last executing test programs: 3.829847156s ago: executing program 2 (id=144): getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prlimit64(0x0, 0x8, &(0x7f0000000780)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x44) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x58) write(r0, &(0x7f0000000100)='!:my', 0x4) (async) mlockall(0x7) (async) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f000000b640)='./file1\x00', &(0x7f000000b680), 0x4000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x110}}, 0x24004804) 3.207153218s ago: executing program 2 (id=150): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x0, 0x5c8c, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0x0, 0x1fffffff}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x201) ioctl$EVIOCSABS3F(r3, 0x401845ff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000000), 0x4) getpeername(r4, 0x0, &(0x7f00000001c0)) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, 0x0, 0x800) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.01049503s ago: executing program 2 (id=152): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'trylock', ' ', 'io'}, 0xb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r4, 0x11, 0x8, 0x0, &(0x7f0000000680)) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup_int(r5, &(0x7f0000000100)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) madvise(&(0x7f00002d6000/0x4000)=nil, 0x4000, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 2.983024036s ago: executing program 0 (id=153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000007, 0x7, 0xcb, 0x4f, 0x7b, 0x2, 0x80, 0x9, 0x3, 0x44, 0x8, 0x2, 0x4e}, {0x42d, 0x8, 0x40, 0x8, 0x8, 0xff, 0x8, 0x4, 0xa, 0x14, 0x6, 0x48, 0x5}, {0x1fc, 0x4, 0x9b, 0x0, 0x2d, 0x1, 0x81, 0xfb, 0x4, 0xf9, 0xfe, 0x2}], 0xb}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.661735034s ago: executing program 2 (id=154): rt_sigpending(0x0, 0xfffffffffffffe03) r0 = socket$inet6(0xa, 0x2, 0xfffffffc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x2000c000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e25, 0xe5, @ipv4={'\x00', '\xff\xff', @local}, 0x12}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001d002100dfff0000000000000700000005000000ea0007000a0002"], 0x30}}, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000002440)="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", 0x559, r2) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000580)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee000000000000000002000000003f", 0x59}], 0x1) 1.896392617s ago: executing program 0 (id=160): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000001440)) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000006c0)="48b80100000000000000f30f090f21f80fae4e21b805000000b9008800000f01c1653e3e2e66410f388285d6e7d8f8b9da7a0200000032430f21d4c462f91d0b430f01c8410f2367410f019b91c4a22566b81c010f00d8", 0x57}], 0x1, 0x43, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000040)=0x6, 0x4) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) sendmmsg(r6, &(0x7f00000005c0)=[{{&(0x7f0000000100)=@xdp={0x2c, 0x0, r5, 0x14}, 0xfffffffffffffeb7, &(0x7f0000004c40)=[{&(0x7f0000000300)='C', 0x1}], 0x1, 0x0, 0x0, 0xb00}}], 0x1, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1273d800", @ANYRES8=r1, @ANYBLOB="01002bbd7000fddbdf25540000000800030003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8030}, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.830602331s ago: executing program 0 (id=161): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/usb-storage/remove_id\x00', 0x143042, 0x80) write$tcp_mem(r1, &(0x7f0000000140)={0x40, 0x20, 0x0, 0x20, 0xfff}, 0x48) 1.830304651s ago: executing program 0 (id=162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x15, &(0x7f0000000680)=[@cr4={0x1, 0x140245}], 0x1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x200}) (async) fstat(r3, &(0x7f00000002c0)) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000a0000000400000014000100ff01000000000000000000000000000115000680"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0) 1.810271065s ago: executing program 2 (id=164): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x3) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118, 0x0, r6}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r7, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x21, 0x80, 0x0, r8}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x0, 0x4, 0x3aa, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000400)={0xfffe, 0x2, 0x4, 0x2, 0xe, '\t\x00'}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x9) ioctl$TCFLSH(r1, 0x540b, 0x0) 1.354559552s ago: executing program 3 (id=169): r0 = socket$inet(0x2, 0x80003, 0x84) getsockopt$inet_mreq(r0, 0x0, 0x50, 0x0, &(0x7f0000000080)=0xff00) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x11, 0x0, 0x1, 0xf, 0x6, @broadcast}, 0x14) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, 0xee00, 0x0) 1.349535213s ago: executing program 3 (id=170): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cc, &(0x7f0000000200)) sendto(r2, &(0x7f0000000080)="120008000000100000000000a194b85b6d8b171301000000a4b7ae4b33e10301f98b808c54ba50cc6c79862769b9a585e4345f3fd54f9eae42094e5b3f501d60b91ac9e75812bd66e0b9b6cab1480003000000e515dd9a2686e6faf5", 0x1, 0x1004, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x3, 0x729, 0x0, 0x0, 0x1000, 0x7, 0xffffffffffffffff, 0x0, 0x21}}}, &(0x7f0000000200)=0x0) write(r3, &(0x7f0000001880)="dafc11a4eddb532202ddb17d77da5107b95bd374f9055e45c0dbf62c595b6000aa39b3f2b415a65bc7ff370863a7c660a71131fad095480ab85b124252ac2fd4ccd849eccca1ec376ac98102c07adc138a90d32d0184b0e414abe265ee24e6fdd40be14f3e990894d155df3b51ae9ce33899564db80280382adbcd5f43eaaf7e7e12", 0x82) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000300)={0x6c88, r1, 'id0\x00'}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) readv(r7, &(0x7f0000001a40)=[{&(0x7f0000001940)=""/11, 0xb}, {&(0x7f0000001980)=""/13, 0xd}, {&(0x7f00000019c0)=""/70, 0x46}], 0x3) write$vga_arbiter(r7, &(0x7f0000000000)=@unlock_all, 0xb) r8 = syz_ublk_setup_io_uring(0x37f4, &(0x7f00000003c0)={0x0, 0xaebd, 0x2000, 0x3, 0xf4}, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) r9 = syz_open_dev$ublk_chdev(&(0x7f0000000780), 0x0, 0x200) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000280)={0x0, 0x4302, 0x0, 0x2, 0x1e, 0x0, r5}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4717, 0x1, 0x0, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc51e, 0x100, 0x2, 0xde, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x91b4, 0x8000, 0x1, 0x67, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7932, 0x80, 0x2, 0x51, 0x0, r8}}], 0x4, &(0x7f00000017c0)={0x2e, 0x0, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x2, 0x5b, 0x0, &(0x7f00000007c0)=@buf_512="373c9c30791f86290bb560f1fcae07a0ce6d67c81b9aeea0bc6d6cf0dffb5fd7e8baddf4fdbadd655ef743156e51425b9238cccb5827752391a8763744313fb6f0cd68729e9383d40a7d4b977d1352ee9fb101fb05e86ff11fd792cd2f60ee1862eebf9e6d86e5ea5050e184f859bad390d9e105a1e6325861608ce2412c99315253f082e3f907e1935cbbb356842fcf281775450a66c5f6e2e434bef0a3ca3b0c8ba41e8d942a3f95b2476e5df26d93ff219da5a52eb8a964e9a51e47339bea4e3e116ff54c60dd278d143b0831ec5f1f24a530cd05f5125a522e074bb8af7a79a9c0936f89842a5f1ca111b2d6a9bd1e6f9ebef59ccc5553263ce3688b7d1a2deda26ce3c9af8fd4ff5d5543defbc034e9805448c25b711a89fb7fed498c35bf2aa570f53ca6731d0e530d03e4a26cca96c9e042db3d589ce0e5b6fc952b2bbd38d36f2ae8f2468a856e309d42dc4df3a2b4e1fd86d95e4af1683f1d462e67a41834a3aa67d863e8ee5b554ec5fa7ebb614ffe241ada3297b8f0f1a753ec46464a49e6fbfb6d8fb5126f5b162c02c1a3856a791f7b3b7755a8796255b53cf223b908026694105e231cdd81660428388dada70d54ea81c70b8c08d2e06de221936c25077611e298e96568b4230563c996906d9dff7e108c577c1e3ddb49f8348c603be4ba0e330eb2d77b5109659d12ae535d020e89993f094204ec3974ba86"}}, &(0x7f0000001840)) recvmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/24, 0x18}, 0x40}], 0x1, 0x10002, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="010402020000"], 0x6) 1.31537872s ago: executing program 3 (id=171): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffff7ff, 0x8000, 0xfffffffd}, 0x10) r1 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r1], 0x20}}, 0x40816) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000)=0x8, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a001000000000000000000000000000000000000000000000000000000000000800120002000200ff"], 0xa0}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000000)=0x41, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffee4, &(0x7f0000000780)=[{&(0x7f0000000100)=ANY=[], 0x28}, {&(0x7f00000002c0)={0x0, 0x35, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0x0, 0x133, 0x0, 0x1, [@generic="52fa28dbc7b9e6f8969b3705386b69139121d99a3839c1873a9437ef9d8ef289e033f14167cc2308e8c048d25fc4c476f2dd300c3d6f"]}, @typed={0x0, 0x56, 0x0, 0x0, @fd=r3}]}}, {&(0x7f00000007c0)={0x0, 0x27, 0x100, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x0, 0x10, 0x0, 0x0, @ipv6=@mcast2}, @generic="cbc0313ddff68d04792f7299d09690160473b0ad85e1ec917073645dbe53e4e60d599042f42edbf95e158a47810fdb8881454c31f8c3159d2d52ea94664bd8efcd799de9f1251e0ba759540c40b286181ec89b5b6826d476018f9e746e903732d69fa1ca3cf6c155ca566092e1aa3219a35a169f48a5e960f2f1485a", @nested={0x0, 0x155, 0x0, 0x1, [@typed={0x0, 0x16, 0x0, 0x0, @u64=0xf}, @typed={0x0, 0xd7, 0x0, 0x0, @str='\x00'}, @generic="8cb2d3eb89f54d40c2b2ed457ea579820a2b70ba0f5ddd7fcf0a4f7fe0775eaceb9a8d8e0003b339764a8781071b180042673b679544b32f74e0ba4a85725a157028ec290fa7957581886f219e78f5652ab473b4abc7b8f45e8b75e92998c9c6bd26be026cf20d33f13f047359eabaa445f9ec58152151697c37c0e0c97a94f696a4abfba092c2d10d48637f96d3d8ef6c6e83e14abc14a6845b7efc387ab300d14038c3771c54e15a2ee4977443e0db8c", @generic="5048554c29aa149e60ff50ac82c580b69a622dbfa6c847604633bb34e6067211d6e5d6c41a629980bdafd88a402d91fd466f30293ea09b5e576eafb4aa0be1e7ca58e7f79e277f268565ee3ebecb96a14904916b329d467a7785255b49da8292c9a59f9bf40eda23d441d98476ac23dab9339ee56909326e18240182e0680c60d945afbabe24b82a03cdbee5b63e46e8edf79f9b66c7dae3264c2c410d07c3242e4712ff8813a948bcd7b1b7ed6548aaa44955ab7e3fbe662b9164eccea6e607d5ccb6d2aa", @generic="7f975930608f6a1a04c3ebf4da261e93110cfe222797eef953a34c593d6342749c0a48b0e909a81c2d195a4240f58652f9342b3c", @nested={0x0, 0x165}, @nested={0x0, 0x118}, @nested={0x0, 0x2}, @typed={0x0, 0x4f, 0x0, 0x0, @u32=0x4}]}, @generic="104b5a5d955bdd2a74d494ddd5353caac72791c17d63150909b64b93", @nested={0x0, 0x9e, 0x0, 0x1, [@typed={0x0, 0xa8, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3d}}]}, @generic="7f0d3533cacdd1f692bc87e0f36c6b3cf165cbb9181731d874284fa61ad725a360b6bc5c68da5beb82dd577c07b1826498e679feb8f4e1f24d197c87d4b2765827ed3659bbe35d1f570881c825b6cdbe9ede893d50875c", @typed={0x0, 0xbf, 0x0, 0x0, @ipv4=@remote}, @typed={0x0, 0x45, 0x0, 0x0, @str='\xa4!\x00'}]}}], 0x1, 0x0, 0x0, 0x840}, 0x4040080) 1.262442801s ago: executing program 3 (id=172): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x7, 0x2, 0x81, 0x3, 0x3e, 0xfffffff9, 0x104, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x3, 0x78, 0x7, 0x9}, [{0x5, 0x35a9, 0x9, 0x7, 0x5, 0x5beb, 0x1, 0x9}, {0x70000000, 0x1, 0x9, 0x9, 0x3, 0x9, 0x700000000000000, 0x1ff}, {0x60000000, 0x6, 0x3, 0x8, 0x7, 0x4, 0x80000000, 0xfffffffffffffff9}]}, 0xe8) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) sendmsg$key(r1, &(0x7f0000000340)={0xa, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x7}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x7, 0x2, 0x81, 0x3, 0x3e, 0xfffffff9, 0x104, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x3, 0x78, 0x7, 0x9}, [{0x5, 0x35a9, 0x9, 0x7, 0x5, 0x5beb, 0x1, 0x9}, {0x70000000, 0x1, 0x9, 0x9, 0x3, 0x9, 0x700000000000000, 0x1ff}, {0x60000000, 0x6, 0x3, 0x8, 0x7, 0x4, 0x80000000, 0xfffffffffffffff9}]}, 0xe8) (async) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) (async) close(r0) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) socket(0x28, 0x801, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) (async) shutdown(r1, 0x1) (async) sendmsg$key(r1, &(0x7f0000000340)={0xa, 0x0, &(0x7f0000000300)={0x0, 0x20}, 0x1, 0x7}, 0x0) (async) 1.196213726s ago: executing program 2 (id=173): r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$inet(r0, &(0x7f0000001900)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)}], 0x2}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="20311000000054e8e548f11942c2a67d03ef817c76f3"], 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cc, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000380)=0xd) syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x8c4) 1.151948815s ago: executing program 3 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x60141, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) recvmmsg(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004600)=""/4089, 0xff9}], 0x1}, 0x40000002}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(r0, r2, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x5a4000, 0x0) fallocate(r5, 0x0, 0x6, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.018260113s ago: executing program 3 (id=175): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000e1476040d61000220200000003010902"], 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000005c0)={0x14, &(0x7f0000000400)={0x20, 0x24, 0xf, {0xf, 0x2, "cb45c65d9add58c334baea9b79"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100a}}}, &(0x7f0000000880)={0x34, &(0x7f0000000600)={0x20, 0x31, 0x97, "fe8d29198ba00716e4592b53076868852569397c91e6ed85722c9e3b790630394af7d90f5f0ee8f8ce39d8064adc0cc9d833b5bd2c186e8a6cc74a34f561f81c3ff40d89c753d7ee96853f4e7608bb49496c697a5403eb0f8a4969504b7f96c2bc0ad49d755c312bcfe27297a970c374fdf26d74983d6e314e4cb33e6fbd35eccd019b0925ff1306e1ae2dac0562ef802accf8a20414a2"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000007c0)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000000800)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000840)={0xc0, 0xa2, 0x2f, "764f52ea65ee392dab7685b5fed9b6708972c90f079020467e8ebaf900b600873cfdfb3c7ae036baf5c4d2cd18430d"}}) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x87, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x1, 0x1, 0x9, 0x40, 0x9, "", [{{0x9, 0x4, 0x0, 0x15, 0x2, 0x2, 0x6, 0x0, 0x1, {{0xa, 0x24, 0x6, 0x0, 0x0, "2a1a5155fb"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x496, 0x9, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x21, 0x4a0a}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x1}, @mdlm={0x15, 0x24, 0x12, 0xf}, @network_terminal={0x0, 0x24, 0xa, 0x1, 0x7, 0xa, 0xc}, @obex={0x5, 0x24, 0x15, 0x8a}, @dmm={0x7, 0x24, 0x14, 0x1ff, 0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0xf, 0x22}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x40, 0x5a, 0x2}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x6, 0x8, 0x9, 0x8, 0xa}, 0xc7, &(0x7f0000000100)={0x5, 0xf, 0xc7, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x1, 0x9, 0xd}, @wireless={0xb, 0x10, 0x1, 0xa, 0xd2, 0x2, 0x9, 0x31d, 0xc}, @generic={0x8f, 0x10, 0x2, "229fa6838d10ac01000000c8e09aedba26b64ff955289d2789a332d322bbd4d9b25087e0f767705b65e2f239d07b6d1459ff8c752da0cd45baca2ac218ffb680b061c46fb21ede15937e00abed19b2ccfde76eb3b943f521141b6aba9e63f2b848f5f8ee6529abe742db7f811b7252a9892f2c0e93a97d4efec7c867b62dd23341a3f0a0b7961f2c06d2585a"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0xb9, "12df6da7c83c38d75d1a18de047be7ed"}]}, 0x6, [{0xc9, &(0x7f0000000200)=@string={0xc9, 0x3, "d93583893c9338360269868410c3c3bc1ef9b9a49f02d5c3d4defb4590f4b501d485c1aa094c773c6f0ab685cadfa108118120a961748ffc5809b572830a667307405637c9696e05f58c20377e45ecfa9d9700759ea0eaeb0639cae513b0b0827b78e51876e85b461ea7ffb43b989bff163be6627ec9ddef106fbd126a640c3de19b01b6c04234ef3ee4bcc271b11b42e21718ac76b675f4ad917daeaac2597d0566aa871ea6c63140cdcba5d5d911fd92838ea7f2d80da782c151b33ad5384fe3f8d5c06c32cb"}}, {0x9b, &(0x7f00000008c0)=@string={0x9b, 0x3, "25e23f21d3cb8eb3dfcf46273923603120ddc26377fbfe22d06589df76cef6ae6f0f4bf175caacaa4cb8b550012271643aaeff84660c44672d3068090c0fbc96209b235c94cf8ad9c14a449e3da1ff0d6ec13df9d7d1bd795e9c83d5649dd3a3a059f7831e9121f75a6e085beeea1434af834aa01344b88937b65304ebf544624f18ac8b61c029a3724819b592a137060879c656e74905c28f"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x44c}}, {0xbf, &(0x7f0000000480)=@string={0xbf, 0x3, "7bab6cf3ec88fa107022524e77051a0dbab937b9f25c2c1d1f9b1c95c30dc4de2c93f9b6c1b62cf83070c23d8ec9623e13fd4b65aa06c71d9df850dc8dcd05ef8938191206c04a28ee089ac9cd5e448ca80d6f0cdf28ed98b85400ca82dc78c08377705fd1673c313bf19d786243865785c0e4496536ab7f1b1e192648c9cc35e550a0eda4c564f99cf8a12503a35a393212c2902c71e1e0450cf719da7c7ecaa1883fd66cfde5a280b92bd900df14a656bbb6b80bedb3d6e4ed633002"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x44c}}]}) 914.523455ms ago: executing program 0 (id=176): r0 = socket$unix(0x1, 0x2, 0x0) listen(r0, 0x2) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x2, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r0, 0x0, 0x0, 0x80800) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @loopback, 0xe0}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "4b862c9223fd116665b5f8056eb716fe8c6f63418f403693b5efbd525c2df3b7545c0b1280fd31fe214c46dc6aa4345a3e39e5396cc3947443c1df636cfc2615", 0x2f}, 0x48, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x2000, &(0x7f0000735000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x5, @remote, 0x7}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) 270.577732ms ago: executing program 1 (id=183): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) (rerun: 64) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) clock_gettime(0xfffffffffffffffe, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r4}}], 0x1, 0x0, 0x0) 251.744766ms ago: executing program 1 (id=184): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x41, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x9, 0x801) write$eventfd(r0, &(0x7f00000000c0)=0x2, 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0xd, 0xfee, 0x918f, 0xe45c, 0x3, 0x48, 0xe6a3}, 0x1c) io_setup(0x2, &(0x7f0000000100)=0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xa2, 0x0) io_submit(r2, 0x2, &(0x7f0000000440)=[&(0x7f0000000040)={0x3, 0x0, 0x0, 0x8, 0x700, r3, 0x0, 0x0, 0x100000000}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000380)="292f697501d74ea90c", 0x9, 0x3, 0x0, 0x2, r3}]) getsockopt$packet_int(r3, 0x107, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x1a9102, 0x0) 178.581031ms ago: executing program 1 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1df) mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/usb_gadget/g1/functions/ncm.usb0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/usb_gadget/g1/functions/ncm.usb0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/functions/ncm.usb0/max_segment_size\x00', 0x800, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000380)={0x78, 0x0, 0x0, {0xfffffffffffffffb, 0x5, 0x0, {0x4, 0x83, 0x3ff, 0xa8, 0x4, 0x6, 0xd, 0x4, 0x1, 0x2000, 0x9, 0x0, 0x0, 0xad11, 0x9d3}}}, 0x78) (async) write$FUSE_ATTR(r0, &(0x7f0000000380)={0x78, 0x0, 0x0, {0xfffffffffffffffb, 0x5, 0x0, {0x4, 0x83, 0x3ff, 0xa8, 0x4, 0x6, 0xd, 0x4, 0x1, 0x2000, 0x9, 0x0, 0x0, 0xad11, 0x9d3}}}, 0x78) 114.572775ms ago: executing program 1 (id=186): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getresuid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)=0x0) quotactl$Q_GETQUOTA(0x0, &(0x7f0000000040)=@filename='./cgroup/../file0\x00', r1, &(0x7f0000000180)) r2 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') lseek(r2, 0x5, 0x1) 114.102315ms ago: executing program 1 (id=187): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@loopback, @local}, 0x8) landlock_restrict_self(r0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r2, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@loopback, @local}, 0x8) (async) landlock_restrict_self(r0, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) 100.252018ms ago: executing program 1 (id=188): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3, 0x1, 0xd}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) (async, rerun: 32) r2 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x1c, r4, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x0, 0x2e, 0xd}]}, 0xfdaa}}, 0x4000000) (async, rerun: 64) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x78}, 0x1, 0x7}, 0x0) (async, rerun: 64) landlock_restrict_self(r1, 0x0) (async, rerun: 64) landlock_restrict_self(r1, 0x0) (rerun: 64) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a2401"], 0x0) (async) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bind$tipc(r6, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x2}}, 0x10) (async) sendmsg$tipc(r6, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) open(&(0x7f0000000400)='./file0\x00', 0xe0841, 0x0) (async) r7 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180062) ioctl$NILFS_IOCTL_GET_SUINFO(r7, 0x80186e84, &(0x7f0000000300)={&(0x7f0000000280)=[{0x3, 0x10000, 0x2}, {0xe7, 0x5, 0x2}, {0x7fffffff, 0xa5b5, 0x3}, {0x9, 0x67, 0x2}, {0x8, 0x80}, {0x43, 0x2, 0x2}, {0x6, 0xffffff0c}, {0x9, 0x8, 0x2}], 0x8, 0x10, 0x1, 0x2ae6}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/warn_count', 0x20003, 0x18b) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000080)={r8, 0x0, {0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad009e6d680f985881a7b0900d69098c8b534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b079b7ad33008b0700", [0xfffffffffffffce8, 0x6]}}) (async) syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x400000) (async) ioctl$LOOP_SET_BLOCK_SIZE(r8, 0x4c09, 0x1000801) 0s ago: executing program 0 (id=189): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2000000000007) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000006c0)={0x3, 0x0, [{0xd, 0x1, 0x4, 0x6, 0x7b8, 0x8001, 0x4}, {0xc000000f, 0x5, 0x2, 0x4, 0x400, 0x3d5, 0x1}, {0x40000000, 0xffffffff, 0x41b0588718b92de3, 0x0, 0xff, 0x3ff, 0x3}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_usb_connect(0x0, 0x55, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002020000402505a1a440000102000109024300020100c000090400000102020100052400100105240100010424020205240600010705810308001009040100020a0000000705020240000007058202"], 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x81) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0xffffffffffffffff, 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x5d) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x200000b, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000200000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) sendmmsg$inet(r7, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000680)="f8321c7c8d44100fb91dbd984fb11b3108dcc6ca0705d5913f41a6c488a3daed367d", 0x22}], 0x1}}], 0x1, 0x800) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'veth1_macvtap\x00'}) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec0000002100010027bd7000fefffffffc020000000000000000000000000000fc020000000000000000000000000001dffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c0011"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2aad03, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_CAP_MAX_VCPU_ID(r9, 0x4068aea3, &(0x7f0000000180)={0x80, 0x0, 0x1000}) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 15.412138][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 15.412156][ T36] audit: type=1400 audit(1790479846.440:59): avc: denied { transition } for pid=233 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.416508][ T36] audit: type=1400 audit(1790479846.440:60): avc: denied { noatsecure } for pid=233 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.419829][ T36] audit: type=1400 audit(1790479846.440:61): avc: denied { write } for pid=233 comm="sh" path="pipe:[1554]" dev="pipefs" ino=1554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.423037][ T36] audit: type=1400 audit(1790479846.440:62): avc: denied { rlimitinh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.425893][ T36] audit: type=1400 audit(1790479846.440:63): avc: denied { siginh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. [ 23.255497][ T36] audit: type=1400 audit(1790479854.280:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.256552][ T287] cgroup: Unknown subsys name 'net' [ 23.278162][ T36] audit: type=1400 audit(1790479854.280:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.305511][ T36] audit: type=1400 audit(1790479854.320:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.305714][ T287] cgroup: Unknown subsys name 'devices' [ 23.430105][ T287] cgroup: Unknown subsys name 'hugetlb' [ 23.435712][ T287] cgroup: Unknown subsys name 'rlimit' [ 23.548441][ T36] audit: type=1400 audit(1790479854.580:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.571603][ T36] audit: type=1400 audit(1790479854.580:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.582114][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.596487][ T36] audit: type=1400 audit(1790479854.580:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.628040][ T36] audit: type=1400 audit(1790479854.640:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.642212][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.653579][ T36] audit: type=1400 audit(1790479854.640:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.687909][ T36] audit: type=1400 audit(1790479854.660:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.713609][ T36] audit: type=1400 audit(1790479854.660:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.974874][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.982012][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.989332][ T296] bridge_slave_0: entered allmulticast mode [ 24.995503][ T296] bridge_slave_0: entered promiscuous mode [ 25.002173][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.009250][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.016329][ T296] bridge_slave_1: entered allmulticast mode [ 25.022831][ T296] bridge_slave_1: entered promiscuous mode [ 25.070220][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.077284][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.084392][ T294] bridge_slave_0: entered allmulticast mode [ 25.090650][ T294] bridge_slave_0: entered promiscuous mode [ 25.108016][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.115141][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.122299][ T294] bridge_slave_1: entered allmulticast mode [ 25.128536][ T294] bridge_slave_1: entered promiscuous mode [ 25.140085][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.147128][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.154218][ T297] bridge_slave_0: entered allmulticast mode [ 25.160426][ T297] bridge_slave_0: entered promiscuous mode [ 25.173311][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.180386][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.187433][ T297] bridge_slave_1: entered allmulticast mode [ 25.193749][ T297] bridge_slave_1: entered promiscuous mode [ 25.212041][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.219114][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.226166][ T295] bridge_slave_0: entered allmulticast mode [ 25.232518][ T295] bridge_slave_0: entered promiscuous mode [ 25.241867][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.248935][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.255981][ T295] bridge_slave_1: entered allmulticast mode [ 25.262327][ T295] bridge_slave_1: entered promiscuous mode [ 25.363866][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.370942][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.378211][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.385264][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.416834][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.423918][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.431211][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.438274][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.483709][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.490806][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.498077][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.505125][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.532791][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.540440][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.547596][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.555064][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.562739][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.570000][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.582699][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.589767][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.601301][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.608363][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.641170][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.648296][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.655939][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.663114][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.674058][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.681192][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.704694][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.711770][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.740770][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.747832][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.755464][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.762503][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.787240][ T297] veth0_vlan: entered promiscuous mode [ 25.800567][ T296] veth0_vlan: entered promiscuous mode [ 25.817485][ T294] veth0_vlan: entered promiscuous mode [ 25.834441][ T297] veth1_macvtap: entered promiscuous mode [ 25.841454][ T296] veth1_macvtap: entered promiscuous mode [ 25.863538][ T294] veth1_macvtap: entered promiscuous mode [ 25.890995][ T295] veth0_vlan: entered promiscuous mode [ 25.906479][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.947826][ T295] veth1_macvtap: entered promiscuous mode [ 25.952658][ T314] Zero length message leads to an empty skb [ 26.027072][ T325] mmap: syz.2.6 (325) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 26.066717][ T330] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.112692][ T331] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 26.126711][ T331] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2'. [ 26.139305][ T329] syzkaller0: entered promiscuous mode [ 26.145762][ T329] syzkaller0: entered allmulticast mode [ 26.248448][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.426110][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 26.438804][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.453869][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 26.463460][ T31] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 26.477523][ T31] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 26.493091][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 26.513102][ T31] usb 4-1: config 1 interface 1 has no altsetting 0 [ 26.526221][ T31] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 26.535765][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.551619][ T31] usb 4-1: Product: syz [ 26.555833][ T31] usb 4-1: Manufacturer: syz [ 26.569828][ T31] usb 4-1: SerialNumber: syz [ 26.588320][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.728299][ T45] usb 2-1: device descriptor read/64, error -71 [ 26.758363][ T322] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.789230][ T318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.798078][ T318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.808900][ T318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.820824][ T384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.830443][ T318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.839138][ T384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.850003][ T31] usb 4-1: selecting invalid altsetting 0 [ 26.859107][ T31] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 26.865673][ T31] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 26.888503][ T31] usb 4-1: USB disconnect, device number 2 [ 26.908295][ T322] usb 1-1: Using ep0 maxpacket: 8 [ 26.916723][ T322] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 26.929362][ T322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.945859][ T322] usb 1-1: config 0 has no interface number 0 [ 26.952309][ T322] usb 1-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 26.965807][ T322] usb 1-1: config 0 interface 200 has no altsetting 0 [ 26.974382][ T322] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 26.978326][ T45] usb 2-1: device descriptor read/64, error -71 [ 26.984205][ T322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.000360][ T322] usb 1-1: Product: syz [ 27.004566][ T322] usb 1-1: Manufacturer: syz [ 27.009642][ T322] usb 1-1: SerialNumber: syz [ 27.015204][ T322] usb 1-1: config 0 descriptor?? [ 27.238310][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.381030][ T45] usb 2-1: device descriptor read/64, error -71 [ 27.404068][ T398] syz.3.14 uses obsolete (PF_INET,SOCK_PACKET) [ 27.630610][ T45] usb 2-1: device descriptor read/64, error -71 [ 27.708770][ T405] netlink: 'syz.3.17': attribute type 21 has an invalid length. [ 27.739688][ T45] usb usb2-port1: attempt power cycle [ 27.812137][ T408] syzkaller0: entered promiscuous mode [ 27.817739][ T408] syzkaller0: entered allmulticast mode [ 27.887225][ T417] fuse: Bad value for 'fd' [ 28.079479][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 28.120381][ T45] usb 2-1: device descriptor read/8, error -71 [ 28.188893][ T395] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.260552][ T45] usb 2-1: device descriptor read/8, error -71 [ 28.328091][ T36] kauditd_printk_skb: 641 callbacks suppressed [ 28.328109][ T36] audit: type=1400 audit(1790479859.350:715): avc: denied { mmap_zero } for pid=449 comm="syz.2.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 28.339554][ T395] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 28.354216][ T36] audit: type=1400 audit(1790479859.360:716): avc: denied { map } for pid=449 comm="syz.2.23" path="socket:[4598]" dev="sockfs" ino=4598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 28.377021][ T395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 28.398922][ T395] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 28.410232][ T395] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 28.423483][ T395] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 28.434352][ T395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.445108][ T395] usb 4-1: config 0 descriptor?? [ 28.450717][ T428] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 28.458998][ T36] audit: type=1400 audit(1790479859.490:717): avc: denied { create } for pid=457 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.479399][ T36] audit: type=1400 audit(1790479859.490:718): avc: denied { create } for pid=457 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 28.498553][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 28.506336][ T36] audit: type=1400 audit(1790479859.500:719): avc: denied { create } for pid=457 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.526845][ T45] usb 2-1: device descriptor read/8, error -71 [ 28.643168][ T36] audit: type=1400 audit(1790479859.670:720): avc: denied { read } for pid=459 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.664058][ T45] usb 2-1: device descriptor read/8, error -71 [ 28.778462][ T45] usb usb2-port1: unable to enumerate USB device [ 28.823253][ T36] audit: type=1400 audit(1790479859.850:721): avc: denied { name_bind } for pid=465 comm="syz.2.28" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 28.844743][ T36] audit: type=1400 audit(1790479859.850:722): avc: denied { node_bind } for pid=465 comm="syz.2.28" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 28.868428][ T395] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 28.875879][ T36] audit: type=1400 audit(1790479859.900:723): avc: denied { block_suspend } for pid=465 comm="syz.2.28" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.898782][ T395] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 28.909159][ T395] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 29.129274][ T428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.137888][ T428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.146978][ T395] usb 4-1: USB disconnect, device number 3 [ 29.351186][ T471] syzkaller0: entered promiscuous mode [ 29.356826][ T471] syzkaller0: entered allmulticast mode [ 29.416514][ T322] usbhid 1-1:0.200: couldn't find an input interrupt endpoint [ 29.429527][ T36] audit: type=1400 audit(1790479860.460:724): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 29.469518][ T322] usb 1-1: USB disconnect, device number 2 [ 29.682063][ T509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=509 comm=syz.3.34 [ 29.695456][ T509] ======================================================= [ 29.695456][ T509] WARNING: The mand mount option has been deprecated and [ 29.695456][ T509] and is ignored by this kernel. Remove the mand [ 29.695456][ T509] option from the mount to silence this warning. [ 29.695456][ T509] ======================================================= [ 29.747443][ T512] 9pnet_fd: Insufficient options for proto=fd [ 29.754095][ T513] 9pnet_fd: Insufficient options for proto=fd [ 29.777031][ T515] 9pnet_fd: Insufficient options for proto=fd [ 29.783978][ T515] netlink: 288 bytes leftover after parsing attributes in process `syz.3.36'. [ 29.792935][ T322] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.898339][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 29.949327][ T322] usb 1-1: config 240 has an invalid interface number: 170 but max is 0 [ 29.957735][ T322] usb 1-1: config 240 has no interface number 0 [ 29.964115][ T322] usb 1-1: config 240 interface 170 has no altsetting 0 [ 29.972828][ T322] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice= 3.6a [ 29.981964][ T322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.990126][ T322] usb 1-1: Product: syz [ 29.994396][ T322] usb 1-1: Manufacturer: syz [ 29.999090][ T322] usb 1-1: SerialNumber: syz [ 30.058329][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 30.065656][ T45] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 30.074332][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.084911][ T45] usb 2-1: config 0 has no interface number 0 [ 30.091404][ T45] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 30.101787][ T45] usb 2-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 30.112077][ T45] usb 2-1: config 0 interface 98 has no altsetting 0 [ 30.120466][ T45] usb 2-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 30.130041][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.138293][ T45] usb 2-1: Product: syz [ 30.142778][ T45] usb 2-1: Manufacturer: syz [ 30.147529][ T45] usb 2-1: SerialNumber: syz [ 30.163931][ T45] usb 2-1: config 0 descriptor?? [ 30.172642][ T507] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 30.181168][ T507] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 30.214335][ T322] usb_ehset_test 1-1:240.170: probe with driver usb_ehset_test failed with error -32 [ 30.225757][ T322] usb 1-1: USB disconnect, device number 3 [ 30.393867][ T507] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 30.401141][ T507] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 31.118328][ T322] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.268294][ T322] usb 1-1: Using ep0 maxpacket: 8 [ 31.274876][ T322] usb 1-1: unable to get BOS descriptor or descriptor too short [ 31.282773][ T322] usb 1-1: too many configurations: 168, using maximum allowed: 8 [ 31.291851][ T322] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 31.300096][ T322] usb 1-1: can't read configurations, error -61 [ 31.314392][ T45] asix 2-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 31.324705][ T45] asix 2-1:0.98 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 31.335756][ T45] asix 2-1:0.98: probe with driver asix failed with error -71 [ 31.344184][ T45] usb 2-1: USB disconnect, device number 6 [ 31.428386][ T322] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.578323][ T322] usb 1-1: Using ep0 maxpacket: 8 [ 31.584982][ T322] usb 1-1: unable to get BOS descriptor or descriptor too short [ 31.592923][ T322] usb 1-1: too many configurations: 168, using maximum allowed: 8 [ 31.601946][ T322] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 31.609687][ T322] usb 1-1: can't read configurations, error -61 [ 31.616049][ T322] usb usb1-port1: attempt power cycle [ 31.856464][ T545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.46'. [ 31.865583][ T545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 31.875090][ T545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.46'. [ 31.958317][ T322] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 31.991272][ T322] usb 1-1: Using ep0 maxpacket: 8 [ 32.007591][ T322] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.015943][ T322] usb 1-1: too many configurations: 168, using maximum allowed: 8 [ 32.025226][ T322] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 32.032967][ T322] usb 1-1: can't read configurations, error -61 [ 32.084984][ T549] tipc: Started in network mode [ 32.094392][ T549] tipc: Node identity ac1414aa, cluster identity 4711 [ 32.101581][ T549] tipc: Enabling of bearer rejected, failed to enable media [ 32.112323][ T549] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 32.120712][ T549] tipc: Enabled bearer , priority 10 [ 32.168348][ T322] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 32.188736][ T322] usb 1-1: Using ep0 maxpacket: 8 [ 32.195227][ T322] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.203291][ T322] usb 1-1: too many configurations: 168, using maximum allowed: 8 [ 32.212775][ T322] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 32.220406][ T322] usb 1-1: can't read configurations, error -61 [ 32.226808][ T322] usb usb1-port1: unable to enumerate USB device [ 32.328334][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 32.388303][ T45] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 32.479541][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.490538][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 32.499627][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.508681][ T10] usb 2-1: config 0 descriptor?? [ 32.538289][ T45] usb 3-1: Invalid ep0 maxpacket: 64 [ 32.668336][ T45] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 32.828281][ T45] usb 3-1: Invalid ep0 maxpacket: 64 [ 32.834081][ T45] usb usb3-port1: attempt power cycle [ 32.918537][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 32.926874][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 32.938422][ T10] usb 2-1: USB disconnect, device number 7 [ 33.118474][ T66] tipc: Node number set to 2886997162 [ 33.178343][ T45] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 33.198668][ T45] usb 3-1: Invalid ep0 maxpacket: 64 [ 33.328310][ T45] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 33.348692][ T45] usb 3-1: Invalid ep0 maxpacket: 64 [ 33.354139][ T45] usb usb3-port1: unable to enumerate USB device [ 33.358313][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 33.518895][ T10] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 33.535731][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 33.544930][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.555576][ T10] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 33.562537][ T10] usb 2-1: No valid video chain found. [ 33.754629][ T570] netlink: 'syz.1.52': attribute type 12 has an invalid length. [ 33.764541][ T570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.768893][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.773569][ T570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.789054][ T10] usb 2-1: USB disconnect, device number 8 [ 33.928342][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 33.934549][ T45] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 33.942743][ T45] usb 4-1: config 0 has no interface number 0 [ 33.950152][ T45] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 33.959313][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.967316][ T45] usb 4-1: Product: syz [ 33.971504][ T45] usb 4-1: Manufacturer: syz [ 33.976109][ T45] usb 4-1: SerialNumber: syz [ 33.981656][ T45] usb 4-1: config 0 descriptor?? [ 33.987431][ T45] smsc95xx v2.0.0 [ 34.388746][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 34.388765][ T36] audit: type=1400 audit(1790479865.420:757): avc: denied { nlmsg_write } for pid=586 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.415244][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 34.425989][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 34.588303][ T322] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 34.636377][ T45] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 34.647234][ T45] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 34.659377][ T45] usb 4-1: USB disconnect, device number 4 [ 34.754735][ T322] usb 2-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 34.763888][ T322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.772155][ T322] usb 2-1: Product: syz [ 34.776366][ T322] usb 2-1: Manufacturer: syz [ 34.781196][ T322] usb 2-1: SerialNumber: syz [ 34.989639][ T591] tmpfs: Unknown parameter 'noinode32' [ 34.995210][ T36] audit: type=1400 audit(1790479866.020:758): avc: denied { mounton } for pid=590 comm="syz.1.62" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 35.022049][ T322] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 35.030982][ T322] usb 2-1: USB disconnect, device number 9 [ 35.180331][ T36] audit: type=1400 audit(1790479866.210:759): avc: denied { read } for pid=599 comm="syz.2.65" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.203061][ T36] audit: type=1400 audit(1790479866.210:760): avc: denied { open } for pid=599 comm="syz.2.65" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.229115][ T36] audit: type=1400 audit(1790479866.210:761): avc: denied { ioctl } for pid=599 comm="syz.2.65" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.265830][ T600] kvm: MWAIT instruction emulated as NOP! [ 35.272041][ T36] audit: type=1400 audit(1790479866.210:762): avc: denied { set_context_mgr } for pid=599 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 35.304125][ T36] audit: type=1400 audit(1790479866.330:763): avc: denied { map } for pid=599 comm="syz.2.65" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.304772][ T600] rust_binder: Failure in copy_transaction_data: EINVAL [ 35.328293][ T36] audit: type=1400 audit(1790479866.330:764): avc: denied { call } for pid=599 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 35.336995][ T600] rust_binder: 599:600 transaction call to 599:0 failed EINVAL, code 0 size 0-24 [ 35.373249][ T36] audit: type=1400 audit(1790479866.400:765): avc: denied { create } for pid=609 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 35.376073][ T612] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.68'. [ 35.398068][ T611] netlink: 140 bytes leftover after parsing attributes in process `syz.3.67'. [ 35.412021][ T36] audit: type=1400 audit(1790479866.400:766): avc: denied { unlink } for pid=610 comm="syz.0.68" name="#1" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 35.446502][ T615] devpts: called with bogus options [ 35.453511][ T615] 9pnet_fd: Insufficient options for proto=fd [ 35.479927][ T322] rust_binder: 599: undelivered TRANSACTION_ERROR: 29201 [ 35.614671][ T625] overlay: Bad value for 'redirect_dir' [ 35.658290][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 35.715772][ T631] 9pnet: p9_errstr2errno: server reported unknown error [ 35.769298][ T645] netlink: 72 bytes leftover after parsing attributes in process `syz.1.77'. [ 35.798425][ T10] usb 1-1: device descriptor read/64, error -71 [ 36.018341][ T322] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 36.038379][ T10] usb 1-1: device descriptor read/64, error -71 [ 36.148324][ T322] usb 2-1: device descriptor read/64, error -71 [ 36.278339][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 36.398336][ T322] usb 2-1: device descriptor read/64, error -71 [ 36.408915][ T10] usb 1-1: device descriptor read/64, error -71 [ 36.638358][ T322] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 36.659294][ T10] usb 1-1: device descriptor read/64, error -71 [ 36.688362][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 36.768346][ T322] usb 2-1: device descriptor read/64, error -71 [ 36.774764][ T10] usb usb1-port1: attempt power cycle [ 36.818343][ T9] usb 3-1: device descriptor read/64, error -71 [ 37.008346][ T322] usb 2-1: device descriptor read/64, error -71 [ 37.058615][ T9] usb 3-1: device descriptor read/64, error -71 [ 37.118436][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 37.126145][ T322] usb usb2-port1: attempt power cycle [ 37.149617][ T10] usb 1-1: device descriptor read/8, error -71 [ 37.298553][ T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 37.306745][ T10] usb 1-1: device descriptor read/8, error -71 [ 37.438309][ T9] usb 3-1: device descriptor read/64, error -71 [ 37.468327][ T322] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 37.489340][ T322] usb 2-1: device descriptor read/8, error -71 [ 37.548351][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 37.569369][ T10] usb 1-1: device descriptor read/8, error -71 [ 37.573801][ T683] binder: Bad value for 'max' [ 37.629369][ T322] usb 2-1: device descriptor read/8, error -71 [ 37.678352][ T9] usb 3-1: device descriptor read/64, error -71 [ 37.699619][ T10] usb 1-1: device descriptor read/8, error -71 [ 37.788425][ T9] usb usb3-port1: attempt power cycle [ 37.808530][ T10] usb usb1-port1: unable to enumerate USB device [ 37.868324][ T322] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 37.868324][ T66] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.899343][ T322] usb 2-1: device descriptor read/8, error -71 [ 38.018369][ T66] usb 4-1: Using ep0 maxpacket: 8 [ 38.024851][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 38.033332][ T66] usb 4-1: config 14 has an invalid interface number: 35 but max is 0 [ 38.040156][ T322] usb 2-1: device descriptor read/8, error -71 [ 38.041698][ T66] usb 4-1: config 14 has no interface number 0 [ 38.053888][ T66] usb 4-1: config 14 interface 35 has no altsetting 0 [ 38.062277][ T66] usb 4-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.92 [ 38.071348][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.079381][ T66] usb 4-1: Product: syz [ 38.083555][ T66] usb 4-1: Manufacturer: syz [ 38.088136][ T66] usb 4-1: SerialNumber: syz [ 38.128341][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 38.148409][ T322] usb usb2-port1: unable to enumerate USB device [ 38.155922][ T9] usb 3-1: device descriptor read/8, error -71 [ 38.289360][ T9] usb 3-1: device descriptor read/8, error -71 [ 38.538306][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 38.559374][ T9] usb 3-1: device descriptor read/8, error -71 [ 38.583633][ T695] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.689364][ T9] usb 3-1: device descriptor read/8, error -71 [ 38.798413][ T9] usb usb3-port1: unable to enumerate USB device [ 39.168325][ T395] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 39.298509][ T395] usb 2-1: device descriptor read/64, error -71 [ 39.512596][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 39.512616][ T36] audit: type=1400 audit(1790479870.540:789): avc: denied { write } for pid=708 comm="syz.2.98" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 39.518785][ T710] input: syz0 as /devices/virtual/input/input5 [ 39.549460][ T395] usb 2-1: device descriptor read/64, error -71 [ 39.549531][ T36] audit: type=1400 audit(1790479870.580:790): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=468 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.567369][ T709] rust_binder: 708:709 got transaction to invalid handle 1 [ 39.578394][ T36] audit: type=1400 audit(1790479870.580:791): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=468 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.588773][ T709] rust_binder: 708:709 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 39.608657][ T36] audit: type=1400 audit(1790479870.580:792): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=468 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.643250][ T10] rust_binder: 708: undelivered TRANSACTION_ERROR: 29201 [ 39.662529][ T36] audit: type=1400 audit(1790479870.690:793): avc: denied { read } for pid=712 comm="syz.2.99" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.720342][ T36] audit: type=1400 audit(1790479870.750:794): avc: denied { connect } for pid=712 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.739918][ T36] audit: type=1400 audit(1790479870.750:795): avc: denied { setopt } for pid=712 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.818312][ T395] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 39.948320][ T395] usb 2-1: device descriptor read/64, error -71 [ 40.188309][ T395] usb 2-1: device descriptor read/64, error -71 [ 40.231702][ T717] netlink: 'syz.0.100': attribute type 4 has an invalid length. [ 40.239522][ T717] netlink: 17 bytes leftover after parsing attributes in process `syz.0.100'. [ 40.254929][ T61] device offline error, dev sda, sector 278838 op 0x1:(WRITE) flags 0x4000 phys_seg 59 prio class 2 [ 40.265873][ T61] device offline error, dev sda, sector 279344 op 0x1:(WRITE) flags 0x4000 phys_seg 30 prio class 2 [ 40.276944][ T61] device offline error, dev sda, sector 279856 op 0x1:(WRITE) flags 0x4000 phys_seg 5 prio class 2 [ 40.287761][ T61] device offline error, dev sda, sector 280368 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 40.298625][ T61] device offline error, dev sda, sector 280878 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 40.308395][ T395] usb usb2-port1: attempt power cycle [ 40.311307][ T61] device offline error, dev sda, sector 281384 op 0x1:(WRITE) flags 0x0 phys_seg 41 prio class 2 [ 40.325493][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35173) [ 40.337049][ T61] device offline error, dev sda, sector 281710 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 40.347999][ T61] device offline error, dev sda, sector 282216 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 40.359062][ T61] device offline error, dev sda, sector 282726 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 40.369931][ T61] device offline error, dev sda, sector 283232 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 40.388627][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35467) [ 40.400211][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35723) [ 40.411790][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35979) [ 40.423317][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35981) [ 40.434892][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139302) [ 40.434909][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2021, error -5) [ 40.434935][ T12] Buffer I/O error on device sda1, logical block 35943 [ 40.446672][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139306) [ 40.460699][ T12] Buffer I/O error on device sda1, logical block 35944 [ 40.465913][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139322) [ 40.478248][ T12] Buffer I/O error on device sda1, logical block 35945 [ 40.484417][ T36] audit: type=1400 audit(1790479871.490:796): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 40.513597][ T12] Buffer I/O error on device sda1, logical block 35946 [ 40.525206][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139324) [ 40.536298][ T12] Buffer I/O error on device sda1, logical block 35947 [ 40.544619][ T36] audit: type=1400 audit(1790479871.490:797): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.550775][ T12] Buffer I/O error on device sda1, logical block 35948 [ 40.571638][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139370) [ 40.583838][ T12] Buffer I/O error on device sda1, logical block 35949 [ 40.594625][ T36] audit: type=1400 audit(1790479871.490:798): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.603527][ T721] Write-error on swap-device (8:0:794558) [ 40.624058][ T12] Buffer I/O error on device sda1, logical block 35950 [ 40.629899][ T721] Write-error on swap-device (8:0:794566) [ 40.636911][ T721] Write-error on swap-device (8:0:794574) [ 40.644618][ T12] Buffer I/O error on device sda1, logical block 35951 [ 40.651923][ T12] Buffer I/O error on device sda1, logical block 35952 [ 40.659540][ T66] usb-storage 4-1:14.35: USB Mass Storage device detected [ 40.660094][ T721] Write-error on swap-device (8:0:794582) [ 40.672412][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 40.672464][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 40.672545][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 40.688753][ T721] Write-error on swap-device (8:0:794590) [ 40.697927][ T395] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 40.711146][ T721] Write-error on swap-device (8:0:794598) [ 40.729512][ T721] Write-error on swap-device (8:0:794606) [ 40.735245][ T721] Write-error on swap-device (8:0:794614) [ 40.741010][ T721] Write-error on swap-device (8:0:794622) [ 40.746745][ T721] Write-error on swap-device (8:0:794630) [ 40.760918][ T66] usb-storage 4-1:14.35: Quirks match for vid 04e6 pid 0007: 1 [ 40.777893][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 40.798349][ T395] usb 2-1: device descriptor read/8, error -71 [ 40.814758][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 40.832709][ T66] usb 4-1: USB disconnect, device number 5 [ 40.840842][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 40.843220][ T111] udevd[111]: worker [320] terminated by signal 7 (Bus error) [ 40.854136][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 40.873311][ T111] udevd[111]: worker [320] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 40.879954][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 40.897624][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 40.907310][ T111] udevd[111]: worker [324] terminated by signal 7 (Bus error) [ 40.915601][ T716] Buffer I/O error on dev sda1, logical block 0, lost async page write [ 40.926181][ T716] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 40.934686][ T716] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 40.943171][ T716] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 40.951675][ T716] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 40.960167][ T716] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 40.968640][ T716] Buffer I/O error on dev sda1, logical block 150, lost async page write [ 40.977094][ T716] Buffer I/O error on dev sda1, logical block 157, lost async page write [ 40.985603][ T716] Buffer I/O error on dev sda1, logical block 158, lost async page write [ 40.994071][ T716] Buffer I/O error on dev sda1, logical block 159, lost async page write [ 41.004928][ T74] Aborting journal on device sda1-8. [ 41.010505][ T74] JBD2: I/O error when updating journal superblock for sda1-8. [ 41.013459][ T111] udevd[111]: worker [324] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:14.35' [ 41.019537][ T395] usb 2-1: device descriptor read/8, error -71 [ 41.078379][ T716] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 41.268312][ T395] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 41.282423][ T746] can0: slcan on pts0. [ 41.299436][ T395] usb 2-1: device descriptor read/8, error -71 [ 41.314726][ T751] netlink: 'syz.0.109': attribute type 19 has an invalid length. [ 41.322541][ T751] netlink: 'syz.0.109': attribute type 28 has an invalid length. [ 41.429458][ T395] usb 2-1: device descriptor read/8, error -71 [ 41.508342][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 41.528340][ T66] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 41.538495][ T395] usb usb2-port1: unable to enumerate USB device [ 41.658313][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 41.664597][ T31] usb 3-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 41.674911][ T31] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 41.685470][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 41.693204][ T31] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 41.702761][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.710825][ T31] usb 3-1: Product: syz [ 41.715007][ T31] usb 3-1: Manufacturer: syz [ 41.719697][ T66] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 41.730250][ T31] usb 3-1: SerialNumber: syz [ 41.735156][ T66] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 41.749113][ T66] usb 4-1: string descriptor 0 read error: -22 [ 41.755316][ T66] usb 4-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 41.764396][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.774788][ T66] usb 4-1: low speed audio streaming not supported [ 41.782115][ T66] usb 4-1: low speed audio streaming not supported [ 41.784393][ T111] udevd[111]: worker [352] terminated by signal 7 (Bus error) [ 41.796321][ T111] udevd[111]: worker [352] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 41.812074][ T111] udevd[111]: worker [391] terminated by signal 7 (Bus error) [ 41.819710][ T111] udevd[111]: worker [391] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 41.900360][ T111] udevd[111]: worker [313] terminated by signal 7 (Bus error) [ 41.907539][ T767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=767 comm=syz.1.112 [ 41.909899][ T111] udevd[111]: worker [313] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0' [ 41.920414][ T767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=767 comm=syz.1.112 [ 41.943213][ T767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=767 comm=syz.1.112 [ 41.966259][ T31] usb 3-1: invalid UAC_HEADER (v1) [ 41.976501][ T746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.986157][ T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 41.993221][ T746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.998355][ T31] usb 3-1: USB disconnect, device number 10 [ 42.025254][ T66] usb 4-1: USB disconnect, device number 6 [ 42.060497][ T745] can0 (unregistered): slcan off pts0. [ 42.618217][ T795] netlink: 'syz.1.118': attribute type 4 has an invalid length. [ 42.634820][ T798] netlink: 228 bytes leftover after parsing attributes in process `syz.2.119'. [ 42.646464][ T798] netlink: 228 bytes leftover after parsing attributes in process `syz.2.119'. [ 42.661796][ T804] fuse: Bad value for 'fd' [ 42.844390][ T833] capability: warning: `syz.2.129' uses 32-bit capabilities (legacy support in use) [ 43.098306][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 43.259424][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.270385][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.280186][ T9] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 43.289302][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.298070][ T9] usb 2-1: config 0 descriptor?? [ 43.369901][ T841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=841 comm=syz.2.132 [ 43.370307][ T842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=842 comm=syz.2.132 [ 43.395851][ T842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.404742][ T842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.628296][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 43.712126][ T9] hid-led 0003:1D34:000A.0002: unknown main item tag 0x0 [ 43.719840][ T9] hid-led 0003:1D34:000A.0002: unknown main item tag 0x0 [ 43.726917][ T9] hid-led 0003:1D34:000A.0002: unknown main item tag 0x0 [ 43.778792][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 43.783991][ T66] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 43.792787][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.803731][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.813519][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 43.822588][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.831297][ T31] usb 3-1: config 0 descriptor?? [ 43.837208][ T31] hub 3-1:0.0: USB hub found [ 43.911892][ T9] hid-led 0003:1D34:000A.0002: probe with driver hid-led failed with error -71 [ 43.922112][ T9] usb 2-1: USB disconnect, device number 18 [ 43.939385][ T66] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 43.947473][ T66] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.957767][ T66] usb 4-1: config 0 has no interface number 0 [ 43.964419][ T66] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.975710][ T66] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.985660][ T66] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.998690][ T66] usb 4-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 44.007804][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.017058][ T66] usb 4-1: config 0 descriptor?? [ 44.039764][ T31] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 44.052457][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 44.058526][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 44.078606][ T31] usb 3-1: USB disconnect, device number 11 [ 44.107064][ T853] syz.0.135: attempt to access beyond end of device [ 44.107064][ T853] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 44.120424][ T853] FAT-fs (loop0): unable to read boot sector [ 44.127951][ T853] capability: warning: `syz.0.135' uses deprecated v2 capabilities in a way that may be insecure [ 44.193563][ T856] SELinux: Context system_u:object_r:hald_mac_exec_t:s0 is not valid (left unmapped). [ 44.430323][ T66] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 44.437981][ T66] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 44.445972][ T66] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 44.453817][ T66] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 44.461608][ T66] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 44.469605][ T66] holtek_mouse 0003:04D9:A04A.0003: unknown main item tag 0x0 [ 44.477142][ T66] holtek_mouse 0003:04D9:A04A.0003: unexpected long global item [ 44.485315][ T66] holtek_mouse 0003:04D9:A04A.0003: hid parse failed: -22 [ 44.492529][ T66] holtek_mouse 0003:04D9:A04A.0003: probe with driver holtek_mouse failed with error -22 [ 44.510964][ T872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=872 comm=syz.1.140 [ 44.567850][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 44.567870][ T36] audit: type=1400 audit(1790479875.590:837): avc: denied { append } for pid=874 comm="syz.2.141" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 44.606232][ T875] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 44.938729][ T322] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 44.955312][ T36] audit: type=1400 audit(1790479875.980:838): avc: denied { mounton } for pid=890 comm="syz.0.145" path="/26/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 44.955510][ T891] incfs: Can't find or create .index dir in ./file0 [ 45.018372][ T891] incfs: mount failed -1 [ 45.058152][ T36] audit: type=1400 audit(1790479876.080:839): avc: denied { getopt } for pid=894 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.162016][ T322] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 45.170231][ T322] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 45.193869][ T322] usb 2-1: config 0 has no interface number 0 [ 45.200066][ T36] audit: type=1400 audit(1790479876.220:840): avc: denied { write } for pid=896 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 45.234152][ T322] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 45.243418][ T322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.266096][ T36] audit: type=1400 audit(1790479876.220:841): avc: denied { write } for pid=896 comm="syz.0.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.281989][ T907] tmpfs: Bad value for 'gid' [ 45.288286][ T322] usb 2-1: Product: syz [ 45.294111][ T322] usb 2-1: Manufacturer: syz [ 45.297425][ T907] tmpfs: Bad value for 'gid' [ 45.308302][ T322] usb 2-1: SerialNumber: syz [ 45.309678][ T908] tmpfs: Bad value for 'gid' [ 45.318639][ T322] usb 2-1: config 0 descriptor?? [ 45.329329][ T908] tmpfs: Bad value for 'gid' [ 45.596132][ T36] audit: type=1400 audit(1790479876.620:842): avc: denied { read write } for pid=921 comm="syz.2.152" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 45.620506][ T36] audit: type=1400 audit(1790479876.620:843): avc: denied { open } for pid=921 comm="syz.2.152" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 45.735656][ T36] audit: type=1400 audit(1790479876.760:844): avc: denied { mount } for pid=877 comm="syz.1.142" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 45.770979][ T36] audit: type=1400 audit(1790479876.780:845): avc: denied { search } for pid=877 comm="syz.1.142" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 45.792669][ T36] audit: type=1400 audit(1790479876.780:846): avc: denied { read } for pid=877 comm="syz.1.142" name="trace" dev="tracefs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 46.033492][ T930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 46.446824][ T31] usb 4-1: USB disconnect, device number 7 [ 46.469529][ T933] netlink: 'syz.3.155': attribute type 4 has an invalid length. [ 46.484062][ T936] lo: entered allmulticast mode [ 46.489354][ T935] netlink: 'syz.3.155': attribute type 4 has an invalid length. [ 46.579590][ T943] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 46.581952][ T943] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 46.852767][ T953] netlink: 'syz.3.163': attribute type 4 has an invalid length. [ 46.937525][ T960] syzkaller1: entered promiscuous mode [ 46.950213][ T960] syzkaller1: entered allmulticast mode [ 47.412172][ T982] process 'syz.3.172' launched './file0' with NULL argv: empty string added [ 47.432522][ T982] Invalid argument reading file caps for ./file0 [ 47.658307][ T395] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 47.696185][ T322] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 47.702800][ T322] usb 2-1: No valid video chain found. [ 47.709238][ T322] usb 2-1: USB disconnect, device number 19 [ 47.737583][ T994] netlink: 48 bytes leftover after parsing attributes in process `syz.1.177'. [ 47.811726][ T395] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 47.829963][ T395] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 47.841538][ T395] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 47.853217][ T395] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 47.866772][ T395] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.876080][ T356] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 47.883698][ T395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.892313][ T395] usb 3-1: Product: syz [ 47.896564][ T395] usb 3-1: Manufacturer: syz [ 47.901475][ T395] usb 3-1: SerialNumber: syz [ 47.912516][ T981] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 47.921113][ T395] cdc_mbim 3-1:1.0: skipping garbage [ 48.041886][ T356] usb 4-1: config 0 has no interfaces? [ 48.048936][ T356] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 48.058023][ T356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 48.066410][ T356] usb 4-1: SerialNumber: syz [ 48.076741][ T356] usb 4-1: config 0 descriptor?? [ 48.122998][ T981] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 48.136226][ T981] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 48.507152][ T1033] rust_binder: Write failure EINVAL in pid:117 [ 48.507292][ T1033] rust_binder: Write failure EINVAL in pid:117 [ 48.546500][ T1038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 48.561814][ T1038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 48.570742][ T1038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 48.580835][ T1038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 48.589727][ T1038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 48.598590][ T1038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 48.607460][ T1038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 48.616344][ T1038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 48.636593][ T1044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.647164][ T1044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.751461][ T981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.760057][ T981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.768864][ T981] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 48.776015][ T981] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 48.783348][ T395] cdc_mbim 3-1:1.0: setting rx_max = 16384 [ 48.898303][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 49.000627][ T395] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 49.006970][ T395] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 49.013918][ T395] wwan wwan0: port wwan0mbim0 attached [ 49.021284][ T395] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 76:63:63:70:cc:ac [ 49.034946][ T395] usb 3-1: USB disconnect, device number 12 [ 49.042126][ C0] ------------[ cut here ]------------ [ 49.045000][ T395] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 49.047639][ C0] WARNING: CPU: 0 PID: 17 at mm/page_alloc.c:5286 __alloc_pages_noprof+0x109/0x7e0 [ 49.056582][ T150] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 49.065633][ C0] Modules linked in: [ 49.065650][ C0] CPU: 0 UID: 0 PID: 17 Comm: ksoftirqd/0 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 49.065677][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.097687][ C0] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 49.103702][ C0] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d f5 d6 0b 06 00 0f 85 c2 00 00 00 c6 05 e8 d6 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 49.123348][ C0] RSP: 0018:ffffc90000117800 EFLAGS: 00010246 [ 49.129472][ C0] RAX: 0000000000000000 RBX: 0000000000000014 RCX: 0000000000000000 [ 49.137492][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900001178b8 [ 49.145537][ C0] RBP: ffffc90000117930 R08: ffffc900001178b7 R09: 0000000000000000 [ 49.153560][ C0] R10: ffffc900001178a0 R11: fffff52000022f17 R12: ffffc90000117840 [ 49.161568][ C0] R13: dffffc0000000000 R14: 1ffff92000022f04 R15: 0000000000000000 [ 49.169579][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 49.178528][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.185144][ C0] CR2: 00007f5198298ff8 CR3: 000000011ef92000 CR4: 00000000003526b0 [ 49.193142][ C0] DR0: 0000000000000004 DR1: 00000000000001f8 DR2: fffffffffffffffe [ 49.201146][ C0] DR3: ffffffdfefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 49.209143][ C0] Call Trace: [ 49.212435][ C0] [ 49.215370][ C0] ? handle_softirqs+0x1aa/0x620 [ 49.220331][ C0] ? run_ksoftirqd+0x20/0x30 [ 49.225023][ C0] ? kthread+0x2c4/0x360 [ 49.229289][ C0] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 49.235056][ C0] ___kmalloc_large_node+0x81/0x220 [ 49.240296][ C0] __kmalloc_large_node_noprof+0x1e/0xd0 [ 49.245954][ C0] __kmalloc_node_track_caller_noprof+0x30d/0x4f0 [ 49.252399][ C0] ? kasan_save_alloc_info+0x3a/0x50 [ 49.257706][ C0] ? __alloc_skb+0x13f/0x360 [ 49.262315][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 49.267359][ C0] kmalloc_reserve+0x376/0x4f0 [ 49.272139][ C0] __alloc_skb+0x13f/0x360 [ 49.276571][ C0] __netdev_alloc_skb+0x10b/0x430 [ 49.281629][ C0] ? __cfi___netdev_alloc_skb+0x10/0x10 [ 49.287191][ C0] ? kasan_save_alloc_info+0x3a/0x50 [ 49.292508][ C0] ? __kasan_kmalloc+0x96/0xb0 [ 49.297303][ C0] rx_submit+0x10d/0x8b0 [ 49.301588][ C0] ? __kasan_check_write+0x18/0x20 [ 49.306712][ C0] ? usb_alloc_urb+0x9b/0x1f0 [ 49.311407][ C0] ? rx_alloc_submit+0x89/0x140 [ 49.316314][ C0] rx_alloc_submit+0xaa/0x140 [ 49.321012][ C0] usbnet_bh+0x780/0x9b0 [ 49.325274][ C0] usbnet_bh_tasklet+0x20/0x30 [ 49.330059][ C0] tasklet_action_common+0x232/0x620 [ 49.335380][ C0] tasklet_action+0x28/0x30 [ 49.339928][ C0] handle_softirqs+0x1aa/0x620 [ 49.344705][ C0] run_ksoftirqd+0x20/0x30 [ 49.349155][ C0] smpboot_thread_fn+0x486/0x8b0 [ 49.354128][ C0] kthread+0x2c4/0x360 [ 49.358198][ C0] ? __cfi_smpboot_thread_fn+0x10/0x10 [ 49.363694][ C0] ? __cfi_kthread+0x10/0x10 [ 49.368311][ C0] ret_from_fork+0x67/0xa0 [ 49.372748][ C0] ? __cfi_kthread+0x10/0x10 [ 49.377353][ C0] ret_from_fork_asm+0x1a/0x30 [ 49.382150][ C0] [ 49.385178][ C0] ---[ end trace 0000000000000000 ]--- [ 49.391930][ T10] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 49.401750][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 49.411637][ T10] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 49.424962][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.434915][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 49.436271][ T395] wwan wwan0: port wwan0mbim0 disconnected [ 49.442991][ T10] usb 1-1: Product: syz [ 49.453295][ T10] usb 1-1: Manufacturer: syz [ 49.460300][ T10] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 49.690136][ T10] usb 1-1: USB disconnect, device number 12 [ 50.638957][ T395] usb 4-1: USB disconnect, device number 8