.519048][T12243] WARNING: possible circular locking dependency detected [ 169.519059][T12243] syzkaller #0 Tainted: G L SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 169.519070][T12243] ------------------------------------------------------ [ 169.519077][T12243] syz.4.1787/12243 is trying to acquire lock: [ 169.519087][T12243] ffffffff901d0348 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x7c/0x650 [ 169.519139][T12243] [ 169.519139][T12243] but task is already holding lock: [ 169.519144][T12243] ffff888039bc2740 (&sb->s_type->i_mutex_key#32){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 169.519197][T12243] [ 169.519197][T12243] which lock already depends on the new lock. [ 169.519197][T12243] [ 169.519204][T12243] [ 169.519204][T12243] the existing dependency chain (in reverse order) is: [ 169.519210][T12243] [ 169.519210][T12243] -> #2 (&sb->s_type->i_mutex_key#32){++++}-{4:4}: [ 169.519241][T12243] lock_acquire+0x1b9/0x370 [ 169.519263][T12243] down_write+0x8b/0x1f0 [ 169.519284][T12243] configfs_depend_item_unlocked+0xf3/0x6a0 [ 169.519306][T12243] usbg_make_tpg+0x261/0x620 [ 169.519324][T12243] target_fabric_make_tpg+0xab/0x8c0 [ 169.519349][T12243] configfs_mkdir+0x51e/0xb70 [ 169.519371][T12243] vfs_mkdir+0x361/0x850 [ 169.519394][T12243] filename_mkdirat+0x48b/0x5e0 [ 169.519413][T12243] __x64_sys_mkdir+0x6b/0x90 [ 169.519432][T12243] do_syscall_64+0x115/0x870 [ 169.519451][T12243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.519469][T12243] [ 169.519469][T12243] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 169.519494][T12243] lock_acquire+0x1b9/0x370 [ 169.519519][T12243] __mutex_lock+0x1a4/0x1bd0 [ 169.519536][T12243] tcm_set_name+0x29/0xb0 [ 169.519552][T12243] function_make+0x21c/0x3f0 [ 169.519574][T12243] configfs_mkdir+0x51e/0xb70 [ 169.519598][T12243] vfs_mkdir+0x361/0x850 [ 169.519621][T12243] filename_mkdirat+0x48b/0x5e0 [ 169.519641][T12243] __x64_sys_mkdir+0x6b/0x90 [ 169.519661][T12243] do_syscall_64+0x115/0x870 [ 169.519679][T12243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.519696][T12243] [ 169.519696][T12243] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 169.519721][T12243] check_prev_add+0xeb/0xe60 [ 169.529105][ T42] audit: type=1400 audit(1785187348.722:2079): avc: denied { write } for pid=12239 comm="syz.4.1787" name="ss" dev="configfs" ino=45741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.529439][T12243] __lock_acquire+0x136c/0x1a40 [ 169.531973][ T42] audit: type=1400 audit(1785187348.722:2080): avc: denied { write } for pid=12239 comm="syz.4.1787" name="ss" dev="configfs" ino=45741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.534037][T12243] lock_acquire+0x1b9/0x370 [ 169.534057][T12243] __mutex_lock+0x1a4/0x1bd0 [ 169.534070][T12243] uvcg_streaming_header_allow_link+0x7c/0x650 [ 169.534084][T12243] configfs_symlink+0x540/0x11f0 [ 169.534099][T12243] vfs_symlink+0x178/0x4d0 [ 169.534113][T12243] filename_symlinkat+0x2a6/0x560 [ 169.534125][T12243] __x64_sys_symlink+0x79/0xb0 [ 169.534138][T12243] do_syscall_64+0x115/0x870 [ 169.534149][T12243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.534160][T12243] [ 169.534160][T12243] other info that might help us debug this: [ 169.534160][T12243] [ 169.534164][T12243] Chain exists of: [ 169.534164][T12243] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#32 [ 169.534164][T12243] [ 169.534192][T12243] Possible unsafe locking scenario: [ 169.534192][T12243] [ 169.534196][T12243] CPU0 CPU1 [ 169.534200][T12243] ---- ---- [ 169.534204][T12243] lock(&sb->s_type->i_mutex_key#32); [ 169.534218][T12243] lock(&opts->dep_lock); [ 169.534229][T12243] lock(&sb->s_type->i_mutex_key#32); [ 169.534245][T12243] lock(gadget_subsys.su_mutex); [ 169.534263][T12243] [ 169.534263][T12243] *** DEADLOCK *** [ 169.534263][T12243] [ 169.534267][T12243] 2 locks held by syz.4.1787/12243: [ 169.534276][T12243] #0: ffff888023ec6450 (sb_writers#25){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 169.534327][T12243] #1: ffff888039bc2740 (&sb->s_type->i_mutex_key#32){++++}-{4:4}, at: configfs_symlink+0x3c0/0x11f0 [ 169.534360][T12243] [ 169.534360][T12243] stack backtrace: [ 169.534368][T12243] CPU: 3 UID: 0 PID: 12243 Comm: syz.4.1787 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.534384][T12243] Tainted: [L]=SOFTLOCKUP [ 169.534388][T12243] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.534394][T12243] Call Trace: [ 169.534399][T12243] [ 169.534404][T12243] dump_stack_lvl+0x100/0x190 [ 169.534417][T12243] print_circular_bug.cold+0x178/0x1c7 [ 169.534436][T12243] check_noncircular+0x146/0x160 [ 169.534448][T12243] ? audit_log_end+0x24/0x30 [ 169.534467][T12243] check_prev_add+0xeb/0xe60 [ 169.534480][T12243] __lock_acquire+0x136c/0x1a40 [ 169.534496][T12243] lock_acquire+0x1b9/0x370 [ 169.534513][T12243] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 169.534528][T12243] ? __pfx___might_resched+0x10/0x10 [ 169.534541][T12243] ? audit_inode_permission+0x1ea/0x2a0 [ 169.534556][T12243] __mutex_lock+0x1a4/0x1bd0 [ 169.534568][T12243] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 169.534582][T12243] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 169.534595][T12243] ? __lock_acquire+0x49f/0x1a40 [ 169.534609][T12243] ? __pfx___mutex_lock+0x10/0x10 [ 169.534621][T12243] ? selinux_inode_permission+0x14a/0x1130 [ 169.534635][T12243] ? __pfx___might_resched+0x10/0x10 [ 169.534648][T12243] ? make_vfsgid+0xf1/0x140 [ 169.534665][T12243] ? uvcg_streaming_header_allow_link+0x7c/0x650 [ 169.534679][T12243] ? security_inode_permission+0xbf/0x250 [ 169.534695][T12243] uvcg_streaming_header_allow_link+0x7c/0x650 [ 169.534709][T12243] ? inode_permission+0x374/0x620 [ 169.534724][T12243] ? mntput_no_expire+0xe7/0x220 [ 169.534735][T12243] configfs_symlink+0x540/0x11f0 [ 169.534752][T12243] ? __pfx_configfs_symlink+0x10/0x10 [ 169.534769][T12243] vfs_symlink+0x178/0x4d0 [ 169.534784][T12243] filename_symlinkat+0x2a6/0x560 [ 169.534798][T12243] ? __pfx_filename_symlinkat+0x10/0x10 [ 169.534811][T12243] ? strncpy_from_user+0x19d/0x2d0 [ 169.534826][T12243] ? do_getname+0x191/0x390 [ 169.534840][T12243] __x64_sys_symlink+0x79/0xb0 [ 169.534853][T12243] do_syscall_64+0x115/0x870 [ 169.534865][T12243] ? clear_bhb_loop+0x40/0x90 [ 169.534877][T12243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.534889][T12243] RIP: 0033:0x7fca7139de99 [ 169.534899][T12243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.534909][T12243] RSP: 002b:00007fca7221b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 169.534919][T12243] RAX: ffffffffffffffda RBX: 00007fca71626090 RCX: 00007fca7139de99 [ 169.534926][T12243] RDX: 0000000000000000 RSI: 0000200000001500 RDI: 0000200000000080 [ 169.534933][T12243] RBP: 00007fca71433eaf R08: 0000000000000000 R09: 0000000000000000 [ 169.534939][T12243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.534945][T12243] R13: 00007fca71626128 R14: 00007fca71626090 R15: 00007fff997343f8 [ 169.534956][T12243] [ 169.763962][ T42] audit: type=1400 audit(1785187348.722:2081): avc: denied { write } for pid=12239 comm="syz.4.1787" name="h" dev="configfs" ino=45755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.772934][ T42] audit: type=1400 audit(1785187348.722:2082): avc: denied { read } for pid=12239 comm="syz.4.1787" name="h" dev="configfs" ino=45756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=lnk_file permissive=1 [ 169.783487][ T42] audit: type=1400 audit(1785187348.722:2083): avc: denied { write } for pid=12239 comm="syz.4.1787" name="h" dev="configfs" ino=45755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 169.792254][ T42] audit: type=1400 audit(1785187348.752:2084): avc: denied { write } for pid=5649 comm="syz-executor" path="pipe:[6595]" dev="pipefs" ino=6595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 169.857805][T12178] usb 5-1: LEGO USB Tower reset control request failed [ 170.157654][ T5886] usb 5-1: USB disconnect, device number 17 [ 170.163333][ T5886] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected