last executing test programs: 2m27.002009114s ago: executing program 1 (id=282): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/consoles\x00', 0x0, 0x0) sendmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000280)="146108af83b24f036ca6b87441412416c6746649d62fc60813cfa07944164c41bd3cd87fb6372c32a8bd857a44ed0c013249e9c9b1862977ec5e468319052822b51da0ee05a348c9e2f94c529fa6369b61702e21e09f229c454eb132fa54ed19d6b42c061d60", 0x66}, {&(0x7f00000003c0)="8b57becdd7fc3e3d29e89834cbd551c8871a297878f6859dee315e02f4b48cc27cd7278c7ba5a54304c75b1dd14367d22b5c92cba9435100704052929be659fb543b4f4140a198e9be0a79ffb09e9aedbbdd7ccb971054f4295df4ee9aed868ca0587deef84d67315dab6cb4bae3fba5df020014ddf372ef34098fcc939f06353180062f1843e4b6b8dcd71e7686a575c8de04b1c53d284e32b1070a87eb6d5a46b57778c41fb2d7d29d783f20fa1097358545", 0xb3}], 0x2, 0x0, 0x0, 0x20040040}, 0x8) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/usb5/power/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='on\x00', 0x3) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x94}) (async) r4 = syz_open_dev$loop(&(0x7f0000000000), 0xb, 0x2200) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x1000000000) (async) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x400000b7, 0x0, 0x7}]}) 2m26.998065354s ago: executing program 1 (id=286): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904010001020d0000052406000105240000000d240f01000000000000feff0006241a00000c0905810301000000000000000000020d00000904010102020d0000090582020002000040090503022000020000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x32, 0x0, 0xffffd000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x340, 0x0, &(0x7f0000000180)=[0x10082, 0xec66, 0x9, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9024, 0x0, 0x7, 0x5, 0x5, 0x49, 0x400, 0x5, 0x0, 0x1ff, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x80000000, 0x4, 0x7, 0x23b, 0x3, 0x6, 0x888f, 0x4, 0xb, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c36, 0x400, 0x3, 0xfffefffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x8, 0xe6, 0x200000000002101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xc, 0x40000000000009, 0xe8, 0x80000000, 0xfffffffffffffc01, 0xfffffffffffffffe, 0x6, 0x4, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x3, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xfdffffffffffff81, 0x9, 0x4, 0x2000000000000006, 0x1, 0x9, 0x400000000008061e, 0x3, 0x8, 0xf6, 0x4, 0x6, 0xffffffffffffffff, 0x7, 0xe53e, 0x2c, 0x8, 0x22933329, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x0, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0x4, 0xb692, 0xcd, 0x8, 0x3]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="740000000001017d00000000141a000002000000100005800a000100512e3933310000000800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001"], 0x74}}, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) read(r3, 0x0, 0x0) wait4(r1, 0x0, 0x40000000, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000000)={[0x5]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2m24.054776418s ago: executing program 1 (id=313): r0 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) (async) read(r0, &(0x7f0000000200)=""/248, 0xf8) 2m23.923825641s ago: executing program 1 (id=314): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0xf0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) 2m23.923344812s ago: executing program 1 (id=315): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x1) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000028000/0x4000)=nil, &(0x7f00004ca000/0x1000)=nil, 0x4000, 0x2}) r8 = dup(r5) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r9, 0x0) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat2(r9, &(0x7f0000000400)='my_sys\x00', &(0x7f0000000480)={0x248041, 0x4, 0x20}, 0x18) ptrace(0x10, r10) r11 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r11, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd, 0x5}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) syz_ublk_setup_queues(r8, r4, &(0x7f0000000180)={0x0, 0x5fce, 0x20, 0x7ffffffe, 0xb4, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x144, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8fbd, 0x8000, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) write$uinput_user_dev(r13, &(0x7f0000000a80)={'syz0\x00', {0x0, 0xa47a, 0xfd, 0x80}, 0x4a, [0x0, 0x10001, 0x29, 0x4, 0x93b, 0xc, 0x9c7, 0x6, 0x1, 0x3, 0x100, 0x0, 0x3, 0x8, 0x0, 0x7fffffff, 0xffffffff, 0x7fffffff, 0x5, 0x4, 0x6, 0x9, 0x8001, 0x6, 0xd4, 0xc, 0x8, 0xa72, 0x5, 0x1, 0x9, 0x81, 0xf1d, 0x1, 0xfffeffff, 0x7, 0x1, 0x7, 0x8000, 0x6, 0xffffffff, 0x0, 0x9, 0xf, 0x8, 0xfffffffe, 0x5, 0x800, 0x2, 0x0, 0xffff, 0x2, 0xffffff5b, 0x0, 0xd8, 0x5, 0x9, 0x9, 0x3ff, 0x8, 0xffff, 0x6, 0x200, 0xf7], [0x6, 0x7fff, 0x9, 0x7, 0x0, 0x7, 0x8, 0x7, 0x81, 0x80000000, 0x7, 0x7, 0x2, 0x69, 0x7, 0x2, 0x10000, 0xfffffffc, 0xa, 0xe5c, 0x9, 0x7f, 0x2, 0x18de, 0xd, 0x4, 0xe2a, 0x0, 0xc92, 0x0, 0x4, 0x2, 0x3, 0x10000, 0x401, 0x1, 0xc33, 0x9, 0x59, 0x3d, 0x1, 0x7fff, 0x1, 0x7fff, 0x8, 0x7ff, 0xc, 0x1, 0x2, 0x2, 0x2, 0x3, 0x8000, 0x9, 0xffffffff, 0x1, 0x4, 0xfffffffe, 0x9, 0x2, 0x457, 0x7fffffff, 0x3, 0x101], [0x6, 0x3, 0x37, 0x8001, 0x6, 0x74f62862, 0x3, 0x1, 0xe3, 0xd7, 0x81, 0x1, 0x5, 0xd, 0x1, 0x9, 0xc, 0x80000000, 0x9, 0x9, 0x8001, 0x2, 0x100, 0x7, 0x80, 0x101, 0x2, 0x6, 0xfe, 0xfffff801, 0x4f5, 0x5, 0x681c, 0x40, 0x10, 0xe, 0x6, 0x62, 0x200, 0xfffffff7, 0x5, 0x4, 0x400, 0x6, 0x3, 0x3, 0x6, 0x0, 0x5, 0xc, 0x7, 0x9, 0x400, 0x4, 0x5, 0x2, 0x3, 0x8, 0x813f, 0x7, 0x5, 0x401, 0x3, 0x4], [0x1, 0x9, 0x9, 0x8, 0x80000000, 0x3, 0x8, 0x81, 0x7, 0x8001, 0xfd, 0x40, 0x9297, 0x1, 0x4, 0x8, 0xb7c, 0xe, 0x5, 0x9, 0x4, 0x3ff, 0x3d797018, 0x2d03, 0x8, 0xb21, 0x6, 0x7f, 0x6, 0xd567, 0x1, 0x4, 0xff, 0xfbb6, 0xff, 0x20000, 0x7, 0x6, 0x1, 0x50b7, 0x9, 0x1, 0xf6ed, 0xd5, 0x3, 0x4, 0xfffff0b9, 0xe6, 0x9, 0x401, 0x8, 0x8, 0xffffff42, 0x200, 0x2, 0x3, 0x2, 0x30000000, 0xffffffff, 0x9, 0x5, 0x3, 0xe, 0x3b9]}, 0x45c) sendmsg$IPCTNL_MSG_CT_GET(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xcd}]}]}, 0x5c}}, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r14, 0x6, 0xc, &(0x7f00000002c0), 0x4) ioctl$KVM_TDX_INIT_VM(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000200)={0x20, 0x0, [0x7, 0x8f, 0x6, 0x5, 0x731, 0x2], [0x40, 0x2, 0x4c72, 0x2, 0x8, 0x4], [0x3, 0x4, 0x1, 0xffffffff7fffffff, 0x4f, 0x6b], '\x00', {0x4, 0x0, [{0x1, 0xa317, 0x4, 0x3, 0x2, 0x5c5a, 0x7}, {0x4, 0x494, 0x7, 0x1f, 0x3, 0x9, 0xa2}, {0xd, 0x0, 0x1, 0xffff, 0x0, 0x100, 0x1}, {0xa, 0xffffffff, 0x2, 0x3, 0x5, 0x7fffffff, 0x7}]}}}) 2m23.912575062s ago: executing program 1 (id=316): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="b4180112ef7271b75668249063cb762b3fea6cda4ef8b0afd94e31", 0x1b}, {&(0x7f0000000080)="519a85bc9971dcf15bd7bb2bc86827ad6b3c41ea99d4e4f61c9d419c54d46cb9d66a45c75c93c4ee9449c9bdc0767570328cb7218897d7eb4cb8d4b4e64beb72e8f97cb44ba71b4f28d985f144915ee20605a058ca8bfe2347f47136bc0c85201dd1837ddb2e4945923ea58ac109665b9e1971461496c5b294b9808da2e2b4f7b84c3b08cb1b234ecc31611a1a0e825a7bc44f67472624cae86c0adc06d08ed9181fc795d51233ba3f9d4a4bb8791ab4d4a79a5eecc92829ff26e5ce9162f075fea4207dbe2f1f22703659529519d8d093", 0xd1}], 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000e80)=""/44, &(0x7f0000000280)=0x2c) 2m8.38791657s ago: executing program 32 (id=316): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000040)="b4180112ef7271b75668249063cb762b3fea6cda4ef8b0afd94e31", 0x1b}, {&(0x7f0000000080)="519a85bc9971dcf15bd7bb2bc86827ad6b3c41ea99d4e4f61c9d419c54d46cb9d66a45c75c93c4ee9449c9bdc0767570328cb7218897d7eb4cb8d4b4e64beb72e8f97cb44ba71b4f28d985f144915ee20605a058ca8bfe2347f47136bc0c85201dd1837ddb2e4945923ea58ac109665b9e1971461496c5b294b9808da2e2b4f7b84c3b08cb1b234ecc31611a1a0e825a7bc44f67472624cae86c0adc06d08ed9181fc795d51233ba3f9d4a4bb8791ab4d4a79a5eecc92829ff26e5ce9162f075fea4207dbe2f1f22703659529519d8d093", 0xd1}], 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000e80)=""/44, &(0x7f0000000280)=0x2c) 1m26.713329082s ago: executing program 4 (id=639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0000, 0xc, 0x1, 0x81, 0x0, 0x0, 0x7}, {0x10000, 0xdddd1000, 0xc, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x8080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x9, 0x4}, {0x4000, 0x1000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0x5, 0xc0}, {0x3000, 0x100000, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x0, 0x220, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000001c80)=[{{&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, 0x0}}, {{&(0x7f0000001440)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x1800}}], 0x10}}], 0x2, 0x40008c0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) 1m26.496456858s ago: executing program 4 (id=640): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000180)="0f786f3f460f3566b8a7000f00d0f2450f30c4e3417cb5800000004e66430fc4c400f264440f231d67460f01c93e660f38327508d906", 0x36}], 0x1, 0x54, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) futex(0x0, 0x3, 0x80000001, 0x0, 0x0, 0x100001) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r1, &(0x7f0000000480)="4d4287ac770767f7429748", 0xb) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r2, 0x0, 0x4a) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', r3) keyctl$search(0xa, r3, &(0x7f0000000240)='rxrpc\x00', &(0x7f0000002380)={'syz', 0x2}, r3) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg$can_raw(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/137, 0x89}, {&(0x7f00000016c0)=""/40, 0x28}, {&(0x7f0000001700)=""/81, 0x51}, {&(0x7f0000001780)=""/205, 0xcd}, {&(0x7f0000001880)=""/49, 0x31}, {&(0x7f00000018c0)=""/45, 0x2d}, {&(0x7f0000001900)=""/164, 0xa4}], 0x8, &(0x7f0000001a40)=""/86, 0x56}, 0x40000123) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x810) 1m26.493390728s ago: executing program 4 (id=641): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_usb_connect$midi(0x2, 0x3c, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0x931b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2a, 0x1, 0x1, 0x81, 0xc0, 0xbe, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x24, [@midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x6, 0x2, [{0x4, 0x3}, {0x9, 0x81}], 0x2}], [{{0x9, 0x5, 0x8d, 0x3, 0x220, 0x7f, 0xfe, 0xf8, {0x4}}}]}}}}}]}}, 0x0) 1m23.344641647s ago: executing program 4 (id=658): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/sockcreate\x00') ftruncate(r0, 0x3119c976) (async) ftruncate(r0, 0x3119c976) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80083, 0x1bc) 1m23.340261137s ago: executing program 4 (id=659): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x5) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x6) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x2004402, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}]}}) 1m21.104158503s ago: executing program 4 (id=667): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000090, 0x0, 0xa}]}) (async) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000090, 0x0, 0xa}]}) dup(r0) (async) r4 = dup(r0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$USBDEVFS_CONNECTINFO(r4, 0x40085511, &(0x7f0000000100)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) syz_usb_connect$uac3(0x0, 0xa0, 0x0, 0x0) (async) r7 = syz_usb_connect$uac3(0x0, 0xa0, 0x0, 0x0) syz_usb_control_io$uac3(r7, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="200604007369dc42d4914a4f1f523e2f0000e971ec7b955c15d5f65efaea33aa08132495b1ce54c0b0957ee98f789b76263fb0b0d8c02a0619f34ac0bdc64d34880b179447dfca4af333c0e148c46c75702b3ac9e7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xfffffffd, 0x4000, 0x2, 0x39b}, 0x0, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) mremap(&(0x7f0000407000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000071c000/0x1000)=nil) r9 = socket$inet(0x2, 0x2, 0x0) fsetxattr$security_capability(r9, &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0xac, 0x2}, {0x6, 0x4}], 0xffffffffffffffff}, 0x18, 0x0) (async) fsetxattr$security_capability(r9, &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0xac, 0x2}, {0x6, 0x4}], 0xffffffffffffffff}, 0x18, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8982, &(0x7f00000000c0)={0x6, 'veth1_to_batadv\x00', {0x5}, 0x3}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8982, &(0x7f00000000c0)={0x6, 'veth1_to_batadv\x00', {0x5}, 0x3}) r11 = userfaultfd(0x80001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x6a02, 0x0) write$tun(r12, &(0x7f0000000400)={@val={0x0, 0x60}, @val={0x3, 0x80, 0x2, 0xfff, 0xfdc5, 0x3}, @x25={0x3, 0x5, 0x2c, "ab5e8c4f2a3d226dd9beedd8741770b83459501ca981f76fcfd99ffebd34b0dc70c5668eda491435a3c08abb17196c225a21011dfbb62adb01518e96616d2b2621f2bd5ddcdaf8e7f96c224a19d240e7d08515e0ac78cafab4790bf7d96349db95f140dd575c22e69422712c08b88ecdf0a7ca16318ce895de648bcfceb513ea8e062f09036d4621e4048d5aa618c2537c834678bbba05e9226787ff75cad2be579b7d46ba0b62e095053985cb2546b0704dbcf84a4c80b1c3ca8e482170b69a1299960bb60214b0ca4ac52832d84bdba6fcfee33ad385ab02ffbaa2479f6b34e61855714cab3548a0ec61351154db4586155c9787d1becbaf"}}, 0x10a) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20000}) (async) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20000}) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="68000000140001002bbd7000fbdbdf2500000000000000000000000000000000fc00000000000000000000000000000100000080000700000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x68}}, 0x4004040) r13 = dup(r6) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYBLOB="2c63616368653d7265616461684f5aa1d3afcaa9d91af177aa6561642c00"]) (async) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYBLOB="2c63616368653d7265616461684f5aa1d3afcaa9d91af177aa6561642c00"]) 1m14.364514652s ago: executing program 0 (id=686): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, 0x0, &(0x7f0000000140)) flock(r5, 0x1) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@window, @sack_perm, @timestamp, @sack_perm, @sack_perm, @window={0x3, 0x4, 0x1}, @sack_perm], 0x7) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000100)="ac84a3543e391fffe2d697266ac5addea604750f9327aa0baa1768c16c919dad4a0cb92d7a1422c4eefe350067e698b783891e91142eb3cab8a78aa9abe41ba30c542b2f8983cdbf41b3096c3736bbace4b4f5c8e04784e96e4dcc97b4d683bdba0f4bc6da7a96d6eac88432f81038", 0x6f) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf0001000000000000000000000000000000000000009f0000000000000000ffffac1414bb000103940400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002ebd7000043500000a0001fd2000000000000000480003006465666c617465"], 0x144}, 0x1, 0x0, 0x0, 0x801}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES64=r3, @ANYRESOCT=r3, @ANYRESDEC=r8], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0xfffe, 0x24, 0xa, 0x8000069}, {0x4292, 0x5, 0x0, 0x5e}]}, 0x10) sendmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000040)="97a797c5", 0x4}], 0x1}}], 0x1, 0x0) 1m14.272142884s ago: executing program 0 (id=687): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, 0x0, 0x40000) 1m14.178158756s ago: executing program 0 (id=688): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f00000001c0)=0xfb, 0x4) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pidfd_send_signal(r1, 0x33, &(0x7f0000000000)={0x33, 0x4, 0x2}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x3482, 0x0) ioctl$TCSETSF(r2, 0x5453, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000), 0x800000, &(0x7f0000000200)={[{@xattr}, {@xattr}, {@release_agent={'release_agent', 0x3d, './cgroup'}}, {@cpuset_v2_mode}, {@none}]}) 1m14.02457661s ago: executing program 0 (id=689): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000140)={r1, r2, 0xfff, 0x0, 0x0, 0xf, 0x27, 0x8000, 0x5, 0x9, 0x1, 0x2, 'syz0\x00'}) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[], 0x24}, {&(0x7f00000010c0)=ANY=[@ANYRESOCT], 0x384}], 0x2, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x1, 'pimreg1\x00', {}, 0x3}) 1m13.960804591s ago: executing program 0 (id=690): socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="0abb4e23485090000700000060078340fd"], 0x0) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xa, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_clone(0x20400, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="262abccee34412e3cd81e52fef65c3198207f26b1bb030270e0eb6acbbdca5a2a3d3da41a31f0b1f240ad6c2a625b67d6cb23c7be9bdbd4b688bbe8b3998a4c06b59a38d12e52f9b43011ed620815e920c397237e90801aea6760587eb2ffdf918f00250c558218405258effa2f30092e9") syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="2008280000000000000000cb4fdca0560f920d54f365c5b1d43ee4"], 0x0, 0x0, 0x0, 0x0}, 0x0) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000240), 0x800000, &(0x7f0000000340)={[{}, {@gid={'gid', 0x3d, r3}}, {@gid={'gid', 0x3d, 0xee00}}], [{@subj_user={'subj_user', 0x3d, '\\'}}, {@appraise_type}, {@appraise_type}, {@measure}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'proc\x00'}}]}) 1m12.484482839s ago: executing program 0 (id=702): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c746572000000008000000000000000000000000000000000000007000000f0a2392326340866f5237a24021d48aed1a94563fae869e2f5c523165065bc18f705ad2d783a1520eadc25ece13daf14000000"], &(0x7f0000000200)=0x2b) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) 1m5.361682016s ago: executing program 33 (id=667): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000090, 0x0, 0xa}]}) (async) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000090, 0x0, 0xa}]}) dup(r0) (async) r4 = dup(r0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$USBDEVFS_CONNECTINFO(r4, 0x40085511, &(0x7f0000000100)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) syz_usb_connect$uac3(0x0, 0xa0, 0x0, 0x0) (async) r7 = syz_usb_connect$uac3(0x0, 0xa0, 0x0, 0x0) syz_usb_control_io$uac3(r7, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="200604007369dc42d4914a4f1f523e2f0000e971ec7b955c15d5f65efaea33aa08132495b1ce54c0b0957ee98f789b76263fb0b0d8c02a0619f34ac0bdc64d34880b179447dfca4af333c0e148c46c75702b3ac9e7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xfffffffd, 0x4000, 0x2, 0x39b}, 0x0, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) mremap(&(0x7f0000407000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000071c000/0x1000)=nil) r9 = socket$inet(0x2, 0x2, 0x0) fsetxattr$security_capability(r9, &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0xac, 0x2}, {0x6, 0x4}], 0xffffffffffffffff}, 0x18, 0x0) (async) fsetxattr$security_capability(r9, &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0xac, 0x2}, {0x6, 0x4}], 0xffffffffffffffff}, 0x18, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8982, &(0x7f00000000c0)={0x6, 'veth1_to_batadv\x00', {0x5}, 0x3}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8982, &(0x7f00000000c0)={0x6, 'veth1_to_batadv\x00', {0x5}, 0x3}) r11 = userfaultfd(0x80001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x6a02, 0x0) write$tun(r12, &(0x7f0000000400)={@val={0x0, 0x60}, @val={0x3, 0x80, 0x2, 0xfff, 0xfdc5, 0x3}, @x25={0x3, 0x5, 0x2c, "ab5e8c4f2a3d226dd9beedd8741770b83459501ca981f76fcfd99ffebd34b0dc70c5668eda491435a3c08abb17196c225a21011dfbb62adb01518e96616d2b2621f2bd5ddcdaf8e7f96c224a19d240e7d08515e0ac78cafab4790bf7d96349db95f140dd575c22e69422712c08b88ecdf0a7ca16318ce895de648bcfceb513ea8e062f09036d4621e4048d5aa618c2537c834678bbba05e9226787ff75cad2be579b7d46ba0b62e095053985cb2546b0704dbcf84a4c80b1c3ca8e482170b69a1299960bb60214b0ca4ac52832d84bdba6fcfee33ad385ab02ffbaa2479f6b34e61855714cab3548a0ec61351154db4586155c9787d1becbaf"}}, 0x10a) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20000}) (async) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20000}) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="68000000140001002bbd7000fbdbdf2500000000000000000000000000000000fc00000000000000000000000000000100000080000700000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x68}}, 0x4004040) r13 = dup(r6) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYBLOB="2c63616368653d7265616461684f5aa1d3afcaa9d91af177aa6561642c00"]) (async) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYBLOB="2c63616368653d7265616461684f5aa1d3afcaa9d91af177aa6561642c00"]) 58.908448029s ago: executing program 3 (id=758): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x12) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newsa={0x1b8, 0x10, 0x1, 0x20020, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0xfbfe, 0x1}, {@in6=@empty, 0x0, 0x32}, @in=@loopback, {0xfffffffffffffffe, 0x1, 0x0, 0x400000000000, 0x9, 0x0, 0x1000080000}, {0x0, 0x2000000000000000, 0x0, 0xffffffff}, {0xfffffffc, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bf26}}, @algo_auth_trunc={0x64, 0x14, {{'cmac(aes)\x00'}, 0xc0, 0x60, "8aaf5d7ead2e8adfed4dbcb6772b49d7c3f8070e18375db9"}}]}, 0x1b8}}, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5) (async) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x80000006) (async) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, 0x0) (async) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) (async) socket(0x6, 0x4, 0xb71) 58.190687767s ago: executing program 3 (id=760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r1, &(0x7f000001a240)=""/102382, 0x18fee, 0x1ff) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000011c0)={0x2, &(0x7f0000000080)=[{0x81, 0x0, 0x31, 0xfffff03a}, {0x6, 0x4, 0x3, 0x2}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r2) 57.912197724s ago: executing program 3 (id=761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2081, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0xa0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x62, 0x35, 0xf, 0x2, {0xa, 0x25, 0x25, 0x401, 0x5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x620, 0x3, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7, 0x2f, 0xbd9}}}}}}}}]}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000500)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xffffffff, 0x0, 0x4}, 0x1c) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f00000000c0)={&(0x7f0000000280)={0x1d, r5}, 0x10, &(0x7f0000000380)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "e3997e3df56fe25b"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) 57.413315076s ago: executing program 34 (id=702): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c746572000000008000000000000000000000000000000000000007000000f0a2392326340866f5237a24021d48aed1a94563fae869e2f5c523165065bc18f705ad2d783a1520eadc25ece13daf14000000"], &(0x7f0000000200)=0x2b) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) 56.241288146s ago: executing program 3 (id=769): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x20240, 0x0) fstat(r0, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000005c0), &(0x7f0000000600), 0x2, 0x1) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r3, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x20) setxattr$system_posix_acl(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010002000000000004000700000000000800"], 0x24, 0x3) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) setns(r0, 0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00') umount2(&(0x7f0000000040)='.\x00', 0x2) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="000000d5433573d81801fff8e27e6a1a6b91535e705696eb4a5a66433ad52141fadcb8d9a3d9a3871e7a092b5b07e82732c76d8126137e407f345a138f0809572ccfe873ac435c92b5261b50f589441a384dbfdb026567092c26fdf19838016191199279f3fd33ebdc97c10a0d8b40bb95dac97b1177af0ee417761bcce14d5fdb94f3c7b663f88c0806d8326d8106d5162a1c834b8f242e", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 56.030839401s ago: executing program 3 (id=770): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/lru_gen\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='+ 1 0 10', 0x8) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000380)=0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @none, 0x4}, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0x10000, 0x4, 0x9, 0xfd, 0xe4, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x7, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x13, 0x7, 0x0, 0x9, 0x4, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0xb, 0x6, 0x4, 0x42, 0xb, 0x4, 0x8, 0x7, 0xf}, {0x10000, 0xe000, 0x2, 0x3, 0x3, 0x6, 0xab, 0x7f, 0x7, 0x2, 0xdb}, {0x1000, 0x100000, 0xc, 0x7, 0x31, 0x8, 0x21, 0x80, 0x80, 0x0, 0x1, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0x70}, {0x100000, 0xd000, 0x0, 0x5, 0xf, 0x7, 0xc, 0x34, 0x2, 0xc, 0xb0, 0x9}, {0x4, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) r5 = inotify_init() mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ppoll(&(0x7f0000000080)=[{r2, 0x4000}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000340)={[0x2e]}, 0x8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f00000000c0)=0x3, 0x25) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xc1a702, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0)={0x20b, 0x112, 0xa, 0x5, 0xaf, 0xfb, 0x100}, 0xc) 55.584339362s ago: executing program 3 (id=771): kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xedf64000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) setgid(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000100)="db", 0x1}], 0x1}, 0x41) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='6', 0x1}], 0x1}, 0x41) recvmmsg$unix(r3, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000122, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xfe) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0x20, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xedf64000) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) (async) setgid(0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000100)="db", 0x1}], 0x1}, 0x41) (async) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='6', 0x1}], 0x1}, 0x41) (async) recvmmsg$unix(r3, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000122, 0x0) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xfe) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0x20, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) (async) 55.541960903s ago: executing program 35 (id=771): kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xedf64000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) setgid(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000100)="db", 0x1}], 0x1}, 0x41) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='6', 0x1}], 0x1}, 0x41) recvmmsg$unix(r3, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000122, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xfe) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0x20, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xedf64000) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) (async) setgid(0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000100)="db", 0x1}], 0x1}, 0x41) (async) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='6', 0x1}], 0x1}, 0x41) (async) recvmmsg$unix(r3, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000122, 0x0) (async) ioctl$TCSETSW(r2, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"}) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xfe) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0x20, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) (async) 35.700370503s ago: executing program 6 (id=875): syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x400000}, 0x0, 0x0, 0x0) (async) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x400000}, 0x0, 0x0, 0x0) close(0x3) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x300, 0x0, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 35.630692564s ago: executing program 6 (id=876): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000080)={0x10, 0x0, "3faf57e7d1af70732662af4c3e8f024d"}) mmap(&(0x7f000090f000/0x2000)=nil, 0x2000, 0x8, 0x8031, 0xffffffffffffffff, 0x27b7b000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x3, @loopback, 0x101}}, 0x0, 0x0, 0x48, 0x0, "8e4ed5b6cd6e3a3be2da5590ede383d2d7ac8deb4a44299f9f0cf768192aed7631289c5d29a3aa7c5c772f383a909e691eb2eddd4322253d1e303a96c995b3e2189cf625a0720ad0fdf0917e7d9e57d5"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000000440)=[{&(0x7f00000010c0)=""/225, 0xe1}], 0x1, 0x7, 0x20000000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$FUSE_INIT(r7, &(0x7f0000002580)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x8, 0x50800, 0x2, 0xcea1, 0xa6, 0x0, 0x0, 0x0, 0x4, 0x4}}, 0x50) 35.369072741s ago: executing program 6 (id=877): r0 = userfaultfd(0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00003b1000/0x2000)=nil, 0x2000, 0x65) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) ioctl$TCSETS(r1, 0x5402, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x181}) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x821e, 0x3a, '\'-*\')!-', 0x3a, '\x00', 0x3a, './file0'}, 0x2f) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TIOCSBRK(r3, 0x5427) openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000240)={&(0x7f0000000000)='devtmpfs\x00', &(0x7f0000000200)='/dev/ptmx\x00', 0x8}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r4, 0x3000) 35.149699606s ago: executing program 6 (id=878): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) (async) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) flistxattr(r3, &(0x7f0000000000)=""/224, 0xe0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) poll(&(0x7f0000000080)=[{r4, 0xa020}, {r2, 0x9}, {r2, 0x20}, {r2, 0x8101}, {r2, 0x2104}], 0x5, 0x3) poll(&(0x7f0000000040)=[{r2, 0x2010}], 0x1, 0xbfcb) close_range(r0, 0xffffffffffffffff, 0x0) 32.150403101s ago: executing program 6 (id=892): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180), 0x400) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000)) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRES8=r0], 0x15) 32.032418854s ago: executing program 6 (id=893): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x28001, 0x0) (async) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x28001, 0x0) poll(&(0x7f0000000040)=[{r0, 0x200}], 0x1, 0x138) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) r2 = socket(0xa, 0x3, 0x3a) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800002, &(0x7f0000000300)={[{@xino_off}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_off}, {@uuid_null}, {@index_off}, {@volatile}, {@volatile}], [{@pcr={'pcr', 0x3d, 0x25}}, {@appraise}, {@dont_hash}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fsname={'fsname', 0x3d, '9p\x00'}}, {@seclabel}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40, 0x0, 0x4}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40, 0x0, 0x4}, 0xc) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xc) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1300000065ffff050000000601015032303030"], 0x13) (async) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1300000065ffff050000000601015032303030"], 0x13) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) 16.612921922s ago: executing program 36 (id=893): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x28001, 0x0) (async) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x28001, 0x0) poll(&(0x7f0000000040)=[{r0, 0x200}], 0x1, 0x138) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) r2 = socket(0xa, 0x3, 0x3a) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800002, &(0x7f0000000300)={[{@xino_off}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_off}, {@uuid_null}, {@index_off}, {@volatile}, {@volatile}], [{@pcr={'pcr', 0x3d, 0x25}}, {@appraise}, {@dont_hash}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fsname={'fsname', 0x3d, '9p\x00'}}, {@seclabel}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40, 0x0, 0x4}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x40, 0x0, 0x4}, 0xc) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xc) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1300000065ffff050000000601015032303030"], 0x13) (async) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1300000065ffff050000000601015032303030"], 0x13) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) 4.494577827s ago: executing program 8 (id=1034): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x401, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) (async) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x401, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24000010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) syz_clone3(&(0x7f0000000400)={0x6000800, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0, {0x3f}, &(0x7f0000000240)=""/111, 0x6f, &(0x7f00000002c0)=""/157, &(0x7f0000000380)=[0xffffffffffffffff], 0x1}, 0x58) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x8) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x1400037e) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000024c0)={0x20, 0xfffffffffffffff5, r4, {0x5, 0x0, 0x0, 0x1}}, 0x20) r5 = gettid() setpriority(0x1, r5, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r7, 0x2007ffb) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) (async) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2e41d16cd5f466b822000f00d0460f06f245dd48f526263ef2a585f6b92e030000b800000000ba008000000f3041ab0fc73a0fc71f", 0x35}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002500), 0x101080, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002500), 0x101080, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r10, 0x4048ae9b, &(0x7f00000000c0)={0x12359e14e93a4cbf, 0x0, {[0x0, 0x6, 0xfffffffffffffff9, 0xd4, 0xffffffffffffffff, 0xfffffffffffffffa, 0x3, 0x7]}}) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r10, 0x4048ae9b, &(0x7f00000000c0)={0x12359e14e93a4cbf, 0x0, {[0x0, 0x6, 0xfffffffffffffff9, 0xd4, 0xffffffffffffffff, 0xfffffffffffffffa, 0x3, 0x7]}}) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendfile(r7, r7, 0x0, 0x1000000201005) 4.152175086s ago: executing program 8 (id=1041): ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000001080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000001040)}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r0 = syz_io_uring_complete(0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000040)=ANY=[], 0x90) syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206307122040000102030109021200010d0e503f09040000000103"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) 3.418024684s ago: executing program 7 (id=1052): mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmod']) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x2, 0x7, 0xe, 0xe, 0x8, 0x2, 0x5, 0x7, 0x4, [0x2800000, 0x5, 0x8, 0x52, 0x8000, 0xe7, 0x1, 0x8]}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x9, 0x4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) unshare(0x24020400) r4 = open(&(0x7f00000001c0)='.\x00', 0x200140, 0x1a8) getdents(r4, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x8c03, &(0x7f0000000180)={[{}]}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.365478965s ago: executing program 7 (id=1053): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0211475412f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x1) (async, rerun: 64) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) (async, rerun: 64) recvmmsg(r4, &(0x7f00000063c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='pstore\x00', 0x1000d, &(0x7f00000000c0)=',\xb3(,{\\)\x00') 3.276551728s ago: executing program 7 (id=1054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) r3 = eventfd(0x1cf) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_usb_connect$uac1(0x6, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x8e, &(0x7f00000001c0)={0x5, 0xf, 0x8e, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "95f1a023e34ce777708d6309e34a84e9"}, @generic={0x75, 0x10, 0xa, "f11bea34a4544629c5b32ce342edd6740a873765a803e570807c0b581809bd09bbdfa9656741f41524355fb90bab0cae1d59bdf25e81705ab8557d94cfd7a3f112b26e85dc782012fae24594140975e3ea1a74fce5e29eae6eb4e3022fb14fdbb2bbfd8ec1b2ac5da6ca2bf2db8567bd26d1"}]}}) syz_usb_control_io$uac1(r5, &(0x7f0000000800)={0x14, &(0x7f00000006c0)={0x40, 0x9, 0x2, {0x2, 0x9}}, 0x0}, &(0x7f0000000a80)={0x44, &(0x7f0000000840)={0x40, 0x17, 0x17, "2032c135a04cf1da62cd1a0ee3d855dfbb76908b743d65"}, 0x0, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000940)={0x20, 0x81, 0x2, "e078"}, &(0x7f0000000980)={0x20, 0x82, 0x2, ')d'}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x3, r3}) r6 = socket(0x11, 0x3, 0x0) setsockopt(r6, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg(r6, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r8, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="0201022e1fff3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 2.732264151s ago: executing program 8 (id=1057): mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c88a807001000000040"], 0xffe) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0xf5d0a93cb84a066, &(0x7f0000ff8000/0x1000)=nil) 2.206167745s ago: executing program 8 (id=1058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x100000, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000200)=0x100000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5, 0x0, r2}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x15, r2}, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="48b801b89734000000004d9823c80f23f835080050000f23f8c744240004000000c744240200000000c7442406000000000f064d0fc708c74424002a010000ff2c24b8010000000f01c10f23c00f21f835020002000f23f8c4e1b45702f341f4c4017d10e548b8c0770c90f03a5f344b0fc76f000f20e035004000000f22e035080000000f23f8", 0x87}], 0x1, 0x21, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x38}}, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}}, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) 1.668560048s ago: executing program 5 (id=1063): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'macsec0\x00', 0xc201}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000003c0)=@req={0x8, 0x800, 0x3, 0x2}, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="0800000c020100000f069078ac1414bbffffffff4e244e2300"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50200007907801ff"], 0x36) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r7, 0x1000) r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x400000000005, 0xbb42) ioctl$HIDIOCGRDESC(r8, 0x90044802, &(0x7f0000001840)={0x4000}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="0a0088a80180c2000003cd1008a2dc5886dd61fdeb4a00d000d0fe8000000000000000000000000000aa00000000000000000000ffffac1e00013a19000000000013070800000001009bb9"], 0x10a) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xbffc, 0x6}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r9 = openat(r0, &(0x7f000000c380)='./file0\x00', 0x363801, 0x0) fcntl$setstatus(r9, 0x4, 0x42000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xe8842, 0x4) fcntl$setstatus(r5, 0x4, 0x6400) r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r10, &(0x7f00000002c0)=ANY=[], 0xc0) r11 = socket$inet6(0x10, 0x2, 0x0) fsetxattr$security_capability(r10, &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x7, 0x400000}, {0x93, 0xac45}]}, 0x14, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x0, 0xffe00001}, {0x16}]}, 0x10) 1.668327798s ago: executing program 8 (id=1064): syslog(0xa, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc5", 0x32, 0x0, 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, 0x3000, 0x2}) fcntl$setsig(r0, 0xa, 0x3b) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x0, 0x5, 0x80000000, 0xbf9, 0x18, "ca113b1cdc86e58ebfb00f5fa97e2e7a93df9a"}) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x8a, 0x7, 0x3, 0xe0, 0x1b}) r2 = socket(0x1, 0x5, 0x0) getsockopt(r2, 0x1, 0x29, 0x0, &(0x7f0000003300)) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x6, 0x10, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x84, 0x38}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x7, 0x4, 0x7, 0x8, 0x2}, 0x4e, &(0x7f0000000100)={0x5, 0xf, 0x4e, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x7, 0xf, 0x5, [0xffc030, 0xffc0, 0xff3f00]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0xf, 0x9}, @ssp_cap={0x1c, 0x10, 0xa, 0x9a, 0x4, 0x6, 0xf00, 0x8000, [0x0, 0xff600f, 0xff000f, 0x1bf30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0xa9, 0xf7, 0xb852, 0x6}]}, 0x1, [{0xb3, &(0x7f0000000200)=ANY=[@ANYBLOB="b3037ef3e5f352bd7a62f473f9e18edc53ee98f9c44ecaace8adb53256119a5314a4831f2c39c305793cc54f6bbe9969abed5da20aea528dca01b07a29af5f78e8807e389a6cf7cdfda92346bd0ea0fa44eb8e4509d0fb34e46c34b3a16013ce9f04764f1edadc8fa4876dfec2e21a2b00d1065a7bfcf404ee3de3bd86e6e22dd6a28cc55bb740950d4b972391569226996490dc0d3b44"]}]}) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.509226552s ago: executing program 5 (id=1065): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0x2, 0xe) setsockopt$inet6_int(r0, 0x29, 0xcb, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) (async) write$cgroup_int(r4, &(0x7f00000000c0)=0x2, 0xe) (async) setsockopt$inet6_int(r0, 0x29, 0xcb, 0x0, 0x0) (async) 1.460245713s ago: executing program 5 (id=1066): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) (async) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) (async, rerun: 32) landlock_restrict_self(r1, 0x0) (rerun: 32) landlock_restrict_self(r1, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015000121"], 0xb8}}, 0x0) (async, rerun: 32) syz_usb_connect(0x0, 0x203, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0xb4, 0x5c, 0xe5, 0x10, 0x19d2, 0x1533, 0xb7bc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f1, 0x1, 0x8, 0x7, 0x10, 0xc, "", [{{0x9, 0x4, 0x15, 0x28, 0x6, 0xff, 0xff, 0xff, 0x9, [], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x29, 0x1, 0x7}}, {{0x9, 0x5, 0x7, 0x5, 0x400, 0x31, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x4}]}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x10, 0x80, 0x0, [@generic={0xca, 0xb, "06fa5733ae4ff865c2d71d803d7d5671b00f80ff236f77498225074c3ee446f59775a098c875f0d838e276c23cb59bdce802578a9732c53e9b80e31ca40741cd90a94f783e7564a8e483f2e9f32c89e0cab48797aa9e61057f195d4d45e9a245e27de0aefbbd922d3862e0004faddfadac8a463b74a237dacc8f2bbb60725c27c384600860a2bc3016c708771ca43c567050571dd32e665d8e4190868b66fe9a986d39b0e7e28e3ca2345a01b141f1196e2ecfe4c15dc26a79048c50533da50296c49f3213591c0e"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x6, 0xc, 0x9, [@generic={0xd1, 0x22, "4135880a271be8de125a1b77c4faf8c594990419087cf102f33d346e390ae877cb5d197297c1ed51b1a94d5e7cd020e1f73ce766ef60e79aa466862d207074394b116f49c252279b03a67a13555f4d97de00f63a034671fcb52bfe151f0d294c5d2be4e081ba3d4b94521f28c1848abb84701bdae9af3973cb16853a0e8e2d7346d459dc16ab6de9941779149e8074b2d04f8f94345c91c526812ab5be78a046f7c4e1de38c97de70f463fbb79cb4b9a26014ee5bda0b9f4d14ab1fffa99d4c733fd8606ce26ae9a0715dada60c575"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x3, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x3, 0x1}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x15555555555555c1}) (rerun: 32) landlock_restrict_self(r1, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x1}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setpriority(0x1, 0x0, 0xfffffffffffff000) (async) landlock_restrict_self(r4, 0x0) (async, rerun: 64) landlock_restrict_self(r0, 0x0) (async, rerun: 64) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') 1.368238366s ago: executing program 5 (id=1068): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02dd81", "06c9b3000800"}, 0x38) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f0000000280)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f0000000000)={0x13}) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000100)={0x2086}, 0x1) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0xffaf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 1.104339793s ago: executing program 2 (id=1071): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x200, &(0x7f0000000040)=0x2) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', &(0x7f00000002c0)=@ethtool_cmd={0x49, 0x100, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8000001b}}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10, r0, 0x7be85000) 1.062336384s ago: executing program 2 (id=1072): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x9) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) (async) close_range(r0, r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty, 0x2}, 0x1c) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1e, 0x21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) (async) sendto$inet6(r0, &(0x7f00000000c0)=';', 0x1, 0x2400c081, 0x0, 0x0) 987.926115ms ago: executing program 2 (id=1073): socket$netlink(0x10, 0x3, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1f00308872c7da198f47fee454b42c66f040122e7e9aed7675c6fb8a0892a4b438ce7f07a51e7c810da83c613bdefc0496c92e8c6ac5f6e54dc2f0151e5060fadca539db95", @ANYBLOB="09000280976b0008680000002e8659c907fca3f109c9e4312a2abf1a4dabed4242b2c044a613ae89c5389a243cf48315e44b07a561", @ANYBLOB="24fea53e009a35b29a0100000000000101000008", @ANYRES8=r0], 0x24}], 0x1, 0x0, 0x0, 0x800}, 0x2008c010) 984.384345ms ago: executing program 2 (id=1074): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004804}, 0x4040880) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x3) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000005d40), 0x2, 0x0) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000008dc0)={0xd, 0x7, 0x1, {{}, 0x6}}, 0xd) listen(r2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000140)="1ba0000200000000000005cbdd045798707bed4dca141a780f0f8e", 0x1b, 0x20048810, 0x0, 0x5c) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/32, 0x20, 0x22, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="c8050000100019", 0x7}], 0x1) r7 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000002340)={0x2020}, 0x2020) syslog(0x3, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, 0x0) r10 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r10, &(0x7f0000002640)=[{{&(0x7f0000000000)={0x2, 0x4e1d, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000180)="fb47d35643c16353", 0x8}], 0x1}}], 0x2, 0x4048894) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) 933.994207ms ago: executing program 2 (id=1075): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x1943, &(0x7f0000000480)={0x0, 0x5fc5, 0x1, 0xffffffff, 0x3b5}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x0) socket(0x10, 0x3, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000000)={0x33, 0x6, 0x0, {0x2, 0x4, 0xa, 0x0, '/dev/zero\x00'}}, 0x33) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_add_dev(r0, r3, r1, r4, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x3, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r6, r7, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x4000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) execveat(r8, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)={[&(0x7f0000000200)='\x00', &(0x7f0000000240)=')*\x00']}, &(0x7f0000000440)={[&(0x7f0000000400)='/dev/kvm\x00']}, 0x1000) 865.445988ms ago: executing program 2 (id=1076): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r6, 0x724) r8 = socket$netlink(0x10, 0x3, 0x8000000004) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, &(0x7f0000000080)=0x1, 0x2) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xfb, 0x7d, 0xa5, 0x20, 0x5fa2, 0xbb1a, 0x829d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0x90, 0x2, "", [{{0x9, 0x4, 0xe2, 0x1, 0x0, 0x2, 0xc, 0x7, 0x5}}]}}]}}, 0x0) 772.706631ms ago: executing program 5 (id=1077): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xd, 0xf, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x10, 0xb, 0xfb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x0, 0x24, 0x28, {0x28, 0x11, "f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 277.723983ms ago: executing program 5 (id=1078): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x644, 0x800e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xff, 0xc0, 0xc, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x3ff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x3, 0x4, 0x7fff, 0x4, 0x7, 0x1, 0xfc00, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0xd0, 0x4, {0xa, 0x25, 0x25, 0x7fff, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfa, 0x1a, 0x2, {0xa, 0x25, 0x25, 0x4, 0x5, 0x5d}}}}}}}}]}}, 0x0) 233.965714ms ago: executing program 7 (id=1079): syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xe382) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6be3eda9d789ad58240c545b8573a02f446c8c559f3cfaede69e3975bdcd17824b0dd1f8705c89e6dff2248bba9423ce44a59a17191a457b9c18f9ea0179e3c56e48"]) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000000)={@empty, @broadcast, 0x0}, &(0x7f0000000380)=0xc) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x7f, r4, 0x7}, 0xc) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0xf, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @loopback}}}, 0x108) close(r2) r5 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x8e,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90S\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@-_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x1c\xd6\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xfd9c, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, 0x0, 0x110, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x19, 0x51}}}}, [@NL80211_ATTR_MAC={0x5a, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x6c8c0) syz_open_dev$ttys(0xc, 0x2, 0x1) sendfile(r5, r1, 0x0, 0x8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) vmsplice(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000400)="4fea99f86fc34874447505c49ad0e85b04c66870853f4bba721055fdd5a8400f268616c04ef993c91eaa8e4b2c80cfc16dd9b7ce0f34ff1c0969474e21d1ad55d28f87703291ea01", 0x48}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="7e36e3097eb4a1995d973213c4d2fa2bb1917d3d754258ec778c457247f5bfdd2cb3d728c0895bf6d2cdf805dc6a", 0x2e}, {&(0x7f0000001940)="2c41290131780bcf45bf97f8ab38222afd938aee12cb3d08", 0x18}, {&(0x7f0000001980)="76618d5f04cad1f1e2e2c69ca2c4729c5ff3b97706ce9db25404a90c2efb745fcdeed48fb745a9bbaa65022f45e45502b6b29cb32b1c27814df53db0523a22edc21849a74f41ceb83e1c3adc55efbb1776eb9985d3e9abcbeb76ed5e8af4386e7f05cf65c5fbd1f358cd8b08389f910e200df0f41d62e845556c1f5ceeff02a503a33447d3230c87d10528daf2317e4d2a74ed3634f08823686089287be9b6c20685462e30529c3f56c93fc7e8b7a16b483301b9874fcb203e216258d6710ba9f5c35f7cff21999f047bedf5b183156edc5ccec7677106802ff32e81dfa6735655e5381f5c37dcd3304be943ede89e", 0xef}, {&(0x7f0000001a80)}, {&(0x7f0000001ac0)="435235b4cbba1962e67685012ab63baaff9b99947692d72e7bd9b123ef93c2e8fbe79506b44f767a159021e49a7b9a2009f9064cdc98c8b6a369", 0x3a}], 0x7, 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000200)=0x9, 0x4) 76.600008ms ago: executing program 7 (id=1080): r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000003c0)=0x1) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) (async, rerun: 64) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = openat(r1, &(0x7f00000002c0)='./file0\x00', 0x480, 0x8) r3 = socket(0x10, 0x0, 0x9) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ed0002011940010029c07000001600001dbc9287000f8008c5210000", @ANYRES32=r3, @ANYBLOB="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db000000"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x804) (async, rerun: 64) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x6003, 0x0) (rerun: 64) pipe2$9p(&(0x7f0000000080), 0x800) (async, rerun: 64) dup(r4) (async, rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x4cd) (async, rerun: 32) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r6, 0x4068aea3, &(0x7f0000000280)={0xed, 0x0, 0x7}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="01002cbd7000fbdbdf25010000000000000002410000001000136574683a767863616e310000963dea3e0addf6565154fd7a337e978df66cbbaf091459a11d65ab92695e724817e2b29bbf3f328404ba78743eb23641550d94b7236c6839fa371b897ddc17d7c4bc59086645d0626598de6140d336e74c87a2d133"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20040010) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r8) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) write$vga_arbiter(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c6f636b2069aaa52aaa956f2b6d656d00"], 0xc) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x20010, 0xffffffffffffffff, 0xec776000) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r10 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) 18.333189ms ago: executing program 7 (id=1081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000580)="240000001c005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x1, @multicast2}}, {{0x2, 0x4e21, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000480)={0x2, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) syslog(0x4, &(0x7f0000000840)=""/4096, 0x1000) syslog(0x3, &(0x7f0000001f00)=""/107, 0x6b) symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000480)='./file0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000fbdbdf250100000000000000025b0000001000138674682c627863616e3100006458832e7443f6f5e96b97dc03b199f0e63341c3b62e7c48a27b30689cd49abe31ee814f359c207e09423d2ac8d360f181c3316f48062080439aaef2b5eb9d5c31a29be1aab05dc62bd2f20b3e04c8ef1e38864dda24ee9b9f27f41d9c39cbac445670a3"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20040010) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0002c0096bf34000000000000000084100000014001800930c7933758b5cb46e65766531000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x64, 0x0, &(0x7f0000000040)) r5 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r10, &(0x7f0000000480)=ANY=[@ANYBLOB="000022f0ffffffffffffaaaaaaaaaabb86dd6100070000012c00fe880000000000000000000000000001200100"/58], 0x3a) r13 = syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0xc, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=0x0) r16 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r13, 0x2) syz_ublk_setup_queues(r16, r15, &(0x7f0000000280)={0x0, 0xf5b8, 0x10, 0x1, 0x215, 0x0, r6}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe4b8, 0x2, 0x3, 0xf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b4f, 0x4000, 0x0, 0x344}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f38, 0x1, 0x3, 0x221, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa5df, 0x200, 0x2, 0x2bd, 0x0, r6}}], 0x4, &(0x7f0000001dc0)={0x2e, 0xc, 0x0, r16, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff9}, 0x0, r14, '\x00', {0x1, 0x362, 0x0, 0x0}}, &(0x7f0000001e40)) socket$netlink(0x10, 0x3, 0x4) ioctl$BLKGETNRZONES(0xffffffffffffffff, 0x80041285, &(0x7f0000000200)=0xa810) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) 0s ago: executing program 8 (id=1082): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000087ff0f10ab0701fc908d01020301090212433f00003b0009040000000802"], 0x0) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x2762, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r4, 0xc0205866, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000180)='hostfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r5, &(0x7f0000000200)='1', 0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x1a000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x18}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000e58000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x4b564d06, 0xec000000, 0xcd}]}) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r9, 0x89f6, &(0x7f00000003c0)={'sit0\x00', 0x0}) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): 3986): avc: denied { read write } for pid=2655 comm="syz.3.700" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.163292][ T36] audit: type=1400 audit(1785706306.308:3987): avc: denied { read write open } for pid=2655 comm="syz.3.700" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.214076][ T36] audit: type=1400 audit(1785706306.328:3988): avc: denied { ioctl } for pid=2655 comm="syz.3.700" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.258854][ T36] audit: type=1400 audit(1785706306.328:3989): avc: denied { read } for pid=2658 comm="syz.2.701" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.306393][ T36] audit: type=1400 audit(1785706306.328:3990): avc: denied { read open } for pid=2658 comm="syz.2.701" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.330668][ T36] audit: type=1400 audit(1785706306.328:3991): avc: denied { read } for pid=2658 comm="syz.2.701" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 152.355368][ T36] audit: type=1400 audit(1785706306.338:3992): avc: denied { read open } for pid=2658 comm="syz.2.701" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 153.373966][ T344] usb 1-1: 0:2 : does not exist [ 153.382895][ T344] usb 1-1: unit 9 not found! [ 153.393917][ T344] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 153.408214][ T344] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 153.427852][ T344] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 153.437493][ T344] usb 1-1: 4:0: cannot get min/max values for control 7 (id 4) [ 153.450195][ T344] usb 1-1: 4:0: cannot get min/max values for control 8 (id 4) [ 153.466192][ T46] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 153.469372][ T344] usb 1-1: 4:0: cannot get min/max values for control 9 (id 4) [ 153.488196][ T344] usb 1-1: 4:0: cannot get min/max values for control 10 (id 4) [ 153.510385][ T344] usb 1-1: USB disconnect, device number 67 [ 153.594281][ T760] udevd[760]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 153.636446][ T46] usb 3-1: device descriptor read/64, error -71 [ 153.876800][ T46] usb 3-1: device descriptor read/64, error -71 [ 154.117198][ T46] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 154.257415][ T46] usb 3-1: device descriptor read/64, error -71 [ 154.287469][ T344] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 154.447704][ T344] usb 4-1: Using ep0 maxpacket: 16 [ 154.456075][ T344] usb 4-1: unable to get BOS descriptor set [ 154.465555][ T344] usb 4-1: config 1 has an invalid descriptor of length 250, skipping remainder of the config [ 154.477044][ T344] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.491281][ T344] usb 4-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 154.497920][ T46] usb 3-1: device descriptor read/64, error -71 [ 154.501714][ T344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.515949][ T344] usb 4-1: Product: በ[ 154.520786][ T344] usb 4-1: Manufacturer: ဌ [ 154.525472][ T344] usb 4-1: SerialNumber: ꫲᢻ백ㄽê™ê™¼ç„¸äª°à¤§è¯•ä­ä˜šê•â¢ªé¿§ë‡—禛胰䄒瑌㳭ꭹê„潷ꩥ哠㽈湫⭎Ř姼뀲롫⿓긫⦑烧얖㲟Ჲ䯻爂与瘩➅圮㨟挺î¬êºžä¶”鄖頙䦸劈䙿悭ꓩ镎ç³å¢ŸêŽ¨í€å½ê©”礈푤皌㸧ã¬é¼§ì€„袟 [ 154.617945][ T46] usb usb3-port1: attempt power cycle [ 154.764222][ T2688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.779577][ T2688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.809404][ T344] usb 4-1: 0:1 : does not exist [ 154.814344][ T344] usb 4-1: 0:2 : does not exist [ 154.834431][ T344] usb 4-1: USB disconnect, device number 91 [ 154.901576][ T760] udevd[760]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 154.958418][ T46] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 154.991309][ T46] usb 3-1: device descriptor read/8, error -71 [ 155.141460][ T46] usb 3-1: device descriptor read/8, error -71 [ 155.379013][ T46] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 155.418565][ T46] usb 3-1: device descriptor read/8, error -71 [ 155.577120][ T46] usb 3-1: device descriptor read/8, error -71 [ 155.689960][ T46] usb usb3-port1: unable to enumerate USB device [ 155.999892][ T46] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 156.160231][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 156.172627][ T46] usb 4-1: config 1 has an invalid descriptor of length 169, skipping remainder of the config [ 156.196676][ T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.222466][ T46] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.231672][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.239699][ T46] usb 4-1: Product: syz [ 156.243986][ T46] usb 4-1: Manufacturer: syz [ 156.248832][ T46] usb 4-1: SerialNumber: syz [ 156.758178][ T46] usb 4-1: 0:2 : does not exist [ 156.780516][ T46] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 156.923595][ T46] usb 4-1: USB disconnect, device number 92 [ 157.068027][ T36] kauditd_printk_skb: 307 callbacks suppressed [ 157.068048][ T36] audit: type=1400 audit(1785706311.291:4300): avc: denied { read } for pid=2705 comm="syz.3.714" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 157.127277][ T36] audit: type=1400 audit(1785706311.331:4301): avc: denied { read open } for pid=2705 comm="syz.3.714" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 157.181233][ T36] audit: type=1400 audit(1785706311.331:4302): avc: denied { create } for pid=2705 comm="syz.3.714" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 157.221429][ T36] audit: type=1400 audit(1785706311.331:4303): avc: denied { ioctl } for pid=2705 comm="syz.3.714" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26619 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 157.277795][ T36] audit: type=1400 audit(1785706311.331:4304): avc: denied { ioctl } for pid=2705 comm="syz.3.714" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26619 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 157.586377][ T36] audit: type=1400 audit(1785706311.810:4305): avc: denied { read write } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.649999][ T36] audit: type=1400 audit(1785706311.840:4306): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.697451][ T760] udevd[760]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 157.702507][ T36] audit: type=1400 audit(1785706311.840:4307): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.776989][ T36] audit: type=1400 audit(1785706311.910:4308): avc: denied { create } for pid=2707 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 157.822189][ T36] audit: type=1400 audit(1785706311.920:4309): avc: denied { associate } for pid=2707 comm="syz.2.715" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 158.793372][ T344] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 158.953521][ T344] usb 3-1: Using ep0 maxpacket: 8 [ 158.962673][ T344] usb 3-1: unable to get BOS descriptor or descriptor too short [ 158.978140][ T344] usb 3-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 158.987744][ T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.997166][ T344] usb 3-1: Product: syz [ 159.001464][ T344] usb 3-1: Manufacturer: syz [ 159.007393][ T344] usb 3-1: SerialNumber: syz [ 159.228682][ T344] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 159.255848][ T344] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 159.273103][ T344] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 159.288168][ T344] usb 3-1: USB disconnect, device number 63 [ 159.370196][ T760] udevd[760]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 159.721422][ T2713] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.742565][ T2713] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.755637][ T2713] bridge_slave_0: entered allmulticast mode [ 159.762114][ T2713] bridge_slave_0: entered promiscuous mode [ 159.785161][ T2713] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.792270][ T2713] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.801969][ T2713] bridge_slave_1: entered allmulticast mode [ 159.811570][ T2713] bridge_slave_1: entered promiscuous mode [ 159.977434][ T2713] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.984570][ T2713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.991920][ T2713] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.999020][ T2713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.149297][ T865] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.157706][ T865] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.208466][ T845] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.215583][ T845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.249889][ T865] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.257074][ T865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.364990][ T375] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 160.471673][ T2713] veth0_vlan: entered promiscuous mode [ 160.518137][ T375] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.534175][ T2713] veth1_macvtap: entered promiscuous mode [ 160.540667][ T375] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.570917][ T375] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 160.586763][ T375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.605069][ T375] usb 4-1: Product: syz [ 160.614573][ T375] usb 4-1: Manufacturer: syz [ 160.624977][ T375] usb 4-1: SerialNumber: syz [ 160.665287][ T46] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 160.825694][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 160.838925][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.854949][ T375] usb 4-1: 0:2 : does not exist [ 160.864818][ T46] usb 3-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 160.880534][ T375] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 160.887941][ T46] usb 3-1: config 1 interface 1 has no altsetting 0 [ 160.915675][ T375] usb 4-1: USB disconnect, device number 93 [ 160.923388][ T46] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 160.941912][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.952049][ T46] usb 3-1: Product: syz [ 160.957225][ T46] usb 3-1: Manufacturer: syz [ 160.962559][ T46] usb 3-1: SerialNumber: syz [ 161.093038][ T760] udevd[760]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 161.186761][ T46] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 161.218733][ T46] usb 3-1: USB disconnect, device number 64 [ 161.235878][ T577] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 161.385985][ T577] usb 6-1: device descriptor read/64, error -71 [ 161.636277][ T577] usb 6-1: device descriptor read/64, error -71 [ 161.706294][ T66] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 161.793691][ T2751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=2751 comm=syz.2.728 [ 161.890632][ T577] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 161.906476][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.929110][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.942330][ T66] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 161.953203][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.963927][ T66] usb 4-1: config 0 descriptor?? [ 162.066657][ T577] usb 6-1: device descriptor read/64, error -71 [ 162.081117][ T36] kauditd_printk_skb: 596 callbacks suppressed [ 162.081137][ T36] audit: type=1400 audit(1785706316.305:4906): avc: denied { read append } for pid=2757 comm="syz.2.730" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 162.133768][ T36] audit: type=1400 audit(1785706316.335:4907): avc: denied { read append open } for pid=2757 comm="syz.2.730" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 162.179343][ T36] audit: type=1400 audit(1785706316.405:4908): avc: denied { ioctl } for pid=2740 comm="syz.5.725" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.206445][ T66] usbhid 4-1:0.0: can't add hid device: -71 [ 162.215512][ T66] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 162.246782][ T36] audit: type=1400 audit(1785706316.405:4909): avc: denied { ioctl } for pid=2740 comm="syz.5.725" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.258651][ T66] usb 4-1: USB disconnect, device number 94 [ 162.306846][ T577] usb 6-1: device descriptor read/64, error -71 [ 162.326870][ T36] audit: type=1400 audit(1785706316.405:4910): avc: denied { ioctl } for pid=2740 comm="syz.5.725" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.357957][ T36] audit: type=1400 audit(1785706316.405:4911): avc: denied { ioctl } for pid=2740 comm="syz.5.725" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.384443][ T36] audit: type=1400 audit(1785706316.405:4912): avc: denied { ioctl } for pid=2740 comm="syz.5.725" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.421826][ T2763] syzkaller1: entered allmulticast mode [ 162.428940][ T36] audit: type=1400 audit(1785706316.405:4913): avc: denied { ioctl } for pid=2740 comm="syz.5.725" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.460983][ T577] usb usb6-port1: attempt power cycle [ 162.464871][ T36] audit: type=1400 audit(1785706316.405:4914): avc: denied { ioctl } for pid=2740 comm="syz.5.725" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.501459][ T36] audit: type=1400 audit(1785706316.445:4915): avc: denied { read write } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.565517][ T2765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 162.767278][ T66] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 162.797309][ T577] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 162.829931][ T577] usb 6-1: device descriptor read/8, error -71 [ 162.857392][ T46] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 162.918514][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 162.926800][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.938314][ T66] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.948174][ T66] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 162.957434][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.968297][ T577] usb 6-1: device descriptor read/8, error -71 [ 162.976791][ T66] usb 4-1: config 0 descriptor?? [ 163.040378][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.051992][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.062232][ T46] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 163.071570][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.087616][ T46] usb 3-1: config 0 descriptor?? [ 163.207654][ T577] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 163.238408][ T577] usb 6-1: device descriptor read/8, error -71 [ 163.370672][ T577] usb 6-1: device descriptor read/8, error -71 [ 163.393127][ T2743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=2743 comm=syz.3.726 [ 163.477974][ T577] usb usb6-port1: unable to enumerate USB device [ 163.621409][ T2743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.630217][ T2743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.647314][ T66] usbhid 4-1:0.0: can't add hid device: -71 [ 163.668051][ T66] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 163.688873][ T66] usb 4-1: USB disconnect, device number 95 [ 163.717102][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 163.727241][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 163.749023][ T46] usb 3-1: USB disconnect, device number 65 [ 164.382925][ T2782] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 6 [ 164.390287][ T2782] rust_binder: 545: no such ref 2 [ 164.468674][ T577] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 164.541845][ T2791] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 164.562289][ T2791] netlink: 'syz.3.741': attribute type 12 has an invalid length. [ 164.618767][ T577] usb 6-1: Using ep0 maxpacket: 8 [ 164.640569][ T577] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.664287][ T577] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 164.685191][ T577] usb 6-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 164.705521][ T577] usb 6-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 164.726058][ T577] usb 6-1: Product: syz [ 164.738054][ T577] usb 6-1: config 0 descriptor?? [ 164.973337][ T2812] kvm: requested 190247 ns i8254 timer period limited to 200000 ns [ 164.981652][ T2812] kvm: requested 32685 ns i8254 timer period limited to 200000 ns [ 164.990916][ T2812] kvm: requested 139962 ns i8254 timer period limited to 200000 ns [ 165.007107][ T2812] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 165.015407][ T2812] kvm: requested 52800 ns i8254 timer period limited to 200000 ns [ 165.024627][ T2812] kvm: requested 138285 ns i8254 timer period limited to 200000 ns [ 165.034746][ T2812] kvm: requested 103085 ns i8254 timer period limited to 200000 ns [ 165.044509][ T2815] veth0_vlan: entered allmulticast mode [ 165.050572][ T2812] kvm: requested 26819 ns i8254 timer period limited to 200000 ns [ 165.067359][ T2815] vlan1: entered promiscuous mode [ 165.074567][ T2812] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 165.083775][ T2815] vlan1: entered allmulticast mode [ 165.452798][ T2825] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 165.479193][ T2822] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 165.498696][ T2823] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 166.199946][ T46] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 166.353095][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.364635][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.375871][ T46] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 166.386639][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.400324][ T46] usb 4-1: config 0 descriptor?? [ 166.620819][ T46] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 166.633206][ T46] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 166.652047][ T46] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 166.658899][ T46] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 166.666337][ T46] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 166.680283][ T46] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 166.706709][ T46] pyra 0003:1E7D:2CF6.001C: unknown main item tag 0x0 [ 166.730495][ T46] pyra 0003:1E7D:2CF6.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 166.760551][ T46] pyra 0003:1E7D:2CF6.001C: couldn't init struct pyra_device [ 166.768015][ T46] pyra 0003:1E7D:2CF6.001C: couldn't install mouse [ 166.789266][ T375] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 166.800647][ T46] pyra 0003:1E7D:2CF6.001C: probe with driver pyra failed with error -71 [ 166.840472][ T46] usb 4-1: USB disconnect, device number 97 [ 166.901837][ T2857] fido_id[2857]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 166.950418][ T375] usb 3-1: Using ep0 maxpacket: 16 [ 166.966700][ T375] usb 3-1: config 7 has an invalid interface number: 182 but max is 0 [ 166.990445][ T375] usb 3-1: config 7 has an invalid interface number: 51 but max is 0 [ 166.998664][ T375] usb 3-1: config 7 has 2 interfaces, different from the descriptor's value: 1 [ 167.021786][ T375] usb 3-1: config 7 has no interface number 0 [ 167.027939][ T375] usb 3-1: config 7 has no interface number 1 [ 167.050492][ T375] usb 3-1: config 7 interface 182 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 167.080511][ T375] usb 3-1: config 7 interface 51 altsetting 214 has an endpoint descriptor with address 0x93, changing to 0x83 [ 167.109907][ T36] kauditd_printk_skb: 529 callbacks suppressed [ 167.109928][ T36] audit: type=1400 audit(1785706321.321:5445): avc: denied { read write } for pid=2858 comm="syz.3.761" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.141884][ T375] usb 3-1: config 7 interface 51 altsetting 214 endpoint 0x83 has an invalid bInterval 245, changing to 7 [ 167.182132][ T577] usbhid 6-1:0.0: can't add hid device: -71 [ 167.189652][ T375] usb 3-1: config 7 interface 51 altsetting 214 endpoint 0x83 has invalid maxpacket 10146, setting to 1024 [ 167.202285][ T36] audit: type=1400 audit(1785706321.331:5446): avc: denied { read write open } for pid=2858 comm="syz.3.761" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.224606][ T577] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 167.240636][ T375] usb 3-1: config 7 interface 51 altsetting 214 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 167.260079][ T577] usb 6-1: USB disconnect, device number 6 [ 167.280677][ T375] usb 3-1: config 7 interface 182 has no altsetting 0 [ 167.287556][ T375] usb 3-1: config 7 interface 51 has no altsetting 0 [ 167.300646][ T36] audit: type=1400 audit(1785706321.331:5447): avc: denied { ioctl } for pid=2858 comm="syz.3.761" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 167.361008][ T375] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 167.370116][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.389697][ T66] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 167.390798][ T36] audit: type=1400 audit(1785706321.341:5448): avc: denied { read write } for pid=2858 comm="syz.3.761" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.420726][ T375] usb 3-1: Product: а [ 167.424830][ T375] usb 3-1: Manufacturer: 伃ਲ਼᮵쎎䤛ѓ뿭îŒçŒ¿ë¸ç›€é‡¦ì´¬âŠÊ‰ãŠã¦í€î“ªé°±è£“飥᫅桃ጢ뾫㎾ጥ丼ག챩絋ç•â¢¡á•¹ë²ºä†˜è¯‰å¯”ꚷ뙆êŠé†ªé“¦ä¦¤åµîª¬å‡°å—œë…›ç‹—ퟭ銻䎌⤠龇٦ìžæšŠì˜Ÿí³å’µã¹ å‰‰ã˜‹î ¢ [ 167.481638][ T375] usb 3-1: SerialNumber: syz [ 167.490160][ T36] audit: type=1400 audit(1785706321.341:5449): avc: denied { read write open } for pid=2858 comm="syz.3.761" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.520297][ T36] audit: type=1400 audit(1785706321.351:5450): avc: denied { ioctl } for pid=2858 comm="syz.3.761" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.550142][ T36] audit: type=1400 audit(1785706321.361:5451): avc: denied { ioctl } for pid=2858 comm="syz.3.761" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.594049][ T66] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7 [ 167.623450][ T66] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024 [ 167.630399][ T36] audit: type=1400 audit(1785706321.371:5452): avc: denied { ioctl } for pid=2858 comm="syz.3.761" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.660984][ T36] audit: type=1400 audit(1785706321.371:5453): avc: denied { ioctl } for pid=2858 comm="syz.3.761" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 167.667428][ T66] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 167.716001][ T36] audit: type=1400 audit(1785706321.451:5454): avc: denied { read write } for pid=2713 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.723857][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.749402][ T2298] bridge0: port 3(syz_tun) entered disabled state [ 167.756801][ T66] usb 4-1: Product: syz [ 167.761224][ T66] usb 4-1: Manufacturer: syz [ 167.766606][ T66] usb 4-1: SerialNumber: syz [ 167.773454][ T2298] syz_tun (unregistering): left allmulticast mode [ 167.782796][ T2298] syz_tun (unregistering): left promiscuous mode [ 167.789194][ T2298] bridge0: port 3(syz_tun) entered disabled state [ 167.826524][ T375] usb 3-1: USB disconnect, device number 66 [ 167.900214][ T853] bridge_slave_1: left allmulticast mode [ 167.913006][ T853] bridge_slave_1: left promiscuous mode [ 167.922681][ T853] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.939753][ T853] bridge_slave_0: left allmulticast mode [ 167.945506][ T853] bridge_slave_0: left promiscuous mode [ 167.951233][ T853] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.063500][ T66] usb 4-1: Can't get UAC3 power state for id 10 [ 168.081491][ T66] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 168.100575][ T66] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 168.114791][ T853] veth1_macvtap: left promiscuous mode [ 168.120406][ T853] ÿÿÿÿÿÿ: left promiscuous mode [ 168.163822][ T66] usb 4-1: USB disconnect, device number 98 [ 168.377146][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 168.440042][ T2866] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.450944][ T2866] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.460501][ T2866] bridge_slave_0: entered allmulticast mode [ 168.467761][ T2866] bridge_slave_0: entered promiscuous mode [ 168.478668][ T2866] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.497448][ T2866] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.520839][ T2866] bridge_slave_1: entered allmulticast mode [ 168.549629][ T2866] bridge_slave_1: entered promiscuous mode [ 168.682087][ T31] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 168.692574][ T853] bridge_slave_1: left allmulticast mode [ 168.698270][ T853] bridge_slave_1: left promiscuous mode [ 168.704031][ T853] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.711956][ T853] bridge_slave_0: left allmulticast mode [ 168.717646][ T853] bridge_slave_0: left promiscuous mode [ 168.723428][ T853] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.821216][ T2866] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.828346][ T2866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.836399][ T2866] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.843484][ T2866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.858667][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.875669][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.899900][ T853] veth1_macvtap: left promiscuous mode [ 168.909594][ T31] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 168.920275][ T853] veth0_vlan: left promiscuous mode [ 168.925666][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.942039][ T31] usb 3-1: config 0 descriptor?? [ 169.061429][ T845] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.070375][ T845] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.098785][ T861] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.105907][ T861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.129830][ T861] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.136944][ T861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.172230][ T1593] bridge0: port 3(syz_tun) entered disabled state [ 169.179693][ T1593] syz_tun (unregistering): left allmulticast mode [ 169.186931][ T1593] syz_tun (unregistering): left promiscuous mode [ 169.193881][ T1593] bridge0: port 3(syz_tun) entered disabled state [ 169.264506][ T2866] veth0_vlan: entered promiscuous mode [ 169.313534][ T2866] veth1_macvtap: entered promiscuous mode [ 169.364191][ T31] hid (null): invalid report_count -453556826 [ 169.381125][ T31] steelseries 0003:1038:12B6.001D: invalid report_count -453556826 [ 169.402670][ T31] steelseries 0003:1038:12B6.001D: item 0 4 1 9 parsing failed [ 169.410524][ T31] steelseries 0003:1038:12B6.001D: probe with driver steelseries failed with error -22 [ 169.474120][ T853] bridge_slave_1: left allmulticast mode [ 169.491228][ T853] bridge_slave_1: left promiscuous mode [ 169.517285][ T853] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.546657][ T853] bridge_slave_0: left allmulticast mode [ 169.574463][ T853] bridge_slave_0: left promiscuous mode [ 169.580156][ T853] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.595165][ T31] usb 3-1: USB disconnect, device number 67 [ 169.724087][ T2893] netlink: 'syz.5.773': attribute type 4 has an invalid length. [ 169.731809][ T2893] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.773'. [ 169.758308][ T853] tipc: Disabling bearer [ 169.763687][ T853] tipc: Left network mode [ 169.769515][ T853] veth1_macvtap: left promiscuous mode [ 169.778613][ T853] veth0_vlan: left promiscuous mode [ 169.942447][ T66] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 170.010914][ T2894] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.018095][ T2894] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.031816][ T2894] bridge_slave_0: entered allmulticast mode [ 170.039402][ T2894] bridge_slave_0: entered promiscuous mode [ 170.047463][ T2894] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.054626][ T2894] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.061869][ T2894] bridge_slave_1: entered allmulticast mode [ 170.068215][ T2894] bridge_slave_1: entered promiscuous mode [ 170.102690][ T66] usb 7-1: device descriptor read/64, error -71 [ 170.242563][ T577] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 170.250811][ T853] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.257922][ T853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.270496][ T845] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.277621][ T845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.358748][ T2894] veth0_vlan: entered promiscuous mode [ 170.364292][ T66] usb 7-1: device descriptor read/64, error -71 [ 170.400997][ T2894] veth1_macvtap: entered promiscuous mode [ 170.413071][ T31] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 170.427483][ T577] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 170.439075][ T577] usb 6-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 170.449178][ T577] usb 6-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid wMaxPacketSize 0 [ 170.460728][ T577] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 170.474516][ T577] usb 6-1: config 220 interface 0 has no altsetting 0 [ 170.481741][ T577] usb 6-1: config 220 interface 1 has no altsetting 0 [ 170.494487][ T577] usb 6-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 170.504460][ T577] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.513822][ T577] usb 6-1: Product: syz [ 170.518079][ T577] usb 6-1: Manufacturer: syz [ 170.523646][ T577] usb 6-1: SerialNumber: syz [ 170.562600][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 170.570760][ T31] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 170.585782][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 170.602612][ T66] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 170.606076][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 170.639275][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.651046][ T31] usb 3-1: config 0 descriptor?? [ 170.752856][ T66] usb 7-1: device descriptor read/64, error -71 [ 171.002835][ T66] usb 7-1: device descriptor read/64, error -71 [ 171.084298][ T31] logitech-djreceiver 0003:046D:C70E.001E: unknown main item tag 0x2 [ 171.092469][ T31] logitech-djreceiver 0003:046D:C70E.001E: unknown main item tag 0x4 [ 171.113737][ T66] usb usb7-port1: attempt power cycle [ 171.117728][ T31] logitech-djreceiver 0003:046D:C70E.001E: unknown main item tag 0x0 [ 171.128458][ T31] logitech-djreceiver 0003:046D:C70E.001E: unknown main item tag 0x0 [ 171.137460][ T31] logitech-djreceiver 0003:046D:C70E.001E: unknown main item tag 0x0 [ 171.148337][ T31] logitech-djreceiver 0003:046D:C70E.001E: unknown main item tag 0x0 [ 171.157515][ T31] logitech-djreceiver 0003:046D:C70E.001E: unknown main item tag 0x0 [ 171.166694][ T31] logitech-djreceiver 0003:046D:C70E.001E: unknown main item tag 0x0 [ 171.175652][ T31] logitech-djreceiver 0003:046D:C70E.001E: unknown main item tag 0x0 [ 171.184785][ T31] logitech-djreceiver 0003:046D:C70E.001E: unknown main item tag 0x0 [ 171.193540][ T31] logitech-djreceiver 0003:046D:C70E.001E: unknown main item tag 0x0 [ 171.201669][ T31] logitech-djreceiver 0003:046D:C70E.001E: unknown main item tag 0x0 [ 171.213654][ T31] logitech-djreceiver 0003:046D:C70E.001E: hidraw0: USB HID v80.09 Device [HID 046d:c70e] on usb-dummy_hcd.2-1/input0 [ 171.291841][ T577] usb 6-1: selecting invalid altsetting 0 [ 171.304699][ T31] usb 3-1: USB disconnect, device number 68 [ 171.316616][ T577] usb 6-1: USB disconnect, device number 7 [ 171.364933][ T2926] fido_id[2926]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 171.463913][ T66] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 171.506426][ T66] usb 7-1: device descriptor read/8, error -71 [ 171.645909][ T66] usb 7-1: device descriptor read/8, error -71 [ 171.854461][ T2939] __vm_enough_memory: pid: 2939, comm: syz.2.784, bytes: 576460756598390784 not enough memory for the allocation [ 171.903266][ T66] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 171.926584][ T66] usb 7-1: device descriptor read/8, error -71 [ 172.072340][ T66] usb 7-1: device descriptor read/8, error -71 [ 172.119034][ T36] kauditd_printk_skb: 1463 callbacks suppressed [ 172.119058][ T36] audit: type=1400 audit(1785706326.328:6918): avc: denied { create } for pid=2932 comm="syz.5.783" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.163362][ T36] audit: type=1400 audit(1785706326.328:6919): avc: denied { map } for pid=2932 comm="syz.5.783" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.190057][ T36] audit: type=1400 audit(1785706326.328:6920): avc: denied { read write } for pid=2932 comm="syz.5.783" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.215957][ T36] audit: type=1400 audit(1785706326.328:6921): avc: denied { map } for pid=2932 comm="syz.5.783" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.233794][ T66] usb usb7-port1: unable to enumerate USB device [ 172.244312][ T36] audit: type=1400 audit(1785706326.328:6922): avc: denied { read write } for pid=2932 comm="syz.5.783" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.260039][ T2937] audit: audit_backlog=65 > audit_backlog_limit=64 [ 172.275577][ T36] audit: type=1400 audit(1785706326.328:6923): avc: denied { map } for pid=2932 comm="syz.5.783" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.278488][ T2937] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 172.305718][ T36] audit: type=1400 audit(1785706326.328:6924): avc: denied { read } for pid=2932 comm="syz.5.783" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 172.310900][ T2937] audit: backlog limit exceeded [ 172.553846][ T2958] netlink: 20 bytes leftover after parsing attributes in process `syz.5.790'. [ 172.568472][ T2958] syzkaller1: entered promiscuous mode [ 172.574091][ T2958] syzkaller1: entered allmulticast mode [ 172.744429][ T2969] netlink: 56 bytes leftover after parsing attributes in process `syz.6.792'. [ 172.977677][ T2971] netlink: 104 bytes leftover after parsing attributes in process `syz.6.792'. [ 173.924180][ T375] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 174.115331][ T375] usb 3-1: Using ep0 maxpacket: 16 [ 174.123115][ T375] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 174.131805][ T375] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.142442][ T375] usb 3-1: config 0 has no interface number 0 [ 174.156741][ T375] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 174.165878][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.173905][ T375] usb 3-1: Product: syz [ 174.179280][ T375] usb 3-1: Manufacturer: syz [ 174.183929][ T375] usb 3-1: SerialNumber: syz [ 174.192908][ T375] usb 3-1: config 0 descriptor?? [ 174.206946][ T375] uvcvideo 3-1:0.105: Found Unit with invalid ID 0 [ 174.214042][ T375] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 174.244306][ T31] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 174.255797][ T375] usb 3-1: No valid video chain found. [ 174.299691][ T2999] netlink: 188 bytes leftover after parsing attributes in process `syz.7.801'. [ 174.394388][ T31] usb 7-1: device descriptor read/64, error -71 [ 174.634496][ T31] usb 7-1: device descriptor read/64, error -71 [ 174.874600][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 174.944633][ T66] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 175.014643][ T31] usb 7-1: device descriptor read/64, error -71 [ 175.094655][ T66] usb 6-1: Using ep0 maxpacket: 16 [ 175.102335][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.114258][ T66] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.124748][ T66] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 175.137687][ T66] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 175.147050][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.157054][ T66] usb 6-1: config 0 descriptor?? [ 175.254717][ T31] usb 7-1: device descriptor read/64, error -71 [ 175.365355][ T31] usb usb7-port1: attempt power cycle [ 175.631994][ T66] microsoft 0003:045E:07DA.001F: ignoring exceeding usage max [ 175.642494][ T66] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0 [ 175.651130][ T66] microsoft 0003:045E:07DA.001F: item fetching failed at offset 33/34 [ 175.660548][ T66] microsoft 0003:045E:07DA.001F: parse failed [ 175.667524][ T66] microsoft 0003:045E:07DA.001F: probe with driver microsoft failed with error -22 [ 175.704914][ T31] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 175.727368][ T31] usb 7-1: device descriptor read/8, error -71 [ 175.857661][ T31] usb 7-1: device descriptor read/8, error -71 [ 176.095074][ T31] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 176.117404][ T31] usb 7-1: device descriptor read/8, error -71 [ 176.247565][ T31] usb 7-1: device descriptor read/8, error -71 [ 176.355259][ T31] usb usb7-port1: unable to enumerate USB device [ 176.676373][ T31] usb 3-1: USB disconnect, device number 69 [ 176.727747][ T3015] netlink: 'syz.2.806': attribute type 12 has an invalid length. [ 176.738064][ T3015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=3015 comm=syz.2.806 [ 176.812114][ T3019] Invalid argument reading file caps for ./file0 [ 177.125520][ T36] kauditd_printk_skb: 695 callbacks suppressed [ 177.125538][ T36] audit: type=1400 audit(1785706331.346:7620): avc: denied { create } for pid=3027 comm="syz.6.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.155394][ T31] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 177.181912][ T36] audit: type=1400 audit(1785706331.366:7621): avc: denied { write } for pid=3027 comm="syz.6.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.218651][ T36] audit: type=1400 audit(1785706331.366:7622): avc: denied { read } for pid=3027 comm="syz.6.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.246727][ T36] audit: type=1400 audit(1785706331.366:7623): avc: denied { create } for pid=3027 comm="syz.6.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.268721][ T36] audit: type=1400 audit(1785706331.366:7624): avc: denied { create } for pid=3027 comm="syz.6.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.290747][ T36] audit: type=1400 audit(1785706331.366:7625): avc: denied { create } for pid=3027 comm="syz.6.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.312106][ T36] audit: type=1400 audit(1785706331.366:7626): avc: denied { create } for pid=3027 comm="syz.6.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.333408][ T36] audit: type=1400 audit(1785706331.376:7627): avc: denied { read } for pid=3027 comm="syz.6.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 177.355448][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 177.367167][ T3028] audit: audit_backlog=65 > audit_backlog_limit=64 [ 177.368049][ T3019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 177.397262][ T31] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 177.412822][ T31] usb 3-1: config 179 has no interface number 0 [ 177.425514][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 177.439890][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 177.451250][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 177.462502][ T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 177.473090][ T31] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 177.487410][ T31] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 177.501689][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.521663][ T3019] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 177.538398][ T31] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 177.704999][ T31] usb 6-1: USB disconnect, device number 8 [ 177.750851][ T344] usb 3-1: USB disconnect, device number 70 [ 177.781975][ T3044] random: crng reseeded on system resumption [ 177.818822][ T3044] Restarting kernel threads ... done. [ 177.880140][ T66] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 178.038181][ T66] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.047010][ T66] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.057455][ T344] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 178.065085][ T66] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.074151][ T66] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.089926][ T66] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.099036][ T66] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.107271][ T66] usb 7-1: Product: syz [ 178.111450][ T66] usb 7-1: Manufacturer: syz [ 178.126407][ T66] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 178.185803][ T591] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 178.235790][ T344] usb 3-1: Using ep0 maxpacket: 8 [ 178.243406][ T344] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 178.251796][ T344] usb 3-1: config 179 has no interface number 0 [ 178.258203][ T344] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 178.269496][ T344] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 178.280880][ T344] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 178.292076][ T344] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 178.302180][ T344] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 178.315477][ T344] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 178.324581][ T344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.334683][ T3040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.345082][ T3019] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.354693][ T3040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.360696][ T344] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 178.365856][ T375] usb 7-1: USB disconnect, device number 10 [ 178.379380][ T591] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 178.388517][ T591] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 178.396705][ T591] usb 6-1: Product: syz [ 178.402924][ T591] usb 6-1: config 0 descriptor?? [ 178.416616][ T591] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 178.430333][ T591] usb 6-1: Detected FT232H [ 178.554818][ T344] usb 3-1: USB disconnect, device number 71 [ 178.615668][ T3046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.624264][ T3046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.636218][ T3046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.644747][ T3046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.661628][ T3046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.670542][ T3046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.685913][ T591] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 178.693175][ T591] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 178.703221][ T591] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 178.712572][ T591] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 178.726540][ T591] usb 6-1: USB disconnect, device number 9 [ 178.734008][ T591] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 178.744622][ T591] ftdi_sio 6-1:0.0: device disconnected [ 179.441829][ T3087] syzkaller1: entered promiscuous mode [ 179.447514][ T3087] syzkaller1: entered allmulticast mode [ 179.516204][ T375] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 179.606190][ T591] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 179.666270][ T375] usb 3-1: Using ep0 maxpacket: 8 [ 179.674244][ T375] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.686266][ T375] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 179.703225][ T375] usb 3-1: New USB device found, idVendor=17cc, idProduct=041d, bcdDevice= 0.40 [ 179.715929][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.725181][ T375] usb 3-1: Product: syz [ 179.730112][ T375] usb 3-1: Manufacturer: syz [ 179.734788][ T375] usb 3-1: SerialNumber: syz [ 179.766226][ T591] usb 7-1: Using ep0 maxpacket: 16 [ 179.779641][ T591] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 179.787925][ T591] usb 7-1: config 0 has no interface number 0 [ 179.794369][ T591] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 179.804604][ T591] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 179.824907][ T591] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 179.835294][ T591] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.844295][ T591] usb 7-1: Product: syz [ 179.849291][ T591] usb 7-1: Manufacturer: syz [ 179.856894][ T591] usb 7-1: SerialNumber: syz [ 179.863700][ T591] usb 7-1: config 0 descriptor?? [ 179.877731][ T3083] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 179.894895][ T3083] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 179.971760][ T375] usb 3-1: unit 3 not found! [ 179.985637][ T375] usb 3-1: unit 6 not found! [ 179.998606][ T375] usb 3-1: USB disconnect, device number 72 [ 180.067678][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 180.119754][ T3083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.128441][ T3083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.142026][ T3083] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 180.150475][ T3083] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 180.246413][ T500] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 180.363614][ T591] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 180.396412][ T500] usb 6-1: Using ep0 maxpacket: 32 [ 180.404837][ T500] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.416749][ T500] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.426606][ T500] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 180.435792][ T500] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.445946][ T500] usb 6-1: config 0 descriptor?? [ 180.455864][ T500] hub 6-1:0.0: USB hub found [ 180.756316][ T500] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 181.286656][ T375] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 181.393551][ T591] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 181.411084][ T591] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 181.421565][ T591] asix 7-1:0.34: probe with driver asix failed with error -71 [ 181.430316][ T591] usb 7-1: USB disconnect, device number 11 [ 181.444787][ T375] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 181.454668][ T375] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 181.464000][ T375] usb 3-1: Product: syz [ 181.471780][ T375] usb 3-1: config 0 descriptor?? [ 181.480606][ T375] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 181.493580][ T375] usb 3-1: Detected FT232H [ 181.683480][ T375] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 181.690492][ T3117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.699411][ T3117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.916252][ T375] ftdi_sio 3-1:0.0: GPIO initialisation failed: -32 [ 181.925020][ T375] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 182.080193][ T3121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3121 comm=syz.6.839 [ 182.147776][ T36] kauditd_printk_skb: 740 callbacks suppressed [ 182.147796][ T36] audit: type=1400 audit(1785706336.365:8322): avc: denied { read write } for pid=3120 comm="syz.6.839" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.164216][ T3121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.180308][ T36] audit: type=1400 audit(1785706336.365:8323): avc: denied { read write open } for pid=3120 comm="syz.6.839" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.211642][ T3121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.234478][ T36] audit: type=1400 audit(1785706336.365:8324): avc: denied { read write } for pid=3120 comm="syz.6.839" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.258884][ T36] audit: type=1400 audit(1785706336.365:8325): avc: denied { ioctl } for pid=3120 comm="syz.6.839" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.286166][ T36] audit: type=1400 audit(1785706336.365:8326): avc: denied { read write open } for pid=3120 comm="syz.6.839" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.313038][ T36] audit: type=1400 audit(1785706336.365:8327): avc: denied { ioctl } for pid=3120 comm="syz.6.839" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.338871][ T36] audit: type=1400 audit(1785706336.375:8328): avc: denied { ioctl } for pid=3120 comm="syz.6.839" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.364408][ T36] audit: type=1400 audit(1785706336.375:8329): avc: denied { ioctl } for pid=3120 comm="syz.6.839" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.389258][ T36] audit: type=1400 audit(1785706336.425:8330): avc: denied { ioctl } for pid=3120 comm="syz.6.839" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.414078][ T36] audit: type=1400 audit(1785706336.425:8331): avc: denied { ioctl } for pid=3120 comm="syz.6.839" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.438929][ T31] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 182.599508][ T31] usb 7-1: config index 0 descriptor too short (expected 1060, got 36) [ 182.607888][ T31] usb 7-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 182.621664][ T31] usb 7-1: config 1 interface 0 altsetting 56 endpoint 0x1 has invalid maxpacket 2306, setting to 1024 [ 182.632819][ T31] usb 7-1: config 1 interface 0 altsetting 56 bulk endpoint 0x1 has invalid maxpacket 1024 [ 182.642919][ T31] usb 7-1: config 1 interface 0 has no altsetting 0 [ 182.652845][ T31] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 182.662005][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.670096][ T31] usb 7-1: Product: syz [ 182.674315][ T31] usb 7-1: Manufacturer: syz [ 182.678984][ T31] usb 7-1: SerialNumber: syz [ 182.687111][ T3122] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 183.002628][ T500] usbhid 6-1:0.0: can't add hid device: -71 [ 183.012113][ T500] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 183.048588][ T500] usb 6-1: USB disconnect, device number 10 [ 183.117908][ T31] usb 7-1: USB disconnect, device number 12 [ 183.796112][ T3130] kvm: kvm [3129]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 183.827385][ T3130] kvm: kvm [3129]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 183.852634][ T3130] kvm: kvm [3129]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 183.884064][ T3130] kvm: kvm [3129]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 183.957538][ T3130] kvm: kvm [3129]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 184.057590][ T591] usb 3-1: USB disconnect, device number 73 [ 184.087490][ T591] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 184.097109][ T591] ftdi_sio 3-1:0.0: device disconnected [ 184.127332][ T344] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 184.307399][ T344] usb 6-1: Using ep0 maxpacket: 32 [ 184.319778][ T344] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.345135][ T344] usb 6-1: config 1 interface 0 has no altsetting 0 [ 184.356881][ T344] usb 6-1: New USB device found, idVendor=045e, idProduct=076c, bcdDevice= 0.40 [ 184.372567][ T344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.387364][ T344] usb 6-1: Product: ç´ï¤ä¡§íŽ‚黃ì‚â–·ë¬ç²ˆâ©”뭦耴à¤ä’—╂콖旹䞫ꇭ蘠잤â½è¼®ã ­ç‚ îš»ê£§ï½§ä¦ºî·‚á­è¼…⼜瀒턨䅌耒쬔箛⢎֙캲ﵾï¾áš©à¸â·¨í¾î»¥â„¼ê¢±ïˆ„黶铻t뫠話⳿ì˜î°²ì‡Šå¶•Í”ꥇ㉎쳘媀㎰펶廣Ç⺊䥱鱕æ›é«³é’˜â›šê‚­è¦‡ê¶žá£˜á¤ªã€‰è’¶á¸‘筹嶺鄕퉂䒩 [ 184.463383][ T344] usb 6-1: Manufacturer: በ[ 184.477406][ T344] usb 6-1: SerialNumber: ꧹槛륞挀쪿凲꒡ê†ïƒ²â”åƒã””鳤쉬å”í½é°µäƒ°â‚¬à¯¼å¦¡î™¿î‰ºï±˜ï«ëºçŸ¹×둋ï±î˜‰à¸šâ‡µí…”懰՗屙ê¢á®•ã½‰ê´±â¼ªè¾˜ç¤®ä—­å¢»åˆ¶îº¤éµ›íˆ°è€§æ·šëˆêœ£Ô‚렷䲞≈똛뛈걣㹿戦繷გ㲷땉莤豛劽些딼ë’Ὑ뷭檋翯闘쯹隞輱縲äå¥è³å’쨛쯶♌뭦ড়áµé¤Œï¨®ì–ž [ 184.507222][ T591] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 184.667472][ T591] usb 3-1: Using ep0 maxpacket: 16 [ 184.676865][ T591] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid maxpacket 4146, setting to 1024 [ 184.688897][ T591] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 1024 [ 184.699059][ T591] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 32 [ 184.708878][ T591] usb 3-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.721845][ T591] usb 3-1: config 1 interface 0 has no altsetting 0 [ 184.732051][ T591] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.741149][ T591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.749248][ T591] usb 3-1: Product: syz [ 184.753464][ T591] usb 3-1: Manufacturer: syz [ 184.758360][ T591] usb 3-1: SerialNumber: syz [ 184.767383][ T3150] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.775154][ T3150] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.817492][ T577] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 184.970114][ T577] usb 7-1: config 24 has too many interfaces: 158, using maximum allowed: 32 [ 184.979104][ T577] usb 7-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 184.989382][ T577] usb 7-1: config 24 has 1 interface, different from the descriptor's value: 158 [ 185.007036][ T3150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.016221][ T3150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.024603][ T344] usbhid 6-1:1.0: can't add hid device: -71 [ 185.033118][ T344] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 185.043164][ T577] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 185.063784][ T344] usb 6-1: USB disconnect, device number 11 [ 185.069871][ T577] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.093710][ T577] usb 7-1: Product: syz [ 185.098870][ T577] usb 7-1: Manufacturer: syz [ 185.104298][ T577] usb 7-1: SerialNumber: syz [ 185.110217][ T591] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 185.121771][ T591] usb 3-1: USB disconnect, device number 74 [ 185.338340][ T577] usb 7-1: 0:1 : does not exist [ 185.343705][ T577] usb 7-1: unit 80 not found! [ 185.353799][ T577] usb 7-1: USB disconnect, device number 13 [ 185.402577][ T760] udevd[760]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:24.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.744290][ T3180] netlink: 20 bytes leftover after parsing attributes in process `syz.5.857'. [ 185.793282][ T3180] team_slave_1: entered promiscuous mode [ 185.799732][ T3180] team_slave_1: entered allmulticast mode [ 185.927705][ T577] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 185.978347][ T3191] netlink: 'syz.6.859': attribute type 22 has an invalid length. [ 186.000344][ T3191] netlink: 20 bytes leftover after parsing attributes in process `syz.6.859'. [ 186.101136][ T577] usb 3-1: unable to get BOS descriptor or descriptor too short [ 186.109585][ T577] usb 3-1: not running at top speed; connect to a high speed hub [ 186.119716][ T577] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 186.134137][ T577] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 186.143332][ T577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.151367][ T577] usb 3-1: Product: syz [ 186.155594][ T577] usb 3-1: Manufacturer: syz [ 186.160255][ T577] usb 3-1: SerialNumber: syz [ 186.247791][ T344] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 186.374250][ T577] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc [ 186.384016][ T577] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 186.390229][ T344] usb 7-1: device descriptor read/64, error -71 [ 186.401647][ T577] usb 3-1: USB disconnect, device number 75 [ 186.465149][ T760] udevd[760]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 186.627851][ T344] usb 7-1: device descriptor read/64, error -71 [ 186.787940][ T591] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 186.867934][ T344] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 186.947494][ T591] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 186.958587][ T591] usb 6-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 186.967822][ T591] usb 6-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid wMaxPacketSize 0 [ 186.978141][ T591] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 186.992935][ T591] usb 6-1: config 220 interface 0 has no altsetting 0 [ 187.000242][ T591] usb 6-1: config 220 interface 1 has no altsetting 0 [ 187.012109][ T591] usb 6-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 187.021832][ T344] usb 7-1: device descriptor read/64, error -71 [ 187.028596][ T591] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.036704][ T591] usb 6-1: Product: syz [ 187.041545][ T591] usb 6-1: Manufacturer: syz [ 187.046178][ T591] usb 6-1: SerialNumber: syz [ 187.062577][ T3200] netlink: 84 bytes leftover after parsing attributes in process `syz.2.863'. [ 187.164652][ T36] kauditd_printk_skb: 517 callbacks suppressed [ 187.164673][ T36] audit: type=1400 audit(1785706341.374:8849): avc: denied { read write } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.195351][ T36] audit: type=1400 audit(1785706341.374:8850): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.220952][ T36] audit: type=1400 audit(1785706341.374:8851): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.247084][ T36] audit: type=1400 audit(1785706341.424:8852): avc: denied { ioctl } for pid=3190 comm="syz.6.859" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.272613][ T36] audit: type=1400 audit(1785706341.464:8853): avc: denied { read write } for pid=3206 comm="syz.2.865" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 187.278050][ T344] usb 7-1: device descriptor read/64, error -71 [ 187.300749][ T36] audit: type=1400 audit(1785706341.464:8854): avc: denied { read write open } for pid=3206 comm="syz.2.865" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 187.329276][ T36] audit: type=1400 audit(1785706341.464:8855): avc: denied { mounton } for pid=3206 comm="syz.2.865" path="/263/file0" dev="tmpfs" ino=1439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 187.353102][ T36] audit: type=1400 audit(1785706341.484:8856): avc: denied { mount } for pid=3206 comm="syz.2.865" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 187.381527][ T3209] overlay: ./file0 is not a directory [ 187.394077][ T3209] overlay: ./file0 is not a directory [ 187.413845][ T36] audit: type=1400 audit(1785706341.584:8857): avc: denied { read } for pid=3192 comm="syz.5.860" name="binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 187.445652][ T36] audit: type=1400 audit(1785706341.584:8858): avc: denied { read open } for pid=3192 comm="syz.5.860" path="/dev/binderfs/binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 187.458323][ T344] usb usb7-port1: attempt power cycle [ 187.565167][ T591] usb 6-1: selecting invalid altsetting 0 [ 187.579814][ T591] usb 6-1: USB disconnect, device number 12 [ 187.592885][ T760] udevd[760]: setting mode of /dev/bus/usb/006/012 to 020664 failed: No such file or directory [ 187.611268][ T760] udevd[760]: setting owner of /dev/bus/usb/006/012 to uid=0, gid=0 failed: No such file or directory [ 187.828091][ T344] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 187.850589][ T344] usb 7-1: device descriptor read/8, error -71 [ 187.980572][ T344] usb 7-1: device descriptor read/8, error -71 [ 188.228382][ T344] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 188.250730][ T344] usb 7-1: device descriptor read/8, error -71 [ 188.358174][ T591] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 188.380456][ T344] usb 7-1: device descriptor read/8, error -71 [ 188.488296][ T344] usb usb7-port1: unable to enumerate USB device [ 188.498791][ T591] usb 3-1: device descriptor read/64, error -71 [ 188.738218][ T591] usb 3-1: device descriptor read/64, error -71 [ 188.978244][ T591] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 189.077336][ T3237] overlayfs: failed to resolve './bus': -2 [ 189.128279][ T591] usb 3-1: device descriptor read/64, error -71 [ 189.178343][ T375] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 189.331674][ T375] usb 6-1: config index 0 descriptor too short (expected 45, got 28) [ 189.339871][ T375] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 189.347277][ T375] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 189.365176][ T375] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 189.368421][ T591] usb 3-1: device descriptor read/64, error -71 [ 189.380294][ T375] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.389962][ T375] usb 6-1: Product: syz [ 189.394163][ T375] usb 6-1: Manufacturer: syz [ 189.400083][ T375] usb 6-1: SerialNumber: syz [ 189.409836][ T375] rtl8150 6-1:1.0: couldn't find required endpoints [ 189.416952][ T375] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 189.499248][ T591] usb usb3-port1: attempt power cycle [ 189.619663][ T3229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.628197][ T3229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.637539][ T375] usb 6-1: USB disconnect, device number 13 [ 189.712557][ T3254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.722730][ T3254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.838433][ T591] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 189.860805][ T591] usb 3-1: device descriptor read/8, error -71 [ 189.990855][ T591] usb 3-1: device descriptor read/8, error -71 [ 190.228484][ T591] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 190.251783][ T591] usb 3-1: device descriptor read/8, error -71 [ 190.391549][ T591] usb 3-1: device descriptor read/8, error -71 [ 190.498972][ T591] usb usb3-port1: unable to enumerate USB device [ 190.668521][ T344] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 190.821046][ T344] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 190.829120][ T344] usb 6-1: config 0 has no interface number 0 [ 190.835216][ T344] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 190.844325][ T344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.854046][ T344] usb 6-1: config 0 descriptor?? [ 190.870523][ T344] ftdi_sio 6-1:0.2: FTDI USB Serial Device converter detected [ 190.878437][ T344] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 191.207865][ T3267] netlink: 'syz.2.882': attribute type 27 has an invalid length. [ 191.240942][ T3267] z00ªX¹¦: left allmulticast mode [ 191.279445][ T3267] sit0: left promiscuous mode [ 191.311995][ T3267] bridge0: left allmulticast mode [ 191.360481][ T3267] vlan1: left promiscuous mode [ 191.372834][ T3267] vlan1: left allmulticast mode [ 191.382184][ T3267] veth0_vlan: left allmulticast mode [ 191.435953][ T3271] tipc: Started in network mode [ 191.442935][ T3271] tipc: Node identity , cluster identity 4711 [ 191.456236][ T3271] tipc: Failed to obtain node identity [ 191.463260][ T3271] tipc: Enabling of bearer rejected, failed to enable media [ 191.818683][ T577] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 191.972217][ T577] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 191.979884][ T577] usb 3-1: can't read configurations, error -61 [ 192.108726][ T577] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 192.169172][ T3289] netlink: 16 bytes leftover after parsing attributes in process `syz.7.886'. [ 192.180749][ T36] kauditd_printk_skb: 480 callbacks suppressed [ 192.180778][ T36] audit: type=1400 audit(1785706346.393:9339): avc: denied { ioctl } for pid=3286 comm="syz.2.885" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.229829][ T36] audit: type=1400 audit(1785706346.443:9340): avc: denied { read write } for pid=2894 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.288219][ T36] audit: type=1400 audit(1785706346.443:9341): avc: denied { read write open } for pid=2894 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.328735][ T577] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 192.338771][ T577] usb 3-1: can't read configurations, error -61 [ 192.350611][ T577] usb usb3-port1: attempt power cycle [ 192.360529][ T36] audit: type=1400 audit(1785706346.443:9342): avc: denied { ioctl } for pid=2894 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.386169][ T36] audit: type=1400 audit(1785706346.483:9343): avc: denied { create } for pid=3293 comm="syz.7.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.405796][ T36] audit: type=1400 audit(1785706346.483:9344): avc: denied { create } for pid=3293 comm="syz.7.887" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 192.427956][ T36] audit: type=1400 audit(1785706346.483:9345): avc: denied { map } for pid=3293 comm="syz.7.887" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 192.454498][ T36] audit: type=1400 audit(1785706346.493:9346): avc: denied { read write } for pid=3293 comm="syz.7.887" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 192.480103][ T36] audit: type=1400 audit(1785706346.523:9348): avc: denied { ioctl } for pid=3286 comm="syz.2.885" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.505017][ T36] audit: type=1400 audit(1785706346.523:9347): avc: denied { read write } for pid=2894 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.529733][ T841] tipc: Subscription rejected, illegal request [ 192.706799][ T3308] syz.7.891 uses obsolete (PF_INET,SOCK_PACKET) [ 192.719241][ T577] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 192.755646][ T577] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 192.776610][ T577] usb 3-1: can't read configurations, error -61 [ 192.898489][ T3313] overlay: Unknown parameter 'pcr' [ 192.918871][ T577] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 192.943239][ T577] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 192.950901][ T577] usb 3-1: can't read configurations, error -61 [ 192.959672][ T577] usb usb3-port1: unable to enumerate USB device [ 193.338291][ T3280] usb 6-1: USB disconnect, device number 14 [ 193.349288][ T3280] ftdi_sio 6-1:0.2: device disconnected [ 194.659039][ T312] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 194.809063][ T312] usb 6-1: Using ep0 maxpacket: 16 [ 194.816737][ T312] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 194.824939][ T312] usb 6-1: config 0 has no interface number 0 [ 194.831133][ T312] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 194.841041][ T312] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 194.851661][ T312] usb 6-1: config 0 interface 41 has no altsetting 0 [ 194.862204][ T312] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 194.871349][ T312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.879438][ T312] usb 6-1: Product: syz [ 194.883640][ T312] usb 6-1: Manufacturer: syz [ 194.888262][ T312] usb 6-1: SerialNumber: syz [ 194.894681][ T312] usb 6-1: config 0 descriptor?? [ 194.901071][ T3332] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 194.910443][ T3332] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 194.979072][ T577] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 195.129081][ T577] usb 3-1: Using ep0 maxpacket: 8 [ 195.138263][ T577] usb 3-1: unable to get BOS descriptor or descriptor too short [ 195.150117][ T577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 195.161189][ T3332] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 195.161551][ T577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 195.169790][ T3332] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 195.183620][ T577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 195.197026][ T577] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 195.207189][ T577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 195.216924][ T577] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 12641, setting to 1024 [ 195.228073][ T577] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 195.241885][ T577] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 195.251003][ T577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.259083][ T577] usb 3-1: Product: syz [ 195.263292][ T577] usb 3-1: Manufacturer: syz [ 195.267951][ T577] usb 3-1: SerialNumber: syz [ 195.274629][ T577] usb 3-1: config 0 descriptor?? [ 195.282355][ T3334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 195.290467][ T3334] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 195.461723][ T312] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 195.483218][ T312] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 195.498558][ T312] usb 6-1: USB disconnect, device number 15 [ 195.511764][ T577] usb 3-1: USB disconnect, device number 84 [ 196.008158][ T3338] tipc: Started in network mode [ 196.013914][ T3338] tipc: Node identity 82140ac30a42, cluster identity 4711 [ 196.022411][ T3338] tipc: Enabled bearer , priority 0 [ 196.035488][ T3339] syzkaller0: entered promiscuous mode [ 196.042349][ T3339] syzkaller0: entered allmulticast mode [ 196.057642][ T3339] tipc: Resetting bearer [ 196.066739][ T3339] tipc: Disabling bearer [ 196.198687][ T3343] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 196.330674][ T3356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.352847][ T3356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.363419][ T3356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.372009][ T3356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.382951][ T3356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.391760][ T3356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.404115][ T3356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.414667][ T3356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.426958][ T3356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.438288][ T3356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.459219][ T312] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 196.612815][ T312] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 196.620924][ T312] usb 6-1: config 0 has no interface number 0 [ 196.627035][ T312] usb 6-1: config 0 interface 2 altsetting 254 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 196.637887][ T312] usb 6-1: config 0 interface 2 has no altsetting 0 [ 196.644589][ T312] usb 6-1: New USB device found, idVendor=046d, idProduct=c08d, bcdDevice= 0.00 [ 196.653679][ T312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.663447][ T312] usb 6-1: config 0 descriptor?? [ 196.671176][ T3353] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 196.839262][ T577] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 196.989267][ T577] usb 3-1: Using ep0 maxpacket: 16 [ 196.996892][ T577] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.007167][ T577] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.019466][ T577] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.028570][ T577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.036632][ T577] usb 3-1: Product: syz [ 197.040866][ T577] usb 3-1: Manufacturer: syz [ 197.045512][ T577] usb 3-1: SerialNumber: syz [ 197.088348][ T312] logitech-hidpp-device 0003:046D:C08D.0020: unknown main item tag 0x2 [ 197.096884][ T312] logitech-hidpp-device 0003:046D:C08D.0020: ignoring exceeding usage max [ 197.109988][ T312] logitech-hidpp-device 0003:046D:C08D.0020: hidraw0: USB HID v0.85 Device [HID 046d:c08d] on usb-dummy_hcd.5-1/input2 [ 197.256342][ T36] kauditd_printk_skb: 835 callbacks suppressed [ 197.256362][ T36] audit: type=1400 audit(1785706351.463:10184): avc: denied { create } for pid=3359 comm="syz.2.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.282159][ T36] audit: type=1400 audit(1785706351.463:10185): avc: denied { ioctl } for pid=3359 comm="syz.2.905" path="socket:[33103]" dev="sockfs" ino=33103 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.306997][ T36] audit: type=1400 audit(1785706351.473:10186): avc: denied { connect } for pid=3359 comm="syz.2.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.327373][ T577] usb 3-1: 0:2 : does not exist [ 197.334334][ T36] audit: type=1400 audit(1785706351.473:10187): avc: denied { create } for pid=3359 comm="syz.2.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.354959][ T577] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 197.364205][ T36] audit: type=1400 audit(1785706351.473:10188): avc: denied { create } for pid=3359 comm="syz.2.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.388034][ T36] audit: type=1400 audit(1785706351.473:10189): avc: denied { write } for pid=3359 comm="syz.2.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.409691][ T36] audit: type=1400 audit(1785706351.483:10190): avc: denied { read } for pid=3359 comm="syz.2.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.433459][ T577] usb 3-1: USB disconnect, device number 85 [ 197.444892][ T36] audit: type=1400 audit(1785706351.483:10191): avc: denied { write } for pid=3359 comm="syz.2.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.466024][ T36] audit: type=1400 audit(1785706351.563:10192): avc: denied { create } for pid=3352 comm="syz.5.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 197.486460][ T36] audit: type=1400 audit(1785706351.573:10193): avc: denied { setopt } for pid=3352 comm="syz.5.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 197.522922][ T9] usb 6-1: USB disconnect, device number 16 [ 197.555500][ T760] udevd[760]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 198.699528][ T3278] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 198.849399][ T3278] usb 3-1: Using ep0 maxpacket: 8 [ 198.876045][ T3278] usb 3-1: unable to get BOS descriptor or descriptor too short [ 198.905960][ T3278] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 198.926479][ T3278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.934684][ T3278] usb 3-1: Product: syz [ 198.938916][ T3278] usb 3-1: Manufacturer: syz [ 198.943579][ T3278] usb 3-1: SerialNumber: syz [ 199.161347][ T3278] usb 3-1: Unsupported UAC3 BADD profile [ 199.176771][ T3278] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 199.193496][ T3278] usb 3-1: USB disconnect, device number 86 [ 199.270448][ T760] udevd[760]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 200.879593][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 201.019616][ T9] usb 3-1: device descriptor read/64, error -71 [ 201.269619][ T9] usb 3-1: device descriptor read/64, error -71 [ 201.509679][ T9] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 201.649687][ T9] usb 3-1: device descriptor read/64, error -71 [ 201.889688][ T9] usb 3-1: device descriptor read/64, error -71 [ 202.000248][ T9] usb usb3-port1: attempt power cycle [ 202.280175][ T36] kauditd_printk_skb: 460 callbacks suppressed [ 202.280196][ T36] audit: type=1400 audit(1785706356.492:10654): avc: denied { ioctl } for pid=3441 comm="syz.2.928" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.339722][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 202.360330][ T36] audit: type=1400 audit(1785706356.572:10655): avc: denied { ioctl } for pid=3441 comm="syz.2.928" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.365722][ T9] usb 3-1: device descriptor read/8, error -71 [ 202.385541][ T36] audit: type=1400 audit(1785706356.572:10656): avc: denied { ioctl } for pid=3441 comm="syz.2.928" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.416390][ T36] audit: type=1400 audit(1785706356.572:10657): avc: denied { ioctl } for pid=3441 comm="syz.2.928" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.441304][ T36] audit: type=1400 audit(1785706356.572:10658): avc: denied { ioctl } for pid=3441 comm="syz.2.928" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.466551][ T36] audit: type=1400 audit(1785706356.572:10659): avc: denied { ioctl } for pid=3441 comm="syz.2.928" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.491758][ T36] audit: type=1400 audit(1785706356.602:10660): avc: denied { ioctl } for pid=3441 comm="syz.2.928" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.540367][ T36] audit: type=1400 audit(1785706356.752:10661): avc: denied { ioctl } for pid=3441 comm="syz.2.928" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.546104][ T9] usb 3-1: device descriptor read/8, error -71 [ 202.567078][ T36] audit: type=1400 audit(1785706356.752:10662): avc: denied { ioctl } for pid=3441 comm="syz.2.928" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.597601][ T36] audit: type=1400 audit(1785706356.752:10663): avc: denied { ioctl } for pid=3441 comm="syz.2.928" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.809759][ T9] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 202.832672][ T9] usb 3-1: device descriptor read/8, error -71 [ 202.962199][ T9] usb 3-1: device descriptor read/8, error -71 [ 203.070014][ T9] usb usb3-port1: unable to enumerate USB device [ 203.868519][ T3481] netlink: 'syz.5.942': attribute type 1 has an invalid length. [ 204.639841][ T577] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 204.793122][ T577] usb 3-1: unable to get BOS descriptor or descriptor too short [ 204.801586][ T577] usb 3-1: not running at top speed; connect to a high speed hub [ 204.811640][ T577] usb 3-1: config 1 has an invalid interface number: 234 but max is 0 [ 204.819896][ T577] usb 3-1: config 1 has no interface number 0 [ 204.825988][ T577] usb 3-1: config 1 interface 234 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 204.836905][ T577] usb 3-1: config 1 interface 234 has no altsetting 0 [ 204.847063][ T577] usb 3-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=30.4a [ 204.856217][ T577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.864288][ T577] usb 3-1: Product: syz [ 204.868456][ T577] usb 3-1: Manufacturer: syz [ 204.873112][ T577] usb 3-1: SerialNumber: syz [ 204.881992][ T3493] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 205.225565][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.237065][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.250090][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.261269][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.272983][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.284355][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.296011][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.307406][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.319475][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.330964][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.342521][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.354076][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.365794][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.377228][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.389017][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.400748][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.412161][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.423517][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.434928][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.446292][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.457664][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.469042][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.480989][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.492744][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.504134][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.515509][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.526926][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.538290][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.549656][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.561041][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.572411][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.583759][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 205.595219][ T3497] fuseblk: Unknown parameter '¬†µßcÞƒ­âz¨˜£¸“Ö$wÛ÷[&”A!LÌ­LEŸ‘ústA{úÞ*+Byì…~a‹„˜x…ÿ4Rì“6­"±e' [ 206.110802][ T3511] netlink: 120 bytes leftover after parsing attributes in process `syz.7.952'. [ 207.346985][ T577] usb 3-1: bad CDC descriptors [ 207.356387][ T577] cdc_acm 3-1:1.234: Zero length descriptor references [ 207.364362][ T577] cdc_acm 3-1:1.234: probe with driver cdc_acm failed with error -22 [ 207.377393][ T36] kauditd_printk_skb: 285 callbacks suppressed [ 207.377412][ T36] audit: type=1400 audit(1785706361.582:10949): avc: denied { read write } for pid=295 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.409938][ T577] usb 3-1: USB disconnect, device number 91 [ 207.419247][ T36] audit: type=1400 audit(1785706361.582:10950): avc: denied { read write open } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.444881][ T36] audit: type=1400 audit(1785706361.592:10951): avc: denied { ioctl } for pid=295 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.478668][ T36] audit: type=1400 audit(1785706361.682:10952): avc: denied { read write } for pid=3524 comm="syz.2.957" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 207.522766][ T36] audit: type=1400 audit(1785706361.682:10953): avc: denied { read open } for pid=3524 comm="syz.2.957" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 207.554486][ T36] audit: type=1400 audit(1785706361.712:10954): avc: denied { map } for pid=3524 comm="syz.2.957" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 207.579265][ T36] audit: type=1400 audit(1785706361.712:10955): avc: denied { read } for pid=3524 comm="syz.2.957" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 207.618235][ T36] audit: type=1400 audit(1785706361.782:10956): avc: denied { read write } for pid=3524 comm="syz.2.957" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 207.660105][ T36] audit: type=1400 audit(1785706361.782:10957): avc: denied { read write open } for pid=3524 comm="syz.2.957" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 207.699393][ T36] audit: type=1400 audit(1785706361.792:10958): avc: denied { ioctl } for pid=3524 comm="syz.2.957" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 208.030020][ T3278] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 208.180036][ T3278] usb 3-1: Using ep0 maxpacket: 8 [ 208.187686][ T3278] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.197952][ T3278] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 208.210352][ T3278] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 208.219453][ T3278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.227505][ T3278] usb 3-1: Product: syz [ 208.236658][ T3278] usb 3-1: Manufacturer: syz [ 208.241364][ T3278] usb 3-1: SerialNumber: syz [ 208.422872][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.430067][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.437151][ T3535] bridge_slave_0: entered allmulticast mode [ 208.443684][ T3535] bridge_slave_0: entered promiscuous mode [ 208.451535][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.458613][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.465816][ T3535] bridge_slave_1: entered allmulticast mode [ 208.473498][ T3278] usb 3-1: unit 4 not found! [ 208.478515][ T3535] bridge_slave_1: entered promiscuous mode [ 208.490126][ T3278] usb 3-1: USB disconnect, device number 92 [ 208.587571][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 208.635326][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.642460][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.649832][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.657197][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.723359][ T827] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.731492][ T827] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.746665][ T880] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.753864][ T880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.765512][ T827] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.772639][ T827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.854172][ T3535] veth0_vlan: entered promiscuous mode [ 208.898765][ T3535] veth1_macvtap: entered promiscuous mode [ 208.990399][ T3542] futex_wake_op: syz.5.963 tries to shift op by -1; fix this program [ 209.300074][ T3278] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 209.460081][ T3278] usb 9-1: Using ep0 maxpacket: 16 [ 209.467861][ T3278] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 209.476365][ T3278] usb 9-1: config 1 has no interface number 0 [ 209.482658][ T3278] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 209.492787][ T3278] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 209.502969][ T3278] usb 9-1: config 1 interface 105 has no altsetting 0 [ 209.513429][ T3278] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 209.522546][ T3278] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 209.530712][ T3278] usb 9-1: Product: syz [ 209.535169][ T3278] usb 9-1: Manufacturer: syz [ 209.539799][ T3278] usb 9-1: SerialNumber: syz [ 209.547783][ T3545] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 209.556090][ T3545] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 209.571664][ T3280] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 209.730137][ T3280] usb 3-1: Using ep0 maxpacket: 32 [ 209.738211][ T3280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.749190][ T3280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.759077][ T3280] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 209.768187][ T3280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.780162][ T3280] usb 3-1: config 0 descriptor?? [ 209.791904][ T3280] hub 3-1:0.0: USB hub found [ 209.884340][ T3560] netlink: 'syz.5.968': attribute type 27 has an invalid length. [ 209.899238][ T3560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.968'. [ 210.007457][ T3280] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 210.232580][ T3545] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 210.240409][ T3545] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 210.415688][ T3280] hid-generic 0003:046D:C31C.0021: unknown main item tag 0x0 [ 210.432284][ T3280] hid-generic 0003:046D:C31C.0021: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 210.652797][ T3278] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 210.901254][ T3278] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 210.914727][ T3278] aqc111 9-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 6a:dd:10:ad:62:25 [ 210.933739][ T3278] usb 9-1: USB disconnect, device number 2 [ 210.940891][ T3278] aqc111 9-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 210.980715][ T3278] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 210.990191][ T3278] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 210.999616][ T3278] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 211.278653][ T3589] »»»»»»: renamed from lo (while UP) [ 211.310566][ T3558] usb 3-1: reset high-speed USB device number 93 using dummy_hcd [ 211.450171][ T3558] usb 3-1: device descriptor read/64, error -71 [ 211.690249][ T3558] usb 3-1: device descriptor read/64, error -71 [ 211.710934][ T311] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 211.860201][ T311] usb 9-1: Using ep0 maxpacket: 8 [ 211.868577][ T311] usb 9-1: unable to get BOS descriptor or descriptor too short [ 211.881263][ T311] usb 9-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 211.890382][ T311] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.898373][ T311] usb 9-1: Product: syz [ 211.902589][ T311] usb 9-1: Manufacturer: syz [ 211.907222][ T311] usb 9-1: SerialNumber: syz [ 211.940202][ T3558] usb 3-1: reset high-speed USB device number 93 using dummy_hcd [ 212.080183][ T3558] usb 3-1: device descriptor read/64, error -71 [ 212.119897][ T311] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 212.131702][ T311] usb 9-1: USB disconnect, device number 3 [ 212.320221][ T3558] usb 3-1: device descriptor read/64, error -71 [ 212.381228][ T36] kauditd_printk_skb: 420 callbacks suppressed [ 212.381249][ T36] audit: type=1400 audit(1785706366.592:11379): avc: denied { mounton } for pid=3597 comm="syz.5.981" path="/93/file0" dev="tmpfs" ino=526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 212.433877][ T3600] netlink: 'syz.5.982': attribute type 49 has an invalid length. [ 212.467071][ T36] audit: type=1400 audit(1785706366.672:11380): avc: denied { create } for pid=3601 comm="syz.5.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 212.486685][ T36] audit: type=1400 audit(1785706366.682:11381): avc: denied { setopt } for pid=3601 comm="syz.5.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 212.540162][ T36] audit: type=1400 audit(1785706366.742:11382): avc: denied { create } for pid=3603 comm="syz.5.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 212.560204][ T3558] usb 3-1: reset high-speed USB device number 93 using dummy_hcd [ 212.597355][ T36] audit: type=1400 audit(1785706366.802:11383): avc: denied { create } for pid=3608 comm="syz.5.985" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 212.618920][ T36] audit: type=1400 audit(1785706366.802:11384): avc: denied { create } for pid=3608 comm="syz.5.985" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 212.641567][ T36] audit: type=1400 audit(1785706366.812:11385): avc: denied { ioctl } for pid=3608 comm="syz.5.985" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=34835 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 212.677713][ T36] audit: type=1400 audit(1785706366.812:11386): avc: denied { ioctl } for pid=3608 comm="syz.5.985" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=34835 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 212.705548][ T36] audit: type=1400 audit(1785706366.812:11387): avc: denied { create } for pid=3608 comm="syz.5.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.727452][ T36] audit: type=1400 audit(1785706366.812:11388): avc: denied { write } for pid=3608 comm="syz.5.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 215.376181][ T3704] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000003' [ 215.690371][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 215.840286][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 215.847777][ T10] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 215.855987][ T10] usb 9-1: config 0 has no interface number 0 [ 215.865264][ T10] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 215.874546][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.882782][ T10] usb 9-1: Product: syz [ 215.886978][ T10] usb 9-1: Manufacturer: syz [ 215.891690][ T10] usb 9-1: SerialNumber: syz [ 215.898584][ T10] usb 9-1: config 0 descriptor?? [ 215.906301][ T10] smsc95xx v2.0.0 [ 216.153089][ T10] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 216.177907][ T10] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 216.188204][ T10] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 216.200886][ T10] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 216.219622][ T10] usb 9-1: USB disconnect, device number 4 [ 217.238439][ T3729] batadv_slave_1: entered promiscuous mode [ 217.273994][ T3729] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1013'. [ 217.424732][ T36] kauditd_printk_skb: 2605 callbacks suppressed [ 217.424754][ T36] audit: type=1400 audit(1785706371.631:13994): avc: denied { read } for pid=3735 comm="syz.7.1016" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 217.469379][ T3728] batadv_slave_1: left promiscuous mode [ 217.487325][ T36] audit: type=1400 audit(1785706371.661:13995): avc: denied { read open } for pid=3735 comm="syz.7.1016" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 217.534094][ T36] audit: type=1400 audit(1785706371.661:13996): avc: denied { ioctl } for pid=3735 comm="syz.7.1016" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 217.566972][ T36] audit: type=1400 audit(1785706371.681:13997): avc: denied { create } for pid=3735 comm="syz.7.1016" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 217.590892][ T36] audit: type=1400 audit(1785706371.721:13998): avc: denied { read write } for pid=3535 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.640326][ T3558] usb 3-1: device descriptor read/8, error -110 [ 217.668802][ T36] audit: type=1400 audit(1785706371.721:13999): avc: denied { read write open } for pid=3535 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.696531][ T36] audit: type=1400 audit(1785706371.721:14000): avc: denied { ioctl } for pid=3535 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.730847][ T36] audit: type=1400 audit(1785706371.831:14001): avc: denied { read } for pid=3742 comm="syz.8.1017" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 217.758714][ T36] audit: type=1400 audit(1785706371.831:14002): avc: denied { read open } for pid=3742 comm="syz.8.1017" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 217.783277][ T36] audit: type=1400 audit(1785706371.831:14003): avc: denied { ioctl } for pid=3742 comm="syz.8.1017" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 217.813924][ T3558] usb 3-1: device descriptor read/8, error -32 [ 218.009158][ T3749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1020'. [ 218.060548][ T3558] usb 3-1: reset high-speed USB device number 93 using dummy_hcd [ 218.081079][ T3558] usb 3-1: device descriptor read/8, error -32 [ 218.211032][ T3558] usb 3-1: device descriptor read/8, error -32 [ 218.320637][ T3280] usb 3-1: USB disconnect, device number 93 [ 218.571142][ T3757] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 218.582684][ T3757] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 219.046369][ T3765] SELinux: policydb magic number 0x30307830 does not match expected magic number 0xf97cff8c [ 219.056719][ T3765] SELinux: failed to load policy [ 219.340376][ T311] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 219.493659][ T311] usb 9-1: unable to get BOS descriptor or descriptor too short [ 219.502270][ T311] usb 9-1: not running at top speed; connect to a high speed hub [ 219.512034][ T311] usb 9-1: config 9 has an invalid interface number: 46 but max is 0 [ 219.520174][ T311] usb 9-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 219.530380][ T311] usb 9-1: config 9 has no interface number 0 [ 219.536496][ T311] usb 9-1: config 9 interface 46 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 219.548219][ T311] usb 9-1: config 9 interface 46 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.561249][ T311] usb 9-1: config 9 interface 46 has no altsetting 0 [ 219.571417][ T311] usb 9-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=48.db [ 219.580592][ T311] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.588773][ T311] usb 9-1: Product: syz [ 219.593046][ T311] usb 9-1: Manufacturer: syz [ 219.597681][ T311] usb 9-1: SerialNumber: syz [ 219.811993][ T311] pl2303 9-1:9.46: required endpoints missing [ 219.827124][ T311] usb 9-1: USB disconnect, device number 5 [ 220.579521][ T3799] fuse: blksize only supported for fuseblk [ 221.140446][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 221.300501][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 221.309124][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 221.341505][ T10] usb 9-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 221.357454][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.367681][ T10] usb 9-1: Product: syz [ 221.372200][ T10] usb 9-1: Manufacturer: syz [ 221.377015][ T10] usb 9-1: SerialNumber: syz [ 221.595404][ T10] usb 9-1: Fast Track Pro config OK [ 221.611105][ T10] usb 9-1: MIDIStreaming interface descriptor not found [ 221.648765][ T10] usb 9-1: USB disconnect, device number 6 [ 221.756950][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:13.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 221.970542][ T311] usb 3-1: new low-speed USB device number 95 using dummy_hcd [ 222.123316][ T311] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 222.139980][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 222.154178][ T3850] overlayfs: failed to clone upperpath [ 222.161710][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 222.187095][ T311] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 222.197097][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.202799][ T3852] syzkaller1: entered promiscuous mode [ 222.212058][ T3852] syzkaller1: entered allmulticast mode [ 222.216889][ T311] usb 3-1: config 0 descriptor?? [ 222.229825][ T3848] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 222.443467][ T36] kauditd_printk_skb: 398 callbacks suppressed [ 222.443487][ T36] audit: type=1400 audit(1785706376.651:14402): avc: denied { ioctl } for pid=3847 comm="syz.2.1055" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.476398][ T36] audit: type=1400 audit(1785706376.681:14403): avc: denied { ioctl } for pid=3847 comm="syz.2.1055" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.676545][ T36] audit: type=1400 audit(1785706376.881:14404): avc: denied { ioctl } for pid=3847 comm="syz.2.1055" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.685307][ T311] belkin 0003:050D:3201.0022: unknown main item tag 0x2 [ 222.702208][ T36] audit: type=1400 audit(1785706376.881:14405): avc: denied { read write } for pid=3535 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.733949][ T36] audit: type=1400 audit(1785706376.881:14406): avc: denied { read write open } for pid=3535 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.759944][ T36] audit: type=1400 audit(1785706376.881:14407): avc: denied { ioctl } for pid=3847 comm="syz.2.1055" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 222.766980][ T311] belkin 0003:050D:3201.0022: unknown main item tag 0x6 [ 222.788528][ T36] audit: type=1400 audit(1785706376.891:14408): avc: denied { ioctl } for pid=3535 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.840436][ T311] belkin 0003:050D:3201.0022: unknown main item tag 0x4 [ 222.860245][ T311] belkin 0003:050D:3201.0022: unknown main item tag 0x0 [ 222.870203][ T36] audit: type=1400 audit(1785706377.081:14409): avc: denied { create } for pid=3854 comm="syz.8.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 222.878139][ T311] belkin 0003:050D:3201.0022: unknown main item tag 0x0 [ 222.908775][ T36] audit: type=1400 audit(1785706377.101:14410): avc: denied { create } for pid=3854 comm="syz.8.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 222.931354][ T311] belkin 0003:050D:3201.0022: unknown main item tag 0x0 [ 222.961651][ T311] belkin 0003:050D:3201.0022: unknown main item tag 0x0 [ 222.971195][ T311] belkin 0003:050D:3201.0022: unknown main item tag 0x0 [ 222.980444][ T36] audit: type=1400 audit(1785706377.111:14411): avc: denied { setopt } for pid=3854 comm="syz.8.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 222.992279][ T311] belkin 0003:050D:3201.0022: unknown main item tag 0x0 [ 223.026186][ T311] belkin 0003:050D:3201.0022: hiddev96,hidraw0: USB HID v0.01 Device [HID 050d:3201] on usb-dummy_hcd.2-1/input0 [ 223.063518][ T311] usb 3-1: USB disconnect, device number 95 [ 223.169344][ T3865] fido_id[3865]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 223.387263][ T3878] tipc: Enabled bearer , priority 10 [ 223.397526][ T3878] tipc: Enabling of bearer rejected, already enabled [ 223.448232][ T3885] tc_dump_action: action bad kind [ 223.473405][ T3884] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3884 comm=syz.5.1066 [ 223.490444][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 223.524639][ T3885] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2024300032 (4048600064 ns) > initial count (3987204246 ns). Using initial count to start timer. [ 223.546403][ T3887] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 223.640460][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 223.648714][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.661288][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.672362][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 223.684364][ T3894] rtc_cmos 00:00: Alarms can be up to one day in the future [ 223.688090][ T9] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 223.702580][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.713940][ T9] usb 9-1: config 0 descriptor?? [ 223.751414][ T3897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1070'. [ 223.916058][ T3906] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.1074'. [ 224.131288][ T3874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.140571][ T3874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.280482][ T577] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 224.356337][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 224.362587][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 224.372774][ T9] usb 9-1: USB disconnect, device number 7 [ 224.430506][ T577] usb 3-1: Using ep0 maxpacket: 32 [ 224.438233][ T577] usb 3-1: config 9 has an invalid interface number: 226 but max is 0 [ 224.446489][ T577] usb 3-1: config 9 has no interface number 0 [ 224.452611][ T577] usb 3-1: config 9 interface 226 has no altsetting 0 [ 224.462969][ T577] usb 3-1: New USB device found, idVendor=5fa2, idProduct=bb1a, bcdDevice=82.9d [ 224.472085][ T577] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.480070][ T577] usb 3-1: Product: syz [ 224.484276][ T577] usb 3-1: Manufacturer: syz [ 224.488925][ T577] usb 3-1: SerialNumber: syz [ 224.500482][ T10] tipc: Node number set to 2287340227 [ 224.702390][ T577] cdc_eem 3-1:9.226: probe with driver cdc_eem failed with error -22 [ 224.727202][ T577] usb 3-1: USB disconnect, device number 96 [ 225.087356][ T867] ------------[ cut here ]------------ [ 225.092944][ T867] WARNING: CPU: 1 PID: 867 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x351/0x410 [ 225.103561][ T867] Modules linked in: [ 225.107518][ T867] CPU: 1 UID: 0 PID: 867 Comm: kworker/u8:41 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797 [ 225.119534][ T867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.129668][ T867] Workqueue: iou_exit io_ring_exit_work [ 225.135317][ T867] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410 [ 225.141749][ T867] Code: 5d e9 43 2d 52 02 cc e8 1d 90 33 fe 0f 0b eb e3 e8 14 90 33 fe 0f 0b eb da e8 0b 90 33 fe 0f 0b e9 4d fe ff ff e8 ff 8f 33 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89 [ 225.161457][ T867] RSP: 0018:ffffc9000f3cf990 EFLAGS: 00010293 [ 225.167590][ T867] RAX: ffffffff8353e1c1 RBX: 1ffff11023e95195 RCX: ffff888121dbdf00 [ 225.175659][ T867] RDX: 0000000000000000 RSI: 0000000000000024 RDI: 0000000000000104 [ 225.183698][ T867] RBP: ffffc9000f3cf9e0 R08: 0000000000000003 R09: 0000000000000004 [ 225.191749][ T867] R10: 0000000000000000 R11: ffffffff8353d1a0 R12: ffff88811472df00 [ 225.199771][ T867] R13: ffff88811f4a8c80 R14: ffff88812be1c000 R15: ffff88812be1c010 [ 225.207829][ T867] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 225.216834][ T867] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.223478][ T867] CR2: 00007f0f42d89fa8 CR3: 000000013c54a000 CR4: 00000000003526b0 [ 225.231884][ T867] Call Trace: [ 225.235205][ T867] [ 225.238171][ T867] ublk_ch_uring_cmd+0x6f/0xa0 [ 225.243008][ T867] io_uring_try_cancel_uring_cmd+0x193/0x280 [ 225.249037][ T867] io_uring_try_cancel_requests+0x4d6/0x5b5 [ 225.254995][ T867] ? io_uring_cancel_generic+0x6eb/0x6eb [ 225.260698][ T867] io_ring_exit_work+0x23d/0x83b [ 225.265678][ T867] ? finish_task_switch+0x139/0x770 [ 225.270947][ T867] ? __cfi_io_ring_exit_work+0x10/0x10 [ 225.276439][ T867] ? kick_pool+0xb9/0x540 [ 225.280834][ T867] process_scheduled_works+0x7f7/0x1060 [ 225.286418][ T867] worker_thread+0xc99/0x13f0 [ 225.291153][ T867] kthread+0x2c7/0x360 [ 225.295265][ T867] ? __cfi_worker_thread+0x10/0x10 [ 225.300461][ T867] ? __cfi_kthread+0x10/0x10 [ 225.305094][ T867] ret_from_fork+0x67/0xa0 [ 225.309561][ T867] ? __cfi_kthread+0x10/0x10 [ 225.314217][ T867] ret_from_fork_asm+0x1a/0x30 [ 225.319031][ T867] [ 225.322117][ T867] ---[ end trace 0000000000000000 ]--- [ 225.410603][ T311] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 225.560635][ T311] usb 9-1: Using ep0 maxpacket: 16 [ 225.570640][ T311] usb 9-1: config index 0 descriptor too short (expected 17170, got 18) [ 225.579034][ T311] usb 9-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 225.587714][ T311] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 225.602004][ T311] usb 9-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 225.612022][ T311] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.620085][ T311] usb 9-1: Product: syz [ 225.625723][ T311] usb 9-1: Manufacturer: syz [ 225.631475][ T311] usb 9-1: SerialNumber: syz [ 225.638438][ T311] usb 9-1: config 0 descriptor?? [ 225.647913][ T311] ums-freecom 9-1:0.0: USB Mass Storage device detected [ 225.992008][ T311] usb 9-1: USB disconnect, device number 8