last executing test programs: 54.808295857s ago: executing program 0 (id=42): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109640, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0xd, 0x0, 0x3, 0x2}, 0x10}, 0x1, 0x7}, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x14, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x464, 0x8, 0x70bd28, 0x25dfdbfe, "5187cdc54866cc106cc61cab66211362aaeae9d9c3d50b2b23ecd013ce7eb144ecbc21eb", ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24000010}, 0x880) r3 = getpid() syz_pidfd_open(r3, 0x0) fsopen(0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000000)={0x0, 0x3, 0xefff, 0xa}) r5 = socket(0xa, 0x3, 0xff) getsockopt$inet6_int(r5, 0x29, 0x7, 0x0, &(0x7f0000000080)) syz_clone3(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3], 0x1}, 0x58) 54.708984595s ago: executing program 0 (id=44): mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, 0xffffffffffffffff, 0x8000000) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x408000, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x1}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000440)={0x400, 0x7fff, 0x3, 0x4}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$nfc_llcp(r5, 0x118, 0x2, &(0x7f00000000c0)=""/222, 0xde) recvmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000000)=@tipc, 0x80, &(0x7f0000000380)}, 0x1}, {{&(0x7f00000003c0)=@un=@abs, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/30, 0x1e}, {&(0x7f0000000480)=""/22, 0x16}], 0x2, &(0x7f0000000500)=""/4096, 0x1000}, 0x2}], 0x2, 0x2142, &(0x7f0000001580)={0x77359400}) 54.701821156s ago: executing program 0 (id=46): r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000001600)={0x1, 0x6, 0x1000, &(0x7f0000000600)=""/4096}) (async) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0xffff, 0xc, 0x5]}, &(0x7f0000000080)=0x44) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = syz_io_uring_setup(0x363, &(0x7f00000001c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r1}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x8ae83) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r6, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r7 = syz_open_dev$loop(&(0x7f0000002500), 0x10000000008, 0xd18135cf55169abc) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000000)={r5, 0x0, {0x2a12, 0x80010000, 0x0, 0xff, 0x4, 0x0, 0x2, 0x10007, 0x0, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e805e108038948224ad54afac11d875397bdb22d00d40600000061acfc3fdc15dfb8ea28000000000400", "90be8b1c3c500500000053a5000000000000000202000000efffffffff11e4ff", [0x802, 0xfffffffffffffffd]}}) (async) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000100), &(0x7f0000000340)={0x0, 0xfb, 0xfd, 0x2, 0x75, "72bb1afc2b5bbe8c5d7cb34101990915", "27c5bea0d7c8ba8a027ffd9d558c36bba6b3af155219add9111e4b0e77c0990772d56f583789630756fe8e5ccc5c85dab7b131b66e657f4de55ca6137d63ad2e677dd675fc8a11e8ff867270658420723060c8a0b31412bc1e82fd5e2fcf09d0f5508e7220d8e499fef771bd0965a2aece7b4d58758619d49d37613ff8d7ba00667eb1e983f9a4a2c6b0c3bedf2eec2b6bbe86aaae2d79746601ac905501d5f334292ded1927536601ee4576cd36b34f7076066ede155da396645b29c8240eb9f6a12eb3e5fca0886a41d0aef55090327bd6b57eae05fe38fefd283d9c241d84c59bdb3088b0bc92"}, 0xfd, 0x1) (async) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001c00010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) 54.645839486s ago: executing program 0 (id=47): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x280000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) openat$cgroup_int(r0, &(0x7f00000001c0)='cpuacct.usage\x00', 0x2, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) sendmsg(r2, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000003c0)="4a973df015d10aa28229ef4a9599906ccddff23656d202ad9e1c67e7dcd699bc48dab8c92475adb1c252203eb5505ff16beb72d13b94acbbe65048f4e13bc8eab26ce789e1f67de219f1dbdc982847dd60db83669e4331547777a516adb6d6e5295d83ce19817debb476732e6cb9c28c180886b353db09b3b368e1d71559b27c02ffd82f08c80e1412fd473184df933b9f0792bb366104a4e3314fdb1e71c561b410c7bd1b7f67b65341a0d5eac005c2cf42e0e4e38799699e4463ca1c976744061666818fb2592cb415e6dcee084b041905dad7253029c0ac20492b491958be54d8422ebd5380ad00b652b8b4886461ca3119ce1d81", 0xf6}, {&(0x7f0000001700)="522177bcbe78bf0c3a513d9136acba38fe9a78c8b8fb3d9975216d0adbab5d7e383f5cc3a526e29371aeefe2fe4fa61d65f272c9920915e6c4e4b11d8684a238b5a9c5549e11d2264c653c8d016b593f281b3b96e00a1facee5ffc99415efe43834e78f12dd74c5aba683a813efad83a566bb273b8a1dd752e68955f466960607eaf9505311aaa799c9dde35e03ae5b6d95a0b65ebcbb7f29950a4344c5d6277e3bf5a64679dec9b8ba83765efa1c144e4bfd557c09739", 0xb7}, {&(0x7f00000017c0)="2d30d4fe0e630853be5aa76d3d63d200a4043080a829637d06", 0x19}, {&(0x7f0000001800)="5c1836dfef4e0fce2db05725d608e5d00829b9f3b9dad401af9069d84768d72ae27d9e8df1bb3a6deb7cae05a261c2ac9e6c91f701e63e1fcd3f1f6263ceadd8983fe3f0782e58c923e9868d7be748293e399d4daf5c8ae5b060ee8897b7b89ccb13a749fd78f2ffbf00153d640477ac9f58388e7a64edf3bcc3adf152a30a976e9de73e60b0590a9c474730cb8d29d655b6eade75cda3e4e12832cde4128299a42b4df1be0c83eb99f4a23e47880d75e9b72ef78c0b0cf72bb281bc65e565238695eb6dd873e19c2036ffce3b472dd57d23da22329ab22f765452c05883ac45fdc81ef1467b97441939e9fa6d8b2da5c096b5d233aeaec0b384d736c0771d348546ea86537f0ee433110b3b9260ba59e25cf065e7b85c23e02af889a9b59b206f10bb74291ade79e5e0e044f7b82e39dff2455ca97022f0c12c1c83ef6266847ce04c76da8980a8bd12a3ea7ffa35f1dfaea5657f2a88847e38cf637c83324d4344147572df854b91d1a919d2b10f77f0a356d50750f99f007552cdf2ed68d977d17106abfbe126aa0fe525ae111ccaa4a8ee24d0965c13429be1bff884896670cad857e9507901631a678f918939642c16d93dd4bd5b2a08fee71408d992225bae9cdf15128fae2fe15c471004f73849d3fb28fbdade3bdc48523a641b524c826b83d6bc74f9b173faa3cbb2865af8a0b830587385756f7e6fa49c6e262d0a1beefe4b3179180e2131346d3cf192c7ad21e3c8bb34baf49b0d6b17a07d2b714c7bac949a3415be9bc4ea53ed115288bcfbb9f2da19bba0bec9a0b59bb74f676be20c728d7d6f3154c980dbde97d0a4e84fe0f07a0b0928d2218fa9f25cda9109158e95b38ff9b534d65da56b62543b76fd37cd4f47e135dbfaa9f182aadcf1f48f30479042bde51bae7bf42fb599074508c872edea1baf66c97248f35be9b4098899675228607ffdc9295da741aec7a00d1887b47336296152a3ff4649260578d360d6b5c6bd1a2a1e3c4b187f86317b943d164403054c72ddd2afea1b9c65d530125bd854e47b8223781dc88df2a7036c4af8a45f58dad9a5c787de341fff24edaaef64f7710e6420adec257b9b17c149e68b563e7143c1a3ed9953a215195d998fbc3b9dd1da2a9adba65ece53a995269ede2e4d648c12ee8443d699575051daed006e715dd4daa7c40e41c85d10fe21b540213b3e22b52cff4052fccb55ead3d5347089ef3d39dd5c2209adb6bdedfa7a754d10b2d9e02d5f075b0783c34c317260e72ec1c616bb3fa0a9b1e4bbe439ecd9b7b3337e1137326a57953916e7927ea3fc6d93d8c209b4f243294dc863aeed1892dbacdeb8cc2ca5e1da8ef10bb4838b6739bec8fa0b6c75b056c017a9cea96826af65bd907deb2e398158fd02ed9be8122629af5b570381c007e5400ec455e2f23567271664e371a151f46272dbc433491d61bcf44034591117994b15fe2a7eacc0217a0d4b35b6c6b79ef6c55d29fc9ee5eca1251deafe9e4bda5eec59c18a961ad8ad237dd440c2b01bd61419fd5a5228fed786b6b937c93092f80982336186e3e1db447e4432346fd378fffd6ce6ba394a5f54e99a3b31e5c47977ce9b90692a7d8a4ba5f4fda0351f02399a8e15aa63cf4d9eca804c19ae903fbf05244c79a3ce7f90b771da58f9184f9ef1ac795727e5884892121001273a2265c883f9ae059665f951b3a74f1eba56def143a1a78b90e1b516729808351504ef4281d2d2496f9ac3a3fcee208d48b5a6da153aaae494816c0c711ae3d2889e06cb6088d32dd68f79cea0f6dca9bbeec9a72ba80a52b465f03fc18bb24f1894708b6378a77f47c20e973f7ba3371c111f76d5e04569db4c9849974e354ce91a8b02746dffa4315f7ef8cdd5193ab1af8ffeb59ade7a955bd19b9a9dceb4581f435f11a2baab02d77c4e3d976be82fb6e5b4719858f7f246fcf26b69add08695c1e689c3242b7d0c024183eede46fe2112068ad72e3a05a825274b53ccf4deb529d779bd620eefe23b220e56e671ffe119ad0692bed678a82754c5b2a3b50a17705331cdb4964a9ab547d2650ccd7d24f53afcf4829e43d0435674bd5405dba851586790b15a65700e141ece9f8bf9623561a36900940f85550244a6a004482cef92b4cdedde63a6b89e76c9b01de97031856e5cf6660598992ec0e3202a721f9cb6c0bd83b7316d311ce5a26540412448f316cab2664841ce7a0df0d1634ec5dfc9defc90ab276cc98378d0cf8e4aec0726eb869329548db682798ddcff7bbf74e4e0a7cf46a1abbfb50c3befc217cbfa07935bc01b67f718b1a74faf053445b510331e587a71ff9232a831214cc74bf3eae227a911cca229ed402239b8a5ea7bd49120f206e82825fa670e04e7caf3ce2731cce560e57698f55ad787796908644d0e8c769fb2bd276b86fa21772d0914dd3aeb07fff59e844f83044bd047f4f391cb651f00298f75385314f274081443df6e11f481a8033b8f61377c2fcab86859ad1c0dcf139f3cc6dc9ca0b854e71d9b0c0bf5d266ab38cbae78f0ea404e38b47e1c628cccffea4cd50f01da815010e05867491498e683a4b5edd87b443066cac5e81321000be5ca692d7e1919f59ff50389e0242c93783b9e5ca3582d50b767afbfb369b9ce5b5679563698ee44669f8debf984ab92eb8140bf8a075687565e803adb07de768f572d4a86cc1654bb8af1788834c609482980de7d0a66524e6758e1ccda704b9af6c25a5cea6835e9306e6f9b8761bac4bf9735c35d060d52e0c9eb77e83762c4d58dc5c0b7304fbdd5e5668368e5afaf92d534caa70ceeef9da05e17840bf8df083e614b4af25afb7e69f9a024a84eb6c18c1f08d02932ecbc9dd020e363e32649e647a97b11e3656eec6bf386773af301798052abcfc53a4f69c0a13f6d1bf30a31bb466d0f358834a801baa55c10555e092a15dd83d2a978710ac2af84a7faa2725478d1dd7a910934c67c23a7560d29710932c746098854c3f16743cbe531ef044f7a8cc85ed526c3a526b90152fc1b3a9980a9b78afb265d11a32af1ddafd024a6ffcc2c9f7a6c2833a02349acf19c48ffaed592f61d9a868124afa0908dc1fa506cc8f76e783aedeb0b206827cd13849f59d7a9dc19cad73db53d332170d0fb86f8da280115e53b8a07dfdf50146c253ccbf4fce560f0f43de0f46778e158c4f68091f300d9d2c54a70e32634e5202a771af0356e2e8c9e5bff894ccd481ecf9107d3c4f7591d8883310659fbd980216ec01284753074fa620ba6439fa67afc9af77fb4e4a2753a70bf97ddf26b760f7d8c8d6203c6539ac701e334d249a973fb9e1ef1c6b1178a658b6ab2bf375bdaef84428a45d43f26429590c3e31ceac612c286ae64a4945fb8c3ceef03b1e068f53abada001254432532f3b8ec9ed22b3c7301f9c86a538ea7253c10758164bdfc2144fc926a40553c55a12f2e775bcac618c8cb32ec202367a6504218cb2c1d9ea99918aed527f9a155c4eec37e4669bb37471c107ca7b5d1c161cf1ea2b190858e4f627e5f95201792e5566fa741b7ac09e249b86f51697c72a7feb0a262364201e7e3426731b39125e12fc12ba87a876282251e9e9cfc3ae26144108ddf5393ee0ee017d72309006b69681ed16746e125f062414b16da7ecbf155f2327baec642046ea48143d351f4ca8fbdfba9d85ac77fe75e812f4d3bebaa32eb93d5c97cccc750dd834fe8aa49ee4ed8091ea3836a9526f0b4c0aa1ac80dcbb7e5966b18bd924be9b30e5501f731eae20ee39cae6349ef6335ba56fecb8f030e4aa7fc4119f7d3a241dc5d5056a9e40b17f4b835cdfebf8e9c9f06d260fcf73c58e865fd8e5fd15486af118bab71357308d07b972b71f7eed599cd1f5a5716ebdfb8dfea64efd21737dab858fbb23e7feec7578f51baeedceb88c9c13bdb91480cf04066829bd86652f6d38d2b12378b719cb3a30af8555c7c551dbeb18d08fdd5b047d35f0c5f3fe876d9b1781582b5e188664c6e1610f5fc13ae10e04bb97d8af6a411d622d6c2323f54bb733369374af6722e5736044776468d44351bff75dd2521f34bfced16eb208b4dc538787a096366d14f90beaafb0cd219b0a3e927592a8c6496ef0b5764ae23b6c00bad7131e13162987176ee5eee7e1599d42355581d60283cc64db6b7d08257e200614cb8bda39a5f0bbe85bacb41e9bb08691b67f1e33d78584493cdc3e19c6223e014271efa27833cc376e8e667d55a9a75e75370c5b65205720a4218bfff131343b4be0bf453eb5db83d6bc581dd940c28bfe3acc378d44e4d591d40c51e626a0908a3d6b7592e4dcdc487765d79dd6d2b03b88f3b5c3d22a72b8476f67283a05186433f6b7f1b7b1cdbe79e479b1347332566710ef59bd095708b1d2a40f636bb61bf41a2adf31fdb45149bbcc66371e30b9a813873163b796c792ad8b22565dc2b1d57ac8375711b8cb2e75a6dae0949055a5df654e02fa796cd050c3e8319c1ba8e9f0bb155f830576d3f2deea716fedfecdfa874670616f732324073df29911eff317828a82424cee6040c6e0214ebf42281396f62b0e841d4a2758ad709e173390b754ed39e48f85378ddaaaa2ddbc5aa9237b7b9cf2576843ee75e07447c84caf01e29004169a8c598168a8f16228d5cba4d0e4bbefff919c916d78778183fb49ce2917793dceaf92313261a59a661f108d445b800a15373990108eb13e133d3332666cd35117dc4519650ca998c313f2329cf6fed9353b59ff7434e51c622edbe0160b08aad80f854de651b877fc75100a72448cc862d3ce728e7d89afd55a84d24426c6c98f6c196e989402d62b1db652b0b8fd5b103038c99d28331be2a8ec1a9656bf025a4a97b16ed8a3c964cb132b1e2d42bbb6397c1fba021104e49d55e0e00aa6b4e8d3ec076758edf9e6f442024c324963a0fee7151d1a67a8ef45789538900205ae44da7bc262dc1313a9dc56f0b3ddef6aca7772e9eb6579e0ca7dcf5cf2930be8465035381332b9ad5a22a185bef4df8207847f0f88af063da4bff55ad190943b9c45ab2d1e0f1947f3197d95ae9bc26a9addac07549fb6ece80ec3058827c768a39db6e5ba361fa35a399ea786c403f54958351a9640d4e4a3d3477142c272bff19377d8c507611aaceb037d6aefde3cac0be7240cf2490229e0959d67216900da39a600655039db5e4e3a9626514971c6cb7086c2a91b4a6f046e44687acb098a24a27ac1ab657249c9cb644350060b0c1d3bb0c24459d558d53e0a402af71cffe53875e12051ce8ca0ed2253b23d7c7b816739cda6b0bbbc6f1a39a343f23edf649df00daef7fe9514ede33b8a8b728e95ae63f3fef7cbfdaa977c5046e3663ecd465d5b5b4378bec4f505cd64027f1b6a57632aac44a99061a52c180131bdf2484b5f20d75e5865c856eb75d024b185c3ae58adac264ce8aa6e5acf932b47a218b856aa325c01960b7a4ea27a8f2fbc8213976a01fe5c525c2c2eabad5e804ecac0ee0c0869bab058a42c3d22c2044c8300e040569b6c546b042ae698ae7dceed3e48d9a7686812b724f12d6136904a7a5a34c1a373671e90b49779776915c6d0308d206b7c3f4ca191554341aff6637998e75fde1d944e39efc66cee3815904a039d794a30cef553578287088dcadb6273b60f80f5bc435ef503f91d319995da1a0b3ca3d1de621f2fd336fe54326798f1b6231991a0eaafab34924de4d60a4ff47707bd63b2df28b8b4bf0bfd1cd25e77487e603fe0ceafb4ffac824cd66", 0x1000}], 0x4, &(0x7f0000002840)=[{0x68, 0x10e, 0x3, "bb23095076555b6c9b6a3d0faf0e6fd8b7e698bf1861134b0bfd0293fab2238befdf5cf24f293bc2423168f55587cd1ae62c58fe1ba26ca13af487f03e1db137b3f5614cdda499d02460e6aa5b375bcc16e6e59f7b01ef"}, {0xa0, 0x29, 0x7, "3495b7ae492e880844066d5bcad18e4d9ea3e0160146ad156dd90bd383b5b7d6ca27e0bead6de055010028412e427b5f19199db525dfec0f8ba7f51a74ab64b2ad421877e009fb24c5aaf9af0bea3e01968048172e916396c53fa7df51b65428f08651660ecb457fe30d2d063884df1f7ee571a03c361988beb7aa603ee94a848e0f34600c6bb6192cc981d3308dfa62"}, {0xe0, 0x112, 0x5, "1bbc208b1ea0ec857d25c9f5701d04fa805dc512b77aa819522f76304bec85bb8bede3c7178fe0d0f3a557a102c7cbd7ab0bbfb691c153cb305825def0f9ce1eb845b25d0e42d8e3fd754e4d31ebd4fba143ff9ec5529219e501d0b10fb6aabd6c1912945d172e42208405dcb15a67748e43cb045e200b55203d19ed534921a4be1146f279814867c5198ca16593da939ccdbd3e8aa0dbb7d3ee9e6df37b00078a6b04016e9ca3e249acb92a48a2d4d15837c9de354c8e9b16fc047a7f82a6f01d48c2e2fda8063d26"}, {0x68, 0x88, 0x5, "e82ce5855d8a5a3914820873ad27435a6d9fdf86b67e00163a17f2cda155a7c70dccccde93af6d37a00ec30881fef9fba016d71044f75d0d3e96e8c621b86cfbb15f383949271ed994328e0425ec7d9034f8faa122a9"}, {0xb8, 0x104, 0x2, "64f084d03a16d2773ef5be623756b075628f78b3a5df0be1ee06b819083f7a82dca88a10187b6195657a8e267fba5759e85ce28f3b5d3d4d79f3b96c7a88eb4c44b0ed5a819751e8ae5cfb6e406656f43d7cfda44978db3085b117fa45df60d8a6d9478268862edb5a1acad1ba7ff5f18001289578876f925462aa62c2c6d1175482425d4b9cafc4318a32f16363346f69e1464a602b8d83c389144ce719502f9c4ce65427"}, {0x108, 0x88, 0xf, "0d651c37c7196984099bef5685d6ccb8f8236ba4df0249a29ac2bbca522bbf790ef60a8f7633c4d46e01310ae33aa2ac58585c25ee71d55b286e000a224fda4fbe8ab035e91f13169c312c2501705476df12c2e6a4ab30871da590f428828b337324e5dca6cceba307769192c551120332b025f92c6d0dcdb721743a945e1a6e6226afda0eec7f9a60faebec9171d10202af12066ca92ad3357ea74f41a07b2d15a392b1229a18b48608062ef6f7184709ac55ca2869d5fea36a5caca3eea2b189d6bdd1b5b819af56bc0dd1584547839ae729652a97253c11cfc4755624e94596a2c763284d092ca61975bc68c2547bbf0183634d7ed6"}], 0x410}, 0x4004000) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000680)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0), 0x204002, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 54.553022003s ago: executing program 0 (id=48): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x44}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x3d0}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x5}, {0x16, 0x1}, {0x1b, 0x1}, {0x18}, {0x3, 0x1}, {0x12}, {0x1}, {0x30}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = dup(r0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 54.51480749s ago: executing program 0 (id=49): r0 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/cpu_dma_latency\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) write(r1, &(0x7f0000000500)="00943577", 0x4) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000040)={'system_u:object_r:audisp_exec_t:s0', 0x20, 'system_u:object_r:etc_aliases_t:s0', 0x20, 0x6, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x72) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, &(0x7f00000001c0)) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) 54.425421806s ago: executing program 32 (id=49): r0 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/cpu_dma_latency\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) write(r1, &(0x7f0000000500)="00943577", 0x4) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000040)={'system_u:object_r:audisp_exec_t:s0', 0x20, 'system_u:object_r:etc_aliases_t:s0', 0x20, 0x6, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x72) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, &(0x7f00000001c0)) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) 38.308998255s ago: executing program 2 (id=161): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x4, 0x0, &(0x7f0000000280)) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffffffffffffff, "b0555949927384ab7a654f41a7cc4f8a38f1ad163da53a40281c2e66a10574b0", 0xfffffffe, 0x5, 0x7, 0xffffffff}, 0x3c) unshare(0x40000) recvfrom$inet(r0, 0x0, 0x0, 0x2140, 0x0, 0x0) 38.304366986s ago: executing program 2 (id=162): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="40150500000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x402) r2 = getpgrp(0x0) r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x12, &(0x7f00000000c0)={0x11, 0xe8, 0xc}) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="40150500000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x402) (async) getpgrp(0x0) (async) gettid() (async) rt_tgsigqueueinfo(r2, r3, 0x12, &(0x7f00000000c0)={0x11, 0xe8, 0xc}) (async) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, 0x0) (async) 35.527839092s ago: executing program 2 (id=174): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'a', ' *:* ', 'wm\x00'}, 0x9) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000340)="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", 0x110, r0) 35.509357006s ago: executing program 2 (id=175): setresgid(0xee00, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}], 0x20, 0x40044}}], 0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r1, &(0x7f0000000600)=ANY=[], 0x78) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}, 0x41}], 0x1, 0x382, 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/tty/ttyS1/console\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000001940)={0x2020}, 0x2020) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000100)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0x20, "dce4f0020100000000001b347d5c00010200"}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000000c0)={0x5, 0x9, 0x80080000, 0x1, 0x17, "b23d84eb32035e9d70cb7628b768f980b57f50"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000006c0)={0x0, &(0x7f0000000340)=[@nested_amd_vmsave={0x183, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0x1, 0x7322}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x675, 0x1, 0xa529, 0x6}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmload={0x182, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x2, 0x2}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x8, 0x0, 0x1}}, @enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0xb88, 0x4}}, @uexit={0x0, 0x18, 0x9}, @code={0xa, 0x7c, {"420fc72e66420ff3500066baf80cb83c5a6983ef66bafc0c66edc7442400d0000000c744240200000000c7442406000000000f011424646736440f1c37470f01bc235630635ef3440f0966baf80cb89cc91484ef66bafc0ced0f015b00b9800000c00f3235008000000f30"}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_load_code={0x12e, 0x5a, {0x1, "440f20c03502000000440f22c00f01de420f01c50f0f8d9b6e00000cc4236d78549600ed3e660f3a41ed7a66b884008ee8460f01c4c4a34d7d2a00c4030569710f4a"}}, @cpuid={0x64, 0x18, {0x7, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x8083000, 0x4e93}}, @wrmsr={0x65, 0x20, {0x2db, 0xfc6}}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x8, 0x7}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0x984}}, @code={0xa, 0x62, {"2e430f01cab9800000c00f3235000400000f3066460f4d33420f01cfc7442400c8000000c74424026fd40000ff2c2466b891008ec80f20e035400000000f22e02e440f2347c4c27d13e766b8a5000f00d0"}}, @nested_amd_vmsave={0x183, 0x18, 0x2}], 0x380}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x21, "4372070000001000476fb2940acfbe4c0e24fa98ddf306e50000b646376f385355"}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r8, 0x400454ca, &(0x7f0000000000)=ANY=[@ANYBLOB="2e2e070c371303ed0133f2ff8689b3f20e2c12"]) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r9, 0x1, 0x1f, &(0x7f00000002c0)=""/123, &(0x7f0000000080)=0x7b) 35.416894012s ago: executing program 2 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ec) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffe, 0x2000005, 0x10010, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0x2, 0x101}, 0x0, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0xd2, 0x0, 0x0) (async, rerun: 32) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './proc', [{0x20, '\xeb^)-'}, {0x20, 'proc\x00'}, {0x20, '\xc9#}}#'}, {0x20, ']'}, {0x20, '/dev/kvm\x00'}, {0x20, '/dev/kvm\x00'}], 0xa, "a8c1ac9d47f38cfdc69ba922f19671eef9e05b1db4c326122ddaf3aa2bab504b6ad9b0126c0bad0d3244c2969f43e10436fcec9b337d9919b35871882c29744368d05c6792b1a5794a4d6052a6d0f6"}, 0x80) (rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xb2d8cc875bd00181, 0x0) (async) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 35.382824759s ago: executing program 2 (id=177): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0) 20.300706339s ago: executing program 33 (id=177): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0) 6.624100142s ago: executing program 4 (id=342): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001a00), 0x2080, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x9, 0x7f, 0x5, 0x7, 0xc, 0x0}) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/wireless\x00') io_setup(0x7, &(0x7f0000000080)=0x0) io_pgetevents(r3, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) io_cancel(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x7, r2, &(0x7f0000000340)="c2be5a7da4e52940935ef9816bcf9d22fe3c19227c9192e155ba25010c350371803044f39dcb3ea937b42be4b9345fb616a7c45a5c2e8a97c9753b0d79d51755a0b13eba8e168eb8a361f66e0580cee50d9b976e8ffbac656caece96ad2cdd11276c70456da5ac34fcd1cf57d896af0cbd8c7f982f523049cccb08404b4cdb8aaf95640aee8bdb8c2e91a8ce52d5399c8ce3e3ff95e46ce0aef032632dd79995d996ec2d96d33387c9744a5861f4b69203887fd462264f602efc9e67ea66351ed973a53bc1a6a51a309c231b981aa661f32e467f1cfabe77bd15f2f259486ddc8a814012d6eb5f4999e0", 0xea, 0x0, 0x0, 0x2}, &(0x7f0000000480)) r4 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x23, &(0x7f0000000080)=""/24, &(0x7f0000000000)=0x18) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) socket$vsock_stream(0x28, 0x1, 0x28) r7 = syz_ublk_setup_io_uring(0x1943, &(0x7f0000000200)={0x0, 0x5fc6, 0x1, 0xfbffffff, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000000)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xe96, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x100}}}, &(0x7f0000000300)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r13, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r13}) r14 = dup(r12) syz_ublk_setup_queues(r14, r11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r14}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x80800, 0x1000000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x800, 0x2, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x7, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(r12, 0x1, 0x3c, &(0x7f0000000340)={0x1000001, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r15 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r15, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000240)=0x1) 5.656920958s ago: executing program 4 (id=346): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) (async) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) (async) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000300)="00214500002c00000000400600000a0000010a000002ae27497b001c000100000001601003090000000001010101", 0x2e}], 0x1, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000014000b0000400600000a0000010a000002ae270050000000020000ffff601003e80000000201010101", 0x2e}], 0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000140)=0x2004, 0x4) (async) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) (async) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000ffe, 0x0) (async, rerun: 32) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async) ioctl(r2, 0xc138fd09, &(0x7f0000000100)="040000000000000004000000000072000000000000f20ae1bbac6ac0b9a1") 5.507073026s ago: executing program 4 (id=347): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$evdev(&(0x7f0000007fc0), 0x1fcc, 0x80) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000500)=""/23) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000000c0)=""/230, &(0x7f00000001c0)=0xe6) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x9cc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x362c, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x7, "8f2b5fa6fe928d"}, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000001a00)={0x84, &(0x7f0000001600)={0x20, 0x16, 0x4, 'D+\x000'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000240)='./sys\x00', 0x0, 0x42) write(r3, 0x0, 0x0) close(r3) write(0xffffffffffffffff, &(0x7f0000000300)='pcspkr', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r4, &(0x7f0000000900)='0x1', 0x3) r5 = openat(0xffffffffffffff9c, 0x0, 0x101202, 0x0) write(r5, &(0x7f0000000b00), 0x0) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) 3.89575989s ago: executing program 5 (id=353): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="00ff070088"], 0x3c}, 0x1, 0x0, 0x0, 0x40042}, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000002240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r5, 0x0, 0x500) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xe, r7, 0x1, 0x0, 0x6, @remote}, 0xfffffe81) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fedbdf2501000000000000000b000000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4000006}, 0x40) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20082d20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fbdbdf25010000000000000007410000004c00187fffffff73797a310000000000000000000000008d4d5e576f17ec5100"/98], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000003c0)={r4, &(0x7f0000000280)='%%+\x00', 0x6800, &(0x7f00000002c0)={@_ha_fsid={[0x8, 0x5]}, {0x9b, 0xffff, 0x0, 0x5}}, 0x7ff, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000380)=0x5}) syz_io_uring_setup(0x4a91, &(0x7f0000000440)={0x0, 0x48da, 0x4000, 0x2, 0x186, 0x0, r9}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 3.601026953s ago: executing program 1 (id=355): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1', 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x783541, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) sendmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="f37d0c90df074f93f2bf392e90f95b09b93e29f31eb7b9ca4a61069b9fd2ec83facfd9adb1fe84cdf04924b5a47dbfe871476bacf5f7fa1d287a32784a62b7e54724877ab3cc65f8e0c57fd7a73e581e83b9be5b525f53d01950305ec1e97a4aa9465076a6ec73ef6c5d8e9e", 0x6c}, {&(0x7f0000000180)="bdcf9ba64729c84f5a022dd6dcbfa3b1e8a379df991fed5da9d95ccda6ccb75f66da3d7bb95c9fc27c1eb7355486e30908c8ded8d2d3c0baf98ac86600122796c265f070ad7e66606568d08591c3424c887e25093d083966e53544290637c0a4319933ef42cbb7a6ba6f4d7ca30a47c747518a53319234f099245f6ce4d95260c51edb66f285e9aceb3b09257842007a50ff3f4d00f1c740154cf6444c24c7bb4af58065ab5c6a0eae6ac22adc274c346619c7950a8b1aa380f251e7a1bb", 0xbe}], 0x2, &(0x7f0000000280)=[@rights={{0x1c, 0x1, 0x1, [r0, r2, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}], 0x38, 0x40801}, 0x40880) 3.045194645s ago: executing program 5 (id=356): mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x2000003, 0x10, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x400, 0x0, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x21a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x1, 0x2ea}}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002300), r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x1, 0x0) write(r5, &(0x7f00000006c0)='3', 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) setuid(0xee01) syz_clone(0x100691, 0x0, 0x0, 0x0, 0x0, 0x0) 2.665509314s ago: executing program 5 (id=358): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) read$hidraw(r1, &(0x7f0000000380)=""/156, 0x9c) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) 2.51948801s ago: executing program 5 (id=359): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x4e22, @multicast2}}}, 0x88) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xffff) (async, rerun: 32) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000600)={{r3}, "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"}) (async, rerun: 32) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000380)=@canfd={{0x2, 0x0, 0x1, 0x1}, 0x23, 0x3, 0x0, 0x0, "22bb191c3413648fc570aaa49837f125b6d9fa2ec226aaabb8f7dfe2bf31d8a19abec1420a9e11cdb7d7d9a554bf30755cdf02364042e256d8b1c8c10c764cd9"}, 0x48}}, 0x4008054) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x8000) (async) r5 = socket(0x1e, 0x4, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000280)={'wg0\x00', 0x2}) (async, rerun: 32) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@md0, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x20) r7 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) 2.19301174s ago: executing program 5 (id=362): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x1c5, 0x0, 0x7}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_TSC_KHZ_cpu(r1, 0xaea3) setns(0xc9, 0x0) r2 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x80) recvmmsg(r2, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001600)=""/4104, 0x1008}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000180)=""/47, 0x2f}], 0x3}, 0x8}], 0x1, 0x140, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x8) setuid(0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r3, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="8c", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f00000000c0)="b0", 0x1}, {&(0x7f0000002640)="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", 0x1000}], 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x841}}], 0x2, 0x11) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x440301, 0x0) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000600)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./bus/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000480), 0xb15804, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './dev'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0xc00, 0x24) lseek(r4, 0x0, 0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x1) read$FUSE(r4, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x6d4000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_CAP_HYPERV_SYNIC(r6, 0x4068aea3, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000084}]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000680)={0x0, {}, 0x0, {}, 0x7fffffff, 0x2293afcb5c2f9ae2, 0x12, 0x10, "fb8560650b89ad74fc477768af38542f11e2cba65a5c2a30519b75b75154a444ace5ac3bc5a0a9c7d3605a691f0b012cea72cf089e349cdc6e824471f3cf5e5c", "a95dae7c19f8ebc48a9607f3ff25b80aea3acbdcd543a25fd7d2ae0abd1b55c2", [0x1000, 0x61686d1b]}) 2.073099162s ago: executing program 4 (id=363): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x4, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x0, 0x20000000, 0x82, 0x0, 0x7, 0x9, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x7ff, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x7ffc, 0x5, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3000000, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x4, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x2c, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x1, 0x3e7, 0x9, 0x5, 0x102, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0x3, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x3, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0xfffffffc, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x8001, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x1, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x4, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x5, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 1.996783496s ago: executing program 5 (id=364): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0xac1, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002300), r3) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="d22b2dbd715600fdd8df251f368f"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40040) (async) close_range(0xffffffffffffffff, r0, 0x2) (async) syz_io_uring_setup(0x4803, &(0x7f00000002c0)={0x0, 0xae31, 0x2, 0x2, 0x40382}, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x719, 0x3, 0x9, 0x2, {{0x31, 0x4, 0x3, 0x3b, 0xc4, 0x67, 0x0, 0xcd, 0x4, 0x0, @broadcast, @private=0xa010101, {[@generic={0x86, 0xd, "da691ce0e5f8ea597ba687"}, @end, @lsrr={0x83, 0x1f, 0x6f, [@multicast2, @multicast1, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x13, 0x37, [@rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @lsrr={0x83, 0x1f, 0x85, [@multicast1, @rand_addr=0x64010100, @empty, @rand_addr=0x64010101, @multicast1, @multicast1, @loopback]}, @timestamp_prespec={0x44, 0x34, 0x4f, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x8}, {@loopback, 0x8}, {@broadcast, 0x1}, {@loopback, 0x3ff}, {@multicast1, 0xfffffffd}, {@multicast2, 0x2}]}, @end, @ssrr={0x89, 0x7, 0xe8, [@private=0xa010101]}, @generic={0x89, 0x6, "982a0ee1"}, @lsrr={0x83, 0xf, 0xe9, [@multicast1, @remote, @local]}]}}}}}) (rerun: 32) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000540)=@deltclass={0x578, 0x29, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe, 0x9}, {0x9, 0xb}, {0x4, 0xa}}, [@c_cbq={{0x8}, {0x460, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0xffe0}, 0x2, 0x2}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x1, 0x8}, 0x715, 0x3}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x400, 0x1, 0x3, 0x0, 0x400, 0x8, 0x2, 0x0, 0x45, 0x3, 0xfffffffe, 0x7, 0x6, 0x6, 0x8000, 0xfffffe01, 0x80, 0x4fb4, 0x5b7, 0x9, 0xfffffff8, 0x200, 0x2, 0x200, 0x4, 0x0, 0x4e, 0x3, 0x0, 0x4, 0x6, 0x7, 0x5, 0x6, 0x9, 0x1, 0x9458, 0x9, 0x100, 0x9, 0x6, 0x7, 0x100, 0x4, 0x5, 0x9, 0xc8, 0x4, 0x6, 0x3, 0x1ff, 0xf9, 0x0, 0x5, 0x80000000, 0xff, 0xd4c, 0x5, 0x7, 0x2, 0xfffffff8, 0x9, 0x5, 0xa792, 0x7, 0x80000000, 0xcb, 0x8, 0x8001, 0x0, 0x9, 0x6c5, 0x40, 0xfffffffe, 0x4, 0x79c, 0x0, 0x401, 0x0, 0x3, 0x0, 0xc13, 0x1000, 0x7, 0x7fffffff, 0x72a3, 0x9, 0xf5, 0xe4e4, 0x1, 0x0, 0xeb, 0x6, 0x40, 0x1, 0x10001, 0x0, 0x6, 0x6, 0x0, 0x4, 0x1, 0x44, 0x8, 0x4, 0x6, 0x0, 0x800000, 0x0, 0x60d4, 0x0, 0xffffffff, 0x1ff, 0x9, 0xc, 0x10001, 0x5, 0x6, 0x80, 0x7, 0x5e, 0x3, 0x3, 0x62, 0xb993, 0x7, 0x6ea2, 0x1, 0x5, 0xc, 0x8000, 0x2, 0xfff, 0x8, 0x1d7, 0x3, 0x9b, 0x875, 0x1, 0x9, 0xffffffff, 0x6, 0xffff8001, 0xb, 0x101, 0x5, 0x40, 0x5, 0x5, 0x7, 0x5, 0xffffffff, 0x0, 0x9, 0x80000001, 0x400, 0x7ff, 0x6, 0x4, 0x1000, 0x3, 0x8, 0xffff, 0x2, 0xffffffff, 0x5, 0x7ff, 0xcf, 0x9, 0x70000000, 0x80000001, 0xa0, 0x8, 0x49, 0x7, 0x0, 0x10001, 0x200, 0x5, 0x3, 0x8b9f, 0xfffffff7, 0x6, 0x4, 0x0, 0x800, 0x5, 0xff, 0x9, 0x0, 0x5, 0xf0c, 0xfffffffd, 0x80, 0x8, 0x3822, 0xff, 0x7, 0x8, 0x0, 0x8, 0x5, 0xc91, 0x7f, 0x10000, 0x1, 0x4000, 0xc, 0x6, 0x5, 0x1ff2, 0x0, 0x81, 0x6, 0x5, 0x7, 0x9, 0x80000001, 0x8, 0x4e, 0x5, 0x9, 0x84, 0xb45, 0xffffffff, 0x7, 0x7ef, 0x1, 0x230, 0x3, 0x5, 0x5, 0x9, 0x1, 0x2e, 0x7, 0x6, 0x0, 0xd7, 0x5, 0x5, 0x4, 0xc0d, 0x3, 0x9, 0xe, 0x3ff, 0x3, 0xff, 0x4, 0x8, 0x0, 0x9, 0x7fffffff, 0x8, 0xd819]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xc}, 0x9, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x2, 0x9, 0xb, 0x1, 0x7}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2f, 0x0, 0x1d, 0x3, 0xfa9, 0xa5c2, 0x7, 0xf127}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x4}}}, @c_atm={{0x8}, {0x34, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x7, 0x7}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0x6}}, @TCA_ATM_HDR={0x1e, 0x3, "32325a7544d00c642648aae63ec8cd8863d8668905486e4c093e"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5}}}, @c_atm={{0x8}, {0x30, 0x2, [@TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x21, 0x3, "9e0d6bcf92c96bc1cbef8d0c0cbe7ce9cf7892a931cf6f4975aa3c0805"}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_FD={0x8, 0x1, r0}]}}, @c_cbq={{0x8}, {0x14, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x9, 0xffff}, 0x5, 0x8}}]}}]}, 0x578}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) (async) syz_usb_connect$midi(0x5, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="120111020000001030144b4744000102030109023a00010110402c09040000020103303b0724030207003009050a0240000297fa0425010009050402100009070c0b2501078b5d9c1fc73a07"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 1.822963988s ago: executing program 1 (id=365): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001a00), 0x2080, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x9, 0x7f, 0x5, 0x7, 0xc, 0x0}) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/wireless\x00') io_setup(0x7, &(0x7f0000000080)=0x0) io_pgetevents(r3, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) io_cancel(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x7, r2, &(0x7f0000000340)="c2be5a7da4e52940935ef9816bcf9d22fe3c19227c9192e155ba25010c350371803044f39dcb3ea937b42be4b9345fb616a7c45a5c2e8a97c9753b0d79d51755a0b13eba8e168eb8a361f66e0580cee50d9b976e8ffbac656caece96ad2cdd11276c70456da5ac34fcd1cf57d896af0cbd8c7f982f523049cccb08404b4cdb8aaf95640aee8bdb8c2e91a8ce52d5399c8ce3e3ff95e46ce0aef032632dd79995d996ec2d96d33387c9744a5861f4b69203887fd462264f602efc9e67ea66351ed973a53bc1a6a51a309c231b981aa661f32e467f1cfabe77bd15f2f259486ddc8a814012d6eb5f4999e0", 0xea, 0x0, 0x0, 0x2}, &(0x7f0000000480)) r4 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x23, &(0x7f0000000080)=""/24, &(0x7f0000000000)=0x18) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) socket$vsock_stream(0x28, 0x1, 0x28) r7 = syz_ublk_setup_io_uring(0x1943, &(0x7f0000000200)={0x0, 0x5fc6, 0x1, 0xfbffffff, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000000)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xe96, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x100}}}, &(0x7f0000000300)=0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r13, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r13}) r14 = dup(r12) syz_ublk_setup_queues(r14, r11, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r14}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x80800, 0x1000000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x800, 0x2, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x2f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x7, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(r12, 0x1, 0x3c, &(0x7f0000000340)={0x1000001, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r15 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r15, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r16 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0) ioctl$PPPIOCSMRU1(r16, 0x40047452, &(0x7f0000000240)=0x1) 1.059893837s ago: executing program 4 (id=369): arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) r0 = syz_open_dev$evdev(&(0x7f0000007fc0), 0x1fcc, 0x80) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x5a2240, 0x0) r3 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r3, 0x1) flock(r2, 0x1) flock(r1, 0x1) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000500)=""/23) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000000c0)=""/230, &(0x7f00000001c0)=0xe6) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) write(r5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='pcs', 0x3) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r6, &(0x7f0000000900)='0x1d6b', 0x6) r7 = openat(0xffffffffffffff9c, 0x0, 0x101202, 0x0) write(r7, &(0x7f0000000b00), 0x0) close(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) 925.052362ms ago: executing program 3 (id=370): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0xa201, 0x1}, 0x18, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r1, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') writev(r0, &(0x7f0000000800)=[{&(0x7f00000000c0)="009e969c", 0x4}], 0x1) 818.499771ms ago: executing program 3 (id=371): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4) 794.462835ms ago: executing program 4 (id=372): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000002c0)={r1, &(0x7f00000000c0)='syz', 0x40000, &(0x7f0000000140)={@_ha_fsid={[0x100, 0x5]}, {0x8, 0x200, 0x3, 0x5}}, 0x5, &(0x7f00000001c0), &(0x7f0000000280)=0x4}) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c8a, 0x1, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x74e5, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff, 0x0, r5}}], 0x1, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xdc9}]}) sendto$packet(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r8, &(0x7f0000000080)='id_legacy\x00', 0x0) recvmmsg(r7, 0x0, 0x0, 0x10022, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r3) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000002c0)={r1, &(0x7f00000000c0)='syz', 0x40000, &(0x7f0000000140)={@_ha_fsid={[0x100, 0x5]}, {0x8, 0x200, 0x3, 0x5}}, 0x5, &(0x7f00000001c0), &(0x7f0000000280)=0x4}) (async) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x8000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c8a, 0x1, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x74e5, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff, 0x0, r5}}], 0x1, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xdc9}]}) (async) sendto$packet(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) keyctl$restrict_keyring(0x1d, r8, &(0x7f0000000080)='id_legacy\x00', 0x0) (async) recvmmsg(r7, 0x0, 0x0, 0x10022, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) 736.834726ms ago: executing program 1 (id=373): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw6\x00') io_setup(0x3ff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x16f) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000080)={[&(0x7f0000000340)=' wO\xd5\xce\x82\x89r\xa0\xfe\xc3Z\x15\xfds\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\xba\xb3\xd2\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5\x19\b\x00\x00\xd3\x91\x84x\x9d\x8eg\x85\xeb\x9e;\x8f\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8\xfdS=I\x16R\xcer\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV)\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m\x00', &(0x7f0000000440)='\xa1\xed\x03( wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\x80j$\xe6Z\xde\xf1pC\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x0e\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV)\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m\x00'/152]}) (async, rerun: 32) r1 = socket$inet(0x2, 0x2, 0x0) (rerun: 32) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) (async) syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa000, 0xfffd}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x4388, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x6, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xb, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x71, 0xffdffff8, 0x7, 0xffffff80, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x6, 0x0, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x8000006, 0x3, 0xb83, 0x7, 0x5, 0x0, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0xb], [0x400, 0x4, 0x100, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8001, 0x83, 0x80000003, 0x9, 0x43e9, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x36, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x5], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d68f, 0xa1f, 0x8, 0xb, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1c, 0x1, 0x200, 0xffbf243f, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa000, 0x0) (async) read(r3, &(0x7f0000000400), 0x1000) read(r3, &(0x7f0000000400), 0x1000) (async) r4 = openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x0, 0x140) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x2, 0x0, 0x1}}, 0x2e) 654.025721ms ago: executing program 3 (id=374): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) time(&(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x203, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x3) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x8200) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003740)={0x14, 0x1c, 0x221, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4000080) poll(&(0x7f0000001e40)=[{r0, 0x7183}, {r0, 0x1008}], 0x2, 0xfffffffc) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) time(&(0x7f0000000100)) (async) socket$netlink(0x10, 0x3, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x203, 0x0) (async) ioctl$TCSBRKP(r3, 0x5425, 0x0) (async) ioctl$TCSBRKP(r3, 0x5425, 0x3) (async) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x8200) (async) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003740)={0x14, 0x1c, 0x221, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4000080) (async) poll(&(0x7f0000001e40)=[{r0, 0x7183}, {r0, 0x1008}], 0x2, 0xfffffffc) (async) 405.314116ms ago: executing program 3 (id=375): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x81, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r0, r1, 0x2) close_range(r0, r0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x11) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048080}, 0x40) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x9c, 0x0, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x379}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2db}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xb}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) r3 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) write$P9_RGETATTR(r2, &(0x7f0000000380)={0xa0, 0x19, 0x1, {0x900, {0x80, 0x4, 0x5}, 0x4, r3, r6, 0x3, 0x9, 0x6d, 0x3, 0x4, 0xfffffffffffffffb, 0x96, 0x8, 0x1d, 0x7, 0x5, 0xffffffffffffff01, 0x0, 0x8, 0x5}}, 0xa0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x1000400, &(0x7f00000004c0)={[{@xino_off}, {@uuid_off}, {@verity_require}, {@uuid_null}, {@redirect_dir_off}, {@redirect_dir_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}, {@audit}]}) mount$9p_xen(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x8002, &(0x7f0000000600)={'trans=xen,', {[{@noextend}, {@loose}, {@noxattr}], [{@dont_hash}, {@pcr={'pcr', 0x3d, 0x1a}}, {@subj_role={'subj_role', 0x3d, 'audit'}}, {@fowner_lt={'fowner<', r5}}]}}) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000700)={0x3, 'caif0\x00', {0x9}, 0x3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000740)={0xffffffffffffffff, 0x401, 0x1, r2}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x5c, 0x9, 0x39, @dev={0xfe, 0x80, '\x00', 0x3f}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x7800, 0x3, 0x5cf6}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000980)={'syztnl2\x00', &(0x7f00000008c0)={'sit0\x00', 0x0, 0x40, 0x10, 0x1ff, 0x10, {{0x24, 0x4, 0x1, 0xa, 0x90, 0x66, 0x0, 0x9, 0x4, 0x0, @local, @multicast2, {[@end, @end, @generic={0x7, 0xf, "7747402ec8216eb549bc344b94"}, @timestamp_addr={0x44, 0x44, 0xa4, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x22}, 0x1}, {@remote, 0x93bd}, {@local, 0xe}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x7ff}, {@multicast1, 0x7fff}, {@rand_addr=0x64010101, 0xfffffff7}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x100}, {@broadcast, 0x5}]}, @noop, @cipso={0x86, 0x24, 0x3, [{0x5, 0x3, '<'}, {0x2, 0x8, "3d970949c99f"}, {0x0, 0xe, "abe2522707f5112840aca47e"}, {0x0, 0x5, "0ba38f"}]}]}}}}}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000009c0)={0x0, @broadcast, @multicast1}, &(0x7f0000000a00)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000a40)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000b00)={'tunl0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x80, 0x7800, 0x1, 0x1, {{0xc, 0x4, 0x0, 0x36, 0x30, 0x66, 0x0, 0x4d, 0x4, 0x0, @multicast1, @local, {[@ssrr={0x89, 0xb, 0x65, [@loopback, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0xa, "16ea5e4f3b21539b"}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000c40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xac, r7, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40}, 0x2400c810) r13 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000cc0)={'bond_slave_1\x00', 0x2000}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d00)={'erspan0\x00', r11, 0x8, 0x7, 0x2, 0x1, {{0x26, 0x4, 0x0, 0x34, 0x98, 0x64, 0x0, 0x9, 0x29, 0x0, @local, @multicast2, {[@cipso={0x86, 0x48, 0x3, [{0x1, 0xf, "68dafc52958be9575c68a3b363"}, {0x1, 0x3, "db"}, {0x6, 0x8, "f3ea1dc600ad"}, {0x2, 0xa, "29f200b077552be2"}, {0x0, 0x11, "699e8acc1385c97f7ed2511836f4f9"}, {0x6, 0xd, "74a246a9f00e3185fc3272"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x3b, 0x1, 0x0, [{@remote, 0x8}, {@multicast2, 0x1}, {@rand_addr=0x64010101, 0x4}, {@rand_addr=0x64010102, 0x22e33bb6}]}, @timestamp={0x44, 0x14, 0x8a, 0x0, 0x8, [0x89a, 0x2, 0x20b, 0x6]}]}}}}}) setpriority(0x0, r4, 0x3) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000f00)={r1, &(0x7f0000000e00)='^,\xc5]&++$\x00', 0x100, &(0x7f0000000e40)={@_ha_fsid={[0x7, 0x8]}, {0x5, 0x7, 0x3, 0x6}}, 0x1ff, &(0x7f0000000e80), &(0x7f0000000ec0)=0xa6}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r14, 0x89f2, &(0x7f0000000f80)={'syztnl1\x00', &(0x7f0000000f40)={'gretap0\x00', r11, 0x80, 0x7800, 0x5, 0x6, {{0x7, 0x4, 0x2, 0x20, 0x1c, 0x64, 0x0, 0x2, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2f}, {[@end, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'syztnl0\x00', &(0x7f0000000fc0)={'syztnl2\x00', r12, 0x2f, 0x1, 0x8, 0xfffffffb, 0x3f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x12}, 0x80, 0x80, 0x8, 0x5}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0x10000, 0x0) 276.93167ms ago: executing program 1 (id=376): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x205}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2a, 0x4, 0x10000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x3000400, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=""/10, 0xa) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000003c0)={0x0, 0xdc34, 0x0, [0xa4f1, 0x2, 0x4, 0x6, 0x7], [0x8001, 0x3, 0x7, 0xffffffffffffffff, 0x7fff80000000, 0xaea, 0x101, 0x1, 0x1, 0x0, 0xfc, 0xffffffffffffffff, 0x5, 0x6, 0x8, 0x1, 0xed28, 0xe6, 0x8, 0x8, 0x9, 0x2, 0x4, 0xb606, 0x2, 0x3, 0x6, 0x8, 0x40, 0x1b, 0x7, 0x3, 0x9, 0x7f, 0xfffffffffffffffc, 0x6, 0x8, 0xae516f8, 0x80000001, 0xa915, 0x3, 0x6, 0xffffffffffffffff, 0x20, 0xfffffffffffffffb, 0x0, 0x100000001, 0x55ea, 0x8, 0x7, 0x200000000, 0x8, 0x53af, 0x100, 0x6, 0x8, 0x101, 0x2, 0x2, 0x10000, 0x9, 0x3, 0x2, 0x1, 0x3, 0x10, 0x7, 0x280000000, 0x4c, 0x0, 0x7f, 0x2, 0x3, 0x0, 0x8, 0x3, 0x7, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x80000001, 0x5, 0xffffffff00000001, 0x8, 0x5, 0xfff, 0xb8, 0x40, 0x3, 0x401, 0x2, 0x6, 0x9126, 0x288, 0x1, 0x8, 0x6, 0xa, 0x5f, 0x4, 0xf, 0x8, 0x7, 0x6, 0xfffffffffffff656, 0x2, 0x6, 0x8000000000000001, 0x4, 0xaf, 0x5, 0x7, 0x2, 0xffff, 0xf555, 0x2, 0x1, 0x2, 0x0, 0x10]}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000800)={r3, "1a73e5164bb06351a753d4fed55218c1"}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300)={0x4, 0x0, [{0x0, 0x0, 0x0}, {0xeeee8000, 0xee, &(0x7f0000000000)=""/238}, {0xf000, 0x3f, &(0x7f0000000100)=""/63}, {0xdddd1000, 0xd4, &(0x7f0000000140)=""/212}]}) close(r2) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100acef000108000200ac1e00010c000280050001000000000008000740ff"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1f, 0x5, 0x3, 0x401, 0x1, 0x51, 0x6, 0xa, 0x9, 0x85, 0x0, 0xff, 0x401, 0x5, 0x5, 0x8, [0x5, 0x9]}}) 276.3459ms ago: executing program 3 (id=377): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000380)={r1, 0x1, 0x100000000, 0x2000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000b4a000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x7, 0x2, 0x31237648, 0x6, 0x2, 0x3}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x6, 0x10000000000, 0x5d, 0xf30, 0x138c, 0xb, 0x2000000, 0x11, 0x4, 0x8000000000000000, 0x1, 0xffffffffffff9867, 0xd, 0x5, 0x4, 0xa], 0x0, 0x110900}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 171.431489ms ago: executing program 3 (id=378): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040a306d00c00000000000109022400010000a002090400050203008400092100004001221800090581034000001187c8ca484cdb5b88f392a68d60b1e4651e1be7bfdf07a32800ef8d216321839ceb3b9681b5a374492ad1e31163619342ec53f4a6a582e9894afcc42dbdbc989b5f4168258d588fe846f963101415c9da34bbfb2c2599ad8ff25489a872a4a5ff56d951970ede041ef23749778d4bad4d48df710ebc2d93f35abc5265e1b69aed3f5eef5c9f909ea27430984d9b1ee4e124b08a356f7ce95c667c8a85a3ed7e837a2053d7936c43ab1d0345d2e3ab4c99fabbf471ac6ad34a65dc77acf1cc494f59aa170ad7245e0a94"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) timerfd_create(0x0, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x3fc0fe33fd5c63f2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8f\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xa1\x06|\xf0\x00\x00\x00\x00r\x9b\xc7\x1d\x00jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9e[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8bJ\xa0\xa0\xeb\xa8\x0f\xa1\x93\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd3\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H;\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\b\x00\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xb6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x9aE~\xe3\xe5\rx.o\xca\xf5!\xc3\xb8\x1aU=\x9f\xae\'\xe6\xb8\x18\x04\x8a!s\xf9\x00\xf4x\x19\x9f\xa0{\xbb\x9e\xed\xdbN\xfc2X\xa68\xa2\x87i\xe3\xa0&|\x8d\xc3\xc9\xaf\x88HaZh?\x8egx\xaf;\x0f\xfcU0\x8e\x13:@\xfbu\x85\xac\xafc9$\x7f\x06W\aO\'\x10b\x93~\x90\xbeX@ G\x8c\x02\xb3Tr\x7fz\x1d\x02m\x9c\xf2\xaa\x15\xb0G\x13\xf0\x97O\x83\xa3\xcf\x0f\xcbr\xa2\x18\x91\xa3A\xb8\x91\xd5z\xcc\xdf\bO\xd9\xb7\x00\x00\x00\x00\x00\x00\x00\x00Z\xe2\x97s\x062\xf1\x86\xae\xa5-Q\x9d/V\x14\\;\xfe\x12\xf8`\b\x82\x83\xd3s$\xe0\xab\xe0\x84\xad\xe2\xb2\xc3\xd4/F+\xa3\xfa\xac)6\xda\x8d\xd1\v\xfd\x12:?rW\xf0\xcc]k\xbc\x10r\x01]\x9a\xa4S\xa4\xa1\x16\x1f\x88\x1a\xad\xa9\xfb\x16\x88X;>\ad\a\xee%\x8d|\xe1J!\x99\xd1\x8dxdlL\xda\xb6\xc9\x9a_K\x9c\xf4\x1d\x92\x98\x16m\x8a\xa7N\xf8\xbf\x834K\xc9Y\xc8\x8bb7\xd5L\xe6\xd8+5\x80\xb9V\x80\x98\\i\x9c\x13\xc8\xe8\xb7\x10\x02\xaf\x9e\x1a\xf2\x91[\xa5\x1c\xe3\x89\x06\xb7l\xce\x11.\xa0h\x93\xc5\xb5\xb3\xcc\xed\xd8Q\xd8rK\xe3\x04\xacQ\x9e\x1a\xe5\x17\x8c\x05\xf5\xf6\x82\x1d\xe1', 0x3) ftruncate(r2, 0x81) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4984}, 0x11) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x18, r4, 0x1, 0x70bd2e, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x818}, 0x4040400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) read(r2, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f00000000c0)=0x101, 0x4) r5 = syz_open_dev$hiddev(&(0x7f0000000100), 0xa, 0x62080) ioctl$HIDIOCGUCODE(r5, 0xc018480d, 0x0) 170.594819ms ago: executing program 1 (id=379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x4, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}}}}, 0x108) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x20, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x479}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000191}, 0x48080) lsm_set_self_attr(0x66, &(0x7f0000000380)={0x65, 0x0, 0x66, 0x46, "4b0d814e10e14464ab3517e8b7d3513391426bd994796298cff0d3adfca373d0ffbf84012c9d7efad43b6333981f70086f9ab9cdbad06650d7d2b83632f2f94169ae115ddd0a"}, 0x66, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000002c0)={r1, &(0x7f0000000000)='\x00', 0x800, &(0x7f0000000040)={@align=0x7, {0x40ce, 0x0, 0x5, 0x401}}, 0x3, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000280)=0x3}) mkdirat(r3, &(0x7f0000000300)='./file0\x00', 0x105) fsetxattr(r0, &(0x7f00000004c0)=@random={'security.', '\x00'}, &(0x7f0000000500)='\x00', 0x1, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) 0s ago: executing program 1 (id=380): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x4018aee1, &(0x7f0000000500)=@attr_other={0x0, 0x5, 0x1, &(0x7f00000000c0)=0x40}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) syslog(0x3, &(0x7f0000000000)=""/168, 0xa8) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x48f82, 0x0) socket(0x11, 0xa, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r3, 0x95e41000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x1000000000003) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/sda\x00', 0x26) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r5, 0x7709, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOC_PR_RESERVE(r5, 0x401070c9, &(0x7f0000000080)={0x3c1842d, 0x605fd495, 0x1}) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./dev/sda/file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f0000000540)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000680)="0bfc0653ad7ca75a21eff8f910b6ebba0c75c8f408fe5a9457ce8a073c130feba7b1607746a5581d9539745f07a97a0f5ca9473edd149f62f110287683cc23294d2ad09d287dadb4b9998e7f360d917a32637e1764a4ba6d2751587d5ac69bedc439bd2e3424d6789e5644d05d45077e4eb15479683c71b1956efa952e9068105f2cd09e79218aa56e065dbeb79dcf3f6e41ec4d89fed03d9699c737462a2c0282a13fefde31768fc4ea5f438f1e6230d9b3deac6eeb156747f644590f10d15d38ca36570d98ed6ea9f274f1db", 0xcd}, {&(0x7f0000000780)="65849d8a3210cc69ba4f6371d983925d1ae2c8002e745beac90553d0a117d4a21b47afcff42052ca18e6ea95f8273a065f0b609b54ea7c5f78e47ee5d1c83da385c796c2251995fc6ea70d88d8d402f66afbb4fb3c7da6c59bdd71b627acf175e84ccb229d1b0f5762409cac108a70785c2521ac1f028a65", 0x78}, {&(0x7f0000000800)="a5d176e24b3bc136b8e2ddd84ff962ce79d4874ad2cc53166c86b18b4c4ccd0229523a4864eb67a371e5c07bcde9ca22035cea4bc97e1744ffc632649571d7f330d199b14c958616d00f6bf3c08c110014847ab8f41e756dfad1a4415f49b8086f3650e87a8f416743336ae275c78bd5c83f2146cf73ead625935f6fe4ecc0f9e3370668bcc61641036425cae286b03e4c44c951ce2fdbdd9b1131b1ffa0ee37c91471ae7ce7dda56b7c2f30305cd38ec86b9fd326fd4d6da52eff40235cc2f647f46174dab78c5552641b", 0xcb}, {&(0x7f0000000900)="0869c117851930485176d45c27dbf4695a34e13efa38b377586cf1eb4c91226a2096d0268c347107654fa15847ff57e8e839a091eee44d7938ede05bb1036e91807c835aa844ed474215e3358a37fa3ff15bdf30bf41574795471e6ae046e31bd6d43e3c6125ef154bdfea163ddd10075d2a2aacd7faa773c5562213659555a5994d76fdf4c2fe", 0x87}, {&(0x7f00000009c0)="3f4ebd1fac591b91362215f5eb579d8cd19e8c1269b1a1356235d23eadb44c709c680a", 0x23}], 0x5, 0x0, 0x0, 0x20000800}, 0x800) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000080)={r0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [ 29.916477][ T36] audit: type=1400 audit(1790522861.520:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.920096][ T287] cgroup: Unknown subsys name 'net' [ 29.939301][ T36] audit: type=1400 audit(1790522861.520:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.967073][ T36] audit: type=1400 audit(1790522861.550:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.967558][ T287] cgroup: Unknown subsys name 'devices' [ 30.089466][ T287] cgroup: Unknown subsys name 'hugetlb' [ 30.095196][ T287] cgroup: Unknown subsys name 'rlimit' [ 30.189739][ T36] audit: type=1400 audit(1790522861.790:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.213020][ T36] audit: type=1400 audit(1790522861.790:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.237974][ T36] audit: type=1400 audit(1790522861.790:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.261829][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.270696][ T36] audit: type=1400 audit(1790522861.880:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.296268][ T36] audit: type=1400 audit(1790522861.880:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.298456][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.322650][ T36] audit: type=1400 audit(1790522861.900:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.356307][ T36] audit: type=1400 audit(1790522861.900:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.765922][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.773017][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.780151][ T294] bridge_slave_0: entered allmulticast mode [ 31.786631][ T294] bridge_slave_0: entered promiscuous mode [ 31.795467][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.802805][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.810025][ T294] bridge_slave_1: entered allmulticast mode [ 31.816362][ T294] bridge_slave_1: entered promiscuous mode [ 31.822500][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.829578][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.836690][ T297] bridge_slave_0: entered allmulticast mode [ 31.842960][ T297] bridge_slave_0: entered promiscuous mode [ 31.862528][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.869686][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.876881][ T297] bridge_slave_1: entered allmulticast mode [ 31.883158][ T297] bridge_slave_1: entered promiscuous mode [ 31.898722][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.905806][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.912951][ T295] bridge_slave_0: entered allmulticast mode [ 31.919348][ T295] bridge_slave_0: entered promiscuous mode [ 31.931147][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.938373][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.945487][ T296] bridge_slave_0: entered allmulticast mode [ 31.951862][ T296] bridge_slave_0: entered promiscuous mode [ 31.958148][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.965225][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.972389][ T295] bridge_slave_1: entered allmulticast mode [ 31.978767][ T295] bridge_slave_1: entered promiscuous mode [ 31.997169][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.004283][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.011430][ T296] bridge_slave_1: entered allmulticast mode [ 32.017789][ T296] bridge_slave_1: entered promiscuous mode [ 32.185456][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.192579][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.199957][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.207025][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.217787][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.224883][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.232254][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.239317][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.259209][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.266855][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.274253][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.281321][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.300786][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.307901][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.315225][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.322321][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.358492][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.366785][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.374056][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.381691][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.389578][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.396944][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.404390][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.411918][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.428503][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.435598][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.453015][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.460114][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.474188][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.481328][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.489089][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.496206][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.512245][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.519369][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.527379][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.534441][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.544328][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.551406][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.581897][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.589009][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.632274][ T296] veth0_vlan: entered promiscuous mode [ 32.639606][ T295] veth0_vlan: entered promiscuous mode [ 32.650209][ T297] veth0_vlan: entered promiscuous mode [ 32.676263][ T295] veth1_macvtap: entered promiscuous mode [ 32.683487][ T297] veth1_macvtap: entered promiscuous mode [ 32.691015][ T296] veth1_macvtap: entered promiscuous mode [ 32.713934][ T294] veth0_vlan: entered promiscuous mode [ 32.752363][ T294] veth1_macvtap: entered promiscuous mode [ 32.771774][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.865551][ T320] netlink: 679 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.930268][ T331] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.053918][ T341] kvm: kvm [340]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 33.068560][ T341] kvm: kvm [340]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 33.079318][ T344] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10'. [ 33.090209][ T344] ======================================================= [ 33.090209][ T344] WARNING: The mand mount option has been deprecated and [ 33.090209][ T344] and is ignored by this kernel. Remove the mand [ 33.090209][ T344] option from the mount to silence this warning. [ 33.090209][ T344] ======================================================= [ 33.097839][ T31] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 33.130017][ T344] No source specified [ 33.285955][ T67] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.293627][ T31] usb 3-1: device descriptor read/64, error -71 [ 33.447676][ T67] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.456487][ T67] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.469021][ T67] usb 1-1: string descriptor 0 read error: -22 [ 33.475270][ T67] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 33.484555][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.546175][ T31] usb 3-1: device descriptor read/64, error -71 [ 33.786036][ T31] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 33.892954][ T362] netlink: 679 bytes leftover after parsing attributes in process `syz.1.16'. [ 33.916536][ T31] usb 3-1: device descriptor read/64, error -71 [ 34.165906][ T31] usb 3-1: device descriptor read/64, error -71 [ 34.185942][ T358] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 34.276227][ T31] usb usb3-port1: attempt power cycle [ 34.346014][ T358] usb 2-1: Using ep0 maxpacket: 16 [ 34.351681][ T9] usb 1-1: USB disconnect, device number 2 [ 34.353710][ T358] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 34.374204][ T358] usb 2-1: config 0 has no interface number 0 [ 34.380907][ T358] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.392011][ T358] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.402342][ T358] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 34.418689][ T358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.427777][ T358] usb 2-1: config 0 descriptor?? [ 34.616085][ T31] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 34.636999][ T31] usb 3-1: device descriptor read/8, error -71 [ 34.665948][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 34.767900][ T31] usb 3-1: device descriptor read/8, error -71 [ 34.817189][ T10] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.828219][ T10] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.841263][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 34.849447][ T10] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 34.858687][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.867708][ T10] usb 4-1: config 0 descriptor?? [ 35.015976][ T31] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 35.035363][ T365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'. [ 35.046471][ T31] usb 3-1: device descriptor read/8, error -71 [ 35.054911][ T36] kauditd_printk_skb: 85 callbacks suppressed [ 35.054930][ T36] audit: type=1400 audit(1790522866.650:159): avc: denied { read write } for pid=364 comm="syz.1.17" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.080919][ T365] netlink: 'syz.1.17': attribute type 27 has an invalid length. [ 35.100808][ T365] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 35.113982][ T36] audit: type=1400 audit(1790522866.650:160): avc: denied { open } for pid=364 comm="syz.1.17" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.139386][ T36] audit: type=1400 audit(1790522866.650:161): avc: denied { ioctl } for pid=364 comm="syz.1.17" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.163985][ T36] audit: type=1400 audit(1790522866.720:162): avc: denied { getattr } for pid=380 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.190243][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.198921][ T31] usb 3-1: device descriptor read/8, error -71 [ 35.209573][ T36] audit: type=1400 audit(1790522866.810:163): avc: denied { read } for pid=382 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.231619][ T36] audit: type=1400 audit(1790522866.810:164): avc: denied { open } for pid=382 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.265949][ T358] uclogic 0003:28BD:0071.0001: failed retrieving string descriptor #100: -71 [ 35.275156][ T358] uclogic 0003:28BD:0071.0001: failed retrieving pen parameters: -71 [ 35.284455][ T358] uclogic 0003:28BD:0071.0001: pen probing failed: -71 [ 35.291505][ T358] uclogic 0003:28BD:0071.0001: failed probing parameters: -71 [ 35.299672][ T358] uclogic 0003:28BD:0071.0001: probe with driver uclogic failed with error -71 [ 35.300227][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 35.309376][ T31] usb usb3-port1: unable to enumerate USB device [ 35.323319][ T358] usb 2-1: USB disconnect, device number 2 [ 35.328028][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 35.345911][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 35.354304][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.367489][ T9] usb 1-1: too many configurations: 159, using maximum allowed: 8 [ 35.377247][ T10] usb 4-1: USB disconnect, device number 2 [ 35.385083][ T36] audit: type=1400 audit(1790522866.980:165): avc: denied { create } for pid=379 comm="dhcpcd-run-hook" name="resolv.conf.ifb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.394680][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 35.416109][ T9] usb 1-1: can't read configurations, error -71 [ 35.422805][ T36] audit: type=1400 audit(1790522866.980:166): avc: denied { write } for pid=379 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.ifb0.link" dev="tmpfs" ino=583 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.449318][ T36] audit: type=1400 audit(1790522866.980:167): avc: denied { append } for pid=379 comm="dhcpcd-run-hook" name="resolv.conf.ifb0.link" dev="tmpfs" ino=583 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.477947][ T36] audit: type=1400 audit(1790522867.080:168): avc: denied { unlink } for pid=390 comm="rm" name="resolv.conf.ifb0.link" dev="tmpfs" ino=583 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.070472][ T358] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.475904][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.636116][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 36.644800][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.657395][ T10] usb 3-1: config 0 has no interfaces? [ 36.670350][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 36.682405][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.699843][ T10] usb 3-1: Product: syz [ 36.708534][ T10] usb 3-1: Manufacturer: syz [ 36.718673][ T10] usb 3-1: SerialNumber: syz [ 36.730735][ T10] usb 3-1: config 0 descriptor?? [ 36.815914][ T358] usb 2-1: Using ep0 maxpacket: 16 [ 36.824029][ T358] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 36.833209][ T358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.841350][ T358] usb 2-1: Product: syz [ 36.845555][ T358] usb 2-1: Manufacturer: syz [ 36.850429][ T358] usb 2-1: SerialNumber: syz [ 36.856104][ T358] usb 2-1: config 0 descriptor?? [ 36.862837][ T358] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 36.870885][ T358] usb 2-1: Detected FT-X [ 36.942634][ T456] .N: renamed from veth0_to_bond (while UP) [ 36.953174][ T31] usb 3-1: USB disconnect, device number 6 [ 37.074458][ T427] can0: slcan on ttyS3. [ 37.129001][ T426] can0 (unregistered): slcan off ttyS3. [ 37.138491][ T358] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 37.145544][ T46] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.156635][ T358] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 37.174536][ T358] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 37.182182][ T358] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 37.196035][ T358] usb 2-1: USB disconnect, device number 3 [ 37.204184][ T358] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 37.224351][ T358] ftdi_sio 2-1:0.0: device disconnected [ 37.305926][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 37.346034][ T499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.362980][ T499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.651165][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 37.670120][ T46] usb 1-1: no configurations [ 37.674797][ T46] usb 1-1: can't read configurations, error -22 [ 37.820128][ T550] sock: sock_set_timeout: `syz.1.39' (pid 550) tries to set negative timeout [ 38.095906][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.193577][ T562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=562 comm=syz.0.42 [ 38.275943][ T10] usb 2-1: device descriptor read/64, error -71 [ 38.457095][ T495] bridge_slave_1: left allmulticast mode [ 38.462900][ T495] bridge_slave_1: left promiscuous mode [ 38.474879][ T495] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.496833][ T495] bridge_slave_0: left allmulticast mode [ 38.502541][ T495] bridge_slave_0: left promiscuous mode [ 38.516448][ T495] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.526494][ T10] usb 2-1: device descriptor read/64, error -71 [ 38.655194][ T495] veth1_macvtap: left promiscuous mode [ 38.665289][ T495] veth0_vlan: left promiscuous mode [ 38.697296][ T588] capability: warning: `syz.2.54' uses 32-bit capabilities (legacy support in use) [ 38.785960][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.847544][ T587] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.854786][ T587] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.862034][ T587] bridge_slave_0: entered allmulticast mode [ 38.868512][ T587] bridge_slave_0: entered promiscuous mode [ 38.875206][ T587] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.882390][ T587] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.889570][ T587] bridge_slave_1: entered allmulticast mode [ 38.895968][ T587] bridge_slave_1: entered promiscuous mode [ 38.925921][ T10] usb 2-1: device descriptor read/64, error -71 [ 38.953024][ T587] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.960135][ T587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.967528][ T587] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.974586][ T587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.997995][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.005638][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.016740][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.023826][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.036078][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.043190][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.054302][ T601] FAULT_INJECTION: forcing a failure. [ 39.054302][ T601] name failslab, interval 1, probability 0, space 0, times 1 [ 39.067134][ T46] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.069295][ T601] CPU: 0 UID: 0 PID: 601 Comm: syz.3.58 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 39.069374][ T601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.069424][ T601] Call Trace: [ 39.069445][ T601] [ 39.069468][ T601] __dump_stack+0x21/0x30 [ 39.069568][ T601] dump_stack_lvl+0x140/0x1c0 [ 39.069654][ T601] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.069744][ T601] ? do_syscall_64+0x57/0xf0 [ 39.069816][ T601] dump_stack+0x19/0x20 [ 39.069893][ T601] should_fail_ex+0x3c2/0x510 [ 39.069969][ T601] should_failslab+0xac/0x100 [ 39.070069][ T601] __kmalloc_cache_noprof+0x41/0x470 [ 39.070162][ T601] ? register_netdevice+0x2c4/0x1a80 [ 39.070242][ T601] register_netdevice+0x2c4/0x1a80 [ 39.070307][ T601] ? kasan_save_alloc_info+0x3a/0x50 [ 39.070369][ T601] ? __kasan_kmalloc+0x96/0xb0 [ 39.070444][ T601] ? __cfi_register_netdevice+0x10/0x10 [ 39.070494][ T601] ? __kmalloc_cache_noprof+0x23c/0x470 [ 39.070568][ T601] register_vlan_dev+0x2b4/0x6c0 [ 39.070654][ T601] register_vlan_device+0x4bb/0x630 [ 39.070738][ T601] ? vlan_ioctl_handler+0x670/0x670 [ 39.070824][ T601] ? ns_capable+0x90/0xf0 [ 39.070878][ T601] vlan_ioctl_handler+0x246/0x670 [ 39.070962][ T601] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 39.071035][ T601] ? __cfi_vlan_ioctl_handler+0x10/0x10 [ 39.071123][ T601] ? __cfi_do_futex+0x10/0x10 [ 39.071208][ T601] ? __cfi_vlan_ioctl_handler+0x10/0x10 [ 39.071286][ T601] sock_ioctl+0x60c/0x7e0 [ 39.071351][ T601] ? __cfi_sock_ioctl+0x10/0x10 [ 39.071414][ T601] ? __fget_files+0x2bc/0x330 [ 39.071484][ T601] ? bpf_lsm_file_ioctl+0xd/0x20 [ 39.071591][ T601] ? security_file_ioctl+0x3e/0x110 [ 39.071654][ T601] ? __cfi_sock_ioctl+0x10/0x10 [ 39.071711][ T601] __se_sys_ioctl+0x123/0x1b0 [ 39.071788][ T601] __x64_sys_ioctl+0x7f/0xa0 [ 39.071871][ T601] x64_sys_call+0x1878/0x2ee0 [ 39.071931][ T601] do_syscall_64+0x57/0xf0 [ 39.071994][ T601] ? clear_bhb_loop+0x50/0xa0 [ 39.072071][ T601] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.072146][ T601] RIP: 0033:0x7f097e39e159 [ 39.072209][ T601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.072255][ T601] RSP: 002b:00007f097f233028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 39.072330][ T601] RAX: ffffffffffffffda RBX: 00007f097e625fa0 RCX: 00007f097e39e159 [ 39.072383][ T601] RDX: 0000200000000280 RSI: 0000000000008982 RDI: 0000000000000005 [ 39.072426][ T601] RBP: 00007f097e43506b R08: 0000000000000000 R09: 0000000000000000 [ 39.072467][ T601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.072495][ T601] R13: 00007f097e626038 R14: 00007f097e625fa0 R15: 00007ffd8f43e3e8 [ 39.072548][ T601] [ 39.186119][ T10] usb 2-1: device descriptor read/64, error -71 [ 39.346009][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 39.364843][ T46] usb 3-1: unable to get BOS descriptor or descriptor too short [ 39.384357][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 39.395950][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 39.412785][ T603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 39.415232][ T587] veth0_vlan: entered promiscuous mode [ 39.425974][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 39.440065][ T46] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 39.450829][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 39.452781][ T587] veth1_macvtap: entered promiscuous mode [ 39.461099][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 39.470671][ T10] usb usb2-port1: attempt power cycle [ 39.480290][ T46] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 39.491387][ T608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 39.500879][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.514476][ T46] usb 3-1: Product: syz [ 39.518749][ T46] usb 3-1: Manufacturer: syz [ 39.523880][ T46] usb 3-1: SerialNumber: syz [ 39.529989][ T46] usb 3-1: config 0 descriptor?? [ 39.537530][ T596] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 39.569589][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.667287][ T616] fuseblk: Bad value for 'source' [ 39.686194][ T621] syz.3.62 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.751475][ T596] FAULT_INJECTION: forcing a failure. [ 39.751475][ T596] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.765542][ T596] CPU: 0 UID: 0 PID: 596 Comm: syz.2.57 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 39.765588][ T596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.765606][ T596] Call Trace: [ 39.765614][ T596] [ 39.765623][ T596] __dump_stack+0x21/0x30 [ 39.765661][ T596] dump_stack_lvl+0x140/0x1c0 [ 39.765692][ T596] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.765717][ T596] dump_stack+0x19/0x20 [ 39.765738][ T596] should_fail_ex+0x3c2/0x510 [ 39.765759][ T596] should_fail+0xf/0x20 [ 39.765778][ T596] should_fail_usercopy+0x1e/0x30 [ 39.765799][ T596] strncpy_from_user+0x29/0x280 [ 39.765820][ T596] getname_flags+0x106/0x6b0 [ 39.765862][ T596] getname+0x1b/0x30 [ 39.765887][ T596] do_sys_openat2+0xda/0x1d0 [ 39.765921][ T596] ? fput+0x1a4/0x230 [ 39.765950][ T596] ? do_sys_open+0x100/0x100 [ 39.765985][ T596] __x64_sys_openat+0x13a/0x170 [ 39.766023][ T596] x64_sys_call+0xe69/0x2ee0 [ 39.766043][ T596] do_syscall_64+0x57/0xf0 [ 39.766065][ T596] ? clear_bhb_loop+0x50/0xa0 [ 39.766096][ T596] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.766127][ T596] RIP: 0033:0x7f874979e159 [ 39.766147][ T596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.766168][ T596] RSP: 002b:00007f874a5a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 39.766193][ T596] RAX: ffffffffffffffda RBX: 00007f8749a25fa0 RCX: 00007f874979e159 [ 39.766212][ T596] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 39.766229][ T596] RBP: 00007f874983506b R08: 0000000000000000 R09: 0000000000000000 [ 39.766244][ T596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.766259][ T596] R13: 00007f8749a26038 R14: 00007f8749a25fa0 R15: 00007ffe1a561bc8 [ 39.766280][ T596] [ 39.774966][ T634] Mass Storage Function, version: 2009/09/11 [ 39.784726][ T371] usb 3-1: USB disconnect, device number 7 [ 39.796411][ T634] LUN: removable file: (no medium) [ 39.836229][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.855790][ T635] netlink: 'syz.4.65': attribute type 1 has an invalid length. [ 39.989026][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.117185][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.185965][ T46] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 40.315927][ T46] usb 5-1: device descriptor read/64, error -71 [ 40.331880][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 40.331897][ T36] audit: type=1400 audit(1790522871.930:228): avc: denied { create } for pid=637 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 40.366256][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.397181][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.527143][ T10] usb 2-1: device descriptor read/8, error -71 [ 40.556231][ T46] usb 5-1: device descriptor read/64, error -71 [ 40.636121][ T10] usb usb2-port1: unable to enumerate USB device [ 40.686138][ T358] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 40.795985][ T46] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 40.837448][ T358] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.847675][ T358] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 40.856867][ T358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.865269][ T358] usb 3-1: Product: syz [ 40.870171][ T358] usb 3-1: Manufacturer: syz [ 40.874862][ T358] usb 3-1: SerialNumber: syz [ 40.925982][ T46] usb 5-1: device descriptor read/64, error -71 [ 41.084047][ T358] usb 3-1: unit 4 not found! [ 41.089067][ T358] usb 3-1: unit 14 not found! [ 41.098454][ T358] usb 3-1: USB disconnect, device number 8 [ 41.112767][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.196027][ T46] usb 5-1: device descriptor read/64, error -71 [ 41.316074][ T46] usb usb5-port1: attempt power cycle [ 41.656074][ T46] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 41.677208][ T46] usb 5-1: device descriptor read/8, error -71 [ 41.695934][ T311] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 41.704199][ T36] audit: type=1400 audit(1790522873.300:229): avc: denied { ioctl } for pid=659 comm="syz.2.75" path="socket:[5636]" dev="sockfs" ino=5636 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.817207][ T46] usb 5-1: device descriptor read/8, error -71 [ 41.847280][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.857622][ T311] usb 2-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 41.868445][ T311] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.881420][ T311] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 41.890794][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.900751][ T311] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 42.055942][ T46] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 42.076999][ T46] usb 5-1: device descriptor read/8, error -71 [ 42.114888][ T311] usb 2-1: USB disconnect, device number 8 [ 42.207332][ T46] usb 5-1: device descriptor read/8, error -71 [ 42.316074][ T46] usb usb5-port1: unable to enumerate USB device [ 42.535262][ T666] tmpfs: Unknown parameter 'nMnodes' [ 42.550272][ T36] audit: type=1400 audit(1790522874.150:230): avc: denied { read write } for pid=665 comm="syz.2.76" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.566383][ T311] wacom 0003:056A:003F.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 42.586335][ T36] audit: type=1400 audit(1790522874.150:231): avc: denied { open } for pid=665 comm="syz.2.76" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 42.630109][ T668] fido_id[668]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.693907][ T670] netlink: 32 bytes leftover after parsing attributes in process `syz.2.77'. [ 42.720729][ T36] audit: type=1326 audit(1790522874.320:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=669 comm="syz.2.77" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f874979e159 code=0x0 [ 42.747625][ T672] can: request_module (can-proto-6) failed. [ 42.774457][ T36] audit: type=1400 audit(1790522874.370:233): avc: denied { unmount } for pid=587 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 42.866916][ T36] audit: type=1400 audit(1790522874.470:234): avc: denied { create } for pid=686 comm="syz.2.84" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.899070][ T36] audit: type=1400 audit(1790522874.490:235): avc: denied { write } for pid=686 comm="syz.2.84" name="file0" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.937768][ T696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.951906][ T36] audit: type=1400 audit(1790522874.490:236): avc: denied { open } for pid=686 comm="syz.2.84" path="/22/file0" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.995069][ T36] audit: type=1400 audit(1790522874.500:237): avc: denied { cmd } for pid=686 comm="syz.2.84" path="/22/file0" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 43.022171][ T696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.165990][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 43.176104][ T46] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 43.231476][ T696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.240306][ T696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.305932][ T311] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 43.317314][ T31] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.330416][ T31] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.343647][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 43.350386][ T31] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 43.359664][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.368110][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.379955][ T46] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 43.389648][ T31] usb 5-1: config 0 descriptor?? [ 43.394804][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.405935][ T46] usb 2-1: config 0 descriptor?? [ 43.457649][ T311] usb 3-1: not running at top speed; connect to a high speed hub [ 43.466159][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.476442][ T311] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 43.485512][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.498698][ T311] uvcvideo 3-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 43.603740][ T691] cgroup: Invalid name [ 43.612665][ T46] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 43.620907][ T46] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 43.638661][ T46] usb 2-1: USB disconnect, device number 9 [ 43.638713][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 44.132994][ T724] loop9: detected capacity change from 0 to 16384 [ 44.209046][ T725] loop9: detected capacity change from 16384 to 0 [ 44.485940][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 44.557336][ T31] sony 0003:054C:0268.0003: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 44.573739][ T31] sony 0003:054C:0268.0003: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 44.589934][ T31] sony 0003:054C:0268.0003: failed to claim input [ 44.601079][ T31] usb 5-1: USB disconnect, device number 6 [ 44.631139][ T730] fido_id[730]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 44.645895][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 44.653360][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.665041][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 44.675395][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30984, setting to 1024 [ 44.686623][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 44.696610][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.710552][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.719746][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 44.728222][ T10] usb 2-1: SerialNumber: syz [ 44.733988][ T727] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 44.741382][ T727] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 44.751108][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 44.757206][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 44.935927][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 44.951402][ T727] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 44.966027][ T727] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 45.098613][ T31] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 45.107910][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.116119][ T31] usb 5-1: Product: syz [ 45.120417][ T31] usb 5-1: Manufacturer: syz [ 45.125055][ T31] usb 5-1: SerialNumber: syz [ 45.379088][ T10] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 45.405040][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 45.405078][ T36] audit: type=1400 audit(1790522877.000:250): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.466024][ T36] audit: type=1400 audit(1790522877.060:251): avc: denied { read } for pid=740 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.489054][ T36] audit: type=1400 audit(1790522877.060:252): avc: denied { open } for pid=740 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.531062][ T36] audit: type=1400 audit(1790522877.060:253): avc: denied { getattr } for pid=740 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.633342][ T36] audit: type=1400 audit(1790522877.230:254): avc: denied { write } for pid=739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.684116][ T36] audit: type=1400 audit(1790522877.230:255): avc: denied { add_name } for pid=739 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.710442][ T36] audit: type=1400 audit(1790522877.310:256): avc: denied { remove_name } for pid=751 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=1123 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.827004][ C0] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 68! [ 45.835564][ C0] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 03! [ 45.910610][ T752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.920194][ T752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.052466][ T311] usb 3-1: string descriptor 0 read error: -71 [ 46.066040][ T311] usb 3-1: Found UVC 1.00 device (046d:0825) [ 46.073063][ T311] usb 3-1: No streaming interface found for terminal 2. [ 46.111391][ T311] usb 3-1: USB disconnect, device number 9 [ 46.535782][ T311] usb 2-1: USB disconnect, device number 10 [ 46.544080][ T311] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 46.641122][ T31] rtl8150 5-1:1.0: couldn't reset the device [ 46.647568][ T31] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 46.657627][ T31] usb 5-1: USB disconnect, device number 7 [ 46.837724][ T36] audit: type=1400 audit(1790522878.440:257): avc: denied { setopt } for pid=797 comm="syz.1.99" lport=56 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.863706][ T800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.99'. [ 47.069708][ T816] netlink: 64 bytes leftover after parsing attributes in process `syz.2.107'. [ 47.080843][ T813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 47.111571][ T813] kvm: vcpu 0: requested 4 ns lapic timer period limited to 200000 ns [ 47.116218][ T36] audit: type=1400 audit(1790522878.710:258): avc: denied { getopt } for pid=815 comm="syz.2.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.311631][ T36] audit: type=1400 audit(1790522878.910:259): avc: denied { checkpoint_restore } for pid=838 comm="syz.2.110" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.605969][ T311] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 47.766107][ T311] usb 3-1: Invalid ep0 maxpacket: 32 [ 47.804517][ T847] kernel profiling enabled (shift: 4) [ 47.895905][ T854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.115'. [ 47.906584][ T311] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 47.914352][ T854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.115'. [ 47.926042][ T854] Zero length message leads to an empty skb [ 48.009636][ T864] kvm: pic: single mode not supported [ 48.009999][ T864] kvm: pic: single mode not supported [ 48.015603][ T864] kvm: pic: single mode not supported [ 48.021652][ T864] kvm: pic: single mode not supported [ 48.027092][ T864] kvm: pic: level sensitive irq not supported [ 48.032754][ T864] kvm: pic: level sensitive irq not supported [ 48.039382][ T864] kvm: pic: single mode not supported [ 48.045667][ T864] kvm: pic: single mode not supported [ 48.055924][ T311] usb 3-1: Invalid ep0 maxpacket: 32 [ 48.067889][ T311] usb usb3-port1: attempt power cycle [ 48.075684][ T860] SELinux: failed to load policy [ 48.126044][ T636] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 48.182033][ T871] binder: Bad value for 'max' [ 48.187215][ T871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.121'. [ 48.240725][ T875] netlink: 'syz.4.123': attribute type 27 has an invalid length. [ 48.275948][ T636] usb 2-1: Using ep0 maxpacket: 32 [ 48.282667][ T636] usb 2-1: unable to get BOS descriptor or descriptor too short [ 48.292695][ T636] usb 2-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 48.301927][ T636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.312561][ T636] usb 2-1: Product: syz [ 48.316956][ T636] usb 2-1: Manufacturer: syz [ 48.321590][ T636] usb 2-1: SerialNumber: syz [ 48.377344][ T881] netlink: 316 bytes leftover after parsing attributes in process `syz.4.124'. [ 48.406079][ T311] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 48.426370][ T311] usb 3-1: Invalid ep0 maxpacket: 32 [ 48.457298][ T883] MTRR 1 not used [ 48.533948][ T636] usb 2-1: 1:1 : bogus bTerminalLink 5 [ 48.548763][ T636] usb 2-1: USB disconnect, device number 11 [ 48.565938][ T311] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 48.570083][ T692] udevd[692]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.599292][ T311] usb 3-1: Invalid ep0 maxpacket: 32 [ 48.608251][ T311] usb usb3-port1: unable to enumerate USB device [ 48.666357][ T894] can: request_module (can-proto-0) failed. [ 48.975932][ T311] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 49.105898][ T311] usb 5-1: device descriptor read/64, error -71 [ 49.356002][ T311] usb 5-1: device descriptor read/64, error -71 [ 49.405123][ T919] process 'syz.3.136' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 49.456089][ T636] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 49.596024][ T311] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 49.607299][ T636] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 49.622372][ T636] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 49.632688][ T636] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.640769][ T636] usb 2-1: Product: syz [ 49.645095][ T636] usb 2-1: Manufacturer: syz [ 49.649767][ T636] usb 2-1: SerialNumber: syz [ 49.656334][ T907] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 49.726284][ T311] usb 5-1: device descriptor read/64, error -71 [ 49.745977][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 49.864517][ T912] Invalid argument reading file caps for ./file0 [ 49.885939][ T10] usb 4-1: device descriptor read/64, error -71 [ 49.965938][ T311] usb 5-1: device descriptor read/64, error -71 [ 50.074524][ T636] usb 2-1: MIDIStreaming interface descriptor not found [ 50.082705][ T311] usb usb5-port1: attempt power cycle [ 50.090524][ T636] usb 2-1: USB disconnect, device number 12 [ 50.104710][ T692] udevd[692]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.126111][ T10] usb 4-1: device descriptor read/64, error -71 [ 50.369435][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 50.391125][ T926] overlayfs: cannot append lower layer [ 50.404593][ T926] FAULT_INJECTION: forcing a failure. [ 50.404593][ T926] name failslab, interval 1, probability 0, space 0, times 0 [ 50.417737][ T926] CPU: 0 UID: 0 PID: 926 Comm: syz.2.138 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 50.417772][ T926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.417786][ T926] Call Trace: [ 50.417793][ T926] [ 50.417802][ T926] __dump_stack+0x21/0x30 [ 50.417844][ T926] dump_stack_lvl+0x140/0x1c0 [ 50.417868][ T926] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.417892][ T926] ? stack_trace_save+0xaa/0x100 [ 50.417913][ T926] dump_stack+0x19/0x20 [ 50.417936][ T926] should_fail_ex+0x3c2/0x510 [ 50.417956][ T926] should_failslab+0xac/0x100 [ 50.417978][ T926] __kmalloc_cache_noprof+0x41/0x470 [ 50.417996][ T926] ? proc_self_get_link+0x119/0x290 [ 50.418021][ T926] proc_self_get_link+0x119/0x290 [ 50.418045][ T926] ? security_inode_follow_link+0x7e/0x180 [ 50.418070][ T926] ? __cfi_proc_self_get_link+0x10/0x10 [ 50.418094][ T926] pick_link+0x6d4/0xe80 [ 50.418112][ T926] step_into+0xc33/0xf10 [ 50.418128][ T926] ? read_word_at_a_time+0x1a/0x40 [ 50.418149][ T926] ? set_root+0x420/0x420 [ 50.418165][ T926] ? inode_permission+0xf3/0x4c0 [ 50.418185][ T926] link_path_walk+0x746/0xeb0 [ 50.418206][ T926] path_openat+0x298/0x35a0 [ 50.418229][ T926] ? schedule+0xc5/0x240 [ 50.418247][ T926] ? kasan_save_alloc_info+0x3a/0x50 [ 50.418263][ T926] ? __kasan_slab_alloc+0x73/0x90 [ 50.418283][ T926] ? getname+0x1b/0x30 [ 50.418300][ T926] ? x64_sys_call+0xe69/0x2ee0 [ 50.418315][ T926] ? do_syscall_64+0x57/0xf0 [ 50.418332][ T926] ? do_filp_open+0x440/0x440 [ 50.418356][ T926] do_filp_open+0x1f2/0x440 [ 50.418385][ T926] ? __cfi_do_filp_open+0x10/0x10 [ 50.418416][ T926] ? alloc_fd+0x4c1/0x570 [ 50.418441][ T926] do_sys_openat2+0x134/0x1d0 [ 50.418466][ T926] ? fput+0x1a4/0x230 [ 50.418493][ T926] ? do_sys_open+0x100/0x100 [ 50.418517][ T926] ? __cfi_ksys_write+0x10/0x10 [ 50.418536][ T926] __x64_sys_openat+0x13a/0x170 [ 50.418561][ T926] x64_sys_call+0xe69/0x2ee0 [ 50.418576][ T926] do_syscall_64+0x57/0xf0 [ 50.418591][ T926] ? clear_bhb_loop+0x50/0xa0 [ 50.418612][ T926] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.418632][ T926] RIP: 0033:0x7f874975e98e [ 50.418646][ T926] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 50.418659][ T926] RSP: 002b:00007f874a5a2f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 50.418677][ T926] RAX: ffffffffffffffda RBX: 00007f874a5a36c0 RCX: 00007f874975e98e [ 50.418689][ T926] RDX: 0000000000000000 RSI: 00007f87498347a6 RDI: ffffffffffffff9c [ 50.418707][ T926] RBP: 00007f874983506b R08: 0000000000000000 R09: 0000000000000000 [ 50.418718][ T926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.418728][ T926] R13: 00007f8749a26038 R14: 00007f8749a25fa0 R15: 00007ffe1a561bc8 [ 50.418743][ T926] [ 50.737683][ T311] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 50.830528][ T311] usb 5-1: device descriptor read/8, error -71 [ 50.831516][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 50.831725][ T36] audit: type=1400 audit(1790522882.430:280): avc: denied { getopt } for pid=928 comm="syz.2.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.865997][ T10] usb 4-1: device descriptor read/64, error -71 [ 50.967219][ T311] usb 5-1: device descriptor read/8, error -71 [ 51.105972][ T10] usb 4-1: device descriptor read/64, error -71 [ 51.205965][ T311] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 51.215967][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 51.224510][ T10] usb usb4-port1: attempt power cycle [ 51.233620][ T311] usb 5-1: device descriptor read/8, error -71 [ 51.367929][ T311] usb 5-1: device descriptor read/8, error -71 [ 51.376383][ T9] usb 2-1: too many configurations: 72, using maximum allowed: 8 [ 51.391920][ T9] usb 2-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 51.401316][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.411048][ T9] usb 2-1: config 0 descriptor?? [ 51.476092][ T311] usb usb5-port1: unable to enumerate USB device [ 51.566162][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 51.589371][ T10] usb 4-1: device descriptor read/8, error -71 [ 51.704167][ T36] audit: type=1400 audit(1790522883.300:281): avc: denied { setcurrent } for pid=951 comm="syz.2.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.727500][ T10] usb 4-1: device descriptor read/8, error -71 [ 51.996046][ T339] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 51.996092][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 52.027718][ T10] usb 4-1: device descriptor read/8, error -71 [ 52.146005][ T339] usb 3-1: Using ep0 maxpacket: 32 [ 52.146031][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 52.155643][ T339] usb 3-1: unable to get BOS descriptor or descriptor too short [ 52.169036][ T339] usb 3-1: config 4 has an invalid interface number: 182 but max is 0 [ 52.177388][ T339] usb 3-1: config 4 has no interface number 0 [ 52.177762][ T10] usb 4-1: device descriptor read/8, error -71 [ 52.183950][ T339] usb 3-1: config 4 interface 182 altsetting 54 endpoint 0x9 has invalid maxpacket 1072, setting to 1024 [ 52.201381][ T339] usb 3-1: config 4 interface 182 altsetting 54 bulk endpoint 0x9 has invalid maxpacket 1024 [ 52.213941][ T339] usb 3-1: config 4 interface 182 altsetting 54 bulk endpoint 0xF has invalid maxpacket 32 [ 52.226462][ T339] usb 3-1: config 4 interface 182 has no altsetting 0 [ 52.235103][ T339] usb 3-1: New USB device found, idVendor=045e, idProduct=0462, bcdDevice=64.48 [ 52.244305][ T339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.254089][ T339] usb 3-1: Product: syz [ 52.258386][ T339] usb 3-1: Manufacturer: syz [ 52.263441][ T339] usb 3-1: SerialNumber: syz [ 52.269771][ T954] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 52.278235][ T954] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 52.296360][ T10] usb usb4-port1: unable to enumerate USB device [ 52.315944][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 52.323360][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.334874][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.345737][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.355017][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.363512][ T9] usb 5-1: Product: syz [ 52.367888][ T9] usb 5-1: Manufacturer: syz [ 52.372518][ T9] usb 5-1: SerialNumber: syz [ 52.492156][ T339] usb 3-1: USB disconnect, device number 14 [ 52.534099][ T36] audit: type=1400 audit(1790522884.130:282): avc: denied { getopt } for pid=958 comm="syz.3.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.580470][ T9] usb 5-1: 0:2 : does not exist [ 52.604605][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 52.625119][ T9] usb 5-1: USB disconnect, device number 12 [ 52.641274][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.162071][ T967] kvm: pic: single mode not supported [ 53.162421][ T967] kvm: pic: single mode not supported [ 53.168729][ T967] kvm: pic: single mode not supported [ 53.174637][ T967] kvm: pic: single mode not supported [ 53.180113][ T967] kvm: pic: level sensitive irq not supported [ 53.188843][ T967] kvm: pic: level sensitive irq not supported [ 53.195962][ T967] kvm: pic: single mode not supported [ 53.202922][ T967] kvm: pic: single mode not supported [ 53.211481][ T36] audit: type=1400 audit(1790522884.810:283): avc: denied { bind } for pid=970 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.247968][ T36] audit: type=1400 audit(1790522884.840:284): avc: denied { block_suspend } for pid=970 comm="syz.4.151" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.256152][ T971] 9pnet: Could not find request transport: xen [ 53.271630][ T36] audit: type=1400 audit(1790522884.880:285): avc: denied { ioctl } for pid=970 comm="syz.4.151" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 53.276072][ T339] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 53.302236][ T971] 9pnet: Could not find request transport: xen [ 53.315743][ T971] 9pnet: Could not find request transport: xen [ 53.322324][ T971] 9pnet: Could not find request transport: xen [ 53.329422][ T971] 9pnet: Could not find request transport: xen [ 53.338841][ T971] 9pnet: Could not find request transport: xen [ 53.345425][ T971] 9pnet: Could not find request transport: xen [ 53.351952][ T971] 9pnet: Could not find request transport: xen [ 53.358488][ T971] 9pnet: Could not find request transport: xen [ 53.365258][ T971] 9pnet: Could not find request transport: xen [ 53.380609][ T971] 9pnet: Could not find request transport: xen [ 53.387280][ T971] 9pnet: Could not find request transport: xen [ 53.393658][ T971] 9pnet: Could not find request transport: xen [ 53.400388][ T971] 9pnet: Could not find request transport: xen [ 53.407370][ T971] 9pnet: Could not find request transport: xen [ 53.413755][ T971] 9pnet: Could not find request transport: xen [ 53.420141][ T971] 9pnet: Could not find request transport: xen [ 53.426550][ T971] 9pnet: Could not find request transport: xen [ 53.433007][ T971] 9pnet: Could not find request transport: xen [ 53.439630][ T971] 9pnet: Could not find request transport: xen [ 53.446105][ T971] 9pnet: Could not find request transport: xen [ 53.452680][ T971] 9pnet: Could not find request transport: xen [ 53.459055][ T971] 9pnet: Could not find request transport: xen [ 53.465417][ T971] 9pnet: Could not find request transport: xen [ 53.472379][ T971] 9pnet: Could not find request transport: xen [ 53.478321][ T339] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 53.479965][ T971] 9pnet: Could not find request transport: xen [ 53.491914][ T339] usb 3-1: config 0 has no interface number 0 [ 53.495140][ T971] 9pnet: Could not find request transport: xen [ 53.507314][ T971] 9pnet: Could not find request transport: xen [ 53.512322][ T339] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 53.514114][ T971] 9pnet: Could not find request transport: xen [ 53.531927][ T971] 9pnet: Could not find request transport: xen [ 53.538498][ T971] 9pnet: Could not find request transport: xen [ 53.539660][ T339] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 53.545582][ T971] 9pnet: Could not find request transport: xen [ 53.561557][ T971] 9pnet: Could not find request transport: xen [ 53.567944][ T339] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 53.595010][ T36] audit: type=1400 audit(1790522885.190:286): avc: denied { create } for pid=976 comm="syz.3.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 53.597956][ T339] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 53.631228][ T339] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 53.640864][ T339] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 53.652484][ T339] usb 3-1: Product: syz [ 53.652645][ T36] audit: type=1400 audit(1790522885.220:287): avc: denied { cmd } for pid=976 comm="iou-wrk-977" path="socket:[11028]" dev="sockfs" ino=11028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 53.657525][ T339] usb 3-1: Manufacturer: syz [ 53.687799][ T981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 53.687976][ T339] usb 3-1: SerialNumber: syz [ 53.706790][ T339] usb 3-1: config 0 descriptor?? [ 53.715068][ T339] xpad 3-1:0.237: probe with driver xpad failed with error -5 [ 53.717904][ T981] erspan0: entered promiscuous mode [ 53.741722][ T977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 53.987658][ T339] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 54.005584][ T358] usb 2-1: USB disconnect, device number 13 [ 54.045938][ T311] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 54.080371][ T46] usb 3-1: USB disconnect, device number 15 [ 54.156015][ T339] usb 4-1: device descriptor read/64, error -71 [ 54.163456][ T987] cgroup: Invalid name [ 54.168449][ T987] netlink: 'syz.1.155': attribute type 3 has an invalid length. [ 54.196146][ T311] usb 5-1: Using ep0 maxpacket: 8 [ 54.202756][ T311] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 54.211349][ T311] usb 5-1: config 179 has no interface number 0 [ 54.218595][ T311] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 54.231562][ T311] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 54.243348][ T311] usb 5-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 54.257713][ T311] usb 5-1: config 179 interface 65 has no altsetting 0 [ 54.264623][ T311] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 54.274340][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.340047][ T993] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.396120][ T339] usb 4-1: device descriptor read/64, error -71 [ 54.427172][ T36] audit: type=1400 audit(1790522886.030:288): avc: denied { view } for pid=994 comm="syz.1.158" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 54.429803][ T995] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.462740][ T36] audit: type=1400 audit(1790522886.070:289): avc: denied { ioctl } for pid=994 comm="syz.1.158" path="socket:[11137]" dev="sockfs" ino=11137 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.495100][ T9] usb 5-1: USB disconnect, device number 13 [ 54.635920][ T339] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 54.775907][ T339] usb 4-1: device descriptor read/64, error -71 [ 54.927822][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 55.025903][ T339] usb 4-1: device descriptor read/64, error -71 [ 55.034907][ T1012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.052195][ T1012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.097345][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.108749][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.119248][ T9] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 55.128676][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.139976][ T9] usb 3-1: config 0 descriptor?? [ 55.166115][ T339] usb usb4-port1: attempt power cycle [ 55.505919][ T339] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 55.537354][ T339] usb 4-1: device descriptor read/8, error -71 [ 55.552503][ T9] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 55.565944][ T9] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 55.573251][ T9] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 55.596868][ T9] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 55.666954][ T339] usb 4-1: device descriptor read/8, error -71 [ 55.807392][ T1007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.824705][ T1007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.905917][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 55.915950][ T339] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 55.957458][ T339] usb 4-1: device descriptor read/8, error -71 [ 56.040118][ T1042] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 56.050493][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 56.050510][ T36] audit: type=1400 audit(1790522887.660:292): avc: denied { relabelto } for pid=1040 comm="syz.4.169" name="33" dev="tmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 56.066020][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 56.087751][ T36] audit: type=1400 audit(1790522887.660:293): avc: denied { associate } for pid=1040 comm="syz.4.169" name="33" dev="tmpfs" ino=196 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 56.095275][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.121446][ T339] usb 4-1: device descriptor read/8, error -71 [ 56.131160][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 56.148169][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 56.161774][ T9] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 56.171227][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.180574][ T9] usb 2-1: config 0 descriptor?? [ 56.246047][ T339] usb usb4-port1: unable to enumerate USB device [ 56.591394][ T9] nintendo 0003:057E:2019.0005: hidraw1: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 56.788697][ T1052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.805643][ T1052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.829801][ T36] audit: type=1400 audit(1790522888.430:294): avc: denied { write } for pid=587 comm="syz-executor" name="33" dev="tmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 56.872609][ T36] audit: type=1400 audit(1790522888.430:295): avc: denied { remove_name } for pid=587 comm="syz-executor" name="config" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 56.900938][ T36] audit: type=1400 audit(1790522888.460:296): avc: denied { rmdir } for pid=587 comm="syz-executor" name="33" dev="tmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 57.006079][ T358] usb 3-1: reset high-speed USB device number 16 using dummy_hcd [ 57.074409][ T1063] netlink: 'syz.3.173': attribute type 2 has an invalid length. [ 57.165916][ T339] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 57.315932][ T339] usb 5-1: Using ep0 maxpacket: 8 [ 57.323062][ T339] usb 5-1: unable to get BOS descriptor or descriptor too short [ 57.331093][ T664] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 57.339630][ T339] usb 5-1: config 129 has an invalid interface number: 9 but max is 0 [ 57.348537][ T339] usb 5-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 57.359771][ T339] usb 5-1: config 129 has no interface number 0 [ 57.369127][ T339] usb 5-1: config 129 interface 9 has no altsetting 0 [ 57.377707][ T339] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 57.388710][ T339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.397239][ T339] usb 5-1: Product: syz [ 57.401486][ T339] usb 5-1: Manufacturer: syz [ 57.406162][ T339] usb 5-1: SerialNumber: syz [ 57.476021][ T664] usb 4-1: device descriptor read/64, error -71 [ 57.546367][ T1071] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 57.623203][ T339] usb 5-1: USB disconnect, device number 15 [ 57.641659][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:129.9/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.715946][ T664] usb 4-1: device descriptor read/64, error -71 [ 57.747503][ T1077] SELinux: security policydb version 15 (MLS) not backwards compatible [ 57.756289][ T36] audit: type=1400 audit(1790522889.350:297): avc: denied { load_policy } for pid=1076 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 57.777085][ T1077] SELinux: failed to load policy [ 57.797542][ T46] usb 3-1: USB disconnect, device number 16 [ 57.807929][ T9] nintendo 0003:057E:2019.0005: Failed to get joycon info; ret=-71 [ 57.827564][ T9] nintendo 0003:057E:2019.0005: Failed to retrieve controller info; ret=-71 [ 57.840320][ T1080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 57.842106][ T36] audit: type=1400 audit(1790522889.450:298): avc: denied { bind } for pid=1078 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.863142][ T9] nintendo 0003:057E:2019.0005: Failed to initialize controller; ret=-71 [ 57.880808][ T36] audit: type=1400 audit(1790522889.450:299): avc: denied { setopt } for pid=1078 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.917624][ T9] nintendo 0003:057E:2019.0005: probe - fail = -71 [ 57.924738][ T9] nintendo 0003:057E:2019.0005: probe with driver nintendo failed with error -71 [ 57.939929][ T1083] netlink: 'syz.1.180': attribute type 1 has an invalid length. [ 57.949720][ T1083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 57.961975][ T9] usb 2-1: USB disconnect, device number 14 [ 57.995909][ T664] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 58.135978][ T664] usb 4-1: device descriptor read/64, error -71 [ 58.166993][ T36] audit: type=1400 audit(1790522889.770:300): avc: denied { setopt } for pid=1089 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.320531][ T36] audit: type=1400 audit(1790522889.920:301): avc: denied { set_context_mgr } for pid=1098 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 58.386592][ T1099] rust_binder: 1098:1099 error while translating object: EINVAL [ 58.412160][ T1099] rust_binder: Failure in copy_transaction_data: EINVAL [ 58.412264][ T1099] rust_binder: 1098:1099 transaction call to 1098:0 failed EINVAL, code 0 size 120-24 [ 58.426071][ T664] usb 4-1: device descriptor read/64, error -71 [ 58.466735][ T46] rust_binder: 1098: undelivered TRANSACTION_ERROR: 29201 [ 58.546139][ T664] usb usb4-port1: attempt power cycle [ 58.565122][ T1112] netlink: 64 bytes leftover after parsing attributes in process `syz.1.189'. [ 58.800179][ T1127] netlink: 288 bytes leftover after parsing attributes in process `syz.1.192'. [ 58.866093][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 58.895940][ T664] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 58.926975][ T664] usb 4-1: device descriptor read/8, error -71 [ 59.017038][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.037128][ T9] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.056158][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 59.063056][ T9] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 59.072574][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.087221][ T9] usb 5-1: config 0 descriptor?? [ 59.087836][ T664] usb 4-1: device descriptor read/8, error -71 [ 59.345924][ T664] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 59.377380][ T664] usb 4-1: device descriptor read/8, error -71 [ 59.517058][ T664] usb 4-1: device descriptor read/8, error -71 [ 59.636257][ T664] usb usb4-port1: unable to enumerate USB device [ 59.917089][ T1144] batadv_slave_1: entered promiscuous mode [ 59.927053][ T1143] batadv_slave_1: left promiscuous mode [ 60.488504][ T1168] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 60.529081][ T1172] random: crng reseeded on system resumption [ 61.085923][ T664] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 61.256705][ T664] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 61.267862][ T664] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.277689][ T664] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 61.286979][ T664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.300644][ T664] hub 2-1:4.0: USB hub found [ 61.498118][ T664] hub 2-1:4.0: 2 ports detected [ 61.503237][ T664] usb 2-1: selecting invalid altsetting 1 [ 61.509166][ T664] hub 2-1:4.0: Using single TT (err -22) [ 61.635384][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 61.641892][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 61.651479][ T9] usb 5-1: USB disconnect, device number 16 [ 61.703333][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 61.703353][ T36] audit: type=1400 audit(1790522893.300:317): avc: denied { read } for pid=1176 comm="syz.1.204" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.742987][ T36] audit: type=1400 audit(1790522893.300:318): avc: denied { open } for pid=1176 comm="syz.1.204" path="/dev/usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.769985][ T36] audit: type=1400 audit(1790522893.300:319): avc: denied { ioctl } for pid=1176 comm="syz.1.204" path="/dev/usbmon9" dev="devtmpfs" ino=118 ioctlcmd=0x940d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.802238][ T1177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.815085][ T1177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.824347][ T664] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 61.835590][ T664] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 61.876384][ T664] usb 2-1: USB disconnect, device number 15 [ 62.016036][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 62.132087][ T1194] netlink: 32 bytes leftover after parsing attributes in process `syz.3.208'. [ 62.141829][ T1194] netlink: 9 bytes leftover after parsing attributes in process `syz.3.208'. [ 62.165899][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 62.183651][ T9] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 62.195891][ T9] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 62.216943][ T9] usb 5-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 62.232680][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.246064][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 62.264669][ T9] usb 5-1: SerialNumber: syz [ 62.422279][ T1209] netlink: 'syz.1.209': attribute type 30 has an invalid length. [ 62.476133][ T1181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.206'. [ 62.503125][ T36] audit: type=1400 audit(1790522894.100:320): avc: denied { transfer } for pid=1180 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 62.504088][ T1181] rust_binder: 1180:1181 tried to use weak ref as strong ref [ 62.540762][ T1181] rust_binder: 1180:1181 got transaction to invalid handle 3 [ 62.552039][ T1181] rust_binder: 1180:1181 transaction call to 0:0 failed EINVAL, code 0 size 0-18446744073709551587 [ 62.569694][ T9] usb 5-1: bad CDC descriptors [ 62.576817][ T9] usb 5-1: USB disconnect, device number 17 [ 63.100564][ T664] rust_binder: 1180: undelivered TRANSACTION_ERROR: 29201 [ 63.168795][ T36] audit: type=1326 audit(1790522894.770:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1227 comm="syz.4.213" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a6739e159 code=0x0 [ 63.409139][ T1236] tipc: Started in network mode [ 63.414376][ T1236] tipc: Node identity ac14140f, cluster identity 4711 [ 63.422181][ T1236] tipc: New replicast peer: 255.255.255.255 [ 63.436159][ T1236] tipc: Enabled bearer , priority 10 [ 63.459556][ T36] audit: type=1400 audit(1790522895.060:322): avc: denied { accept } for pid=1237 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.492176][ T36] audit: type=1400 audit(1790522895.060:323): avc: denied { bind } for pid=1237 comm="syz.4.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.615915][ T10] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 63.678769][ T36] audit: type=1400 audit(1790522895.280:324): avc: denied { name_bind } for pid=1240 comm="syz.3.218" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 63.715954][ T9] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 63.761546][ T10] usb 2-1: device descriptor read/64, error -71 [ 63.810597][ T36] audit: type=1400 audit(1790522895.410:325): avc: denied { mounton } for pid=1245 comm="syz.3.219" path="/53/file0/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 63.845929][ T9] usb 5-1: device descriptor read/64, error -71 [ 63.994009][ T1251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1251 comm=syz.3.220 [ 64.006112][ T10] usb 2-1: device descriptor read/64, error -71 [ 64.009433][ T1251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.220'. [ 64.051930][ T36] audit: type=1326 audit(1790522895.650:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1253 comm="syz.3.221" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f097e39e159 code=0x0 [ 64.095950][ T9] usb 5-1: device descriptor read/64, error -71 [ 64.255921][ T10] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 64.346124][ T9] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 64.415768][ T10] usb 2-1: device descriptor read/64, error -71 [ 64.425952][ T46] tipc: Node number set to 2886997007 [ 64.495940][ T9] usb 5-1: device descriptor read/64, error -71 [ 64.655923][ T10] usb 2-1: device descriptor read/64, error -71 [ 64.735938][ T9] usb 5-1: device descriptor read/64, error -71 [ 64.766066][ T10] usb usb2-port1: attempt power cycle [ 64.856068][ T9] usb usb5-port1: attempt power cycle [ 65.105910][ T10] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 65.142660][ T10] usb 2-1: device descriptor read/8, error -71 [ 65.195968][ T9] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 65.237074][ T9] usb 5-1: device descriptor read/8, error -71 [ 65.285423][ T10] usb 2-1: device descriptor read/8, error -71 [ 65.367124][ T9] usb 5-1: device descriptor read/8, error -71 [ 65.535925][ T10] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 65.557125][ T10] usb 2-1: device descriptor read/8, error -71 [ 65.615922][ T9] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 65.636994][ T9] usb 5-1: device descriptor read/8, error -71 [ 65.692796][ T10] usb 2-1: device descriptor read/8, error -71 [ 65.767030][ T9] usb 5-1: device descriptor read/8, error -71 [ 65.815923][ T10] usb usb2-port1: unable to enumerate USB device [ 65.885932][ T9] usb usb5-port1: unable to enumerate USB device [ 66.705877][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 66.705897][ T36] audit: type=1400 audit(1790522898.300:362): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.785921][ T36] audit: type=1400 audit(1790522898.300:363): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.871242][ T36] audit: type=1400 audit(1790522898.300:364): avc: denied { read } for pid=1297 comm="syz.3.235" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.929112][ T36] audit: type=1400 audit(1790522898.300:365): avc: denied { read open } for pid=1297 comm="syz.3.235" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.995900][ T36] audit: type=1400 audit(1790522898.330:366): avc: denied { read } for pid=1299 comm="syz.4.236" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.075895][ T36] audit: type=1400 audit(1790522898.330:367): avc: denied { read open } for pid=1299 comm="syz.4.236" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.151715][ T36] audit: type=1400 audit(1790522898.340:368): avc: denied { read } for pid=1299 comm="syz.4.236" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.175884][ T664] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 67.205015][ T36] audit: type=1400 audit(1790522898.340:369): avc: denied { read open } for pid=1299 comm="syz.4.236" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.253108][ T36] audit: type=1400 audit(1790522898.340:370): avc: denied { read } for pid=1299 comm="syz.4.236" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.305888][ T36] audit: type=1400 audit(1790522898.340:371): avc: denied { read open } for pid=1299 comm="syz.4.236" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 67.382875][ T664] usb 4-1: unable to get BOS descriptor or descriptor too short [ 67.406100][ T664] usb 4-1: not running at top speed; connect to a high speed hub [ 67.425448][ T664] usb 4-1: config 199 has an invalid interface number: 102 but max is 0 [ 67.460041][ T664] usb 4-1: config 199 has no interface number 0 [ 67.475886][ T664] usb 4-1: config 199 interface 102 has no altsetting 0 [ 67.499906][ T664] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=e1.7b [ 67.515882][ T664] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.545888][ T664] usb 4-1: Product: syz [ 67.556562][ T664] usb 4-1: Manufacturer: syz [ 67.567724][ T664] usb 4-1: SerialNumber: syz [ 67.801660][ T664] usb_ehset_test 4-1:199.102: probe with driver usb_ehset_test failed with error -32 [ 67.829346][ T664] usb 4-1: USB disconnect, device number 15 [ 67.955921][ T339] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 68.095929][ T339] usb 2-1: device descriptor read/64, error -71 [ 68.235895][ T358] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 68.335975][ T339] usb 2-1: device descriptor read/64, error -71 [ 68.408559][ T358] usb 5-1: Using ep0 maxpacket: 8 [ 68.423583][ T358] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 68.434359][ T358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.454969][ T358] usb 5-1: Product: syz [ 68.467431][ T358] usb 5-1: Manufacturer: syz [ 68.477627][ T358] usb 5-1: SerialNumber: syz [ 68.595898][ T339] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 68.704340][ T358] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 68.722099][ T358] usb 5-1: USB disconnect, device number 22 [ 68.735919][ T339] usb 2-1: device descriptor read/64, error -71 [ 68.790315][ T1343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.249'. [ 68.995907][ T339] usb 2-1: device descriptor read/64, error -71 [ 69.116426][ T339] usb usb2-port1: attempt power cycle [ 69.406193][ T1358] netlink: 'syz.3.254': attribute type 5 has an invalid length. [ 69.425959][ T1358] netlink: 45 bytes leftover after parsing attributes in process `syz.3.254'. [ 69.476044][ T339] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 69.528095][ T339] usb 2-1: device descriptor read/8, error -71 [ 69.605902][ T9] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 69.658919][ T339] usb 2-1: device descriptor read/8, error -71 [ 69.766722][ T9] usb 5-1: config 3 has an invalid interface number: 193 but max is 0 [ 69.786027][ T9] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 69.806602][ T9] usb 5-1: config 3 has no interface number 0 [ 69.832237][ T9] usb 5-1: config 3 interface 193 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 69.867732][ T9] usb 5-1: config 3 interface 193 has no altsetting 0 [ 69.895285][ T9] usb 5-1: New USB device found, idVendor=045b, idProduct=0247, bcdDevice=6b.2b [ 69.904568][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.915951][ T339] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 69.923675][ T9] usb 5-1: Product: syz [ 69.928046][ T9] usb 5-1: Manufacturer: syz [ 69.932689][ T9] usb 5-1: SerialNumber: syz [ 69.964383][ T339] usb 2-1: device descriptor read/8, error -71 [ 70.107141][ T339] usb 2-1: device descriptor read/8, error -71 [ 70.157243][ T9] cdc_acm 5-1:3.193: Zero length descriptor references [ 70.165455][ T9] cdc_acm 5-1:3.193: probe with driver cdc_acm failed with error -22 [ 70.196536][ T9] usb 5-1: USB disconnect, device number 23 [ 70.207650][ T1370] devpts: called with bogus options [ 70.235997][ T339] usb usb2-port1: unable to enumerate USB device [ 71.750565][ T36] kauditd_printk_skb: 494 callbacks suppressed [ 71.750587][ T36] audit: type=1400 audit(1790522903.350:866): avc: denied { append } for pid=1399 comm="syz.3.264" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.847830][ T36] audit: type=1400 audit(1790522903.390:867): avc: denied { append open } for pid=1399 comm="syz.3.264" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 71.909966][ T1400] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.924288][ T36] audit: type=1400 audit(1790522903.390:868): avc: denied { mounton } for pid=1399 comm="syz.3.264" path="/83/sys" dev="tmpfs" ino=490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.981771][ T36] audit: type=1400 audit(1790522903.390:869): avc: denied { mount } for pid=1399 comm="syz.3.264" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 72.007060][ T1404] audit: audit_backlog=65 > audit_backlog_limit=64 [ 72.014378][ T1403] audit: audit_backlog=65 > audit_backlog_limit=64 [ 72.031089][ T1404] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 72.040653][ T36] audit: type=1400 audit(1790522903.400:870): avc: denied { read write } for pid=296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.064928][ T1403] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 72.086035][ T1404] audit: backlog limit exceeded [ 72.265139][ T1407] rust_binder: 1406:1407 error while translating object: EINVAL [ 72.291478][ T1407] rust_binder: Failure in copy_transaction_data: EINVAL [ 72.291513][ T1407] rust_binder: 1406:1407 transaction call to 1406:0 failed EINVAL, code 0 size 88-24 [ 72.575903][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 72.726056][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 72.760639][ T9] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 72.775942][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.807873][ T9] usb 4-1: config 0 has no interface number 0 [ 72.828105][ T9] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 72.870074][ T9] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 72.897480][ T9] usb 4-1: config 0 interface 98 has no altsetting 0 [ 72.919490][ T9] usb 4-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 72.935911][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.948173][ T483] bridge_slave_1: left allmulticast mode [ 72.954523][ T483] bridge_slave_1: left promiscuous mode [ 72.974080][ T9] usb 4-1: Product: syz [ 72.979491][ T483] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.995287][ T9] usb 4-1: Manufacturer: syz [ 73.006080][ T483] bridge_slave_0: left allmulticast mode [ 73.015020][ T9] usb 4-1: SerialNumber: syz [ 73.032326][ T483] bridge_slave_0: left promiscuous mode [ 73.042047][ T9] usb 4-1: config 0 descriptor?? [ 73.050473][ T483] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.062130][ T1408] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 73.086042][ T1408] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 73.130845][ T1420] netlink: 'syz.1.271': attribute type 32 has an invalid length. [ 73.203807][ T1421] TCP: TCP_TX_DELAY enabled [ 73.248689][ T1420] netlink: 80 bytes leftover after parsing attributes in process `syz.1.271'. [ 73.293708][ T483] veth1_macvtap: left promiscuous mode [ 73.302082][ T483] veth0_vlan: left promiscuous mode [ 73.337098][ T1407] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 73.345619][ T1407] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 73.602696][ T1418] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.632332][ T1418] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.647083][ T1418] bridge_slave_0: entered allmulticast mode [ 73.662572][ T1418] bridge_slave_0: entered promiscuous mode [ 73.686842][ T1418] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.717054][ T1418] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.744523][ T1418] bridge_slave_1: entered allmulticast mode [ 73.768750][ T1418] bridge_slave_1: entered promiscuous mode [ 73.966300][ T9] asix 4-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 73.977181][ T311] rust_binder: 1406: undelivered TRANSACTION_ERROR: 29201 [ 73.996156][ T9] asix 4-1:0.98: probe with driver asix failed with error -71 [ 74.007043][ T9] usb 4-1: USB disconnect, device number 16 [ 74.193972][ T483] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.201421][ T483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.236966][ T482] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.245613][ T482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.393793][ T1418] veth0_vlan: entered promiscuous mode [ 74.455272][ T1418] veth1_macvtap: entered promiscuous mode [ 74.495925][ T339] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 74.659577][ T339] usb 2-1: Using ep0 maxpacket: 16 [ 74.690866][ T339] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 74.707701][ T339] usb 2-1: config 1 has no interface number 0 [ 74.722213][ T339] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 74.754984][ T339] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 74.782714][ T339] usb 2-1: config 1 interface 105 has no altsetting 0 [ 74.828068][ T339] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 74.841006][ T339] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 74.851771][ T339] usb 2-1: Product: syz [ 74.885899][ T339] usb 2-1: Manufacturer: syz [ 74.899048][ T339] usb 2-1: SerialNumber: syz [ 74.924225][ T1437] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 74.952675][ T1437] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.193999][ T1466] random: crng reseeded on system resumption [ 75.246023][ T358] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 75.336028][ T664] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 75.402603][ T1437] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.411734][ T1437] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.421512][ T358] usb 5-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 75.433938][ T358] usb 5-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 75.445679][ T358] usb 5-1: config 0 interface 0 has no altsetting 0 [ 75.452530][ T358] usb 5-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 75.461825][ T358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.471844][ T358] usb 5-1: config 0 descriptor?? [ 75.486313][ T664] usb 6-1: Using ep0 maxpacket: 16 [ 75.491033][ T1459] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 75.501816][ T664] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.516005][ T664] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.532914][ T664] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 75.543605][ T664] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.552811][ T664] usb 6-1: Product: syz [ 75.557225][ T664] usb 6-1: Manufacturer: syz [ 75.562672][ T664] usb 6-1: SerialNumber: syz [ 75.636329][ T339] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 75.647921][ T339] aqc111 2-1:1.105: probe with driver aqc111 failed with error -32 [ 75.662933][ T339] usb 2-1: USB disconnect, device number 24 [ 75.833550][ T664] usb 6-1: 0:2 : does not exist [ 75.843322][ T664] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 75.861378][ T664] usb 6-1: USB disconnect, device number 2 [ 75.942685][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.976643][ T358] usbhid 5-1:0.0: can't add hid device: -71 [ 75.985110][ T358] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 75.995373][ T1466] Unrecognized hibernate image header format! [ 76.009988][ T358] usb 5-1: USB disconnect, device number 24 [ 76.025929][ T1466] PM: hibernation: Image mismatch: architecture specific data [ 76.310834][ T1479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.281'. [ 76.340032][ T1479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 76.496644][ T1483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 76.716360][ T1488] kvm: requested 121523 ns i8254 timer period limited to 200000 ns [ 76.776439][ T1488] kvm: requested 20952 ns i8254 timer period limited to 200000 ns [ 76.790304][ T1488] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 76.816283][ T1488] kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 76.827131][ T36] kauditd_printk_skb: 844 callbacks suppressed [ 76.827153][ T36] audit: type=1400 audit(1790522908.420:1690): avc: denied { read write } for pid=1418 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.886188][ T1488] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 76.896220][ T1488] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 76.909303][ T36] audit: type=1400 audit(1790522908.420:1691): avc: denied { read write open } for pid=1418 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.936986][ T1488] kvm: requested 36876 ns i8254 timer period limited to 200000 ns [ 76.953514][ T1488] kvm: requested 47771 ns i8254 timer period limited to 200000 ns [ 77.000020][ T1488] kvm: requested 67885 ns i8254 timer period limited to 200000 ns [ 77.001214][ T36] audit: type=1400 audit(1790522908.420:1692): avc: denied { ioctl } for pid=1418 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.059081][ T1488] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 77.166090][ T36] audit: type=1400 audit(1790522908.490:1693): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 77.215944][ T36] audit: type=1400 audit(1790522908.550:1694): avc: denied { read write } for pid=296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.285977][ T36] audit: type=1400 audit(1790522908.550:1695): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.305708][ T1498] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 77.350852][ T36] audit: type=1400 audit(1790522908.550:1696): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.391960][ T1502] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 77.396077][ T36] audit: type=1400 audit(1790522908.570:1697): avc: denied { read } for pid=1493 comm="syz.5.286" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.426634][ T1507] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 77.475354][ T36] audit: type=1400 audit(1790522908.570:1698): avc: denied { read open } for pid=1493 comm="syz.5.286" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.532115][ T36] audit: type=1400 audit(1790522908.580:1699): avc: denied { ioctl } for pid=1493 comm="syz.5.286" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.837378][ T1518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1518 comm=syz.3.288 [ 77.975882][ T358] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 78.115920][ T358] usb 6-1: device descriptor read/64, error -71 [ 78.286302][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 78.366424][ T358] usb 6-1: device descriptor read/64, error -71 [ 78.435895][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 78.445008][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.457075][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.467446][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 78.480479][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 78.490208][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.501090][ T10] usb 5-1: config 0 descriptor?? [ 78.605898][ T358] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 78.755908][ T358] usb 6-1: device descriptor read/64, error -71 [ 78.865915][ T664] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 78.916059][ T1529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.926700][ T1529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.015923][ T358] usb 6-1: device descriptor read/64, error -71 [ 79.029689][ T664] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 79.039370][ T664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.047525][ T664] usb 2-1: Product: syz [ 79.051958][ T664] usb 2-1: Manufacturer: syz [ 79.056833][ T664] usb 2-1: SerialNumber: syz [ 79.127223][ T358] usb usb6-port1: attempt power cycle [ 79.164509][ T1529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1529 comm=syz.4.295 [ 79.466009][ T358] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 79.489965][ T358] usb 6-1: device descriptor read/8, error -71 [ 79.584420][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 79.591515][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 79.606072][ T10] usb 5-1: USB disconnect, device number 25 [ 79.637990][ T358] usb 6-1: device descriptor read/8, error -71 [ 79.876169][ T358] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 79.884213][ T664] (unnamed net_device) (uninitialized): Assigned a random MAC address: 42:8f:b9:31:5b:db [ 79.900093][ T664] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 79.909614][ T358] usb 6-1: device descriptor read/8, error -71 [ 80.020666][ T1542] ./dev/sda1: Can't lookup blockdev [ 80.052279][ T358] usb 6-1: device descriptor read/8, error -71 [ 80.176426][ T358] usb usb6-port1: unable to enumerate USB device [ 80.938428][ C1] usb 2-1: eth1: intr status -71 [ 80.945411][ C1] usb 2-1: eth1: intr status -71 [ 80.952942][ C1] usb 2-1: eth1: intr status -71 [ 80.958957][ T358] usb 2-1: USB disconnect, device number 25 [ 80.965621][ C1] usb 2-1: eth1: intr status -71 [ 80.973083][ T150] usb 2-1: device reset failed [ 81.582078][ T1602] kvm: kvm [1600]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000028) [ 81.857173][ T36] kauditd_printk_skb: 766 callbacks suppressed [ 81.857192][ T36] audit: type=1400 audit(1790522913.460:2462): avc: denied { read write } for pid=1618 comm="syz.1.316" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.919923][ T36] audit: type=1400 audit(1790522913.490:2463): avc: denied { ioctl } for pid=1600 comm="syz.5.312" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.968224][ T36] audit: type=1400 audit(1790522913.490:2464): avc: denied { read write open } for pid=1618 comm="syz.1.316" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.992944][ T36] audit: type=1400 audit(1790522913.490:2465): avc: denied { ioctl } for pid=1618 comm="syz.1.316" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.018512][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 82.028939][ T36] audit: type=1400 audit(1790522913.490:2466): avc: denied { ioctl } for pid=1618 comm="syz.1.316" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.053864][ T36] audit: type=1400 audit(1790522913.500:2467): avc: denied { ioctl } for pid=1618 comm="syz.1.316" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.080154][ T36] audit: type=1400 audit(1790522913.500:2468): avc: denied { ioctl } for pid=1618 comm="syz.1.316" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.106031][ T36] audit: type=1400 audit(1790522913.560:2469): avc: denied { ioctl } for pid=1600 comm="syz.5.312" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.130896][ T36] audit: type=1400 audit(1790522913.630:2470): avc: denied { ioctl } for pid=1618 comm="syz.1.316" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.157068][ T36] audit: type=1400 audit(1790522913.690:2471): avc: denied { ioctl } for pid=1600 comm="syz.5.312" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.185902][ T358] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 82.235913][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 82.243786][ T10] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 82.255891][ T10] usb 6-1: config 0 has no interface number 0 [ 82.270145][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 82.279349][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.294394][ T10] usb 6-1: Product: syz [ 82.298891][ T10] usb 6-1: Manufacturer: syz [ 82.303536][ T10] usb 6-1: SerialNumber: syz [ 82.311258][ T10] usb 6-1: config 0 descriptor?? [ 82.345877][ T358] usb 2-1: Using ep0 maxpacket: 32 [ 82.373162][ T358] usb 2-1: unable to get BOS descriptor or descriptor too short [ 82.385912][ T358] usb 2-1: config 1 has an invalid descriptor of length 79, skipping remainder of the config [ 82.415901][ T358] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.438652][ T358] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 82.448708][ T358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.463352][ T358] usb 2-1: Product: syz [ 82.468514][ T358] usb 2-1: Manufacturer: syz [ 82.473153][ T358] usb 2-1: SerialNumber: syz [ 82.709615][ T358] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 82.739328][ T358] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 82.762303][ T358] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 82.776782][ T358] usb 2-1: USB disconnect, device number 26 [ 82.892709][ T1468] udevd[1468]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.167496][ T1631] netlink: 'syz.4.319': attribute type 29 has an invalid length. [ 83.184226][ T1631] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.319'. [ 83.216526][ T1635] overlayfs: failed to clone upperpath [ 83.216814][ T1634] overlayfs: failed to clone upperpath [ 83.401860][ T1640] netlink: 'syz.1.322': attribute type 10 has an invalid length. [ 83.419382][ T1640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.322'. [ 83.435800][ T1640] veth1: entered promiscuous mode [ 84.458219][ T1667] ./dev/sda1: Can't lookup blockdev [ 84.474425][ T1666] ./dev/sda1: Can't lookup blockdev [ 84.481506][ T10] usb 6-1: USB disconnect, device number 7 [ 84.683822][ T311] smpboot: CPU 1 is now offline [ 85.146808][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 85.364980][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 85.414956][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 85.463362][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 85.495576][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.548335][ T10] usb 2-1: config 0 descriptor?? [ 85.587881][ T1679] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 85.905872][ T311] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 86.068342][ T311] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.095162][ T311] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 86.114729][ T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.133312][ T311] usb 6-1: Product: syz [ 86.144865][ T311] usb 6-1: Manufacturer: syz [ 86.157289][ T311] usb 6-1: SerialNumber: syz [ 86.174154][ T311] usb 6-1: config 0 descriptor?? [ 86.210159][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 86.227913][ T311] asix 6-1:0.0: probe with driver asix failed with error -22 [ 86.253250][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 86.319011][ T10] usb 2-1: USB disconnect, device number 27 [ 86.449816][ T311] usb 6-1: USB disconnect, device number 8 [ 86.870409][ T36] kauditd_printk_skb: 360 callbacks suppressed [ 86.870425][ T36] audit: type=1400 audit(1790522918.470:2832): avc: denied { create } for pid=1715 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.017698][ T36] audit: type=1400 audit(1790522918.510:2833): avc: denied { create } for pid=1715 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.147769][ T311] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 87.158418][ T36] audit: type=1400 audit(1790522918.510:2834): avc: denied { read write } for pid=1717 comm="syz.1.344" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.230264][ T36] audit: type=1400 audit(1790522918.510:2835): avc: denied { read write open } for pid=1717 comm="syz.1.344" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.283489][ T36] audit: type=1400 audit(1790522918.510:2836): avc: denied { ioctl } for pid=1717 comm="syz.1.344" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.355872][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 87.375876][ T924] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 87.385080][ T36] audit: type=1400 audit(1790522918.510:2837): avc: denied { ioctl } for pid=1717 comm="syz.1.344" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.536558][ T1718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.570891][ T36] audit: type=1400 audit(1790522918.510:2838): avc: denied { write } for pid=1715 comm="syz.3.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.616331][ T924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.645942][ T1735] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.655806][ T1737] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.664002][ T1737] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 87.685928][ T924] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.748373][ T924] usb 6-1: New USB device found, idVendor=045e, idProduct=004c, bcdDevice= 0.00 [ 87.767304][ T1718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.798066][ T924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.835905][ T924] usb 6-1: config 0 descriptor?? [ 87.864866][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.883056][ T311] usb 2-1: no configurations [ 87.909329][ T311] usb 2-1: can't read configurations, error -22 [ 88.015882][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 88.168588][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.182375][ T9] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.197178][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 88.205006][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 88.215758][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.235434][ T9] usb 5-1: config 0 descriptor?? [ 88.271188][ T924] hid-generic 0003:045E:004C.0006: unknown main item tag 0x0 [ 88.302033][ T924] hid-generic 0003:045E:004C.0006: unknown main item tag 0x0 [ 88.340184][ T924] hid-generic 0003:045E:004C.0006: unknown main item tag 0x0 [ 88.357584][ T924] hid-generic 0003:045E:004C.0006: unknown main item tag 0x0 [ 88.394228][ T924] hid-generic 0003:045E:004C.0006: unknown main item tag 0x0 [ 88.453595][ T924] hid-generic 0003:045E:004C.0006: unknown main item tag 0x0 [ 88.497363][ T924] hid-generic 0003:045E:004C.0006: unknown main item tag 0x0 [ 88.505149][ T924] hid-generic 0003:045E:004C.0006: unknown main item tag 0x0 [ 88.562533][ T924] hid-generic 0003:045E:004C.0006: unknown main item tag 0x0 [ 88.589152][ T924] hid-generic 0003:045E:004C.0006: unknown main item tag 0x0 [ 88.606291][ T924] hid-generic 0003:045E:004C.0006: unknown main item tag 0x0 [ 88.620744][ T924] hid-generic 0003:045E:004C.0006: unknown main item tag 0x0 [ 88.629946][ T924] hid-generic 0003:045E:004C.0006: unknown main item tag 0x0 [ 88.638443][ T924] hid-generic 0003:045E:004C.0006: unknown main item tag 0x0 [ 88.647221][ T924] hid-generic 0003:045E:004C.0006: unbalanced collection at end of report description [ 88.667022][ T9] playstation 0003:054C:09CC.0007: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.4-1/input0 [ 88.686666][ T924] hid-generic 0003:045E:004C.0006: probe with driver hid-generic failed with error -22 [ 88.719870][ T924] usb 6-1: USB disconnect, device number 9 [ 88.861055][ T9] playstation 0003:054C:09CC.0007: Invalid byte count transferred, expected 16 got 7 [ 88.873012][ T9] playstation 0003:054C:09CC.0007: Failed to retrieve DualShock4 pairing info: -22 [ 88.884431][ T9] playstation 0003:054C:09CC.0007: Failed to get MAC address from DualShock4 [ 88.896208][ T9] playstation 0003:054C:09CC.0007: Failed to create dualshock4. [ 88.911860][ T9] playstation 0003:054C:09CC.0007: probe with driver playstation failed with error -22 [ 89.516319][ T51] device offline error, dev sda, sector 1138998 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 89.527608][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2031 starting block 142374) [ 89.540600][ T51] Buffer I/O error on device sda1, logical block 142336 [ 89.549859][ T51] Buffer I/O error on device sda1, logical block 142337 [ 89.557979][ T51] Buffer I/O error on device sda1, logical block 142338 [ 89.565433][ T51] Buffer I/O error on device sda1, logical block 142339 [ 89.573307][ T51] Buffer I/O error on device sda1, logical block 142340 [ 89.581519][ T51] Buffer I/O error on device sda1, logical block 142341 [ 89.592454][ T51] Buffer I/O error on device sda1, logical block 142342 [ 89.599896][ T51] Buffer I/O error on device sda1, logical block 142343 [ 89.607190][ T51] device offline error, dev sda, sector 1163574 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 89.618293][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 145446) [ 89.633995][ T462] device offline error, dev sda, sector 1164078 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 89.648047][ T51] Buffer I/O error on device sda1, logical block 145408 [ 89.657556][ T51] device offline error, dev sda, sector 1179958 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 89.673316][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 147494) [ 89.687587][ T51] Buffer I/O error on device sda1, logical block 147456 [ 89.697487][ T51] device offline error, dev sda, sector 1180462 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 89.715882][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 147557) [ 89.731775][ T51] device offline error, dev sda, sector 1188102 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 89.744916][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 148512) [ 89.758144][ T51] device offline error, dev sda, sector 1196342 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 89.770677][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 149542) [ 89.783019][ T51] device offline error, dev sda, sector 1196846 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 89.793826][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 149605) [ 89.809999][ T51] device offline error, dev sda, sector 1204526 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 89.829470][ T51] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 150565) [ 89.887675][ T462] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 145509) [ 89.944437][ T462] device offline error, dev sda, sector 1171758 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 90.001094][ T462] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 146469) [ 90.062546][ T482] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2029, error -5) [ 90.142302][ T1767] Buffer I/O error on dev sda1, logical block 130, lost async page write [ 90.151891][ T74] Aborting journal on device sda1-8. [ 90.159310][ T74] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 90.186028][ T1767] Buffer I/O error on dev sda1, logical block 172, lost async page write [ 90.210660][ T74] JBD2: I/O error when updating journal superblock for sda1-8. [ 90.229347][ T1767] Buffer I/O error on dev sda1, logical block 173, lost async page write [ 90.248999][ T1773] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.3.357: Detected aborted journal [ 90.277680][ T1766] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz.1.355: Detected aborted journal [ 90.305978][ T1773] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 90.331143][ T1773] EXT4-fs (sda1): I/O error while writing superblock [ 90.378269][ T1773] EXT4-fs (sda1): Remounting filesystem read-only [ 90.388825][ T1766] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 90.436957][ T1776] ./dev/sda1: Can't lookup blockdev [ 90.446742][ T1766] EXT4-fs (sda1): I/O error while writing superblock [ 90.488790][ T1766] EXT4-fs (sda1): Remounting filesystem read-only [ 90.546484][ T1767] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 90.894861][ T311] usb 5-1: USB disconnect, device number 26 [ 91.145096][ T1792] incfs: mount failed -22 [ 91.475866][ T311] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 91.635886][ T311] usb 6-1: Using ep0 maxpacket: 16 [ 91.656556][ T311] usb 6-1: unable to get BOS descriptor or descriptor too short [ 91.683396][ T311] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64 [ 91.713914][ T311] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 91.755320][ T311] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.44 [ 91.784177][ T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.810902][ T311] usb 6-1: Product: syz [ 91.824689][ T311] usb 6-1: Manufacturer: syz [ 91.840236][ T311] usb 6-1: SerialNumber: syz [ 91.862109][ T1793] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 91.879857][ T36] kauditd_printk_skb: 498 callbacks suppressed [ 91.879873][ T36] audit: type=1400 audit(1790522923.480:3313): avc: denied { unmount } for pid=587 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 91.940460][ T1793] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 92.082805][ T36] audit: type=1400 audit(1790522923.530:3314): avc: denied { map } for pid=1815 comm="syz.3.368" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.203923][ T36] audit: type=1400 audit(1790522923.530:3315): avc: denied { read write } for pid=1815 comm="syz.3.368" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.356247][ T36] audit: type=1400 audit(1790522923.530:3316): avc: denied { map } for pid=1815 comm="syz.3.368" path="socket:[21654]" dev="sockfs" ino=21654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 92.455720][ T1840] audit: audit_backlog=65 > audit_backlog_limit=64 [ 92.473654][ T1832] audit: audit_backlog=65 > audit_backlog_limit=64 [ 92.505578][ T36] audit: type=1400 audit(1790522923.540:3317): avc: denied { ioctl } for pid=1789 comm="syz.5.364" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.553956][ T1837] audit: audit_backlog=65 > audit_backlog_limit=64 [ 92.574229][ T1832] audit: audit_lost=20 audit_rate_limit=0 audit_backlog_limit=64 [ 92.610458][ T1832] audit: backlog limit exceeded [ 92.884674][ T1858] syz.3.378(1858): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 92.906625][ T1859] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). SYZFAIL: SIGBUS pc-offset:0xfffffffffffe334d pc:0x7f96cca701e3 addr:0x7f96c8bffffc code=2 (errno 9: Bad file descriptor) [ 93.340616][ T483] bridge_slave_1: left allmulticast mode [ 93.356208][ T483] bridge_slave_1: left promiscuous mode [ 93.361900][ T483] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.377783][ T311] usb 6-1: MIDIStreaming interface descriptor not found [ 93.428665][ T483] bridge_slave_0: left allmulticast mode [ 93.434437][ T483] bridge_slave_0: left promiscuous mode [ 93.446009][ T311] usb 6-1: USB disconnect, device number 10 [ 93.484279][ T483] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.537861][ T692] udevd[692]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.621246][ T483] veth1_macvtap: left promiscuous mode [ 93.645966][ T483] veth0_vlan: left promiscuous mode [ 93.877891][ T483] bridge_slave_1: left allmulticast mode [ 93.883605][ T483] bridge_slave_1: left promiscuous mode [ 93.905455][ T483] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.913998][ T483] bridge_slave_0: left allmulticast mode [ 93.919976][ T483] bridge_slave_0: left promiscuous mode [ 93.925704][ T483] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.935044][ T483] bridge_slave_1: left allmulticast mode [ 93.940873][ T483] bridge_slave_1: left promiscuous mode [ 93.947697][ T483] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.957413][ T483] bridge_slave_0: left allmulticast mode [ 93.963659][ T483] bridge_slave_0: left promiscuous mode [ 93.970749][ T483] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.068646][ T483] tipc: Disabling bearer [ 94.074210][ T483] tipc: Left network mode [ 94.081489][ T483] veth1_macvtap: left promiscuous mode [ 94.087217][ T483] veth0_vlan: left promiscuous mode [ 94.093048][ T483] veth1_macvtap: left promiscuous mode [ 94.103288][ T483] veth0_vlan: left promiscuous mode