last executing test programs: 1m35.633685203s ago: executing program 2 (id=186): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000084c05c40500000000000109022d000100002020090400000203000200092100000101222800090581034000fd0fbe09050203000402067189351283066a05fc19d56116ba7d0ffc8263c5f8a30fc240709f518ecb3a900c77de9d6207c6e7bcf99359a6eae211c612c39201e1c2cd846abd79332d8207e99d0dbc20d592e5d7108d165d4d0d"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000240)={0x0, 0x10, 0x28, {0xffffffd2, 0x24, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m33.233024898s ago: executing program 2 (id=204): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000001080)={'bridge0\x00', @remote}) 1m33.219114679s ago: executing program 2 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1a6) (async) mount(&(0x7f00000003c0)=@filename='./dev/sda1\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='ext4\x00', 0x8410, 0x0) (async) r0 = open$dir(&(0x7f0000000480)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) (async) r1 = syz_create_resource$binfmt(&(0x7f00000002c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="3d0068650fe71c0f01ca0f01c92e2ef30f09660fc7b300302e2e640fc72f660f3a2231000f1a1566b98c0200000f32", 0x2f}], 0x1, 0x21, 0x0, 0x0) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000100)={0xbe, 0x0, 0x1}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) (async) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000780)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f00000007c0)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000800)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x8091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d03, 0x0, 0x5}]}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 1m32.145049538s ago: executing program 2 (id=213): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000020c0)='./tracing\x00', &(0x7f0000002100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0x0) r1 = landlock_create_ruleset(&(0x7f0000002180)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_pidfd_open(r0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000021c0)={0x0, 0x3}, 0x10, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002240)={'syzkaller1\x00', 0x5001}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000002280)={'syzkaller1\x00', 0x1}) write$tun(r4, &(0x7f00000022c0)={@void, @val={0x1, 0x3, 0x1c, 0x3, 0x14, 0x6}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x33, 0x1c, 0x67, 0x0, 0xfd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "414dc1c90728557d"}}, 0x26) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0xd) socket$netlink(0x10, 0x3, 0x1d) pidfd_send_signal(r2, 0x21, 0x0, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r6, &(0x7f0000000080)={0x2020}, 0x2071) 1m32.060834257s ago: executing program 2 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x400, @loopback, 0x5}, 0x1c) listen(r0, 0xb) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020500000a0000002cbd7040fcdbdf25030006000000000002004e22ac1e0201000000000000000002000100000000000000090c00000080030005000000000002004e22ac14140a0000000000000000b2f25fce17babc3d3b5f405e815a933027cdea74c0e3f3fb344e7e55b2f188dcb9f76d2615efb8a381fc8f90e1c7f954b2"], 0x50}, 0x1, 0x7}, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000540)={{}, {0x3}, 0x41, 0x0, 0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./proc\x00', &(0x7f0000000340)="f06b14c0755e49c3471460b21f4d26634563adf67ce26df65f5c966b7a3bd34f57d7ef7279c3a65d9a295ceecf9f784e5a7f0302ddb7714ec784df0efd95aa2cb3c157545e75d646396f9c3bd80d2bf7c321a2", 0x53, 0x0, &(0x7f00000003c0)={0x2, 0x101, {0x1, 0xc, 0x0, "", 0xf4, "ea701381b9c967ad9b9e3bc05cf25b923f3a18f2c6d82cb1172cbfd4cdfd3be917628d0bcb001cc34a49cf15c0159f428b219e0c1104452085855c3ab5bc078c5893d7d45d284b0473322a82dab8f104f813be9a458eacf997cb0100a2f42f47d85d31f472aecb9661acb1ee885b7d475e19a5050da848c85e15a959aa7aaea83e3b4b994124e0c135e66fd4daf3a25f147fe3ecadf23b393eeda597bfab3fead35b46a9c8ce7ef59d0c7b354686f469e3828d150d9329041d73fa7a5fd3c5f1a0622bba7ce49dcbc4d28523ce2259fb9d48a4f5c16e60c7fe855bd0f11d4497187b5b6a7be513b51ff8ce5d333ecd48e8c9560d"}, 0x63, "3cf4505840b70a41d91191aa91e9624805500743edb9c532cdedb692c406ec2daeb1925ae2da361c1593496ce1aebdfe14bc3a62f07a3b9a44f8a3e01afbca58a8a9165660bd0e32e9dd234268517a981c4acc8284dde517422592401cb52cc6fdb676"}, 0x170}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000680)) pipe2$watch_queue(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000800), &(0x7f0000000840)=0x4) r5 = openat$kvm(0x0, &(0x7f00000001c0), 0x141000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000200)={0xc000, 0x11000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000780)={0x3000, 0x1c000, 0x1}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r7 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) r8 = fcntl$dupfd(r2, 0x406, r2) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000080)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r8, &(0x7f00000000c0)=ANY=[], 0xfffffdcf) mount(&(0x7f0000000d80)=@filename='./dev/sda1\x00', &(0x7f0000000100)='./proc\x00', &(0x7f0000000e00)='bpf\x00', 0x8410, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x200) 1m31.93755427s ago: executing program 2 (id=216): syz_usb_connect$uac3(0x2, 0xcb, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x4151, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0x8, 0x90, 0x22, {0x8, 0xb, 0x0, 0x3, 0x1, 0x25, 0x30, 0xfe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa, 0x10}, [@multiply_unit={0x0, 0x24, 0xd, 0x6, 0x81, 0x6dfe, 0xb97}, @mixer_unit={0x0, 0x24, 0x5, 0x2, 0xb0, "7906"}, @feature_unit={0x0, 0x24, 0x7, 0x9, 0x5, [0x5]}, @cluster_info_segment={0x0, 0x20, 0x0, 0xaa, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x0, 0x24, 0x2, 0x1, 0x6, 0x2, 0x5, 0x7c, "98bc92", "2110"}, @as_header={0x0, 0x24, 0x1, 0xff, 0xf1, 0x4, 0x0, 0xb, 0x5, 0x0, 0x8}, @format_type_i_continuous={0x0, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0x5, "", '\x00\x00\x00'}, @format_type_i_ext={0x0, 0x24, 0x2, 0x1, 0x5, 0x1, 0xa, 0x6}, @format_type_i_ext={0x0, 0x24, 0x2, 0x1, 0x0, 0x6, 0x9, 0xff, 0x5}, @format_type_i_continuous={0x0, 0x24, 0x2, 0x1, 0x4, 0x4, 0xba, 0x7, '8', '>!R'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x19, 0x9, {0xa, 0x25, 0x25, 0x8, 0x40, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x87, 0x3, {0xa, 0x25, 0x25, 0x9, 0x0, 0x80}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x0, 0x0, [{0x0, &(0x7f0000000000)=@lang_id={0x0, 0x3, 0x444}}, {0x0, &(0x7f0000000040)=@lang_id={0x0, 0x3, 0x402}}]}) 1m31.93731753s ago: executing program 32 (id=216): syz_usb_connect$uac3(0x2, 0xcb, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x4151, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0x8, 0x90, 0x22, {0x8, 0xb, 0x0, 0x3, 0x1, 0x25, 0x30, 0xfe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa, 0x10}, [@multiply_unit={0x0, 0x24, 0xd, 0x6, 0x81, 0x6dfe, 0xb97}, @mixer_unit={0x0, 0x24, 0x5, 0x2, 0xb0, "7906"}, @feature_unit={0x0, 0x24, 0x7, 0x9, 0x5, [0x5]}, @cluster_info_segment={0x0, 0x20, 0x0, 0xaa, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x0, 0x24, 0x2, 0x1, 0x6, 0x2, 0x5, 0x7c, "98bc92", "2110"}, @as_header={0x0, 0x24, 0x1, 0xff, 0xf1, 0x4, 0x0, 0xb, 0x5, 0x0, 0x8}, @format_type_i_continuous={0x0, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0x5, "", '\x00\x00\x00'}, @format_type_i_ext={0x0, 0x24, 0x2, 0x1, 0x5, 0x1, 0xa, 0x6}, @format_type_i_ext={0x0, 0x24, 0x2, 0x1, 0x0, 0x6, 0x9, 0xff, 0x5}, @format_type_i_continuous={0x0, 0x24, 0x2, 0x1, 0x4, 0x4, 0xba, 0x7, '8', '>!R'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x19, 0x9, {0xa, 0x25, 0x25, 0x8, 0x40, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x87, 0x3, {0xa, 0x25, 0x25, 0x9, 0x0, 0x80}}}}}}}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x0, 0x0, [{0x0, &(0x7f0000000000)=@lang_id={0x0, 0x3, 0x444}}, {0x0, &(0x7f0000000040)=@lang_id={0x0, 0x3, 0x402}}]}) 34.541314183s ago: executing program 1 (id=596): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) mount$9p_unix(&(0x7f00000014c0)='./cgroup/file0\x00', &(0x7f0000001500)='./cgroup\x00', &(0x7f0000001540), 0x4000, &(0x7f00000015c0)) 34.433865745s ago: executing program 1 (id=597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x20842, 0x4) mount(&(0x7f00000002c0)=@filename='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='binder\x00', 0x8008, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0x9b0, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x4, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000100)=0x9000) ioctl$KVM_RUN(r5, 0xae80, 0x0) 34.365507241s ago: executing program 1 (id=598): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000000)={{0x1b5, 0x6, 0x3, 0x6}, [{0x5, 0x2, 0x10, 0x4}, {0x4, 0xff, 0x2, 0x1}, {0xfffffffffffffffd, 0x1, 0x8, 0x4}, {0x8, 0x3, 0x4, 0x1}, {0x60, 0x5, 0x1, 0xa}, {0x600000000, 0x9, 0x0, 0x4}, {0x3588, 0x10, 0x7, 0x1}, {0x0, 0x9, 0x6, 0x7}]}) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000100)={0x1, 0x4, 0xc000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) (async, rerun: 64) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async) r3 = fcntl$getown(r2, 0x9) getpriority(0x2, r3) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x101ff, 0x5, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f00000001c0)={0x9, 0xbc49}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r5 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000600)={{r0, &(0x7f0000000200)='\x00', 0x4000, &(0x7f0000000240)={@align=0xb, {0xd, 0x8, 0x8a7, 0x1514000000000}}, 0xd, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x3}, 0x3, &(0x7f0000000580)=[{0x2, 0x9e, &(0x7f0000000300)='\'/}U^\\%%\x00', &(0x7f0000000340)="34d511dce27c7e68c22cdcd72e65ad1e10cf27edb14b0bca5464615c8d73fcddfb0d6911153b1e3e670d4bfff4b350826ca57373ac626ba3c1842a9b424ac1305b8204a98c02cfc0d4b4d6c9e6fcf95d77f97a3804cfb8d2daed195db3fc235835f23f0d91ba0eb3bc5c21fba11baee066c686df9eadb8479d2206831f2d16abb90b8209f5ad7765c8a18edb22e8c87c084ef6e18f2d36d88a0b594d4c8b0a243bb1c262594835b78efbcc0da24bb8db83f3bfc40954241bb37096958deb30cb", 0xc0, 0x8}, {0x2, 0x0, &(0x7f0000000400)='\x00', &(0x7f0000000440)="454b01df71079844a5232d3ca301d82b812b9c0025ee8fe2d2aa0a3ed62b6d332d51d3481c7a2b31b5a320cbe8332bcb1a2633c4f565f1c15fdf85165d3281cef3c2b5a9132e474abebdfbe6dc8b37bee4099dd360af06692f135b3f7e75f39d93d91ecdf6871f588e94e078c8df3feb5978b3ff4bb16ba52e8110b3c733929b67ac85a2f25e461b405925a0727c800992529f7a58c88c06abf36b480824897c7afb1cf24d0c15677038ff58bfde156dcc0b38", 0xb3, 0xa}, {0x2, 0xf, &(0x7f0000000500)='\x00', &(0x7f0000000540)="a99ad28665204cc7e0e158927a0929c93809331c66e359", 0x17, 0x12}]}) fremovexattr(r6, &(0x7f0000000680)=@random={'osx.', '\x00'}) ptrace$ARCH_GET_GS(0x1e, r3, &(0x7f00000006c0), 0x1004) (async, rerun: 64) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r2) (rerun: 64) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x90, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xddd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40040}, 0x24000010) (async, rerun: 64) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000008c0)=0x5, 0x4) (async, rerun: 64) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, 0x3, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x17}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24008814) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000e80)={'syztnl1\x00', &(0x7f0000000e00)={'syztnl2\x00', 0x0, 0x29, 0x8, 0xe, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7858, 0xcc, 0x5}}) sendmmsg$inet6(r0, &(0x7f00000045c0)=[{{&(0x7f0000000a40)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000a80)="122bcf4f21f08a153a8deefda443ae5cead30ddc812ad9ee87a6ac15ebca5e4a8519470db38cc262c2467bd8e2fcb26ce1f074fcc003d1f3a2f378966b88fc401751351941fd92ec5a53aafdda7c288e52785efa41dca6d93df12540940bbd05b9adf33efc83e95d63a55057c907ad89ef04e2802e58a95f5baa1d0834774dbcae3f237b", 0x84}, {&(0x7f0000000b40)="5610a0ba488a42a6af620ff616", 0xd}, {&(0x7f0000000b80)="b645bc207b9a52621648d2b51db3e066151afa925f00d1d0bd1ae030fc0587865574a84f6ce45b10a138f5f290e9ad2c0943ba4e9df172e41745ab46ffd9ce27a616e45cf0215cfc686ba4569aac33e20eb2534af5a80635d78697bdc10911e589", 0x61}, {&(0x7f0000000c00)="592ca026a40e7dd6f16455fba4c0da8b73a24e738685177cd40d104e600cf01e2277e425a426ab96c6f9e704de8ed4c79580ee1f7161b3be0b186eff6f7902c495846b0e", 0x44}, {&(0x7f0000000c80)="140b3ffc946f55993cff52c053dc51a9783fc6caff61f74f59194a8661926d1a9e4955ba70aef27abe22a957717ebe318107388005447ec4d54dbe847df8cf6ab4328aee68027045900312164883b16e5b809ae6d4576ebbdbbc185008186269e58ab41349d6618a3439eb93f6a8984ecfe047332e9e99678a276bd148f5106502501739f545eaecf470bbb019ec3a6ee92ab2db0fb41af1710bde80872c2d7ab148e686ea1a8e894b92ec534b8a3afcfbee4d5d2e63b7c08f27aa09836a4e2f0a6464edf70a357e", 0xc8}], 0x5, &(0x7f0000000ec0)=[@dstopts={{0x20, 0x29, 0x37, {0x1, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x0, 0x5, 0x0, [@empty]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r8}}}, @dstopts={{0xd8, 0x29, 0x37, {0x2c, 0x17, '\x00', [@generic={0xf0, 0xaa, "18b8b53940de5a91c16427665aed86c887cbc945a899af568c8dcc6430909244e9be542e185b38faf2e630a8c09850f007f528e8086cc82b5dea6024c0322055d43afb4e8530ea3c249110dd473c2fd6ae05e6e54e69945cf019afceb372495d492090f97bc69d4a7f2b0febeb436cb385ea0234826608532a976b270eb1bac2aaf5e01d5614ebfac82c18ca3d16166abf75f3a952807e3bd35dc497a1fc2aa062521bc2fddff33772ef"}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0xa1}]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x58, 0x14, 0x0, 0x4, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @loopback, @mcast2, @mcast1, @private2]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1000}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x260}}, {{&(0x7f0000001140)={0xa, 0x4e24, 0x42, @empty, 0x3}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000001180)="25701f10c30896810b073e308c1d3686dd8446f817a0db3091524b569d935322ae4524261e9eb90be7f079dbf702e22bd161e2fc520bb0e8708b614270d7034dcf4249e0302d59a7f6a6b24e6ea1773d54494637c3ccab34b5d461a5834266ac10129eb457a4a0b5516246f4dcba7a37c2aa21c605b3eb2f8afd2545672e2241d6537a8d8cca337206755ae6f8026e1016c99c89bde1846f1490f430f12bf6bb810a76aa031371fc5a5ddcf51a1a", 0xae}, {&(0x7f0000001240)="00de7fc5259540d7fd1805ab2f312edbad62ff31540633c402487c6911e5b6ba0888dd71a8e1f86e18510145f3c802e8569e46b77db0cb028ffa1ee738c66d4f7ee88bd05d809130977dc3aec05e200d26c12f32ff09f3d180efc80afb6e09", 0x5f}, {&(0x7f00000012c0)="011bb9f1727d971696916104bd225bb11927c2b994e6cb932ab12f55b74915a011ade72584d42c99138b4e8e6ff83592738f96f56f3c9fa4bc7a6ac9e97e7703e13120354ed0deae1f1699ff619d790a795719a0e53004599290bf66f7bcee5adbe32e53a59b37b1b08938ab94e6905e931062fd0bbf8478ebe3b2ad4e51c23ebdfa3f501d753bf7c1ef4c2c057b3dd84e437f8c795032e6081cecf322d44b488cc16ed2e6f003b05c7356ee29d3f7a2daa96587e85c9afaf7f9e2a220bb702ff7b585810bc9da9c13e4f9", 0xcb}], 0x3, &(0x7f0000001400)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xa}}, @rthdr={{0x78, 0x29, 0x39, {0x2e, 0xc, 0x2, 0x9, 0x0, [@private1, @dev={0xfe, 0x80, '\x00', 0x3a}, @empty, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1]}}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000014c0)="f9beb094269638bfecd9a13977013e9ab02b0b89d840e3a6c7ec9622666676275f60712ceca8f2ae6ecff9f5e3c16b6d26", 0x31}], 0x1, &(0x7f0000001540)=[@hopopts={{0x88, 0x29, 0x36, {0x2b, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x7fff}, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x7, 0x8, [0x5, 0x7, 0x0, 0x2]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0xb, 0x6, [0x0, 0x5, 0x18]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x31}}, @ra={0x5, 0x2, 0x8000}]}}}, @tclass={{0x14, 0x29, 0x43, 0xc}}, @tclass={{0x14, 0x29, 0x43, 0x1000000}}, @hopopts_2292={{0x1c0, 0x29, 0x36, {0x3e, 0x34, '\x00', [@generic={0x64, 0xe6, "81df62261c24797436fdbbc1e8f8888124c09515530ac495465679ef8d61278fe32aad25c27cf9c87f3dd962a3dee6166bd92bb2f2ef93083bd5bc1b59de50b3b9ce4e27f987f21ed9b0eb809230129b5e71424d9fe7b4c63872973f19b85bf2f23bbcf5079d9881a9d08fbd9371c97b91404e9f3d95aedf5ab7bc06723f9f6677b89281ca8d3448f674d1068dd981acdcdd55b156273c4a259ea47fdc391fd86ba5a09d410a423898fd99e5d3c730fdcba60d277a9b2c2addf2c2609f220e682f299ef741db5db3873c1c479430870d3bde41538cd07ef4937cd49020a1b7247247a0ff62c8"}, @generic={0x4, 0xbb, "d5e446a7436828b17a54f2904ee3ce8406bf5bfae781c6c28274403288cd0a8ba055955f6dc215d36a753bb3f3f8fa11066ec379e5b0e2415986016e9499f97b07b15975ec469918e55145100cfe47358acee9c6c74d81a01bc38aab167f22a2423beaadb1c831c91a43634dd06571029dfaed3871563bfb6b918183467b895218a854aeed067d6dc5a72b57f80371494b00ad8d29672ed345f205d6507b5a7e27e168096f80eb993a05e4022300ce5526ef7684189787aa14d8d1"}]}}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x11, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x3739}, @generic={0x7, 0x32, "1d3586db0d581786e471ce6f1c034bf0950c1e6311a2528fbf02f7bf1d9c58f1c65e6c7b2a1b7d59679b3261f7c633ad84ed"}, @enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x8}]}}}, @dstopts={{0x130, 0x29, 0x37, {0x2c, 0x22, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x2, 0x10, "de23df4be257ca974ddf48176dc3a948"}, @hao={0xc9, 0x10, @empty}, @generic={0x7, 0xde, "37c9321d1ac445b03d606b59d405e153de3b0f50efb84852a414b8b428bdca10d7e455428e796108924e6a8a1e1eaece87a946bf01d7d7fd3609eb79a78c7f5c12c8fa678d2669315ba7502f616c86b9db591d664e2eda936bd539cfda9b37589679728c58de95eea392fe68c14de8c765376f5eda114308fcef1dc8a8ce940c62ebd9e5eebf9ca19674b1753cef93b3d15aca35ba6710d48c56b16ed693bcdd715f9952ac081724964cdc796bf97aaea31c86a8c550ba21d943d55139636bd44bc6f86177470a056129c72febd907aec6e4e737f19527cb6a68a31628cb"}]}}}, @rthdrdstopts={{0x1a0, 0x29, 0x37, {0x2c, 0x30, '\x00', [@generic={0x2, 0xdd, "0773559d9bbd7a93448d8cb3b300ed997c3ddeeedeaadf95bd028442bf695d9203fda79a07e9448610ab13297fc2672bb4ceed6219a1bd83912240165c30b50d49872b8c26ab4ecb7e426d5903a355d84d98045eb1c903ccc16f6b71f6b2119dd31d78c6f52bad4cac9e33687890321f182834d43b7b74e0f1f9455ab50e1774ba884cff8a6093b5efa5affb5fa630f855fabf3e0361a301e05d58bf924e08c51d57bb9a8ad0b1801146b89f12dfbfb222c918fae1a5a0bc3b90b88b2e0b7e92d6e0023cc90b999e37af2b17f2eb72cbf0f01111354e305e7a360c9085"}, @hao={0xc9, 0x10, @local}, @padn={0x1, 0x1, [0x0]}, @generic={0x7, 0x2e, "8920eb450de925824f0c24e34dbff58f091b0c3c39d8bf1974bb9419b940d92b468f39ed237adb795f641bfc0839"}, @calipso={0x7, 0x40, {0x3, 0xe, 0x37, 0x4, [0x5, 0x1, 0xffffffffffff2720, 0x1, 0x6, 0x100000000, 0x2]}}, @hao={0xc9, 0x10, @private1}, @ra={0x5, 0x2, 0xfffb}, @jumbo={0xc2, 0x4, 0x3}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x5c8}}, {{&(0x7f0000001b40)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000001e00)=[{&(0x7f0000001b80)="e90624fa7c130f4bcc64983a4cea6e6dc23f32849924e3e0a2222f51ae414ac9304f1704c846e84921a4d8b75b8ec97dc8af519cb3cd6384373fa77b771346630f211fa983f453fe0cefeb1523246068da592d0d3899b63b97f27dcd9dcfa9f1543418d8b87748a5ad0b6fbd3f0980a20ea17f3f95333be87e21ceca2ab660f78226141503dd7fad83795c9fdda862eda7ae53d6522df3b30cece1426a2586c99de6d5f30e083782b0fef56ae3c13624379b47cc843629d56062d7ad2fe00309ed4244f95464f5ce4aa292e3e31f444e9eabceff310d6518cdd5363a4a3223638f325f", 0xe3}, {&(0x7f0000001c80)}, {&(0x7f0000001cc0)="3fd66710194d927e775d4e8a56f755b349af997a398457377364a7a0039ad4ae5874231bcf342f0f9ed5125d96b5cdce5d87d951a91a247b0cc75d11bfcf32ab21659caab1e59fa17ee71b627910ec15e31444285140da1b9bccca62a9f811d0e4dddae3efa379822849537dbf70c8dffde93070d93278dd94e27a0dc3f949f187982cc8fc75daeaa92ed817bbd9eba68d68c77dd15788682bf83ada1f03ed698f67866a3d961fa9a5f02d0fe4831f6abe0a142b0cb3e1807d8e56121b398d52449b0d5a5d11f9958dd7e705435668", 0xcf}, {&(0x7f0000001dc0)="02fa69072fd5e224181c94ce5ce48eebf79975eded2e6f92501e38b1b5c3d9acadf020591d0eb8208a944bc7a5f1f81bc67437559d", 0x35}], 0x4, &(0x7f0000001e40)=[@hopopts_2292={{0xe8, 0x29, 0x36, {0x11, 0x19, '\x00', [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x3c}, @calipso={0x7, 0x50, {0x1, 0x12, 0x2, 0x9, [0xd5f, 0x1, 0x9, 0x2, 0x8, 0x4, 0x3, 0x0, 0x1]}}, @generic={0xc, 0x5f, "22f6b0401ba1c87af2d141d9e1d62d4bacd38d7fa622c5668c0a3c2d7838351bdf47f5b70f197b9ef1a49c6c21d9466e12c5a52901adf71eff05fa907f44c456464f2038b9c8ab073da43b2c100adf99b1a0a541c84e732263e28f0e56d42e"}, @pad1]}}}, @dstopts={{0x68, 0x29, 0x37, {0x21, 0xa, '\x00', [@generic={0xe6, 0x4e, "652dae658f5f4ee9047350e8740b7b0c15d15421b94c587d4d7eb25915aef96c70144384952e9de6352e20798956520e00cb618e72b888fed391d33a86ebfa01f28414fca0cc2dc224524be9e47f"}]}}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x1d, 0x1d, '\x00', [@generic={0x66, 0xc7, "e51d07236d65ae5660ee634f54494414f562020ff45400c5a86c3aca06bf6459eb7870d9f602d4f8cb0a52ef8fe437e215581e5fa4b5602e4be647c396c7e37a2d24a5c342cc14c680994d04f2fc7fdbe22c54b9805c1b5ad99ab45189df3603c2027e6d2a3b6d2350bdd1bd83f853b26723101c10702eec1adda5c46d1597206abc05832a54004e751f0aeaeece3d2a22cd8a1ccc32922bc28df78744076b0351231d28998ae913485818fbda3551de390f5c867c4b383a9091dc18664563047441ca8efbd84f"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x2, 0x2, [0x9, 0x8, 0x3]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x270}}, {{&(0x7f00000020c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x200}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000002100)="38204330b39d17fc65f555b05842a517631a3a9a103f74a26122ad828ca43f1ca5b7a087003e3e150299f40a34cf3676274e4a0b104aeee3e659f57f67110b094213a259763753bfbf3d573ea67cca", 0x4f}, {&(0x7f0000002180)="eb097704b853370ff2ee9c542e37b25e68574192803b7b13c2b415277137389fd73c9ca7d48f3372783d6f85e908cb8444f83324900c4861865ecdfe1c26412856f637369aa2caaac9f05082593dcf583ac52da2244f61bb613c99c68a2f857f69315f6aedfbf7073abd53a57c5032cb10d6a06eac95833c2e097696397c8b71f6e7c5d275f2ea5adf647793f75c41cba7c7676e300a986e", 0x98}], 0x2, &(0x7f0000002280)=[@hopopts={{0xe0, 0x29, 0x36, {0x21, 0x18, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x3, 0x12, [0xb5f9]}}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x20, {0x0, 0x6, 0x3, 0x1, [0x6, 0x2, 0x100]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0xa, 0x1, [0x5, 0xe4ac, 0x7, 0x4, 0x5, 0xd, 0xc]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x4, 0x7d, 0x0, 0x2]}}, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x2}, @pad1]}}}, @hopopts_2292={{0xd8, 0x29, 0x36, {0x2c, 0x17, '\x00', [@ra={0x5, 0x2, 0x81}, @enc_lim={0x4, 0x1, 0xe7}, @jumbo, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x51}, @generic={0xb, 0x3f, "42b233cb9788f1ab7be1d5940fa015b8e4fb30aa25231ecec32f0c6fda335cbb8c64a3ab927d2d1baf1c049c0e776b727dca6237938a5eb9e40c9f42bb64cf"}, @calipso={0x7, 0x40, {0x3, 0xe, 0x8, 0x12, [0x1, 0x3, 0x3, 0x5, 0x2, 0x100, 0x7]}}]}}}], 0x1b8}}, {{&(0x7f0000002440)={0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x950}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000002480)="51248e3a7ee80c79d262abeff51c9da6210dfaab7fa799709c16f8721affb86be18f23b94d4e0112bb64c5109a0bf8e9ed2d292bf60b423fe2bbc74992aaadc56b7d737b91e4ed5fa186ed8578e59bd79fe451117ec14e1ecf48543bd41850f6d80b6d4d5680edcf89e6f112dc5986dcb7cc9fedaf08a4f8d4c24d2e869d10b050f1d8b048a1b2186f37da4adea8357e8ae8f57c5993f1d130bf3befbdf8252b2dda18fc974c0e86f198057ea52fd16fdf87c5556e8f847a4bd73fa1fd", 0xbd}, {&(0x7f0000002540)="707cffd69a6064ded58b900a79e6f53d661b7a69840733de87c309354e2ba7e54667f8d8ae32cc2809244d4d196dce05435d4d9a9024fd407999b232796fc6148728d2dd3b9dfde5db97ed8d49d4d3269ddd702175320c730b5505d8743111e2d35ffd32375bb586a9dc1d7f200baaba68da2a9e53823f91ef2d7ef6283a36e0d635ecb0fa9d07c7eefd60a48e0d56baf08bc2c276cc43ada96fce87967bc78c2c93c371aab11f4f15a96e49bf70c368f2430eaf3e1e4c6dae408b7da3b43babc3ce2050b9b897a000dffdba34cf3eaac434", 0xd2}, {&(0x7f0000002640)="a38be6cee5bcd049611ae21c3efe5f89e5e3feaa57d19e298c5ff95fdb5a5b4dbf02664390fb", 0x26}, {&(0x7f0000002680)="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", 0xfd}, {&(0x7f0000002780)="833705cc29b1dc3a8e8c4c34a3d7791ddab563e235a2de6a3ba8fdcd465e1cf3606a9042aab64c0593a530c8c07ff125f3a188580693dc1d854362f3abddbde6defc2e8fc02d60965127003cfe35ef9d53ae8d5e242a9603170f173b7f66756487174386c266abdf26d3221c96ac550131a9aed9a33eb821c312", 0x7a}, {&(0x7f0000002800)="b552079753fc11", 0x7}, {&(0x7f0000002840)="63cbd4cbbd23cc1231cf41982d94073a9d7b141859c172225b2d29cae9d9d98b6663bcb23590572f065368854fa03b73b6f6516b152dd3f5", 0x38}], 0x7}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002900)="9ecdcacc99848e3d94f332457e22b44fde3ed11f3550697961bf7c745ec59df4b463c3e778bb6db79dbb9c8635eafa27f5dbc1ac9c3b4301b07d71654c8adffa2f4027195bb548521679e2757a147c67cf28a83cccd8b1478cb5c89d848433ee5a760a3c88fa877b2e5b9e259e27f6d059d7eb628bed", 0x76}, {&(0x7f0000002980)="0b0710df86b88f78bf1c309b3392d56a1de03dd888eb0dec62fc95b8fc5d9432ed3397f67f34ea6d6a3d9727efba63168f03f011b13114e1e1d81449c36586216ca19533e922d0f2cbc57ccda9b3c867215b0e17922476686fcc03545b7ceeb0e2376810543313a4fedd77f281e85127c922b4159634542189fcee48e5a59c4b7299b3a340008e20fe7cda24d23c8d84024b2f0a389ef1196a753aa14b29f007932e123ff538548a79bc78ad2f03fe9203619270fdb30573957e0cea85169fe568647a05fb2ca5aa3bf1d101fbffe835d2670c8c8ccef83e51fd8e28783e91ca", 0xe0}, {&(0x7f0000002a80)="8c77707ba8ff307ab01dff3ae329dea1897e9b8fea53f16604b18aed5dc304c75d4e518ee45d04581ef6224fef18c5ce7f2f04d9677c71622f2ed9494fed54e50a0139c7487bef49c95cd4d7b10ca2967a2b211355a9133b656d4dd65777f99333bb677d19758708dd0a4256ab140d29ed397dfeee780f286f798771ae451d899ed7bf850cba96cd3f53906c8b0490c4c6347fca17bb0df5b372e75eb5aee0653bd7fce034475d1f0ade91fa9d7d1b488c477fb8b0e41005c82b878e941b564840f8d6d755e53e40f8c4173c22d7d4c63fd4fc73f2068dd5d26f", 0xda}, {&(0x7f0000002b80)="bf2d2b7c49d73e6cd65231427bdd45a639d1e9c9a636a05ca08d5ce72fcef49e4cc8b1a4e7026dc6091d9612b6b5d384fc389dfd41c74eb9791e66cb1a9660f95f9d3d66267350f2ae3a6921716828a8f94a3ab25876466aa60a", 0x5a}, {&(0x7f0000002c00)="f8d3cd617e12595e2a33198f96cd177880efc33163cffa876908f0f0b7bb217ba3608c7aa9261aad1a7c8a60e69b36ede87b32f69d97bb298cc15505d713f576142262b325ecb0a5c8f5bd0aa8aa5b024ef18e8f83f5128ae5ace8094f4fc99de7c3", 0x62}], 0x5, &(0x7f0000002d00)=[@flowinfo={{0x14, 0x29, 0xb, 0xa}}], 0x18}}, {{&(0x7f0000002d40)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, &(0x7f0000004080)=[{&(0x7f0000002d80)="efb0ef2a6eda656f3f4622e8929c75b3c71e5940e51b73e8a072d07d8056bbc0c9ee7d7442c2b09ef8c868c59a16e71729b73fec752aca35579ed87bb12e23bc53f7e97bd2e942d81cd73b43bfe13ba7bd66b30f7792369552c776f2cc95cf1828635af20e3a192ce6e570ba24ef38114e910c745035defe20815c780b9b934a2da6346d0b9e27566885171dbf4556094ae2e10cf0476a021108216b68d821b587896a1b33a4b53d05cf7bc6eb4cc0da453f37bdfbe60cb8711f595df60a18c6033b2882a41bb47f30722f6dd8d8354b9ddfe3758ef74b522d27d75219ab9d7499d0fb5515b2650e74974890b8a231442d76e64d", 0xf4}, {&(0x7f0000002e80)="ea0653491539b124c610c773690088aead06ea939dd05735eda334cd79c9459aea7bf9dcef28e52de13eccaf1d06199b3dff5c80c530f23e197678cfe2b01abe91d3402687cf79a8e1b5a6d38779bca982e53caedd44dcb6b2516f4e31bbcbbf192e01157c3c84f978ca943b7a4e4c8faa8858554bc53b37f473e890866e57", 0x7f}, {&(0x7f0000002f00)="bc38a1fca0cd7db78763f63ef66c7e5ac10eb85f3b6a87e8796ee511f2a1941c71a2ae2f76fa2a8e471a7e09310eb8bb8b268837826f81afe627a88159170630b30ae5e85cb5e9823f89716f535c53221729faf05902eb9364b93adb0245e798bf09fc855058240ecf42b36f156154431edf9274944efd01137a2170c3cde198d47de4c6a58bad7624137e09fc39413f0b2b5c0bb0c54729", 0x98}, {&(0x7f0000002fc0)="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", 0x1000}, {&(0x7f0000003fc0)="3fb0f4801fd28334c1d66262be1539d7812999db1fa5", 0x16}, {&(0x7f0000004000)="012970393c8a843a634af1226e4a151a7e9c9e2206293b12e3fcd2de6c3314014af80f7e652af3d46d9a267cb2c2439f72902aa752326afe4f8406cd3c46a60b2d416e1d05be1400530717bc1849c8099d0c799d3f836f6311d9468de3eda7", 0x5f}], 0x6, &(0x7f0000004100)=[@flowinfo={{0x14}}], 0x18}}, {{&(0x7f0000004140)={0xa, 0x4e22, 0x10000, @mcast1, 0x7ff}, 0x1c, &(0x7f00000044c0)=[{&(0x7f0000004180)="140b6354271c32ee32497ee31df2b4e9da83fa09386547232d593e94b3ac0c293d8e9a7227ef85d3517912f53642c46004c7fd77b9823281a201f389b1e08debdea25628dc1e3078a4aa37a17da03a235763ea90683a96f6f9923e57d172b7d994fe8eb80a5568b4ef3ef7e7caeb7384beeddfd6fe5095f6086696894a0d20460726314120dfb43f250d0159c5a1c994fd2ffddba6eb86c72c4d9f8aabc333ffbbd643de0f623f0f40c77e236752307e1d6e1aff3d1915496e6bf920780de19a8a", 0xc1}, {&(0x7f0000004280)="c5ed037f76e5c9f9e1758b37c5a760a7841e4daa58147f432923009f25a7feaf9444e3f7673bc92324162e4a4e544011123b99c166f85158e709dce8d5aa9d6b42bcefb69898058c472adce0637caed76420c1698323020166e87c58a3ffe12f84a16e4804", 0x65}, {&(0x7f0000004300)="f04b", 0x2}, {&(0x7f0000004340)="98b5bc68180b987bd751d7883521024c636c008e36fb75439bb1e946ce88c629f2acb0cba56a5d42a98f309e0fc1af8d2b6a88f33aa9a97eb52616b2883f2eb9f8060348cca4c2b3b324df580ad3d34e7886f04126114e489d865534786a1c9db69f7d6fe06cddfec7e8f120", 0x6c}, {&(0x7f00000043c0)="f87a2770d811f341c6a68c9e7968cde865db3f4dfa89d5886a4a179209c834162b33aecaf4bd39e8cda32dcf83dbccf7d46155f1fea10da88df245cb2352aec8c249e2c3f17640bbf46d2ffde0c74606c860bae2ab67224f2b7c3d141b349594744229adac38b84b83aa98c4e911b02f1b3fa8edef488a2bfc3fa432cdb547e19e787d01de7cdcd9b24b2da00edf85bbdb1362f309cb2f5236acce798e640da4fc202e95a7bf73350072ff3a8a87e57e5bfa3996c24f3e89894d858221e28f9cd28c46d4ccfd949da7c08dad2352f89c328735a3ee3b5ed703bc49dac3beb27cbc546a2df2cda0f63cc5a85b221d6bd79a4c", 0xf2}], 0x5, &(0x7f0000004540)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x6c}}}, @hopopts={{0x38, 0x29, 0x36, {0x3a, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @generic={0x1, 0x11, "9155e30b90ab6f08edd405fd5e11304162"}]}}}], 0x50}}], 0x9, 0x24008040) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000004800)=0x12e7) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004880), r1) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000049c0)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0xb0001}, 0xc, &(0x7f0000004980)={&(0x7f00000048c0)={0xc0, r9, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5fd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40044000}, 0x2403c801) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000004a00)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000004b00)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000004b40)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@loopback, 0x4e23, 0xe, 0x4e21, 0x7, 0xa, 0x20, 0x0, 0x0, 0x0, r10}, {0x1, 0x9, 0x3, 0x4, 0x10, 0x9, 0xc5, 0xa0}, {0x9, 0xb3, 0x6, 0x6}, 0x8, 0x0, 0x1, 0x1, 0x1, 0x3}, {{@in=@empty, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010100, 0x3504, 0x2, 0x3, 0x2, 0x0, 0x1, 0x7ff}}, 0xe8) (async, rerun: 64) mprotect(&(0x7f0000d6e000/0x4000)=nil, 0x4000, 0x2000000) (async, rerun: 64) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000004c80), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000004d40)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004d00)={&(0x7f0000004cc0)={0x28, r11, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xa080}, 0x4000000) 34.344767474s ago: executing program 1 (id=599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) (async) mount$cgroup(0x0, 0x0, 0x0, 0x60812, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r1 = socket(0xa, 0x3, 0x3a) (async) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000004c0)={{0x5, 0x6f1}, 0x100, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000380)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_udp_int(r2, 0x88, 0x1, &(0x7f00000003c0), 0x4) (async) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000001900)={{0xa, 0x4e24, 0xfa, @empty}, {0xa, 0x4e20, 0x1, @private2, 0x8}, 0x1, {[0x9, 0x3, 0x2, 0x5, 0x0, 0x1, 0x8, 0x4]}}, 0x5c) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x224, 0x11, 0x100, 0x70bd2c, 0x0, {0x6}, [@nested={0x210, 0x7d, 0x0, 0x1, [@generic="560d10c1d4815d0d7b9bb1c51d95b60d2388574b8c6edc423e822e8930577617ecea2d23b271f3a5148b776cd0d62b751f2a1fccb3672f07659116fbbf1f", @generic="489a06190b1fae1c930b7f90ee9daf49e0b54443b5688897187ceaa6a32b0916e6961dedef1d89738b95d9600fe704b5ed2dd024cb73507bf3474a327c2f6b5c31bbf957325db5513f03fb48a04727252cdb4966760c258d98fb68bef23c0bb7e7dbeb111024df7431d49f8697b5985396dce568e918d196a2baedac514ac76dc4fc79b8cb4e79c4e6303eaf9cf779ccf9ecd934a23a3d43d559e61f7e198b083c5410db1d89e567b99487563c9b77591ce270fc3a43b0a4b42ab20a1d5a458393", @nested={0x4, 0x16}, @nested={0x4, 0x6c}, @typed={0xc, 0x10f, 0x0, 0x0, @u64}, @typed={0x8, 0x14a, 0x0, 0x0, @ipv4=@broadcast}, @generic="11339e96a3fce2423291d12c40f951d01e199c93ab781c790a58bf18120956f719e99dbd2ef89ea531b2917e2da91cc167cb0374f9443fdf7b7f39650b343827d5141838928fc6417deddde22ce5d6ef6eea2e3944dcb932b1b7c9d50ec3bd510734349fc0bfe1b1202ecaba7e64ffcfd51acfa328956f13fd588f23219919733c2bb64e760d0a1ad7918edeb57cf9f54814fd559d2352048a", @typed={0x8, 0x13f, 0x0, 0x0, @u32=0x7}, @generic="3e3648e77090b0943f70ef5749581e14df83652dcac65e3c0d381962d965b955dfc895774e8a45fb12af46d218404c45057cab59a0e1ae37c85c33f0aa7683e9aa3a6c2179b3edc580b4cfc9a799fb42"]}]}, 0x224}, 0x1, 0x0, 0x0, 0xc041}, 0x4004000) (async) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) (async) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000340)) (async) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000840)={0x0, &(0x7f0000000880)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x81, 0x401, 0x9}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) 34.253507413s ago: executing program 1 (id=602): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000640), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="05000000900f0000000000000000e4ff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x80}}, 0x4044) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) sendto(r1, &(0x7f0000000080)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000001010108000100e1010203", 0x34, 0x10, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000840)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@appraise_type}, {@appraise_type}, {@fowner_gt}, {@permit_directio}, {@pcr={'pcr', 0x3d, 0x26}}, {@euid_eq}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@pcr={'pcr', 0x3d, 0x14}}, {@appraise}, {@func={'func', 0x3d, 'PATH_CHECK'}}], 0x2f}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80, 0x182) accept4$unix(r1, &(0x7f0000000400)=@abs, &(0x7f0000000600)=0x6e, 0x80000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000740)={'gre0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x1, 0x3b4f, {{0x12, 0x4, 0x3, 0x18, 0x48, 0x68, 0x0, 0x6, 0x2f, 0x0, @loopback, @private=0xa010100, {[@ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x7a, [@empty, @loopback, @private=0xa010102, @private=0xa010101, @private=0xa010101, @multicast1]}, @cipso={0x86, 0x14, 0x3, [{0xa5201a73561f3f5d, 0x7, "67e0cba787"}, {0x2, 0x4, "06e3"}, {0x6, 0x3, 'D'}]}]}}}}}) r4 = creat(&(0x7f0000000340)='./file0\x00', 0x62) fsopen(&(0x7f00000007c0)='cgroup2\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setitimer(0x1, &(0x7f0000000800)={{}, {0x20000000000000}}, 0x0) lsetxattr$security_capability(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r4, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x58) close(r4) execve(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) ioctl$FIGETBSZ(r2, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') sendfile(r6, r7, 0x0, 0xf0) ptrace$setregs(0x1a, r5, 0xfffffffffffffffe, 0x0) getpriority(0x2, r5) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) 34.145657894s ago: executing program 1 (id=604): r0 = socket$packet(0x11, 0x3, 0x300) pread64(r0, &(0x7f00000002c0)=""/232, 0xe8, 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000500), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)='`', 0x3b2, 0x0, &(0x7f00000001c0)={0x2f, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000040)="ca88c927dc564c318c06790fad60ef17f7af7d37a88d36c8372509aa267438cd6c749a4f6c6a952b754fd03d220ca7707f7f6e4f93e5f292dea9e1d04d25d8120f372132332114431e1b1971043c9e5020d912a9731fd0ca0bc845d449a29e92477012cfa4cf5474ac93e70f5f7fddef4055edb80384b64613158bd9cab8a0b3573b91434bce2ee24215036576c52046539e0856f74ca688bb619bb30c49873a657eaa83be3fe5ff5575e5daa366e1b6a3ea1f4751597d9d0699a8c7345bcfbada30a6ff140d400cff706522433694abf1eeec19cd29cf45137466c1ee3959f2596f6c70f79b1f12c00edf84a7aa7eaab1bef5", 0xf3, 0x40000, &(0x7f0000000200)={0x11, 0xf8, r2, 0x1, 0x4, 0x6, @broadcast}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x8b, 0x0, 0x6aaf}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fremovexattr(r7, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000540)={0xfffc, 0x3}, 0x4) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000580)={0x0, 0x1000}, 0x4) socketpair(0x1, 0x1, 0x0, 0x0) 18.897028956s ago: executing program 33 (id=604): r0 = socket$packet(0x11, 0x3, 0x300) pread64(r0, &(0x7f00000002c0)=""/232, 0xe8, 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000500), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000180)='`', 0x3b2, 0x0, &(0x7f00000001c0)={0x2f, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000040)="ca88c927dc564c318c06790fad60ef17f7af7d37a88d36c8372509aa267438cd6c749a4f6c6a952b754fd03d220ca7707f7f6e4f93e5f292dea9e1d04d25d8120f372132332114431e1b1971043c9e5020d912a9731fd0ca0bc845d449a29e92477012cfa4cf5474ac93e70f5f7fddef4055edb80384b64613158bd9cab8a0b3573b91434bce2ee24215036576c52046539e0856f74ca688bb619bb30c49873a657eaa83be3fe5ff5575e5daa366e1b6a3ea1f4751597d9d0699a8c7345bcfbada30a6ff140d400cff706522433694abf1eeec19cd29cf45137466c1ee3959f2596f6c70f79b1f12c00edf84a7aa7eaab1bef5", 0xf3, 0x40000, &(0x7f0000000200)={0x11, 0xf8, r2, 0x1, 0x4, 0x6, @broadcast}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x8b, 0x0, 0x6aaf}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fremovexattr(r7, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000540)={0xfffc, 0x3}, 0x4) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000580)={0x0, 0x1000}, 0x4) socketpair(0x1, 0x1, 0x0, 0x0) 15.223703991s ago: executing program 4 (id=716): r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a0100000005fe060c10880008001e00fff3c00e", 0x24}, {&(0x7f0000000080)="5797912effd1165aee89792d7557c2fbd07c575103833503897cb20d205cd4839977479eede7e45130eef60d817b0d05c581af3afa58fc137f88e546bfcc6adf310cb923a149c373b207bd53b89244c402302e91995b2dcbd3f2cd88e0865e14a69bb2ecb7d9022fe8cc396f3badfc01c1ff", 0x72}, {&(0x7f0000000100)="5c124ad123fce17732ffc4491f728ed35bfc5ec76e7ee96d508034577fad7ed21c3a7ccbfaed94764e26c4f365839182f05a02020de52ad48989ac8715eb44d50fb691b8475cb87d1936fbfdf66a3eb1b5aebc7ae3e3c86f7d4f6724556bb4b09722f6cc55d9a8a4e255dd905cc6311899059784b9b910ee480820cc474a28873598bd17bf5644fe7dda37c16fa8944a09f56054ff0ee2f4aad3d2d9a7f896d126461a0822ce15f14dc882cdb1f627708815eee907cac03f7b678160505996bad568b6ef903cf296fe6575641d526c3ecebf2d7d8bb3c74095", 0xd9}], 0x3}, 0x0) 15.181665995s ago: executing program 4 (id=717): mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (rerun: 32) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/ttyS0\x00', 0x2, 0x0) ioctl(r0, 0x542e, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x674666bd8ca4d82f, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000f, 0x11, r2, 0xcfa3e000) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, 0x0) 15.038798s ago: executing program 4 (id=718): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0xc2ac33055f1cdcb9) (async) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./sys/class/net/dummy0/carrier\x00', 0x4) (async) write(0xffffffffffffffff, &(0x7f0000000180)='0', 0x1) (async) write(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) 15.0351546s ago: executing program 4 (id=719): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f00000000c0)='6', 0x32) (async) ioctl$KVM_GET_SREGS2(r1, 0x8140aecc, &(0x7f00000001c0)) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x1ff, 0x100, @mcast1, 0x2}}, 0x4000}, 0x90) fsync(0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x0, 0x6, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xfff, 0x100000001, 0x7, 0xdffffffc, 0x2}, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f00000003c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000400)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r5}]) (async) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0xd, 0x87, 0x1, 0xbad, 0x9, 0x6, 0x81}]}) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) getpeername$netlink(r7, &(0x7f0000000680), &(0x7f00000006c0)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./trace\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) write(r8, &(0x7f0000000640)="686973743a6b65797b3d635da709a8b7b562dc7f657374616d702e753bd2301ad6bb3ab30c05d9f58ad0c59701d592da90f73d3e0dac14923b8b", 0x3a) (async) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) (async) ptrace$peekuser(0x3, r9, 0x370) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15.004259113s ago: executing program 4 (id=720): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x1c, 0x22, 0x0, 0x2, 0x5, 0xac, 0x2, 0x2, 0x1}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x6020480) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x882) ioctl$EVIOCSABS20(r1, 0x40044591, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2308}], 0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {@in6=@local, 0x0, 0x3c}, @in=@empty, {0x0, 0x0, 0xc, 0xa, 0xa, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r2, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB=')'], 0x18}, 0x440e0) 14.821607431s ago: executing program 4 (id=721): mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x410002, 0xc5, 0x10}, 0x18) 14.806240653s ago: executing program 34 (id=721): mkdir(&(0x7f0000000380)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x410002, 0xc5, 0x10}, 0x18) 3.83766987s ago: executing program 6 (id=799): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000780)=r0) 3.83402738s ago: executing program 6 (id=800): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x79, 0x79a9, 0x10, @rand_addr=' \x01\x00', @loopback, 0x20, 0x80, 0x5, 0x7}}) getpeername$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)='O', 0x5c8, 0x0, &(0x7f0000000280)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x80, 0x0, 0xf9, 0x230, {{0x3b, 0x4, 0x2, 0x26, 0xec, 0x68, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback, {[@rr={0x7, 0x7, 0x3a, [@local]}, @cipso={0x86, 0x15, 0x0, [{0x2, 0xf, "76c3716264913387ceb4e02bcb"}]}, @generic={0x0, 0x3, '4'}, @timestamp_prespec={0x44, 0x2c, 0x9, 0x3, 0x7, [{@multicast2, 0xe}, {@empty}, {@multicast1, 0xfffffff9}, {@private=0xa010102, 0x12}, {@local, 0x4}]}, @cipso={0x86, 0x68, 0xffffffffffffffff, [{0x5, 0x9, "a70c88d63ecd25"}, {0x6, 0x8, "6373994b43b3"}, {0x5, 0xc, "ab33c05b77e94879043a"}, {0x2, 0x8, "9b8997a16184"}, {0x5, 0x5, "f1a930"}, {0x7, 0xb, "11ce71728d1383d9de"}, {0x7, 0xd, "d061ea17ddd42036e978a5"}, {0x5, 0x10, "d2898950f3901ec0eaa0bafa231b"}, {0x2, 0x10, "5281a3a862f43800392af8b8179a"}]}, @noop, @timestamp_prespec={0x44, 0x24, 0x91, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@loopback, 0xffffffff}, {@private=0xa010101, 0x470f}, {@broadcast, 0x8}]}]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x6ae7a513e3bd4f0e, &(0x7f0000000440)={@multicast2, @empty, 0x0}, &(0x7f0000000480)=0xc) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x8000, 0x8, 0xba6, 0xc, {{0x19, 0x4, 0x2, 0x1, 0x64, 0x66, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x37}, {[@timestamp_addr={0x44, 0x14, 0x5f, 0x1, 0x5, [{@broadcast, 0x7}, {@local, 0x4}]}, @rr={0x7, 0x23, 0xa4, [@remote, @remote, @broadcast, @private=0xa010101, @broadcast, @multicast1, @loopback, @private=0xa010101]}, @timestamp={0x44, 0x18, 0xac, 0x0, 0x6, [0x4d89, 0x4, 0x80, 0x1, 0x4]}, @noop]}}}}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000680)={0x484, 0x0, 0x100, 0x7fffffff, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x1, 0x8, 0x3, 0x2}, {0x7c, 0x6, 0xf9, 0x3}, {0xa1a, 0xfe, 0x8, 0x661}, {0x48, 0x38, 0x39, 0xc23}, {0x3ff, 0x9, 0x6, 0xda4}, {0x7fff, 0x4, 0x4, 0x81}, {0x8000, 0x6, 0x6, 0x7}, {0xe12, 0x1, 0xee, 0x9}, {0x1, 0x5, 0x6, 0xfffffffa}, {0x1a, 0x40, 0x4, 0x8}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r9}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8000, 0x1, 0xb, 0x10000}, {0x9, 0xa1, 0x5, 0x800}, {0x5, 0x1, 0x10, 0x8}, {0x6, 0xc, 0x2, 0xfffffffe}]}}}]}}]}, 0x484}, 0x1, 0x0, 0x0, 0x11}, 0x4000004) 3.795571404s ago: executing program 6 (id=801): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2000a, 0xd, 0x10001}}, 0x30) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000000140)={0x240040480, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = inotify_init() r4 = userfaultfd(0x801) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb146000) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000400)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000300)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000340)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000200021002bbd7000000000000a060000000000000000000014000100"], 0x30}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x1, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008885}, 0x20000040) ioctl$FIBMAP(r1, 0x5393, &(0x7f0000000200)=0x3) 3.769886347s ago: executing program 6 (id=802): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) recvmsg(r0, &(0x7f0000001880)={&(0x7f0000000000)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000080)=""/117, 0xa}, {&(0x7f0000000100)=""/125, 0x7d}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/199, 0xc7}, {&(0x7f0000001740)=""/100, 0x64}], 0x5, &(0x7f0000001840)=""/41, 0x29}, 0x2140) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') fchdir(r1) setfsgid(0xee01) r2 = syz_clone(0x40002300, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000240)='wchan\x00') pread64(r3, &(0x7f0000000280)=""/15, 0xf, 0x4) write$P9_RCLUNK(r0, &(0x7f0000000600)={0x7, 0x79, 0x4}, 0x7) 3.604203944s ago: executing program 0 (id=804): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) mlock2(&(0x7f0000da0000/0x1000)=nil, 0x1000, 0x1) (async) mlock2(&(0x7f0000da0000/0x1000)=nil, 0x1000, 0x1) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e2c, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4200}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) 3.600228814s ago: executing program 0 (id=805): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x5, 0x12, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x14, 0xf}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "b44ac751ce534a04ce7c336e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f0000000240), 0xa, 0x62080) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = socket(0x2, 0x5, 0x0) r2 = socket(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @local, 0xc}, 0x1c) bind$inet6(r2, &(0x7f0000000280)={0xa, 0xe64, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000440)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000480)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6gre0\x00', r3, 0x2f, 0x8, 0x3, 0x705c, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x710, 0x8, 0x8, 0x3}}) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0xa6e, @dev={0xfe, 0x80, '\x00', 0x18}, 0x4}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc2c02e4d8eabe456, 0xd) r5 = openat$incfs(r4, &(0x7f00000003c0)='.pending_reads\x00', 0x20001, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0xc0386723, 0x0) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) listen(r1, 0xfffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./sys\x00', &(0x7f0000000680)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r6, &(0x7f0000000700)='1', 0x1) write$cgroup_pid(r6, &(0x7f0000000740), 0x12) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r7 = fsopen(&(0x7f0000000580)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) fchdir(r8) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='.\x00', 0x8880, 0x85) 3.53747214s ago: executing program 6 (id=806): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getflags(r0, 0x40a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000740)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000780)={0x2, 0x3, 0x5a, 0x2e8d, 0x4, "1bd7935e425556f132aab00c6af5db7196b5e5"}) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x204000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f00000005c0)='7', 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x400400, 0x80) process_vm_readv(0x0, &(0x7f0000000900)=[{&(0x7f0000000800)=""/60, 0x3c}, {&(0x7f0000000640)=""/154, 0x98}, {&(0x7f0000000840)=""/154}], 0x1000000000000330, &(0x7f0000000700)=[{&(0x7f0000000940)=""/90, 0x5f}], 0x1, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000180)={0x13, 0x1, 0x4}) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000380)={0xa300000000000000, 0xffc, 0x4000000000009}) syz_usb_connect$uac2(0x1, 0x8f, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100300000040410e414240000102030109027d000301053009080b010301ff208c0904000000010120000924010040001d000708240a0000ff23030c24030207030004000500830904010000010220000904010101010220000905010900020302040825010000400700090402000001022000090402010101022000090582090800400604082501823ff306008934ee4868252568df56e113d4418690e4c9ab34cb8b8d94a8243605cbcb3e3d373f93f907678fa0ee62ccee5c9adb8fe9e79e0927163d89d6d4b338878f2d3110"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x84, &(0x7f00000009c0)=ANY=[]}, {0x73, &(0x7f00000000c0)=@string={0x73, 0x3, "1f2df293ee3043fadab5c184878052855e6766d1279d0ce9e774da2275c3159b434bdf912c52c3c2f1099e6f8450cda9f1ec6e5e5cc296188d32384e2ebf83646115054321cb3033577ce6642fff78eec695e47ff3a0b83dc2a66b5f996c8a68784df660ae0f8d74bae848f15423e8d795"}}, {0x43, &(0x7f00000001c0)=@string={0x43, 0x3, "885a7a9cc8ebb78859df42d5c1641ae857791d13ec7407883ef38f27e97518087d0c2d5e88903e426eb5d82bd4612c6b4a49ba6ce9b4f33c8b02a2df7d3c585aad"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1409}}]}) 1.613523556s ago: executing program 5 (id=810): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x87, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x19}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x9}}}}}]}}]}}, 0x0) (async) unshare(0x4020400) (async) ioperm(0x4, 0x8, 0x5) (async, rerun: 32) pipe2(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 32) r3 = memfd_create(&(0x7f0000000900)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) ftruncate(r3, 0x80079a0) (async) splice(r3, 0x0, r2, 0x0, 0x100002, 0x9) (async, rerun: 64) pipe2$9p(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) (rerun: 64) tee(r1, r4, 0xc944, 0x6) (async) r5 = eventfd2(0xffffffff, 0x800) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000140)=0x100, 0x4) write$eventfd(r5, &(0x7f0000000040)=0xffffffff00000000, 0x8) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r9) sendmsg$IEEE802154_ASSOCIATE_RESP(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x1c, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x80) (async, rerun: 64) sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r10, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x7}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x4}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xa0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x4048004) (rerun: 64) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) (rerun: 64) write(r11, &(0x7f00000000c0)='7', 0x1) (async, rerun: 32) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x9) (async) ioctl$UI_DEV_SETUP(r12, 0x405c5503, &(0x7f00000001c0)={{0x100}, 'syz1\x00', 0x19}) (async) ioctl$UI_DEV_CREATE(r12, 0x5501) write$uinput_user_dev(r12, &(0x7f0000000240)={'syz1\x00', {0x8001, 0x3, 0x2, 0x4}, 0x36, [0x9, 0xb7, 0x9, 0x0, 0xa, 0x8, 0xf5, 0x2, 0x5, 0x0, 0xfffffff9, 0x0, 0x5, 0x10, 0x4, 0x10001, 0xbadd, 0x8, 0x7, 0x35e, 0x1, 0x8, 0x8, 0x80000001, 0x895, 0x4, 0xc5e, 0x0, 0x40, 0x3, 0x1000, 0x7, 0xffff, 0xc2, 0x10000, 0x4, 0xf045, 0x3d, 0x9, 0x13f8, 0x1000, 0x7ba, 0x6dd, 0x9, 0x9, 0x7, 0x7, 0x5, 0xb3, 0x6, 0x8, 0x40, 0xffff, 0x5, 0x9, 0x9, 0x4, 0x7fff, 0x5, 0x28c3, 0x8001, 0x7fff, 0x400, 0xb], [0xb4e, 0x0, 0x7, 0x1, 0x8, 0x2800, 0x4, 0x9, 0x101, 0x10, 0xa464, 0x80000001, 0x10001, 0xc7, 0xfffffff5, 0x8, 0x6, 0xae23, 0x10001, 0x0, 0x2, 0x8001, 0x9, 0x8, 0x1000, 0xa45b, 0x5, 0x1, 0x7, 0xffff1db1, 0x80000000, 0x6, 0x1d21, 0xd54, 0x48, 0x6, 0x5, 0x8, 0x9, 0x3, 0x3, 0x74ff, 0x5, 0x11, 0xff, 0x4, 0x4f67, 0xc30e, 0x400, 0xc, 0x2, 0x8, 0x2, 0x5, 0x9, 0x4, 0x3, 0x3, 0xffffffff, 0x7, 0x9, 0x8, 0x6, 0x7ff], [0x3, 0x9, 0xbbb, 0x80000001, 0xffffffff, 0xffffffff, 0x0, 0x3, 0x2, 0x2, 0x3ff, 0xb, 0x5e8f, 0x5, 0x1, 0xffff, 0x401, 0x6272, 0x0, 0x5, 0x9, 0x0, 0x3, 0x1, 0x4, 0x4, 0x2, 0x8ecc, 0x5f1a, 0x401, 0x1033, 0x6, 0x80004, 0x401, 0x9, 0x6e, 0xb, 0x64291add, 0x6, 0x56, 0x9, 0x83, 0xffffff79, 0x5, 0x4, 0x6, 0x913, 0x80, 0x8733, 0xc, 0x5, 0x0, 0x803, 0x8, 0x7, 0x6, 0x9, 0x5, 0xfffffffc, 0x6cc7, 0xfffffff8, 0x7f, 0x24200000, 0x6], [0x6, 0x413, 0x3, 0x2, 0x2, 0xbbc, 0xb, 0x73ae, 0x8, 0x1000, 0x13, 0x101, 0x1, 0x6, 0x9b460, 0xa, 0xa84, 0x5, 0x3936, 0x9, 0x3, 0x101, 0x7e6, 0x80, 0x6, 0x8000, 0x1, 0x7, 0x9, 0x6, 0x1, 0x0, 0x4, 0x0, 0x702, 0x9, 0x8000, 0x77c, 0x10, 0x9, 0x7, 0xfffffff9, 0x9, 0x6, 0x5, 0xfc, 0x8, 0x9, 0x8, 0x0, 0x8000, 0x9, 0x5, 0xe, 0x0, 0x3, 0x4, 0x7efb, 0x7, 0xc54, 0x400, 0x24, 0x2, 0x7]}, 0x45c) (async) fsconfig$FSCONFIG_SET_FLAG(r11, 0x0, &(0x7f0000000100)='mand\x00', 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001580)={0x2c, &(0x7f0000001300)={0x20, 0x1, 0x19, {0x19, 0xc, "8e6ee0e45e4da05372b22e49d5e81e347012c4b3f02583"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.257711412s ago: executing program 3 (id=813): openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40001, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x0, 0x3ff, 0x3, 0x0}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001200010a28bd700000000a000003"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(r0, 0x9) syz_clone3(&(0x7f0000000500)={0xa0000000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r3, 0x0, 0x0, 0x0, r3, 0x0], 0x6, {r0}}, 0x58) 1.199879108s ago: executing program 3 (id=814): r0 = socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040), 0x80800) (async) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x20, 0x0, 0x2, 0xfffffff8, 0x0, 0xff, 0xff}) (async) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0) 1.18287357s ago: executing program 3 (id=815): r0 = fsopen(&(0x7f0000000000)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r1 = syz_io_uring_setup(0x11b1, &(0x7f0000000240)={0x0, 0x9ff1, 0x80000, 0x0, 0x49}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x0, 0x7426, 0x1000, 0x3, 0x1d0}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb7a0, 0x1, 0x3, 0x303}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe597, 0x2, 0x0, 0x7}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xda07, 0x20, 0x0, 0xb3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xae9d, 0x8, 0x1, 0xf8}}], 0x4, &(0x7f0000001700)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x0, 0x918, 0x0, &(0x7f0000000700)=@buf_1k="a59e5d011d1a3d2ff08fb1334ada17450bbc6144e92b02e41169e7e0040c02cdba490756e5cdde18646c0867cbdac9e42d5a705c64d5ba1f13d8490d38335dd18570ef28fc93a34290961664daa8755cd010ba47cc040110e4af215951e7315bf4099afb16ce94e00f1a9afd85066333e1954990d698df959e59b4a827cf5777020410bdfe6c5e81c23bbfb2144abeb8ef84c7b7813ec9baa5fec7ad19441d1df04f892082c8e032cca49d8ba0860fea3d5e9fe320ebf50456e352aacd7a0a1ee7d0bf991826ffdcf2e8dbd3fcfd65a8a41721c78a98644d001b13f2ceb80e37f8eec560e6486247eb01fe4a4f74b71b48159ab369ee9bd8b00e3e7c5c5e90fb2ed361532843f563b6dd14e53d3a0245e8c951093cc40ea68bcc9978664633d3abe85e3350c7b7633dd8657f93baf168149562d2a1eb779c704837430a7ffd643bb756c85d52a28972b82228c9a829f51d8161380d3ce78a72cbdffb1480cfd184920bcf82c797c17f3f6ec3dcfe6b7ca962236e78b98d7c0f790f65328f5e702be3b07961ff1fd9458bc5b71f854295d0201e2188fc00928225fa2ff26b3b4d893e1490b1dbd4783806ca4d892402d701f02629cbce6b7abd64ec9fc61e2a180c9aafa709c5de8eb2985269719c5af6a0fe0a3b2e00741cfcd17e40781b84ef2a836a779778d828f3f627cf4ed71ce345765fb5d146bbbe63dd769181b41e58cda77b3a8bd41d79c238b72d0c61231edf49679cabab0a18e925d50dc013e97afe4e8a02407fbf1dcfdfdde177af88c22c4c8853ea9d13fb5adf4f903f933c594a1af2cbcf757f705a02f49c5c311ef3339e9e02b2a54d899383e7c8dcb97dcf947b837e524b6cd71a23fe2ad62bc5da8ee5d6f5fb85aba82a672072cfdecc25c5b1b8093b56d1f2e917e0db3ffb748bcb9b40144e1b1f33b28f99fdea7d56c806bf481ab42b3e90289889d5d768c80c5e4486e095b2ecb82859601b34ba7ff7e09bec3df85fae7a95586271a62a520bad562b863fe85b7ce866407939c9145cfbb0bb09a88d813758bb84928a37d37374f23becb660327d27baa441146cf40d32cf97e27db179876301691618909e5bb76c8b9c2581d8735d14e385a717800aef9fe27fc2ab88fd00c5f8d10a26bb8d911f15149aa4cdc038e2d1ab9985e680b0f1ac6f9b4ce4fefc592a9e05f7af856fe5ce5bba6a4e2f7f987e50fbed2c4cc794f1c745a8090467a8692502dfff6599e584bf4360f2f8a4b39c65700aff71c2ec1927bcb3e8e9818fe6b32dc046e1bb28835af5b3f2423b205beb5a3d60af4221649d67f1a491ebd4b763a61373744a67f856579cb6b05c07949d55a63a4c9e6a1409a72c736cf7961d3c19a0372859040a65f685dcbdf4a4be9400049a7eef5dcf8c855ec1a008ad1d60fe7c5fe57c19d24405a81f035d52eb77fec6845d"}}, &(0x7f0000001780)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000017c0)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000001800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001840)={0x0, 0xf75b, 0x4, 0x2, 0x1b1}, &(0x7f00000018c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2749, 0x40000, 0x0, 0x1a8, 0x0, r0}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1767, 0x8000, 0x3, 0x143}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd71a, 0x20000, 0x3, 0x3e7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9735, 0x2001, 0x2, 0x177}}], 0x4, &(0x7f0000002b40)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, '\x00', {0x2, 0x60b, 0x0, &(0x7f0000001b40)=@buf_max_buf="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"}}, &(0x7f0000002bc0)) r5 = syz_io_uring_setup(0x1969, &(0x7f0000002c00)={0x0, 0x1790, 0x8, 0x2, 0x69}, &(0x7f0000002c80), &(0x7f0000002cc0), &(0x7f0000002d00)) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000002fc0)={0x9, r0, 'id1\x00'}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0xd9f0, 0x400, 0x0, 0x30a, 0x0, r1}, &(0x7f0000002d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4960, 0x10000, 0x2, 0x90, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f62, 0x200, 0x2, 0xbf, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1d7, 0x2, 0x3, 0x117, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8727, 0x1000, 0x2, 0x241, 0x0, r5}}], 0x4, &(0x7f0000004040)={0x2e, 0x78, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x3, 0x371, 0x0, &(0x7f0000003040)=@buf_512="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"}}, &(0x7f00000040c0)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004140)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r7, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000004280)=""/4091, 0xffb}, {&(0x7f0000005280)=""/175, 0xaf}], 0x2}}, {{0x0, 0x0, 0x0}, 0x1b20cfe5}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000140)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) renameat2$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2) 837.537225ms ago: executing program 5 (id=816): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x54, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0xa, 0x0, 0x2}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x400}, @increfs], 0x100, 0x0, &(0x7f0000000280)}) pwrite64(r0, &(0x7f0000000200)='\x00', 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000880)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000003c0)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) fstat(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r3, &(0x7f0000000940)='./file1/file0\x00', 0x6000, 0x2, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)) fstat(r4, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r9) write$P9_RSTATu(r3, &(0x7f0000000b40)={0x66, 0x7d, 0x2, {{0x0, 0x3e, 0xe, 0x8, {0x20, 0x4, 0x7}, 0x10000000, 0x8000, 0x0, 0x6, 0x3, '\'\x1d+', 0x2, ':.', 0x1, '*', 0x5, '\xec*--*'}, 0x13, './binderfs/binder0\x00', r7, r8, r9}}, 0x66) 781.084931ms ago: executing program 5 (id=817): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000780)=r0) 757.111834ms ago: executing program 5 (id=818): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001bc0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x14, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x7, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x8000000, 0xe, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7f, 0x9, '\x00', 0x6}, {0x0, 0x5, 0xd4, '\x00', 0xf9}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0xd4, '\x00', 0xdf}, {0x71, 0xd7, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x12, 0x26}, {0xcf, 0x3, 0x0, '\x00', 0x6}, {0xb, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0xff, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x8}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x44}]}}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000340)=0x2) write$binfmt_script(r0, &(0x7f0000001c00), 0xfffffd9d) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000001c80)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r4, r0, 0x0, 0x8010002b) 531.015916ms ago: executing program 0 (id=819): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00') read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) (async) close(r1) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 501.485409ms ago: executing program 0 (id=820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "ed27fbb5d5ba69000e6769b69dc51dc5c32930bc5b6886786c9c975fe54da42154c59a884c54b5ff1e0501c423c33cd3314f79fd035e590fec690ad23ecae1dc", 0x33}, 0x48, 0xfffffffffffffffe) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3a, 0x0, 0x0) keyctl$assume_authority(0x10, r1) r3 = signalfd4(r0, &(0x7f0000000040), 0x8, 0x1000) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x8a4c, @none, 0x0, 0x2}, 0xe) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f300fc79d53bf0000c4e16dd3010f2202", 0x52}], 0x0, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./tracing\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000340)=@req3={0x1000, 0x3a, 0x0, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) write$FUSE_POLL(r6, &(0x7f0000000380)={0x27}, 0x18) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x80000008, 0x10, 0x6, 0x5, 0x1c2, 0xc98, 0x200}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 455.425924ms ago: executing program 6 (id=821): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x101800, 0x0) creat(0x0, 0x10c) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000004c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000540)={@val={0x70, 0x88ca}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x36, 0x0, 0x4000, 0x0, 0x2f, 0x0, @multicast1, @multicast1}, {0x2000, 0x4e20, 0x22, 0x0, @opaque="67547666efa3535ec8a4b9e9584b11dd4fd6b20d09d7f7cc2e3b"}}}}}}, 0x48) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000140)='\x00'/17, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, 0x0, &(0x7f0000000440)="00a6", &(0x7f0000000200)='\x00'/36}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000001c0)) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000280)=0x1) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x85102d, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x902, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000bfe000/0x400000)=nil) syz_kvm_add_vcpu$x86(r9, &(0x7f0000000600)={0x0, 0x0}) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8210, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xf5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa, 0x1003}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0xa, 0x5, 0x1, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x0, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2}}}}}}}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0xde) 290.677721ms ago: executing program 3 (id=822): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x5) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000040)={0xa4, 0x0, 0x1}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000beb000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r6, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5b}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x10) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x3e, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000580)={{0x80e3000, 0x3000, 0x8, 0xd, 0x3, 0x0, 0x45, 0x5, 0x0, 0x2e, 0x19}, {0x5000, 0x2, 0xa, 0x2, 0x42, 0x9, 0x7f, 0x3, 0x5, 0x5, 0x3, 0xe}, {0x54000, 0x4000, 0xe, 0x3, 0x1, 0x9, 0x7, 0x60, 0x0, 0xa7, 0x8}, {0x8000000, 0x10000, 0xa, 0x6, 0x4, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xf}, {0x60000, 0xfd86a6125ce6c8e5, 0x8, 0x2, 0x15, 0x6, 0xa9, 0x7c, 0x1, 0x7f, 0xf7, 0x6}, {0x1000, 0xfec04000, 0x9, 0x80, 0xb1, 0x8, 0x7, 0x9, 0x9, 0x13, 0x8, 0x8f}, {0x1111d004, 0x50000, 0xf, 0x5, 0x0, 0x9, 0x4, 0x23, 0x3, 0x84, 0x3, 0x79}, {0xffffffff, 0x5000, 0xc, 0x5, 0xf, 0xa0, 0x1, 0xe2, 0x2, 0x8, 0xf0, 0x7}, {0x40002, 0x2f}, {0x3000, 0xfffd}, 0xc0000031, 0x0, 0x7000, 0x2024, 0x7, 0x0, 0x70000, [0x7, 0x9, 0x60, 0x38000]}) 289.705551ms ago: executing program 0 (id=823): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000800)={0x4, 0x0, 0x0, 0x1d8, 0x138, 0x1, 0x0, 0x5400, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@crypt={0x0, 0x10, 0x0, 0xa0, 'crypt\x00', {'aes-cbc-benbi', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '8', 0x20, {@ram={'/dev/ram', 0x0}, 0x20, '16'}, ' 1 sector_size:1024'}}]}) 251.032975ms ago: executing program 0 (id=824): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0xa3, 0xd, 0x4, 0xfc00, 0x0, 0xfeff, 0x0}) syz_usb_connect$uac2(0x2, 0x87, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3042, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x85, 0x0, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0xc, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x306, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x4}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000001c0)={0x1, &(0x7f0000000140)="be7b4bb7fe631f4b31748aa602f393811eeabd1a8ffe27f8ecef0d3861086c8c9496d7b9594dc64b300ddc6990f5e1e256203ba07eed94b2a8f3fd3498f45a18e895a34afbfc2791bee5aa49cdab730461eaa17078f026fa8de5fb7228b0035c49b1133d229921cbc897872d639c18e5"}) 180.268462ms ago: executing program 5 (id=825): r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0xfc) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/mtrr\x00', 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0xc0104d08, &(0x7f0000000180)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r2 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write(r0, &(0x7f00000004c0)='0', 0x1) 77.696683ms ago: executing program 3 (id=826): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000780)=r0) 76.841732ms ago: executing program 3 (id=827): r0 = openat$kvm(0x0, &(0x7f0000000440), 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x20008000) bind$inet(r1, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x0, 0x3}, 0x30, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x800000000000002, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r5, 0xaea2, 0x10000000007) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x2, 0x10000}) fcntl$lock(r6, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x7}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000480)={0x0, &(0x7f00000004c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_msr_list_add={0x155, 0x30, {0x0, 0x2, 0x10, 0x7fffffffffffffff}}, @nested_vmlaunch={0x12f, 0x18}], 0x78}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_GET_REGS(r6, 0x8090ae81, &(0x7f00000000c0)) 0s ago: executing program 5 (id=828): modify_ldt$write2(0x11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x129681, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000580)={0xa, 0x4620, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x18, 0x0, &(0x7f0000000600)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@empty, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80, 0x3b}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x32}, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$hiddev(&(0x7f00000005c0), 0x9fd, 0xa2742) syz_usb_connect$cdc_ncm(0x2, 0x8f, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d000201008000094036a852227f10359fd404", @ANYRESHEX=0x0], 0x0) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f0000000540)={0x0, &(0x7f0000000440)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control16=0x4, 0x10, 0x1, 0x6}}, @nested_amd_stgi={0x17e, 0x10}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest64=0x2811, 0x480, 0x2, 0x2}}, @rdmsr={0x66, 0x18, {0xbfa}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18}], 0xd8}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = getpgrp(0x0) syz_pidfd_open(r6, 0x0) ptrace$setregs(0xffffffffffffffff, r6, 0x5, &(0x7f0000000000)="0780f8c6ef9986c39715ec3ac4a7d05750558303e43ad5f9dc9f9d214ff4213912e66b710585b9f0c0274b772278bed8d8f1498012903bfb3d5d46996ab40d99b604a021b72e8edab9cb30d62b11264608f0fdac70d85a90adb52359b283c0b1d1642d5099d1475fc96fa646c4e75692125ab0e775a29cfd8f6ef8f0499d1b369c291bf18dc0b609989f113b3bb8f8c75f02ddc3dd") kernel console output (not intermixed with test programs): 3 [ 86.665854][ T1911] rust_binder: 1909:1911 BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 86.675877][ T1911] rust_binder: Write failure EINVAL in pid:425 [ 86.774371][ T67] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 86.904398][ T67] usb 5-1: device descriptor read/64, error -71 [ 86.914462][ T416] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 87.057955][ T1913] netlink: 'syz.1.512': attribute type 8 has an invalid length. [ 87.065833][ T416] usb 1-1: Using ep0 maxpacket: 8 [ 87.073784][ T416] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 87.083132][ T416] usb 1-1: config 0 has no interface number 0 [ 87.091596][ T416] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 87.101080][ T416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.114111][ T416] usb 1-1: Product: syz [ 87.118546][ T416] usb 1-1: Manufacturer: syz [ 87.123528][ T416] usb 1-1: SerialNumber: syz [ 87.130887][ T416] usb 1-1: config 0 descriptor?? [ 87.144287][ T67] usb 5-1: device descriptor read/64, error -71 [ 87.254101][ T36] audit: type=1400 audit(1700000022.523:393): avc: denied { map } for pid=1930 comm="syz.1.518" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 87.404343][ T67] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 87.534286][ T67] usb 5-1: device descriptor read/64, error -71 [ 87.564292][ T775] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 87.595112][ T36] audit: type=1400 audit(1700000022.873:394): avc: denied { create } for pid=1938 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 87.615994][ T36] audit: type=1400 audit(1700000022.873:395): avc: denied { ioctl } for pid=1938 comm="syz.3.521" path="socket:[16972]" dev="sockfs" ino=16972 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 87.694294][ T775] usb 2-1: device descriptor read/64, error -71 [ 87.774286][ T67] usb 5-1: device descriptor read/64, error -71 [ 87.884415][ T67] usb usb5-port1: attempt power cycle [ 87.944811][ T775] usb 2-1: device descriptor read/64, error -71 [ 88.184645][ T775] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 88.234331][ T67] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 88.255447][ T67] usb 5-1: device descriptor read/8, error -71 [ 88.314312][ T775] usb 2-1: device descriptor read/64, error -71 [ 88.385437][ T67] usb 5-1: device descriptor read/8, error -71 [ 88.564371][ T775] usb 2-1: device descriptor read/64, error -71 [ 88.634487][ T67] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 88.655643][ T67] usb 5-1: device descriptor read/8, error -71 [ 88.674503][ T775] usb usb2-port1: attempt power cycle [ 88.714276][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 88.785317][ T67] usb 5-1: device descriptor read/8, error -71 [ 88.866177][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 88.875126][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.885375][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.894763][ T67] usb usb5-port1: unable to enumerate USB device [ 88.897611][ T9] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 88.911909][ T9] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 88.921119][ T9] usb 4-1: Product: syz [ 88.926564][ T9] usb 4-1: Manufacturer: syz [ 88.931362][ T9] usb 4-1: SerialNumber: syz [ 89.014278][ T775] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 89.035295][ T775] usb 2-1: device descriptor read/8, error -71 [ 89.150931][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 89.165522][ T775] usb 2-1: device descriptor read/8, error -71 [ 89.205305][ T1945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.214041][ T1945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.404330][ T775] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 89.425555][ T775] usb 2-1: device descriptor read/8, error -71 [ 89.558505][ T775] usb 2-1: device descriptor read/8, error -71 [ 89.599433][ T416] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 89.619705][ T416] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 89.644388][ T416] usb 1-1: Failed to create links for entity 5 [ 89.651279][ T416] usb 1-1: Failed to register entities (-22). [ 89.668850][ T379] udevd[379]: setting mode of /dev/bus/usb/001/024 to 020664 failed: Read-only file system [ 89.680328][ T775] usb usb2-port1: unable to enumerate USB device [ 89.689520][ T416] usb 1-1: USB disconnect, device number 24 [ 89.697166][ T379] udevd[379]: setting owner of /dev/bus/usb/001/024 to uid=0, gid=0 failed: Read-only file system [ 89.720954][ T379] udevd[379]: symlink '../bus/usb/001/024' '/dev/char/189:23.tmp-c189:23' failed: Read-only file system [ 89.767111][ T379] udevd[379]: symlink '../bus/usb/001/024' '/dev/char/189:23.tmp-c189:23' failed: Read-only file system [ 90.064298][ T416] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 90.084258][ T775] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 90.216691][ T416] usb 1-1: unable to get BOS descriptor or descriptor too short [ 90.224888][ T416] usb 1-1: not running at top speed; connect to a high speed hub [ 90.233810][ T416] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.244063][ T416] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.254568][ T775] usb 5-1: unable to get BOS descriptor or descriptor too short [ 90.263271][ T416] usb 1-1: string descriptor 0 read error: -22 [ 90.269599][ T775] usb 5-1: config 1 interface 0 has no altsetting 0 [ 90.276400][ T416] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 90.285673][ T416] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.296475][ T416] usb 1-1: unit 3 not found! [ 90.301947][ T775] usb 5-1: string descriptor 0 read error: -22 [ 90.308393][ T775] usb 5-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.40 [ 90.317979][ T775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.530418][ T1960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.525'. [ 90.734324][ T417] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 90.742886][ T36] audit: type=1326 audit(1700000026.013:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1959 comm="syz.4.525" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e1fda94d9 code=0x0 [ 90.884247][ T417] usb 2-1: Using ep0 maxpacket: 32 [ 90.891061][ T417] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 90.899496][ T417] usb 2-1: config 0 has no interface number 0 [ 90.907086][ T417] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 90.909290][ T1957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.925851][ T1957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.928008][ T417] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 90.943361][ T1545] usb 1-1: USB disconnect, device number 25 [ 90.953516][ T417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.961881][ T417] usb 2-1: Product: syz [ 90.967384][ T417] usb 2-1: Manufacturer: syz [ 90.972471][ T417] usb 2-1: SerialNumber: syz [ 90.979995][ T417] usb 2-1: config 0 descriptor?? [ 90.985565][ T1966] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 91.193366][ T1966] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 91.214439][ T1513] Bluetooth: hci0: command 0x1003 tx timeout [ 91.214700][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 91.237489][ T9] usb 4-1: USB disconnect, device number 24 [ 91.248117][ T379] udevd[379]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.676865][ T9] rust_binder: 1970: undelivered TRANSACTION_COMPLETE [ 91.984356][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 92.134369][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 92.140812][ T9] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 92.149358][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.159635][ T9] usb 4-1: config 0 has no interface number 0 [ 92.167424][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 92.176669][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.184905][ T9] usb 4-1: Product: syz [ 92.189105][ T9] usb 4-1: Manufacturer: syz [ 92.193740][ T9] usb 4-1: SerialNumber: syz [ 92.199436][ T9] usb 4-1: config 0 descriptor?? [ 92.206097][ T9] uvcvideo 4-1:0.105: Found Unit with invalid ID 0 [ 92.212707][ T9] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 92.219458][ T9] usb 4-1: No valid video chain found. [ 92.437582][ T9] usb 4-1: USB disconnect, device number 25 [ 92.611949][ T36] audit: type=1400 audit(1700000027.883:397): avc: denied { mounton } for pid=1994 comm="syz.0.536" path="/141/file0" dev="tmpfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.836019][ T1966] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.843031][ T1966] rust_binder: 1965:1966 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 92.851178][ T1967] rust_binder: 1965:1967 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 92.851620][ T1966] rust_binder: Write failure EINVAL in pid:469 [ 92.865671][ T1967] rust_binder: Write failure EINVAL in pid:469 [ 92.875431][ T417] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 92.885873][ T775] usbhid 5-1:1.0: can't add hid device: -71 [ 92.891961][ T775] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 92.900016][ T417] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 92.912166][ T775] usb 5-1: USB disconnect, device number 27 [ 92.918983][ T417] asix 2-1:0.188: probe with driver asix failed with error -71 [ 92.929995][ T417] usb 2-1: USB disconnect, device number 27 [ 93.171650][ T2015] fuse: Unknown parameter 'g^oup_id' [ 93.304636][ T775] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 93.394270][ T417] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 93.401690][ T36] audit: type=1400 audit(1700000028.673:398): avc: denied { mount } for pid=2023 comm="syz.1.546" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 93.434306][ T31] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 93.454250][ T775] usb 5-1: Using ep0 maxpacket: 16 [ 93.460848][ T775] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 93.469987][ T775] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.480669][ T775] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.491205][ T775] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.500368][ T775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.508609][ T775] usb 5-1: Product: syz [ 93.512811][ T775] usb 5-1: Manufacturer: syz [ 93.517617][ T775] usb 5-1: SerialNumber: syz [ 93.534322][ T417] usb 1-1: device descriptor read/64, error -71 [ 93.595426][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.605731][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 93.614742][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 93.629588][ T31] usb 4-1: New USB device found, idVendor=052d, idProduct=a4a1, bcdDevice= 0.40 [ 93.639053][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.647176][ T31] usb 4-1: Product: syz [ 93.651667][ T31] usb 4-1: Manufacturer: syz [ 93.656520][ T31] usb 4-1: SerialNumber: syz [ 93.663399][ T31] cdc_mbim 4-1:1.0: skipping garbage [ 93.668960][ T31] cdc_mbim 4-1:1.0: CDC Union missing and no IAD found [ 93.675901][ T31] cdc_mbim 4-1:1.0: bind() failure [ 93.725058][ T2007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.734456][ T2007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.743661][ T775] usb 5-1: 0:2 : does not exist [ 93.751054][ T775] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 93.762901][ T775] usb 5-1: USB disconnect, device number 28 [ 93.775705][ T1958] udevd[1958]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.792007][ T417] usb 1-1: device descriptor read/64, error -71 [ 93.867235][ T1545] usb 4-1: USB disconnect, device number 26 [ 94.034384][ T417] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 94.164329][ T417] usb 1-1: device descriptor read/64, error -71 [ 94.269194][ T2036] X.509: signatureAlgorithm (12) differs from tbsCertificate.signature (13) [ 94.280320][ T2036] ptp ptp0: max value is 20 [ 94.395849][ T36] audit: type=1400 audit(1700000029.673:399): avc: denied { getopt } for pid=2057 comm="syz.3.551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.402677][ T2058] bpf: Bad value for 'gid' [ 94.415776][ T417] usb 1-1: device descriptor read/64, error -71 [ 94.442911][ T2058] fuse: Bad value for 'rootmode' [ 94.453448][ T36] audit: type=1400 audit(1700000029.723:400): avc: denied { ioctl } for pid=2057 comm="syz.3.551" path="/128/file0" dev="tmpfs" ino=762 ioctlcmd=0x6686 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 94.534515][ T417] usb usb1-port1: attempt power cycle [ 94.544390][ T1545] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 94.554372][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 94.694539][ T1545] usb 5-1: Using ep0 maxpacket: 16 [ 94.701414][ T1545] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 94.712046][ T1545] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.714575][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 94.723031][ T1545] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 94.730320][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 94.739568][ T1545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 94.745325][ T31] usb 2-1: can't read configurations, error -61 [ 94.752996][ T1545] usb 5-1: SerialNumber: syz [ 94.766560][ T1545] usb 5-1: 0:2 : does not exist [ 94.834347][ T9] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 94.874371][ T417] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 94.884461][ T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 94.895625][ T417] usb 1-1: device descriptor read/8, error -71 [ 94.968575][ T1545] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 94.981820][ T1545] usb 5-1: 5:0: failed to get current value for ch 2 (-22) [ 94.993603][ T1545] usb 5-1: 5:0: failed to get current value for ch 3 (-22) [ 95.002799][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.011907][ T9] usb 4-1: config index 0 descriptor too short (expected 575, got 63) [ 95.022054][ T9] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 95.030686][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 95.036237][ T417] usb 1-1: device descriptor read/8, error -71 [ 95.040058][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 95.046877][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 95.057929][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.066730][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 95.073835][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 95.081387][ T31] usb 2-1: can't read configurations, error -61 [ 95.093296][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 95.093512][ T1545] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 95.098084][ T31] usb usb2-port1: attempt power cycle [ 95.119811][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 95.132587][ T9] usb 4-1: string descriptor 0 read error: -22 [ 95.139162][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 95.148473][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.157679][ T9] usb 4-1: config 0 descriptor?? [ 95.163354][ T2066] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 95.163477][ T1545] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 95.181667][ T1545] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 95.192506][ T1545] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 95.202717][ T1545] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 95.213399][ T1545] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 95.223788][ T1545] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 95.234121][ T1545] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 95.244627][ T1545] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 95.254636][ T1545] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 95.266059][ T1545] usb 5-1: 5:0: failed to get current value for ch 2 (-22) [ 95.277564][ T1545] usb 5-1: 5:0: failed to get current value for ch 3 (-22) [ 95.289649][ T1545] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 95.301225][ T1545] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5) [ 95.311611][ T1545] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5) [ 95.314656][ T417] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 95.334920][ T1545] usb 5-1: USB disconnect, device number 29 [ 95.348885][ T1958] udevd[1958]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.365952][ T417] usb 1-1: device descriptor read/8, error -71 [ 95.379418][ T2066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.388565][ T2067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.389854][ T2066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.398058][ T2067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.413938][ T9] usb 4-1: USB disconnect, device number 27 [ 95.444360][ T31] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 95.464887][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 95.472007][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 95.480012][ T31] usb 2-1: can't read configurations, error -61 [ 95.495544][ T417] usb 1-1: device descriptor read/8, error -71 [ 95.604523][ T417] usb usb1-port1: unable to enumerate USB device [ 95.614543][ T31] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 95.635227][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 95.642460][ T31] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 95.650284][ T31] usb 2-1: can't read configurations, error -61 [ 95.656909][ T31] usb usb2-port1: unable to enumerate USB device [ 95.764400][ T67] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 95.894407][ T67] usb 5-1: device descriptor read/64, error -71 [ 95.935019][ T36] audit: type=1400 audit(1700000031.213:401): avc: denied { ioctl } for pid=2072 comm="syz.3.556" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x6f02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 95.960107][ T36] audit: type=1400 audit(1700000031.213:402): avc: denied { read } for pid=2072 comm="syz.3.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.980383][ T36] audit: type=1400 audit(1700000031.213:403): avc: denied { ioctl } for pid=2072 comm="syz.3.556" path="socket:[18473]" dev="sockfs" ino=18473 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 96.015390][ T2076] syzkaller0: entered promiscuous mode [ 96.020898][ T2076] syzkaller0: entered allmulticast mode [ 96.030172][ T36] audit: type=1400 audit(1700000031.303:404): avc: denied { relabelfrom } for pid=2075 comm="syz.3.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 96.050585][ T36] audit: type=1400 audit(1700000031.303:405): avc: denied { relabelto } for pid=2075 comm="syz.3.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 96.134747][ T67] usb 5-1: device descriptor read/64, error -71 [ 96.264384][ T31] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 96.374359][ T67] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 96.414360][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 96.420871][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.432219][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.442491][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 96.451899][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.460835][ T31] usb 4-1: config 0 descriptor?? [ 96.468650][ T31] hub 4-1:0.0: USB hub found [ 96.514343][ T67] usb 5-1: device descriptor read/64, error -71 [ 96.554346][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 96.667662][ T31] hub 4-1:0.0: 1 port detected [ 96.704320][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 96.711689][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.720249][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 96.729154][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 96.738601][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.747131][ T9] usb 1-1: Product: syz [ 96.752265][ T9] usb 1-1: Manufacturer: syz [ 96.757631][ T9] usb 1-1: SerialNumber: syz [ 96.764229][ T67] usb 5-1: device descriptor read/64, error -71 [ 96.874531][ T67] usb usb5-port1: attempt power cycle [ 97.214510][ T67] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 97.235553][ T67] usb 5-1: device descriptor read/8, error -71 [ 97.354654][ T417] hub 4-1:0.0: activate --> -90 [ 97.369932][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 97.377411][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 97.390219][ T9] usb 1-1: USB disconnect, device number 30 [ 97.397860][ T67] usb 5-1: device descriptor read/8, error -71 [ 97.654328][ T67] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 97.675303][ T67] usb 5-1: device descriptor read/8, error -71 [ 97.756964][ T31] usb 4-1: USB disconnect, device number 28 [ 97.784338][ T1545] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 97.805680][ T67] usb 5-1: device descriptor read/8, error -71 [ 97.914435][ T67] usb usb5-port1: unable to enumerate USB device [ 97.935600][ T1545] usb 2-1: descriptor type invalid, skip [ 97.941463][ T1545] usb 2-1: No LPM exit latency info found, disabling LPM. [ 97.949443][ T1545] usb 2-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 97.959819][ T1545] usb 2-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 97.971874][ T1545] usb 2-1: string descriptor 0 read error: -22 [ 97.978245][ T1545] usb 2-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=37.dd [ 97.987410][ T1545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.114311][ T417] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 98.197045][ T31] usb 2-1: USB disconnect, device number 32 [ 98.264383][ T417] usb 1-1: Using ep0 maxpacket: 32 [ 98.271622][ T417] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 98.280136][ T417] usb 1-1: config 0 has no interface number 0 [ 98.286586][ T417] usb 1-1: config 0 interface 184 has no altsetting 0 [ 98.295508][ T417] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 98.305002][ T417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.313290][ T417] usb 1-1: Product: syz [ 98.317791][ T417] usb 1-1: Manufacturer: syz [ 98.322524][ T417] usb 1-1: SerialNumber: syz [ 98.332584][ T417] usb 1-1: config 0 descriptor?? [ 98.340293][ T417] smsc75xx v1.0.0 [ 98.554871][ T36] audit: type=1400 audit(1700000033.833:406): avc: denied { bind } for pid=2093 comm="syz.4.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.584286][ T1545] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 98.734328][ T1545] usb 4-1: Using ep0 maxpacket: 32 [ 98.741431][ T1545] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.750136][ T1545] usb 4-1: config 0 has no interface number 0 [ 98.756414][ T1545] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.761362][ T36] audit: type=1400 audit(1700000034.033:407): avc: denied { remount } for pid=2099 comm="syz.1.566" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 98.771017][ T1545] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.798907][ T1545] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 98.808600][ T1545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.818077][ T1545] usb 4-1: config 0 descriptor?? [ 98.934275][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 98.941434][ T417] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 98.952885][ T417] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 99.025916][ T2090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.034912][ T2090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.043777][ T2090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.052887][ T2090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.061694][ T2090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.070671][ T2090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.079565][ T2090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.088101][ T31] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 99.089710][ T2090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.104468][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 99.112040][ T9] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 99.123814][ T9] usb 5-1: config 0 has no interface number 0 [ 99.130100][ T9] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 99.142421][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 99.151687][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.159808][ T9] usb 5-1: Product: syz [ 99.164034][ T9] usb 5-1: Manufacturer: syz [ 99.168817][ T9] usb 5-1: SerialNumber: syz [ 99.174600][ T9] usb 5-1: config 0 descriptor?? [ 99.179961][ T2095] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 99.254256][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 99.261280][ T31] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.272453][ T31] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.282570][ T31] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 99.295980][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 99.302682][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 99.312281][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.323240][ T31] usb 2-1: config 0 descriptor?? [ 99.388149][ T2094] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 99.398214][ T9] asix 5-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 99.521230][ T1545] uclogic 0003:28BD:0094.0012: failed retrieving string descriptor #100: -71 [ 99.530373][ T1545] uclogic 0003:28BD:0094.0012: failed retrieving pen parameters: -71 [ 99.539762][ T1545] uclogic 0003:28BD:0094.0012: pen probing failed: -71 [ 99.547237][ T1545] uclogic 0003:28BD:0094.0012: failed probing parameters: -71 [ 99.555038][ T1545] uclogic 0003:28BD:0094.0012: probe with driver uclogic failed with error -71 [ 99.566108][ T1545] usb 4-1: USB disconnect, device number 29 [ 99.568923][ T417] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 99.585825][ T417] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 99.596103][ T417] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 99.606316][ T9] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 99.607296][ T417] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 99.618139][ T9] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 99.637071][ T9] asix 5-1:0.188: probe with driver asix failed with error -32 [ 99.737928][ T2102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.747539][ T2102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.757600][ T31] hid (null): unknown global tag 0x82 [ 99.958527][ T31] usb 2-1: USB disconnect, device number 33 [ 100.060215][ T2107] No source specified [ 100.064888][ T2107] ./dev/sda1: Can't lookup blockdev [ 100.156238][ T2119] netlink: 'syz.3.570': attribute type 46 has an invalid length. [ 100.804403][ T31] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 100.828081][ T2140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.836964][ T2140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.951962][ T2142] loop5: detected capacity change from 0 to 7 [ 100.958247][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 100.969333][ T36] audit: type=1400 audit(1700000036.233:408): avc: denied { write } for pid=2141 comm="syz.3.577" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.006205][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 101.019675][ T31] usb 2-1: config 6 has an invalid interface number: 123 but max is 0 [ 101.022304][ T36] audit: type=1400 audit(1700000036.233:409): avc: denied { map } for pid=2141 comm="syz.3.577" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.028263][ T31] usb 2-1: config 6 has no interface number 0 [ 101.058433][ T31] usb 2-1: config 6 interface 123 has no altsetting 0 [ 101.069401][ T31] usb 2-1: New USB device found, idVendor=12d1, idProduct=142e, bcdDevice= 0.00 [ 101.079641][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.088123][ T31] usb 2-1: Product: syz [ 101.092909][ T31] usb 2-1: Manufacturer: syz [ 101.095119][ T2149] ./dev/sda1: Can't lookup blockdev [ 101.098222][ T31] usb 2-1: SerialNumber: syz [ 101.166469][ T2158] overlayfs: missing 'lowerdir' [ 101.317144][ T2132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.326322][ T2132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.337603][ T31] usb-storage 2-1:6.123: USB Mass Storage device detected [ 101.367007][ T31] uvcvideo 2-1:6.123: Found Unit with invalid ID 0 [ 101.376421][ T31] usb 2-1: Found UVC 0.00 device syz (12d1:142e) [ 101.382936][ T31] usb 2-1: No valid video chain found. [ 101.390003][ T31] usb 2-1: USB disconnect, device number 34 [ 101.424331][ T1545] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 101.562433][ T31] usb 5-1: USB disconnect, device number 34 [ 101.574442][ T1545] usb 4-1: Using ep0 maxpacket: 16 [ 101.581411][ T1545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.593955][ T1545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.603916][ T1545] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.618469][ T1545] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.627826][ T1545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.636871][ T1545] usb 4-1: config 0 descriptor?? [ 101.862216][ T2166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.585'. [ 101.871242][ T2166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 101.875323][ T417] usb 1-1: USB disconnect, device number 31 [ 101.895729][ T31] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 101.952971][ T2175] syz.1.587 (2175): /proc/2174/oom_adj is deprecated, please use /proc/2174/oom_score_adj instead. [ 102.015095][ T36] audit: type=1400 audit(1700000037.293:410): avc: denied { append } for pid=2176 comm="syz.0.588" name="ublkc0" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.038824][ T36] audit: type=1400 audit(1700000037.293:411): avc: denied { map } for pid=2174 comm="syz.1.587" path="/proc/512/oom_adj" dev="proc" ino=18027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 102.061522][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 102.070438][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.078902][ T31] usb 5-1: too many configurations: 22, using maximum allowed: 8 [ 102.082204][ T1545] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 102.088741][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 102.102370][ T31] usb 5-1: can't read configurations, error -61 [ 102.104812][ T1545] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 102.116081][ T1545] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 102.123390][ T1545] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 102.132879][ T1545] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 102.140396][ T1545] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 102.148190][ T1545] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 102.156543][ T1545] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 102.163934][ T1545] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 102.173515][ T1545] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0014/input/input16 [ 102.188795][ T1545] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 102.234312][ T31] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 102.325996][ T1545] usb 4-1: USB disconnect, device number 30 [ 102.384313][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 102.392981][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.401214][ T31] usb 5-1: too many configurations: 22, using maximum allowed: 8 [ 102.409050][ T417] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 102.418429][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 102.426133][ T31] usb 5-1: can't read configurations, error -61 [ 102.432645][ T31] usb usb5-port1: attempt power cycle [ 102.564380][ T417] usb 1-1: Using ep0 maxpacket: 32 [ 102.571628][ T417] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.582933][ T417] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 102.596040][ T417] usb 1-1: config 0 interface 0 has no altsetting 0 [ 102.602696][ T417] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 102.611867][ T417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.620675][ T417] usb 1-1: config 0 descriptor?? [ 102.774351][ T31] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 102.797600][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 102.804562][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.813318][ T31] usb 5-1: too many configurations: 22, using maximum allowed: 8 [ 102.822460][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 102.830395][ T31] usb 5-1: can't read configurations, error -61 [ 102.857799][ T2191] overlayfs: missing 'lowerdir' [ 102.872489][ T2190] No source specified [ 102.880511][ T36] audit: type=1400 audit(1700000038.153:412): avc: denied { connect } for pid=2185 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.964338][ T31] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 102.984682][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 102.991161][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.999417][ T31] usb 5-1: too many configurations: 22, using maximum allowed: 8 [ 103.008427][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 103.017037][ T31] usb 5-1: can't read configurations, error -61 [ 103.023649][ T31] usb usb5-port1: unable to enumerate USB device [ 103.058893][ T417] uclogic 0003:5543:0004.0015: unknown main item tag 0x0 [ 103.066250][ T417] uclogic 0003:5543:0004.0015: collection stack underflow [ 103.073425][ T417] uclogic 0003:5543:0004.0015: item 0 4 0 12 parsing failed [ 103.081035][ T417] uclogic 0003:5543:0004.0015: parse failed [ 103.087072][ T417] uclogic 0003:5543:0004.0015: probe with driver uclogic failed with error -22 [ 103.683956][ T36] audit: type=1400 audit(1700000038.953:413): avc: denied { mounton } for pid=2207 comm="syz.1.596" path="/syzcgroup/unified/syz1" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 103.684731][ T2208] 9pnet_fd: p9_fd_create_unix (2208): problem connecting socket: ./cgroup/file0: -2 [ 103.765439][ T2210] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 103.945639][ T2224] overlayfs: missing 'lowerdir' [ 103.966264][ T2226] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 103.975440][ T36] audit: type=1400 audit(1700000039.243:414): avc: denied { mounton } for pid=2225 comm="syz.1.602" path="/176/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 103.998952][ T36] audit: type=1400 audit(1700000039.273:415): avc: denied { accept } for pid=2225 comm="syz.1.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 104.037125][ T2228] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 104.573906][ T36] audit: type=1400 audit(1700000039.843:416): avc: denied { read write } for pid=2238 comm="syz.3.606" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 104.599354][ T36] audit: type=1400 audit(1700000039.843:417): avc: denied { open } for pid=2238 comm="syz.3.606" path="/155/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 104.967854][ T2256] overlayfs: missing 'lowerdir' [ 105.220493][ T1545] usb 1-1: USB disconnect, device number 32 [ 105.226794][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 105.395387][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.424218][ T9] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.437651][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 105.444554][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 105.453955][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.464830][ T9] usb 5-1: config 0 descriptor?? [ 105.679467][ T2258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.690742][ T2258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.882713][ T2273] netlink: 'syz.3.616': attribute type 10 has an invalid length. [ 105.894278][ T2273] netlink: 'syz.3.616': attribute type 17 has an invalid length. [ 105.910267][ T2273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.616'. [ 105.919809][ T2273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.616'. [ 105.930143][ T9] hid-picolcd 0003:04D8:F002.0016: ignoring exceeding usage max [ 105.943302][ T9] hid-picolcd 0003:04D8:F002.0016: unbalanced collection at end of report description [ 105.964493][ T9] hid-picolcd 0003:04D8:F002.0016: device report parse failed [ 105.974551][ T2275] loop3: detected capacity change from 0 to 16384 [ 105.993198][ T9] hid-picolcd 0003:04D8:F002.0016: probe with driver hid-picolcd failed with error -22 [ 106.112103][ T417] usb 5-1: USB disconnect, device number 39 [ 106.129235][ T2277] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3276594798 (26212758384 ns) > initial count (15403876168 ns). Using initial count to start timer. [ 106.164251][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 106.164271][ T36] audit: type=1400 audit(1700000041.433:425): avc: denied { remount } for pid=2279 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 106.402366][ T2288] overlayfs: missing 'lowerdir' [ 106.434281][ T67] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 106.600805][ T67] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 106.614255][ T67] usb 4-1: config 0 has no interface number 0 [ 106.620438][ T67] usb 4-1: too many endpoints for config 0 interface 231 altsetting 0: 116, using maximum allowed: 30 [ 106.654274][ T67] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 106.665752][ T36] audit: type=1400 audit(1700000041.923:426): avc: denied { unmount } for pid=880 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 106.695793][ T67] usb 4-1: config 0 interface 231 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 116 [ 106.715329][ T2304] tmpfs: Too few inodes for current use [ 106.725810][ T67] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 106.731900][ T2300] tipc: Enabled bearer , priority 10 [ 106.744236][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.752312][ T67] usb 4-1: Product: syz [ 106.752564][ T2303] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 106.774265][ T67] usb 4-1: Manufacturer: syz [ 106.780957][ T67] usb 4-1: SerialNumber: syz [ 106.795443][ T67] usb 4-1: config 0 descriptor?? [ 106.802984][ T2280] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 106.816999][ T67] hub 4-1:0.231: bad descriptor, ignoring hub [ 106.834332][ T67] hub 4-1:0.231: probe with driver hub failed with error -5 [ 106.847763][ T67] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, c2:1b:5d:8a:2d:20 [ 106.911024][ T36] audit: type=1400 audit(1700000042.183:427): avc: denied { search } for pid=150 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.957433][ T36] audit: type=1400 audit(1700000042.183:428): avc: denied { read } for pid=150 comm="dhcpcd" name="n16" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.004261][ T36] audit: type=1400 audit(1700000042.183:429): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.042630][ T36] audit: type=1400 audit(1700000042.183:430): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1875 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.145782][ T36] audit: type=1400 audit(1700000042.313:431): avc: denied { read } for pid=2314 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.174424][ T10] usb 4-1: USB disconnect, device number 31 [ 107.188970][ T36] audit: type=1400 audit(1700000042.313:432): avc: denied { open } for pid=2314 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.194693][ T10] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 107.252975][ T36] audit: type=1400 audit(1700000042.313:433): avc: denied { getattr } for pid=2314 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.286617][ T36] audit: type=1400 audit(1700000042.553:434): avc: denied { read write } for pid=2310 comm="syz.0.628" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.310372][ T2324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.317657][ T2324] IPv6: NLM_F_CREATE should be set when creating new route [ 107.325288][ T2324] IPv6: NLM_F_CREATE should be set when creating new route [ 107.338195][ T2327] bpf: Bad value for 'gid' [ 107.524517][ T417] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 107.675561][ T417] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 107.684354][ T417] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.701793][ T417] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 107.712776][ T417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.722318][ T417] usb 1-1: Product: syz [ 107.728202][ T417] usb 1-1: Manufacturer: syz [ 107.734133][ T417] usb 1-1: SerialNumber: syz [ 107.743483][ T417] rtl8150 1-1:1.0: couldn't find required endpoints [ 107.751173][ T417] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 107.797484][ T2344] loop9: detected capacity change from 0 to 16384 [ 107.884382][ T2347] overlayfs: missing 'lowerdir' [ 107.898329][ T2345] loop9: detected capacity change from 16384 to 0 [ 108.001751][ T417] usb 1-1: USB disconnect, device number 33 [ 108.172288][ T67] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 108.324245][ T67] usb 5-1: Using ep0 maxpacket: 32 [ 108.330882][ T67] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.342421][ T67] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.352614][ T67] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.361994][ T67] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.374630][ T67] usb 5-1: config 0 descriptor?? [ 108.382773][ T67] hub 5-1:0.0: USB hub found [ 108.581866][ T67] hub 5-1:0.0: 1 port detected [ 109.104296][ T775] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 109.183961][ T67] hub 5-1:0.0: activate --> -90 [ 109.244364][ T775] usb 4-1: device descriptor read/64, error -71 [ 109.387522][ T2349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.414475][ T2349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.480293][ T2369] overlay: Bad value for 'xino' [ 109.504360][ T775] usb 4-1: device descriptor read/64, error -71 [ 109.764242][ T775] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 109.904255][ T775] usb 4-1: device descriptor read/64, error -71 [ 110.164257][ T775] usb 4-1: device descriptor read/64, error -71 [ 110.285006][ T775] usb usb4-port1: attempt power cycle [ 110.318971][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.325572][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.331991][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.341530][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.348244][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.355831][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.362230][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.369245][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.376376][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.383156][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.389946][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.396638][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.403357][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.410535][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.417388][ T67] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 110.424729][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.431408][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.438105][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.444708][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.451235][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.458079][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.468634][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.475249][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.482271][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.489073][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.496087][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.502508][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.509340][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.515987][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.522546][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.529252][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.535876][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.542328][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.549094][ T2376] overlayfs: failed to resolve './mydev': -2 [ 110.634227][ T775] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 110.642882][ T2385] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 110.665394][ T775] usb 4-1: device descriptor read/8, error -71 [ 110.755392][ T2385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'. [ 110.767998][ T2385] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.780832][ T2385] bridge_slave_0 (unregistering): left allmulticast mode [ 110.790713][ T2385] bridge_slave_0 (unregistering): left promiscuous mode [ 110.807672][ T2385] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.815776][ T775] usb 4-1: device descriptor read/8, error -71 [ 111.054272][ T775] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 111.075278][ T775] usb 4-1: device descriptor read/8, error -71 [ 111.077636][ T10] usb 5-1: USB disconnect, device number 40 [ 111.205453][ T775] usb 4-1: device descriptor read/8, error -71 [ 111.314374][ T775] usb usb4-port1: unable to enumerate USB device [ 111.724237][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 111.885430][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.904651][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.923622][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 111.937761][ T2407] overlayfs: missing 'workdir' [ 111.942718][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 111.954301][ T10] usb 1-1: SerialNumber: syz [ 112.094324][ T775] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 112.174626][ T10] usb 1-1: skipping empty audio interface (v1) [ 112.185635][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 112.202127][ T10] usb 1-1: USB disconnect, device number 34 [ 112.219022][ T1958] udevd[1958]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 112.265525][ T775] usb 5-1: config index 0 descriptor too short (expected 214, got 36) [ 112.276694][ T775] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.296076][ T775] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 112.305703][ T775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.313841][ T775] usb 5-1: Product: syz [ 112.318500][ T775] usb 5-1: Manufacturer: syz [ 112.323139][ T775] usb 5-1: SerialNumber: syz [ 112.330897][ T775] usb 5-1: config 0 descriptor?? [ 112.338948][ T775] dm9601 5-1:0.0: probe with driver dm9601 failed with error -22 [ 112.458963][ T2427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 112.544822][ T775] usb 5-1: USB disconnect, device number 41 [ 112.834292][ T67] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 112.934355][ T417] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 112.984263][ T67] usb 4-1: Using ep0 maxpacket: 8 [ 113.005061][ T67] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 113.014099][ T67] usb 4-1: config 179 has no interface number 0 [ 113.034259][ T67] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 113.045638][ T67] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 113.057586][ T67] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 113.076892][ T67] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 113.088456][ T67] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 113.101868][ T67] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 113.111149][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.120025][ T417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.134304][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 113.134323][ T36] audit: type=1400 audit(1700000048.403:449): avc: denied { setattr } for pid=2436 comm="syz.4.658" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 113.145746][ T417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.164141][ T2431] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.216498][ T417] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 113.234316][ T417] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 113.242455][ T417] usb 1-1: Manufacturer: syz [ 113.255389][ T417] usb 1-1: config 0 descriptor?? [ 113.267428][ T2442] overlayfs: missing 'workdir' [ 113.394358][ T67] usb 4-1: USB disconnect, device number 36 [ 113.394404][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 113.408916][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 113.417915][ T2446] mmap: syz.4.661 (2446): VmData 29204480 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data. [ 113.457429][ T2452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.467733][ T2452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.694247][ T775] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 113.874237][ T775] usb 5-1: Using ep0 maxpacket: 32 [ 113.880898][ T775] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 113.889646][ T775] usb 5-1: config 0 has no interface number 0 [ 113.896465][ T775] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 113.908555][ T775] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 113.918216][ T775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.926821][ T775] usb 5-1: Product: syz [ 113.931269][ T775] usb 5-1: Manufacturer: syz [ 113.936277][ T775] usb 5-1: SerialNumber: syz [ 113.951402][ T775] usb 5-1: config 0 descriptor?? [ 113.958004][ T2451] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 114.071619][ T417] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0017/input/input17 [ 114.117175][ T417] input: syz Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0017/input/input18 [ 114.135439][ T417] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0017/input/input19 [ 114.165880][ T417] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0017/input/input20 [ 114.185389][ T775] asix 5-1:0.188: probe with driver asix failed with error -71 [ 114.206549][ T417] uclogic 0003:256C:006D.0017: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 114.220878][ T775] usb 5-1: USB disconnect, device number 42 [ 114.279246][ T36] audit: type=1400 audit(1700000049.543:450): avc: denied { execute } for pid=2434 comm="syz.0.657" name="file1" dev="tmpfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.281930][ T417] usb 1-1: USB disconnect, device number 35 [ 114.341828][ T36] audit: type=1400 audit(1700000049.553:451): avc: denied { execute_no_trans } for pid=2434 comm="syz.0.657" path="/167/file1" dev="tmpfs" ino=1009 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 114.448269][ T2469] kvm: kvm [2468]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 114.457171][ T2469] kvm: kvm [2468]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 114.481147][ T2469] kvm_intel: kvm [2468]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x1 [ 114.494027][ T2469] kvm: kvm [2468]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x1 [ 114.504842][ T2469] kvm: kvm [2468]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x1 [ 114.822670][ T2477] overlayfs: missing 'workdir' [ 114.874227][ T10] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 114.904834][ T36] audit: type=1400 audit(1700000050.183:452): avc: denied { ioctl } for pid=2478 comm="syz.0.670" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.972507][ T2484] FAULT_INJECTION: forcing a failure. [ 114.972507][ T2484] name failslab, interval 1, probability 0, space 0, times 0 [ 115.004224][ T2484] CPU: 0 UID: 0 PID: 2484 Comm: syz.0.671 Not tainted syzkaller #0 4c932c043eb01f9e3eebd51d42a946ef7c91072c [ 115.004268][ T2484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 115.004285][ T2484] Call Trace: [ 115.004293][ T2484] [ 115.004302][ T2484] __dump_stack+0x21/0x30 [ 115.004331][ T2484] dump_stack_lvl+0x140/0x1c0 [ 115.004355][ T2484] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.004379][ T2484] ? stack_depot_save_flags+0x38/0x800 [ 115.004407][ T2484] dump_stack+0x19/0x20 [ 115.004429][ T2484] should_fail_ex+0x3c2/0x510 [ 115.004453][ T2484] should_failslab+0xac/0x100 [ 115.004479][ T2484] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 115.004517][ T2484] ? ovl_parse_layer+0x90/0xe70 [ 115.004543][ T2484] kstrdup+0x4d/0x130 [ 115.004572][ T2484] ? ovl_parse_layer+0x83/0xe70 [ 115.004596][ T2484] ovl_parse_layer+0x90/0xe70 [ 115.004621][ T2484] ? fs_param_is_string+0xab/0x1d0 [ 115.004654][ T2484] ? ovl_parse_param_lowerdir+0x6f0/0x6f0 [ 115.004682][ T2484] ovl_parse_param+0x5ef/0x8c0 [ 115.004706][ T2484] ? __cfi_ovl_parse_param+0x10/0x10 [ 115.004730][ T2484] ? static_key_count+0x45/0x70 [ 115.004757][ T2484] ? security_fs_context_parse_param+0x27b/0x2a0 [ 115.004788][ T2484] vfs_parse_fs_param+0x1f2/0x470 [ 115.004816][ T2484] vfs_parse_monolithic_sep+0x279/0x360 [ 115.004845][ T2484] ? __kmalloc_cache_noprof+0x23c/0x470 [ 115.004881][ T2484] ? __cfi_ovl_next_opt+0x10/0x10 [ 115.004905][ T2484] ? __cfi_vfs_parse_monolithic_sep+0x10/0x10 [ 115.004934][ T2484] ? ovl_init_fs_context+0x192/0x790 [ 115.004958][ T2484] ? alloc_fs_context+0x5dd/0x800 [ 115.004986][ T2484] ovl_parse_monolithic+0x28/0x40 [ 115.005010][ T2484] parse_monolithic_mount_data+0x7f/0x90 [ 115.005042][ T2484] do_new_mount+0x222/0xb40 [ 115.005077][ T2484] ? security_capable+0x44/0x130 [ 115.005102][ T2484] path_mount+0x66a/0xff0 [ 115.005146][ T2484] ? putname+0x113/0x150 [ 115.005173][ T2484] __se_sys_mount+0x2bf/0x480 [ 115.005196][ T2484] ? __x64_sys_mount+0xf0/0xf0 [ 115.005219][ T2484] ? __kasan_check_write+0x18/0x20 [ 115.005254][ T2484] ? fpregs_restore_userregs+0x11c/0x260 [ 115.005290][ T2484] __x64_sys_mount+0xc3/0xf0 [ 115.005313][ T2484] x64_sys_call+0x2021/0x2ee0 [ 115.005339][ T2484] do_syscall_64+0x57/0xf0 [ 115.005366][ T2484] ? clear_bhb_loop+0x50/0xa0 [ 115.005401][ T2484] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.005435][ T2484] RIP: 0033:0x7f474a7a94d9 [ 115.005456][ T2484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.005476][ T2484] RSP: 002b:00007f474b592028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.005502][ T2484] RAX: ffffffffffffffda RBX: 00007f474aa25fa0 RCX: 00007f474a7a94d9 [ 115.005521][ T2484] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000000000000 [ 115.005537][ T2484] RBP: 00007f474a83804e R08: 0000200000000300 R09: 0000000000000000 [ 115.005560][ T2484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.005575][ T2484] R13: 00007f474aa26038 R14: 00007f474aa25fa0 R15: 00007ffd161d5078 [ 115.005597][ T2484] [ 115.335265][ T10] usb 4-1: config 1 has an invalid interface number: 5 but max is 2 [ 115.343347][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.353532][ T10] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 115.362922][ T10] usb 4-1: config 1 has no interface number 3 [ 115.369127][ T10] usb 4-1: config 1 interface 1 has no altsetting 0 [ 115.379034][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 115.388334][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.396428][ T10] usb 4-1: Product: syz [ 115.400678][ T10] usb 4-1: Manufacturer: syz [ 115.405359][ T10] usb 4-1: SerialNumber: syz [ 115.620903][ T2473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.632721][ T417] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 115.659421][ T2473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.692467][ T10] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 115.700078][ T10] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 115.706949][ T10] usb 4-1: selecting invalid altsetting 0 [ 115.713794][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 115.726012][ T10] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 115.733983][ T10] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 115.740304][ T10] usb 4-1: selecting invalid altsetting 0 [ 115.746305][ T10] snd-usb-audio 4-1:1.5: probe with driver snd-usb-audio failed with error -2 [ 115.764273][ T10] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 115.771858][ T10] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 115.778118][ T10] usb 4-1: selecting invalid altsetting 0 [ 115.784113][ T10] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 115.794855][ T10] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 115.802308][ T10] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 115.808566][ T10] usb 4-1: selecting invalid altsetting 0 [ 115.824623][ T10] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 115.835114][ T10] usb 4-1: USB disconnect, device number 37 [ 115.843397][ T417] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x1 is Bulk; changing to Interrupt [ 115.854686][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.870845][ T417] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.884707][ T417] usb 1-1: config 1 interface 0 has no altsetting 0 [ 116.496120][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 116.655649][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 116.665935][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 116.679987][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.689547][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.699073][ T9] usb 4-1: SerialNumber: syz [ 116.705510][ T2490] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.913736][ T2490] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 117.379093][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 117.391300][ T9] usb 4-1: USB disconnect, device number 38 [ 117.855021][ T2494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 117.885910][ T36] audit: type=1400 audit(1700000053.163:453): avc: denied { create } for pid=2493 comm="syz.4.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.184414][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 118.346151][ T9] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 118.358566][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.368907][ T9] usb 4-1: config 0 has no interfaces? [ 118.374817][ T9] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 118.387370][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.399833][ T9] usb 4-1: config 0 descriptor?? [ 118.400203][ T417] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 118.424463][ T2503] overlayfs: missing 'lowerdir' [ 118.434261][ T417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.460899][ T417] usb 1-1: Product: 甯玧⧃䥠濭左嗸쥢㡢ꌳⲈ蔠ｎ㻍苪먀玧搒㙕卅塑ੋ㇓ﻫ寯 [ 118.491246][ T417] usb 1-1: can't set config #1, error -71 [ 118.504771][ T417] usb 1-1: USB disconnect, device number 36 [ 118.724245][ T9] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 118.778463][ T1545] usb 4-1: USB disconnect, device number 39 [ 118.787166][ T2501] overlay: ./file1 is not a directory [ 118.885397][ T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 118.899501][ T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.909805][ T9] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.914555][ T417] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 118.924307][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.937600][ T9] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 118.947392][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.960394][ T9] usb 5-1: config 0 descriptor?? [ 119.108663][ T417] usb 1-1: config 1 has an invalid interface number: 93 but max is 0 [ 119.117761][ T417] usb 1-1: config 1 has no interface number 0 [ 119.123914][ T417] usb 1-1: config 1 interface 93 has no altsetting 0 [ 119.130810][ T417] usb 1-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02 [ 119.140211][ T417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.377069][ T417] usb 1-1: string descriptor 0 read error: -71 [ 119.383796][ T417] gl620a 1-1:1.93: probe with driver gl620a failed with error -22 [ 119.385120][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 119.401316][ T417] usb 1-1: USB disconnect, device number 37 [ 119.425523][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 119.448451][ T9] usb 5-1: USB disconnect, device number 43 [ 119.537723][ T2534] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.544953][ T2534] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.552476][ T2534] bridge_slave_0: entered allmulticast mode [ 119.559039][ T2534] bridge_slave_0: entered promiscuous mode [ 119.565939][ T2534] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.573023][ T2534] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.580448][ T2534] bridge_slave_1: entered allmulticast mode [ 119.587698][ T2534] bridge_slave_1: entered promiscuous mode [ 119.598475][ T2050] bridge_slave_1: left allmulticast mode [ 119.604450][ T2050] bridge_slave_1: left promiscuous mode [ 119.610172][ T2050] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.618361][ T2050] bridge_slave_0: left allmulticast mode [ 119.624059][ T2050] bridge_slave_0: left promiscuous mode [ 119.630236][ T2050] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.738791][ T2050] veth0_vlan: left promiscuous mode [ 119.788070][ T2534] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.795203][ T2534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.802513][ T2534] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.809657][ T2534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.832956][ T2045] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.840615][ T2045] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.852859][ T589] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.860384][ T589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.869835][ T2045] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.877873][ T2045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.913370][ T2539] overlayfs: missing 'lowerdir' [ 119.920536][ T2534] veth0_vlan: entered promiscuous mode [ 119.936433][ T2534] veth1_macvtap: entered promiscuous mode [ 120.238104][ T36] audit: type=1400 audit(1700000055.513:454): avc: denied { getopt } for pid=2561 comm="syz.0.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.369426][ T2568] FAULT_INJECTION: forcing a failure. [ 120.369426][ T2568] name failslab, interval 1, probability 0, space 0, times 0 [ 120.388559][ T2569] random: crng reseeded on system resumption [ 120.395289][ T2568] CPU: 1 UID: 0 PID: 2568 Comm: syz.0.694 Not tainted syzkaller #0 4c932c043eb01f9e3eebd51d42a946ef7c91072c [ 120.395330][ T2568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 120.395345][ T2568] Call Trace: [ 120.395352][ T2568] [ 120.395361][ T2568] __dump_stack+0x21/0x30 [ 120.395389][ T2568] dump_stack_lvl+0x140/0x1c0 [ 120.395411][ T2568] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.395433][ T2568] dump_stack+0x19/0x20 [ 120.395452][ T2568] should_fail_ex+0x3c2/0x510 [ 120.395483][ T2568] should_failslab+0xac/0x100 [ 120.395510][ T2568] kmem_cache_alloc_noprof+0x42/0x410 [ 120.395546][ T2568] ? posix_lock_inode+0x37b/0x4040 [ 120.395586][ T2568] posix_lock_inode+0x37b/0x4040 [ 120.395614][ T2568] ? posix_lock_file+0x70/0x70 [ 120.395638][ T2568] ? bpf_lsm_file_lock+0xd/0x20 [ 120.395656][ T2568] fcntl_setlk+0x9ca/0x10a0 [ 120.395673][ T2568] ? avc_has_perm_noaudit+0x26b/0x360 [ 120.395694][ T2568] ? __cfi_fcntl_setlk+0x10/0x10 [ 120.395709][ T2568] ? __cfi_avc_has_perm+0x10/0x10 [ 120.395731][ T2568] ? __kasan_check_write+0x18/0x20 [ 120.395757][ T2568] do_fcntl+0x8c2/0x1580 [ 120.395774][ T2568] ? __cfi_selinux_file_fcntl+0x10/0x10 [ 120.395790][ T2568] ? check_fcntl_cmd+0xb0/0xb0 [ 120.395807][ T2568] ? __se_sys_futex+0x13c/0x320 [ 120.395827][ T2568] ? bpf_lsm_file_fcntl+0xd/0x20 [ 120.395845][ T2568] ? security_file_fcntl+0x3e/0x110 [ 120.395869][ T2568] __se_sys_fcntl+0xe4/0x180 [ 120.395885][ T2568] __x64_sys_fcntl+0x7f/0xa0 [ 120.395900][ T2568] x64_sys_call+0x1cb3/0x2ee0 [ 120.395945][ T2568] do_syscall_64+0x57/0xf0 [ 120.395971][ T2568] ? clear_bhb_loop+0x50/0xa0 [ 120.396005][ T2568] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.396036][ T2568] RIP: 0033:0x7f474a7a94d9 [ 120.396056][ T2568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.396075][ T2568] RSP: 002b:00007f474b592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 120.396103][ T2568] RAX: ffffffffffffffda RBX: 00007f474aa25fa0 RCX: 00007f474a7a94d9 [ 120.396116][ T2568] RDX: 0000000000000000 RSI: 0000000000000026 RDI: 0000000000000006 [ 120.396127][ T2568] RBP: 00007f474a83804e R08: 0000000000000000 R09: 0000000000000000 [ 120.396138][ T2568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.396148][ T2568] R13: 00007f474aa26038 R14: 00007f474aa25fa0 R15: 00007ffd161d5078 [ 120.396184][ T2568] [ 120.651911][ T36] audit: type=1400 audit(1700000055.923:455): avc: denied { execute } for pid=2567 comm="syz.4.695" path="/100/dev/sda" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 120.691926][ T2578] overlayfs: missing 'lowerdir' [ 120.832096][ T2583] netlink: 'syz.5.699': attribute type 12 has an invalid length. [ 121.014340][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 121.104413][ T67] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 121.134324][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 121.177778][ T9] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 121.187012][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.195102][ T9] usb 1-1: Product: syz [ 121.199388][ T9] usb 1-1: Manufacturer: syz [ 121.204003][ T9] usb 1-1: SerialNumber: syz [ 121.211444][ T9] usb 1-1: UAS is ignored for this device, using usb-storage instead [ 121.219958][ T9] usb 1-1: UAS is ignored for this device, using usb-storage instead [ 121.228229][ T9] usb-storage 1-1:1.0: USB Mass Storage device detected [ 121.236326][ T9] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 121.244643][ T9] scsi host1: usb-storage 1-1:1.0 [ 121.254466][ T67] usb 6-1: Using ep0 maxpacket: 32 [ 121.261916][ T67] usb 6-1: unable to get BOS descriptor or descriptor too short [ 121.270996][ T67] usb 6-1: config 178 has an invalid interface number: 183 but max is 0 [ 121.279886][ T67] usb 6-1: config 178 contains an unexpected descriptor of type 0x2, skipping [ 121.289338][ T67] usb 6-1: config 178 has no interface number 0 [ 121.294346][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 121.296809][ T67] usb 6-1: config 178 interface 183 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 121.303724][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.318521][ T67] usb 6-1: New USB device found, idVendor=0582, idProduct=b7a6, bcdDevice=10.27 [ 121.323062][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 121.332467][ T67] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.341901][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 121.351103][ T67] usb 6-1: Product: syz [ 121.360273][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 121.364812][ T67] usb 6-1: Manufacturer: syz [ 121.378080][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.383276][ T67] usb 6-1: SerialNumber: syz [ 121.391172][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 121.401823][ T2583] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 121.408432][ T10] usb 4-1: SerialNumber: syz [ 121.416574][ T416] usb 1-1: USB disconnect, device number 38 [ 121.425194][ T2590] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 121.433479][ T2590] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 121.441616][ T10] hub 4-1:1.0: bad descriptor, ignoring hub [ 121.448105][ T10] hub 4-1:1.0: probe with driver hub failed with error -5 [ 121.617258][ T36] audit: type=1400 audit(1700000056.893:456): avc: denied { read } for pid=2582 comm="syz.5.699" name="/" dev="configfs" ino=2308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.618830][ T2583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.699'. [ 121.639652][ T36] audit: type=1400 audit(1700000056.893:457): avc: denied { open } for pid=2582 comm="syz.5.699" path="/" dev="configfs" ino=2308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.657070][ T2583] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 121.679273][ T2590] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 121.688168][ T2590] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 121.688244][ T2605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.706219][ T2605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.719701][ T67] usb 6-1: USB disconnect, device number 2 [ 121.731479][ T10] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 121.736594][ T1958] udevd[1958]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:178.183/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 121.984994][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 68! [ 121.995996][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 01! [ 122.003897][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 47! [ 122.012272][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification db! [ 122.019975][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 81! [ 122.027734][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 5b! [ 122.035719][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification cb! [ 122.043282][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 37! [ 122.050711][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 91! [ 122.058586][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 8b! [ 122.066117][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 7c! [ 122.073976][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 37! [ 122.081662][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification bb! [ 122.089137][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 11! [ 122.096546][ C0] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification d6! [ 122.284250][ T67] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 122.309454][ T416] usb 4-1: USB disconnect, device number 40 [ 122.317916][ T416] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 122.375935][ T2646] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 122.384798][ T2646] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 122.446184][ T67] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 122.457301][ T67] usb 1-1: config 1 interface 0 has no altsetting 0 [ 122.465589][ T67] usb 1-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.40 [ 122.474848][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.482909][ T67] usb 1-1: Product: Т [ 122.487149][ T67] usb 1-1: Manufacturer: ᰁ [ 122.491895][ T67] usb 1-1: SerialNumber: ю [ 122.500890][ T2629] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 122.644344][ T417] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 122.709383][ T2630] FAULT_INJECTION: forcing a failure. [ 122.709383][ T2630] name fail_futex, interval 1, probability 0, space 0, times 0 [ 122.722312][ T2630] CPU: 0 UID: 0 PID: 2630 Comm: syz.0.708 Not tainted syzkaller #0 4c932c043eb01f9e3eebd51d42a946ef7c91072c [ 122.722348][ T2630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 122.722364][ T2630] Call Trace: [ 122.722371][ T2630] [ 122.722379][ T2630] __dump_stack+0x21/0x30 [ 122.722406][ T2630] dump_stack_lvl+0x140/0x1c0 [ 122.722428][ T2630] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.722452][ T2630] dump_stack+0x19/0x20 [ 122.722473][ T2630] should_fail_ex+0x3c2/0x510 [ 122.722494][ T2630] should_fail+0xf/0x20 [ 122.722512][ T2630] get_futex_key+0x178/0x940 [ 122.722537][ T2630] ? kasan_save_track+0x3e/0x80 [ 122.722558][ T2630] ? __cfi_get_futex_key+0x10/0x10 [ 122.722579][ T2630] ? do_sys_openat2+0x170/0x1d0 [ 122.722605][ T2630] ? x64_sys_call+0xe69/0x2ee0 [ 122.722627][ T2630] ? do_syscall_64+0x57/0xf0 [ 122.722660][ T2630] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.722695][ T2630] futex_wake+0x150/0x950 [ 122.722725][ T2630] ? __cfi_futex_wake+0x10/0x10 [ 122.722757][ T2630] do_futex+0x37d/0x510 [ 122.722781][ T2630] ? __cfi_do_futex+0x10/0x10 [ 122.722805][ T2630] __se_sys_futex+0x13c/0x320 [ 122.722825][ T2630] ? fput+0x1a4/0x230 [ 122.722851][ T2630] ? __x64_sys_futex+0x110/0x110 [ 122.722876][ T2630] __x64_sys_futex+0xe9/0x110 [ 122.722900][ T2630] x64_sys_call+0x227f/0x2ee0 [ 122.722923][ T2630] do_syscall_64+0x57/0xf0 [ 122.722947][ T2630] ? clear_bhb_loop+0x50/0xa0 [ 122.722980][ T2630] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.723012][ T2630] RIP: 0033:0x7f474a7a94d9 [ 122.723032][ T2630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.723051][ T2630] RSP: 002b:00007f47491f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.723075][ T2630] RAX: ffffffffffffffda RBX: 00007f474aa26098 RCX: 00007f474a7a94d9 [ 122.723091][ T2630] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f474aa2609c [ 122.723106][ T2630] RBP: 00007f474aa26090 R08: 4000000000000000 R09: 0000000000000000 [ 122.723121][ T2630] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 122.723135][ T2630] R13: 00007f474aa26128 R14: 00007ffd161d4f90 R15: 00007ffd161d5078 [ 122.723154][ T2630] [ 122.776946][ T2659] fuse: Bad value for 'fd' [ 122.953120][ T417] usb 6-1: Using ep0 maxpacket: 8 [ 122.963699][ T417] usb 6-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 122.975411][ T67] usbhid 1-1:1.0: can't add hid device: -71 [ 122.981524][ T67] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 122.989541][ T417] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.000838][ T67] usb 1-1: USB disconnect, device number 39 [ 123.009306][ T417] usb 6-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 123.024991][ T417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.035157][ T417] usb 6-1: config 0 descriptor?? [ 123.114327][ T2677] kvm: kvm [2672]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 123.123816][ T2677] kvm: kvm [2672]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 123.154360][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 123.211089][ T36] audit: type=1400 audit(1700000058.483:458): avc: denied { write } for pid=880 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 123.233497][ T36] audit: type=1400 audit(1700000058.483:459): avc: denied { setattr } for pid=880 comm="syz-executor" path="/109/trace/instances" dev="tracefs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 123.316014][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.329015][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 123.338194][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.346449][ T9] usb 4-1: Product: syz [ 123.350696][ T9] usb 4-1: Manufacturer: syz [ 123.355459][ T9] usb 4-1: SerialNumber: syz [ 123.372633][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 123.378891][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 123.527068][ T2683] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.534344][ T2683] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.541599][ T2683] bridge_slave_0: entered allmulticast mode [ 123.548890][ T2683] bridge_slave_0: entered promiscuous mode [ 123.556070][ T2683] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.563249][ T2683] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.570812][ T2683] bridge_slave_1: entered allmulticast mode [ 123.576613][ C0] cdc_wdm 4-1:1.0: unknown notification 54 received: index 3918 len 3280 [ 123.577498][ T36] audit: type=1400 audit(1700000058.843:460): avc: denied { read write } for pid=2660 comm="syz.3.715" name="cdc-wdm0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 123.585661][ C0] cdc_wdm 4-1:1.0: unknown notification 27 received: index 63697 len 62392 [ 123.610598][ T2683] bridge_slave_1: entered promiscuous mode [ 123.618651][ C0] cdc_wdm 4-1:1.0: unknown notification 14 received: index 47787 len 37369 [ 123.632880][ C0] cdc_wdm 4-1:1.0: unknown notification 227 received: index 18091 len 36974 [ 123.639648][ T36] audit: type=1400 audit(1700000058.853:461): avc: denied { open } for pid=2660 comm="syz.3.715" path="/dev/cdc-wdm0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 123.644410][ C0] cdc_wdm 4-1:1.0: unknown notification 171 received: index 1013 len 12284 [ 123.680387][ T36] audit: type=1400 audit(1700000058.953:462): avc: denied { sys_module } for pid=2683 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 123.761481][ T2683] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.768649][ T2683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.776083][ T2683] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.783168][ T2683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.794424][ T2045] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.802275][ T2045] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.843999][ T36] audit: type=1400 audit(1700000059.113:463): avc: denied { map } for pid=2692 comm="syz.0.726" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 123.869555][ T2045] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.876721][ T2045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.887392][ T2045] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.894550][ T2045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.928318][ T2683] veth0_vlan: entered promiscuous mode [ 123.942519][ T2683] veth1_macvtap: entered promiscuous mode [ 123.960026][ T10] usb 4-1: USB disconnect, device number 41 [ 124.014901][ T2696] kvm: kvm [2648]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x400006 [ 124.103693][ T2705] fuseblk: Bad value for 'user_id' [ 124.103693][ T2706] fuseblk: Bad value for 'user_id' [ 124.103727][ T2706] fuseblk: Bad value for 'user_id' [ 124.109577][ T2705] fuseblk: Bad value for 'user_id' [ 124.384304][ T67] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 124.534291][ T67] usb 7-1: Using ep0 maxpacket: 32 [ 124.545068][ T67] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.556256][ T67] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.566764][ T67] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 124.576393][ T67] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.585949][ T67] usb 7-1: config 0 descriptor?? [ 124.593050][ T67] hub 7-1:0.0: USB hub found [ 124.794824][ T67] hub 7-1:0.0: 1 port detected [ 124.914362][ T417] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 125.044268][ T417] usb 4-1: device descriptor read/64, error -71 [ 125.284332][ T417] usb 4-1: device descriptor read/64, error -71 [ 125.402092][ T67] hub 7-1:0.0: activate --> -90 [ 125.534355][ T417] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 125.540558][ T10] usb 6-1: USB disconnect, device number 3 [ 125.552717][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 125.552736][ T36] audit: type=1400 audit(1700000060.823:472): avc: denied { read } for pid=2534 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.583342][ T36] audit: type=1400 audit(1700000060.823:473): avc: denied { open } for pid=2534 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.613678][ T36] audit: type=1400 audit(1700000060.823:474): avc: denied { ioctl } for pid=2534 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.643843][ T36] audit: type=1400 audit(1700000060.823:475): avc: denied { ioctl } for pid=2718 comm="syz.3.731" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 125.670357][ T36] audit: type=1400 audit(1700000060.883:476): avc: denied { read } for pid=2726 comm="syz.5.734" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.693343][ T36] audit: type=1400 audit(1700000060.883:477): avc: denied { open } for pid=2726 comm="syz.5.734" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.717758][ T36] audit: type=1400 audit(1700000060.883:478): avc: denied { ioctl } for pid=2726 comm="syz.5.734" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.735577][ T2727] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 125.743039][ T417] usb 4-1: device descriptor read/64, error -71 [ 125.753804][ T2727] audit: out of memory in audit_log_start [ 125.763745][ T36] audit: type=1400 audit(1700000060.943:479): avc: denied { write } for pid=2726 comm="syz.5.734" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 125.885024][ T2739] ./dev/sda1: Can't lookup blockdev [ 125.895058][ T10] usb 7-1: USB disconnect, device number 2 [ 125.955792][ T2743] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.982813][ T2743] can0: slcan on ptm0. [ 126.024311][ T417] usb 4-1: device descriptor read/64, error -71 [ 126.134373][ T417] usb usb4-port1: attempt power cycle [ 126.164253][ T1545] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 126.315316][ T1545] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.325790][ T1545] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.344027][ T1545] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.364353][ T1545] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.377489][ T1545] usb 6-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 126.394212][ T1545] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.439187][ T2760] overlayfs: failed to resolve './file1/file0': -2 [ 126.474271][ T417] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 126.505662][ T417] usb 4-1: device descriptor read/8, error -71 [ 126.563944][ T67] rust_binder: 2765: undelivered TRANSACTION_COMPLETE [ 126.641952][ T417] usb 4-1: device descriptor read/8, error -71 [ 126.655631][ T416] rust_binder: 2765: undelivered transaction 21, process died [ 126.669268][ T2732] can0 (unregistered): slcan off ptm0. [ 126.812606][ T1545] lg-g15 0003:046D:C222.0018: unknown main item tag 0x0 [ 126.820025][ T1545] lg-g15 0003:046D:C222.0018: unknown main item tag 0x0 [ 126.834258][ T1545] lg-g15 0003:046D:C222.0018: unknown main item tag 0x0 [ 126.860332][ T1545] lg-g15 0003:046D:C222.0018: hiddev96,hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.5-1/input0 [ 126.894250][ T417] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 126.927251][ T417] usb 4-1: device descriptor read/8, error -71 [ 126.984954][ T67] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 127.022805][ T1545] usb 6-1: USB disconnect, device number 4 [ 127.065408][ T417] usb 4-1: device descriptor read/8, error -71 [ 127.145771][ T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.157282][ T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.167280][ T67] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 127.176542][ T417] usb usb4-port1: unable to enumerate USB device [ 127.183373][ T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.192188][ T67] usb 1-1: config 0 descriptor?? [ 127.600930][ T67] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 127.608793][ T67] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 127.616801][ T67] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 127.624599][ T67] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 127.631898][ T67] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 127.640189][ T67] hid-steam 0003:28DE:1142.0019: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 127.801784][ T2779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.743'. [ 127.815249][ T67] usb 1-1: USB disconnect, device number 40 [ 127.854497][ T399] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 128.004379][ T399] usb 6-1: Using ep0 maxpacket: 16 [ 128.010986][ T399] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.023032][ T399] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.033373][ T399] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.047519][ T399] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.056671][ T399] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.064499][ T417] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 128.068123][ T399] usb 6-1: config 0 descriptor?? [ 128.225748][ T417] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 79, changing to 10 [ 128.237097][ T417] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 58944, setting to 1024 [ 128.248802][ T417] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 128.258395][ T417] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.267887][ T2837] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 128.684387][ T417] lg-g15 0003:046D:C222.001A: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.6-1/input0 [ 128.747771][ T2869] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 128.759301][ T2872] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 128.774531][ T417] lg-g15 0003:046D:C222.001A: Error -71 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 128.887152][ T417] usb 7-1: USB disconnect, device number 3 [ 129.046283][ T2876] syzkaller0: entered promiscuous mode [ 129.052095][ T2876] syzkaller0: entered allmulticast mode [ 129.075472][ T2876] syz.5.763: attempt to access beyond end of device [ 129.075472][ T2876] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 129.099955][ T399] usbhid 6-1:0.0: can't add hid device: -71 [ 129.113759][ T399] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 129.130753][ T399] usb 6-1: USB disconnect, device number 5 [ 129.247525][ T2881] overlayfs: disabling nfs_export due to verity=on [ 129.255220][ T2881] overlayfs: upper fs does not support file handles, falling back to index=off. [ 129.265075][ T2881] overlayfs: conflicting lowerdir path [ 129.354253][ T31] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 129.409694][ T2884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.418400][ T2884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.506615][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 129.515482][ T31] usb 1-1: config 129 has an invalid descriptor of length 225, skipping remainder of the config [ 129.526197][ T31] usb 1-1: config 129 has 0 interfaces, different from the descriptor's value: 1 [ 129.537053][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 129.546261][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.554690][ T31] usb 1-1: Product: syz [ 129.558907][ T31] usb 1-1: Manufacturer: syz [ 129.563561][ T31] usb 1-1: SerialNumber: syz [ 129.581027][ T2887] FAULT_INJECTION: forcing a failure. [ 129.581027][ T2887] name failslab, interval 1, probability 0, space 0, times 0 [ 129.593992][ T2887] CPU: 0 UID: 0 PID: 2887 Comm: syz.3.767 Not tainted syzkaller #0 4c932c043eb01f9e3eebd51d42a946ef7c91072c [ 129.594034][ T2887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 129.594050][ T2887] Call Trace: [ 129.594058][ T2887] [ 129.594069][ T2887] __dump_stack+0x21/0x30 [ 129.594099][ T2887] dump_stack_lvl+0x140/0x1c0 [ 129.594122][ T2887] ? __cfi_dump_stack_lvl+0x10/0x10 [ 129.594152][ T2887] dump_stack+0x19/0x20 [ 129.594175][ T2887] should_fail_ex+0x3c2/0x510 [ 129.594199][ T2887] should_failslab+0xac/0x100 [ 129.594226][ T2887] kmem_cache_alloc_noprof+0x42/0x410 [ 129.594266][ T2887] ? alloc_empty_file+0xbf/0x270 [ 129.594295][ T2887] ? _raw_spin_unlock+0x45/0x60 [ 129.594321][ T2887] alloc_empty_file+0xbf/0x270 [ 129.594349][ T2887] ? _raw_spin_unlock+0x45/0x60 [ 129.594367][ T2887] alloc_file_pseudo+0x142/0x1f0 [ 129.594418][ T2887] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 129.594448][ T2887] sock_alloc_file+0xbe/0x2b0 [ 129.594472][ T2887] __sys_socket+0x14c/0x1c0 [ 129.594501][ T2887] __x64_sys_socket+0x7e/0x90 [ 129.594521][ T2887] x64_sys_call+0x2608/0x2ee0 [ 129.594554][ T2887] do_syscall_64+0x57/0xf0 [ 129.594581][ T2887] ? clear_bhb_loop+0x50/0xa0 [ 129.594613][ T2887] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 129.594649][ T2887] RIP: 0033:0x7f9b747aad67 [ 129.594663][ T2887] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.594677][ T2887] RSP: 002b:00007f9b756c2f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 129.594713][ T2887] RAX: ffffffffffffffda RBX: 00007f9b74a25fa0 RCX: 00007f9b747aad67 [ 129.594733][ T2887] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 129.594748][ T2887] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 129.594764][ T2887] R10: 00002000000001c0 R11: 0000000000000286 R12: 0000000000000000 [ 129.594780][ T2887] R13: 00007f9b74a26038 R14: 00007f9b74a25fa0 R15: 00007ffef0d34978 [ 129.594803][ T2887] [ 129.695041][ T67] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 129.808040][ T31] usb 1-1: USB disconnect, device number 41 [ 129.966400][ T67] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 129.974426][ T67] usb 7-1: can't read configurations, error -61 [ 130.104308][ T67] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 130.162147][ T2900] FAULT_INJECTION: forcing a failure. [ 130.162147][ T2900] name failslab, interval 1, probability 0, space 0, times 0 [ 130.175305][ T2900] CPU: 1 UID: 0 PID: 2900 Comm: syz.5.770 Not tainted syzkaller #0 4c932c043eb01f9e3eebd51d42a946ef7c91072c [ 130.175333][ T2900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 130.175344][ T2900] Call Trace: [ 130.175349][ T2900] [ 130.175356][ T2900] __dump_stack+0x21/0x30 [ 130.175376][ T2900] dump_stack_lvl+0x140/0x1c0 [ 130.175392][ T2900] ? __cfi_dump_stack_lvl+0x10/0x10 [ 130.175408][ T2900] dump_stack+0x19/0x20 [ 130.175422][ T2900] should_fail_ex+0x3c2/0x510 [ 130.175438][ T2900] should_failslab+0xac/0x100 [ 130.175455][ T2900] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 130.175480][ T2900] ? shmem_alloc_inode+0x3b/0xd0 [ 130.175500][ T2900] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 130.175517][ T2900] shmem_alloc_inode+0x3b/0xd0 [ 130.175537][ T2900] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 130.175556][ T2900] alloc_inode+0x7a/0x270 [ 130.175575][ T2900] new_inode+0x25/0x1e0 [ 130.175592][ T2900] ? __cfi__raw_spin_lock+0x10/0x10 [ 130.175611][ T2900] shmem_get_inode+0x352/0xc10 [ 130.175628][ T2900] ? _raw_spin_unlock+0x45/0x60 [ 130.175645][ T2900] __shmem_file_setup+0x173/0x2c0 [ 130.175662][ T2900] shmem_file_setup+0x33/0x40 [ 130.175677][ T2900] __se_sys_memfd_create+0x3bb/0x8f0 [ 130.175703][ T2900] ? __x64_sys_memfd_create+0x80/0x80 [ 130.175727][ T2900] ? __kasan_check_write+0x18/0x20 [ 130.175752][ T2900] __x64_sys_memfd_create+0x5f/0x80 [ 130.175775][ T2900] x64_sys_call+0x29f8/0x2ee0 [ 130.175793][ T2900] do_syscall_64+0x57/0xf0 [ 130.175810][ T2900] ? clear_bhb_loop+0x50/0xa0 [ 130.175834][ T2900] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 130.175857][ T2900] RIP: 0033:0x7f28d03a94d9 [ 130.175871][ T2900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.175885][ T2900] RSP: 002b:00007f28d1259028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 130.175902][ T2900] RAX: ffffffffffffffda RBX: 00007f28d0626090 RCX: 00007f28d03a94d9 [ 130.175914][ T2900] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000200000000280 [ 130.175925][ T2900] RBP: 00007f28d043804e R08: 0000000000000000 R09: 0000000000000000 [ 130.175935][ T2900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.175945][ T2900] R13: 00007f28d0626128 R14: 00007f28d0626090 R15: 00007fff49995528 [ 130.175960][ T2900] [ 130.442381][ T67] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 130.450254][ T67] usb 7-1: can't read configurations, error -61 [ 130.456911][ T67] usb usb7-port1: attempt power cycle [ 130.526374][ T2922] sit0: entered promiscuous mode [ 130.533188][ T2922] netlink: 'syz.5.777': attribute type 1 has an invalid length. [ 130.541059][ T2922] netlink: 1 bytes leftover after parsing attributes in process `syz.5.777'. [ 130.571171][ T36] kauditd_printk_skb: 112 callbacks suppressed [ 130.571192][ T36] audit: type=1400 audit(1700000065.843:592): avc: denied { append } for pid=2924 comm="syz.5.778" name="sda" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.678685][ T36] audit: type=1400 audit(1700000065.953:593): avc: denied { mount } for pid=2928 comm="syz.3.780" name="/" dev="incremental-fs" ino=1184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 130.702821][ T2930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 130.717246][ T36] audit: type=1400 audit(1700000065.993:594): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 130.757348][ T36] audit: type=1400 audit(1700000066.033:595): avc: denied { write } for pid=2933 comm="syz.3.782" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.757559][ T2934] random: crng reseeded on system resumption [ 130.780586][ T36] audit: type=1400 audit(1700000066.033:596): avc: denied { open } for pid=2933 comm="syz.3.782" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.810048][ T67] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 130.819080][ T2937] rust_binder: 2933:2937 got reply transaction with no transaction stack [ 130.827938][ T1545] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 130.835556][ T2937] rust_binder: 2933:2937 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 line thread.rs:1556 [ 130.840209][ T67] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 130.864285][ T67] usb 7-1: can't read configurations, error -61 [ 130.877306][ T399] rust_binder: 2933: undelivered TRANSACTION_ERROR: 29202 [ 130.889123][ T417] rust_binder: 2933: undelivered TRANSACTION_ERROR: 29201 [ 130.994636][ T67] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 131.016369][ T1545] usb 6-1: unable to get BOS descriptor or descriptor too short [ 131.025313][ T1545] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.036170][ T67] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 131.039665][ T1545] usb 6-1: string descriptor 0 read error: -22 [ 131.043789][ T67] usb 7-1: can't read configurations, error -61 [ 131.054854][ T67] usb usb7-port1: unable to enumerate USB device [ 131.058212][ T1545] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 131.072472][ T1545] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.595532][ T36] audit: type=1400 audit(1700000066.873:597): avc: denied { getopt } for pid=2941 comm="syz.0.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.618263][ T36] audit: type=1400 audit(1700000066.893:598): avc: denied { create } for pid=2941 comm="syz.0.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 131.641633][ T36] audit: type=1400 audit(1700000066.893:599): avc: denied { getopt } for pid=2941 comm="syz.0.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 131.662496][ T36] audit: type=1400 audit(1700000066.893:600): avc: denied { write } for pid=2941 comm="syz.0.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 131.687960][ T2925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.701893][ T36] audit: type=1400 audit(1700000066.913:601): avc: denied { ioctl } for pid=2941 comm="syz.0.784" path="socket:[25327]" dev="sockfs" ino=25327 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 131.704555][ T2925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.749683][ T2947] FAULT_INJECTION: forcing a failure. [ 131.749683][ T2947] name failslab, interval 1, probability 0, space 0, times 0 [ 131.762635][ T2947] CPU: 1 UID: 0 PID: 2947 Comm: syz.0.785 Not tainted syzkaller #0 4c932c043eb01f9e3eebd51d42a946ef7c91072c [ 131.762671][ T2947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 131.762688][ T2947] Call Trace: [ 131.762696][ T2947] [ 131.762705][ T2947] __dump_stack+0x21/0x30 [ 131.762733][ T2947] dump_stack_lvl+0x140/0x1c0 [ 131.762753][ T2947] ? __cfi_dump_stack_lvl+0x10/0x10 [ 131.762777][ T2947] dump_stack+0x19/0x20 [ 131.762796][ T2947] should_fail_ex+0x3c2/0x510 [ 131.762818][ T2947] should_failslab+0xac/0x100 [ 131.762842][ T2947] kmem_cache_alloc_noprof+0x42/0x410 [ 131.762931][ T2947] ? security_inode_alloc+0x51/0x230 [ 131.762958][ T2947] ? __cfi_make_kgid+0x10/0x10 [ 131.762981][ T2947] security_inode_alloc+0x51/0x230 [ 131.763009][ T2947] inode_init_always_gfp+0x756/0x9e0 [ 131.763035][ T2947] ? __cfi_sock_alloc_inode+0x10/0x10 [ 131.763060][ T2947] alloc_inode+0xc5/0x270 [ 131.763085][ T2947] ? bpf_lsm_socket_create+0xd/0x20 [ 131.763121][ T2947] new_inode_pseudo+0x19/0x40 [ 131.763146][ T2947] sock_create_lite+0x8f/0x500 [ 131.763174][ T2947] __netlink_kernel_create+0xcf/0x8a0 [ 131.763206][ T2947] ? __cfi___netlink_kernel_create+0x10/0x10 [ 131.763243][ T2947] ? __asan_memcpy+0x5a/0x80 [ 131.763275][ T2947] rtnetlink_net_init+0xb2/0x140 [ 131.763301][ T2947] ? __cfi_rtnetlink_net_init+0x10/0x10 [ 131.763327][ T2947] ? __cfi_rtnetlink_rcv+0x10/0x10 [ 131.763351][ T2947] ? __cfi_rtnetlink_bind+0x10/0x10 [ 131.763372][ T2947] ? __kasan_check_write+0x18/0x20 [ 131.763402][ T2947] ? __mutex_init+0xa6/0x1a0 [ 131.763430][ T2947] ops_init+0x2ff/0x5d0 [ 131.763454][ T2947] ? __kasan_check_write+0x18/0x20 [ 131.763486][ T2947] ? rwsem_read_trylock+0x275/0x5a0 [ 131.763514][ T2947] setup_net+0x227/0x9b0 [ 131.763536][ T2947] ? copy_net_ns+0xa20/0xa20 [ 131.763557][ T2947] ? down_read_killable+0x7f/0x100 [ 131.763589][ T2947] ? __cfi_down_read_killable+0x10/0x10 [ 131.763625][ T2947] copy_net_ns+0x4fc/0xa20 [ 131.763646][ T2947] create_new_namespaces+0x390/0x6f0 [ 131.763671][ T2947] unshare_nsproxy_namespaces+0x124/0x180 [ 131.763696][ T2947] ksys_unshare+0x4f9/0x920 [ 131.763717][ T2947] ? fput+0x1a4/0x230 [ 131.763743][ T2947] ? __cfi_ksys_unshare+0x10/0x10 [ 131.763765][ T2947] ? __kasan_check_write+0x18/0x20 [ 131.763798][ T2947] __x64_sys_unshare+0x3c/0x50 [ 131.763818][ T2947] x64_sys_call+0x2998/0x2ee0 [ 131.763843][ T2947] do_syscall_64+0x57/0xf0 [ 131.763881][ T2947] ? clear_bhb_loop+0x50/0xa0 [ 131.763914][ T2947] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 131.763946][ T2947] RIP: 0033:0x7f474a7a94d9 [ 131.763964][ T2947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.763984][ T2947] RSP: 002b:00007f474b592028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 131.764009][ T2947] RAX: ffffffffffffffda RBX: 00007f474aa25fa0 RCX: 00007f474a7a94d9 [ 131.764027][ T2947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000600 [ 131.764042][ T2947] RBP: 00007f474a83804e R08: 0000000000000000 R09: 0000000000000000 [ 131.764056][ T2947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.764071][ T2947] R13: 00007f474aa26038 R14: 00007f474aa25fa0 R15: 00007ffd161d5078 [ 131.764090][ T2947] [ 132.108060][ T2949] sd 0:0:1:0: PR command failed: 1026 [ 132.124480][ T2949] sd 0:0:1:0: Sense Key : 0x5 [current] [ 132.131814][ T2949] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 132.145228][ T417] usb 6-1: USB disconnect, device number 6 [ 132.374343][ T67] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 132.424250][ T1545] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 132.535299][ T67] usb 4-1: not running at top speed; connect to a high speed hub [ 132.544469][ T67] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.554866][ T67] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 132.564022][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.574289][ T1545] usb 1-1: Using ep0 maxpacket: 16 [ 132.575801][ T67] usb 4-1: Found UVC 1.00 device (046d:0825) [ 132.586437][ T67] usb 4-1: No streaming interface found for terminal 2. [ 132.595132][ T1545] usb 1-1: unable to get BOS descriptor or descriptor too short [ 132.608085][ T1545] usb 1-1: config 7 has an invalid interface number: 224 but max is 0 [ 132.619013][ T1545] usb 1-1: config 7 has no interface number 0 [ 132.625712][ T1545] usb 1-1: config 7 interface 224 has no altsetting 0 [ 132.636542][ T1545] usb 1-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=85.66 [ 132.645864][ T1545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.653930][ T1545] usb 1-1: Product: syz [ 132.659210][ T1545] usb 1-1: Manufacturer: syz [ 132.663884][ T1545] usb 1-1: SerialNumber: syz [ 132.682401][ T2968] netlink: 'syz.5.791': attribute type 2 has an invalid length. [ 132.824429][ T399] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 132.902101][ T1545] usb 1-1: bad CDC descriptors [ 132.908081][ T1545] usb 1-1: USB disconnect, device number 42 [ 132.975693][ T399] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 132.986816][ T399] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 132.996153][ T399] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.024343][ T9] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 133.154275][ T9] usb 6-1: device descriptor read/64, error -71 [ 133.404282][ T9] usb 6-1: device descriptor read/64, error -71 [ 133.415379][ T399] lg-g15 0003:046D:C222.001B: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.6-1/input0 [ 133.444137][ T2980] Bluetooth: ISO socket layer initialized [ 133.466722][ T67] rust_binder: 2979: undelivered TRANSACTION_COMPLETE [ 133.507167][ T2983] overlayfs: failed to resolve './bus': -2 [ 133.616515][ T399] input: Logitech Gaming Keyboard Gaming Keys as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:046D:C222.001B/input/input23 [ 133.664250][ T9] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 133.804265][ T9] usb 6-1: device descriptor read/64, error -71 [ 133.817745][ T399] lg-g15 0003:046D:C222.001B: Error getting LED brightness: -71 [ 133.828015][ T399] lg-g15 0003:046D:C222.001B: Error getting LED brightness: -71 [ 133.839391][ T399] lg-g15 0003:046D:C222.001B: Error getting LED brightness: -71 [ 133.849580][ T399] lg-g15 0003:046D:C222.001B: Error getting LED brightness: -71 [ 133.860214][ T399] lg-g15 0003:046D:C222.001B: Error getting LED brightness: -71 [ 133.872121][ T399] lg-g15 0003:046D:C222.001B: Error getting LED brightness: -71 [ 133.888289][ T399] usb 7-1: USB disconnect, device number 8 [ 134.064238][ T9] usb 6-1: device descriptor read/64, error -71 [ 134.184392][ T9] usb usb6-port1: attempt power cycle [ 134.554230][ T9] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 134.573530][ T3009] veth0_to_batadv: mtu greater than device maximum [ 134.585618][ T9] usb 6-1: device descriptor read/8, error -71 [ 134.725535][ T9] usb 6-1: device descriptor read/8, error -71 [ 134.854328][ T417] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 134.934361][ T10] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 134.974291][ T9] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 134.995982][ T9] usb 6-1: device descriptor read/8, error -71 [ 135.004289][ T417] usb 1-1: Using ep0 maxpacket: 32 [ 135.010965][ T417] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.022316][ T417] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 135.035556][ T417] usb 1-1: config 0 interface 0 has no altsetting 0 [ 135.042217][ T417] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 135.051328][ T417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.060692][ T417] usb 1-1: config 0 descriptor?? [ 135.074302][ T10] usb 7-1: device descriptor read/64, error -71 [ 135.125454][ T9] usb 6-1: device descriptor read/8, error -71 [ 135.234406][ T9] usb usb6-port1: unable to enumerate USB device [ 135.314290][ T10] usb 7-1: device descriptor read/64, error -71 [ 135.404275][ T67] usb 4-1: reset full-speed USB device number 46 using dummy_hcd [ 135.412669][ T67] usb 4-1: device reset changed ep0 maxpacket size! [ 135.419785][ T67] usb 4-1: USB disconnect, device number 46 [ 135.470423][ T417] input: HID 5543:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0004.001C/input/input24 [ 135.485741][ T417] uclogic 0003:5543:0004.001C: input,hiddev96,hidraw0: USB HID v0.07 Device [HID 5543:0004] on usb-dummy_hcd.0-1/input0 [ 135.574296][ T10] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 135.704247][ T10] usb 7-1: device descriptor read/64, error -71 [ 135.714238][ T67] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 135.812382][ T3023] fuse: Bad value for 'fd' [ 135.831142][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 135.831162][ T36] audit: type=1400 audit(1700000071.103:615): avc: denied { mount } for pid=3024 comm="syz.5.809" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 135.839682][ T3026] netlink: 72 bytes leftover after parsing attributes in process `syz.5.809'. [ 135.869229][ T36] audit: type=1400 audit(1700000071.103:616): avc: denied { search } for pid=3024 comm="syz.5.809" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 135.887029][ T67] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 135.892832][ T36] audit: type=1400 audit(1700000071.103:617): avc: denied { append } for pid=3024 comm="syz.5.809" name="uprobe_events" dev="tracefs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 135.911721][ T67] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 135.927238][ T36] audit: type=1400 audit(1700000071.103:618): avc: denied { open } for pid=3024 comm="syz.5.809" path="/30/tracing/uprobe_events" dev="tracefs" ino=1058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 135.946704][ T67] usb 4-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 135.975101][ T36] audit: type=1400 audit(1700000071.143:619): avc: denied { execute } for pid=3024 comm="syz.5.809" dev="tmpfs" ino=1186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 135.998009][ T36] audit: type=1400 audit(1700000071.153:620): avc: denied { execute_no_trans } for pid=3024 comm="syz.5.809" path=2F6D656D66643A5B0BDB58AE5B35A990FF631F1AA9FDFAADD16D64E7E27F9BD55210F3B6FF54BFD1C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 136.004503][ T10] usb 7-1: device descriptor read/64, error -71 [ 136.034040][ T67] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.049323][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 136.057733][ T67] usb 4-1: SerialNumber: syz [ 136.062916][ T3029] ptp ptp0: new virtual clock ptp1 [ 136.068178][ T3029] ptp ptp0: guarantee physical clock free running [ 136.075236][ T3029] ptp ptp0: delete virtual clock ptp1 [ 136.083433][ T3029] ptp ptp0: only physical clock in use now [ 136.144478][ T10] usb usb7-port1: attempt power cycle [ 136.273273][ T3020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.281992][ T3020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.291438][ T67] usb 4-1: bad CDC descriptors [ 136.299010][ T67] usb 4-1: USB disconnect, device number 47 [ 136.484258][ T10] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 136.505313][ T10] usb 7-1: device descriptor read/8, error -71 [ 136.558970][ T36] audit: type=1400 audit(1700000071.833:621): avc: denied { unmount } for pid=2534 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 136.635311][ T10] usb 7-1: device descriptor read/8, error -71 [ 136.814259][ T67] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 136.872205][ T36] audit: type=1400 audit(1700000072.143:622): avc: denied { connect } for pid=3039 comm="syz.3.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.874112][ T3040] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 136.895007][ T10] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 136.925349][ T36] audit: type=1400 audit(1700000072.203:623): avc: denied { append } for pid=3044 comm="syz.3.813" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 136.950468][ T10] usb 7-1: device descriptor read/8, error -71 [ 137.085316][ T10] usb 7-1: device descriptor read/8, error -71 [ 137.194401][ T10] usb usb7-port1: unable to enumerate USB device [ 137.341657][ T3053] rust_binder: 3052:3053 error while translating object: ENOENT [ 137.349535][ T3053] rust_binder: 3052:3053 transaction async to 3052:0 failed ENOENT, code 0 size 72-24 line thread.rs:878 [ 137.386009][ T3053] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 137.444092][ T3056] fuse: Bad value for 'fd' [ 137.628518][ T416] usb 1-1: USB disconnect, device number 43 [ 137.661216][ T36] audit: type=1400 audit(1700000072.933:624): avc: denied { write } for pid=3061 comm="syz.0.819" name="sockstat" dev="proc" ino=4026532356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 137.812155][ T3066] kvm: kvm [3065]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 137.821284][ T3066] kvm: kvm [3065]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 137.917397][ T3073] kvm: user requested TSC rate below hardware speed [ 138.044320][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 138.101536][ T3090] fuse: Bad value for 'fd' [ 138.128664][ T3092] kvm: user requested TSC rate below hardware speed [ 138.214337][ T416] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 138.214337][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 138.219189][ T10] usb 7-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 138.236408][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.244489][ T10] usb 7-1: Product: syz [ 138.248727][ T10] usb 7-1: Manufacturer: syz [ 138.253392][ T10] usb 7-1: SerialNumber: syz SYZFAIL: SIGBUS pc-offset:0xfffffffffffea099 pc:0x7f27c366a677 addr:0x7f27bd1efffc code=2 (errno 11: Resource temporarily unavailable) [ 138.432752][ T416] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.464220][ T416] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 138.472049][ T416] usb 1-1: can't read configurations, error -71 [ 138.514676][ T10] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 138.535551][ T10] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 138.546102][ T10] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 138.561721][ T10] usb 7-1: USB disconnect, device number 13 [ 138.574619][ T1958] udevd[1958]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 138.590530][ T67] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 138.606693][ T2045] bridge_slave_1: left allmulticast mode [ 138.613149][ T2045] bridge_slave_1: left promiscuous mode [ 138.619192][ T2045] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.737321][ T2045] veth1_macvtap: left promiscuous mode [ 138.742899][ T2045] veth0_vlan: left promiscuous mode [ 139.007231][ T2045] bridge_slave_1: left allmulticast mode [ 139.013022][ T2045] bridge_slave_1: left promiscuous mode [ 139.018759][ T2045] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.026395][ T2045] bridge_slave_0: left allmulticast mode [ 139.032144][ T2045] bridge_slave_0: left promiscuous mode [ 139.037979][ T2045] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.045824][ T2045] bridge_slave_1: left allmulticast mode [ 139.051487][ T2045] bridge_slave_1: left promiscuous mode [ 139.057280][ T2045] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.065682][ T2045] bridge_slave_0: left allmulticast mode [ 139.071387][ T2045] bridge_slave_0: left promiscuous mode [ 139.077205][ T2045] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.085204][ T2045] bridge_slave_1: left allmulticast mode [ 139.090881][ T2045] bridge_slave_1: left promiscuous mode [ 139.096665][ T2045] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.104397][ T2045] bridge_slave_0: left allmulticast mode [ 139.110068][ T2045] bridge_slave_0: left promiscuous mode [ 139.115968][ T2045] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.361078][ T2045] veth1_macvtap: left promiscuous mode [ 139.366699][ T2045] veth0_vlan: left promiscuous mode [ 139.372333][ T2045] veth1_macvtap: left promiscuous mode [ 139.378263][ T2045] veth0_vlan: left promiscuous mode [ 139.383995][ T2045] veth1_macvtap: left promiscuous mode [ 139.389625][ T2045] veth0_vlan: left promiscuous mode