last executing test programs: 3.604045343s ago: executing program 0 (id=205): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) syz_usb_disconnect(r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x20, 0x1e, 0x21, 0x0, 0x25dfdbfc, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x9}]}, 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, &(0x7f0000000100), 0x10) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) 1.528474721s ago: executing program 3 (id=227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) r2 = socket(0x1, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x40044}}], 0x1, 0x4) r3 = syz_ublk_setup_io_uring(0x13fe, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x4}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_pidfd_open(0x0, 0x0) epoll_create(0x3) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000480)={0x2e, 0x55, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xa1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x4a, &(0x7f00000000c0)=@new_dev={0x3, 0x58e, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x5d}}}, &(0x7f00000001c0)=0x0) socket$key(0xf, 0x3, 0x2) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x1460, 0x8, 0xffffffff, 0x2ca}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200f0b2, 0x4000, 0x0, 0x298, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ef, 0x8, 0x9, 0x2000008, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x800, 0x2, 0x2af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x100, 0x2, 0x21b, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x803, 0x48b, 0x0, 0x0}}, 0x0) 1.362112087s ago: executing program 0 (id=228): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)}, 0x4000080) ftruncate(r0, 0x8008976) ioctl$KVM_GET_REGS(r0, 0x8090ae81, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000340)=0x0) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x90020, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0x1}}, {}, {@uid={'uid', 0x3d, r2}}, {@gid}, {@mode={'mode', 0x3d, 0x81}}, {@uid={'uid', 0x3d, 0xee01}}], [{@appraise}, {@flag='ro'}, {@pcr={'pcr', 0x3d, 0x22}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) pipe(0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000001) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) 1.320357597s ago: executing program 3 (id=229): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000200)=0x0) (async, rerun: 64) r2 = eventfd(0xa0) (rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async, rerun: 64) r5 = dup3(r4, r3, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) (async) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0xfff, r0, &(0x7f0000000300)="7a4719c217dc46bf687ace611e816685c024fba623a8a07a1229fde338c29e995401d09569cd680340071a94dce029e13e585fd99162ac59c27699947833277b6ce56c1cc0c21c9630623734a33615196f96a870868965865eaf69ce1706270771ac8e7328bce3348fa5e32edf4f414d7c82e75acb4d766c482c28b645c2f0c5a1b0f47491c6b23d6180d6bed1", 0x8d, 0x9, 0x0, 0x2, r2}]) (async, rerun: 32) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) recvfrom(r6, 0x0, 0x0, 0x40002020, 0x0, 0x0) (async, rerun: 32) r7 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) (rerun: 32) keyctl$revoke(0x3, r7) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async, rerun: 64) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (rerun: 64) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000e40)={'syztnl0\x00', &(0x7f0000000dc0)={'ip_vti0\x00', 0x0, 0x20, 0x7, 0xb, 0xf, {{0x17, 0x4, 0x0, 0x8, 0x5c, 0x65, 0x0, 0x4, 0x4, 0x0, @empty, @empty, {[@end, @timestamp={0x44, 0x18, 0xfa, 0x0, 0x4, [0x2, 0x80000000, 0xf418, 0x6, 0x3ff]}, @lsrr={0x83, 0xb, 0x1b, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2c}]}, @rr={0x7, 0x23, 0x2e, [@loopback, @multicast1, @rand_addr=0x64010100, @loopback, @local, @multicast1, @private=0xa010102, @private=0xa010100]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000f40)={'gretap0\x00', &(0x7f0000000e80)={'erspan0\x00', 0x0, 0x10, 0x20, 0xb, 0x6, {{0x28, 0x4, 0x1, 0x0, 0xa0, 0x66, 0x225, 0xf, 0x2f, 0x0, @remote, @multicast2, {[@end, @end, @timestamp_addr={0x44, 0x4c, 0xf, 0x1, 0x5, [{@multicast2, 0x1}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@broadcast, 0x1000}, {@remote, 0xb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@empty, 0x3}, {@rand_addr=0x64010100, 0xc00000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @lsrr={0x83, 0x1f, 0xa3, [@private=0xa010102, @broadcast, @rand_addr=0x64010102, @remote, @remote, @private=0xa010102, @private=0xa010102]}, @rr={0x7, 0x7, 0xd6, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x14, 0x81, 0x1, 0x1, [{@local}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x5}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmmsg$inet(r8, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000840)="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", 0x173}, {&(0x7f00000003c0)="641a6a2b", 0x4}], 0x3}}, {{0x0, 0x0, &(0x7f0000000800)}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000700)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}]}}, {{0x0, 0x0, &(0x7f0000000d80), 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x56d}}, @ip_pktinfo={{0x1a, 0x0, 0x8, {r9, @multicast2, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}}}}], 0x90}}, {{&(0x7f0000001180)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001380)}}, {{&(0x7f00000013c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001400)="a5c128211943fce4", 0x8}, {&(0x7f0000001440)="17e116f7f3fba9e6bb9cc2f22301fe75c8af316acf6b8b8accc21c480829fe40b12a11f8f2801d0e7ba1c0f871fc722f1d79ce26d84e5bec27623212d0506bcf9355dc2c54e6108346f67898a646fc7c033946d3e2518289937c86aed17ecbe9655f5dcaca0372476652e74b09a4ceaf3ba10a59ae6686", 0x77}, {&(0x7f00000014c0)="b4e2f85d12f1f66ef8fd71b87ce4587f7607db6e624feebc931570cd143d08fef28b433c18ec175a59ec8779a57b0a9123768d26b4f6513bcd819bc80a2b8dfec67064eaa84c3aba57e5c2babeb3d3a788d8a473262f9ff830e6c44b826743b6042edcbeb0ef66e940ce948761f69cd4776d7d2befece4bc2ef3083bac28304d5a5c8558a6999b420fab68293805354a00d372869b1ff15c1d1362854a136f9182a69923eb744474ab2b56bd26e9bb68f98b8b99ef3370831ab2b15bc3cd2fe7fd76cb8428dd0f79733573ca8fc7cb3253ee3b8e9f47137867c493a1a4c7952c65831fb0", 0xe4}, {&(0x7f0000001740)="ccb40f147dfec5be6765b8da4a4c1517a9550f689d12ea3b9c86f65b0be9310cc856117c4ba692387ffbea2ebd811e3f4d2a3a0ad6c9c7bf1c33e44bc39d947399fe85b68c8ce15205d54cf995489af504bf2f489d8f20129c4cd3d9899119a7a66cfa9741bf7d0df454d9a47db2c3542d4a5e2c643b13c1a90fdd6d1ffd597ef171ec39d418d64af8896a2b1facd96b96a70516e10c7407e489cb688e8df129aca783fc92ef9b2074f99bd55a759671b40000b0b0432976f9666523f0596708daba021ad988", 0xc6}, {&(0x7f0000001840)="829fce7f0d454c78298350895c33", 0xe}], 0x5, &(0x7f00000019c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x3b}}}}], 0x20}}, {{&(0x7f0000001a00)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000001a40)="6063581e88841d251d61f836837ba007ca88dbb06de2d98afe3f29a2488f86ab8d8bfc95f8f2ce3a07aadbee2f60d837cef56a92cc3a9a8c15731b797e201a590fbe38b5da2b4840a1cdba6ce0d739161f5ed9b4a7cac57eaef953cf8932bae5f573f9e85577a838cdbab1ff1a601d027662c2d74d36b66fa9324c2bbc17a948949337b1eb4bd0", 0x87}], 0x1}}, {{&(0x7f0000001b40)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000001b80)="7fbc5c17062a5b16f21c85df2cf72e424c07be7c99e6e45d857da7b050c99ac2bb6e6417d1ffd10bd8491ff96038c1", 0x2f}], 0x1, &(0x7f0000001c00)=ANY=[@ANYBLOB="4400000000000000000000000700000000442493a024cf8e42000000070000000001000007ff0000000000000081440c4c91ac1e0001000007ff000000000000001c00000000000000000000000800"/88, @ANYRES32=r9, @ANYBLOB="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"], 0x190}}, {{&(0x7f0000000240)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000000a40)="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", 0x140}], 0x1, &(0x7f00000005c0)=[@ip_tos_int={{0x0, 0x0, 0x1, 0xe2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xf}}}}], 0x38}}], 0x9, 0x2090) (async) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) (async) sendto$inet(r8, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r11, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028bd7000ffdbdf25080000000c0002800400038004f5ffe9180001801400020073797a5f74756e000000000000000000"], 0x38}}, 0x10004000) (async, rerun: 32) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) 1.305900378s ago: executing program 0 (id=230): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00b3f0ffffffffffffaaaaaaaaaaaa86dd694d48cd00103c0cd40b0000000000000000000000000001ff020000000000000000000000000001"], 0x4a) 1.226110331s ago: executing program 0 (id=231): munmap(&(0x7f0000ff0000/0xf000)=nil, 0xf000) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0xff03, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @private=0xa010100, 0x0, 0xffffff00, 0x4, 0x7, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@random="1e1106f2008e", {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x8, 0xd, 0x8, 0xe8, 0x6, 'batadv_slave_0\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0xe0}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2e0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1002, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r0 = syz_usb_connect$uac1(0x7c082264f27f1fe8, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) write$cgroup_subtree(r1, &(0x7f0000000f40)=ANY=[@ANYRES16=r0], 0xfdef) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000240)={r4, &(0x7f0000000e40)='#\xcf\x8d\x032\xa3\xda\'\xf3\xe4tJbrid\'e_sla\"`\xdb\xef\x00\x7f\x8e\x98\x9d+\x89?\xb5\xb5\xaa\x0f\xafL\x8c\xf6\x109\xee\xd3;t\x83\x1ev\xee\x9f?\xc9%>_\xd2\xc9\xa6\xb7\xb3\xb6|\t]\f', 0x12800, &(0x7f0000000040)={@align=0xd11, {0x4, 0x3, 0x0, 0x2}}, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x45}) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r5, 0x8010aebc, &(0x7f0000000280)={0x3000, 0x105000}) munmap(&(0x7f0000ff3000/0x4000)=nil, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000009480)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38, 0xa, [0xffffffff, 0xf4f, 0xcb, 0x1c0000, 0x7, 0x9, 0x5, 0x2, 0x9, 0x6]}}) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="00c5", 0x2}], 0x1, 0x8) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03"]) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.net/syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_type(r10, &(0x7f00000001c0), 0x9) recvmmsg(r5, &(0x7f0000000d40)=[{{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000740)=[{&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/185, 0xb9}, {&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f0000000600)=""/204, 0xcc}, {&(0x7f0000000700)=""/41, 0x29}], 0x6, &(0x7f00000007c0)=""/136, 0x88}, 0x1ff}, {{&(0x7f0000000bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000900)=""/222, 0xde}, {&(0x7f0000000a00)=""/55, 0x37}, {&(0x7f0000000a40)=""/39, 0x27}], 0x3, &(0x7f0000000ac0)=""/225, 0xe1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ec0)=""/92, 0x5c}, {&(0x7f0000000c40)=""/175, 0xaf}], 0x2}, 0x3}], 0x3, 0x2, &(0x7f0000000e00)) mmap$binder(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x100000000) 1.120115614s ago: executing program 3 (id=232): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xcdb, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x64}, 0x1, 0x0, 0x0, 0x8000000}, 0x1) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=T,']) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 824.090324ms ago: executing program 1 (id=235): mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r2, r2) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 823.917624ms ago: executing program 1 (id=236): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0xfffffffb, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000200000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) 823.570444ms ago: executing program 1 (id=237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) r2 = socket(0x1, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x40044}}], 0x1, 0x4) r3 = getpid() syz_pidfd_open(r3, 0x0) epoll_create(0x3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2e, 0x55, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xa1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x4a, &(0x7f00000000c0)=@new_dev={0x3, 0x58e, 0x0, 0x0, 0x1000, 0xffffffff, r3, 0x0, 0x5d}}}, &(0x7f00000001c0)=0x0) socket$key(0xf, 0x3, 0x2) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r5, &(0x7f0000000200)={0x0, 0x1460, 0x8, 0xffffffff, 0x2ca}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200f0b2, 0x4000, 0x0, 0x298}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ef, 0x8, 0x9, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x800, 0x2, 0x2af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x100, 0x2, 0x21b}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x803, 0x48b, 0x0, 0x0}}, 0x0) 819.651264ms ago: executing program 1 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)}, 0x4000080) ftruncate(r0, 0x8008976) ioctl$KVM_GET_REGS(r0, 0x8090ae81, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000340)=0x0) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x90020, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0x1}}, {}, {@uid={'uid', 0x3d, r2}}, {@gid}, {@mode={'mode', 0x3d, 0x81}}, {@uid={'uid', 0x3d, 0xee01}}], [{@appraise}, {@flag='ro'}, {@pcr={'pcr', 0x3d, 0x22}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r6, 0x0, 0x200002e6) fcntl$setpipe(r5, 0x407, 0x7000001) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) 786.242355ms ago: executing program 1 (id=239): connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00b3f0ffffffffffffaaaaaaaaaaaa86dd694d48cd00103c0cd40b0000000000000000000000000001ff020000000000000000000000000001"], 0x4a) 740.311927ms ago: executing program 1 (id=240): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x40000, 0x2, 0x0, 0xfffffff9}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141082, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000500)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x10000c, 0x4, 0x5, 0xd, 0x8, 0x7, 0x4, 0xd0, 0x101, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000180)={0x40, 0x1, 0xa, {0xfffffffffffffcc1, 0x9, "1fb3cf2f09d43267"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r4, &(0x7f0000000080)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x11}, 0x18) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r6, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 555.685253ms ago: executing program 0 (id=241): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = dup(r0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x48, 0x4) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201100100000008ec130600400001020301090224000101fb402609040002040301030009219917780122b10f09058103"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$cdc_ecm(0x3, 0x65, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0x0, 0x20, 0xb1, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x7, 0x24, 0x6, 0x0, 0x0, "13e7"}, {0x5, 0x24, 0x0, 0x2c1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x6, 0x7}, [@ncm={0x6, 0x24, 0x1a, 0x5, 0x3c}, @dmm={0x7, 0x24, 0x14, 0xffc0, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf, 0x9, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x7, 0xac}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x7, 0x81, 0x5}}}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0x7, 0x4, 0x7, 0x8, 0x2}, 0x2d, &(0x7f0000000340)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "cb06849ee22699ddd6e31e5551a90cce"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "ea8edf0cc90509c67d7bd20b9926f2bf"}]}, 0x6, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xfcff}}, {0xd5, &(0x7f0000000480)=@string={0xd5, 0x3, "a8e9b447e4b5cc254085c2be07e9f17f01fc11999bc050e8a7180eac8946a1b2ddc4cf9c0fecb8dd5d84c15378200d8bfa615ff03c50c158d5afb50bf9bcf18ca2c99625c2be5503487b16cf84ab7c3003565089292496019b483000752c7c7008dacf1deb90483f3f18d56e46f9726ccef426237bbe9c3daa677a79a7fda3d23ce0dc11b0564ca06e07d49796b9d8e59713844f41b73dbec103769004555f97e20bff7363be89f645cea1115ad380909f02c2e1fe76627da956f74ea899c6ab5d5c0cc1b9db9df92e93fa0bcb2f0460134574"}}, {0x3d, &(0x7f0000000580)=@string={0x3d, 0x3, "bcbd424ed1c0e2cf86973eecbac76253324c541ab918dd8cd849c75d9761cb27408e4694977ebd224eb8cb5b338948781e57951c76d45ff7619354"}}, {0x98, &(0x7f00000005c0)=@string={0x98, 0x3, "0321a3b76804eb3b67c5b44f10618613bb3a1714bccdf47b36c588e951cc3a0cbef76fc967dc922baef141b8b97a442bb491aab215daa5c62b111d6be814dc3e51d7ddd421796b89f09f4f9d8f6fd28879377d7e1e359c62ac3d2077ef6cfd2ac1d9acaaa3c94aa103cd1b390a603f4f615d98b8dd92d6e8efeb724d35879f4f6c974956b41631a880fbb718ce3664ecc6b6c2ea6d78"}}, {0x4c, &(0x7f0000000680)=@string={0x4c, 0x3, "c213284e7cb70c1f6d87155e8b0f1856ae0a952d8fbdcd8899374cc02bccc945c9c1ac6ff41ae0d086d5acb2eb8d36790f754693c5ed872a394a9a165eeb09f39f3c1187d34145b24f6e"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x810}}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x49, &(0x7f0000001040)=0x40, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x14, 0x28, 0xffffffff, 0xfffd, 0xa, 0x9, 0x10, 0x6, 0x2, 0x40, 0x1, 0x9, 0x9, 0xd, 0xff, 0xfffffffd, [0x3, 0x3]}}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='#].*/\')/&\xb4\x00', 0x490801, &(0x7f0000000040)={@align=0x3, {0x4, 0x6, 0x8, 0x80000000}}, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x3}) read$char_usb(r5, &(0x7f0000000200)=""/35, 0x23) syz_usb_connect$midi(0x4, 0xc7, &(0x7f00000007c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x582, 0x12f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0x1, 0x6, 0x20, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x20, 0x7d, [@midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x8, 0x1, [{0xb, 0xe7}], 0xff}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0x1}], [{{0x9, 0x5, 0xc, 0xc, 0x400, 0x40, 0x78, 0x24, {0xd, 0x25, 0x1, 0x9, "ae832c24cbb1544503"}}}, {{0x9, 0x5, 0x86, 0x0, 0x40, 0x6, 0x4, 0x0, {0x4}}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x0, 0x44, 0x9, {0x10, 0x25, 0x1, 0xc, "1efc0ba9daf61f0e4ddefbef"}}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0x9, 0x0, 0x7, {0xe, 0x25, 0x1, 0xa, "cda1e2560d23efcf55e8"}}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x4, 0x7f, 0x6, {0x8, 0x25, 0x1, 0x4, "eb5c643c"}}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x6, 0x0, 0x2, {0xd, 0x25, 0x1, 0x9, "e7d443581991585c55"}}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xc3, 0x6, 0x6, {0x11, 0x25, 0x1, 0xd, "3b514a4ce4f313b4b99ca0d5b9"}}}]}}}}}]}}, &(0x7f0000001080)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x300, 0x79, 0x1, 0x7, 0xff, 0x2}, 0xec, &(0x7f0000000900)={0x5, 0xf, 0xec, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "ba37d44e6d14500fedb238b376d56db3"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x0, 0x2, 0x9, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x3}, @generic={0xaa, 0x10, 0xa, "ac41bfd9c14fde22817bdf6d3e4c3fb4c4dc649d97c7f5f28a9c6125f6df08cd721a916fed0e7ec6a03b692ea1de60a3f801db95a22f9a8745fea73259402a6eda69c42fd76051017fc52f9ec1e9ed10fafb8f888e89073e6a5666bb4c45856309b9636ff7b7b40e32ea0b80ea76e1aec40f8f3e58d589ec8d76b061d5c5847a03bcafdbbd6a9f6847103cc48e22dc5dd6a1c6d00f0b92cee98930a4e96302d4861f5abbc22271"}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x4, 0x0, 0x5, [0x5fc0, 0x600f]}]}, 0x9, [{0x94, &(0x7f0000000a00)=@string={0x94, 0x3, "e77593f9b2019a07a6283ddb12485ec5a556e2c99766b92a2bd5c3c2c366709081f2c8be9d00ece73bd64c5426b6d8a4aefc15a911bae7869bd39de4c85ed01186a80affecff171a501681e7554e2d59ea3a7cb55ca413a84dca3fadd1bf44b93f6993aeb09eef75a70ba786e58340d1d5adcdd2e0803bb7c90abd46335378d3c7077c026d47acda99d6eb1811a505ea2a13"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x400a}}, {0x3e, &(0x7f0000000b00)=@string={0x3e, 0x3, "0429a8b6dc504f32181afdede1c1bd80337ebc92b105c676f620b5f0331e2c6576942b206e4ea0ce0c31aa58c85324556f78ea9b4948eef744668ac0"}}, {0x91, &(0x7f0000000b40)=@string={0x91, 0x3, "bee89f0d7c895885afe6bc3e48d6bc8ff4cf756b247541612dbd4ffc53fa296760ad862fe30230c7c6095b67a0131d8d7f862b724483f2fbe963e466d1956258b619fc79a550dde875a7dc63883998301abd26bc25f31f9a517211a318837255687329a99884ef4466deb9d1628e088bcc941f6e26000f69bd75d5c55bc714d4be846b2ff1a6094ed0b37459568e33"}}, {0xc3, &(0x7f0000000c00)=@string={0xc3, 0x3, "78413e2f4b313481cdf7640704bcb143eb1a119445171c66a2853b26de1534ecfe5c0a3abac66b09c4fa97d845415459b4b8cdebd31f76682ab429cd4a2850e835917aa1f384c21cb9210e82b344ec3073eeb487f11c4579c1a734a3e1eb91dcba93263116eb0dc7c00ad963a163f61c33becfa5087519fe9cc9464105349800e3420ed2896b9697fbb27525d7050c3afa47529e38cf841f0c5e8cf751eadd2b194704054ee664162ac3845661e7cb55561595a27eeeefd5bc5faafc97915a3487"}}, {0xe3, &(0x7f0000000d00)=@string={0xe3, 0x3, "36168043742d87473237d1898228e0fba7be377e8642d8601111618d7d023128d4036f84f3fa6db30ab267d902aa71649d12a16d10729964da4ef8880cc378fb88381b19f4a40ac518984b15412a16860881d5f3ae3cacb3b8c6ecfdd4f81ae1ebba4b6be30c3764bd3fecea5b21550addedf01a48c431307bd00e115de09321e9b615fc746d868a92e396e62f69179a906aa29ea54f5388f1ba03536fef3fba2702bff5fbac77a8f30ede27dbd20bafc1f9e0d2b0de4ecc76d0887b99ed41dbfd9e8de1cd70e9bb11e950155a29d0764c57557ce6f4e16ab61101703e72542802"}}, {0xfc, &(0x7f0000000e00)=@string={0xfc, 0x3, "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"}}, {0x22, &(0x7f0000000f40)=@string={0x22, 0x3, "9938ce9b2900b5f72f8e99a2c44a7f15b50cb44e12c0f2196921bd6e6fc314e3"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0xc04}}]}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'veth0_to_team\x00', 0x300}) syz_usb_control_io(r2, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x40, 0x11, 0x4f, {0x4f, 0x7, "6944215d213aa790a906e4e348efb9f7ab200aa37cd8b109a5eb906a97026582248dcd20e259398ee93083423961260f60a0ae2368e27186d4c2201cd568aad51f3a070b5ec588c94a5348b17f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 547.554703ms ago: executing program 2 (id=242): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x110, 0xffffffffffffffff, 0x5ef5e000) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000036c0)={0x2, 0xce}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c0000000001010400000000000000000a000002300002802c0001"], 0x7c}}, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, &(0x7f0000003740)) 515.418184ms ago: executing program 0 (id=243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="f26d66ba4000ed8fc9f090c90fc71eb9800000c00f3235000100000f30640fc7bf00000000f20f01df0f20a50f2327b9800000c00f3235001000000f30", 0x3d}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000000c0)="b80f000f00d026660fc7705c36f3f00fc18d0b60d2069f9f0fc77607ba6100b04feef3dd3eaab766b97a03000066b84e78000066ba000000000f30260f01cf66b9800000c00f326635001000000f30", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 505.552504ms ago: executing program 2 (id=244): sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a40000005400010000000000000080000700"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x90) 328.11229ms ago: executing program 2 (id=245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8f02) 300.32185ms ago: executing program 3 (id=246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) r2 = socket(0x1, 0x5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x40044}}], 0x1, 0x4) r3 = getpid() syz_pidfd_open(r3, 0x0) epoll_create(0x3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2e, 0x55, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xa1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x4a, &(0x7f00000000c0)=@new_dev={0x3, 0x58e, 0x0, 0x0, 0x1000, 0xffffffff, r3, 0x0, 0x5d}}}, &(0x7f00000001c0)=0x0) socket$key(0xf, 0x3, 0x2) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r5, &(0x7f0000000200)={0x0, 0x1460, 0x8, 0xffffffff, 0x2ca}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200f0b2, 0x4000, 0x0, 0x298}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ef, 0x8, 0x9, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x800, 0x2, 0x2af}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x100, 0x2, 0x21b}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x803, 0x48b, 0x0, 0x0}}, 0x0) 276.933862ms ago: executing program 2 (id=247): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)}, 0x4000080) ftruncate(r0, 0x8008976) ioctl$KVM_GET_REGS(r0, 0x8090ae81, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000340)=0x0) getpid() openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x90020, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0x1}}, {}, {@uid={'uid', 0x3d, r2}}, {@gid}, {@mode={'mode', 0x3d, 0x81}}, {@uid={'uid', 0x3d, 0xee01}}], [{@appraise}, {@flag='ro'}, {@pcr={'pcr', 0x3d, 0x22}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r6, 0x0, 0x200002e6) fcntl$setpipe(r5, 0x407, 0x7000001) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) 185.646925ms ago: executing program 3 (id=248): connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e21, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00b3f0ffffffffffffaaaaaaaaaaaa86dd694d48cd00103c0cd40b0000000000000000000000000001ff020000000000000000000000000001"], 0x4a) 184.400705ms ago: executing program 2 (id=249): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) readv(r0, &(0x7f00000007c0)=[{0x0, 0xc}, {&(0x7f0000000700)=""/67, 0x43}, {0x0}], 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = userfaultfd(0x80400) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) syslog(0x3, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000100)={0x10, 0x6}) 116.974567ms ago: executing program 3 (id=250): socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x0) dup(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) dup(r2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYBLOB], 0x0) 0s ago: executing program 2 (id=251): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x229, 0x0, 0x1, 0xe7}, {0x6, 0x0, 0xfe}]}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="02010007080000002cbd7000fbdbdf25030006006c00000002004e22ac14142f0000000000000000030005003300000002004e21ac1e030100000000000000007601fc1db5df2986d22b495b53a21a08b7e65f4dbb4f19076de8f7503d32b3663f495f5f97cb4584e94cdcdffb3978da09812f1f16026df93ee3d0b87fc0cdee8b4f33e6cf6e73f448649b3698e4e113f93cfdeb2493606ecdbc4c75c2539b261fc515b163b79696b8ba01a353472d62e79121d0eef819a10b47d1982ae4a68bacb74bdf9b81ce2026a6eb5b9bf0f64164e64cfbffbb08904615c483ace3ce8caf45672b075869af48193cd6"], 0x40}, 0x1, 0x7}, 0x40810) syz_open_dev$usbfs(&(0x7f0000000100), 0x9, 0x101300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty=0xa4ff}, 0xc) sendmmsg$sock(r4, &(0x7f0000003700)=[{{&(0x7f0000000500)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000580)="a432e127e8acac0224145ad7dd", 0xd}], 0x1}}], 0x1, 0x40081) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/sync_on_suspend', 0x40a82, 0x0) sendfile(r6, r6, 0x0, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000502000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="66470f3a209501000000d1b990020000b8b37c0000ba000000000f30440f20c03507000000440f22c048b801000000000000000f23d00f21f835200000020f23f826660f166fd8c4e1fd70d1d98fc97882cf67f20f07660f1b4f73b805000000b9e50000000f01c1", 0x68}], 0x8, 0x5a, &(0x7f0000000200), 0x0) sendmsg$netlink(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)=ANY=[@ANYBLOB="240000002800010023bd700000000000100000000c"], 0x24}], 0x1}, 0x0) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r7, 0x8, 0x4) getpid() sendmsg$nl_generic(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001100)=ANY=[], 0x39c}, 0x1, 0x0, 0x0, 0x10}, 0x626537d0585bb3b4) kernel console output (not intermixed with test programs): ss permissive=1 [ 15.411565][ T36] audit: type=1400 audit(1779503137.160:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. [ 22.464630][ T36] audit: type=1400 audit(1779503144.230:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.465832][ T286] cgroup: Unknown subsys name 'net' [ 22.487637][ T36] audit: type=1400 audit(1779503144.230:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.516219][ T36] audit: type=1400 audit(1779503144.260:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.516464][ T286] cgroup: Unknown subsys name 'devices' [ 22.637654][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.643562][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.735123][ T36] audit: type=1400 audit(1779503144.500:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.758605][ T36] audit: type=1400 audit(1779503144.510:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.783856][ T36] audit: type=1400 audit(1779503144.510:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.793385][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.817246][ T36] audit: type=1400 audit(1779503144.590:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.843635][ T36] audit: type=1400 audit(1779503144.590:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.880624][ T36] audit: type=1400 audit(1779503144.650:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.906724][ T36] audit: type=1400 audit(1779503144.650:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.906985][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.696023][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.703081][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.710219][ T293] bridge_slave_0: entered allmulticast mode [ 23.716714][ T293] bridge_slave_0: entered promiscuous mode [ 23.723751][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.731225][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.738443][ T293] bridge_slave_1: entered allmulticast mode [ 23.744862][ T293] bridge_slave_1: entered promiscuous mode [ 23.803704][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.811020][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.818235][ T294] bridge_slave_0: entered allmulticast mode [ 23.824387][ T294] bridge_slave_0: entered promiscuous mode [ 23.833396][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.841016][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.848301][ T294] bridge_slave_1: entered allmulticast mode [ 23.854703][ T294] bridge_slave_1: entered promiscuous mode [ 23.865815][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.872957][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.880151][ T296] bridge_slave_0: entered allmulticast mode [ 23.886349][ T296] bridge_slave_0: entered promiscuous mode [ 23.901583][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.908843][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.916145][ T296] bridge_slave_1: entered allmulticast mode [ 23.922292][ T296] bridge_slave_1: entered promiscuous mode [ 23.951370][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.958640][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.965890][ T295] bridge_slave_0: entered allmulticast mode [ 23.972140][ T295] bridge_slave_0: entered promiscuous mode [ 23.986218][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.993285][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.000526][ T295] bridge_slave_1: entered allmulticast mode [ 24.006901][ T295] bridge_slave_1: entered promiscuous mode [ 24.127714][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.135073][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.142813][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.150217][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.159573][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.166751][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.174341][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.181548][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.199196][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.206300][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.213775][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.221320][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.229875][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.237444][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.244927][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.252178][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.291932][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.299366][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.307744][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.315072][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.322532][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.330450][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.338667][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.346372][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.367983][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.375272][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.382936][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.390262][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.398563][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.405719][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.422037][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.429139][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.437112][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.444418][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.452327][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.459591][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.488244][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.495329][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.509508][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.516635][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.536209][ T295] veth0_vlan: entered promiscuous mode [ 24.552218][ T293] veth0_vlan: entered promiscuous mode [ 24.562753][ T295] veth1_macvtap: entered promiscuous mode [ 24.582971][ T296] veth0_vlan: entered promiscuous mode [ 24.595952][ T294] veth0_vlan: entered promiscuous mode [ 24.618476][ T293] veth1_macvtap: entered promiscuous mode [ 24.626551][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.652183][ T296] veth1_macvtap: entered promiscuous mode [ 24.659658][ T294] veth1_macvtap: entered promiscuous mode [ 24.739606][ T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.985427][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.135247][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 25.141721][ T10] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.154215][ T10] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.165242][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.166634][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 25.180964][ T10] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 25.190368][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.199846][ T10] usb 4-1: config 0 descriptor?? [ 25.315233][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 25.321597][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.333137][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 25.344134][ T31] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 25.356482][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 197, changing to 11 [ 25.368180][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 1587, setting to 1024 [ 25.379712][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 25.394500][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.405653][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 25.408553][ T407] netlink: 'syz.0.9': attribute type 4 has an invalid length. [ 25.421502][ T31] usb 2-1: SerialNumber: syz [ 25.429605][ T335] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 25.437145][ T335] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 25.452078][ T410] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 25.463968][ T411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.473278][ T411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.539883][ T415] incfs_lookup_dentry err:-13 [ 25.644051][ T10] smartjoyplus 0003:6666:8804.0001: unknown main item tag 0x0 [ 25.654550][ T10] smartjoyplus 0003:6666:8804.0001: unknown main item tag 0x0 [ 25.669505][ T10] smartjoyplus 0003:6666:8804.0001: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.3-1/input0 [ 25.681858][ T10] smartjoyplus 0003:6666:8804.0001: no output reports found [ 25.715231][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.985338][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.138121][ T45] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 26.148732][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.157490][ T45] usb 3-1: Product: syz [ 26.161720][ T45] usb 3-1: Manufacturer: syz [ 26.166620][ T45] usb 3-1: SerialNumber: syz [ 26.374990][ T430] fuse: Bad value for 'rootmode' [ 26.390506][ T45] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 26.398565][ T45] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 26.411555][ T45] usb 3-1: USB disconnect, device number 2 [ 26.432496][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.635237][ T31] usb 1-1: device descriptor read/64, error -71 [ 26.915291][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 26.926691][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 26.936349][ T31] usb 1-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 26.947358][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.962532][ T31] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 26.972172][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.983177][ T31] usb 1-1: Product: syz [ 26.991738][ T31] usb 1-1: Manufacturer: syz [ 26.996405][ T31] usb 1-1: SerialNumber: syz [ 27.205611][ T31] usb 1-1: MIDIStreaming interface descriptor not found [ 27.215565][ T31] usb 1-1: USB disconnect, device number 2 [ 27.227107][ T434] udevd[434]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.374796][ T471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.383867][ T471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.393606][ T471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.402308][ T471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.464107][ T472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.473008][ T472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.482297][ T472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.491620][ T472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.738769][ T31] usb 2-1: USB disconnect, device number 2 [ 27.744125][ T36] kauditd_printk_skb: 78 callbacks suppressed [ 27.744146][ T36] audit: type=1400 audit(1779503149.510:152): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 27.827406][ T36] audit: type=1400 audit(1779503149.600:153): avc: denied { create } for pid=483 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.841008][ T480] netlink: 100 bytes leftover after parsing attributes in process `syz.0.31'. [ 27.848071][ T36] audit: type=1400 audit(1779503149.600:154): avc: denied { setopt } for pid=483 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.245215][ T64] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.395210][ T64] usb 1-1: Using ep0 maxpacket: 16 [ 28.401858][ T64] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 28.410827][ T64] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.421521][ T64] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.432155][ T64] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.441430][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.449781][ T64] usb 1-1: Product: syz [ 28.454545][ T64] usb 1-1: Manufacturer: syz [ 28.459474][ T64] usb 1-1: SerialNumber: syz [ 28.467884][ T36] audit: type=1400 audit(1779503150.240:155): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.659848][ T501] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 28.788022][ T64] usb 1-1: 0:2 : does not exist [ 28.795727][ T64] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 28.807786][ T64] usb 1-1: USB disconnect, device number 3 [ 28.991840][ T36] audit: type=1400 audit(1779503150.760:156): avc: denied { ioctl } for pid=512 comm="syz.1.45" path="socket:[5000]" dev="sockfs" ino=5000 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.992621][ T513] netlink: 188 bytes leftover after parsing attributes in process `syz.1.45'. [ 29.017430][ T36] audit: type=1400 audit(1779503150.760:157): avc: denied { bind } for pid=512 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.032709][ T513] SELinux: policydb magic number 0x40 does not match expected magic number 0xf97cff8c [ 29.047235][ T36] audit: type=1400 audit(1779503150.800:158): avc: denied { load_policy } for pid=512 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 29.056895][ T513] SELinux: failed to load policy [ 29.300279][ T523] FAULT_INJECTION: forcing a failure. [ 29.300279][ T523] name failslab, interval 1, probability 0, space 0, times 0 [ 29.313126][ T523] CPU: 0 UID: 0 PID: 523 Comm: syz.0.50 Not tainted syzkaller #0 5683c47b7b818fc12acfc4a1bdd76955bb3d994d [ 29.313147][ T523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 29.313161][ T523] Call Trace: [ 29.313165][ T523] [ 29.313171][ T523] __dump_stack+0x21/0x30 [ 29.313194][ T523] dump_stack_lvl+0x140/0x1c0 [ 29.313208][ T523] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.313223][ T523] dump_stack+0x19/0x20 [ 29.313236][ T523] should_fail_ex+0x3d7/0x530 [ 29.313252][ T523] should_failslab+0xac/0x100 [ 29.313265][ T523] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 29.313277][ T523] ? __d_alloc+0x42/0x8e0 [ 29.313288][ T523] __d_alloc+0x42/0x8e0 [ 29.313297][ T523] ? close_fd+0x7e/0xa0 [ 29.313307][ T523] ? pending_reads_dispatch_ioctl+0x10fc/0x2080 [ 29.313323][ T523] ? __se_sys_ioctl+0x132/0x1b0 [ 29.313335][ T523] ? __x64_sys_ioctl+0x7f/0xa0 [ 29.313347][ T523] d_alloc_parallel+0xe4/0x1320 [ 29.313357][ T523] ? avc_has_perm_noaudit+0x26c/0x360 [ 29.313369][ T523] ? __asan_memcpy+0x5a/0x80 [ 29.313380][ T523] ? avc_has_perm_noaudit+0x28a/0x360 [ 29.313392][ T523] ? selinux_inode_permission+0x3f2/0x5d0 [ 29.313406][ T523] ? __cfi_d_alloc_parallel+0x10/0x10 [ 29.313416][ T523] ? __cfi_selinux_inode_permission+0x10/0x10 [ 29.313430][ T523] ? make_vfsuid+0x4d/0xa0 [ 29.313445][ T523] ? generic_permission+0x1e6/0x580 [ 29.313463][ T523] __lookup_slow+0x150/0x420 [ 29.313483][ T523] ? __d_lookup+0x4e8/0x550 [ 29.313499][ T523] ? lookup_one_len+0x300/0x300 [ 29.313515][ T523] ? lookup_one_common+0x320/0x470 [ 29.313532][ T523] lookup_one_len+0x1a1/0x300 [ 29.313548][ T523] ? __kasan_check_write+0x18/0x20 [ 29.313565][ T523] ? __cfi_lookup_one_len+0x10/0x10 [ 29.313585][ T523] ? close_fd+0x7e/0xa0 [ 29.313597][ T523] incfs_lookup_dentry+0x64/0xc0 [ 29.313609][ T523] pending_reads_dispatch_ioctl+0x121b/0x2080 [ 29.313624][ T523] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 29.313639][ T523] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 29.313654][ T523] ? selinux_file_ioctl+0x732/0x1480 [ 29.313668][ T523] ? vfs_write+0x9a4/0xf90 [ 29.313678][ T523] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 29.313693][ T523] ? __cfi_vfs_write+0x10/0x10 [ 29.313703][ T523] ? __kasan_check_write+0x18/0x20 [ 29.313713][ T523] ? mutex_unlock+0x90/0x240 [ 29.313726][ T523] ? __cfi_mutex_unlock+0x10/0x10 [ 29.313738][ T523] ? __fget_files+0x2c5/0x340 [ 29.313750][ T523] ? __fget_files+0x2c5/0x340 [ 29.313762][ T523] ? bpf_lsm_file_ioctl+0xd/0x20 [ 29.313775][ T523] ? security_file_ioctl+0x3e/0x110 [ 29.313790][ T523] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 29.313804][ T523] __se_sys_ioctl+0x132/0x1b0 [ 29.313816][ T523] __x64_sys_ioctl+0x7f/0xa0 [ 29.313828][ T523] x64_sys_call+0x1878/0x2ee0 [ 29.313838][ T523] do_syscall_64+0x57/0xf0 [ 29.313855][ T523] ? clear_bhb_loop+0x50/0xa0 [ 29.313868][ T523] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.313879][ T523] RIP: 0033:0x7f54c4d9ce59 [ 29.313897][ T523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.313907][ T523] RSP: 002b:00007f54c5c7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 29.313924][ T523] RAX: ffffffffffffffda RBX: 00007f54c5015fa0 RCX: 00007f54c4d9ce59 [ 29.313932][ T523] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000004 [ 29.313940][ T523] RBP: 00007f54c5c7a090 R08: 0000000000000000 R09: 0000000000000000 [ 29.313947][ T523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.313954][ T523] R13: 00007f54c5016038 R14: 00007f54c5015fa0 R15: 00007ffcb052f558 [ 29.313963][ T523] [ 29.313969][ T523] incfs_lookup_dentry err:-12 [ 29.965317][ T64] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.975423][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.095230][ T64] usb 1-1: device descriptor read/64, error -71 [ 30.135239][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 30.141811][ T31] usb 2-1: config 0 has no interfaces? [ 30.148456][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 30.158435][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.168559][ T31] usb 2-1: config 0 descriptor?? [ 30.226097][ T36] audit: type=1400 audit(1779503152.000:159): avc: denied { create } for pid=532 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.228248][ T533] Zero length message leads to an empty skb [ 30.247420][ T36] audit: type=1400 audit(1779503152.000:160): avc: denied { ioctl } for pid=532 comm="syz.2.55" path="socket:[5053]" dev="sockfs" ino=5053 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.267923][ T533] raw_sendmsg: syz.2.55 forgot to set AF_INET. Fix it! [ 30.281343][ T36] audit: type=1400 audit(1779503152.000:161): avc: denied { write } for pid=532 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.345251][ T64] usb 1-1: device descriptor read/64, error -71 [ 30.376600][ T531] syz.1.54 uses obsolete (PF_INET,SOCK_PACKET) [ 30.441041][ T547] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 30.441065][ T547] rust_binder: Read failure Err(EFAULT) in pid:25 [ 30.452595][ T547] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 30.459614][ T547] rust_binder: Read failure Err(EFAULT) in pid:25 [ 30.504556][ T552] syzkaller1: entered promiscuous mode [ 30.517760][ T552] syzkaller1: entered allmulticast mode [ 30.569192][ T31] usb 2-1: USB disconnect, device number 3 [ 30.605223][ T64] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 30.613316][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 30.726531][ T558] FAULT_INJECTION: forcing a failure. [ 30.726531][ T558] name failslab, interval 1, probability 0, space 0, times 0 [ 30.739770][ T558] CPU: 0 UID: 0 PID: 558 Comm: syz.3.63 Not tainted syzkaller #0 5683c47b7b818fc12acfc4a1bdd76955bb3d994d [ 30.739796][ T558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 30.739803][ T558] Call Trace: [ 30.739808][ T558] [ 30.739813][ T558] __dump_stack+0x21/0x30 [ 30.739832][ T558] dump_stack_lvl+0x140/0x1c0 [ 30.739847][ T558] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.739862][ T558] ? release_sock+0x171/0x1f0 [ 30.739875][ T558] dump_stack+0x19/0x20 [ 30.739888][ T558] should_fail_ex+0x3d7/0x530 [ 30.739899][ T558] should_failslab+0xac/0x100 [ 30.739913][ T558] kmem_cache_alloc_node_noprof+0x45/0x420 [ 30.739925][ T558] ? netlink_data_ready+0x20/0x20 [ 30.739940][ T558] ? __alloc_skb+0x108/0x370 [ 30.739953][ T558] __alloc_skb+0x108/0x370 [ 30.739965][ T558] netlink_alloc_large_skb+0xf7/0x1b0 [ 30.739979][ T558] netlink_sendmsg+0x594/0xb10 [ 30.739989][ T558] ? __cfi_netlink_sendmsg+0x10/0x10 [ 30.739999][ T558] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 30.740011][ T558] ? security_socket_sendmsg+0x3d/0x100 [ 30.740024][ T558] ? __cfi_netlink_sendmsg+0x10/0x10 [ 30.740034][ T558] ____sys_sendmsg+0x9de/0xa30 [ 30.740050][ T558] ? __import_iovec+0x5ad/0x7c0 [ 30.740063][ T558] ? __sys_sendmsg_sock+0x50/0x50 [ 30.740078][ T558] ? import_iovec+0x80/0xb0 [ 30.740096][ T558] ___sys_sendmsg+0x2a6/0x370 [ 30.740106][ T558] ? __sys_sendmsg+0x2a0/0x2a0 [ 30.740120][ T558] ? proc_fail_nth_write+0x184/0x220 [ 30.740135][ T558] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 30.740152][ T558] __x64_sys_sendmsg+0x1fb/0x2d0 [ 30.740161][ T558] ? fput+0x1a4/0x240 [ 30.740174][ T558] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 30.740184][ T558] ? ksys_write+0x1f3/0x260 [ 30.740195][ T558] ? __kasan_check_read+0x15/0x20 [ 30.740211][ T558] x64_sys_call+0x2a4c/0x2ee0 [ 30.740222][ T558] do_syscall_64+0x57/0xf0 [ 30.740233][ T558] ? clear_bhb_loop+0x50/0xa0 [ 30.740245][ T558] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.740257][ T558] RIP: 0033:0x7f5b6c39ce59 [ 30.740268][ T558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.740277][ T558] RSP: 002b:00007f5b6d2a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.740290][ T558] RAX: ffffffffffffffda RBX: 00007f5b6c615fa0 RCX: 00007f5b6c39ce59 [ 30.740299][ T558] RDX: 0000000000000000 RSI: 0000200000001480 RDI: 0000000000000003 [ 30.740306][ T558] RBP: 00007f5b6d2a4090 R08: 0000000000000000 R09: 0000000000000000 [ 30.740313][ T558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.740320][ T558] R13: 00007f5b6c616038 R14: 00007f5b6c615fa0 R15: 00007ffee5efa6d8 [ 30.740328][ T558] [ 31.033785][ T64] usb 1-1: device descriptor read/64, error -71 [ 31.056634][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 31.068354][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 31.081908][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 31.091470][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.101536][ T10] usb 3-1: config 0 descriptor?? [ 31.107053][ T535] raw-gadget.7 gadget.2: fail, usb_ep_enable returned -22 [ 31.131973][ T563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.141795][ T563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.275219][ T64] usb 1-1: device descriptor read/64, error -71 [ 31.404408][ T64] usb usb1-port1: attempt power cycle [ 31.450044][ T572] rust_binder: 571:572 transaction to 0 failed: ENOENT [ 31.518505][ T10] logitech 0003:046D:C24F.0002: unknown main item tag 0x2 [ 31.532812][ T10] logitech 0003:046D:C24F.0002: bogus close delimiter [ 31.539731][ T10] logitech 0003:046D:C24F.0002: item 0 0 2 10 parsing failed [ 31.547376][ T10] logitech 0003:046D:C24F.0002: parse failed [ 31.553475][ T10] logitech 0003:046D:C24F.0002: probe with driver logitech failed with error -22 [ 31.705229][ T45] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 31.721749][ T31] usb 3-1: USB disconnect, device number 3 [ 31.755358][ T64] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 31.776406][ T64] usb 1-1: device descriptor read/8, error -71 [ 31.856304][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.870519][ T45] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 31.879833][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.888515][ T45] usb 2-1: Product: syz [ 31.893497][ T45] usb 2-1: Manufacturer: syz [ 31.898131][ T45] usb 2-1: SerialNumber: syz [ 31.903481][ T45] usb 2-1: config 0 descriptor?? [ 31.910400][ T45] plusb 2-1:0.0: probe with driver plusb failed with error -22 [ 31.916313][ T64] usb 1-1: device descriptor read/8, error -71 [ 32.111944][ T45] usb 2-1: USB disconnect, device number 4 [ 32.165251][ T64] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 32.186435][ T64] usb 1-1: device descriptor read/8, error -71 [ 32.238450][ T374] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.316609][ T64] usb 1-1: device descriptor read/8, error -71 [ 32.425324][ T64] usb usb1-port1: unable to enumerate USB device [ 32.756656][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 32.756673][ T36] audit: type=1400 audit(1779503154.530:174): avc: denied { map } for pid=589 comm="syz.0.73" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 32.788696][ T36] audit: type=1400 audit(1779503154.530:175): avc: denied { create } for pid=589 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.809513][ T36] audit: type=1400 audit(1779503154.530:176): avc: denied { ioctl } for pid=589 comm="syz.0.73" path="socket:[5349]" dev="sockfs" ino=5349 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.834765][ T36] audit: type=1400 audit(1779503154.530:177): avc: denied { connect } for pid=589 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.854433][ T36] audit: type=1400 audit(1779503154.530:178): avc: denied { write } for pid=589 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.908106][ T36] audit: type=1400 audit(1779503154.680:179): avc: denied { create } for pid=591 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.928083][ T36] audit: type=1400 audit(1779503154.680:180): avc: denied { connect } for pid=591 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.948601][ T36] audit: type=1400 audit(1779503154.680:181): avc: denied { ioctl } for pid=591 comm="syz.1.74" path="socket:[6686]" dev="sockfs" ino=6686 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.135243][ T64] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 33.155324][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.285237][ T45] usb 2-1: device descriptor read/64, error -71 [ 33.285259][ T64] usb 1-1: Using ep0 maxpacket: 8 [ 33.286463][ T64] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 33.310397][ T64] usb 1-1: config 0 interface 0 has no altsetting 0 [ 33.317447][ T64] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 33.326870][ T64] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.335761][ T64] usb 1-1: config 0 descriptor?? [ 33.525208][ T45] usb 2-1: device descriptor read/64, error -71 [ 33.744602][ T64] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x3 [ 33.752189][ T64] kovaplus 0003:1E7D:2D50.0003: global environment stack underflow [ 33.760482][ T64] kovaplus 0003:1E7D:2D50.0003: item 0 0 1 11 parsing failed [ 33.768186][ T64] kovaplus 0003:1E7D:2D50.0003: parse failed [ 33.774623][ T64] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -22 [ 33.775208][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 33.915277][ T45] usb 2-1: device descriptor read/64, error -71 [ 33.954391][ T590] 8021q: VLANs not supported on wg2 [ 33.960407][ T431] usb 1-1: USB disconnect, device number 8 [ 34.155288][ T45] usb 2-1: device descriptor read/64, error -71 [ 34.187523][ T594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.196628][ T594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.275304][ T45] usb usb2-port1: attempt power cycle [ 34.305208][ T578] Bluetooth: hci0: command 0x1003 tx timeout [ 34.311487][ T577] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.400110][ T36] audit: type=1400 audit(1779503156.170:182): avc: denied { read } for pid=605 comm="syz.2.77" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 34.423426][ T36] audit: type=1400 audit(1779503156.170:183): avc: denied { open } for pid=605 comm="syz.2.77" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 34.479894][ T609] netlink: 'syz.0.78': attribute type 16 has an invalid length. [ 34.487789][ T609] netlink: 64122 bytes leftover after parsing attributes in process `syz.0.78'. [ 34.498460][ T609] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.615390][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 34.646702][ T45] usb 2-1: device descriptor read/8, error -71 [ 34.725278][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 34.733244][ T383] Bluetooth: hci0: Frame reassembly failed (-84) [ 34.786347][ T45] usb 2-1: device descriptor read/8, error -71 [ 34.886873][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.895806][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 34.904357][ T10] usb 3-1: config 222 has no interfaces? [ 34.919369][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 34.932620][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.940734][ T10] usb 3-1: SerialNumber: syz [ 34.968227][ T631] syzkaller1: entered promiscuous mode [ 34.973930][ T631] syzkaller1: entered allmulticast mode [ 34.980592][ T631] syzkaller1: left promiscuous mode [ 34.986007][ T631] syzkaller1: left allmulticast mode [ 35.035511][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 35.066344][ T45] usb 2-1: device descriptor read/8, error -71 [ 35.196419][ T45] usb 2-1: device descriptor read/8, error -71 [ 35.216637][ T607] syzkaller1: entered allmulticast mode [ 35.296012][ T643] netlink: 'syz.3.91': attribute type 4 has an invalid length. [ 35.303898][ T643] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.91'. [ 35.313274][ T45] usb usb2-port1: unable to enumerate USB device [ 35.313696][ T643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=643 comm=syz.3.91 [ 35.357125][ T647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.365794][ T647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.785202][ T578] Bluetooth: hci0: command 0x1003 tx timeout [ 36.785232][ T577] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.095200][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 37.245206][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 37.251907][ T45] usb 1-1: config 0 has no interfaces? [ 37.258133][ T45] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 37.268962][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.279429][ T45] usb 1-1: config 0 descriptor?? [ 37.409254][ T399] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.416258][ T578] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 37.471868][ T10] usb 3-1: USB disconnect, device number 4 [ 37.627049][ T64] usb 1-1: USB disconnect, device number 9 [ 37.845257][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 37.996524][ T10] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.007930][ T10] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.018122][ T10] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.031535][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 38.038732][ T10] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 38.048121][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.059026][ T10] usb 3-1: config 0 descriptor?? [ 38.163407][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 38.163424][ T36] audit: type=1400 audit(1779503159.930:211): avc: denied { map } for pid=733 comm="syz.0.115" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.280708][ T737] rust_binder: Write failure EFAULT in pid:82 [ 38.335250][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 38.345085][ T740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.117'. [ 38.361016][ T36] audit: type=1400 audit(1779503160.130:212): avc: denied { read } for pid=738 comm="syz.0.117" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.470069][ T10] holtek 0003:1241:5015.0004: unbalanced collection at end of report description [ 38.479395][ T10] holtek 0003:1241:5015.0004: parse failed [ 38.485433][ T10] holtek 0003:1241:5015.0004: probe with driver holtek failed with error -22 [ 38.506876][ T45] usb 2-1: unable to get BOS descriptor or descriptor too short [ 38.515520][ T45] usb 2-1: config index 0 descriptor too short (expected 8297, got 105) [ 38.523950][ T45] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 38.534262][ T45] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 6 [ 38.545234][ T45] usb 2-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 38.554615][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.562705][ T45] usb 2-1: Product: syz [ 38.566900][ T45] usb 2-1: Manufacturer: syz [ 38.571571][ T45] usb 2-1: SerialNumber: syz [ 38.674424][ T10] usb 3-1: USB disconnect, device number 5 [ 38.780541][ T45] usb 2-1: USB disconnect, device number 9 [ 39.292860][ T36] audit: type=1400 audit(1779503161.060:213): avc: denied { mounton } for pid=743 comm="syz.2.119" path="/19/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 39.385304][ T10] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 39.425697][ T578] Bluetooth: hci0: command 0x1003 tx timeout [ 39.431976][ T577] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.451798][ T756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.460410][ T756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.546812][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 39.556017][ T10] usb 1-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 39.568158][ T10] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 39.581511][ T10] usb 1-1: config 1 interface 0 has no altsetting 0 [ 39.590262][ T10] usb 1-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.40 [ 39.600381][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.608623][ T10] usb 1-1: Product: syz [ 39.613000][ T10] usb 1-1: Manufacturer: syz [ 39.617783][ T10] usb 1-1: SerialNumber: syz [ 39.623971][ T742] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 39.631460][ T742] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 39.645336][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 39.795197][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 39.802041][ T45] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 39.816013][ T45] usb 2-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 39.825453][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.833845][ T45] usb 2-1: Product: syz [ 39.838041][ T45] usb 2-1: Manufacturer: syz [ 39.842858][ T45] usb 2-1: SerialNumber: syz [ 39.844969][ T10] usbhid 1-1:1.0: can't add hid device: -71 [ 39.853636][ T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 39.863595][ T10] usb 1-1: USB disconnect, device number 10 [ 40.058243][ T45] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 40.065638][ T45] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 40.067279][ T766] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 40.088845][ T45] usb 2-1: USB disconnect, device number 10 [ 40.098034][ T434] udevd[434]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.148827][ T36] audit: type=1400 audit(1779503161.920:214): avc: denied { write } for pid=767 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.212270][ T36] audit: type=1400 audit(1779503161.980:215): avc: denied { mount } for pid=794 comm="syz.3.127" name="/" dev="configfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 40.238397][ T797] rust_binder: Write failure EFAULT in pid:55 [ 40.239720][ T36] audit: type=1400 audit(1779503161.980:216): avc: denied { search } for pid=794 comm="syz.3.127" name="/" dev="configfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.275249][ T36] audit: type=1400 audit(1779503161.980:217): avc: denied { setattr } for pid=794 comm="syz.3.127" name="/" dev="configfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 40.434429][ T365] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.441491][ T578] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 40.445229][ T365] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.493882][ T820] incfs: Backing dir is not set, filesystem can't be mounted. [ 40.501893][ T820] incfs: mount failed -2 [ 40.545697][ T824] syzkaller1: entered promiscuous mode [ 40.551351][ T824] syzkaller1: entered allmulticast mode [ 40.558733][ T824] ======================================================= [ 40.558733][ T824] WARNING: The mand mount option has been deprecated and [ 40.558733][ T824] and is ignored by this kernel. Remove the mand [ 40.558733][ T824] option from the mount to silence this warning. [ 40.558733][ T824] ======================================================= [ 40.605454][ T36] audit: type=1400 audit(1779503162.370:218): avc: denied { mount } for pid=823 comm="syz.0.136" name="/" dev="ramfs" ino=9760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 40.651611][ T36] audit: type=1400 audit(1779503162.420:219): avc: denied { read } for pid=831 comm="syz.1.140" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.683543][ T36] audit: type=1400 audit(1779503162.420:220): avc: denied { open } for pid=831 comm="syz.1.140" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.768576][ T841] netlink: 64 bytes leftover after parsing attributes in process `syz.2.143'. [ 40.778533][ T841] tipc: Invalid UDP bearer configuration [ 40.778560][ T841] tipc: Enabling of bearer rejected, failed to enable media [ 41.144734][ T864] overlayfs: missing 'lowerdir' [ 41.212390][ T869] kvm: kvm [868]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3 [ 41.223403][ T869] fuse: Bad value for 'rootmode' [ 41.830116][ T908] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 42.017723][ T926] SELinux: Context /usr/sbin/cups-browsed is not valid (left unmapped). [ 42.425226][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.465263][ T577] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.466023][ T578] Bluetooth: hci0: command 0x1003 tx timeout [ 42.489346][ T938] FAULT_INJECTION: forcing a failure. [ 42.489346][ T938] name failslab, interval 1, probability 0, space 0, times 0 [ 42.502580][ T938] CPU: 0 UID: 0 PID: 938 Comm: syz.3.174 Not tainted syzkaller #0 5683c47b7b818fc12acfc4a1bdd76955bb3d994d [ 42.502606][ T938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 42.502613][ T938] Call Trace: [ 42.502617][ T938] [ 42.502622][ T938] __dump_stack+0x21/0x30 [ 42.502641][ T938] dump_stack_lvl+0x140/0x1c0 [ 42.502655][ T938] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.502670][ T938] dump_stack+0x19/0x20 [ 42.502684][ T938] should_fail_ex+0x3d7/0x530 [ 42.502695][ T938] should_failslab+0xac/0x100 [ 42.502708][ T938] kmem_cache_alloc_node_noprof+0x45/0x420 [ 42.502719][ T938] ? __alloc_skb+0x108/0x370 [ 42.502732][ T938] __alloc_skb+0x108/0x370 [ 42.502744][ T938] ? xfrm_resolve_and_create_bundle+0x2eaf/0x3140 [ 42.502759][ T938] alloc_skb_with_frags+0xce/0x8b0 [ 42.502773][ T938] sock_alloc_send_pskb+0x883/0x9a0 [ 42.502791][ T938] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 42.502805][ T938] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 42.502817][ T938] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 42.502828][ T938] ? stack_depot_save_flags+0x38/0x800 [ 42.502839][ T938] __ip_append_data+0x28c2/0x3b10 [ 42.502856][ T938] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 42.502866][ T938] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 42.502881][ T938] ? __cfi_xfrm_lookup_with_ifid+0x10/0x10 [ 42.502893][ T938] ? ip_setup_cork+0x9f0/0x9f0 [ 42.502907][ T938] ? ip_setup_cork+0x583/0x9f0 [ 42.502921][ T938] ip_make_skb+0x1ee/0x410 [ 42.502935][ T938] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 42.502956][ T938] ? __cfi_ip_make_skb+0x10/0x10 [ 42.502970][ T938] ? cgroup_rstat_updated+0x141/0x810 [ 42.502982][ T938] udp_sendmsg+0x17f7/0x23f0 [ 42.502997][ T938] ? avc_has_perm_noaudit+0x26c/0x360 [ 42.503017][ T938] ? __cfi_ip_generic_getfrag+0x10/0x10 [ 42.503041][ T938] ? __cfi_udp_sendmsg+0x10/0x10 [ 42.503063][ T938] ? do_wp_page+0x217f/0x2e90 [ 42.503080][ T938] ? selinux_socket_sendmsg+0x281/0x380 [ 42.503094][ T938] ? folio_put+0x90/0x90 [ 42.503105][ T938] ? __count_memcg_events+0xdf/0x3b0 [ 42.503119][ T938] ? inet_send_prepare+0x64/0x4e0 [ 42.503130][ T938] ? pte_offset_map_rw_nolock+0xba/0x110 [ 42.503146][ T938] ? __cfi_udp_sendmsg+0x10/0x10 [ 42.503159][ T938] inet_sendmsg+0xef/0x120 [ 42.503169][ T938] ? __cfi_inet_sendmsg+0x10/0x10 [ 42.503180][ T938] ____sys_sendmsg+0x864/0xa30 [ 42.503196][ T938] ? __import_iovec+0x3ef/0x7c0 [ 42.503208][ T938] ? __sys_sendmsg_sock+0x50/0x50 [ 42.503223][ T938] ? import_iovec+0x80/0xb0 [ 42.503242][ T938] ___sys_sendmsg+0x2a6/0x370 [ 42.503251][ T938] ? __sys_sendmsg+0x2a0/0x2a0 [ 42.503266][ T938] ? do_user_addr_fault+0xbbb/0x11e0 [ 42.503279][ T938] __sys_sendmmsg+0x2b4/0x4e0 [ 42.503289][ T938] ? __cfi___sys_sendmmsg+0x10/0x10 [ 42.503301][ T938] ? __cfi_ksys_write+0x10/0x10 [ 42.503312][ T938] __x64_sys_sendmmsg+0xa4/0xc0 [ 42.503322][ T938] x64_sys_call+0xfec/0x2ee0 [ 42.503333][ T938] do_syscall_64+0x57/0xf0 [ 42.503343][ T938] ? clear_bhb_loop+0x50/0xa0 [ 42.503356][ T938] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.503368][ T938] RIP: 0033:0x7f5b6c39ce59 [ 42.503378][ T938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.503388][ T938] RSP: 002b:00007f5b6d2a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 42.503400][ T938] RAX: ffffffffffffffda RBX: 00007f5b6c615fa0 RCX: 00007f5b6c39ce59 [ 42.503409][ T938] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 42.503416][ T938] RBP: 00007f5b6d2a4090 R08: 0000000000000000 R09: 0000000000000000 [ 42.503423][ T938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.503430][ T938] R13: 00007f5b6c616038 R14: 00007f5b6c615fa0 R15: 00007ffee5efa6d8 [ 42.503439][ T938] [ 42.555198][ T45] usb 3-1: device descriptor read/64, error -71 [ 42.568901][ T940] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.825238][ T45] usb 3-1: device descriptor read/64, error -71 [ 42.957431][ T578] Bluetooth: hci0: sending frame failed (-49) [ 42.964395][ T577] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 43.035320][ T960] fuseblk: Unknown parameter 'Kd50x0000000000000003' [ 43.165221][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 43.305253][ T45] usb 3-1: device descriptor read/64, error -71 [ 43.408801][ T984] netlink: 'syz.3.188': attribute type 46 has an invalid length. [ 43.418215][ T984] netlink: 'syz.3.188': attribute type 28 has an invalid length. [ 43.468725][ T350] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.555211][ T45] usb 3-1: device descriptor read/64, error -71 [ 43.665422][ T45] usb usb3-port1: attempt power cycle [ 43.931795][ T36] kauditd_printk_skb: 16 callbacks suppressed [ 43.931812][ T36] audit: type=1400 audit(1779503165.700:237): avc: denied { read } for pid=1002 comm="syz.1.196" name="file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 43.969878][ T36] audit: type=1400 audit(1779503165.730:238): avc: denied { open } for pid=1002 comm="syz.1.196" path="/64/file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.025204][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 44.050885][ T45] usb 3-1: device descriptor read/8, error -71 [ 44.057409][ T36] audit: type=1400 audit(1779503165.820:239): avc: denied { bind } for pid=1004 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.077202][ T36] audit: type=1400 audit(1779503165.820:240): avc: denied { name_bind } for pid=1004 comm="syz.1.197" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 44.098936][ T36] audit: type=1400 audit(1779503165.820:241): avc: denied { node_bind } for pid=1004 comm="syz.1.197" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 44.121615][ T36] audit: type=1400 audit(1779503165.820:242): avc: denied { setopt } for pid=1004 comm="syz.1.197" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.206868][ T45] usb 3-1: device descriptor read/8, error -71 [ 44.295308][ T64] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 44.395210][ T431] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 44.445301][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 44.446557][ T64] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 44.462567][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.466449][ T45] usb 3-1: device descriptor read/8, error -71 [ 44.471860][ T64] usb 2-1: config 0 descriptor?? [ 44.546215][ T431] usb 1-1: Using ep0 maxpacket: 8 [ 44.553026][ T431] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 44.561358][ T431] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.571809][ T431] usb 1-1: config 0 has no interface number 0 [ 44.579906][ T431] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 44.589314][ T431] usb 1-1: New USB device strings: Mfr=1, Product=232, SerialNumber=77 [ 44.597779][ T431] usb 1-1: Product: syz [ 44.602474][ T431] usb 1-1: Manufacturer: syz [ 44.607327][ T431] usb 1-1: SerialNumber: syz [ 44.613467][ T431] usb 1-1: config 0 descriptor?? [ 44.618518][ T45] usb 3-1: device descriptor read/8, error -71 [ 44.725442][ T45] usb usb3-port1: unable to enumerate USB device [ 44.878806][ T431] usb 1-1: Found UVC 0.00 device syz (046d:08c3) [ 44.886234][ T431] usb 1-1: No valid video chain found. [ 44.893259][ T431] usb 1-1: USB disconnect, device number 11 [ 45.211707][ T1026] FAULT_INJECTION: forcing a failure. [ 45.211707][ T1026] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 45.225353][ T1026] CPU: 1 UID: 0 PID: 1026 Comm: syz.2.206 Not tainted syzkaller #0 5683c47b7b818fc12acfc4a1bdd76955bb3d994d [ 45.225385][ T1026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 45.225397][ T1026] Call Trace: [ 45.225403][ T1026] [ 45.225411][ T1026] __dump_stack+0x21/0x30 [ 45.225441][ T1026] dump_stack_lvl+0x140/0x1c0 [ 45.225464][ T1026] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.225490][ T1026] ? stack_depot_save_flags+0x38/0x800 [ 45.225507][ T1026] dump_stack+0x19/0x20 [ 45.225521][ T1026] should_fail_ex+0x3d7/0x530 [ 45.225531][ T1026] should_fail_alloc_page+0xec/0x110 [ 45.225545][ T1026] __alloc_pages_noprof+0x1c0/0x7e0 [ 45.225562][ T1026] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 45.225587][ T1026] ? __kasan_check_write+0x18/0x20 [ 45.225613][ T1026] ? zone_page_state_add+0x43/0x90 [ 45.225634][ T1026] ? __mod_zone_page_state+0x93/0xc0 [ 45.225652][ T1026] pte_alloc_one+0x92/0x530 [ 45.225664][ T1026] ? __cfi_pte_alloc_one+0x10/0x10 [ 45.225675][ T1026] ? lru_gen_add_folio+0x605/0x990 [ 45.225690][ T1026] __pte_alloc+0x79/0x440 [ 45.225700][ T1026] ? xas_alloc+0x239/0x530 [ 45.225715][ T1026] ? __cfi___pte_alloc+0x10/0x10 [ 45.225734][ T1026] do_pte_missing+0x2ae0/0x4410 [ 45.225760][ T1026] ? pte_marker_clear+0x1b0/0x1b0 [ 45.225783][ T1026] ? lru_add_drain_cpu+0x440/0x440 [ 45.225800][ T1026] ? __folio_batch_add_and_move+0x25b/0x320 [ 45.225814][ T1026] handle_mm_fault+0x11b8/0x1bf0 [ 45.225828][ T1026] ? __cfi_handle_mm_fault+0x10/0x10 [ 45.225840][ T1026] ? put_swap_device+0x130/0x130 [ 45.225855][ T1026] ? lock_mm_and_find_vma+0xb8/0x390 [ 45.225872][ T1026] do_user_addr_fault+0x4c9/0x11e0 [ 45.225891][ T1026] exc_page_fault+0x58/0xc0 [ 45.225914][ T1026] asm_exc_page_fault+0x2b/0x30 [ 45.225934][ T1026] RIP: 0010:fault_in_readable+0xd4/0x160 [ 45.225959][ T1026] Code: 12 03 b9 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 3d e8 f1 02 b9 ff 4d 39 e7 74 40 <41> 8a 07 88 45 df 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 d5 02 b9 [ 45.225969][ T1026] RSP: 0018:ffffc9000cfbfa88 EFLAGS: 00050287 [ 45.225980][ T1026] RAX: ffffffff81cec0af RBX: 0000000000200000 RCX: ffff888121060000 [ 45.225989][ T1026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.225996][ T1026] RBP: ffffc9000cfbfab0 R08: ffff888121060000 R09: 0000000000000002 [ 45.226003][ T1026] R10: 0000000000000001 R11: 0000000000000000 R12: 0000200000400000 [ 45.226011][ T1026] R13: dffffc0000000000 R14: 0000200000200000 R15: 0000200000200000 [ 45.226020][ T1026] ? fault_in_readable+0xcf/0x160 [ 45.226044][ T1026] ? fault_in_readable+0xcf/0x160 [ 45.226067][ T1026] fault_in_iov_iter_readable+0x1d4/0x330 [ 45.226096][ T1026] generic_perform_write+0x231/0x970 [ 45.226113][ T1026] ? __cfi_generic_perform_write+0x10/0x10 [ 45.226127][ T1026] ? down_write+0xee/0x2b0 [ 45.226141][ T1026] ? file_update_time+0xa3/0x210 [ 45.226156][ T1026] shmem_file_write_iter+0x105/0x130 [ 45.226176][ T1026] vfs_write+0x761/0xf90 [ 45.226197][ T1026] ? __cfi_vfs_write+0x10/0x10 [ 45.226215][ T1026] ? __cfi_mutex_lock+0x10/0x10 [ 45.226239][ T1026] ksys_write+0x145/0x260 [ 45.226250][ T1026] ? __cfi_ksys_write+0x10/0x10 [ 45.226261][ T1026] ? __kasan_check_read+0x15/0x20 [ 45.226271][ T1026] __x64_sys_write+0x7f/0x90 [ 45.226281][ T1026] x64_sys_call+0x271c/0x2ee0 [ 45.226292][ T1026] do_syscall_64+0x57/0xf0 [ 45.226302][ T1026] ? clear_bhb_loop+0x50/0xa0 [ 45.226322][ T1026] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.226342][ T1026] RIP: 0033:0x7f527219ce59 [ 45.226357][ T1026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.226372][ T1026] RSP: 002b:00007f5270bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.226387][ T1026] RAX: ffffffffffffffda RBX: 00007f5272415fa0 RCX: 00007f527219ce59 [ 45.226395][ T1026] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000004 [ 45.226402][ T1026] RBP: 00007f5270bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.226409][ T1026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.226416][ T1026] R13: 00007f5272416038 R14: 00007f5272415fa0 R15: 00007ffc934f61b8 [ 45.226425][ T1026] [ 45.555239][ T577] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.557346][ T578] Bluetooth: hci0: command 0x1003 tx timeout [ 45.735185][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 45.805202][ T431] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 45.890517][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.898379][ T64] usb 2-1: Cannot set autoneg [ 45.903470][ T64] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 45.917815][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 45.942611][ T64] usb 2-1: USB disconnect, device number 11 [ 45.948740][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 45.961619][ T10] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 45.965173][ T431] usb 1-1: Using ep0 maxpacket: 32 [ 45.971982][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.983379][ T431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.996827][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=0c15, bcdDevice= 0.00 [ 46.000705][ T431] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.017703][ T431] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 46.025223][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.027138][ T431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.036099][ T431] usb 1-1: config 0 descriptor?? [ 46.051528][ T10] usb 3-1: Product: syz [ 46.056199][ T10] usb 3-1: Manufacturer: ᐄ [ 46.061456][ T10] usb 3-1: SerialNumber: syz [ 46.278239][ T10] usb 3-1: cannot find UAC_HEADER [ 46.298462][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 46.312929][ T10] usb 3-1: USB disconnect, device number 10 [ 46.315973][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.457777][ T431] savu 0003:1E7D:2D5A.0005: hiddev96,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 46.717936][ T10] usb 1-1: USB disconnect, device number 12 [ 46.871706][ T1087] rust_binder: Write failure EFAULT in pid:102 [ 46.873823][ T36] audit: type=1400 audit(1779503168.640:243): avc: denied { lock } for pid=1080 comm="syz.1.222" path="socket:[13820]" dev="sockfs" ino=13820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 46.891127][ T1089] netlink: 'syz.2.225': attribute type 4 has an invalid length. [ 46.914026][ T1089] netlink: 3681 bytes leftover after parsing attributes in process `syz.2.225'. [ 46.923624][ T1024] netlink: 'syz.0.205': attribute type 9 has an invalid length. [ 46.947510][ T36] audit: type=1400 audit(1779503168.710:244): avc: denied { read write } for pid=1090 comm="syz.2.226" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 46.971825][ T36] audit: type=1400 audit(1779503168.710:245): avc: denied { open } for pid=1090 comm="syz.2.226" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 47.185258][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 47.335200][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 47.341935][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.352518][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.363331][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 47.372888][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.381354][ T10] usb 3-1: Product: syz [ 47.385859][ T10] usb 3-1: Manufacturer: syz [ 47.390851][ T10] usb 3-1: SerialNumber: syz [ 47.600872][ T10] usb 3-1: 0:2 : does not exist [ 47.614810][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 47.628184][ T10] usb 3-1: USB disconnect, device number 11 [ 47.646401][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.802936][ T1118] SELinux: failed to load policy [ 48.259267][ T1134] netlink: 56 bytes leftover after parsing attributes in process `syz.2.242'. [ 48.268555][ T1134] netlink: 40 bytes leftover after parsing attributes in process `syz.2.242'. [ 48.284851][ T339] bridge_slave_1: left allmulticast mode [ 48.295994][ T339] bridge_slave_1: left promiscuous mode [ 48.301999][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.305544][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 48.317703][ T339] bridge_slave_0: left allmulticast mode [ 48.323869][ T339] bridge_slave_0: left promiscuous mode [ 48.330133][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.400460][ T36] audit: type=1400 audit(1779503170.170:246): avc: denied { mounton } for pid=1139 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.458772][ T339] veth1_macvtap: left promiscuous mode [ 48.464595][ T339] veth0_vlan: left promiscuous mode [ 48.475239][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 48.487890][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.525307][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.538763][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 48.552700][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.578946][ T10] usb 2-1: config 0 descriptor?? [ 48.589346][ T10] hub 2-1:0.0: USB hub found [ 48.602741][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.610346][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.617955][ T1139] bridge_slave_0: entered allmulticast mode [ 48.625449][ T1139] bridge_slave_0: entered promiscuous mode [ 48.640759][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.648954][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.657287][ T1139] bridge_slave_1: entered allmulticast mode [ 48.664470][ T1139] bridge_slave_1: entered promiscuous mode [ 48.704990][ T1154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.714415][ T1154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.731594][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.739076][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.746395][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.753920][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.782339][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.791631][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.801356][ T10] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 48.817225][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.824760][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.846230][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.853393][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.881256][ T339] ------------[ cut here ]------------ [ 48.886910][ T339] WARNING: CPU: 1 PID: 339 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 48.902230][ T339] Modules linked in: [ 48.906201][ T339] CPU: 1 UID: 0 PID: 339 Comm: kworker/u8:8 Not tainted syzkaller #0 5683c47b7b818fc12acfc4a1bdd76955bb3d994d [ 48.918151][ T339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 48.930581][ T339] Workqueue: netns cleanup_net [ 48.936031][ T339] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 48.944958][ T339] Code: e8 d1 f9 d2 fc 4b 83 3c 3e 00 75 19 e8 05 6e 7a fc 49 81 ff f8 07 00 00 74 1b e8 f7 6d 7a fc 49 83 c7 08 eb c9 e8 ec 6d 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 48.965314][ T339] RSP: 0018:ffffc9000c8afb90 EFLAGS: 00010293 [ 48.971759][ T339] RAX: ffffffff850d55b4 RBX: ffff888104788000 RCX: ffff88810c769300 [ 48.979054][ T1139] veth0_vlan: entered promiscuous mode [ 48.979923][ T339] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff8881047e4000 [ 48.993670][ T339] RBP: ffffc9000c8afbb0 R08: ffffffff87d49187 R09: 1ffffffff0fa9230 [ 49.002064][ T339] R10: dffffc0000000000 R11: fffffbfff0fa9231 R12: dffffc0000000000 [ 49.004469][ T1139] veth1_macvtap: entered promiscuous mode [ 49.010164][ T339] R13: dffffc0000000000 R14: ffff8881047e4000 R15: 0000000000000000 [ 49.010193][ T339] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 49.033330][ T339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.040248][ T339] CR2: 000020000058d000 CR3: 000000012ad56000 CR4: 00000000003526b0 [ 49.048262][ T339] Call Trace: [ 49.051630][ T339] [ 49.054646][ T339] cleanup_net+0x6bd/0xc90 [ 49.059288][ T339] ? __cfi_cleanup_net+0x10/0x10 [ 49.064589][ T339] process_scheduled_works+0x7d4/0x1020 [ 49.070270][ T339] worker_thread+0xc51/0x1370 [ 49.075175][ T339] kthread+0x2c9/0x370 [ 49.079450][ T339] ? __cfi_worker_thread+0x10/0x10 [ 49.084767][ T339] ? __cfi_kthread+0x10/0x10 [ 49.089407][ T339] ret_from_fork+0x67/0xa0 [ 49.093927][ T339] ? __cfi_kthread+0x10/0x10 [ 49.098821][ T339] ret_from_fork_asm+0x1a/0x30 [ 49.103800][ T339] [ 49.107045][ T339] ---[ end trace 0000000000000000 ]--- [ 49.113189][ T339] ------------[ cut here ]------------ [ 49.118753][ T339] WARNING: CPU: 1 PID: 339 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 49.129328][ T339] Modules linked in: [ 49.133422][ T339] CPU: 1 UID: 0 PID: 339 Comm: kworker/u8:8 Tainted: G W syzkaller #0 5683c47b7b818fc12acfc4a1bdd76955bb3d994d [ 49.147055][ T339] Tainted: [W]=WARN [ 49.151126][ T339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 49.161591][ T339] Workqueue: netns cleanup_net [ 49.166404][ T339] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 49.172636][ T339] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 b0 6d 7a fc 49 81 ff f8 07 00 00 74 1b e8 a2 6d 7a fc 49 83 c7 08 eb c5 e8 97 6d 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 87 6d 7a fc 5b 41 5c 41 5e 41 [ 49.193105][ T339] RSP: 0018:ffffc9000c8afb90 EFLAGS: 00010293 [ 49.199589][ T339] RAX: ffffffff850d5609 RBX: ffff8881047e4800 RCX: ffff88810c769300 [ 49.207734][ T339] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff8881047e4808 [ 49.215907][ T339] RBP: ffffc9000c8afbb0 R08: ffffffff87d49187 R09: 1ffffffff0fa9230 [ 49.224066][ T339] R10: dffffc0000000000 R11: fffffbfff0fa9231 R12: dffffc0000000000 [ 49.232278][ T339] R13: dffffc0000000000 R14: ffff8881047e4000 R15: 0000000000000008 [ 49.240565][ T339] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 49.249638][ T339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.256265][ T339] CR2: 000020000058d000 CR3: 000000012ad56000 CR4: 00000000003526b0 [ 49.264606][ T339] Call Trace: [ 49.268063][ T339] [ 49.271033][ T339] cleanup_net+0x6bd/0xc90 [ 49.275696][ T339] ? __cfi_cleanup_net+0x10/0x10 [ 49.280885][ T339] process_scheduled_works+0x7d4/0x1020 [ 49.286674][ T339] worker_thread+0xc51/0x1370 [ 49.291632][ T339] kthread+0x2c9/0x370 [ 49.296568][ T339] ? __cfi_worker_thread+0x10/0x10 [ 49.301700][ T339] ? __cfi_kthread+0x10/0x10 [ 49.306413][ T339] ret_from_fork+0x67/0xa0 [ 49.311118][ T339] ? __cfi_kthread+0x10/0x10 [ 49.315792][ T339] ret_from_fork_asm+0x1a/0x30 [ 49.320670][ T339] [ 49.323795][ T339] ---[ end trace 0000000000000000 ]--- [ 49.345577][ T339] ------------[ cut here ]------------ [ 49.346334][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 49.351163][ T339] WARNING: CPU: 1 PID: 339 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 49.351206][ T339] Modules linked in: [ 49.351220][ T339] CPU: 1 UID: 0 PID: 339 Comm: kworker/u8:8 Tainted: G W syzkaller #0 5683c47b7b818fc12acfc4a1bdd76955bb3d994d [ 49.358279][ T36] audit: type=1400 audit(1779503171.110:247): avc: denied { mounton } for pid=1139 comm="syz-executor" path="/root/syzkaller.IdbD3R/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.367146][ T339] Tainted: [W]=WARN [ 49.367155][ T339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 49.367167][ T339] Workqueue: netns cleanup_net [ 49.367194][ T339] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 49.375422][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 49.384848][ T339] Code: 3c 20 00 74 08 48 89 df e8 3f c6 ed fc 48 8b 3b e8 07 ce d8 fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 62 3a 95 fc <0f> 0b e9 b0 fd ff ff e8 56 3a 95 fc 0f 0b e9 18 fe ff ff e8 4a 3a [ 49.446727][ T10] usb 2-1: USB disconnect, device number 12 [ 49.465185][ T339] RSP: 0018:ffffc9000c8afb70 EFLAGS: 00010293 [ 49.465214][ T339] RAX: ffffffff84f2893e RBX: ffff888104788000 RCX: ffff88810c769300 [ 49.465228][ T339] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff88810c769300 [ 49.493474][ T339] RBP: ffffc9000c8afb98 R08: ffffffff87d49187 R09: 1ffffffff0fa9230 [ 49.501703][ T339] R10: dffffc0000000000 R11: fffffbfff0fa9231 R12: 1ffffffff0fa8f80 [ 49.509955][ T339] R13: dffffc0000000000 R14: ffff888104788c00 R15: dffffc0000000000 [ 49.518413][ T339] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 49.527920][ T339] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.535009][ T339] CR2: 000020000058d000 CR3: 0000000116bc2000 CR4: 00000000003526b0 [ 49.543130][ T339] Call Trace: [ 49.546614][ T339] [ 49.549646][ T339] xfrm_net_exit+0x31/0x80 [ 49.554175][ T339] cleanup_net+0x6bd/0xc90 [ 49.558679][ T339] ? __cfi_cleanup_net+0x10/0x10 [ 49.563753][ T339] process_scheduled_works+0x7d4/0x1020 [ 49.569356][ T339] worker_thread+0xc51/0x1370 [ 49.574064][ T339] kthread+0x2c9/0x370 [ 49.578172][ T339] ? __cfi_worker_thread+0x10/0x10 [ 49.583560][ T339] ? __cfi_kthread+0x10/0x10 [ 49.588341][ T339] ret_from_fork+0x67/0xa0 [ 49.592786][ T339] ? __cfi_kthread+0x10/0x10 [ 49.597731][ T339] ret_from_fork_asm+0x1a/0x30 [ 49.602532][ T339] [ 49.605605][ T339] ---[ end trace 0000000000000000 ]---