last executing test programs: 35.990602338s ago: executing program 1 (id=529): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80800) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100)=0x8, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000140), &(0x7f00000001c0), 0x2, 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) personality(0x40000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="66baa100ecc462058c89cc1400004098410f015dbd460f00dcc4027d5a660ef341ad440f013f363e0f01d1640f2223", 0x2f}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000280)={0x11, 0x0, 0x28}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000019000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x79, &(0x7f0000000300)=[@cr4={0x1, 0x8045}], 0x1) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000340)={0xfa00000000000000, 0xeeee0000, 0x1008000009, 0x5, 0x2}) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000380)={0xfb80000000000000, 0xeeef9002, 0xfffffdfffffffffd, 0x8, 0x2}) personality(0x40000) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='maps\x00') syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(r3, 0xae80, 0x0) 35.713184087s ago: executing program 1 (id=530): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xa, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x3, 0x0, 0x2, r2}) (async) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) bind$unix(r3, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002480)={{{@in, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000002580)=0xe8) fstat(r1, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = getpgid(0xffffffffffffffff) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) (async) fstat(r3, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = accept4(r3, &(0x7f0000002d00)=@ethernet, &(0x7f0000002d80)=0x80, 0x80000) r11 = openat$rnull_attr(0xffffffffffffff9c, &(0x7f0000002dc0)={'/sys/kernel/config/rnull/syzrnull', 0x0, '/blocksize\x00'}, 0x2, 0x0) r12 = fcntl$getown(0xffffffffffffffff, 0x9) getresuid(&(0x7f0000002e00)=0x0, &(0x7f0000002e40), &(0x7f0000002e80)) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002ec0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002f00)='./file0\x00', &(0x7f0000002f40), 0x80, &(0x7f0000002f80)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r14, &(0x7f0000003000)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r14, &(0x7f0000005040)={0x50, 0x0, r15, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) (async) syz_fuse_handle_req(r14, &(0x7f00000050c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0078adfb9200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003afd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003888ed4586b0a85c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0xb, 0x7fe, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r14, &(0x7f00000071c0)="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", 0x2000, &(0x7f00000091c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000009280)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r16, r17, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) r18 = syz_clone(0x90040000, &(0x7f0000009380)="8d3f637d949a47f7615e3fde662866e79f2154cdad911af3361c40e602d1dcea157952aee0cf8afd773a1d1e126e91995dcf5aa33b038880c72e7849aaacb61ecf74d31b43c5603d797d1ce691eeb53e2e8f20d19901d52e86d474f25a2cd24d7edb17ef1244eb061165b56f8db4d1a0a26972915818c4f7ed98a33d361f052534865a30ec3e03501e02309d12219b7075b5b0819b279d8d9d5a72ea5118c9851f54bb5eabe86c92f252679ab85e09c06a2a7f739cea6c45c81358436b6eae130c9797592f9f9b50f19a8561adc03b2451ea0d63cdbad0529fc45c86b31a137173619e372983a26f64", 0xe9, &(0x7f0000009480), &(0x7f00000094c0), &(0x7f0000009500)="046837897c728b5e180842774d38cd4839f89c36a04dadf623fa999a510fb4ca74da33d5") (async) r19 = getgid() sendmmsg$unix(r3, &(0x7f0000009600)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="62931e58105dbca9497e", 0xa}, {&(0x7f0000000180)="5ed2b72bd344f8fa62a1e75c3548ea6af7daa179c85d83c5770f9c639f31b0c9", 0x20}, {&(0x7f00000001c0)="b5c79af2c15217d00158e927b628e8ebbd7d77ad0f232a273a2742593f3f2ca905223c1dbab0b95a2a7cedc1ef0d491310f153a806c9272061bda76d8753ebc6bbfb2a5cbfae4a989e76ab8bae7c02b394eec91f413ac6a331fd566dd2c7601a60f98697b4f1ab97634f0a17dd3bbac6daaf", 0x72}, {&(0x7f0000000280)="37d2e222824d0497c56f6268d9df240ae51f4889cc02624f7a02e34912442ff8c4ca94acfafbd0d302ac6c8686bc3254ea7b0f1e73df5dc6be42fd2261698707de788d376367538dace2050d8665539d55c4dedabbc139e69a0fc47ca592aecf8f703370bedccb03f4face6526db107414eccdccaf49f0f73095c1411f57873bcab18db6098cc00434", 0x89}], 0x4, &(0x7f0000002640)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, r6}}}], 0x58, 0x8840}}, {{&(0x7f00000026c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002740)="a2b5308d77f81026f0229b608e06b683a4c1155f15bb2ad67a6da0fdc3ce822f6095d8c410bb884f669e2316c8bad3c8b4cd6f04a6865a9340db68aa217e242e245f0e3a69d872f4e36203a90525b68da726e80921fdc7b2afdf878d41715416ca33cda4cabd4d92c014eb14a23ab5bd442bc1deb25f32d14494a2028adf3011da68bdffa9f37039e391411722c4adc2736c5c8b66050164d964f0e3bf04972a7d5905e19c616893908cffeb003e6369bc86de", 0xb3}, {&(0x7f0000002800)="1d5d5e0fe30848ed4c4cf5d5eda1b9619a40c32f9de4ac1a7cfb56a731c7f6ca64fe9a8d09125b414bff67e2bfd7dc05e574995bfec3a3f0037224e887837ec4532c0ddaf0b06f204ea91da82429035a781c16aa089508a003c1a063a43dd68b09027999286487ae67742b1148684adb772501d62d4e475b6cf9dbec4355c6c450761886df5edc6bebd01e229f", 0x8d}, {&(0x7f00000028c0)="e6531ad8905a55b8e273383c3d4af52fb32271efeb3a7be74838daabbdae788466a091d4ea6dad89fb21182d8248a6ae0760d6f00dafdf36e6b0b814ffc48b1fe6b88d77e88d7d99fda4f0382f7b41a616d1a26b981f8faffc1129c7fa086d6b1287c92d0246a89ede53ecb740a0f061dd0e263f5c8e5c34ae2246888ad2d104f243386f84f7f416bafb95e6cc1d367aa3b9974a6a679539d0858716ac66b2a72c7a80427d242d6d3941af02ce15b2ad09a7867639aae584d0dcd6cbb20a3f49", 0xc0}, {&(0x7f0000002980)="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", 0xfe}, {&(0x7f0000002a80)="613ae949ee8d63b4a2e9975ca6621ae1bfaf21ff8ac58d6401483032b19cde5c7b625631ca0467b93975988e0b639f4e26410e97e64c7c283f00e07e6b743c6036063d55d3ba1451ba01e03da0675747563af8bf0763e2db33fcab207baf1fab953077365c0ce8cea7a03f4b07d03c6d72d727a9a697fe435954afe1c85cb73c811809a728", 0x85}], 0x5, &(0x7f00000070c0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r10, r11, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, 0xee01, r19}}}], 0xa0, 0x24000001}}], 0x2, 0x1) r20 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r20, 0xae80, 0x0) (async) ioctl$KVM_RUN(r20, 0xae80, 0x0) 35.688878659s ago: executing program 1 (id=531): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000001c0)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x8000080, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000240), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000300), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff004) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000180)={r6, 0x0, r7, 0xc, 0x80000}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000001840)="66baf80cb82d980680ef66bafc0cec0f07400f09b9800000c00f3235001000000f300f783496c403d96cd7392e0f07b805000000b95e0000000f01d966ba4300ed0f06", 0x43}], 0x1, 0x70, &(0x7f00000018c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 35.468472782s ago: executing program 1 (id=534): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="600227bd7000fedbdf25190000000500a20001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x5e964c21c5b36b53) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x1) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x7fffffff, 0x4) r6 = memfd_secret(0x0) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40002}, 0x40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000340)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000b40)={0x2, &(0x7f0000000b80)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6, 0x0, 0xfe, 0x400}]}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000640)={0x40030000000000, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x2, 0x10, 0xef, 0x5, 0xa, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bba, 0x3, {0x6, 0x32, 0x2, 0x7, 0x0, 0x9, 0x0, @in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}}, 0x840) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000600)=0xf) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom0\x00', 0x0, 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000480)={0x9c, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x2, 0x1, 0xd0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x1001, 0x0, 0x2}, @fda={0x66646185, 0x3, 0x0, 0x18}, @flat=@handle={0x73682a85, 0x110a, 0x2, 0x1}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}}, @clear_freeze={0x400c6314, 0x0, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000a00)={@ptr={0x70742a85, 0x0, &(0x7f0000000940)=[r8, r6, r8, r10, r4, r3, 0xffffffffffffffff], 0x1c}, @flat=@weak_binder={0x77622a85, 0xb, 0x3, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=[r11, r10, r4, r8, r1, r1, r9, r10, r10, r8], 0x28}}}}, @enter_looper], 0x100, 0x0, &(0x7f0000000380)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x1c1) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x80, &(0x7f0000000840)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r12, &(0x7f00000008c0)={0x2f, 0x6, 0x0, {0x1, 0x2, 0x6, 0x0, '\x9e\xaf\x82\xa7\x13&'}}, 0x2f) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 34.558752367s ago: executing program 1 (id=544): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x110) write(r0, &(0x7f0000000100)='27', 0x2) r1 = syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, 0x0) prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0xbcaaf1788315a778, &(0x7f0000000140)='\x9a\xb5\xbe1\x9cMP\xae\x93\x10\xb0\xcfv\xac\xdd\"\xd65\x01 \xef\x10\xd6%\xf4`cq\x1ddG\xd4BN\x15\xdaX\x03\xdc\xe9;hxX\xa1\xe7\xa3\rZ,\xbb\n\x92K\xd6\xc8\xf2\x97F&\xe0\xd3\xd3\x11 Y\x04\x82\x1a\xe5\x8d\xf4\xf1\xc7\x8eL\x03O\x9b\xf4\xa7\x04\n\xbc&\x1b\x88?\\~n*\x02\xef\xce\xe4\x9a|\xe1n\x86\x93\x92\xed\xc1\x1bv1\xbd\x85\xd1\xdbv>\x99\x82\x19\xf3\xe6\x17\'\xfc\x17\x8b\xf2\xba\xd8\xb2c\xeb\xffK\x9b\x1b\x0f\xf1\xa7[G\x89\xb7\x9dp#F1\x16\x8b\x11`\xcd[\x9c\xac\t)\xd8R\xc7\xac\xc8I?\xe4u\x8b\x81\xa3\xe4 \xfbt\xd5\\\x02\xab\x00E#o-v*\xff\xf0yTG\xca\'\xed.\x878\xc4\x81\x06\xe9\x7fL\xf6\xf0X\r\x1f\xaaq\xa5/\x91\xec\xc0,\x01Z\x91\xc3\x95\x14<\v>P\xe1\xff\x1d\x14\x9c\'\x95\x00\x00\x00\x00\xe6Jg\x8b\x85pT\x87\x89r\xd2\xafei\x84\x82O\xae\x80\xe2\xad\xac\xfa\xd8\xa4\xf6\x03\xb5\x18,\xc2\xae}\x11>\xce\xba\x8a0\a\x85g\xde\xde\xafT.\xa9V>o\xed\xca\xd6\xf0\x19\x90\xb4l\xff\x13\x14\xea;\x8f\x93wUoFE') syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) syz_clone(0x100000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r2, 0x0, 0x62, 0x40000897, 0x0, 0x0) 34.200554974s ago: executing program 1 (id=547): unshare(0x62040200) r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x142) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000000c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 18.537301653s ago: executing program 32 (id=547): unshare(0x62040200) r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x142) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000000c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 8.544278312s ago: executing program 0 (id=642): r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)={0x1, 0x0, [{0x624, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffffb, 0x40000, 0x6, 0x10, 0x1ff}}]}) r2 = eventfd2(0x7, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x4}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x109001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100010000006cdc020101112402010102000000000000000002000009240302010100010009040101000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b71"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000002c0)={0x3, r2}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x34, 0x1, '\x00', 0x5}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 8.543770202s ago: executing program 2 (id=643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000006c0)={'syzkaller1\x00', 0x5001}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', 0x1}) write$tun(r4, &(0x7f0000000740)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@icmp={{0x8, 0x4, 0x0, 0x38, 0x28, 0x68, 0x0, 0xb3, 0x1, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x41}, {[@lsrr={0x83, 0x7, 0x50, [@remote]}, @ssrr={0x89, 0x3, 0xeb}]}}, @info_request={0xf, 0x0, 0x0, 0x2d0, 0x3}}}, 0x32) (async) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000101, 0x0, 0xae}]}) (async) r7 = landlock_create_ruleset(&(0x7f0000000040)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x3, 0x2, 0xf000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000200)="3e0fae89f4c9660f38802f66b9800000c00f3266350100000066b81f0000000f23c00f21f8663503000c4f42004200f8badbc7a0a037a9000fc76afdee0f20e06635000002000f22e0670f009afbd9f501c4e3f1ce25064f5b323235008000000f30ed", 0x63}], 0x1, 0x19, 0x0, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) r9 = ioctl$KVM_GET_STATS_FD_cpu(r8, 0xaece) (async) ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x800, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_DEV_WAIT(r9, 0xc138fd08, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x200, 0x138, 0x0, 0x0, 0x8000, 0x85, 0x0, @by_dev={r10}, "00dd3955aba80fd036a2a169ecf7a27ed61c346e28ad4b5429dd9000bdc97b849bd7a99a71a02e18311176212bedc436d5f8056a99f63a0a1f1304cdd223c4dc1bfe6de34af584870370da698bc99063fdfb2b574c5094d99a39c42d47bba5afb6ed994ee36e789a2793b4e144342cd0cc5a306ccee59ff3cb8beddecde62bef9ac0021dce508cbe454471746da070fbc47a88bf38ea0fbabf02ed4c440ba8fcfa3411164c89876f7665c2dd3d0be0efedd143c3f571a4789177bbb2619092accb0b1c38"}) (async) syz_ublk_setup_io_uring(0x21, &(0x7f00000000c0)={0x0, 0x0, 0x40, 0x0, 0x4158}, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0)) 8.543034512s ago: executing program 3 (id=644): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0xd, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSRS485(r3, 0x542f, 0x0) sendmsg$netlink(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="a40000005400010000000000000080000700fd0020"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x4f7}, 0x1c) (async) shutdown(r4, 0x1) connect$inet6(r4, &(0x7f0000000640)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000680)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0xd0, 0x1, 0x2, 0x505, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4000000}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x40}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000840}, 0x4050) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000780)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x11) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)) write$P9_RCREATE(r6, &(0x7f00000000c0)={0x18, 0x73, 0x1, {{0xa4, 0x3, 0x5}, 0x4}}, 0x18) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') (async) sigaltstack(&(0x7f0000000200)={&(0x7f0000001180)=""/4096, 0x80000001, 0x1000}, 0x0) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, 0x0) (async) sigaltstack(0x0, &(0x7f0000002180)={0x0}) (async) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000480)={{{@in=@broadcast, @in=@loopback}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f00000006c0)=0xe8) syz_genetlink_get_family_id$team(&(0x7f0000000240), r6) (async) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) (async) statx(r7, 0x0, 0x4000, 0x2, &(0x7f0000000100)) fremovexattr(r1, &(0x7f0000000080)=@random={'os2.', 'snmp\x00'}) 7.040870908s ago: executing program 0 (id=645): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x8, 0x20, 0x403ed7c3, 0xf, {{0x14, 0x4, 0x1, 0x0, 0x50, 0x66, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp_addr={0x44, 0x14, 0x69, 0x1, 0x2, [{@private=0xa010102, 0x1}, {@loopback, 0x9}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x6, 0x6, "91e663ce"}, {0x6, 0x3, '{'}, {0x0, 0x7, "71e84c943b"}, {0x2, 0xa, "f406a772cd2e52ac"}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x7f, 0x5, 0x30, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x8, 0x8000, 0x5, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x20, 0x7800, 0x0, 0x1, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x64, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast2, {[@lsrr={0x83, 0xb, 0xe8, [@multicast2, @loopback]}, @timestamp_prespec={0x44, 0x4c, 0x4c, 0x3, 0x6, [{@broadcast, 0x401}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101, 0xfcd}, {@local, 0x5}, {@broadcast, 0xa9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@private=0xa010100, 0x9}]}, @timestamp_addr={0x44, 0x14, 0xcd, 0x1, 0x9, [{@empty, 0x6e}, {@rand_addr=0x64010101, 0x5}]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @multicast2, @private}, &(0x7f0000000380)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x23c, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff8001}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20010085}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@private2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private1}}, &(0x7f0000000780)=0xe8) readv(r0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/169, 0xa9}, {&(0x7f0000000880)}], 0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) recvfrom$packet(r0, &(0x7f0000000900)=""/138, 0x8a, 0x40, &(0x7f00000009c0)={0x11, 0x3, r7, 0x1, 0x7, 0x6, @remote}, 0x14) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getpeername$packet(r0, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000cc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000d00)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000dc0)={'ip6tnl0\x00', &(0x7f0000000d40)={'ip6gre0\x00', r2, 0x2f, 0x40, 0x2, 0xb, 0x47, @loopback, @private2, 0x7, 0x1, 0xe1d, 0xfffffff7}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000ec0)={'ip_vti0\x00', &(0x7f0000000e00)={'ip_vti0\x00', r6, 0x20, 0x700, 0x1, 0x4, {{0x26, 0x4, 0x3, 0x23, 0x98, 0x67, 0x0, 0x1, 0x7b8eed6c5f59e2da, 0x0, @broadcast, @local, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xe2, [@dev={0xac, 0x14, 0x14, 0x34}]}, @noop, @ssrr={0x89, 0x17, 0xe2, [@empty, @multicast2, @broadcast, @broadcast, @remote]}, @timestamp_addr={0x44, 0x4c, 0x7f, 0x1, 0xf, [{@private=0xa010102, 0xffffff11}, {@local, 0x100}, {@multicast1, 0x1}, {@private=0xa010100, 0xffff}, {@private=0xa010101, 0xfffffeff}, {@private=0xa010100}, {@private=0xa010102, 0xffffffc9}, {@local, 0x4d24062e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x2b, [@remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001400)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000013c0)={&(0x7f0000000f00)={0x494, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfa}}}]}}, {{0x8, 0x1, r7}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r6}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r2}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x4040884}, 0x2004c004) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000001440)=0x7, &(0x7f0000001480)=0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000015c0)={r0, &(0x7f00000014c0)='lb_port_stats\x00', 0x8400, &(0x7f0000001500)={@align=0xa, {0xf000, 0x800, 0x7, 0x5}}, 0xfc, &(0x7f0000001540), &(0x7f0000001580)=0xc5b}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r12, &(0x7f0000001700)={&(0x7f0000001600), 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, r13, 0x20, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) fstat(r0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000017c0)={{{@in6=@remote, @in=@loopback, 0x4e23, 0x0, 0x4e23, 0x0, 0x8, 0xa0, 0x80, 0x73, r7, r14}, {0xffffffffffffffff, 0x5, 0x9, 0x4, 0x100, 0xe14, 0x5, 0x29}, {0x5, 0xa, 0x3, 0x2}, 0x7, 0x6e6bbe, 0x1, 0x1, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4d2, 0xff}, 0xa, @in=@remote, 0x0, 0x5, 0x2, 0x0, 0xffff, 0x1000, 0x7fe}}, 0xe8) dup(r12) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000018c0)={@broadcast, @multicast1, 0x0}, &(0x7f0000001900)=0xc) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001940)={r15, 0x1, 0x6}, 0x10) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$devlink(&(0x7f00000019c0), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r16, &(0x7f0000001c80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001a00)={0x238, r17, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0xfd1}, {0x8, 0x15, 0xfffffbff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x800000}, {0x6, 0x11, 0xff}, {0x8, 0x15, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xff}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5a}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xf2}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x80000000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0xb}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x8}}]}, 0x238}, 0x1, 0x0, 0x0, 0x4}, 0x80) 7.040532668s ago: executing program 2 (id=646): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, 0x0, 0x100141, 0xa) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000640)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r1, &(0x7f00000007c0)={0x18, 0x2, {0x1234, @loopback}}, 0x1e) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000c80)=0x17) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r3, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x5a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40400d1) bind$pptp(r2, &(0x7f0000000800)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000840)={0x18, 0x2, {0x5678, @multicast1}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f00000008c0)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000900)=0x2) mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000700)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c006c7d76e4681ddac5ebef4ad87ebdf56af35bc1273b92d8e24b97a8f1c195e514f99ce6a93a8c7de8e7f43d3d228bd5b1b3bcf376ec1f8eb68754fac42889497130d2ef254e7621d47785713e34f68363abe586f5b743a6c7de9704900985fd7e5f2cb900a7a08b59831f0fd5"]) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/seq/timer\x00', 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@migrate={0xac, 0x21, 0x1, 0x5c, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80, 0x5c}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x26}, @in=@empty, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}, @policy_type={0xa, 0x10, {0x1}}]}, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) getresgid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) recvfrom$inet_nvme(r5, 0x0, 0x0, 0x10000, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={[&(0x7f0000000340)='trans=tcp,', &(0x7f00000000c0)='9p\x00', &(0x7f0000000100)='9p\x00', &(0x7f0000000140)='p@])\x00', &(0x7f0000000180)='ort\x00', &(0x7f00000001c0)='port', &(0x7f0000000200)='port', &(0x7f0000000240)='trans=tcp,', &(0x7f0000000280)='&$\x00']}, &(0x7f0000000380), 0x1000) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000080)={0x2, 'wlan1\x00', {0x1000}, 0x10}) faccessat2(r7, &(0x7f0000000500)='\x00', 0x2, 0x1000) r8 = socket$netlink(0x10, 0x3, 0x0) write(r8, &(0x7f0000000040)="3000000024000106010000000000000000000000010000000100fffff1ffffff000000000c000100696e677265737300", 0x30) r9 = accept4$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r10, 0x0, 0x1, &(0x7f0000000a80)=""/88, &(0x7f0000000b00)=0x58) accept$unix(r9, 0x0, &(0x7f0000000480)) 7.040236338s ago: executing program 3 (id=647): memfd_create(&(0x7f0000000140)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6c\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;3\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000003c0)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r4}) r5 = userfaultfd(0x80801) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f00008d1000/0x3000)=nil, 0x3000}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000240)={'vlan0\x00', @random="010021201000"}) r7 = landlock_create_ruleset(&(0x7f0000000440)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0xa) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r7, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000480)={0x0, 0x3}, 0x10, 0x0) r9 = landlock_create_ruleset(&(0x7f00000004c0)={0x2832, 0x0, 0x2}, 0x18, 0x0) r10 = landlock_create_ruleset(&(0x7f0000000500)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r10, 0x0) landlock_restrict_self(r10, 0x0) landlock_restrict_self(r10, 0x0) landlock_restrict_self(r10, 0x0) landlock_restrict_self(r10, 0x0) landlock_restrict_self(r10, 0x0) landlock_restrict_self(r10, 0x0) landlock_restrict_self(r10, 0x0) landlock_restrict_self(r9, 0x0) landlock_restrict_self(r8, 0x0) 5.432681595s ago: executing program 0 (id=648): sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, 0x0, 0xc00) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$loop(&(0x7f00000002c0), 0x9, 0x90442) ppoll(&(0x7f0000000300)=[{r0, 0x10c2}, {r1, 0x3c8}, {r0, 0x10}], 0x3, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={[0x83f9]}, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000000280)=@ethtool_regs={0x4, 0x0, 0x2, "f42a"}}) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x181100) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000200)={0x1, 0xfff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x5) r4 = socket(0x10, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x0, 0x4, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8080, 0x0, 0x1, 0x1}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f0000c00000/0x400000)=nil) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000740)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x6, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b8, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x8, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0xeb, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0x9, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x3, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x40400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1009, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0xc004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x0, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000bc0)={0x80000000, 0xffffffff, 0xfffffffc}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000cc0)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) dup(0xffffffffffffffff) 5.427427976s ago: executing program 2 (id=649): r0 = open$dir(&(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x600, 0x260) mkdirat(r0, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x74) mount(0x0, &(0x7f0000001a80)='./proc\x00', &(0x7f0000001ac0)='proc\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000100)=""/138, 0x8a}, {&(0x7f00000001c0)=""/32, 0x20}, {&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000380)=""/109, 0x6d}, {&(0x7f0000000400)=""/193, 0xc1}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001840)=""/91, 0x5b}, 0xff}, {{&(0x7f00000018c0)=@l2tp6, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001940)=""/253, 0xfd}], 0x1, &(0x7f0000001b40)=""/213, 0xd5}, 0x6}, {{&(0x7f0000001c40)=@generic, 0x80, &(0x7f0000003080)=[{&(0x7f0000001cc0)=""/2, 0x2}, {&(0x7f0000001d00)=""/30, 0x1e}, {&(0x7f0000001d40)=""/85, 0x55}, {&(0x7f0000001dc0)=""/3, 0x3}, {&(0x7f0000001e00)=""/68, 0x44}, {&(0x7f0000001e80)=""/222, 0xde}, {&(0x7f0000001f80)=""/239, 0xef}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x8}, 0xff}, {{&(0x7f0000003100)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003180)=""/246, 0xf6}, {&(0x7f0000003280)=""/253, 0xfd}, {&(0x7f0000003380)=""/106, 0x6a}], 0x3}, 0x8}], 0x4, 0x40000000, &(0x7f0000003540)={0x77359400}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000780)='6', 0x1) 5.426468666s ago: executing program 3 (id=650): mkdirat(0xffffffffffffff9c, &(0x7f0000009b80)='./lower\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x149000, 0x19a) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./work\x00', &(0x7f0000000140)={0x1c3280, 0x130, 0xc}, 0x18) renameat2(r0, &(0x7f00000000c0)='./lower\x00', r1, &(0x7f0000000180)='./work\x00', 0x7) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000009c40)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000009c80)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000009cc0)='./mnt\x00', 0x1ff) r3 = fsopen(&(0x7f0000000280)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f00000002c0)='uid', &(0x7f0000000300)='./file1\x00', 0xffffffffffffff9c) mount(0x0, &(0x7f0000009d40)='./mnt\x00', &(0x7f0000009d80)='overlay\x00', 0x0, &(0x7f0000009dc0)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000200)=0x200, 0x4) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0xc, @empty, 0x7}, 0x1c) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000009f00)='rootfs\x00', 0x0, &(0x7f0000009f40)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000009b80)='./lower\x00', 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x149000, 0x19a) (async) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./work\x00', &(0x7f0000000140)={0x1c3280, 0x130, 0xc}, 0x18) (async) renameat2(r0, &(0x7f00000000c0)='./lower\x00', r1, &(0x7f0000000180)='./work\x00', 0x7) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r2, &(0x7f0000000000)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000009c40)='./upper\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000009c80)='./work\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000009cc0)='./mnt\x00', 0x1ff) (async) fsopen(&(0x7f0000000280)='tmpfs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f00000002c0)='uid', &(0x7f0000000300)='./file1\x00', 0xffffffffffffff9c) (async) mount(0x0, &(0x7f0000009d40)='./mnt\x00', &(0x7f0000009d80)='overlay\x00', 0x0, &(0x7f0000009dc0)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') (async) socket(0xa, 0x2, 0x0) (async) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000200)=0x200, 0x4) (async) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0xc, @empty, 0x7}, 0x1c) (async) mount(0x0, &(0x7f00000001c0)='./mnt\x00', &(0x7f0000009f00)='rootfs\x00', 0x0, &(0x7f0000009f40)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') (async) 3.677357048s ago: executing program 0 (id=651): prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x29, 0xa8, 0x6, 0x30, 0x44, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7800, 0x40, 0xb}}) socket$inet6_udp(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000600)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000740)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000880)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f00000009c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) sendto$inet6(r1, 0x0, 0x0, 0x20004845, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x49800}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f0000000b00)) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@new_dev={0x1, 0xa71, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x38}}}, &(0x7f0000000180)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000001c0)={0x0, 0x74b4, 0x2, 0x8001, 0x35e}, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8555, 0x1, 0xfffffffd, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8592, 0x8, 0x2, 0x3ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ec, 0x40, 0x2400001, 0x946}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc21b, 0x400, 0x1, 0x26d}}], 0x1, 0x0, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) syz_clone(0x40001100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.676132608s ago: executing program 2 (id=652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000022c1d18dbfd2b17cb63c50895b56b768f7cdcdb908694a0000", @ANYRES16=r1, @ANYBLOB="000126bd7000fcdbdf250800000005003700000000000500330000000000"], 0x24}}, 0x12000001) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r2, 0xa, 0x11) fcntl$setlease(r2, 0x400, 0x1) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, 0x930, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f0000000200)={[0x70000, 0xffc, 0x2ffc, 0xb000], 0x401, 0xb1, 0x8}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3.675912408s ago: executing program 3 (id=653): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x40) close(r0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000581000/0x400000)=nil) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000180)={&(0x7f0000000080)=[{0x0, 0x0, 0x9, 0x2, 0x2, 0x7, 0xfe0000000000, 0x4}, {0x1, 0x0, 0x3a5, 0x7, 0x12, 0xffffffff, 0x7270, 0x3}, {0x3, 0x0, 0x1, 0x7, 0x6, 0x2, 0x6, 0x80000000}, {0x2, 0x0, 0x1, 0x6, 0xffffffff84c323a8, 0x1, 0x3, 0x80}], 0x4, 0x38, 0x1, 0x8}) 1.910905112s ago: executing program 0 (id=654): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000080)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0x7, 0x2, 0x5, 0x1, 0x57, 0x8, 0xfffffffd, 0x2, 0x8, 0xff, 0x9a, 0x45, [0x3]}}) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x60000600) setns(0xc9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x8880, 0x85) getdents(r3, &(0x7f0000000100)=""/201, 0xc9) socket$inet_udp(0x2, 0x2, 0x0) add_key(0x0, 0x0, &(0x7f0000012ac0)="308205553082", 0x6, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.910600822s ago: executing program 2 (id=655): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x501000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x17) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r2, 0x400452c8, &(0x7f00000001c0)="000000000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./dev\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000580)='./dev\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/mapper/control\x00', 0x2, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000640)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f") ioctl(r3, 0xc138fd0e, &(0x7f0000000680)="04000000000000000000000060010000380100"/42) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, r2, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) (async) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000500)=[{r5, 0x1008}], 0x1, 0x101) (async) poll(&(0x7f0000000500)=[{r5, 0x1008}], 0x1, 0x101) close_range(r4, 0xffffffffffffffff, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000300)='./dev/rfcomm0\x00', 0x180, 0x31) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x32600) (async) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000291000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000250000/0x4000)=nil) 1.909561192s ago: executing program 3 (id=656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f00000001c0)={0x774, 0xa, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_EXPRESSIONS={0x39c, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x334, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x328, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_DATA={0x22c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x84, 0x1, "bbf8324cb2e071c2ee8447cd1e6d07858e2744c73695f2c9f91ae92ee09e26dc2220864bd2c8522249b71d2a2a472a70cc3c45dc49def65e24a5cd8b0e53395d630075cc2527e8a90b62ef820a58f9776d044f80202c1e98e1dd4b1fd506dfa48065abb41493851309f5260a1028754442d3858faab35b9a0f204fe045d13e44"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "23155e339c245d0516973766384493ca7fd0ffa25bcdc5ff1be144fb1621a92bde2a1378d5b9eed89a238e17e7d6e57cebb6ad786ee45764615676f905174143abac616e62145a76a2e533651b3765d5110c1f36fdbfdaf8d926a518c245471b434d36c4f0b3a7a784a02dfea68b959a1129a89e156bf8658d68ddbe03e14f8d0e4cdf0c67c50b56123eaeea250921f0a47b9fe00fa5061990f43a1af57f5269c3658a524764e6d8c78a11ad130e442c2b97e428f942c9b6bfcf110fec1a1babe01271d6e820c3454767d93288aa4ffa6b4adb32c5869c22be9ef273bd4b1fa62f9e13965fcc28f094de4f57ececf03e3def"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x3f, 0x1, "e13a9d719651dcdb9a7dc13eb3c585317d46d1046ae8a3b36eb395ff29d2f0305b64d962655b0d271511c3cb6a852fbad33548ac23ab88839a6577"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x48, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_CMP_DATA={0x90, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0x3b0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_CONCAT={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x35}]}]}, @NFTA_SET_DESC_CONCAT={0x198, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x634}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xec3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8f4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x75}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffc3b3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6d62af1e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1e5c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0x94, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x21b5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x45d935ac}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc403574b}]}]}, @NFTA_SET_DESC_CONCAT={0x138, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3557daa3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2dee}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfca}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe8c}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x72}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x92}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}]}]}, 0x774}, 0x1, 0x0, 0x0, 0x8004}, 0x81) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)='j', 0x1, 0x2404c081, &(0x7f0000000100)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='veno', 0x4) shutdown(r0, 0x1) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x450002, 0x181) 966.2µs ago: executing program 0 (id=657): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='rose0\x00', 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x80000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f00000001c0)={0x20000014}) close_range(r1, r3, 0x0) r6 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0x8, @mcast1, 0xba12}, 0x1c) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r9 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x42, 0x0, 0x0) setuid(r10) ioctl$RTC_IRQP_SET(r8, 0x4008700c, 0x139c) 475.52µs ago: executing program 2 (id=658): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x408200, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0xc225ddb21acd1a01) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, r3, &(0x7f0000002100)='./file0\x00') (async) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000002140), 0x2) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000021c0)={0x0, 0x0, 0x0}, &(0x7f0000002200)=0xc) fsetxattr$system_posix_acl(r5, &(0x7f0000002180)='system.posix_acl_access\x00', &(0x7f0000002240)={{}, {}, [{0x2, 0x1, r3}, {0x2, 0x4, r3}, {0x2, 0x7, r3}, {0x2, 0x2, 0xee00}], {}, [{0x8, 0x2, r4}, {0x8, 0x6, r4}, {0x8, 0x3, r4}, {0x8, 0x3, r4}, {0x8, 0x7, r4}, {0x8, 0x4, r4}, {0x8, 0x2, r4}, {0x8, 0x5, r6}, {0x8, 0x1, r4}, {0x8, 0x4, r4}], {0x10, 0x4}, {0x20, 0x2}}, 0x94, 0x3) (async) r7 = signalfd(r5, &(0x7f0000002300)={[0xffffffff]}, 0x8) getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000002340), &(0x7f0000002380)=0x4) ioctl$DM_TABLE_LOAD(r7, 0xc138fd09, &(0x7f00000023c0)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x200, 0x0, 0x0, @by_uuid={0x0, '\x00', {'LVM-syz', 0x0, '1\x00'}}, [@writecache={0x0, 0x400, 0x0, 0x68, 'writecache\x00', {0x73, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, '512', 0x20, '1 metadata_only'}}]}) (async) pwritev(r1, &(0x7f0000002640)=[{&(0x7f0000002580)="320b1eefb2cfa34932a08518a327decc5c8956f23af3d7c81d0fd1241ab19001816ddd56822797b0bf58dcae62abe29958699f636b39b5ab26d45bfbaa9df5a21174402650ce501cfabcee85f836f6b07fb54906bd5e26c45b946d0c11c1822651cf421c2aabf621b09321dffdb30944ad715c84679a72746e97ed2ba407613916eed725f47b1d402d32b21d2a705951085b46e3484b340ebea83ee72f956ac6c129780c95c36a0caadf7ff38d485d90e4bce7b653", 0xb5}], 0x1, 0x3, 0x3) (async) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$FICLONE(r8, 0x40049409, r7) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002680)="a1123fcd1a202be617bb9c61078146b7da7bc1905f537c74878d1af266bc26d19f86a26bb7321e3f07b4154572c5c344bac038478ac30f81c86342fc4a31329aa4650ea61054d11929ca522aadc4e7d4d8f045", 0x53}, {&(0x7f0000002700)="13fcafafd91bb1d8c46dd4074b064ab944bfe72e9b88743b41e1880b1863cdbfb625812bc35ad718b0417a1fb0d1aaafe3bbe65856758832f6f7d7057d8d16e4070fa7e3a31c259d7b5a4e7acf580d20a32bce365790754636174edecb49a74018ceba8af7d8cebfb201d6d6b44be4d9364b0159ee698ab686aacc05cb3a0445967ef38f14c0cee131e168822e89655b3eb0c9b0e806319cfa78dcc6f7e878b30033258fc62b52f42d7af1df537a8f65044688629fa48c69975f930396af0f70aa47d9cdd9b69f3f5bd3986d772acf9f4732d3cb0018d070548fd029428a35503571640807e198d449efdda58b129449999f1f5844dfea99", 0xf8}, {&(0x7f0000002800)="61bfec75b451141553ad3b1033889ad24605277ad03caf29594f478ee015823eb7d3bd24dc31564fb38bcc7259ddb697bb1637537f8f596eb3cb48737b408e0dd7a806c3e5a2ba840468279aa3e386f959735ae3980c9ec0663c80cb88495df3a6e36ebb785a58d7f50bb28c20e32cba60530b6ff80f69ebb546e65dc6f5a8b2558bfe52a1385c0f5dee5b759c7708d11ed50e572ff18da0a42335a0cc953b2515f38a0dccf5b1253848d632d6a45cb2f3b5cf0e6d2e1e7352c279487d6486cbf93a9a5ed7b13954470ade8bbbff0225542d0fbca433145483ad", 0xda}, {&(0x7f0000002900)="87b8647c2a5fe122be95ab7f8b3a27412ec132f9e62d867caf89ce6b83e768c34446bcfa5ebc47117a8f7b10bd", 0x2d}, {&(0x7f0000002940)="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", 0xfc}], 0x5, &(0x7f0000002ac0)=[@mark={{0x14, 0x1, 0x24, 0x401}}], 0x18}}, {{&(0x7f0000002b00)=@ieee802154={0x24, @short={0x2, 0x2, 0xfffe}}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002b80)="b7e87437a96855f5172a83d08ebea604c22817903c5d1c26584482df4b6b58db25b48041124791d1db257b3d02e297ea940220b001909ab07d1cef46b308f36daca9131f33113f49741c4a", 0x4b}, {&(0x7f0000002c00)="766490a6be169de010cf6f1134d538fdd10a595687f5123eefd8cc8399274d0a17a05a7f8b455ff782993e9c15477068ea1b4ff0e2241d8d6c1a71f28ca981a98f8300fdffffadc48bd01d791a8b986229790509ceb9f32e55ddff94a8538d88ac551f9027", 0x65}, {&(0x7f0000002c80)}], 0x3, &(0x7f0000002d00)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x18}}, {{&(0x7f0000002d40)=@can, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002dc0)="0c1b37eaddffe66046dfc3cbc79ee549d11633062e1d135cb0d1f8bf8e69b8947b7d6cff3ef9f0cc10a52227db0fdf533f", 0x31}, {&(0x7f0000002e00)="60abd3c4d386ad4afcf94006919081d5d52f85e37fcc3cf8e50312827dd08efffaed9fc8c257d4961c76845e551a76", 0x2f}, {&(0x7f0000002e40)="f2d58aaf83ebc4f9af541621e2769bbf2aa965247e316e2986969d22a409758e1593081679c6d5e9cd9634d633ddd9e1e06da954e2036253e4c581241a15f7c3ed14269261ecee10cf257664fa692aed057aa1b23b3cf5767129ae239031c529c37f191b76b8533379ee922d69cba515fc8619bc4b98819b1d", 0x79}], 0x3, &(0x7f0000002f00)=[@timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}, @txtime={{0x18, 0x1, 0x3d, 0xa734}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x454800}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x100}}], 0xa8}}, {{&(0x7f0000002fc0)=@x25, 0x80, &(0x7f0000003100)=[{&(0x7f0000003040)="10720170b6cb287430c8c35374b974894c8520826eb8e93c9c091708f94d8d516c47dad27a7a89747f2068e78618f0fb928e526c5d9872640684d807a671a53d613fed906d0b21058aa7c09b4a9e671cd94da61860a3a05d245a79845fc819829ad545914b47f3eb89e17701681699e5b8bb14f21ecbc4d3b4d9cc7b7d4d232e2bdee5c1b7a6c19c7fe5a295", 0x8c}], 0x1, &(0x7f0000003140)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x62}}, @mark={{0x14, 0x1, 0x24, 0x4a}}, @mark={{0x14, 0x1, 0x24, 0x1f}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0xc0}}, {{&(0x7f0000003200)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003280)="6a8c2dfa1017570ad1e380393da27f264be9a679931985304ead52fef685cd31a58e3275e5dcfca13a7bbe01f1c4254f129f855105aa30254cf3439fddfdcc18e08f7b8b41648b9da9cecd222dada2de2a85b52ac24672e8f229a830973cdfdac4757d040a63080c41ce5a1996998e22c39b6da44875714a67cab8cb71394422ab1003c4733a3e19e65791930a2cd0d46e", 0x91}, {&(0x7f0000003340)="5fe19a4df16a1ea786a42861ee14629a7ba79ebf4db5fdaeb3139326be4da573f4a0f359985999b875322740ad5bb650b7a1ae3c48a8fa69570195e4ddcf578080c9de732529c24c92996de2d4f8cc2c693dbc766b3dbffbf3d1675425c412eaa8dfd24e4b9f86a3f31192982ab1c43eba08c7118923e10fdb343c5e56ecb1471007db44", 0x84}, {&(0x7f0000003400)="e1252bb34e4bc24da1e3be078aaaf0608e3bebfb3f5a54b2c2a6aa06c021549734b945f89f3da4ccef1dabc02dac65af8e385f99e933a7ca5ae47a2b15c85b165d636420bf0109f182a5daf4c5bb65dacd0646492f702313e998c28234da609b01b17891bcb688f8972bde3e649007a909d3fd49b6", 0x75}, {&(0x7f0000003480)="cfece76a07dc3acc4b07937956f5f137dc6e9c7da365f9646c35d811703bc08fdc24f027bf28343b159fafa622792bab3ee558a77831a0ff0a5eb294662e3ec8c171bd2b56fce3f298d173dae38af530fa20ddee39ecaa898a66143342286543131f54c69eed6da5d595d88a236917e3ddae7b94ac1bc71dd3c6213c707eeb696bff5787adb41ee3c62e3cb3b69b5ff0b5ac91587a57e89f4a5559ab94f995b5ef9e2f80df2427b2c3cb097a222f9ff31c06e0629d304b81d2dd84d8758c4881fcd54fc73bba", 0xc6}, {&(0x7f0000003580)="77b2f0047660a1da723c84fdf949945300e28a6ca8a783859b2a0b43730e63d053d477efbea298f8c59464bdaf98618dc6d7c8a35b3bdafe425b048a57d3a787069f152a46a0a60834778514d5aa5cf9f8aa71a3dcab1bfa22e08470cd0e2afca815b2d5e5b9c59a3f2dfc688e834ed2af2ed269bee6cff4b456a30f42ea6b7043", 0x81}], 0x5, &(0x7f00000036c0)=[@timestamping={{0x14, 0x1, 0x25, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}], 0x60}}], 0x5, 0x0) (async) r9 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000003880), 0x800, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r9, 0x80049367, &(0x7f00000038c0)=0x1) (async) fgetxattr(r7, &(0x7f0000003900)=@known='trusted.overlay.opaque\x00', &(0x7f0000003940)=""/147, 0x93) (async) pwritev(r0, &(0x7f0000003dc0)=[{&(0x7f0000003a00)="047da41a3532e3c23c7f8cc5c11e2d5ba5ec1ce323a594325da0e641899bfbd92eae3db6ee75e3701c032651863b049c60505e9ce91ab6b31046f027a8b2e24d80a3f56f2bba7fb331d62ff6496643a3b5b533d39c9fbc4f14d14470643fa2cb55851146cd1bd3be760648272bf8a90288b1f00762dfe6a08949d111fa8b825f8d4d6feb07c05e196a73ad", 0x8b}, {&(0x7f0000003ac0)="d517a640d5a8dc3142f24422f8f9a25d5cc261d7c92985004a40ea88f2b77dfbd2f2bb3317ebf33f6d8d59fa5b3d01ef2366b7b34c7ad97f903ef93e3ae48be82c595f91d9077788e740feb2e3e66625afe27d3c498f00bb078f4b78741c4d702f251a06cd04bfdf459a54902995f6aede380490b348475aafa3a8ab85b5ec014d6dc4f1282da49b46170564e5d0d9e173f4f9925ac2b9b87e1e55c6b8ca1f38178f864a765a89b59620e19aef90bd86928c49156f42631756696aaca6e0dc5544", 0xc1}, {&(0x7f0000003bc0)="8c95b980132a482a6be4e5e895c482dadde59667a837714370378c6b1f056885d09319aa9fac34034ec9230047703d438b2e88da92d6a4ffaa73ec6cc7075d8796043f08a3e885131b3053c9ece05a194e38792f05b9e102c491f168f2c07f11702ab74bd713e445c3cdb5bf56d77d1207be72fadf83b7a09a02453667a97b8c5da974d22a02e2d5e956dfaec8b1c92c9f0403209d9915e46ba880a652ac4b0cbf9761afe9daf90a5f441001c6d3345df0397503811adacbc22cd1f25eb44bb31e2b460cfcf7ec555aff46c8bc794d68fc7a3cd32abd395c", 0xd8}, {&(0x7f0000003cc0)="949f87084c7d771aa3e17d67c6d543a19ddbebbc8bfff6ec90a3f90aadce2bb1ca34265c9fc3f77d2bdc77f9ef9f86505ce048b86bf2c1c79c434faad5f02d0312433bb19fbd008a2b9a05d75885fad388444eb4a53bbf08fd1abcaf5b55d504289ca8c19cdf74483e8ea21d95265225ceb948ab52f6c1bebebbd4beb4096496976ca2968eedead8357e1a8a257329", 0x8f}, {&(0x7f0000003d80)="474591583d468a0a4e192c6defc55fc2df896d1a699e589a68cc88b1958ec896f5f7eb786569d2eb94768fa31618b4c56ef19fd5", 0x34}], 0x5, 0xffffffff, 0x32) (async) write$FUSE_INIT(r1, &(0x7f0000003e40)={0x50, 0x0, r2, {0x7, 0x2d, 0x7, 0x200000, 0xb5, 0x7, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0xff}}, 0x50) r10 = socket$unix(0x1, 0x0, 0x0) r11 = openat$cgroup_freezer_state(r7, &(0x7f0000003ec0), 0x2, 0x0) pwritev(r11, &(0x7f0000006580)=[{&(0x7f0000003f00)="39e098975d0eb348b490a6ca0e76073dcd0c6177b8084af0cc9022a433ea18ca982a00c5749f1dfb569eeb125c97b4e6bd30de438c9ea8f84fc37603a76909812137e8b042d1e904ff2a99ee4d2c5cef7c73748452806cf05dfb5c0095ef9a9dcc162471e7e5363e5168f591ef0cd00023149ca244302f3f6776fb9d0156d0f37c8eefb76d0cbb71a791c0f7df0494208840d74eaa3bfff4e4809ecf77f79de8c5f33fed90", 0xa5}, {&(0x7f0000003fc0)="1926b9779c96bb71950d0abbde5766477baf384efa839fd5a3c640a2cad5d92ecb1f7d1894b023ec48aa2b74959fbd290ddac4c3fb5eebc32983ea3d2d1dfc2c375420f3247aa5f752e2c205c3574c05c24c5f14b738444eedd53b2e174e24bad97d7eeb554418170d365bd46b87cceda4a376365fadfd108a4b837c1a9a86b2b6a2d3c4410ed5d5569821ec55179827a925ca9cdc91be118681285c6e6816a1e7ef4ac65f88b2c2ec14f9b04d852193d9ef589c0191670d8e3a74feb0ed864448e3f53089da3d4e4208d62d6e02a1e699a73efa", 0xd4}, {&(0x7f00000040c0)="919c0289e4e1d2d34cd58ec9216cbb9e7b457350ad7529e17a25b0f6578e4ca72aaf762bb0842955891958aa6f63ab3fe37a1d3185789abdd80086157ed65f7644dfaf77a81479bf32d02d44c716907996c01b2baa75b6694fbd6f3595cd5a1e158b1d2560baa8817937ebe9caa064126fd85fc782e91df15f17f9315fd619fcab439bc63be85433613ccb107b09114fade51bcde605634459e11363665e775f233f7eaa5df87fb03b09e7f88275d6cac16266c8b7", 0xb5}, {&(0x7f0000004180)="7b8e99c587960403c75ee758f71e800f225bebeaa42cdfcb75216e8c7a893ced39218d7bd265292deca385ac56bf01cdd6247fba661308ce351af0b12d07fadd53d46b87281aa1a5d67842cd4acc8cfef88585b99a916e7272c17b45158389ca22104b92708b763cc0b22e24927f5f2de0a5be9f4383ea3b239e23fa7e31f119b38476593f5efd480cfa9f8e186bafd90f41f617048ba65f99597b52bbd843b927a9cbcb461de783f624afd298b6312811e17e66159a617ba756636bd09cb99c66fad6ba61c23e", 0xc7}, {&(0x7f0000004280)="174c57f1a8f20a85d170cef6918a92b94d57a4924f9caf1074190bffa8e6f27326bd98bbdf9110795e2cf7168164a7cd6af23ffdb6a9be16ceabf4e1619af4444ca3f6d49c79ffd0af8cea023bfb56a921ed1c4f6a86d26fbb00a2dd712db84a5c9da4", 0x63}, {&(0x7f0000004300)="c6b6a079d0167e413b22fe5a17de8bee72799bb51914101958809e6cccc78dad93f5a830c836f076fb6f992f236265b3a71d4f22952b507ff8f4e9d8b47d9a2bb2125a12f2f93d3929d5abde7118a1f307d0fd5ba1d4eaf8c95d1322aa6bb73562967aa7e2199b4b8b14d0ccfd1b0d9573b67ff0d1904038fc9ce260338dac908eb672ed3801bc62c969755c48c298ac4dc2d7d5f461418c2a1d8113effaf143b6bfa4451e0c0121c7f5949dc5f2af81f2919a4f472d6cd5694130f56c1d52826cdd553b309b783fa60d9ed0334f242f4f7faef4f9523597efc4f3cbace77f2fe0aaff984c58f4d072530ccf8d13c5fb91f8020e6203ff", 0xf7}, {&(0x7f0000004400)="6f5cd67082cbc29d803609b32c1e13d31842a2070e07d9da1a06d74876a180b9cc5c52978ec6f75a721d2bf0dfd27bbf49550c1a8f093b2cbb30c6cd3ab8d5e3c7914da372880f9308f44e75f7c5a067806461f16bd34c3f8d2d771b2729dcae81029e72e57717878a646eaaa32012b90f4029a5480b0acd1da2c284be72c4cee21b998919061bf87019823f03b3f978e2f7e4bd57cea0d948e378ae3e7c15f78d07dca7f078510c621b58df9d642b4e18ff44e014a5c72d18e4a31c550e1b6684ad0874ccbfc2e9a99fdbee8d052ee593ecceafd7792b38a89b59171f6e6455e0378764773610cde5c48e5acddded5230c4", 0xf2}, {&(0x7f0000004500)="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", 0x1000}, {&(0x7f0000005500)="180c443eb16a7677f565bb24ad1de4076b5af3ea33af91d1344c21cb64a1158ece958d7c15a7ada1c8ddefb7532551d689d020c1069022792225f2c9a482dbfa21cdf44ed173445fc911f6b336de9ea6da505f7ec7be08a867061318c76cfd15a6a1fa881f4744726f8fc505f6088109cabcfd76c283", 0x76}, {&(0x7f0000005580)="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", 0x1000}], 0xa, 0x9, 0x9) connect$unix(r10, &(0x7f0000006640)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$VT_WAITACTIVE(r7, 0x5607) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f00000066c0)={0x6f5}) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000006700)={@loopback, 0x9, 0x1, 0x0, 0x6, 0x8, 0x5}, &(0x7f0000006740)=0x20) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r9, 0x0, 0x42, &(0x7f0000006780)={'IDLETIMER\x00'}, &(0x7f00000067c0)=0x1e) r12 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r12, &(0x7f0000006800)={0x18, 0x2, {0x1, @remote}}, 0x1e) 0s ago: executing program 3 (id=659): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r2, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040014}, 0x800) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r0, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040001}, 0x90) kernel console output (not intermixed with test programs): 22 [ 40.626514][ T10] usb 1-1: USB disconnect, device number 4 [ 40.639748][ T36] audit: type=1400 audit(1793221156.630:195): avc: denied { create } for pid=570 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 40.666914][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.680082][ T36] audit: type=1400 audit(1793221156.630:196): avc: denied { sys_admin } for pid=570 comm="syz.0.70" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 40.737427][ T65] usb 3-1: device descriptor read/64, error -71 [ 40.756670][ T577] netlink: 'syz.0.72': attribute type 19 has an invalid length. [ 40.768686][ T577] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.791299][ T577] x_tables: arp_tables: IDLETIMER target: not valid for this family [ 40.817013][ T581] GUP no longer grows the stack in syz.0.74 (581): 200000001000-200000c01000 (2000000001c0) [ 40.827794][ T581] CPU: 1 UID: 0 PID: 581 Comm: syz.0.74 Not tainted syzkaller #0 2e696f26b6bc7fd329d8b75e7f712bcc3078c616 [ 40.827824][ T581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 40.827838][ T581] Call Trace: [ 40.827845][ T581] [ 40.827852][ T581] __dump_stack+0x21/0x30 [ 40.827889][ T581] dump_stack_lvl+0x140/0x1c0 [ 40.827920][ T581] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.827951][ T581] ? find_vma+0xd3/0x120 [ 40.827984][ T581] dump_stack+0x19/0x20 [ 40.828014][ T581] fixup_user_fault+0x616/0x6a0 [ 40.828038][ T581] fault_in_user_writeable+0x75/0xe0 [ 40.828060][ T581] futex_lock_pi+0x2ed/0xa70 [ 40.828085][ T581] ? futex_unqueue+0x136/0x160 [ 40.828107][ T581] ? __cfi_futex_lock_pi+0x10/0x10 [ 40.828134][ T581] ? __cfi_futex_wake_mark+0x10/0x10 [ 40.828164][ T581] ? __cfi_futex_wake_mark+0x10/0x10 [ 40.828192][ T581] ? __se_sys_mremap+0xba2/0x10f0 [ 40.828218][ T581] do_futex+0x270/0x510 [ 40.828242][ T581] ? __cfi_do_futex+0x10/0x10 [ 40.828264][ T581] ? _raw_spin_unlock_irq+0x45/0x70 [ 40.828295][ T581] __se_sys_futex+0x13c/0x320 [ 40.828320][ T581] ? __x64_sys_futex+0x110/0x110 [ 40.828344][ T581] ? __kasan_check_write+0x18/0x20 [ 40.828375][ T581] __x64_sys_futex+0xe9/0x110 [ 40.828396][ T581] x64_sys_call+0x227f/0x2ee0 [ 40.828427][ T581] do_syscall_64+0x57/0xf0 [ 40.828445][ T581] ? clear_bhb_loop+0x50/0xa0 [ 40.828470][ T581] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.828495][ T581] RIP: 0033:0x7f6bced9f559 [ 40.828517][ T581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.828532][ T581] RSP: 002b:00007f6bcfc12028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 40.828552][ T581] RAX: ffffffffffffffda RBX: 00007f6bcf025fa0 RCX: 00007f6bced9f559 [ 40.828566][ T581] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 00002000000001c0 [ 40.828577][ T581] RBP: 00007f6bcee36b20 R08: 00002000000001c0 R09: 00000000fffffffc [ 40.828589][ T581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.828600][ T581] R13: 00007f6bcf026038 R14: 00007f6bcf025fa0 R15: 00007ffe6955f678 [ 40.828616][ T581] [ 40.975643][ T65] usb 3-1: device descriptor read/64, error -71 [ 41.088237][ T584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.75'. [ 41.102547][ T36] audit: type=1400 audit(1793221157.060:197): avc: denied { mounton } for pid=583 comm="syz.0.75" path="/20/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 41.148815][ T36] audit: type=1400 audit(1793221157.130:198): avc: denied { create } for pid=583 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.184231][ T588] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 41.266755][ T310] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.284064][ T601] : renamed from vlan0 (while UP) [ 41.385542][ T65] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 41.394318][ T611] overlayfs: failed to set uuid (16/file2, err=-1); falling back to uuid=null. [ 41.444299][ T625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 41.453777][ T626] netlink: 276 bytes leftover after parsing attributes in process `syz.1.86'. [ 41.515559][ T65] usb 3-1: device descriptor read/64, error -71 [ 41.715555][ T420] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 41.765560][ T65] usb 3-1: device descriptor read/64, error -71 [ 41.866618][ T420] usb 2-1: Using ep0 maxpacket: 32 [ 41.873079][ T420] usb 2-1: unable to get BOS descriptor or descriptor too short [ 41.880920][ T65] usb usb3-port1: attempt power cycle [ 41.887025][ T420] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 41.895382][ T420] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 41.905681][ T420] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 41.914727][ T420] usb 2-1: config 128 has no interface number 0 [ 41.921023][ T420] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 41.932303][ T420] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 41.942423][ T420] usb 2-1: config 128 interface 127 has no altsetting 0 [ 41.951598][ T420] usb 2-1: language id specifier not provided by device, defaulting to English [ 41.962506][ T420] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 41.971649][ T420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.979669][ T420] usb 2-1: Product: syz [ 41.983820][ T420] usb 2-1: Manufacturer: syz [ 41.988496][ T420] usb 2-1: SerialNumber: syz [ 42.205239][ T420] usb 2-1: USB disconnect, device number 4 [ 42.216466][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.232619][ T65] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 42.256642][ T65] usb 3-1: device descriptor read/8, error -71 [ 42.386680][ T65] usb 3-1: device descriptor read/8, error -71 [ 42.625534][ T65] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 42.646684][ T65] usb 3-1: device descriptor read/8, error -71 [ 42.776672][ T65] usb 3-1: device descriptor read/8, error -71 [ 42.880361][ T649] mmap: syz.1.92 (649) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.892468][ T65] usb usb3-port1: unable to enumerate USB device [ 42.934682][ T645] 9pnet_virtio: no channels available for device /dev/syzrnull [ 43.162348][ T665] zero sized request [ 43.285533][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 43.291721][ T603] Bluetooth: hci0: command 0x1003 tx timeout [ 43.415524][ T311] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 43.552126][ T680] syzkaller1: entered promiscuous mode [ 43.557686][ T680] syzkaller1: entered allmulticast mode [ 43.564036][ T680] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 43.568008][ T311] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 43.570079][ T680] syzkaller1: Linktype set failed because interface is up [ 43.590098][ T311] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.600183][ T311] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 43.609443][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.619965][ T311] hub 2-1:4.0: USB hub found [ 43.645539][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 43.741413][ T686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=686 comm=syz.3.103 [ 43.793800][ T686] incfs: Error accessing: /dev/syzrnull3. [ 43.799698][ T686] incfs: mount failed -2 [ 43.804353][ T686] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 43.813892][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 43.820052][ T311] hub 2-1:4.0: 19 ports detected [ 43.825207][ T311] usb 2-1: selecting invalid altsetting 1 [ 43.831184][ T311] hub 2-1:4.0: Using single TT (err -22) [ 43.837182][ T311] hub 2-1:4.0: insufficient power available to use all downstream ports [ 43.846433][ T31] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 43.859747][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.867931][ T31] usb 3-1: Product: syz [ 43.872133][ T31] usb 3-1: Manufacturer: syz [ 43.876780][ T31] usb 3-1: SerialNumber: syz [ 44.052197][ T311] usb 2-1: USB disconnect, device number 5 [ 44.084007][ T667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.093431][ T667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.104857][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 44.115777][ T31] usb 3-1: USB disconnect, device number 11 [ 44.469460][ T726] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 44.488228][ T728] netlink: 'syz.0.116': attribute type 4 has an invalid length. [ 44.495933][ T728] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.116'. [ 44.505983][ T730] netlink: 'syz.0.116': attribute type 4 has an invalid length. [ 44.513705][ T730] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.116'. [ 44.547421][ T736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'. [ 44.740093][ T755] netlink: 'syz.2.122': attribute type 27 has an invalid length. [ 44.786453][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 44.786469][ T36] audit: type=1400 audit(1793221160.780:252): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 44.837575][ T36] audit: type=1400 audit(1793221160.830:253): avc: denied { setattr } for pid=761 comm="syz.2.125" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 45.095528][ T420] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 45.116168][ T766] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.220154][ T772] netlink: 'syz.3.130': attribute type 5 has an invalid length. [ 45.246944][ T420] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.257728][ T420] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 45.267775][ T420] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.282220][ T420] usb 3-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 45.291568][ T420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.299625][ T420] usb 3-1: Product: syz [ 45.303952][ T420] usb 3-1: Manufacturer: syz [ 45.309079][ T420] usb 3-1: SerialNumber: syz [ 45.317450][ T764] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 45.495490][ T65] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 45.555605][ T787] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 45.625341][ T420] usb 3-1: MIDIStreaming interface descriptor not found [ 45.635490][ T65] usb 4-1: device descriptor read/64, error -71 [ 45.646854][ T420] usb 3-1: USB disconnect, device number 12 [ 45.838286][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 45.905512][ T65] usb 4-1: device descriptor read/64, error -71 [ 46.001608][ T36] audit: type=1400 audit(2000000000.400:254): avc: denied { listen } for pid=795 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.021452][ T36] audit: type=1400 audit(2000000000.400:255): avc: denied { bind } for pid=795 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.024529][ T796] raw_sendmsg: syz.0.134 forgot to set AF_INET. Fix it! [ 46.042142][ T9] usb 2-1: config index 0 descriptor too short (expected 7768, got 18) [ 46.064912][ T9] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 46.073353][ T9] usb 2-1: config 0 has no interface number 0 [ 46.079633][ T9] usb 2-1: config 0 interface 255 has no altsetting 0 [ 46.086774][ T9] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 46.096067][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.105015][ T9] usb 2-1: config 0 descriptor?? [ 46.116250][ T9] ftdi_sio 2-1:0.255: FTDI USB Serial Device converter detected [ 46.125392][ T9] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 46.145498][ T65] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 46.208706][ T814] netlink: 'syz.2.138': attribute type 1 has an invalid length. [ 46.216560][ T814] netlink: 'syz.2.138': attribute type 2 has an invalid length. [ 46.285526][ T65] usb 4-1: device descriptor read/64, error -71 [ 46.326322][ T786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.335668][ T786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.343840][ T9] usb 2-1: USB disconnect, device number 6 [ 46.351075][ T9] ftdi_sio 2-1:0.255: device disconnected [ 46.525570][ T65] usb 4-1: device descriptor read/64, error -71 [ 46.635657][ T65] usb usb4-port1: attempt power cycle [ 46.995520][ T65] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 47.016597][ T65] usb 4-1: device descriptor read/8, error -71 [ 47.145886][ T36] audit: type=1400 audit(2000000001.550:256): avc: denied { read } for pid=837 comm="syz.2.145" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 47.175554][ T36] audit: type=1400 audit(2000000001.550:257): avc: denied { open } for pid=837 comm="syz.2.145" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 47.190870][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 47.217745][ T65] usb 4-1: device descriptor read/8, error -71 [ 47.224628][ T36] audit: type=1400 audit(2000000001.620:258): avc: denied { create } for pid=837 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 47.387370][ T9] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 47.396668][ T9] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 47.404777][ T9] usb 2-1: Product: syz [ 47.410957][ T9] ftdi_sio 2-1:5.0: FTDI USB Serial Device converter detected [ 47.420788][ T9] usb 2-1: Detected FT4233HP [ 47.455513][ T65] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 47.496554][ T65] usb 4-1: device descriptor read/8, error -71 [ 47.610862][ T36] audit: type=1400 audit(2000000002.010:259): avc: denied { append } for pid=835 comm="syz.1.144" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 47.627592][ T65] usb 4-1: device descriptor read/8, error -71 [ 47.720511][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 47.727822][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 47.735534][ T9] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 47.745652][ T65] usb usb4-port1: unable to enumerate USB device [ 47.752737][ T9] usb 2-1: USB disconnect, device number 7 [ 47.766557][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 47.778987][ T9] ftdi_sio 2-1:5.0: device disconnected [ 47.813089][ T36] audit: type=1400 audit(2000000002.210:260): avc: denied { create } for pid=853 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 47.873505][ T856] SELinux: Context system_u:object_r:apt_exec_t:s0 is not valid (left unmapped). [ 47.883109][ T36] audit: type=1400 audit(2000000002.280:261): avc: denied { relabelto } for pid=854 comm="syz.0.149" name="cgroup" dev="tmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_exec_t:s0" [ 48.255805][ T864] x_tables: unsorted underflow at hook 1 [ 48.336488][ T867] kvm: user requested TSC rate below hardware speed [ 48.343963][ T867] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 48.352390][ T867] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 48.945524][ T420] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 49.075510][ T420] usb 3-1: device descriptor read/64, error -71 [ 49.243694][ T895] netlink: 'syz.3.161': attribute type 4 has an invalid length. [ 49.251496][ T895] netlink: 17 bytes leftover after parsing attributes in process `syz.3.161'. [ 49.260656][ T895] FAULT_INJECTION: forcing a failure. [ 49.260656][ T895] name failslab, interval 1, probability 0, space 0, times 0 [ 49.273649][ T895] CPU: 1 UID: 0 PID: 895 Comm: syz.3.161 Not tainted syzkaller #0 2e696f26b6bc7fd329d8b75e7f712bcc3078c616 [ 49.273681][ T895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 49.273696][ T895] Call Trace: [ 49.273703][ T895] [ 49.273711][ T895] __dump_stack+0x21/0x30 [ 49.273753][ T895] dump_stack_lvl+0x140/0x1c0 [ 49.273788][ T895] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.273823][ T895] dump_stack+0x19/0x20 [ 49.273855][ T895] should_fail_ex+0x3c2/0x510 [ 49.273878][ T895] should_failslab+0xac/0x100 [ 49.273901][ T895] kmem_cache_alloc_noprof+0x42/0x410 [ 49.273931][ T895] ? fib_insert_alias+0x2a6/0x1200 [ 49.273959][ T895] fib_insert_alias+0x2a6/0x1200 [ 49.273984][ T895] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 49.274015][ T895] ? fib_trie_unmerge+0x250/0x1410 [ 49.274039][ T895] ? __asan_memcpy+0x5a/0x80 [ 49.274069][ T895] fib_trie_unmerge+0x28b/0x1410 [ 49.274097][ T895] fib_unmerge+0xce/0x360 [ 49.274128][ T895] fib4_rule_configure+0x287/0xbb0 [ 49.274171][ T895] fib_nl_newrule+0x136d/0x1e50 [ 49.274201][ T895] ? __cfi_fib_nl_newrule+0x10/0x10 [ 49.274240][ T895] ? mutex_lock+0x97/0x1d0 [ 49.274269][ T895] ? __cfi_mutex_lock+0x10/0x10 [ 49.274297][ T895] ? ns_capable+0x90/0xf0 [ 49.274320][ T895] ? netlink_net_capable+0x129/0x160 [ 49.274348][ T895] ? __cfi_fib_nl_newrule+0x10/0x10 [ 49.274371][ T895] rtnetlink_rcv_msg+0x8c1/0xa40 [ 49.274395][ T895] ? __asan_memcpy+0x5a/0x80 [ 49.274424][ T895] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 49.274449][ T895] ? avc_has_perm+0x155/0x240 [ 49.274473][ T895] netlink_rcv_skb+0x24a/0x4e0 [ 49.274502][ T895] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 49.274526][ T895] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 49.274555][ T895] ? selinux_netlink_send+0x7df/0x8b0 [ 49.274584][ T895] ? netlink_autobind+0x1c0/0x1c0 [ 49.274616][ T895] ? is_vmalloc_addr+0x11/0x40 [ 49.274640][ T895] rtnetlink_rcv+0x20/0x30 [ 49.274662][ T895] netlink_unicast+0x8bf/0xa70 [ 49.274692][ T895] netlink_sendmsg+0x7d1/0xad0 [ 49.274730][ T895] ? __cfi_netlink_sendmsg+0x10/0x10 [ 49.274762][ T895] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 49.274795][ T895] ? security_socket_sendmsg+0x3d/0x100 [ 49.274822][ T895] ____sys_sendmsg+0x99e/0xa00 [ 49.274854][ T895] ? __import_iovec+0x5b9/0x7d0 [ 49.274882][ T895] ? __sys_sendmsg_sock+0x50/0x50 [ 49.274914][ T895] ? import_iovec+0x80/0xb0 [ 49.274942][ T895] ___sys_sendmsg+0x2a6/0x370 [ 49.274974][ T895] ? __sys_sendmsg+0x260/0x260 [ 49.275011][ T895] ? __fget_files+0x2bc/0x330 [ 49.275034][ T895] __x64_sys_sendmsg+0x1be/0x2a0 [ 49.275067][ T895] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 49.275100][ T895] ? __kasan_check_write+0x18/0x20 [ 49.275130][ T895] ? fpregs_restore_userregs+0x11c/0x260 [ 49.275170][ T895] ? switch_fpu_return+0x12/0x20 [ 49.275201][ T895] x64_sys_call+0x2a4c/0x2ee0 [ 49.275231][ T895] do_syscall_64+0x57/0xf0 [ 49.275255][ T895] ? clear_bhb_loop+0x50/0xa0 [ 49.275286][ T895] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.275316][ T895] RIP: 0033:0x7f63a759f559 [ 49.275335][ T895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.275353][ T895] RSP: 002b:00007f63a8425028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 49.275377][ T895] RAX: ffffffffffffffda RBX: 00007f63a7825fa0 RCX: 00007f63a759f559 [ 49.275393][ T895] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000007 [ 49.275407][ T895] RBP: 00007f63a7636b20 R08: 0000000000000000 R09: 0000000000000000 [ 49.275421][ T895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.275435][ T895] R13: 00007f63a7826038 R14: 00007f63a7825fa0 R15: 00007fffa56299f8 [ 49.275458][ T895] [ 49.335995][ T420] usb 3-1: device descriptor read/64, error -71 [ 49.702502][ T906] rust_binder: 904:906 no such ref 1 [ 49.707950][ T906] rust_binder: 904:906 got reply transaction with no transaction stack [ 49.716285][ T906] rust_binder: 904:906 transaction reply to 0:0 failed EINVAL, code 0 size 88-24 line thread.rs:1560 [ 49.782202][ T909] rust_binder: 904:909 got transaction to invalid handle 1 [ 49.789529][ T909] rust_binder: 904:909 transaction call to 0:0 failed ENOENT, code 1 size 0-0 line process.rs:958 [ 49.887284][ T420] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 50.025565][ T420] usb 3-1: device descriptor read/64, error -71 [ 50.155542][ T31] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 50.265579][ T420] usb 3-1: device descriptor read/64, error -71 [ 50.306735][ T31] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 50.314980][ T31] usb 2-1: config 0 has no interface number 0 [ 50.322713][ T31] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 50.331834][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.339889][ T31] usb 2-1: Product: syz [ 50.344067][ T31] usb 2-1: Manufacturer: syz [ 50.348701][ T31] usb 2-1: SerialNumber: syz [ 50.354010][ T31] usb 2-1: config 0 descriptor?? [ 50.375581][ T420] usb usb3-port1: attempt power cycle [ 50.447658][ T900] x86/PAT: syz.3.162:900 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 50.715540][ T420] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 50.736625][ T420] usb 3-1: device descriptor read/8, error -71 [ 50.866675][ T420] usb 3-1: device descriptor read/8, error -71 [ 50.904887][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 50.904922][ T36] audit: type=1400 audit(2000000005.300:267): avc: denied { audit_write } for pid=936 comm="syz.3.175" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 50.932389][ T36] audit: type=1107 audit(2000000005.300:268): pid=936 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 50.962225][ T911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.062272][ T911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.071155][ T31] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 51.081361][ T31] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 51.093572][ T31] asix 2-1:0.251: probe with driver asix failed with error -71 [ 51.102190][ T31] usb 2-1: USB disconnect, device number 8 [ 51.185558][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 51.193233][ T420] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 51.216613][ T420] usb 3-1: device descriptor read/8, error -71 [ 51.346772][ T420] usb 3-1: device descriptor read/8, error -71 [ 51.353084][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 51.363027][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 51.372949][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 51.382763][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 51.395170][ T9] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 51.404375][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.413331][ T9] usb 4-1: Product: syz [ 51.417689][ T9] usb 4-1: Manufacturer: syz [ 51.422342][ T9] usb 4-1: SerialNumber: syz [ 51.428946][ T9] usb 4-1: config 0 descriptor?? [ 51.435746][ T9] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 51.441827][ T36] audit: type=1400 audit(2000000005.840:269): avc: denied { create } for pid=943 comm="syz.0.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 51.456234][ T420] usb usb3-port1: unable to enumerate USB device [ 51.598752][ T952] syzkaller0: entered promiscuous mode [ 51.604277][ T952] syzkaller0: entered allmulticast mode [ 51.639298][ T9] scsi host1: usb-storage 4-1:0.0 [ 51.654418][ T9] usb 4-1: USB disconnect, device number 8 [ 51.675273][ T958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 51.716647][ T961] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 51.917261][ T36] audit: type=1400 audit(2000000006.320:270): avc: denied { create } for pid=967 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 51.918172][ T968] FAULT_INJECTION: forcing a failure. [ 51.918172][ T968] name failslab, interval 1, probability 0, space 0, times 0 [ 51.949525][ T968] CPU: 0 UID: 0 PID: 968 Comm: syz.2.183 Not tainted syzkaller #0 2e696f26b6bc7fd329d8b75e7f712bcc3078c616 [ 51.949560][ T968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 51.949576][ T968] Call Trace: [ 51.949582][ T968] [ 51.949590][ T968] __dump_stack+0x21/0x30 [ 51.949627][ T968] dump_stack_lvl+0x140/0x1c0 [ 51.949658][ T968] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.949692][ T968] dump_stack+0x19/0x20 [ 51.949720][ T968] should_fail_ex+0x3c2/0x510 [ 51.949740][ T968] should_failslab+0xac/0x100 [ 51.949762][ T968] kmem_cache_alloc_noprof+0x42/0x410 [ 51.949792][ T968] ? __kernfs_new_node+0xf1/0x740 [ 51.949814][ T968] __kernfs_new_node+0xf1/0x740 [ 51.949834][ T968] ? kernfs_new_node+0x280/0x280 [ 51.949858][ T968] ? bus_add_driver+0x18c/0x730 [ 51.949882][ T968] kernfs_new_node+0x154/0x280 [ 51.949904][ T968] kernfs_create_dir_ns+0x4b/0x130 [ 51.949927][ T968] sysfs_create_dir_ns+0x127/0x210 [ 51.949972][ T968] ? __cfi_sysfs_create_dir_ns+0x10/0x10 [ 51.950007][ T968] ? kstrdup+0x7b/0x130 [ 51.950036][ T968] kobject_add_internal+0x71f/0xc20 [ 51.950063][ T968] kobject_init_and_add+0x12c/0x1a0 [ 51.950087][ T968] ? __cfi_kobject_init_and_add+0x10/0x10 [ 51.950111][ T968] ? __kasan_kmalloc+0x96/0xb0 [ 51.950132][ T968] ? __kmalloc_cache_noprof+0x23c/0x470 [ 51.950165][ T968] ? klist_init+0x29/0xe0 [ 51.950185][ T968] bus_add_driver+0x2a2/0x730 [ 51.950209][ T968] driver_register+0x2b7/0x3c0 [ 51.950239][ T968] usb_gadget_register_driver_owner+0xfc/0x270 [ 51.950274][ T968] raw_ioctl+0x144c/0x37a0 [ 51.950311][ T968] ? __cfi_raw_ioctl+0x10/0x10 [ 51.950339][ T968] ? selinux_file_ioctl+0x732/0x1480 [ 51.950371][ T968] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 51.950407][ T968] ? __fget_files+0x2bc/0x330 [ 51.950428][ T968] ? bpf_lsm_file_ioctl+0xd/0x20 [ 51.950449][ T968] ? security_file_ioctl+0x3e/0x110 [ 51.950480][ T968] ? __cfi_raw_ioctl+0x10/0x10 [ 51.950507][ T968] __se_sys_ioctl+0x123/0x1b0 [ 51.950530][ T968] __x64_sys_ioctl+0x7f/0xa0 [ 51.950551][ T968] x64_sys_call+0x1878/0x2ee0 [ 51.950574][ T968] do_syscall_64+0x57/0xf0 [ 51.950596][ T968] ? clear_bhb_loop+0x50/0xa0 [ 51.950627][ T968] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.950656][ T968] RIP: 0033:0x7f4465b9f1eb [ 51.950676][ T968] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 51.950695][ T968] RSP: 002b:00007f4466ac8f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.950719][ T968] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f4465b9f1eb [ 51.950736][ T968] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 51.950750][ T968] RBP: 00007f4466ac9fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 51.950765][ T968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.950778][ T968] R13: 00002000000004c0 R14: 0000000000000000 R15: 0000000000000000 [ 51.950797][ T968] [ 51.951030][ T968] kobject: kobject_add_internal failed for raw-gadget.0 (error: -12 parent: drivers) [ 52.257739][ T968] UDC core: USB Raw Gadget: driver registration failed: -12 [ 52.266705][ T968] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 52.280142][ T968] netlink: 80 bytes leftover after parsing attributes in process `syz.2.183'. [ 52.353827][ T36] audit: type=1400 audit(2000000006.750:271): avc: denied { create } for pid=974 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 52.424815][ T36] audit: type=1400 audit(2000000006.820:272): avc: denied { bind } for pid=985 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.446662][ T36] audit: type=1400 audit(2000000006.830:273): avc: denied { write } for pid=985 comm="syz.0.190" path="socket:[9044]" dev="sockfs" ino=9044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.624151][ T993] fuse: Unknown parameter '0x0000000000000000' [ 52.667110][ T36] audit: type=1400 audit(2000000007.070:274): avc: denied { name_bind } for pid=994 comm="syz.0.192" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 52.807872][ T997] x_tables: unsorted entry at hook 1 [ 52.835998][ T1008] device-mapper: table: 252:1: zero-length target [ 52.842525][ T1008] device-mapper: ioctl: error adding target to table [ 52.935487][ T36] audit: type=1400 audit(2000000007.330:275): avc: denied { getopt } for pid=1007 comm="syz.2.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.151965][ T36] audit: type=1400 audit(2000000007.550:276): avc: denied { remount } for pid=1014 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.266035][ T1032] SELinux: Context system_u: is not valid (left unmapped). [ 53.378792][ T1040] ./dev/sda1: Can't lookup blockdev [ 53.555512][ T311] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 53.705616][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 53.711502][ T311] usb 4-1: too many configurations: 112, using maximum allowed: 8 [ 53.726612][ T311] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 53.735882][ T311] usb 4-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 53.744349][ T311] usb 4-1: Product: syz [ 53.748607][ T311] usb 4-1: Manufacturer: syz [ 53.756402][ T311] r8152-cfgselector 4-1: Unknown version 0x0000 [ 53.762797][ T311] r8152-cfgselector 4-1: config 0 descriptor?? [ 53.770361][ T311] cdc_acm 4-1:0.0: Zero length descriptor references [ 53.778887][ T311] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 53.810782][ T1046] udevd[1046]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Exec format error [ 54.025580][ T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 54.066736][ T312] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 54.176831][ T31] usb 3-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 54.186027][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.200021][ T31] usb-storage 3-1:1.0: USB Mass Storage device detected [ 54.218506][ T1052] FAULT_INJECTION: forcing a failure. [ 54.218506][ T1052] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.231718][ T1052] CPU: 1 UID: 0 PID: 1052 Comm: syz.1.206 Not tainted syzkaller #0 2e696f26b6bc7fd329d8b75e7f712bcc3078c616 [ 54.231750][ T1052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 54.231767][ T1052] Call Trace: [ 54.231774][ T1052] [ 54.231790][ T1052] __dump_stack+0x21/0x30 [ 54.231826][ T1052] dump_stack_lvl+0x140/0x1c0 [ 54.231856][ T1052] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.231886][ T1052] ? selinux_socket_setsockopt+0x324/0x3d0 [ 54.231913][ T1052] dump_stack+0x19/0x20 [ 54.231943][ T1052] should_fail_ex+0x3c2/0x510 [ 54.231964][ T1052] should_fail+0xf/0x20 [ 54.231982][ T1052] should_fail_usercopy+0x1e/0x30 [ 54.232004][ T1052] _copy_from_user+0x20/0xa0 [ 54.232029][ T1052] set_user_sigmask+0xa8/0x1c0 [ 54.232059][ T1052] ? __cfi_set_user_sigmask+0x10/0x10 [ 54.232092][ T1052] __se_sys_pselect6+0x174/0x320 [ 54.232117][ T1052] ? __x64_sys_pselect6+0x110/0x110 [ 54.232142][ T1052] ? __kasan_check_write+0x18/0x20 [ 54.232171][ T1052] __x64_sys_pselect6+0xe9/0x110 [ 54.232194][ T1052] x64_sys_call+0x2980/0x2ee0 [ 54.232216][ T1052] do_syscall_64+0x57/0xf0 [ 54.232237][ T1052] ? clear_bhb_loop+0x50/0xa0 [ 54.232266][ T1052] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.232293][ T1052] RIP: 0033:0x7ff3df19f559 [ 54.232310][ T1052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.232327][ T1052] RSP: 002b:00007ff3ddbf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 54.232349][ T1052] RAX: ffffffffffffffda RBX: 00007ff3df425fa0 RCX: 00007ff3df19f559 [ 54.232364][ T1052] RDX: 0000200000000b40 RSI: 0000200000000400 RDI: 0000000000000040 [ 54.232378][ T1052] RBP: 00007ff3df236b20 R08: 0000200000000bc0 R09: 0000200000000c40 [ 54.232394][ T1052] R10: 0000200000000b80 R11: 0000000000000246 R12: 0000000000000000 [ 54.232407][ T1052] R13: 00007ff3df426038 R14: 00007ff3df425fa0 R15: 00007ffe4b5f1b08 [ 54.232424][ T1052] [ 54.233461][ T1052] sock: sock_set_timeout: `syz.1.206' (pid 1052) tries to set negative timeout [ 54.441888][ T31] scsi host1: usb-storage 3-1:1.0 [ 54.447499][ T1067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'. [ 55.219093][ T1095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=1095 comm=syz.1.220 [ 55.246893][ T65] usb 3-1: USB disconnect, device number 17 [ 55.266653][ T349] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.399895][ T1112] netlink: 'syz.1.225': attribute type 4 has an invalid length. [ 55.735529][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 55.834682][ T1122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1122 comm=syz.0.228 [ 55.865565][ T31] usb 4-1: device descriptor read/64, error -71 [ 56.105534][ T31] usb 4-1: device descriptor read/64, error -71 [ 56.345532][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 56.476142][ T31] usb 4-1: device descriptor read/64, error -71 [ 56.512989][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 56.513014][ T36] audit: type=1400 audit(2000000010.903:293): avc: denied { map } for pid=1138 comm="syz.0.233" path="socket:[10664]" dev="sockfs" ino=10664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.735564][ T31] usb 4-1: device descriptor read/64, error -71 [ 56.855682][ T31] usb usb4-port1: attempt power cycle [ 57.205605][ T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 57.229211][ T31] usb 4-1: device descriptor read/8, error -71 [ 57.285588][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.291820][ T603] Bluetooth: hci0: command 0x1003 tx timeout [ 57.357575][ T36] audit: type=1400 audit(2000000011.753:294): avc: denied { getopt } for pid=1161 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.385514][ T36] audit: type=1400 audit(2000000011.763:295): avc: denied { map } for pid=1163 comm="syz.1.242" path="socket:[9772]" dev="sockfs" ino=9772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.408508][ T36] audit: type=1400 audit(2000000011.763:296): avc: denied { read write } for pid=1163 comm="syz.1.242" path="socket:[9772]" dev="sockfs" ino=9772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.417509][ T31] usb 4-1: device descriptor read/8, error -71 [ 57.501435][ T1168] syzkaller1: entered promiscuous mode [ 57.516882][ T1168] syzkaller1: entered allmulticast mode [ 57.534573][ T36] audit: type=1400 audit(2000000011.923:297): avc: denied { read } for pid=1166 comm="syz.2.243" name="stats" dev="binder" ino=1048586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.572092][ T36] audit: type=1400 audit(2000000011.923:298): avc: denied { open } for pid=1166 comm="syz.2.243" path="/dev/binderfs/binder_logs/stats" dev="binder" ino=1048586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.725524][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 57.756645][ T31] usb 4-1: device descriptor read/8, error -71 [ 57.891839][ T31] usb 4-1: device descriptor read/8, error -71 [ 58.005696][ T31] usb usb4-port1: unable to enumerate USB device [ 58.075484][ T420] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 58.165503][ T312] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 58.225515][ T420] usb 3-1: Using ep0 maxpacket: 8 [ 58.232223][ T420] usb 3-1: unable to get BOS descriptor or descriptor too short [ 58.241192][ T420] usb 3-1: config 15 has an invalid interface number: 145 but max is 1 [ 58.249701][ T420] usb 3-1: config 15 has an invalid interface number: 239 but max is 1 [ 58.258222][ T420] usb 3-1: config 15 has no interface number 0 [ 58.264479][ T420] usb 3-1: config 15 has no interface number 1 [ 58.271050][ T420] usb 3-1: config 15 interface 145 altsetting 8 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 58.282385][ T420] usb 3-1: config 15 interface 145 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 64 [ 58.292693][ T420] usb 3-1: config 15 interface 239 altsetting 13 bulk endpoint 0x8 has invalid maxpacket 1024 [ 58.303362][ T420] usb 3-1: config 15 interface 239 altsetting 13 has an endpoint descriptor with address 0x97, changing to 0x87 [ 58.315521][ T420] usb 3-1: config 15 interface 239 altsetting 13 endpoint 0x87 has invalid maxpacket 15200, setting to 1024 [ 58.325663][ T312] usb 2-1: Using ep0 maxpacket: 8 [ 58.328566][ T420] usb 3-1: config 15 interface 239 altsetting 13 bulk endpoint 0x87 has invalid maxpacket 1024 [ 58.342599][ T420] usb 3-1: config 15 interface 239 altsetting 13 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 58.347141][ T312] usb 2-1: unable to get BOS descriptor or descriptor too short [ 58.356801][ T420] usb 3-1: config 15 interface 145 has no altsetting 0 [ 58.370655][ T420] usb 3-1: config 15 interface 239 has no altsetting 0 [ 58.378104][ T312] usb 2-1: config index 0 descriptor too short (expected 575, got 63) [ 58.386354][ T312] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 58.387170][ T420] usb 3-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=e6.aa [ 58.394454][ T312] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 58.394492][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 58.423493][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 58.424025][ T420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.433194][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 58.452335][ T312] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 58.455514][ T420] usb 3-1: Product: syz [ 58.462300][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 58.476255][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 58.476901][ T420] usb 3-1: Manufacturer: syz [ 58.490325][ T312] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 58.499967][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.500458][ T420] usb 3-1: SerialNumber: syz [ 58.508043][ T312] usb 2-1: Product: syz [ 58.521099][ T312] usb 2-1: Manufacturer: syz [ 58.532258][ T312] usb 2-1: SerialNumber: syz [ 58.532857][ T1179] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 58.551466][ T312] usb 2-1: config 0 descriptor?? [ 58.560317][ T1184] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 58.592739][ T1196] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 58.611326][ T400] udevd[400]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.635951][ T36] audit: type=1400 audit(2000000013.023:299): avc: denied { map } for pid=1195 comm="syz.3.252" path="pipe:[1532]" dev="pipefs" ino=1532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 58.700912][ T36] audit: type=1400 audit(2000000013.043:300): avc: denied { map } for pid=1195 comm="syz.3.252" path="socket:[10909]" dev="sockfs" ino=10909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 58.758108][ T36] audit: type=1400 audit(2000000013.053:301): avc: denied { map } for pid=1195 comm="syz.3.252" path="socket:[9809]" dev="sockfs" ino=9809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 58.790221][ T36] audit: type=1400 audit(2000000013.053:302): avc: denied { map } for pid=1195 comm="syz.3.252" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 58.800266][ T9] usb 2-1: USB disconnect, device number 9 [ 58.827114][ T1179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.847668][ T1179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.867543][ T420] pl2303 3-1:15.145: required endpoints missing [ 58.882107][ T420] pl2303 3-1:15.239: required interrupt-in endpoint missing [ 58.894031][ T420] usb 3-1: USB disconnect, device number 18 [ 59.225620][ T312] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 59.365548][ T312] usb 4-1: device descriptor read/64, error -71 [ 59.415714][ T1222] FAULT_INJECTION: forcing a failure. [ 59.415714][ T1222] name failslab, interval 1, probability 0, space 0, times 0 [ 59.428385][ T1222] CPU: 0 UID: 0 PID: 1222 Comm: syz.2.261 Not tainted syzkaller #0 2e696f26b6bc7fd329d8b75e7f712bcc3078c616 [ 59.428417][ T1222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 59.428431][ T1222] Call Trace: [ 59.428439][ T1222] [ 59.428452][ T1222] __dump_stack+0x21/0x30 [ 59.428488][ T1222] dump_stack_lvl+0x140/0x1c0 [ 59.428521][ T1222] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.428555][ T1222] dump_stack+0x19/0x20 [ 59.428586][ T1222] should_fail_ex+0x3c2/0x510 [ 59.428608][ T1222] should_failslab+0xac/0x100 [ 59.428628][ T1222] kmem_cache_alloc_noprof+0x42/0x410 [ 59.428659][ T1222] ? security_file_alloc+0x49/0x220 [ 59.428686][ T1222] ? kasan_save_alloc_info+0x3a/0x50 [ 59.428714][ T1222] security_file_alloc+0x49/0x220 [ 59.428742][ T1222] init_file+0x9e/0x210 [ 59.428764][ T1222] alloc_empty_file+0xd9/0x270 [ 59.428787][ T1222] path_openat+0xf4/0x35a0 [ 59.428810][ T1222] ? stack_depot_save_flags+0x38/0x800 [ 59.428835][ T1222] ? kasan_save_track+0x4f/0x80 [ 59.428866][ T1222] ? kasan_save_track+0x3e/0x80 [ 59.428897][ T1222] ? kasan_save_alloc_info+0x3a/0x50 [ 59.428932][ T1222] ? __kasan_slab_alloc+0x73/0x90 [ 59.428953][ T1222] ? getname+0x1b/0x30 [ 59.428982][ T1222] ? do_sys_openat2+0xda/0x1d0 [ 59.429006][ T1222] ? __x64_sys_openat+0x13a/0x170 [ 59.429031][ T1222] ? x64_sys_call+0xe69/0x2ee0 [ 59.429053][ T1222] ? do_syscall_64+0x57/0xf0 [ 59.429077][ T1222] ? do_filp_open+0x440/0x440 [ 59.429102][ T1222] do_filp_open+0x1f2/0x440 [ 59.429126][ T1222] ? __cfi_do_filp_open+0x10/0x10 [ 59.429152][ T1222] ? alloc_fd+0x4c1/0x570 [ 59.429186][ T1222] do_sys_openat2+0x134/0x1d0 [ 59.429210][ T1222] ? fput+0x1a4/0x230 [ 59.429231][ T1222] ? do_sys_open+0x100/0x100 [ 59.429258][ T1222] __x64_sys_openat+0x13a/0x170 [ 59.429285][ T1222] x64_sys_call+0xe69/0x2ee0 [ 59.429307][ T1222] do_syscall_64+0x57/0xf0 [ 59.429328][ T1222] ? clear_bhb_loop+0x50/0xa0 [ 59.429358][ T1222] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.429386][ T1222] RIP: 0033:0x7f4465b9f559 [ 59.429403][ T1222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.429423][ T1222] RSP: 002b:00007f4466acb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 59.429447][ T1222] RAX: ffffffffffffffda RBX: 00007f4465e25fa0 RCX: 00007f4465b9f559 [ 59.429463][ T1222] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 59.429477][ T1222] RBP: 00007f4465c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 59.429490][ T1222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.429502][ T1222] R13: 00007f4465e26038 R14: 00007f4465e25fa0 R15: 00007fff956ea8f8 [ 59.429520][ T1222] [ 59.635573][ T312] usb 4-1: device descriptor read/64, error -71 [ 59.808507][ T1227] SELinux: failed to load policy [ 59.820847][ T1233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 59.976720][ T1241] udevd[1241]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Exec format error [ 60.015516][ T312] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 60.092784][ T1240] netlink: 'syz.1.268': attribute type 4 has an invalid length. [ 60.100653][ T1240] netlink: 'syz.1.268': attribute type 6 has an invalid length. [ 60.108331][ T1240] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.268'. [ 60.136566][ T1240] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 60.155509][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 60.175530][ T312] usb 4-1: device descriptor read/64, error -71 [ 60.315532][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 60.324484][ T9] usb 3-1: string descriptor 0 read error: -22 [ 60.330947][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 60.340048][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.415540][ T311] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 60.423199][ T312] usb 4-1: device descriptor read/64, error -71 [ 60.535578][ T312] usb usb4-port1: attempt power cycle [ 60.550954][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 60.559234][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 60.575499][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 60.575689][ T9] usb 3-1: USB disconnect, device number 19 [ 60.582284][ T311] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 60.595216][ T311] usb 2-1: config 0 has no interface number 0 [ 60.615512][ T311] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 60.625708][ T311] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 60.637174][ T311] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 60.646541][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.654655][ T311] usb 2-1: Product: syz [ 60.658936][ T311] usb 2-1: Manufacturer: syz [ 60.663559][ T311] usb 2-1: SerialNumber: syz [ 60.669309][ T311] usb 2-1: config 0 descriptor?? [ 60.674604][ T1245] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 60.681948][ T1245] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 60.831894][ T1267] ./dev/sda1: Can't lookup blockdev [ 60.875535][ T312] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 60.890028][ T1245] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 60.897733][ T1245] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 60.905823][ T312] usb 4-1: device descriptor read/8, error -71 [ 61.050294][ T312] usb 4-1: device descriptor read/8, error -71 [ 61.106255][ T311] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 61.116405][ T311] asix 2-1:0.34: probe with driver asix failed with error -61 [ 61.295533][ T312] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 61.309213][ T9] usb 2-1: USB disconnect, device number 10 [ 61.317089][ T312] usb 4-1: device descriptor read/8, error -71 [ 61.446680][ T312] usb 4-1: device descriptor read/8, error -71 [ 61.555624][ T312] usb usb4-port1: unable to enumerate USB device [ 61.991596][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 61.991614][ T36] audit: type=1400 audit(2000000016.383:309): avc: denied { write } for pid=1330 comm="syz.2.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.050309][ T36] audit: type=1400 audit(2000000016.443:310): avc: denied { set_context_mgr } for pid=1335 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 62.054662][ T1336] rust_binder: 1335:1336 error while translating object: ENOENT [ 62.079948][ T1336] rust_binder: 1335:1336 transaction call to 1335:0 failed ENOENT, code 0 size 24-24 line thread.rs:878 [ 62.092552][ T65] rust_binder: 1335: undelivered TRANSACTION_COMPLETE [ 62.097734][ T36] audit: type=1400 audit(2000000016.443:311): avc: denied { map } for pid=1335 comm="syz.3.291" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.104890][ T65] rust_binder: 1335: undelivered TRANSACTION_ERROR: 29201 [ 62.138753][ T36] audit: type=1400 audit(2000000016.443:312): avc: denied { call } for pid=1335 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 62.143362][ T420] rust_binder: 1335: undelivered TRANSACTION_ERROR: 29190 [ 62.181763][ T65] rust_binder: 1335: undelivered TRANSACTION_ERROR: 29201 [ 62.190570][ T36] audit: type=1326 audit(2000000016.583:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1337 comm="syz.3.293" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63a759f559 code=0x0 [ 62.225347][ T36] audit: type=1400 audit(2000000016.613:314): avc: denied { read } for pid=1339 comm="syz.2.292" path="socket:[12354]" dev="sockfs" ino=12354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.254551][ T36] audit: type=1400 audit(2000000016.613:315): avc: denied { search } for pid=1339 comm="syz.2.292" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 62.290613][ T36] audit: type=1400 audit(2000000016.613:316): avc: denied { read write } for pid=1339 comm="syz.2.292" name="set_event" dev="tracefs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 62.314888][ T36] audit: type=1400 audit(2000000016.613:317): avc: denied { open } for pid=1339 comm="syz.2.292" path="/44/trace/set_event" dev="tracefs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 62.340614][ T36] audit: type=1400 audit(2000000016.673:318): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 62.585176][ T1352] netlink: 60 bytes leftover after parsing attributes in process `syz.0.297'. [ 63.285927][ T1415] tipc: Started in network mode [ 63.290850][ T1415] tipc: Node identity , cluster identity 4711 [ 63.298940][ T1415] tipc: Failed to obtain node identity [ 63.304496][ T1415] tipc: Enabling of bearer rejected, failed to enable media [ 63.330597][ T1428] netlink: 124 bytes leftover after parsing attributes in process `syz.3.319'. [ 63.340235][ T1428] proc: Unknown parameter '7b;1' [ 63.576459][ T1437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.579795][ T1439] netlink: 17 bytes leftover after parsing attributes in process `syz.1.322'. [ 63.588429][ T1437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.601010][ T1439] netlink: 'syz.1.322': attribute type 4 has an invalid length. [ 63.616510][ T31] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 63.625978][ T1439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=1439 comm=syz.1.322 [ 63.718461][ T1448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 63.731892][ T1448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.325'. [ 63.976271][ T150] dummy0: entered promiscuous mode [ 64.181168][ T1482] netlink: 'syz.0.331': attribute type 12 has an invalid length. [ 64.545502][ T420] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 64.695492][ T420] usb 2-1: device descriptor read/64, error -71 [ 64.935525][ T420] usb 2-1: device descriptor read/64, error -71 [ 64.966526][ T1499] tmpfs: Too few inodes for current use [ 65.034145][ T1502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 65.185512][ T420] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 65.315510][ T420] usb 2-1: device descriptor read/64, error -71 [ 65.355514][ T65] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 65.505491][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 65.511908][ T65] usb 3-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 65.522441][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 65.533068][ T65] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.542298][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.550389][ T65] usb 3-1: Product: syz [ 65.554580][ T65] usb 3-1: Manufacturer: syz [ 65.559248][ T420] usb 2-1: device descriptor read/64, error -71 [ 65.565553][ T65] usb 3-1: SerialNumber: syz [ 65.675703][ T420] usb usb2-port1: attempt power cycle [ 65.773840][ T65] usb 3-1: 0:2 : does not exist [ 65.783807][ T65] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 65.795596][ T65] usb 3-1: USB disconnect, device number 20 [ 65.818222][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 66.015507][ T420] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 66.036694][ T420] usb 2-1: device descriptor read/8, error -71 [ 66.166674][ T420] usb 2-1: device descriptor read/8, error -71 [ 66.405533][ T420] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 66.435887][ T1519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.445537][ T420] usb 2-1: device descriptor read/8, error -71 [ 66.452360][ T1519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.576782][ T420] usb 2-1: device descriptor read/8, error -71 [ 66.665524][ T311] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 66.675518][ T31] usb 4-1: device descriptor read/64, error -71 [ 66.685669][ T420] usb usb2-port1: unable to enumerate USB device [ 66.816590][ T311] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 66.824808][ T311] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 66.833743][ T311] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 66.842846][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.851605][ T311] usb 3-1: config 0 descriptor?? [ 66.857875][ T311] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 66.864752][ T311] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 66.872910][ T311] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 66.936713][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.946890][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 66.955823][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.966736][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.978033][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 66.987091][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.995133][ T31] usb 4-1: Product: syz [ 66.999351][ T31] usb 4-1: Manufacturer: syz [ 67.003977][ T31] usb 4-1: SerialNumber: syz [ 67.011772][ T31] usb 4-1: Found UVC 1.00 device syz (046d:0821) [ 67.018231][ T31] usb 4-1: No streaming interface found for terminal 2. [ 67.058005][ T420] usb 3-1: USB disconnect, device number 21 [ 67.211528][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 67.211546][ T36] audit: type=1400 audit(2000000021.603:348): avc: denied { mount } for pid=1513 comm="syz.3.343" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 67.288095][ T31] usb 4-1: USB disconnect, device number 18 [ 67.339338][ T1526] kvm: pic: non byte write [ 67.343960][ T1526] kvm: pic: single mode not supported [ 67.343971][ T1526] kvm: pic: level sensitive irq not supported [ 67.349629][ T1526] kvm: pic: non byte write [ 67.360384][ T1526] kvm: pic: non byte write [ 67.571812][ T36] audit: type=1400 audit(2000000021.963:349): avc: denied { cmd } for pid=1534 comm="syz.2.349" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 67.621377][ T36] audit: type=1400 audit(2000000022.013:350): avc: denied { read } for pid=1545 comm="syz.1.353" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.647741][ T36] audit: type=1400 audit(2000000022.013:351): avc: denied { open } for pid=1545 comm="syz.1.353" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.792581][ T36] audit: type=1400 audit(2000000022.183:352): avc: denied { write } for pid=1556 comm="syz.2.357" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.885494][ T420] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 67.899926][ T36] audit: type=1400 audit(2000000022.293:353): avc: denied { setattr } for pid=1565 comm="syz.3.361" name="" dev="pipefs" ino=13453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 67.930113][ T1552] netlink: 80 bytes leftover after parsing attributes in process `syz.0.356'. [ 68.035515][ T420] usb 2-1: Using ep0 maxpacket: 16 [ 68.041990][ T420] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.052984][ T420] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.062808][ T420] usb 2-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.075768][ T420] usb 2-1: config 0 interface 0 has no altsetting 0 [ 68.082430][ T420] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 68.085614][ T31] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 68.091783][ T420] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.111055][ T420] usb 2-1: config 0 descriptor?? [ 68.247386][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 68.256053][ T1581] rust_binder: 1579:1581 transaction call to 1579:0 failed ENOSPC, code 0 size 65527-24 line process.rs:1093 [ 68.256393][ T31] usb 3-1: config 1 has an invalid interface number: 156 but max is 2 [ 68.275891][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.286013][ T31] usb 3-1: config 1 has no interface number 2 [ 68.292142][ T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 68.302983][ T31] usb 3-1: config 1 interface 1 has no altsetting 0 [ 68.311041][ T31] usb 3-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 68.320156][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.328211][ T31] usb 3-1: Product: syz [ 68.332391][ T31] usb 3-1: Manufacturer: syz [ 68.337064][ T31] usb 3-1: SerialNumber: syz [ 68.519939][ T420] wacom 0003:056A:0094.0002: unknown main item tag 0x0 [ 68.526980][ T420] wacom 0003:056A:0094.0002: unknown main item tag 0x0 [ 68.533875][ T420] wacom 0003:056A:0094.0002: unknown main item tag 0x0 [ 68.541020][ T420] wacom 0003:056A:0094.0002: unknown main item tag 0x0 [ 68.548147][ T420] wacom 0003:056A:0094.0002: unknown main item tag 0x0 [ 68.555211][ T420] wacom 0003:056A:0094.0002: Using device in hidraw-only mode [ 68.558682][ T31] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 68.565875][ T420] wacom 0003:056A:0094.0002: hidraw0: USB HID v0.81 Device [HID 056a:0094] on usb-dummy_hcd.1-1/input0 [ 68.583401][ T31] usb 3-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 68.590974][ T31] usb 3-1: 1:1 : unsupported format bits 0x7b6c0006 [ 68.598294][ T1585] udevd[1585]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 68.607736][ T31] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 68.621752][ T31] usb 3-1: selecting invalid altsetting 0 [ 68.627926][ T31] usb 3-1: selecting invalid altsetting 0 [ 68.633810][ T31] usb 3-1: unit 2 not found! [ 68.638558][ T31] usb 3-1: unit 236 not found! [ 68.647218][ T31] usb 3-1: USB disconnect, device number 22 [ 68.720635][ T1546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.729271][ T1546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.738437][ T311] usb 2-1: USB disconnect, device number 15 [ 69.032533][ T420] rust_binder: 1579: undelivered TRANSACTION_COMPLETE [ 69.044437][ T420] rust_binder: 1579: undelivered TRANSACTION_ERROR: 29201 [ 69.056100][ T1588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.065163][ T1588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.295759][ T311] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 69.336884][ T36] audit: type=1400 audit(2000000023.733:354): avc: denied { setopt } for pid=1597 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.377376][ T36] audit: type=1400 audit(2000000023.753:355): avc: denied { bind } for pid=1597 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.396664][ T36] audit: type=1400 audit(2000000023.753:356): avc: denied { name_bind } for pid=1597 comm="syz.0.368" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 69.420667][ T36] audit: type=1400 audit(2000000023.753:357): avc: denied { node_bind } for pid=1597 comm="syz.0.368" saddr=100.1.1.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 69.464845][ T311] usb 4-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 69.484215][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.494281][ T311] usb 4-1: Product: syz [ 69.500746][ T311] usb 4-1: Manufacturer: syz [ 69.508727][ T311] usb 4-1: SerialNumber: syz [ 69.721532][ T311] usb 4-1: MIDIStreaming interface descriptor not found [ 69.737150][ T311] usb 4-1: USB disconnect, device number 19 [ 69.752279][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.755651][ T476] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 69.945499][ T476] usb 2-1: Using ep0 maxpacket: 16 [ 69.957873][ T476] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 69.968256][ T476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.985504][ T476] usb 2-1: Product: syz [ 69.989709][ T476] usb 2-1: Manufacturer: syz [ 69.994371][ T476] usb 2-1: SerialNumber: syz [ 70.212495][ T476] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 70.224493][ T476] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 70.260062][ T476] usb 2-1: USB disconnect, device number 16 [ 70.277126][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.297346][ T1629] veth0: mtu less than device minimum [ 70.306644][ T1629] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 70.360177][ T1637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 70.975499][ T476] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 71.135500][ T476] usb 2-1: Using ep0 maxpacket: 16 [ 71.144448][ T476] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 71.153641][ T476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.164385][ T476] usb 2-1: Product: syz [ 71.174360][ T476] usb 2-1: Manufacturer: syz [ 71.179291][ T476] usb 2-1: SerialNumber: syz [ 71.185337][ T476] usb 2-1: config 0 descriptor?? [ 71.202512][ T476] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 71.215057][ T476] usb 2-1: Detected FT2233HP [ 71.224573][ T1683] input: syz0 as /devices/virtual/input/input7 [ 71.231001][ T1683] input: failed to attach handler leds to device input7, error: -6 [ 71.404601][ T476] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 71.411670][ T476] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 71.419133][ T476] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 71.428212][ T476] usb 2-1: USB disconnect, device number 17 [ 71.435373][ T476] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 71.446737][ T420] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 71.454591][ T476] ftdi_sio 2-1:0.0: device disconnected [ 71.535679][ T312] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 71.606791][ T420] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.617081][ T420] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 71.626362][ T420] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.637563][ T420] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 71.646659][ T420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.654660][ T420] usb 3-1: Product: syz [ 71.658866][ T420] usb 3-1: Manufacturer: syz [ 71.663482][ T420] usb 3-1: SerialNumber: syz [ 71.696641][ T312] usb 4-1: config 1 interface 0 altsetting 81 endpoint 0x3 has invalid wMaxPacketSize 0 [ 71.706559][ T312] usb 4-1: config 1 interface 0 altsetting 81 bulk endpoint 0x3 has invalid maxpacket 0 [ 71.716522][ T312] usb 4-1: config 1 interface 0 has no altsetting 0 [ 71.724742][ T312] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 71.733907][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.741961][ T312] usb 4-1: Product: syz [ 71.746232][ T312] usb 4-1: Manufacturer: syz [ 71.750877][ T312] usb 4-1: SerialNumber: syz [ 71.876254][ T420] usb 3-1: USB disconnect, device number 23 [ 71.890516][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.026904][ T312] usb 4-1: USB disconnect, device number 20 [ 72.150370][ T1721] x_tables: unsorted underflow at hook 1 [ 72.157629][ T1721] overlayfs: failed to resolve './cgroup': -2 [ 72.345523][ T420] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 72.496748][ T420] usb 2-1: config index 0 descriptor too short (expected 2075, got 27) [ 72.505161][ T420] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 72.513379][ T420] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.523668][ T420] usb 2-1: config 0 has no interface number 0 [ 72.529819][ T420] usb 2-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.542923][ T420] usb 2-1: config 0 interface 200 has no altsetting 0 [ 72.551122][ T420] usb 2-1: New USB device found, idVendor=0b57, idProduct=812a, bcdDevice=6d.39 [ 72.560302][ T420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.568456][ T420] usb 2-1: Product: syz [ 72.572640][ T420] usb 2-1: Manufacturer: syz [ 72.577353][ T420] usb 2-1: SerialNumber: syz [ 72.582769][ T420] usb 2-1: config 0 descriptor?? [ 72.625525][ T65] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 72.785548][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 72.791991][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.803085][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.812880][ T65] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 72.822070][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.831092][ T65] usb 3-1: config 0 descriptor?? [ 72.844600][ T65] hub 3-1:0.0: USB hub found [ 73.050651][ T65] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 73.452635][ T65] hid-generic 0003:046D:C31C.0003: unknown main item tag 0x0 [ 73.461528][ T65] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 73.474354][ T1737] udevd[1737]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 74.400626][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 74.400643][ T36] audit: type=1400 audit(2000000028.793:367): avc: denied { search } for pid=1770 comm="syz.3.413" name="/" dev="configfs" ino=2515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.430211][ T36] audit: type=1400 audit(2000000028.793:368): avc: denied { write } for pid=1770 comm="syz.3.413" name="usb_gadget" dev="configfs" ino=2516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.453244][ T36] audit: type=1400 audit(2000000028.793:369): avc: denied { add_name } for pid=1770 comm="syz.3.413" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.473982][ T36] audit: type=1400 audit(2000000028.793:370): avc: denied { create } for pid=1770 comm="syz.3.413" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 74.494185][ T36] audit: type=1400 audit(2000000028.833:371): avc: denied { unmount } for pid=300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 74.516092][ T312] usb 3-1: USB disconnect, device number 24 [ 74.526463][ T36] audit: type=1400 audit(2000000028.893:372): avc: denied { create } for pid=1772 comm="syz.3.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.548359][ T36] audit: type=1400 audit(2000000028.893:373): avc: denied { write } for pid=1772 comm="syz.3.414" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.097224][ T420] usbhid 2-1:0.200: couldn't find an input interrupt endpoint [ 75.125037][ T420] usb 2-1: USB disconnect, device number 18 [ 75.164586][ T1807] SELinux: failed to load policy [ 75.165367][ T36] audit: type=1400 audit(2000000029.553:374): avc: denied { load_policy } for pid=1806 comm="syz.1.421" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 75.649585][ T36] audit: type=1400 audit(2000000030.043:375): avc: denied { mounton } for pid=1834 comm="syz.3.428" path="/95/file0" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.757917][ T1838] mmap: syz.0.429 (1838): VmData 29073408 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 75.958511][ T1844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 75.968362][ T1844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1844 comm=syz.2.431 [ 76.160988][ T1863] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.436'. [ 77.145503][ T420] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 77.316710][ T420] usb 3-1: config 7 descriptor has 1 excess byte, ignoring [ 77.324143][ T420] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 77.335051][ T420] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 77.344454][ T420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.352727][ T420] usb 3-1: Product: syz [ 77.357198][ T420] usb 3-1: Manufacturer: syz [ 77.361886][ T420] usb 3-1: SerialNumber: syz [ 77.376743][ T420] rndis_host 3-1:7.0: skipping garbage [ 77.384317][ T420] usb 3-1: bad CDC descriptors [ 77.778085][ T1900] ./dev/sda1: Can't lookup blockdev [ 78.090758][ T420] usb 3-1: USB disconnect, device number 25 [ 78.105702][ T36] audit: type=1400 audit(2000000032.503:376): avc: denied { read } for pid=1905 comm="syz.2.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.175500][ T312] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 78.265365][ T1910] rust_binder: 1909:1910 error while translating object: ENOENT [ 78.273274][ T1910] rust_binder: 1909:1910 transaction call to 1909:0 failed ENOENT, code 0 size 72-24 line thread.rs:878 [ 78.325626][ T312] usb 2-1: Using ep0 maxpacket: 8 [ 78.331808][ T312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.342241][ T312] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.352809][ T312] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 78.362041][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.370119][ T312] usb 2-1: Product: syz [ 78.374299][ T312] usb 2-1: Manufacturer: syz [ 78.378932][ T312] usb 2-1: SerialNumber: syz [ 78.515509][ T311] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 78.586493][ T428] rust_binder: 1903: undelivered TRANSACTION_COMPLETE [ 78.596035][ T312] usb 2-1: USB disconnect, device number 20 [ 78.605350][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.666794][ T311] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 78.675139][ T311] usb 3-1: config 179 has no interface number 0 [ 78.681471][ T311] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 78.692722][ T311] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 78.703736][ T311] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 78.715001][ T311] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 78.726264][ T311] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 78.739573][ T311] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 78.748656][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.758031][ T1910] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.765728][ T1910] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.975948][ T311] usb 3-1: USB disconnect, device number 26 [ 78.981945][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 78.981984][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 79.008013][ T420] rust_binder: 1909: undelivered TRANSACTION_ERROR: 29201 [ 79.365541][ T420] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 79.505505][ T420] usb 2-1: device descriptor read/64, error -71 [ 79.755546][ T420] usb 2-1: device descriptor read/64, error -71 [ 79.830653][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 79.830669][ T1932] random: crng reseeded on system resumption [ 79.830671][ T36] audit: type=1400 audit(2000000034.223:378): avc: denied { write } for pid=1931 comm="syz.3.457" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 79.895542][ T36] audit: type=1400 audit(2000000034.283:379): avc: denied { ioctl } for pid=1931 comm="syz.3.457" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 79.947384][ T36] audit: type=1400 audit(2000000034.343:380): avc: denied { write } for pid=1931 comm="syz.3.457" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.973297][ T475] rust_binder: 1931: undelivered TRANSACTION_ERROR: 29189 [ 79.995495][ T420] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 80.135492][ T420] usb 2-1: device descriptor read/64, error -71 [ 80.172314][ T1956] overlay: Bad value for 'uuid' [ 80.216055][ T36] audit: type=1400 audit(2000000034.613:381): avc: denied { mounton } for pid=1961 comm="syz.3.467" path="/syzcgroup/unified/syz3" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 80.262807][ T36] audit: type=1400 audit(2000000034.653:382): avc: denied { append } for pid=1965 comm="syz.3.469" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 80.286365][ T36] audit: type=1400 audit(2000000034.653:383): avc: denied { create } for pid=1965 comm="syz.3.469" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 80.345526][ T311] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 80.362454][ T36] audit: type=1400 audit(2000000034.753:384): avc: denied { mounton } for pid=1965 comm="syz.3.469" path="/102/file0" dev="tmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 80.385703][ T420] usb 2-1: device descriptor read/64, error -71 [ 80.495602][ T420] usb usb2-port1: attempt power cycle [ 80.497304][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.514243][ T311] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 80.523588][ T311] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 80.532208][ T311] usb 3-1: Product: syz [ 80.536604][ T311] usb 3-1: Manufacturer: syz [ 80.543742][ T311] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 80.743951][ T1953] futex_wake_op: syz.2.464 tries to shift op by 144; fix this program [ 80.752952][ T311] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 80.762573][ T311] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 80.771377][ T311] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 80.780070][ T311] usb 3-1: USB disconnect, device number 27 [ 80.845524][ T312] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 80.845524][ T420] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 80.876583][ T420] usb 2-1: device descriptor read/8, error -71 [ 80.996917][ T312] usb 4-1: config 2 has an invalid interface number: 43 but max is 0 [ 81.005084][ T312] usb 4-1: config 2 has no interface number 0 [ 81.011321][ T312] usb 4-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 81.021301][ T312] usb 4-1: config 2 interface 43 altsetting 13 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 81.026948][ T420] usb 2-1: device descriptor read/8, error -71 [ 81.033254][ T312] usb 4-1: config 2 interface 43 altsetting 13 bulk endpoint 0x85 has invalid maxpacket 8 [ 81.049110][ T312] usb 4-1: config 2 interface 43 has no altsetting 0 [ 81.057301][ T312] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 81.066448][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.074451][ T312] usb 4-1: Product: syz [ 81.078681][ T312] usb 4-1: Manufacturer: syz [ 81.083323][ T312] usb 4-1: SerialNumber: syz [ 81.088948][ T1974] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 81.096332][ T1974] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 81.275534][ T420] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 81.309488][ T420] usb 2-1: device descriptor read/8, error -71 [ 81.309867][ T312] ums-usbat 4-1:2.43: USB Mass Storage device detected [ 81.323639][ T312] ums-usbat 4-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 81.348008][ T312] ums-usbat 4-1:2.43: probe with driver ums-usbat failed with error -5 [ 81.358382][ T312] usb 4-1: USB disconnect, device number 21 [ 81.446630][ T420] usb 2-1: device descriptor read/8, error -71 [ 81.474196][ T36] audit: type=1400 audit(2000000035.863:385): avc: denied { read write } for pid=1983 comm="syz.2.475" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 81.507859][ T36] audit: type=1400 audit(2000000035.863:386): avc: denied { open } for pid=1983 comm="syz.2.475" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 81.559481][ T420] usb usb2-port1: unable to enumerate USB device [ 81.926480][ T36] audit: type=1400 audit(2000000036.323:387): avc: denied { execute } for pid=2015 comm="syz.2.483" dev="tmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 81.986412][ T2025] FAULT_INJECTION: forcing a failure. [ 81.986412][ T2025] name failslab, interval 1, probability 0, space 0, times 0 [ 81.999459][ T2025] CPU: 1 UID: 0 PID: 2025 Comm: syz.3.486 Not tainted syzkaller #0 2e696f26b6bc7fd329d8b75e7f712bcc3078c616 [ 81.999495][ T2025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 81.999510][ T2025] Call Trace: [ 81.999517][ T2025] [ 81.999526][ T2025] __dump_stack+0x21/0x30 [ 81.999562][ T2025] dump_stack_lvl+0x140/0x1c0 [ 81.999594][ T2025] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.999626][ T2025] ? kasan_save_track+0x4f/0x80 [ 81.999658][ T2025] ? kasan_save_track+0x3e/0x80 [ 81.999689][ T2025] dump_stack+0x19/0x20 [ 81.999719][ T2025] should_fail_ex+0x3c2/0x510 [ 81.999740][ T2025] should_failslab+0xac/0x100 [ 81.999761][ T2025] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 81.999793][ T2025] ? __d_alloc+0x42/0x8c0 [ 81.999821][ T2025] __d_alloc+0x42/0x8c0 [ 81.999850][ T2025] d_alloc_pseudo+0x23/0xc0 [ 81.999878][ T2025] alloc_file_pseudo+0xde/0x1f0 [ 81.999902][ T2025] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 81.999929][ T2025] anon_inode_getfd+0xda/0x1d0 [ 81.999954][ T2025] do_inotify_init+0x355/0x550 [ 81.999975][ T2025] __ia32_sys_inotify_init+0x14/0x20 [ 81.999995][ T2025] x64_sys_call+0x2c08/0x2ee0 [ 82.000017][ T2025] do_syscall_64+0x57/0xf0 [ 82.000038][ T2025] ? clear_bhb_loop+0x50/0xa0 [ 82.000068][ T2025] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.000106][ T2025] RIP: 0033:0x7f63a759f559 [ 82.000123][ T2025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.000142][ T2025] RSP: 002b:00007f63a8404028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fd [ 82.000165][ T2025] RAX: ffffffffffffffda RBX: 00007f63a7826090 RCX: 00007f63a759f559 [ 82.000180][ T2025] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.000193][ T2025] RBP: 00007f63a7826090 R08: 0000000000000000 R09: 0000000000000000 [ 82.000207][ T2025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.000220][ T2025] R13: 00007f63a7826128 R14: 00007f63a7826090 R15: 00007fffa56299f8 [ 82.000239][ T2025] [ 82.296124][ T2032] netlink: 196 bytes leftover after parsing attributes in process `syz.1.488'. [ 82.361996][ T2034] zram0: detected capacity change from 0 to 8 [ 83.476741][ T2099] ./dev/sda1: Can't lookup blockdev [ 83.565522][ T420] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 83.595495][ T311] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 83.736793][ T420] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.747798][ T420] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.757616][ T420] usb 3-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 83.765551][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 83.766801][ T420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.773562][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.789966][ T311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.798964][ T311] usb 4-1: config 1 has no interface number 0 [ 83.805139][ T311] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 83.815769][ T311] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 83.824829][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.832921][ T311] usb 4-1: Product: syz [ 83.837153][ T311] usb 4-1: Manufacturer: syz [ 83.841768][ T311] usb 4-1: SerialNumber: syz [ 83.858148][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.050185][ T311] usb 4-1: USB disconnect, device number 22 [ 84.072039][ T2122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 84.082507][ T2122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.514'. [ 84.219557][ T2140] netlink: 388 bytes leftover after parsing attributes in process `syz.0.520'. [ 84.296402][ T2144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 84.305955][ T2144] PM: Enabling pm_trace changes system date and time during resume. [ 84.305955][ T2144] PM: Correct system time has to be restored manually after resume. [ 84.390874][ T2150] netlink: 220 bytes leftover after parsing attributes in process `syz.0.522'. [ 84.582758][ T2154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 84.600464][ T2156] udevd[2156]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Exec format error [ 84.915943][ T476] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 85.075515][ T476] usb 4-1: Using ep0 maxpacket: 16 [ 85.085867][ T476] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.099631][ T476] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.113622][ T476] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.124342][ T476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.133776][ T476] usb 4-1: Product: syz [ 85.138451][ T476] usb 4-1: Manufacturer: syz [ 85.143191][ T476] usb 4-1: SerialNumber: syz [ 85.143455][ T36] kauditd_printk_skb: 7175 callbacks suppressed [ 85.143497][ T36] audit: type=1400 audit(2000000039.543:7563): avc: denied { setopt } for pid=2166 comm="syz.1.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.357918][ T2159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.366586][ T2159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.377103][ T476] usb 4-1: 0:2 : does not exist [ 85.386801][ T476] usb 4-1: USB disconnect, device number 23 [ 85.396736][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.634403][ T36] audit: type=1400 audit(2000000040.023:7564): avc: denied { create } for pid=2183 comm="syz.0.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 85.686724][ T36] audit: type=1400 audit(2000000040.083:7565): avc: denied { getopt } for pid=2189 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.746646][ T36] audit: type=1400 audit(2000000040.143:7566): avc: denied { shutdown } for pid=2193 comm="syz.1.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.770323][ T36] audit: type=1326 audit(2000000040.163:7567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2193 comm="syz.1.534" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3df19f559 code=0x0 [ 85.805295][ T2196] tipc: Enabling of bearer rejected, failed to enable media [ 85.917115][ T2205] syzkaller1: entered promiscuous mode [ 85.922694][ T2205] syzkaller1: entered allmulticast mode [ 86.085776][ T2209] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 86.108605][ T2213] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 86.340088][ T420] usbhid 3-1:1.0: can't add hid device: -71 [ 86.350148][ T420] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 86.365998][ T420] usb 3-1: USB disconnect, device number 28 [ 86.620602][ T2253] FAULT_INJECTION: forcing a failure. [ 86.620602][ T2253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 86.633738][ T2253] CPU: 0 UID: 0 PID: 2253 Comm: syz.1.544 Not tainted syzkaller #0 2e696f26b6bc7fd329d8b75e7f712bcc3078c616 [ 86.633773][ T2253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 86.633784][ T2253] Call Trace: [ 86.633789][ T2253] [ 86.633795][ T2253] __dump_stack+0x21/0x30 [ 86.633823][ T2253] dump_stack_lvl+0x140/0x1c0 [ 86.633846][ T2253] ? __cfi_dump_stack_lvl+0x10/0x10 [ 86.633869][ T2253] ? stack_depot_save_flags+0x38/0x800 [ 86.633887][ T2253] dump_stack+0x19/0x20 [ 86.633909][ T2253] should_fail_ex+0x3c2/0x510 [ 86.633924][ T2253] should_fail+0xf/0x20 [ 86.633937][ T2253] should_fail_usercopy+0x1e/0x30 [ 86.633953][ T2253] _copy_to_iter+0x1a6/0x1520 [ 86.633971][ T2253] ? __kasan_check_write+0x18/0x20 [ 86.633991][ T2253] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 86.634009][ T2253] ? __cfi__copy_to_iter+0x10/0x10 [ 86.634026][ T2253] ? __check_object_size+0x54c/0x870 [ 86.634047][ T2253] ? __cfi___check_object_size+0x10/0x10 [ 86.634068][ T2253] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 86.634085][ T2253] ? __skb_try_recv_datagram+0x3e0/0x4e0 [ 86.634125][ T2253] __skb_datagram_iter+0x103/0x940 [ 86.634148][ T2253] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 86.634171][ T2253] skb_copy_datagram_iter+0x44/0x160 [ 86.634198][ T2253] netlink_recvmsg+0x2d4/0xe60 [ 86.634221][ T2253] ? __cfi_netlink_recvmsg+0x10/0x10 [ 86.634246][ T2253] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 86.634270][ T2253] ? security_socket_recvmsg+0x44/0x130 [ 86.634289][ T2253] ? __cfi_netlink_recvmsg+0x10/0x10 [ 86.634311][ T2253] sock_recvmsg+0x188/0x1e0 [ 86.634328][ T2253] __sys_recvfrom+0x241/0x3b0 [ 86.634349][ T2253] ? __cfi___sys_recvfrom+0x10/0x10 [ 86.634372][ T2253] ? is_dma_buf_file+0x11/0x50 [ 86.634392][ T2253] ? fd_install+0x246/0x400 [ 86.634415][ T2253] ? __sys_socket+0x16d/0x1c0 [ 86.634433][ T2253] __x64_sys_recvfrom+0xe9/0x100 [ 86.634454][ T2253] x64_sys_call+0x18cf/0x2ee0 [ 86.634470][ T2253] do_syscall_64+0x57/0xf0 [ 86.634487][ T2253] ? clear_bhb_loop+0x50/0xa0 [ 86.634537][ T2253] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 86.634571][ T2253] RIP: 0033:0x7ff3df15fd8e [ 86.634585][ T2253] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 86.634598][ T2253] RSP: 002b:00007ff3ddbf5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 86.634616][ T2253] RAX: ffffffffffffffda RBX: 00007ff3ddbf76c0 RCX: 00007ff3df15fd8e [ 86.634628][ T2253] RDX: 0000000000001000 RSI: 00007ff3ddbf6000 RDI: 0000000000000005 [ 86.634645][ T2253] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 86.634655][ T2253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 86.634665][ T2253] R13: 00007ff3ddbf5f58 R14: 00007ff3ddbf6000 R15: 0000000000000000 [ 86.634695][ T2253] [ 86.914412][ T420] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 87.076514][ T420] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 87.086358][ T420] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 87.096180][ T420] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 87.107765][ T420] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.116918][ T420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 87.124932][ T420] usb 3-1: Product: syz [ 87.129176][ T420] usb 3-1: Manufacturer: syz [ 87.136863][ T420] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 87.336810][ T312] usb 3-1: USB disconnect, device number 29 [ 87.890709][ T2274] netlink: 32 bytes leftover after parsing attributes in process `syz.0.552'. [ 88.116441][ T312] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 88.277532][ T312] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.295474][ T312] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 88.314768][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.333200][ T312] usb 3-1: config 0 descriptor?? [ 88.356126][ T312] usb 3-1: bad CDC descriptors [ 88.375484][ T428] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 88.555630][ T428] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.559701][ T420] usb 3-1: USB disconnect, device number 30 [ 88.582251][ T428] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.599621][ T428] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 88.618829][ T428] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 88.635466][ T428] usb 4-1: SerialNumber: syz [ 88.667633][ T36] audit: type=1400 audit(2000000043.063:7568): avc: denied { execmem } for pid=2291 comm="syz.0.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 88.851014][ T428] usb 4-1: 0:2 : does not exist [ 88.865516][ T428] usb 4-1: unit 5 not found! [ 88.894955][ T428] usb 4-1: USB disconnect, device number 24 [ 89.242050][ T36] audit: type=1400 audit(2000000043.633:7569): avc: denied { read } for pid=2308 comm="syz.0.563" name="dm0" dev="tmpfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 89.405503][ T420] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 89.555462][ T420] usb 3-1: Using ep0 maxpacket: 32 [ 89.575873][ T420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.592143][ T420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.602422][ T420] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.611662][ T420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.624791][ T420] usb 3-1: config 0 descriptor?? [ 89.643281][ T420] hub 3-1:0.0: USB hub found [ 89.839190][ T420] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 90.241347][ T420] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 90.256753][ T420] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 90.273190][ T2318] udevd[2318]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 90.721967][ T36] audit: type=1400 audit(2000000045.113:7570): avc: denied { mounton } for pid=2304 comm="syz.2.561" path="/116/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 90.765544][ T2329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'. [ 91.286341][ T45] usb 3-1: USB disconnect, device number 31 [ 92.095508][ T420] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 92.116664][ T36] audit: type=1400 audit(2000000046.513:7571): avc: denied { create } for pid=2342 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 92.137907][ T2343] netlink: 72 bytes leftover after parsing attributes in process `syz.3.571'. [ 92.155585][ T36] audit: type=1400 audit(2000000046.513:7572): avc: denied { create } for pid=2342 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 92.185496][ T36] audit: type=1400 audit(2000000046.513:7573): avc: denied { write } for pid=2342 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 92.206485][ T36] audit: type=1400 audit(2000000046.513:7574): avc: denied { nlmsg_write } for pid=2342 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 92.228027][ T36] audit: type=1400 audit(2000000046.543:7575): avc: denied { setopt } for pid=2342 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 92.248581][ T36] audit: type=1400 audit(2000000046.543:7576): avc: denied { connect } for pid=2342 comm="syz.3.571" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 92.265567][ T420] usb 3-1: Using ep0 maxpacket: 16 [ 92.269619][ T36] audit: type=1400 audit(2000000046.543:7577): avc: denied { name_connect } for pid=2342 comm="syz.3.571" dest=20002 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 92.278161][ T420] usb 3-1: config 0 has an invalid interface number: 89 but max is 1 [ 92.297321][ T36] audit: type=1326 audit(2000000046.573:7578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2344 comm="syz.3.572" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63a759f559 code=0x0 [ 92.325557][ T420] usb 3-1: config 0 has no interface number 1 [ 92.335426][ T420] usb 3-1: config 0 interface 89 altsetting 4 endpoint 0xF has an invalid bInterval 129, changing to 11 [ 92.346691][ T420] usb 3-1: config 0 interface 89 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 92.357977][ T2250] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.365068][ T420] usb 3-1: config 0 interface 0 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 92.376070][ T420] usb 3-1: config 0 interface 0 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 92.386814][ T420] usb 3-1: config 0 interface 0 altsetting 9 bulk endpoint 0x7 has invalid maxpacket 16 [ 92.396797][ T420] usb 3-1: config 0 interface 0 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 92.407937][ T420] usb 3-1: config 0 interface 0 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 92.419388][ T420] usb 3-1: config 0 interface 0 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 92.430278][ T420] usb 3-1: config 0 interface 0 altsetting 9 bulk endpoint 0x5 has invalid maxpacket 1024 [ 92.440632][ T420] usb 3-1: config 0 interface 89 has no altsetting 0 [ 92.447548][ T420] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.455651][ T420] usb 3-1: New USB device found, idVendor=1066, idProduct=0700, bcdDevice=1a.6e [ 92.464947][ T420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.485471][ T420] usb 3-1: Product: syz [ 92.489680][ T420] usb 3-1: Manufacturer: 刄扶桦辇꤈䵩箸٦쏆쓅톑⡩䊰⡍㥋席ﰟ⍀볎捐ꁉ鹍낐⮲꫕傛박櫗砅ញ淴⤋廴샫ꐽ䂭楊麋조翀锵ﷹᔎᓷ₏ᐗ㏩蟁䘠빾䃇䌚淈ᖊ㘺汖뻦兜⥿숩鵴규逦ꋏ쨢ྻ䆍怱쨌줓ꝥ햋질쏷ᵡ籮꩹⇡Ꞅ䪝牞왬៴㳐䳞◧统 [ 92.519358][ T420] usb 3-1: SerialNumber: syz [ 92.525810][ T420] usb 3-1: config 0 descriptor?? [ 92.738596][ T420] usb 3-1: USB disconnect, device number 32 [ 93.605793][ T2359] netlink: 'syz.2.577': attribute type 10 has an invalid length. [ 94.005494][ T475] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 94.156246][ T475] usb 3-1: not running at top speed; connect to a high speed hub [ 94.175867][ T475] usb 3-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 94.184613][ T475] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.205539][ T475] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 94.214730][ T475] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 94.224077][ T475] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.235721][ T475] usb 3-1: config 0 descriptor?? [ 94.246240][ T475] usb 3-1: Found UVC 9.00 device (046d:0825) [ 94.405555][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 94.406097][ T603] Bluetooth: hci0: command 0x1003 tx timeout [ 94.420785][ T2346] can0: slcan on ptm0. [ 94.642675][ T475] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 94.665880][ T475] uvcvideo 3-1:0.1: Failed to query (129) UVC probe control : 0 (exp. 48). [ 94.674549][ T475] uvcvideo 3-1:0.1: Failed to initialize the device (-5). [ 94.884029][ T45] usb 3-1: USB disconnect, device number 33 [ 95.409913][ T2389] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 95.475706][ T2344] can0 (unregistered): slcan off ptm0. [ 96.335481][ T475] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 96.370337][ T2473] batadv_slave_1: entered promiscuous mode [ 96.378389][ T2472] batadv_slave_1: left promiscuous mode [ 96.399823][ T36] audit: type=1400 audit(2000000050.793:7579): avc: denied { create } for pid=2477 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.462131][ T2478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2478 comm=syz.2.594 [ 96.478183][ T36] audit: type=1400 audit(2000000050.873:7580): avc: denied { cmd } for pid=2477 comm="syz.2.594" path="socket:[19727]" dev="sockfs" ino=19727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.505475][ T475] usb 4-1: Using ep0 maxpacket: 8 [ 96.516193][ T475] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 96.524358][ T475] usb 4-1: config 0 has no interface number 0 [ 96.536906][ T475] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 96.546037][ T475] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.554051][ T475] usb 4-1: Product: syz [ 96.565688][ T475] usb 4-1: Manufacturer: syz [ 96.570387][ T475] usb 4-1: SerialNumber: syz [ 96.576600][ T475] usb 4-1: config 0 descriptor?? [ 96.782918][ T475] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 96.789964][ T475] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 96.806396][ T475] usb 4-1: USB disconnect, device number 25 [ 97.107047][ T2482] fuseblk: Unknown parameter 'goup_il' [ 97.335632][ T2486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 97.367280][ T428] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 97.456544][ T2492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 97.545500][ T428] usb 3-1: device descriptor read/64, error -71 [ 97.609692][ T2501] netlink: 'syz.3.599': attribute type 12 has an invalid length. [ 97.764066][ T36] audit: type=1400 audit(2000000052.153:7581): avc: denied { listen } for pid=2502 comm="syz.3.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.795493][ T428] usb 3-1: device descriptor read/64, error -71 [ 98.035491][ T428] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 98.165922][ T428] usb 3-1: device descriptor read/64, error -71 [ 98.415494][ T428] usb 3-1: device descriptor read/64, error -71 [ 98.535589][ T428] usb usb3-port1: attempt power cycle [ 98.614393][ T2507] syzkaller1: entered promiscuous mode [ 98.620040][ T2507] syzkaller1: entered allmulticast mode [ 98.688602][ T2511] netlink: 44 bytes leftover after parsing attributes in process `syz.3.602'. [ 98.706698][ T36] audit: type=1400 audit(2000000053.103:7582): avc: denied { setcheckreqprot } for pid=2508 comm="syz.3.602" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 98.734972][ T36] audit: type=1326 audit(2000000053.123:7583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2425 comm="syz.0.588" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bced9f559 code=0x7fc00000 [ 98.763383][ T2515] netlink: 216 bytes leftover after parsing attributes in process `syz.0.603'. [ 98.772617][ T2515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.603'. [ 98.813700][ T2519] veth0_to_bridge: entered allmulticast mode [ 98.821211][ T2519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'. [ 98.832746][ T2520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'. [ 98.887469][ T428] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 98.916624][ T428] usb 3-1: device descriptor read/8, error -71 [ 98.926750][ T2518] veth0_to_bridge: left allmulticast mode [ 98.989510][ T2529] netlink: 'syz.3.608': attribute type 27 has an invalid length. [ 99.025934][ T2529] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.033197][ T2529] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.057096][ T428] usb 3-1: device descriptor read/8, error -71 [ 99.305479][ T428] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 99.336487][ T428] usb 3-1: device descriptor read/8, error -71 [ 99.476456][ T428] usb 3-1: device descriptor read/8, error -71 [ 99.585670][ T428] usb usb3-port1: unable to enumerate USB device [ 100.304178][ T2619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6202 sclass=netlink_route_socket pid=2619 comm=syz.0.615 [ 100.545487][ T428] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 100.663633][ T36] audit: type=1400 audit(2000000055.053:7584): avc: denied { append } for pid=2620 comm="syz.3.616" name="uprobe_events" dev="tracefs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 100.687291][ T428] usb 3-1: device descriptor read/64, error -71 [ 100.694350][ T2621] futex_wake_op: syz.3.616 tries to shift op by 144; fix this program [ 100.728403][ T2623] sysfs: Unknown parameter 'nl80211' [ 100.730728][ T36] audit: type=1400 audit(2000000055.123:7585): avc: denied { mounton } for pid=2622 comm="syz.3.617" path="/syzcgroup/cpu/syz3/memory.force_empty" dev="cgroup" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 100.759396][ T36] audit: type=1400 audit(2000000055.123:7586): avc: denied { map } for pid=2622 comm="syz.3.617" path="socket:[19134]" dev="sockfs" ino=19134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 100.783151][ T36] audit: type=1400 audit(2000000055.123:7587): avc: denied { accept } for pid=2622 comm="syz.3.617" path="socket:[19134]" dev="sockfs" ino=19134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 100.807436][ T36] audit: type=1400 audit(2000000055.203:7588): avc: denied { connect } for pid=2622 comm="syz.3.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.827662][ T2239] tipc: Subscription rejected, illegal request [ 100.965496][ T428] usb 3-1: device descriptor read/64, error -71 [ 101.215500][ T428] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 101.345485][ T428] usb 3-1: device descriptor read/64, error -71 [ 101.498967][ T2631] overlayfs: conflicting options: userxattr,verity=on [ 101.585475][ T428] usb 3-1: device descriptor read/64, error -71 [ 101.715627][ T428] usb usb3-port1: attempt power cycle [ 101.875496][ T420] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 102.035329][ T420] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.050540][ T420] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 102.062589][ T420] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 102.065563][ T428] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 102.073956][ T420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.087584][ T420] usb 4-1: Product: syz [ 102.091774][ T420] usb 4-1: Manufacturer: syz [ 102.096423][ T420] usb 4-1: SerialNumber: syz [ 102.106686][ T428] usb 3-1: device descriptor read/8, error -71 [ 102.236562][ T428] usb 3-1: device descriptor read/8, error -71 [ 102.310579][ T420] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 102.475526][ T428] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 102.496611][ T428] usb 3-1: device descriptor read/8, error -71 [ 102.510608][ T36] audit: type=1400 audit(2000000056.903:7589): avc: denied { read write } for pid=2636 comm="syz.3.622" name="lp0" dev="devtmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 102.534334][ T36] audit: type=1400 audit(2000000056.903:7590): avc: denied { open } for pid=2636 comm="syz.3.622" path="/dev/usb/lp0" dev="devtmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 102.637075][ T428] usb 3-1: device descriptor read/8, error -71 [ 102.739123][ T2645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.744072][ T2648] overlay: filesystem on ./bus not supported as upperdir [ 102.752061][ T2645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.765577][ T428] usb usb3-port1: unable to enumerate USB device [ 102.896971][ T2239] bridge_slave_1: left allmulticast mode [ 102.902635][ T2239] bridge_slave_1: left promiscuous mode [ 102.908295][ T2239] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.915896][ T2239] bridge_slave_0: left allmulticast mode [ 102.921583][ T2239] bridge_slave_0: left promiscuous mode [ 102.927319][ T2239] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.028412][ T2239] veth1_macvtap: left promiscuous mode [ 103.033956][ T2239] veth0_vlan: left promiscuous mode [ 103.835499][ T475] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 103.985484][ T475] usb 3-1: Using ep0 maxpacket: 16 [ 103.991989][ T475] usb 3-1: config 0 has an invalid descriptor of length 119, skipping remainder of the config [ 104.002478][ T475] usb 3-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.015694][ T475] usb 3-1: config 0 interface 0 has no altsetting 0 [ 104.022326][ T475] usb 3-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 104.031403][ T475] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.040105][ T475] usb 3-1: config 0 descriptor?? [ 104.284213][ T475] usb 3-1: string descriptor 0 read error: -71 [ 104.292228][ T475] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 104.300401][ T475] usb 3-1: USB disconnect, device number 42 [ 104.686831][ T428] usb 4-1: USB disconnect, device number 26 [ 104.696272][ T428] usblp0: removed [ 104.907278][ T2661] overlayfs: cannot append lower layer [ 104.914322][ T36] audit: type=1400 audit(2000000059.303:7591): avc: denied { map } for pid=2657 comm="syz.2.626" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 104.920152][ T2661] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 104.958894][ T36] audit: type=1400 audit(2000000059.353:7592): avc: denied { read write } for pid=2657 comm="syz.2.626" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.982973][ T36] audit: type=1400 audit(2000000059.353:7593): avc: denied { open } for pid=2657 comm="syz.2.626" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.705780][ T36] audit: type=1400 audit(2000000060.103:7594): avc: denied { write } for pid=2703 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.734354][ T36] audit: type=1400 audit(2000000060.103:7595): avc: denied { nlmsg_write } for pid=2703 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.755180][ T36] audit: type=1400 audit(2000000060.123:7596): avc: denied { ioctl } for pid=2705 comm="syz.2.629" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.756238][ T312] rust_binder: 2659: undelivered TRANSACTION_COMPLETE [ 105.965629][ T475] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 106.095517][ T475] usb 3-1: device descriptor read/64, error -71 [ 106.335538][ T475] usb 3-1: device descriptor read/64, error -71 [ 106.575529][ T475] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 106.609449][ T36] audit: type=1400 audit(2000000061.003:7597): avc: denied { read } for pid=2709 comm="syz.3.631" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 106.633316][ T36] audit: type=1400 audit(2000000061.003:7598): avc: denied { open } for pid=2709 comm="syz.3.631" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 106.715586][ T475] usb 3-1: device descriptor read/64, error -71 [ 106.955541][ T475] usb 3-1: device descriptor read/64, error -71 [ 107.065620][ T475] usb usb3-port1: attempt power cycle [ 107.405533][ T475] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 107.426551][ T475] usb 3-1: device descriptor read/8, error -71 [ 107.556532][ T475] usb 3-1: device descriptor read/8, error -71 [ 107.612239][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 107.612256][ T36] audit: type=1400 audit(2000000062.003:7602): avc: denied { create } for pid=2727 comm="syz.3.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 107.795499][ T475] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 107.816616][ T475] usb 3-1: device descriptor read/8, error -71 [ 107.946548][ T475] usb 3-1: device descriptor read/8, error -71 [ 108.055610][ T475] usb usb3-port1: unable to enumerate USB device [ 108.719650][ T36] audit: type=1400 audit(2000000063.113:7603): avc: denied { getopt } for pid=2735 comm="syz.0.634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.832187][ T2738] X.509: Couldn't decode AuthKeyIdentifier [ 111.226200][ T2752] SELinux: Context is not valid (left unmapped). [ 111.233342][ T36] audit: type=1400 audit(2000000065.623:7604): avc: denied { create } for pid=2751 comm="syz.3.641" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CF [ 111.255607][ T2752] overlayfs: workdir and upperdir must be separate subtrees [ 111.259743][ T36] audit: type=1400 audit(2000000065.623:7605): avc: denied { associate } for pid=2751 comm="syz.3.641" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=CF [ 111.265027][ T2755] ./dev/sda1: Can't lookup blockdev [ 111.286461][ T36] audit: type=1400 audit(2000000065.643:7606): avc: denied { mounton } for pid=2751 comm="syz.3.641" path="/143/file0" dev="tmpfs" ino=801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CF [ 111.525542][ T428] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 111.676996][ T428] usb 4-1: unable to get BOS descriptor or descriptor too short [ 111.685343][ T428] usb 4-1: config index 0 descriptor too short (expected 40744, got 96) [ 111.693755][ T428] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.703922][ T428] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 111.713038][ T428] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 111.723869][ T428] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 111.735395][ T428] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 111.746263][ T428] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.755944][ T428] usb 4-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 111.770282][ T428] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 111.779378][ T428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.787403][ T428] usb 4-1: Product: syz [ 111.791564][ T428] usb 4-1: Manufacturer: syz [ 111.796213][ T428] usb 4-1: SerialNumber: syz [ 112.003240][ T2759] overlayfs: workdir and upperdir must be separate subtrees [ 112.005071][ T2752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.019145][ T2752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.031177][ T428] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 112.041287][ T428] usb 4-1: USB disconnect, device number 27 [ 112.052143][ T376] udevd[376]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 112.534448][ T36] audit: type=1400 audit(2000000066.923:7607): avc: denied { rmdir } for pid=300 comm="syz-executor" name="file0" dev="tmpfs" ino=801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CF [ 112.642660][ T2764] netlink: 140 bytes leftover after parsing attributes in process `syz.3.644'. [ 112.705490][ T36] audit: type=1326 audit(2000000067.093:7608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2762 comm="syz.3.644" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63a759f559 code=0x0 [ 112.730260][ T36] audit: type=1400 audit(2000000067.103:7609): avc: denied { setattr } for pid=2762 comm="syz.3.644" name="NETLINK" dev="sockfs" ino=20583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.770667][ T2794] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 117.464989][ T36] audit: type=1400 audit(2000000071.853:7610): avc: denied { sqpoll } for pid=2798 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 119.268703][ T428] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 119.278871][ T36] audit: type=1400 audit(2000000073.673:7611): avc: denied { map } for pid=2808 comm="syz.2.655" path="socket:[20428]" dev="sockfs" ino=20428 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 119.303074][ T428] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.317080][ T2818] udevd[2818]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 121.171959][ T36] audit: type=1400 audit(2000000075.563:7612): avc: denied { setattr } for pid=2824 comm="syz.2.658" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 SYZFAIL: repeatedly failed to execute the program proc=4 req=623 state=1 status=11 (errno 9: Bad file descriptor) [ 123.184082][ T36] audit: type=1400 audit(2000000077.573:7613): avc: denied { write } for pid=287 comm="syz-executor" path="pipe:[1520]" dev="pipefs" ino=1520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 123.242111][ T36] audit: type=1400 audit(2000000077.593:7614): avc: denied { nlmsg_read } for pid=2837 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.272746][ T36] audit: type=1400 audit(2000000077.633:7615): avc: denied { compute_member } for pid=2834 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 123.425537][ T2696] bridge_slave_1: left allmulticast mode [ 123.431243][ T2696] bridge_slave_1: left promiscuous mode [ 123.437398][ T2696] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.445036][ T2696] bridge_slave_0: left allmulticast mode [ 123.450721][ T2696] bridge_slave_0: left promiscuous mode [ 123.456432][ T2696] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.637742][ T2696] veth1_macvtap: left promiscuous mode [ 123.643281][ T2696] veth0_vlan: left promiscuous mode [ 123.966643][ T2696] bridge_slave_1: left allmulticast mode [ 123.972661][ T2696] bridge_slave_1: left promiscuous mode [ 123.978328][ T2696] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.985886][ T2696] bridge_slave_0: left allmulticast mode [ 123.991527][ T2696] bridge_slave_0: left promiscuous mode [ 123.997188][ T2696] bridge0: port 1(bridge_slave_0) entered disabled state