last executing test programs: 44.299279841s ago: executing program 0 (id=46): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0xa, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'xfrm0\x00', 0x0}) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x9f, 0xf4, 0x57, 0x8, 0xb48, 0x300d, 0x7d55, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x9, 0x30, 0x2, "", [{{0x9, 0x4, 0x25, 0x4b, 0x0, 0x4b, 0x16, 0x52, 0x9}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00222200000096631306e53f070c0000002a9000670900be008300000000"], 0x0}, 0x0) (async) sendto$packet(r1, &(0x7f00000001c0)="10031400e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2}, 0x14) ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000001e00000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/rfcomm0\x00', 0x802, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x540a, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) syz_usb_connect(0x5, 0x2b, 0x0, 0x0) 42.743204772s ago: executing program 0 (id=57): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_usb_connect$midi(0x0, 0xbd, &(0x7f0000000240)=ANY=[@ANYBLOB="120101020000001044060f804000010203010902ab00010101200209040000060103303a0624020144040f2403000a0408010101020603029c06240207050609050d00080081b6051125010df0552f91ffb555f13d7eb3a44a09050604200002650404250100090500102000ff590005250101490905801020000204071025010c6d95655c0cab605266fc635f09050303200006040514250110"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c0) (async) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x80, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x38) (async) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000140)=0x5) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xc2c02e4d8eb2a416, 0x4) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4002005}, 0x40000) (async) r3 = openat$incfs(r2, &(0x7f0000000400)='.pending_reads\x00', 0x1, 0x130) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000004c0)={{r0}, 0x9, &(0x7f0000000440)=[0xfffffffffffffff7, 0x6, 0x3, 0x706, 0x7fffffff, 0x2, 0x6, 0x5, 0x6], 0x7fffffff, 0x1}) (async) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x80106725, 0x0) 41.251832407s ago: executing program 0 (id=64): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x92c, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0x9e9, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0xa, 0x5, 0x401, 0x1, 0x0, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x8001, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0x101, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x7f, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x4000009, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x202, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x5, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0xa, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x2000, 0x408, 0x274, 0x6, 0x1000, 0x6, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x14002, 0xffff, 0x400]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) mkdir(&(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 40.279577487s ago: executing program 0 (id=70): syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x3, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000100)=ANY=[], 0x0) (async) syz_usb_connect(0x3, 0x32, &(0x7f0000000100)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r1, 0x0, 0x0, 0x1) syz_io_uring_setup(0x2cf8, &(0x7f0000000000)={0x0, 0x796a, 0x3000, 0x0, 0x394}, 0x0, 0x0, 0x0) close(0x3) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000180)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000200)=0x4, 0x8) close(r2) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x4}}, 0x10) (async) connect$tipc(r4, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x4}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000140), 0x2000011a) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) 37.538320131s ago: executing program 0 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x2, 0xfffffffe, 0x40, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x7800, 0xfffffffc, 0xd864}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x42, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001400)={'syztnl1\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000000400)=""/4096, 0x1000) r3 = add_key$keyring(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, 0xee00, 0x0) keyctl$setperm(0x5, r3, 0x30925) openat$kvm(0xffffffffffffff9c, &(0x7f0000001700), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000001780), 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x3d, 0x0, &(0x7f00000017c0)=0x37) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001800)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001880)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f00000018c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000001900)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000001980)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x8091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000014c0)={0x209d, 0x3, 0x0, 0x7ffffff9}, 0x10) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001540)=""/20, 0x14}], 0x1) 37.371125529s ago: executing program 0 (id=99): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x92c, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0x9e9, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0xa, 0x5, 0x401, 0x1, 0x0, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x8001, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0x101, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x7f, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x4000009, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x202, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x5, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0xa, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x2000, 0x408, 0x274, 0x6, 0x1000, 0x6, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x14002, 0xffff, 0x400]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) mkdir(&(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21.652928176s ago: executing program 32 (id=99): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x92c, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0x9e9, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0xa, 0x5, 0x401, 0x1, 0x0, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x8001, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0x101, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x7f, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x4000009, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x202, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x5, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0xa, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x6, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x2000, 0x408, 0x274, 0x6, 0x1000, 0x6, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x14002, 0xffff, 0x400]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) mkdir(&(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.405225476s ago: executing program 4 (id=303): lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x2, 0x7}, {0x5, 0xb3f}]}, 0x14, 0x2) (async) r0 = fsmount$ext4(0xffffffffffffffff, 0x0, 0x38) close(r0) (async) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @multicast2}, &(0x7f0000000180)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000001c0)={'tunl0\x00', r2, 0x40, 0x7, 0x6, 0x9, {{0x5a, 0x4, 0x1, 0x6, 0x168, 0x67, 0x0, 0xd, 0x4, 0x0, @broadcast, @loopback, {[@generic={0x82, 0x3, 'h'}, @generic={0x83, 0xd, "abe2dbc278906412b38b2b"}, @timestamp_addr={0x44, 0x34, 0x31, 0x1, 0x1, [{@loopback, 0x9}, {@empty, 0x5}, {@empty, 0x1}, {@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x7}, {@multicast1, 0x37}]}, @cipso={0x86, 0x45, 0x0, [{0x1, 0x4, "619d"}, {0x0, 0xc, "9816d1a5bb070b312534"}, {0x0, 0x7, "38b570c72e"}, {0x5, 0xf, "ba433e7d88bccf8500dda06c22"}, {0x1, 0x8, "1ab052119f97"}, {0x0, 0x11, "ccb44f1ae1d4840373536c7776f323"}]}, @generic={0x94, 0x2}, @cipso={0x86, 0x67, 0x3, [{0x7, 0xa, "3735b97aa1974e86"}, {0x7, 0x10, "632289cede970043ca7abb883382"}, {0x2, 0xa, "5a8df9607ae69b69"}, {0x0, 0xc, "19050184b9c236bafcf5"}, {0x1, 0xe, "23d37b5050e1d37e5ba5004e"}, {0x0, 0xf, "5f6953f06a925405f7f7d2fb2c"}, {0x6, 0x9, "e21a2f24480663"}, {0x0, 0x8, "d6705daff151"}, {0x0, 0x3, "1a"}]}, @cipso={0x86, 0x5f, 0xffffffffffffffff, [{0x0, 0x5, "dea808"}, {0x6, 0x5, "d2fb2c"}, {0x6, 0xf, "ddd38894f99d9fb3b524561ad2"}, {0x0, 0x2}, {0x0, 0x7, "aca621cd17"}, {0x1, 0xa, "de097267f03ff40e"}, {0x7, 0x2}, {0x5, 0x10, "21c60cf41e366e029210b286b4bd"}, {0x0, 0xc, "8233230a5d4007efd9b1"}, {0x5, 0xf, "753d2027471fccd27c8f879de5"}]}]}}}}}) (async) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000003c0)={0x6, 0x8}) r3 = syz_open_dev$hiddev(&(0x7f0000000400), 0x7, 0x101000) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000000440)={{0x2, 0xffffffff, 0xf, 0x4, 0x2, 0x70}, 0x2aa, [0xe, 0x3, 0x5, 0xfffffff7, 0x56, 0x1, 0x9, 0x3, 0x9, 0xf, 0x6, 0x8, 0x81, 0x1, 0x85ec, 0x3, 0xfff, 0xf7, 0x1, 0xbb, 0x5, 0x2, 0x5, 0x3, 0xc, 0xffffd926, 0x80, 0x9, 0x5, 0x2, 0x6, 0x7fff, 0x81, 0x9, 0x6, 0x7, 0x30000000, 0x6, 0x4, 0x7, 0x7, 0xfffffff7, 0x9, 0x8, 0x9, 0x1, 0x5, 0x7, 0x5, 0x80, 0x2, 0x3ff, 0x0, 0xed, 0x3, 0x9, 0x8, 0x8, 0x4, 0x8, 0x7f, 0x1, 0xcb7d, 0xf6a, 0x5, 0x1000, 0x1, 0xffff, 0x8000, 0x143, 0x27, 0x3ff, 0x8, 0x2751, 0x3, 0xbd, 0x6, 0x1ff, 0x0, 0x22b, 0x3, 0xcd, 0x0, 0x1, 0x1, 0x4, 0x9, 0x2, 0x8001, 0x2, 0x1, 0x800, 0x7ff, 0x4, 0x81, 0x2, 0x0, 0x6d, 0x2, 0x2, 0x8001, 0x5, 0x80000000, 0x3, 0x58f, 0x8000, 0x3, 0x0, 0x33, 0x8, 0x0, 0x0, 0x8, 0x5, 0x0, 0xf3b, 0x9, 0x81, 0xfffff315, 0x3, 0x4, 0x9, 0x4, 0x6, 0x2, 0x5, 0x4, 0x1, 0xc, 0x101, 0x1, 0x81, 0x4, 0x40, 0x5, 0x101, 0x24c, 0x10, 0x80, 0x5, 0x9, 0x6, 0x7, 0xfffffffc, 0x4, 0x7, 0x0, 0x4, 0x800, 0xfb, 0x10, 0x2, 0x9555, 0x9, 0x40, 0x6, 0x7, 0x7fff, 0x1, 0x0, 0xff, 0x480, 0x1, 0x3a1, 0x8, 0x3, 0xfffffff9, 0xff55, 0x9, 0x4, 0xa8, 0x7f, 0xec, 0x5, 0x8, 0x7, 0x3, 0x0, 0xff51, 0xffff, 0xfffffffc, 0x178, 0x8, 0xffffffff, 0x3, 0x2, 0x82a1, 0x9, 0x2, 0x5, 0x200, 0x7, 0x9, 0x167, 0x7, 0x5, 0x8, 0xff, 0x87, 0x250000, 0x564, 0xffffff81, 0xfffffffc, 0x8, 0x7, 0x4, 0x382c751b, 0x9, 0x3, 0x6, 0x8, 0xe, 0x32c, 0xfffffff7, 0x400, 0xfffffffa, 0x7, 0x4, 0x4c8, 0xd1, 0x3, 0x1, 0x2, 0xd, 0x3, 0x100, 0x10, 0x80, 0x0, 0x3, 0x101, 0x7b7, 0x0, 0x4, 0x9, 0x4, 0x3ff, 0x5, 0x4, 0x7, 0x3, 0x0, 0x6, 0xffff, 0x61, 0x9, 0x400, 0x7, 0x0, 0x2, 0x3, 0xa2, 0x8001, 0x101, 0x7fff, 0x7, 0xfffffff9, 0x2, 0x6, 0xffff, 0x80000000, 0xfffffffe, 0x9, 0x4, 0x8, 0x5, 0x8, 0x1, 0x1ff, 0x5, 0x8, 0x400, 0xb992, 0xff, 0x3, 0x4, 0x4, 0x41, 0x5, 0x3, 0x10, 0xfffffffb, 0xfffffffb, 0x400, 0x5, 0x8, 0x2, 0xfffffffe, 0x1, 0x7ff, 0x6, 0x8001, 0x101, 0x3, 0x2, 0x80000, 0x101, 0x401, 0x400, 0x4, 0x22, 0x9, 0x4, 0x9, 0xfc000000, 0x9, 0x5, 0x5b, 0x0, 0x6, 0xf, 0x6, 0x9, 0x0, 0x1, 0xe8c, 0x401, 0x5b8c, 0x7, 0x90000000, 0xc, 0x6, 0xc, 0x6, 0x5, 0x0, 0x2, 0x40, 0x3ff, 0x6e9, 0x1, 0x7fffffff, 0xe000000, 0x0, 0xfb7d, 0x5aa, 0x2, 0x38, 0x6, 0x2, 0x2, 0x7, 0x3, 0x5, 0xb28a, 0x2, 0x3, 0x6, 0x5, 0x5, 0x3, 0x0, 0x80000001, 0x62d, 0x7ee, 0x0, 0x4, 0x9, 0x30000000, 0x6, 0x4, 0xfffffff8, 0x6, 0xd, 0x3, 0x0, 0x3, 0x7ff, 0x6, 0x7, 0xffffff80, 0x10, 0x5, 0x6, 0x2, 0x1, 0x1, 0x800, 0x10000, 0x8, 0xfffffffb, 0x5, 0x800, 0x1, 0x7fffffff, 0xff, 0x4, 0x4, 0x80000000, 0x13, 0x400, 0x4, 0x10001, 0x1000, 0xd, 0x7fff, 0x1, 0xeae, 0x10000, 0x7, 0xfffffffa, 0x4, 0x1, 0x1, 0x4, 0x8, 0xffffff5c, 0x40, 0xfffffffb, 0x4, 0x100, 0x5, 0x0, 0x5, 0x3, 0x9, 0x81, 0xffffffff, 0x9, 0x4, 0x8, 0x0, 0x5, 0x9, 0x8, 0x78ec9f9a, 0x1e35, 0x135, 0x9, 0x3, 0x4800000, 0x3, 0xd7c7, 0x3, 0x2, 0x2, 0x4, 0x97d7, 0xd, 0x5, 0x7fff, 0x2, 0x3, 0xb, 0x6, 0x7fffffff, 0x4, 0x8, 0x80, 0x2d11, 0x2, 0x10001, 0xfb5, 0x3, 0x7, 0xfffffbff, 0x800, 0xd, 0x9, 0x2, 0x6, 0x2, 0x2de, 0x6, 0x4, 0xe4e4, 0x9, 0x9da4, 0xf9, 0x2, 0x1, 0x2, 0x1, 0x2, 0x401, 0x3, 0x8, 0xf, 0x1, 0x1000, 0xe3, 0x9, 0x1000, 0x0, 0x1, 0x6, 0x5, 0x200, 0x400, 0xe, 0x5, 0x5, 0x5, 0x8, 0x1, 0x3072, 0xabdd, 0x5, 0x5, 0x2f05, 0x6, 0xc644, 0x3, 0x8, 0x1, 0x5, 0xf55d, 0x400, 0x7df, 0x80, 0x1, 0x93d, 0x8, 0x2, 0x8, 0xc, 0x1, 0x5, 0xe3ce, 0x6, 0x60000, 0xd, 0xfe8, 0x1, 0x2b7b, 0x69e164f0, 0x0, 0xa30, 0x7, 0x2, 0x10001, 0x6c, 0xe, 0x7, 0x2, 0x4ba, 0x5, 0xb, 0x8, 0x8, 0x0, 0x3, 0x419f, 0xd5, 0x6, 0x3f8, 0x2, 0x9, 0x76de, 0x0, 0xa1, 0x10001, 0x80000001, 0xc18, 0xd, 0x3, 0x9, 0x4, 0x4, 0x1, 0xf, 0x400, 0x9, 0x0, 0x4, 0x4, 0x6, 0xe, 0x9, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x4, 0x100, 0x1, 0x8, 0xd2a, 0x5, 0x4, 0x3, 0x9, 0xc, 0x7, 0x400, 0x1, 0x3ff, 0x0, 0x10000, 0xffff292e, 0xb, 0x10000, 0x5, 0x0, 0x2, 0x1ff, 0x6, 0x3, 0x8, 0x8, 0x9, 0xee6, 0x3, 0x4, 0x8, 0x6d, 0xffff, 0x7ff, 0x5, 0x8, 0x290, 0x8, 0x1, 0x382, 0x7, 0x4c, 0x0, 0xe7e, 0xf3c, 0x5, 0x4, 0xc, 0x1, 0x8, 0xffffff70, 0xa, 0x2, 0xc65, 0x0, 0x101, 0xa, 0x9cf, 0x7, 0x3, 0x3, 0x2, 0x8, 0x3, 0xc2, 0x2, 0x2, 0xfffffffe, 0x272, 0x81, 0x7, 0x3, 0xa, 0x7, 0x6, 0x57, 0xfa, 0x2, 0x4, 0x3, 0x80000001, 0x3, 0x4, 0x2, 0x0, 0x1800, 0x4, 0x4, 0x4, 0x2, 0x6, 0xd85, 0x8, 0x1, 0x7fffffff, 0x1d489f42, 0xfffffff8, 0x5b, 0x54, 0x8b94, 0x7, 0x4, 0xe, 0x0, 0x3, 0x3ff, 0x9, 0x2, 0xffffff47, 0x3, 0x260, 0xe, 0x40, 0x2017, 0x3bf1, 0x2, 0x6, 0x3, 0xfffffffd, 0x5, 0x591, 0x5, 0x0, 0xd, 0x3, 0x4, 0x80000000, 0x3940, 0x398, 0x9, 0x1, 0x3, 0x9, 0x0, 0x9, 0x6, 0x81, 0xa0, 0x5, 0xe, 0x4, 0xffffff84, 0xffffff81, 0x7, 0x1, 0x4, 0x4, 0xfff, 0x6, 0x7fffffff, 0x2, 0x1, 0xbf0, 0x2, 0x6, 0x3, 0xa247, 0x0, 0x6, 0x8, 0x4, 0x8, 0x3, 0xffffab4d, 0x9, 0x80000001, 0x80000001, 0x3, 0x1, 0x4, 0xc, 0x2667cc1e, 0x67889cf2, 0x8001, 0x1, 0x8000, 0x7, 0x7, 0x1ff, 0x5, 0x2b1, 0x5, 0x43, 0x7, 0x6, 0x9, 0x9, 0x6, 0x6, 0x1a, 0x7a, 0x5, 0x401, 0x7, 0x401, 0x7, 0x800, 0x7, 0x4, 0x4, 0x9, 0xfff, 0x1, 0x7, 0x7, 0x6, 0xffffff94, 0x6, 0x3, 0x6, 0x401, 0x800, 0x200, 0x8, 0x5, 0x6, 0x6, 0x1, 0x7, 0x9, 0xf, 0xfffff16a, 0x1811, 0x4, 0x1, 0x3, 0x60c2, 0xfffffffe, 0x5, 0x6, 0x4, 0xc12c, 0xb82, 0xfff, 0x9, 0x3, 0x3ff, 0x6, 0x2, 0xffff, 0xffffffff, 0x6, 0x0, 0x8001, 0x1ff, 0x80000001, 0x999, 0x4, 0x1, 0x8, 0xa, 0x0, 0x4, 0x2, 0x4, 0x80000001, 0xffffffff, 0x80, 0x81, 0x0, 0x2, 0x8000, 0x6, 0x142c0000, 0x0, 0x101, 0x1e16, 0x1, 0x4, 0x8, 0xff, 0x0, 0x7fffffff, 0x2, 0x8, 0x2, 0x0, 0xff, 0x7, 0x3, 0x3, 0x7ff, 0x7, 0x7, 0x5, 0xfffffffe, 0x100, 0x3, 0x0, 0x8, 0x6, 0x2, 0x4, 0x5, 0x1, 0x8, 0x81, 0x5, 0x0, 0x7ff, 0x9, 0x7, 0x2, 0x7, 0x2, 0x5, 0x4, 0x8, 0x74, 0x8, 0x7, 0x1a437214, 0x6, 0x8, 0x1, 0x100, 0x3, 0x0, 0x9, 0x6, 0xffffffff, 0x10, 0x2, 0x5, 0x400, 0x3, 0x0, 0x99, 0x2, 0xff, 0xfffffff9, 0x101, 0xc, 0x6, 0x2, 0x6, 0x7fffffff, 0x6, 0x3e, 0x10001, 0x4, 0x0, 0x6, 0xd, 0x3b, 0x3, 0x2f, 0x3, 0x3, 0x1, 0x4, 0x80000000, 0xe, 0xf4, 0x2, 0x1, 0xd, 0xcd2, 0xa6, 0x1, 0x6, 0x6, 0x4, 0x6, 0xffffffff, 0x200, 0xfffff7f5, 0x7, 0x1000, 0x10, 0x400, 0x8, 0x7, 0x5, 0x7fffffff, 0x0, 0xf, 0x2aae, 0xff, 0x7, 0x6, 0xfffffff4, 0x7f, 0x800, 0xffffffff, 0x9b, 0x1, 0x8, 0x4, 0x6, 0x9, 0x10000, 0x0, 0x6, 0x8, 0x0, 0x2, 0x5, 0xf, 0x3, 0x6, 0x5, 0x8, 0x100, 0x6, 0x8, 0xfffffff8, 0x28, 0x9, 0xfffffff9, 0x6, 0x7, 0x3, 0x3, 0x2, 0x7, 0x5, 0x6a7, 0x5, 0xf3, 0x401, 0x200, 0x1, 0x0, 0x6, 0x7, 0x7f, 0xfffffff9, 0x9, 0xb6c, 0x0, 0x6, 0x3, 0x6, 0x2, 0x100, 0x800, 0xfffffff2, 0x480, 0x5, 0xffff, 0x9, 0x3, 0x1, 0x7, 0x2, 0x400, 0x3, 0x140]}) r4 = syz_open_dev$hiddev(&(0x7f0000001480), 0x7, 0xa4001) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, &(0x7f00000014c0)={{0x3, 0xfffffffe, 0x3383, 0x0, 0x4, 0x9}, 0x1b0, [0xffff, 0xfffffff9, 0xfffffffc, 0x5, 0x4, 0x2, 0x3ff, 0x10, 0x4, 0xfffff319, 0x4, 0x2, 0xff, 0xfffffff9, 0xe, 0x7, 0xd07, 0x0, 0xffffffff, 0x9, 0xfff, 0x4, 0x2, 0xffffff07, 0x5, 0x1, 0x2, 0x4, 0x9, 0xa4, 0x7ff, 0x66f, 0x0, 0x65bf, 0x8, 0x1, 0xfffffff9, 0x1, 0x6, 0x9, 0x5f, 0x200, 0x8f, 0xc5, 0x3, 0x1000, 0x400, 0x200, 0xc0, 0xfff, 0x0, 0x2, 0x0, 0x0, 0x5, 0x1, 0xdd01, 0x0, 0x2, 0x5, 0x1, 0x5, 0x9, 0x9, 0x6, 0x3, 0x6, 0x1, 0x80000000, 0xffffffff, 0x9, 0x80000001, 0x8, 0x2, 0x86f, 0xffff, 0x3, 0x5, 0x100, 0x2, 0x80000001, 0x1, 0xfffffffa, 0x8d0, 0x4, 0x1, 0x5a340669, 0x40, 0xe33, 0x7, 0xfffffffc, 0x2, 0xfffffff4, 0x6, 0x800000, 0xf1, 0x8, 0x4, 0x9cd8, 0x200, 0xe, 0x5, 0x4, 0x2, 0x6, 0x57, 0x8, 0x8, 0x2, 0x8001, 0x9, 0x1, 0x2, 0xe28, 0x80, 0xff, 0xffffffff, 0x9, 0x8, 0x0, 0x8, 0x0, 0x10, 0x8, 0x5, 0x62, 0x0, 0x6, 0xfffffffd, 0x2, 0x2b723726, 0x5, 0x5, 0x9, 0x3, 0x1, 0x1, 0x3, 0x8, 0x8, 0x7, 0x9, 0x8, 0x8, 0x0, 0x800, 0x3ff, 0x119a, 0x9, 0x38, 0xfffffff8, 0xcd, 0xa6, 0xcad, 0x1d95, 0x6, 0x0, 0x3, 0x7, 0xd0c2, 0x6, 0x7fffffff, 0x6, 0xe, 0x40, 0xbc, 0x7, 0x9, 0x3, 0x1, 0xab2e, 0x6, 0x3, 0x10, 0x0, 0x1, 0x7, 0xc, 0x5, 0x4, 0x7f, 0x439, 0x40, 0x3f7e, 0x2, 0x10001, 0xffffff00, 0x3, 0x24b6, 0x6, 0x8, 0xfffffffb, 0x1, 0x5, 0x1da, 0x400, 0x8, 0x800, 0x101, 0xc, 0xfffffffe, 0x1000, 0x0, 0x2, 0x46fdb41d, 0x3, 0x1, 0x2, 0x4, 0x55d, 0xcec, 0x6, 0x7ff, 0xfffffffc, 0xffffffff, 0x3, 0x7fff, 0x2, 0x10001, 0x8, 0x3, 0x10000, 0x64, 0x0, 0xfffff0d4, 0x7f, 0x4, 0x9, 0x7, 0x5, 0x6, 0x0, 0x0, 0xf, 0x0, 0xa, 0xfff, 0x8, 0x1, 0x0, 0x1, 0x2, 0x6, 0x7, 0x2, 0x6, 0x2, 0x2, 0x4, 0xc, 0xac000000, 0x4, 0x2, 0x100000, 0x80000001, 0x10, 0xa000, 0x5, 0xffff5f17, 0x4, 0xfffffff8, 0x9, 0x7, 0x39bd, 0xffffffff, 0x2, 0x2, 0x1000, 0xf6b1, 0x3, 0x1, 0x330f23aa, 0x7, 0x100, 0x100, 0xfffffff7, 0x9, 0x400, 0x2873193c, 0x81, 0xf7f5, 0x6, 0x780, 0x1, 0x6, 0x6, 0x3, 0x5, 0x1ff, 0xd609, 0x0, 0x7, 0x0, 0x6, 0x8, 0x3, 0x3, 0x6, 0xffffffff, 0x93d7, 0xa, 0x0, 0x8, 0x8, 0xffffffff, 0x7, 0x2, 0x7ff, 0x200, 0x1, 0x62, 0x80, 0x3f, 0x9, 0x9, 0x8c4d, 0xac0, 0xb33a, 0xd158, 0x4, 0x9, 0xc, 0xfffffff8, 0x5, 0x9, 0x3, 0x9, 0xa05, 0x7fff, 0xa7, 0xfffffff9, 0x6, 0x1, 0x4, 0x40, 0x7, 0x0, 0x9, 0x0, 0x2, 0x800, 0x7, 0x7, 0x5, 0x1000, 0xfff, 0x7, 0x8, 0x0, 0x5, 0x7fff, 0x7, 0xfffffd28, 0x80000000, 0x7, 0x5, 0x1704, 0x80000000, 0x6068, 0x2, 0x650, 0x7, 0x7, 0xfffffffa, 0x8, 0x7, 0x0, 0x0, 0x3, 0x3, 0x6, 0x3ff, 0x7241, 0x63d5, 0x3, 0x0, 0x5, 0x8000, 0x191, 0x80000000, 0x2, 0x0, 0xff1, 0x5, 0x2, 0xfffffffe, 0x8, 0x743, 0x1, 0x3, 0x4, 0x2, 0x8000, 0x1ff, 0xb, 0x3, 0x2, 0x8, 0x6, 0x6, 0x9, 0x7, 0x1d35d0fb, 0xba7, 0x3cb, 0x5, 0x5, 0x100, 0xcc, 0x7, 0x3b0603a, 0x77f4, 0x29a800, 0x50a2c418, 0x7, 0x9, 0x8, 0x3, 0x9, 0x0, 0x20, 0x8, 0x800, 0xd3d, 0xfffffff9, 0x9, 0x3ee6, 0x5, 0x5, 0x5, 0xfffffffb, 0xf39d, 0x0, 0x8c, 0x401, 0x7fff, 0x6, 0x5, 0x0, 0x81, 0xfffffffe, 0x1, 0x400, 0x1, 0x19f6, 0x4, 0x9, 0x7, 0x7, 0xfdc9, 0x5, 0x101, 0x5, 0x8, 0x24, 0x3, 0x53e3, 0x8, 0x2, 0x0, 0x0, 0xdfc, 0x10000, 0x7, 0x8, 0x1, 0x8, 0x2, 0x7, 0xbc4f, 0x1, 0x12000, 0x322f2034, 0x2, 0xffff, 0x400, 0x5, 0x3, 0xfff, 0x3, 0x48000, 0x6, 0x3, 0x4, 0x8, 0x0, 0xcbc, 0xd42, 0x1, 0xffffff7f, 0x4c, 0x6, 0x8, 0x6, 0x7c, 0x4, 0xd2, 0x0, 0x8, 0x0, 0xf, 0x4, 0x8, 0x7f, 0x6, 0x80000001, 0x1, 0x0, 0x9, 0x6, 0x730, 0xc, 0x100, 0x8000, 0xb558, 0x401, 0x3, 0x6, 0x6, 0x4, 0x98a6, 0xfffffff3, 0xd, 0xffa, 0x9115, 0x33, 0x0, 0xffff, 0x9, 0x401, 0x2, 0x79a, 0x5, 0x2, 0x2, 0x200, 0x7f, 0x20, 0xfffffff6, 0xfffff91d, 0x10000, 0x7fffffff, 0x2, 0x9, 0x335, 0x1ff, 0x0, 0x9, 0x1, 0x1, 0x1, 0x800, 0x8001, 0x100, 0x80, 0x3, 0x2, 0x2, 0x800, 0x758f9f5, 0x2, 0x800, 0x7e, 0x5, 0x10000, 0x100, 0x86, 0x9, 0x0, 0xffffb115, 0xb7, 0x0, 0x9f5, 0x2, 0x7, 0x4, 0x10000, 0x0, 0x1c3, 0x7, 0x8, 0x1, 0x9, 0xffff9090, 0x28, 0x81, 0x16, 0x51e, 0x8000, 0x2, 0x9, 0x7, 0xd, 0x9, 0x0, 0x2, 0x9, 0xfffffff4, 0x7, 0x2, 0x7, 0x9, 0xfffffff9, 0x0, 0xfffffa3b, 0x3, 0x5, 0x7d, 0x100, 0x2c, 0x1000, 0x1, 0x401, 0x6d5, 0x200, 0x3, 0x9, 0x2, 0x3, 0x8000, 0xfffffffd, 0xee24, 0x7, 0xe, 0x5, 0x7, 0x3, 0xfff, 0xc0000, 0x7, 0x2, 0xc, 0x6, 0x5, 0x100, 0x7, 0x73, 0x9000, 0x8000, 0x82f, 0x1, 0x400, 0x2c000000, 0xd, 0x4, 0x7, 0x6, 0x9, 0x6, 0x7, 0x9, 0x6, 0x0, 0x6, 0x8, 0x5, 0xb, 0x2, 0x7, 0x9, 0xfffffffe, 0x2, 0xc61, 0x40, 0x877, 0x5, 0x7, 0x5, 0x80000001, 0xfffffeff, 0x4, 0x100, 0x3, 0x0, 0x0, 0x58f, 0x7, 0x7f, 0x7fff, 0x0, 0x6b8, 0xf, 0x1, 0x7, 0x81, 0x6, 0x2, 0x198, 0x5, 0xe, 0x1, 0x80, 0x1781, 0x10000, 0x9, 0x5, 0x2bb, 0x0, 0x5, 0x1, 0x7b19, 0x4, 0x7, 0x6, 0x4, 0x0, 0x1, 0x9, 0x7, 0x1, 0x5, 0x0, 0x80000001, 0x2f, 0x8, 0x10000, 0x1, 0x5000, 0x2, 0x8, 0x2, 0x100, 0x0, 0x40, 0x7, 0x400, 0x7, 0x10, 0x6, 0x7fffffff, 0x6, 0x47, 0x0, 0xfffffff9, 0x6, 0x4, 0x8, 0x7f, 0xfffffac9, 0x9, 0xbdb, 0xbdd1, 0x7, 0x9, 0x9, 0x4, 0x0, 0x40000, 0x57ab, 0x0, 0x9, 0x9, 0x3, 0x485, 0x10, 0xd, 0x401, 0xff, 0x200, 0x3, 0x6, 0x80, 0x7, 0x100, 0x0, 0x5d8, 0x8, 0x7, 0x2844, 0x4, 0x9, 0x0, 0x3, 0x200, 0x7, 0xd, 0x8, 0x0, 0x6, 0x200, 0x81, 0x3, 0x7, 0x1, 0xf58, 0x6, 0x2, 0x0, 0x99, 0x4, 0x2, 0x2, 0x101, 0x97, 0x7, 0x9, 0x8, 0x6, 0x1, 0x3, 0x8, 0x7, 0x10000, 0x1ff, 0x8, 0x4, 0xfd9, 0xf, 0x101, 0x8001, 0x4, 0x9, 0x401, 0x3, 0x1, 0x4, 0x2, 0x4, 0x1, 0x80000001, 0x20000, 0x60000000, 0x5, 0x1ff, 0xd3, 0xfffffffa, 0x2, 0xfff, 0x1ff, 0xff, 0xb, 0x9dfd, 0xd, 0x0, 0x5, 0x2, 0x0, 0x4, 0xffffffff, 0x1bf, 0x5, 0x2, 0x5, 0xb, 0xef, 0x1, 0x1, 0x1000, 0x134, 0x1, 0x0, 0x6, 0x400, 0x8, 0xffffffff, 0x3, 0x0, 0x2, 0xfffffff7, 0x7, 0x2, 0xd, 0x8, 0x473, 0x2, 0x4, 0x9, 0x72e, 0xb, 0x800, 0xd, 0x8, 0x1, 0x6, 0x6, 0x1, 0x4, 0x9, 0x3, 0x1, 0x800, 0x9, 0x8001, 0x8, 0x1, 0x3, 0xc, 0x100, 0x7, 0x400000, 0x3f, 0x5, 0x4, 0x8, 0x6, 0x0, 0x7, 0x3a0c, 0xc231, 0x878, 0x3, 0x66, 0x5, 0xf48, 0x5, 0x40, 0x100, 0x1, 0x8, 0x5, 0x1, 0xb, 0x1, 0xff, 0x7, 0x2, 0x5, 0x800, 0xb39, 0x9, 0x0, 0x0, 0x6, 0x5, 0xf, 0x8e1, 0x6, 0xe, 0x5, 0x200, 0x6, 0x3, 0x81, 0xffff0001, 0x401, 0x9, 0x3ff, 0x2b, 0x4, 0xa54, 0x101, 0x0, 0xe3, 0x3, 0x6, 0x9, 0x80000000, 0x101, 0x2, 0x47, 0x4, 0x9, 0x8, 0x100, 0xb89, 0x0, 0xffff, 0x6, 0xfffffffc, 0x3, 0x0, 0x6, 0x1a000000, 0x1, 0xa, 0x7, 0x8, 0x7, 0x7, 0xffffff0a, 0xc000, 0x5, 0x200, 0x4, 0x0, 0x39, 0x4, 0x158f, 0x2, 0x6, 0x9, 0x1, 0x40, 0x2, 0x8, 0x5, 0x6, 0x7fff, 0x80, 0x9, 0x6, 0xff, 0x7, 0x698be323, 0xffff, 0x9, 0x4, 0x31, 0xffffffff, 0x80000001, 0x7, 0x4, 0x80000001, 0x9a, 0xe8c, 0x7, 0x80, 0x8000, 0x7ff, 0x3, 0x1000, 0x40, 0x8, 0x3ff, 0xb841, 0x400000, 0x8, 0x8, 0xc2, 0x8000, 0x6, 0x8, 0x0, 0x3]}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000025c0)={'gretap0\x00', &(0x7f0000002500)={'ip_vti0\x00', r2, 0x80, 0x700, 0x0, 0x2, {{0x1d, 0x4, 0x1, 0x5, 0x74, 0x66, 0x0, 0x6, 0x4, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x13, 0xae, [@empty, @loopback, @remote, @loopback]}, @generic={0x7, 0x7, "c75c936114"}, @ssrr={0x89, 0x7, 0x4c, [@broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x4d, 0x3, 0x4, [{@local, 0x7}, {@broadcast, 0x3}, {@rand_addr=0x64010100, 0x6}, {@broadcast, 0x5}, {@empty, 0x1}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000002780)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x7c, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x4000084) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000027c0), 0x600880, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x18) (async) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000002800)={'bond0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}}) (async, rerun: 32) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002880), r5) (rerun: 32) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000002b80)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002b40)={&(0x7f00000028c0)={0x264, r10, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NODE={0x148, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "5ad97074eed7a02d9e8073b1003eb4a344c4a2d5c202ceb8b28c"}}, @TIPC_NLA_NODE_ID={0x8a, 0x3, "982c6aa22ed04662c19fae9c32f1d83f44f52f5b38c3deace5fe2fac58c085cbdf93fa2e13c2e0d3fec78c14825c7da71ebfbeec00c6f866ee142fcf9676f39e9cc136902915b16f4438b7b7f91b17fac63afda3e78392f125d26f399b3eddda16c4cfb155eeef3b4ddc31737b9377c28fa080a9028ccfa467f02f117c6fc29beead5a858868"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "e7be579e1258aeb5b2bc166e5e4183e471fefd1ef9b3d537b4"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) (async, rerun: 32) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002c00), r5) (rerun: 32) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000002e40)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002c40)={0x188, r11, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xecd}, {0x6, 0x11, 0xbc7e}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x95}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x100}, {0x6, 0x11, 0x9}, {0x8}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xe0}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x20008001}, 0x8004) (async, rerun: 32) r12 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002e80), 0x80200, 0x0) (rerun: 32) ioctl$XFS_IOC_GETBMAP(r12, 0xc0205826, &(0x7f0000002ec0)={0x2, 0xa6, 0xf, 0x6d, 0x1000}) (async, rerun: 64) r13 = eventfd(0x3) (rerun: 64) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r13, 0x6612) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000002f00)={@dev, @initdev, @empty}, &(0x7f0000002f40)=0xc) 3.265178031s ago: executing program 4 (id=306): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x40) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/vlan/vlan1\x00') unshare(0x22020600) (async) readlinkat(r1, &(0x7f0000000080)='./mnt\x00', &(0x7f0000000000)=""/78, 0x4e) 3.195267928s ago: executing program 4 (id=308): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0xa, 0xff) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x3, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f00000000c0)="89", 0x3f80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004480), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000044c0)=[@textreal={0x8, 0x0}], 0x1, 0x18, 0x0, 0x0) fsetxattr$security_ima(r3, &(0x7f0000004500), &(0x7f0000004540)=@v1={0x2, "920e525fedd73f2f1eea822ce25d"}, 0xf, 0x3) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002240)={0x50, 0x0, r4, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x7}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000022c0)="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", 0x2000, &(0x7f00000042c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004380)={0x90, 0x0, 0xffffffffffffffd0, {0x5, 0xfffffffffffffff9, 0x3, 0x4, 0xa585, 0x2, {0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x9, 0xffffffff, 0x1, 0xc000, 0x0, r5, 0x0, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, r5, &(0x7f0000004440)={0x7618, 0x1e6f, 0x1, 0x1}) 3.145764314s ago: executing program 3 (id=309): syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) open(&(0x7f0000002240)='./debug\x00', 0x401, 0x160) (async) open(&(0x7f0000002240)='./debug\x00', 0x401, 0x160) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) syz_usb_connect(0x1, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002c3d79a08fb092660dcae0102130109021200010304b00109040304009ad82203"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 3.108091487s ago: executing program 4 (id=310): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x54, r1, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x24040000) 3.071611921s ago: executing program 4 (id=312): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f0000000100)=""/51, 0x33}], 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000180)={0xffffffffbffffc06, 0xd000, 0x0, 0xffffffffffffffff, 0x11}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000000)={0x14, &(0x7f0000000500)={0x0, 0x23, 0x2c, {0x2c, 0xc, "47a468c1fb56fd4a2625992afe97504bcb6b685b4f6e6c78f94b6e7e15aec50cfa73cddc359cbc4e039f"}}, 0x0}, 0x0) 1.960586306s ago: executing program 2 (id=314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./trace\x00', &(0x7f0000000680)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./trace/trace\x00', 0x0, 0x0) read(r6, &(0x7f0000000700), 0x1000) readv(r6, &(0x7f0000000740)=[{&(0x7f0000000780)=""/9, 0x9}], 0x1) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f0000000080)={[0x1ffc, 0xfec00000, 0xa000, 0xb000], 0x40000000000009, 0xd213a59d20f92569}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000500)=[{0x20, 0x5, 0x2, 0x70ff}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) sendmmsg(r7, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0xd, 0x1afe}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x0, &(0x7f00000001c0)}) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000013c000180"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4088}, 0x4004) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x200007, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.894872753s ago: executing program 3 (id=315): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) sendto$packet(r0, &(0x7f00000003c0)="330320000a00140000007ef52f555f2a0c09000000000000", 0x18, 0x40008c1, &(0x7f0000000400)={0x11, 0x0, r1, 0x1, 0x62, 0x6, @broadcast}, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000a40)={0x140, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_NAT={0x84, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x5}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}]}, 0x140}, 0x1, 0x0, 0x0, 0x8005}, 0x20048891) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40080) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200f0000", @ANYRESOCT=r8, @ANYRES64=r1, @ANYRES32=r8, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x144}, 0xc080) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000006c0)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000700)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r10}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x234, 0x0, 0x40c, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x154, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf7c}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xd, 0x3, 0x6, 0x587a}, {0x0, 0x7, 0x7, 0x4}, {0x8, 0x7, 0x4, 0x6}, {0xd5, 0x7, 0x3, 0xfff}]}}}]}}, {{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r11, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, 0x0, &(0x7f0000000140)) getsockopt$WPAN_SECURITY(r11, 0x0, 0x1, 0x0, &(0x7f0000000040)) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f0000000140)) 1.783038975s ago: executing program 3 (id=316): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'ipvtap0\x00'}, 0x18) r1 = syz_io_uring_complete(0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1ff, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}}, 0x4000014) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000300)={'/dev/syzrnull', 0x0}, 0x440000, 0x0) ioctl$BLKFINISHZONE(r4, 0x40101288, &(0x7f0000000340)={0x8, 0x2}) bind$netlink(r1, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfe, 0x40000000}, 0xc) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd, 0x51}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}}, 0x200040c1) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000500), r1) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r5, 0x800, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_vlan\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) getsockname(r0, &(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000006c0)=0x80) recvfrom$packet(r1, &(0x7f0000000700)=""/176, 0xb0, 0x40002140, &(0x7f00000007c0)={0x11, 0x35e38d780f34c9f9, 0x0, 0x1, 0x4, 0x6, @random="02a3a55c2461"}, 0x14) r7 = openat$incfs(r1, &(0x7f0000000800)='.log\x00', 0x8002, 0x181) ioctl$AUTOFS_IOC_READY(r7, 0x9360, 0x1) listen(r0, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x40, 0x1, 0x4, 0x30ec, {{0xd, 0x4, 0x1, 0x15, 0x34, 0x68, 0x0, 0xf, 0x2f, 0x0, @rand_addr=0x64010100, @private=0xa010102, {[@cipso={0x86, 0x10, 0x3, [{0x2, 0xa, "cfbd1b6e6d4d8196"}]}, @rr={0x7, 0x7, 0xd4, [@multicast2]}, @end, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x3, 0x8, @remote, @private0, 0x7800, 0x8000, 0x7, 0xef4}}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'syztnl1\x00', &(0x7f0000000a40)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x0, 0x2, 0x74, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x700, 0xc, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000b00)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000b40)={@mcast2, 0x0}, &(0x7f0000000b80)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000e40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c00)={0x1c4, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000e80)) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000ec0), 0x4400, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000f00)=0x2, 0x4) 1.768590846s ago: executing program 3 (id=317): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x13, 0x90d, 0xfffffffe, 0x25dfdbfc, {0x4}}, 0x14}}, 0x20004800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) write(r1, &(0x7f00000000c0), 0xffffff4a) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000140)={0x1f}, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r2, &(0x7f00000002c0)=""/16384, 0x4000) 1.752759588s ago: executing program 2 (id=318): timer_create(0x5, 0x0, &(0x7f0000000040)=0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000080)=0x0) timer_settime(r1, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) unshare(0x64000600) 1.659090317s ago: executing program 2 (id=319): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000002c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000600)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000600)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000640)={0xa, 0x0, 0x7f, @loopback}, 0x1c) (async) connect$inet6(r6, &(0x7f0000000640)={0xa, 0x0, 0x7f, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000680), 0x3) getsockopt$bt_hci(r6, 0x11a, 0x1, 0x0, 0x0) (async) getsockopt$bt_hci(r6, 0x11a, 0x1, 0x0, 0x0) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000006c0), 0x1c0002, 0x0) write$vga_arbiter(r7, &(0x7f0000000700)=ANY=[@ANYBLOB='lock io'], 0xc) (async) write$vga_arbiter(r7, &(0x7f0000000700)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r7, &(0x7f0000000740)=@unlock_all, 0xb) (async) write$vga_arbiter(r7, &(0x7f0000000740)=@unlock_all, 0xb) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000400)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000004c0)) (async) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000400)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000004c0)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000500)={0x0, 0xfb87, 0x1, 0x1, 0x8d}, 0x0, 0x1, &(0x7f0000000580)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x2000000, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x101000, 0x0) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) ioctl$KVM_CAP_X86_DISABLE_EXITS(r11, 0x4068aea3, &(0x7f00000007c0)={0x8f, 0x0, 0x1}) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r11, 0x4068aea3, &(0x7f00000007c0)={0x8f, 0x0, 0x1}) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) write$uinput_user_dev(r12, &(0x7f0000000880)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x10000000, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x3d523173, 0x81, 0x0, 0x0, 0xf, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r12, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r12, 0x4004556d, 0x0) ioctl$UI_DEV_CREATE(r12, 0x5501) write$uinput_user_dev(r12, &(0x7f0000000d00)={'syz1\x00', {0x5, 0x9, 0x80, 0x5}, 0x1d, [0xff, 0x1, 0x7, 0x9, 0x7fff, 0xffffff80, 0x66f, 0x4, 0x6, 0xf, 0x1, 0x3, 0xa, 0x8, 0x0, 0x5, 0xbc, 0xd6, 0x67fffe, 0x3, 0x3, 0xfffff800, 0x10, 0x8, 0x9, 0x5, 0x3, 0xf, 0x2, 0x3, 0x5, 0x3, 0x80, 0x4, 0xff, 0x0, 0x81, 0x0, 0x40, 0x7, 0x40, 0x9, 0x81, 0x9, 0x4, 0xffffff81, 0xffffffff, 0x7fffffff, 0x7, 0x6, 0xffffffff, 0x2, 0x6790, 0x5, 0xc60, 0x25, 0x9, 0x6, 0x800000, 0x0, 0x1, 0xfff, 0x2, 0x9], [0xffffff7b, 0x0, 0x3f, 0xc8, 0x3b8ba8e5, 0x10, 0x3, 0xff, 0x9, 0x82, 0xffffff4d, 0x4, 0x16e0, 0x2, 0x10009514, 0x2, 0xa, 0x800, 0x3, 0x40000005, 0x29, 0x4, 0x7, 0xb21, 0x8, 0x3, 0xaaa, 0x6, 0xfff, 0xb, 0x8001, 0x3cba, 0x5, 0x4, 0x7, 0x1, 0x5, 0x0, 0xa, 0x1d, 0x7, 0x1, 0x10001, 0x5, 0x3, 0x7, 0x6, 0x4, 0x7ff, 0x0, 0x0, 0x1, 0x200081, 0x6, 0x36, 0x10000, 0x0, 0x6, 0x9, 0x1, 0x0, 0x81, 0x7fffffff, 0x3], [0xfffffff7, 0x20000, 0x6, 0xfffffffe, 0x6, 0x6, 0x9, 0x80, 0x0, 0xfffffffd, 0x6, 0x2, 0x8, 0x8, 0x5, 0x40, 0xf329, 0x9, 0xe, 0x8, 0x7, 0x100fff, 0x1000, 0x4, 0x1, 0x6, 0x1, 0xfffffffd, 0xfffff021, 0x3419, 0x6, 0xfffffb93, 0x10002, 0x7, 0xfffffffe, 0x1, 0x5, 0xd, 0x200000, 0x101, 0x502, 0x9d, 0x7, 0x2, 0x9, 0x7, 0xfffffffe, 0x0, 0x3, 0x6, 0x8, 0x41a5, 0xe7, 0x12, 0x9a, 0x8e, 0xfffff7f1, 0x800, 0x4, 0x1f4c, 0xecb, 0x40, 0x1000, 0xaaf], [0x4, 0x7, 0x6, 0x4ee3ae5c, 0x7f, 0x0, 0xf2c, 0x6, 0x9, 0x0, 0x9, 0x7, 0x2, 0x7f00000, 0xffff, 0x2, 0x3, 0xeb, 0x6, 0xe03, 0x3, 0xfffffff8, 0x5, 0x9, 0x0, 0x20000d, 0xffffffff, 0x6, 0x7, 0x1, 0x3, 0x400e2, 0x101, 0xf, 0x3, 0x1, 0x3d9, 0xef9, 0x9, 0x9, 0x5, 0x10001, 0x9f, 0xb, 0x7, 0x800, 0x1, 0xff, 0x80000000, 0x1, 0x81, 0x9, 0xffffffff, 0xc8000000, 0x10000, 0x3, 0x7, 0x4, 0x5, 0x402, 0x7, 0x23e1, 0x3, 0x8]}, 0x45c) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001180)=ANY=[@ANYBLOB="140010f67c49f7a46057d740b8c2cfb5911f6b9e4cf0c1717c64fd1d7c3fd11daf4495ca8992e59b220317b1af9f7019b3e9a0fcda357cd1b2864be4cff219f7813a36d07eee40a8ef550586267373a62acace06e45476e94adf87c2319d7ebbd248afcfd09ff0815ce2e983fcecdfe0bd15f52ef73bad918d0e7882c08b9e79770b1190175a5300cbba9e1b41d2f9", @ANYRES16=r13, @ANYBLOB="01002cbd7000fcdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x48014) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001180)=ANY=[@ANYBLOB="140010f67c49f7a46057d740b8c2cfb5911f6b9e4cf0c1717c64fd1d7c3fd11daf4495ca8992e59b220317b1af9f7019b3e9a0fcda357cd1b2864be4cff219f7813a36d07eee40a8ef550586267373a62acace06e45476e94adf87c2319d7ebbd248afcfd09ff0815ce2e983fcecdfe0bd15f52ef73bad918d0e7882c08b9e79770b1190175a5300cbba9e1b41d2f9", @ANYRES16=r13, @ANYBLOB="01002cbd7000fcdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x48014) 1.606743273s ago: executing program 2 (id=320): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x10, 0x80, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0xfffffffffffffd4d, 0x0, 0x0, 0x10, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) (fail_nth: 1) 1.34742158s ago: executing program 2 (id=321): syz_usb_connect(0x0, 0x42, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002000000407b060323000500000001090230"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.selinux\x00') r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='unlock i'], 0xe) r1 = memfd_secret(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000900)={0x1, &(0x7f0000000940)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x3, &(0x7f0000000980)={0x0, 0x4}, &(0x7f0000000a00)=0x0, 0x0, 0x0) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x21, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r3, 0x0, 0x68, 0x1) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000ac0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x11}}}, &(0x7f0000000b00)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000140)=0x1) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000b40)={0x0, 0xc1, 0x8000, 0xfffffffd, 0x7f}, &(0x7f0000000bc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x40, 0x7, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x200, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 895.659807ms ago: executing program 3 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000000)=0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1fe) mount(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000380)="70f65f5f73742f6576656e7431202e2f66696c65303a30783020617267323d256278", 0x22) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setuid(0xee01) syz_clone3(&(0x7f0000000580)={0x180801400, &(0x7f0000000600)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r3, 0x0, 0x0, 0x14, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './tracing'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file1\x00', 0x2441, 0x83) write(r5, 0x0, 0x0) 892.948327ms ago: executing program 1 (id=324): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) sendto$packet(r0, &(0x7f00000003c0)="330320000a00140000007ef52f555f2a0c09000000000000", 0x18, 0x40008c1, &(0x7f0000000400)={0x11, 0x0, r1, 0x1, 0x62, 0x6, @broadcast}, 0x14) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000a40)={0x140, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_NAT={0x84, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x5}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}]}, 0x140}, 0x1, 0x0, 0x0, 0x8005}, 0x20048891) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40080) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200f0000", @ANYRESOCT=r8, @ANYRES64=r1, @ANYRES32=r8, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x144}, 0xc080) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000006c0)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000700)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r10}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x234, 0x0, 0x40c, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x154, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf7c}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xd, 0x3, 0x6, 0x587a}, {0x0, 0x7, 0x7, 0x4}, {0x8, 0x7, 0x4, 0x6}, {0xd5, 0x7, 0x3, 0xfff}]}}}]}}, {{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r11, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, 0x0, &(0x7f0000000140)) getsockopt$WPAN_SECURITY(r11, 0x0, 0x1, 0x0, &(0x7f0000000040)) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, &(0x7f0000000140)) 861.85098ms ago: executing program 1 (id=325): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22003, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x22003, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0xa, 0x3, 0x10000d, 0x8000000000000001, 0x9, 0x8000040000000001, 0xb3, 0x8, 0x2, 0x2, 0xffffffffe, 0x2081, 0x9, 0x1fd, 0xe6, 0x4], 0x1000, 0x383fc2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 815.187725ms ago: executing program 3 (id=326): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000003480)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f00000a0000/0x6000)=nil, 0x6000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000034c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003500)={0x4c, 0x0, &(0x7f0000003540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c, 0x18, &(0x7f00000035c0)={@raw_ptr={0x70742a85, 0x0, &(0x7f0000003640)}, @flat, @fd={0x66642a85, 0x0, r1, 0x0, 0x3}}, &(0x7f0000003680)={0x0, 0x28, 0x40}}, 0x2000}]}) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x19) (async) r3 = syz_init_net_socket$nfc_raw(0x27, 0x25a2b4b4f601cd5, 0x0) recvmmsg(r3, &(0x7f0000003280)=[{{&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f00000024c0)=[{&(0x7f0000000140)=""/194, 0xc2}, {&(0x7f0000000240)=""/40, 0x28}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/148, 0x94}, {&(0x7f0000001340)=""/124, 0x7c}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/148, 0x94}, {&(0x7f0000002480)=""/21, 0x15}], 0x8, &(0x7f0000002540)=""/199, 0xc7}, 0x5}, {{&(0x7f0000002640)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000026c0)=""/135, 0x87}, {&(0x7f0000002780)=""/223, 0xdf}, {&(0x7f0000002880)=""/230, 0xe6}, {&(0x7f0000002980)=""/109, 0x6d}, {&(0x7f0000002a00)=""/50, 0x32}, {&(0x7f0000002a40)=""/119, 0x77}], 0x6, &(0x7f0000002b40)}, 0x2b6f}, {{&(0x7f0000002b80)=@qipcrtr, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c00)=""/167, 0xa7}, {&(0x7f0000002cc0)=""/86, 0x56}], 0x2, &(0x7f0000002d80)=""/115, 0x73}, 0x4}, {{&(0x7f0000002e00)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002e80)=""/30, 0x1e}, {&(0x7f0000002ec0)=""/67, 0x43}], 0x2, &(0x7f0000002f80)=""/181, 0xb5}, 0x49d}, {{&(0x7f0000003040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000003200)=[{&(0x7f00000030c0)=""/132, 0x84}, {&(0x7f0000003180)=""/81, 0x51}], 0x2, &(0x7f0000003240)=""/26, 0x1a}, 0x9}], 0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448df, 0x0) (async, rerun: 32) r5 = syz_open_dev$evdev(&(0x7f0000002b40), 0x3, 0x2d4800) (rerun: 32) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f00000033c0)=""/153) 718.876475ms ago: executing program 1 (id=327): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x1a8c2000) setresuid(0xee00, 0xee00, 0x0) r0 = getpid() prlimit64(r0, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1000, 0x800, 0x0, 0x2}, 0x20) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 597.577167ms ago: executing program 1 (id=328): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x4000004) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000180)={0x200000, 0x200000}) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) pipe2(&(0x7f00000001c0), 0x80000) (async) ioprio_get$pid(0x2, 0x0) get_robust_list(r0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) 312.948457ms ago: executing program 1 (id=329): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x10, 0x80, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0xfffffffffffffd4d, 0x0, 0x0, 0x10, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) (fail_nth: 2) 312.532857ms ago: executing program 1 (id=330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) write$cgroup_pressure(r3, 0x0, 0x0) connect$can_bcm(r2, &(0x7f0000000000), 0x10) getrandom(&(0x7f0000000580)=""/286, 0xffffff9a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000a00)={0x1, {{0xa, 0x4e1f, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}}, 0x0, 0x3, [{{0xa, 0x4e24, 0x23, @private0={0xfc, 0x0, '\x00', 0x41}, 0x14001}}, {{0xa, 0x4e24, 0x101, @private0, 0x1}}, {{0xa, 0x4e24, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}]}, 0x210) sendmsg$can_bcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5, 0x901, 0xfffffbff, {}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "d7c139a0d4fe372efa7e8cdba3417665ffb2b92af56c860b29402f8111302ae84c15b9dd43bda8847acbe40605b5ee1c8f0676814afc7e9f0413567e592c7c15"}}, 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x6, 0x74, 0x1, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x2, 0x3, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x8044) r5 = socket$inet6(0xa, 0x80002, 0x0) fgetxattr(r5, &(0x7f0000000240)=@known='system.sockprotoname\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000002c0)="64ab0f225826d1f566b8000000000f23d00f21f866352000000b0f23f80f01c5c32ef2f265f40f01c10fc1da66b94a0b00000f32", 0x34}], 0x1, 0x1, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0xfdef) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x810, 0xffffffffffffffff, 0xc808000) capset(&(0x7f0000000940)={0x20080522}, &(0x7f0000000980)={0x0, 0x0, 0x8, 0x81, 0xffffffff}) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x20000000) r10 = syz_open_dev$hidraw(&(0x7f0000000900), 0x0, 0x14a042) ioctl$HIDIOCGRDESC(r10, 0x90044802, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x8, 0x400000000008, 0x7, 0x4000000000000e52, 0x800000000001, 0x547a, 0x1041, 0x200200000006, 0x80000000000, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000004, 0x0, 0x8000000000005, 0x800040068], 0xffffffff}) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000300)=0x7) 51.647994ms ago: executing program 4 (id=331): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000071c0)={0x1, &(0x7f0000007200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000071c0)={0x1, &(0x7f0000007200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) userfaultfd(0x80001) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000007240)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007280)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x400000, 0x2, &(0x7f0000c00000/0x400000)=nil) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) (async) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000002240), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000002280)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000002280)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000022c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f0000002300)={@val={0x0, 0x888e}, @void, @eth={@random="61f85f8df675", @random="000000000104", @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4f9206", 0x3c, 0x3a, 0x0, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x5, '\x00', {0x0, 0x6, "8ba6ed", 0x9, 0x33, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0xd}, [@hopopts={0x2b}], "73a9e606"}}}}}}}}, 0x76) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x6, 0x3}, 0x10) bind$tipc(r5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=332): syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef020140000000000001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x68e, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0x22, 0x9a, 0xd0, 0x40, 0x16d8, 0x6004, 0x3368, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67c, 0x3, 0x4, 0x5, 0x40, 0xfe, "", [{{0x9, 0x4, 0x2f, 0x4, 0xa, 0x9a, 0x43, 0x67, 0xfd, [@generic={0x9a, 0x22, "83094f041046ef5d64e16ab231098a54a80ca17a1582237a813cb12b37b12c9c0824f1932b89fdaf437b173caa0c686766b1056b8218a737b90be412e30416878c9678121dd7ea2226a913919f8cdde07cc24a1507f09c84f525c8c4f69ba45f80dd0ff0b473f66eff0212d942b4e3450b059b30a7b8237a74a651c111ae2bdf02bd3aac0bbb0149cac10d09708a621e46f3df8de27770d0"}], [{{0x9, 0x5, 0x0, 0x0, 0x3df, 0x9, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xb, 0x7f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb8, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x85, 0x7}]}}, {{0x9, 0x5, 0x80, 0x8, 0x200, 0x90, 0x6, 0x5, [@generic={0x98, 0xa, "092276131dd38a86149a29e0e206f9e642d4cd87747c42cf405e50fa8937fcb3f40a8b6280c4ef3f693dd89938171b1fcd9b42e8cbec93f5f6686d95b1029e06113c1a7abea449cec4c45e953ae4726ec78ebeb18c02daa585bd1b1d90518fca25b914146adfe8e8602b61a585bfbf995b27a1499d61a374bcd7109c5158614dd9319df3f3ae6f1b0c1fc9c9f78bdc0a09227e71d88d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}]}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x6, 0x95, 0xe}}, {{0x9, 0x5, 0x8f, 0x0, 0x10, 0x3, 0x2, 0x88, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf7, 0x3}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x8, 0x1, 0x9}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x7, 0x4, 0x14, [@generic={0x76, 0x22, "099ed6f331329b39c9be3abb8578d12cc6fbeceaddf0e035f66b98e6ed8989d3a2a926c9a1e7fda4373a14f27987ec0842224709d4a04cc4253ec22a676b577c701c2f6751024d280cf3f5c1485ec1020fd5fc260cb1c146f8e57fdee55d78265c2494163a5ae786142395847d25191d0d161e68"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x48, 0x8}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0x2, 0xa9, 0x54, [@generic={0x3, 0xb, "b9"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x7}]}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x3a, 0x2, 0x9}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x7, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x4d}]}}]}}, {{0x9, 0x4, 0x28, 0x4, 0x4, 0xb3, 0x83, 0x99, 0x3, [@generic={0xad, 0xb, "20a2b10fccf5d22cb2bd67a972ae67274bda835ddaa5dabdac736024fc2a535cb75f8640593d67d76fe3358f12d1b820d0d8ec2d72bb36798e1dc8e7b13cc3850dbc563cf4486bed9a7073d2fbc02464a27895b7adb45e3cf46ffbf0f30b7de4a886bfa2ccd5b8c45389ae2243fda367abb46a10cf490c32ac3bf9fbd3a6c4a8bd05abf417529bdd154614cf4104607d0cab34cdabfaf4425db319852fc1bd031c2c65b2e0576618c3a214"}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x5, 0x8, 0x3}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0xc7d, 0xb, "83edfc"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0xbd, 0xf3, 0x68}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7, 0x3, 0x0, 0x7, "5ff962ba7ee5c8"}]}], [{{0x9, 0x5, 0x3, 0x4, 0x8, 0xfa, 0xc0, 0x7, [@generic={0x91, 0x11, "14c7e687216cc13c563a825129de255bcdd067de6ae1aeaeed761b3ede7656463998a63604e68504d0b1c9e1ead5aa591117afece56e650ebe27258740379b0f80d548ecf094ee2269bf1481f13d5e4d9f5b3ff94e1fe9bdf632085861c1344f2ae3c73d1ab33fe21d39397cd149834e7d49846d48189b030c19c2bc431e8c82e674b86c9ba3b5c0e31de680f75e31"}, @generic={0xd5, 0x24, "4cf3d65259a09072fb00dc54846e16c0aa59d38817bf51f8c3b104e8b95635e3b6dcc07f4b80b2bf53366f83e92998b4ecb87401cbc62aa0785fc2ebd3c3b156e0e5bb5214c8e938255e2f0398945f7fade029527a125719a386ac51cfe37582d9a71cc0e8c110c56703e6770e5f19f48e980e3327e85e634212c21d83d0e13de1df084a4f47fb0bd8193579da8cd208fa8971d3f5e4b83403ba99bca26158423c6456f2221e51ad193c46a7c1bd9e8e35e7ab55974276b0292c49bcf928b41afbdfbffb09c95c2bf9be122e3aba73838c368b"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0xa, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xe7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xc50}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x5, 0x56, 0x2, [@generic={0x55, 0x22, "6c628a00ad9ad548c3da8c0a96d5297354ee1e02e0933663d2b7ccafdb2963c19495a5f70023cadd3d8779c545122e1137f5ce6ad20cdfea8f6e2daf950c977fb198e2dcb5922a4b620fb5dd4cbfcdd975ab13"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x40, 0x4, 0x9e, 0xd}}]}}, {{0x9, 0x4, 0x56, 0xd7, 0x5, 0x53, 0x40, 0xc6, 0xbf, [@uac_as={[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x8, 0xf6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0xfe, 0x9, 0x10, 0x4}, @as_header={0x7, 0x24, 0x1, 0x6, 0x3, 0x1002}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x1, 0x1, 0x8, "1003"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x6, 0x1, 0x81, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfcb, 0x2, 0x3}]}], [{{0x9, 0x5, 0x7, 0x10, 0x200, 0xfe, 0x8, 0x8}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x7, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0x1ff}]}}, {{0x9, 0x5, 0xa, 0xc, 0x400, 0x1, 0x1, 0x5f}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x1, 0x33}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0xfe, 0x4, 0x5, [@generic={0xde, 0x21, "bf8b55dc1889151f669649d6efc505e1eac37541e17bca8b1acb00f4153bfc62762de3da60672b9eedd0591610934f94e76ab68dc4beb1a22286329f14cf6c7713f2168ce0c0ca4c1371b19e51ec6371f8815773d7b423a659112bea5e7a28340d042d176427810e85f71103cf6b9225afafb57fed2ff18643a19a5e30d694823a24cec46d347a6d8a504e7202788b8b99e4ae3853739bd0af698d9b6f1566ea0e79d9386cb5a739737fe34b4f588f739212bb2292251af7208764578ef996b1d4dfa95aca2e9e3f16cfc95077c42ff3539caa89769591d7a354a1c7"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x7}]}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x201, 0x2, 0x9, 0x7, 0x8, 0xfb}, 0x50, &(0x7f0000000d40)={0x5, 0xf, 0x50, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x49, 0xb, 0x7, 0x6234, 0x40}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0x800, 0xf0f, 0x6, [0xff0000, 0xff0000, 0xc000, 0xc0c0]}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x49, 0xf0f, 0x5, [0x7e00, 0xffc0c0, 0xff0000, 0xff0000, 0x0, 0xcf]}]}, 0x7, [{0xce, &(0x7f0000000dc0)=@string={0xce, 0x3, "18d3f2d139071cce9e00adcf5d2e8b89f860d899da3e161d589d353075ab4b634b3196c010afa1e7f3df5a9e56a11f8ee4a1dba542f9b6901878b7ab715bdcb50f69b7690bbd387925f5102344cdbf8b8526f81a1ce7932c21008e826d9a40d4d5e3b3c7ca368b6809aad827b374e172bd92ea9137c45cd49be2dee8292d61b345568bc8f10f3d8fb77ab2f89000add17a9ee2474f1d03b2ac732e1594c437ce9cdfc39ffdad1a8887e843a687f2f967d074e2f0f387f7a6b417c1ae7ddcbd7833b9744f2b303a32a24fb720"}}, {0x8e, &(0x7f0000000ec0)=@string={0x8e, 0x3, "812e30f0085b08a9f12cf263a87a44c646e1474e9a72c6367912a15c466aafecf5aa5d486ca17d5521a08e4adf3d574835f191fba997bcf6a3bcb058e5ed94a892407c2288791e462a8c47b40c67dffd9430870267da8633bf8744aa4fe3b718f36a0a3ff4faf0408253edb112c3b2b3fe98fc2ca6504589ae298b8a1bb6a7e3ada9ce39d50eaf3e54e864c0"}}, {0x6d, &(0x7f0000000f80)=@string={0x6d, 0x3, "fd9b6fbdae8f17b3280cf7f067ac4b052f19faedd05b024d11079045a24cc1711584b9f21100f5ee23a53ec3cb9c8dd467625cb3e42adcad41a6d6938b7ad8d9fbde9524d82725c913d837b037a98fdd9b628aa614f98f341b062ed9bdc3803268a7cf5cfd77d9b96aa760"}}, {0x7f, &(0x7f0000001000)=@string={0x7f, 0x3, "2d7bce8903a8e4db5561f1589a8b1f223b035cb3f0ca55d4c27be950ca8f7c4b798f6dc0e65ea766d321bf63afb3f3ef19d83edd8d68aa1c34c6befe54462975daee2c1a7c7afb034f4f25d366a476c5129739d94408d9400cdd4e201e891aebd09f0f6a232b64c617a097f5135753f043c5a7ecde896c1f1d7dab1b2a"}}, {0xc2, &(0x7f0000001080)=@string={0xc2, 0x3, "35b7c75f7fffe240b5b18fcf7ad57fe2d655a3adb0eb2445924c784f96f9b0d8d985db072d4ce49eb74254b3dee1c540c99cd5c33b5dec68a9afd487ed9c16577d70822978ac9995011a78da06443e7320942c091fecd18673961f10a0d0f417c52951fa28b44b807277840d8c42a46698150e1ea4675cce7b104c7b556ac3a06b2b30985ab8a193d4c2640404cef21e8b0b19bb2297d3e6619e291529026a8a205f669d3e83ea573f211e676e3fea763d88486d47ea0d5a14b8cb8027d6df0d"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x44b}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 22.931078][ T36] audit: type=1400 audit(1794590017.790:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.954224][ T36] audit: type=1400 audit(1794590017.820:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.956994][ T287] cgroup: Unknown subsys name 'net' [ 22.982559][ T36] audit: type=1400 audit(1794590017.850:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.983097][ T287] cgroup: Unknown subsys name 'devices' [ 23.122416][ T287] cgroup: Unknown subsys name 'hugetlb' [ 23.128137][ T287] cgroup: Unknown subsys name 'rlimit' [ 23.223730][ T36] audit: type=1400 audit(1794590018.080:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.247097][ T36] audit: type=1400 audit(1794590018.080:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.271872][ T36] audit: type=1400 audit(1794590018.080:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.303317][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.312220][ T36] audit: type=1400 audit(1794590018.170:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.337799][ T36] audit: type=1400 audit(1794590018.170:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.368059][ T36] audit: type=1400 audit(1794590018.230:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.393727][ T36] audit: type=1400 audit(1794590018.230:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.394880][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.773821][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.781000][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.788121][ T295] bridge_slave_0: entered allmulticast mode [ 24.794657][ T295] bridge_slave_0: entered promiscuous mode [ 24.801516][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.808580][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.815738][ T295] bridge_slave_1: entered allmulticast mode [ 24.822147][ T295] bridge_slave_1: entered promiscuous mode [ 24.896723][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.903939][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.911204][ T297] bridge_slave_0: entered allmulticast mode [ 24.917525][ T297] bridge_slave_0: entered promiscuous mode [ 24.936334][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.943802][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.950935][ T296] bridge_slave_0: entered allmulticast mode [ 24.957284][ T296] bridge_slave_0: entered promiscuous mode [ 24.963552][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.970665][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.977765][ T297] bridge_slave_1: entered allmulticast mode [ 24.984203][ T297] bridge_slave_1: entered promiscuous mode [ 24.995044][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.002172][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.009274][ T296] bridge_slave_1: entered allmulticast mode [ 25.015670][ T296] bridge_slave_1: entered promiscuous mode [ 25.046993][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.054101][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.061236][ T294] bridge_slave_0: entered allmulticast mode [ 25.067544][ T294] bridge_slave_0: entered promiscuous mode [ 25.077164][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.084803][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.091960][ T294] bridge_slave_1: entered allmulticast mode [ 25.098211][ T294] bridge_slave_1: entered promiscuous mode [ 25.213921][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.221034][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.228379][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.235463][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.271159][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.278274][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.285624][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.292741][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.311803][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.318932][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.326429][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.333525][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.345317][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.352431][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.359897][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.367145][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.418927][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.426353][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.435573][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.442998][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.450813][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.458478][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.465834][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.475969][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.483093][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.499666][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.506788][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.514633][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.521727][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.543305][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.550414][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.558176][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.565241][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.583442][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.590557][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.598488][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.605720][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.639568][ T296] veth0_vlan: entered promiscuous mode [ 25.656276][ T297] veth0_vlan: entered promiscuous mode [ 25.684968][ T295] veth0_vlan: entered promiscuous mode [ 25.690826][ T297] veth1_macvtap: entered promiscuous mode [ 25.710562][ T294] veth0_vlan: entered promiscuous mode [ 25.718479][ T296] veth1_macvtap: entered promiscuous mode [ 25.737748][ T294] veth1_macvtap: entered promiscuous mode [ 25.755001][ T295] veth1_macvtap: entered promiscuous mode [ 25.795624][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.842883][ T312] tipc: Started in network mode [ 25.847950][ T312] tipc: Node identity 7f000001, cluster identity 4711 [ 25.865776][ T312] tipc: New replicast peer: 100.1.1.1 [ 25.866151][ T65] kernel write not supported for file /2/uid_map (pid: 65 comm: kworker/0:2) [ 25.872765][ T312] tipc: Enabled bearer , priority 10 [ 25.890983][ T318] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.901299][ T312] tipc: New replicast peer: 10.1.1.2 [ 26.200749][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.220004][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.359932][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 26.366625][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 26.375195][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 26.386533][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 26.396619][ T9] usb 2-1: config index 0 descriptor too short (expected 58990, got 110) [ 26.405164][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 26.416322][ T9] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 26.426526][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 26.435683][ T65] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 26.446443][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 26.456393][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 2191, setting to 1024 [ 26.466462][ T342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 26.467723][ T65] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 26.486931][ T9] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 26.496118][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.504426][ T9] usb 2-1: Product: syz [ 26.508679][ T9] usb 2-1: Manufacturer: syz [ 26.513715][ T65] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 26.522834][ T9] usb 2-1: SerialNumber: syz [ 26.527510][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.536054][ T65] usb 3-1: Product: syz [ 26.540572][ T65] usb 3-1: Manufacturer: syz [ 26.545264][ T65] usb 3-1: SerialNumber: syz [ 26.552313][ T65] usb 3-1: config 0 descriptor?? [ 26.557675][ T321] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 26.564942][ T321] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 26.777433][ T45] usb 3-1: USB disconnect, device number 2 [ 26.848287][ T346] mmap: syz.0.11 (346) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 26.999868][ T45] tipc: Node number set to 2130706433 [ 27.189913][ T65] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.246599][ T352] netlink: 'syz.3.13': attribute type 40 has an invalid length. [ 27.319955][ T65] usb 1-1: device descriptor read/64, error -71 [ 27.569848][ T65] usb 1-1: device descriptor read/64, error -71 [ 27.809925][ T65] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.959896][ T65] usb 1-1: device descriptor read/64, error -71 [ 28.199874][ T65] usb 1-1: device descriptor read/64, error -71 [ 28.310031][ T65] usb usb1-port1: attempt power cycle [ 28.429708][ T36] kauditd_printk_skb: 85 callbacks suppressed [ 28.429726][ T36] audit: type=1400 audit(1794590023.286:159): avc: denied { read write } for pid=389 comm="syz.2.24" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.471925][ T36] audit: type=1400 audit(1794590023.286:160): avc: denied { open } for pid=389 comm="syz.2.24" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.496654][ T36] audit: type=1400 audit(1794590023.296:161): avc: denied { mounton } for pid=389 comm="syz.2.24" path="/4/file0" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 28.522162][ T395] FAULT_INJECTION: forcing a failure. [ 28.522162][ T395] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 28.535573][ T36] audit: type=1400 audit(1794590023.296:162): avc: denied { name_bind } for pid=389 comm="syz.2.24" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 28.557023][ T395] CPU: 1 UID: 0 PID: 395 Comm: syz.2.25 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 28.557060][ T395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 28.557083][ T395] Call Trace: [ 28.557091][ T395] [ 28.557100][ T395] __dump_stack+0x21/0x30 [ 28.557128][ T395] dump_stack_lvl+0x140/0x1c0 [ 28.557150][ T395] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.557173][ T395] dump_stack+0x19/0x20 [ 28.557189][ T395] should_fail_ex+0x3c2/0x510 [ 28.557208][ T395] should_fail+0xf/0x20 [ 28.557223][ T395] should_fail_usercopy+0x1e/0x30 [ 28.557242][ T395] strncpy_from_user+0x29/0x280 [ 28.557260][ T395] getname_flags+0x106/0x6b0 [ 28.557280][ T395] getname+0x1b/0x30 [ 28.557296][ T395] do_sys_openat2+0xda/0x1d0 [ 28.557320][ T395] ? do_sys_open+0x100/0x100 [ 28.557344][ T395] ? __kasan_check_write+0x18/0x20 [ 28.557371][ T395] ? do_user_addr_fault+0xbf5/0x1230 [ 28.557393][ T395] __x64_sys_openat+0x13a/0x170 [ 28.557418][ T395] x64_sys_call+0xe69/0x2ee0 [ 28.557438][ T395] do_syscall_64+0x57/0xf0 [ 28.557459][ T395] ? clear_bhb_loop+0x50/0xa0 [ 28.557485][ T395] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.557511][ T395] RIP: 0033:0x7ff205f69d0e [ 28.557533][ T395] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 28.557549][ T395] RSP: 002b:00007ff206e63ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 28.557573][ T395] RAX: ffffffffffffffda RBX: 00007ff206e666c0 RCX: 00007ff205f69d0e [ 28.557588][ T395] RDX: 0000000000000002 RSI: 00007ff206037382 RDI: ffffffffffffff9c [ 28.557602][ T395] RBP: 00007ff20603804e R08: 0000000000000000 R09: 0000000000000000 [ 28.557614][ T395] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000006e [ 28.557626][ T395] R13: 0000200000000400 R14: 0000000000000005 R15: 00007ffc9864aec8 [ 28.557643][ T395] [ 28.557756][ T36] audit: type=1400 audit(1794590023.296:163): avc: denied { node_bind } for pid=389 comm="syz.2.24" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 28.659899][ T65] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.664951][ T36] audit: type=1400 audit(1794590023.316:164): avc: denied { unmount } for pid=389 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 28.692512][ T65] usb 1-1: device descriptor read/8, error -71 [ 28.700146][ T36] audit: type=1400 audit(1794590023.446:165): avc: denied { read write } for pid=394 comm="syz.2.25" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 28.829973][ T36] audit: type=1400 audit(1794590023.446:166): avc: denied { open } for pid=394 comm="syz.2.25" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 28.853978][ T36] audit: type=1400 audit(1794590023.446:167): avc: denied { ioctl } for pid=394 comm="syz.2.25" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 28.864266][ T65] usb 1-1: device descriptor read/8, error -71 [ 28.879321][ T36] audit: type=1400 audit(1794590023.446:168): avc: denied { connect } for pid=394 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.969390][ T9] usb 2-1: USB disconnect, device number 2 [ 28.984647][ T402] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 28.993799][ T402] FAULT_INJECTION: forcing a failure. [ 28.993799][ T402] name failslab, interval 1, probability 0, space 0, times 1 [ 29.006581][ T402] CPU: 1 UID: 0 PID: 402 Comm: syz.1.27 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 29.006617][ T402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 29.006633][ T402] Call Trace: [ 29.006649][ T402] [ 29.006658][ T402] __dump_stack+0x21/0x30 [ 29.006684][ T402] dump_stack_lvl+0x140/0x1c0 [ 29.006704][ T402] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.006725][ T402] ? __cfi_do_mmap+0x10/0x10 [ 29.006757][ T402] ? __kasan_check_write+0x18/0x20 [ 29.006792][ T402] dump_stack+0x19/0x20 [ 29.006813][ T402] should_fail_ex+0x3c2/0x510 [ 29.006837][ T402] ? ioctx_add_table+0x158/0x540 [ 29.006864][ T402] should_failslab+0xac/0x100 [ 29.006889][ T402] __kmalloc_noprof+0x69/0x510 [ 29.006925][ T402] ? ioctx_add_table+0x158/0x540 [ 29.006951][ T402] ? _raw_spin_lock+0x92/0x120 [ 29.007029][ T402] ioctx_add_table+0x158/0x540 [ 29.007058][ T402] ioctx_alloc+0x4ee/0x840 [ 29.007085][ T402] __se_sys_io_setup+0x6f/0x230 [ 29.007110][ T402] __x64_sys_io_setup+0x5f/0x80 [ 29.007134][ T402] x64_sys_call+0x26a4/0x2ee0 [ 29.007160][ T402] do_syscall_64+0x57/0xf0 [ 29.007183][ T402] ? clear_bhb_loop+0x50/0xa0 [ 29.007218][ T402] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.007249][ T402] RIP: 0033:0x7f82e9ba94d9 [ 29.007269][ T402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.007289][ T402] RSP: 002b:00007f82e85f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 29.007314][ T402] RAX: ffffffffffffffda RBX: 00007f82e9e25fa0 RCX: 00007f82e9ba94d9 [ 29.007332][ T402] RDX: 0000000000000000 RSI: 000020000000ab40 RDI: 0000000000000002 [ 29.007347][ T402] RBP: 00007f82e9c3804e R08: 0000000000000000 R09: 0000000000000000 [ 29.007362][ T402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 29.007377][ T402] R13: 00007f82e9e26038 R14: 00007f82e9e25fa0 R15: 00007ffd3f9ba1c8 [ 29.007399][ T402] [ 29.219894][ T65] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 29.251012][ T65] usb 1-1: device descriptor read/8, error -71 [ 29.391207][ T65] usb 1-1: device descriptor read/8, error -71 [ 29.469966][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.510024][ T65] usb usb1-port1: unable to enumerate USB device [ 29.619884][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 29.626580][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 29.637858][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 29.649612][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 29.660574][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 29.673570][ T9] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 29.682813][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.690845][ T9] usb 2-1: Product: syz [ 29.695051][ T9] usb 2-1: Manufacturer: syz [ 29.699685][ T9] usb 2-1: SerialNumber: syz [ 29.705231][ T9] usb 2-1: config 0 descriptor?? [ 29.710575][ T406] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 29.721330][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input4 [ 29.766330][ C1] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 29.920866][ T406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.929471][ T406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.941048][ T9] usb 2-1: USB disconnect, device number 3 [ 29.941200][ C1] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 30.064694][ T418] FAULT_INJECTION: forcing a failure. [ 30.064694][ T418] name failslab, interval 1, probability 0, space 0, times 0 [ 30.077657][ T418] CPU: 1 UID: 0 PID: 418 Comm: syz.0.33 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 30.077694][ T418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 30.077707][ T418] Call Trace: [ 30.077713][ T418] [ 30.077721][ T418] __dump_stack+0x21/0x30 [ 30.077748][ T418] dump_stack_lvl+0x140/0x1c0 [ 30.077768][ T418] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.077788][ T418] ? avc_has_perm+0x155/0x240 [ 30.077813][ T418] ? __cfi_avc_has_perm+0x10/0x10 [ 30.077836][ T418] ? hook_file_open+0x1f2/0x8d0 [ 30.077866][ T418] dump_stack+0x19/0x20 [ 30.077886][ T418] should_fail_ex+0x3c2/0x510 [ 30.077913][ T418] should_failslab+0xac/0x100 [ 30.077930][ T418] __kmalloc_cache_noprof+0x41/0x470 [ 30.077999][ T418] ? vhost_task_create+0x12c/0x3f0 [ 30.078020][ T418] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 30.078042][ T418] vhost_task_create+0x12c/0x3f0 [ 30.078061][ T418] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 30.078083][ T418] ? __cfi_vhost_task_create+0x10/0x10 [ 30.078103][ T418] ? __cfi_vhost_task_fn+0x10/0x10 [ 30.078122][ T418] ? __kasan_check_write+0x18/0x20 [ 30.078145][ T418] ? mutex_lock+0x97/0x1d0 [ 30.078166][ T418] ? __cfi_mutex_lock+0x10/0x10 [ 30.078186][ T418] ? kernel_text_address+0xa9/0xe0 [ 30.078211][ T418] kvm_mmu_post_init_vm+0x161/0x300 [ 30.078227][ T418] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 30.078252][ T418] ? _parse_integer_limit+0x195/0x1e0 [ 30.078276][ T418] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 30.078300][ T418] ? kstrtoull+0x13b/0x1e0 [ 30.078323][ T418] ? kstrtouint+0x78/0xf0 [ 30.078345][ T418] ? ioctl_has_perm+0x1bc/0x500 [ 30.078359][ T418] ? __asan_memcpy+0x5a/0x80 [ 30.078382][ T418] ? ioctl_has_perm+0x408/0x500 [ 30.078396][ T418] ? has_cap_mac_admin+0xd0/0xd0 [ 30.078410][ T418] ? __kasan_check_write+0x18/0x20 [ 30.078433][ T418] ? mutex_lock_killable+0x97/0x1d0 [ 30.078456][ T418] ? __cfi_mutex_lock_killable+0x10/0x10 [ 30.078478][ T418] ? proc_fail_nth_write+0x184/0x220 [ 30.078500][ T418] kvm_vcpu_ioctl+0xa43/0x1000 [ 30.078519][ T418] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 30.078536][ T418] ? hook_file_ioctl+0x1ef/0x590 [ 30.078557][ T418] ? __cfi_vfs_write+0x10/0x10 [ 30.078580][ T418] ? __cfi_hook_file_ioctl+0x10/0x10 [ 30.078601][ T418] ? __kasan_check_write+0x18/0x20 [ 30.078624][ T418] ? mutex_unlock+0x90/0x240 [ 30.078644][ T418] ? __cfi_mutex_unlock+0x10/0x10 [ 30.078665][ T418] ? __fget_files+0x2bc/0x330 [ 30.078682][ T418] ? bpf_lsm_file_ioctl+0xd/0x20 [ 30.078699][ T418] ? security_file_ioctl+0x3e/0x110 [ 30.078723][ T418] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 30.078740][ T418] __se_sys_ioctl+0x123/0x1b0 [ 30.078757][ T418] __x64_sys_ioctl+0x7f/0xa0 [ 30.078773][ T418] x64_sys_call+0x1878/0x2ee0 [ 30.078790][ T418] do_syscall_64+0x57/0xf0 [ 30.078806][ T418] ? clear_bhb_loop+0x50/0xa0 [ 30.078829][ T418] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.078850][ T418] RIP: 0033:0x7f2991ba94d9 [ 30.078864][ T418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.078877][ T418] RSP: 002b:00007f2992b08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 30.078934][ T418] RAX: ffffffffffffffda RBX: 00007f2991e25fa0 RCX: 00007f2991ba94d9 [ 30.078959][ T418] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 30.078973][ T418] RBP: 00007f2992b08090 R08: 0000000000000000 R09: 0000000000000000 [ 30.078993][ T418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.079003][ T418] R13: 00007f2991e26038 R14: 00007f2991e25fa0 R15: 00007ffd1201cf38 [ 30.079017][ T418] [ 30.832429][ T430] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 31.079861][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.169901][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.249900][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 31.262075][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 31.279848][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.287917][ T9] usb 2-1: Product: syz [ 31.292164][ T9] usb 2-1: Manufacturer: syz [ 31.296801][ T9] usb 2-1: SerialNumber: syz [ 31.313444][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 31.319737][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 31.330666][ T65] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 31.340758][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 31.346717][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 31.361439][ T65] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 31.370929][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.378967][ T65] usb 4-1: Product: syz [ 31.383673][ T65] usb 4-1: Manufacturer: syz [ 31.388353][ T65] usb 4-1: SerialNumber: syz [ 31.401659][ T65] ums-onetouch 4-1:1.0: USB Mass Storage device detected [ 31.649966][ T65] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 31.653663][ T434] netlink: 36 bytes leftover after parsing attributes in process `syz.3.39'. [ 31.670507][ T434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.679079][ T434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.877085][ T447] overlayfs: missing 'lowerdir' [ 31.904610][ T449] FAULT_INJECTION: forcing a failure. [ 31.904610][ T449] name failslab, interval 1, probability 0, space 0, times 0 [ 31.917426][ T449] CPU: 1 UID: 0 PID: 449 Comm: syz.2.44 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 31.917464][ T449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 31.917480][ T449] Call Trace: [ 31.917487][ T449] [ 31.917496][ T449] __dump_stack+0x21/0x30 [ 31.917525][ T449] dump_stack_lvl+0x140/0x1c0 [ 31.917546][ T449] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.917571][ T449] ? start_poll_synchronize_srcu+0x30/0x30 [ 31.917606][ T449] dump_stack+0x19/0x20 [ 31.917626][ T449] should_fail_ex+0x3c2/0x510 [ 31.917648][ T449] should_failslab+0xac/0x100 [ 31.917673][ T449] __kmalloc_cache_noprof+0x41/0x470 [ 31.917708][ T449] ? kvm_ioapic_init+0x65/0xfb0 [ 31.917734][ T449] kvm_ioapic_init+0x65/0xfb0 [ 31.917757][ T449] ? kvm_pic_init+0x213/0x3a0 [ 31.917783][ T449] kvm_arch_vm_ioctl+0x138b/0x16d0 [ 31.917811][ T449] ? __cfi_kvm_arch_vm_ioctl+0x10/0x10 [ 31.917841][ T449] ? _raw_spin_unlock+0x45/0x60 [ 31.917865][ T449] ? finish_task_switch+0x13d/0x8a0 [ 31.917912][ T449] ? __sched_text_start+0x10/0x10 [ 31.917941][ T449] ? enqueue_task+0x1049/0x1100 [ 31.917970][ T449] ? check_preempt_wakeup_fair+0x786/0xb20 [ 31.917997][ T449] ? preempt_schedule_common+0x2d/0x60 [ 31.918026][ T449] ? preempt_schedule+0xc5/0xe0 [ 31.918054][ T449] ? __asan_set_shadow_00+0x12/0x20 [ 31.918083][ T449] ? do_vfs_ioctl+0x1824/0x2010 [ 31.918110][ T449] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 31.918135][ T449] ? preempt_schedule_thunk+0x1a/0x40 [ 31.918164][ T449] ? try_to_wake_up+0x1052/0x1d10 [ 31.918195][ T449] kvm_vm_ioctl+0x82b/0xc40 [ 31.918218][ T449] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 31.918240][ T449] ? ioctl_has_perm+0x1bc/0x500 [ 31.918261][ T449] ? __asan_memcpy+0x5a/0x80 [ 31.918295][ T449] ? ioctl_has_perm+0x408/0x500 [ 31.918315][ T449] ? has_cap_mac_admin+0xd0/0xd0 [ 31.918338][ T449] ? proc_fail_nth_write+0x184/0x220 [ 31.918370][ T449] ? selinux_file_ioctl+0x732/0x1480 [ 31.918405][ T449] ? vfs_write+0xbd2/0xfd0 [ 31.918425][ T449] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 31.918461][ T449] ? hook_file_ioctl+0x1ef/0x590 [ 31.918493][ T449] ? __cfi_hook_file_ioctl+0x10/0x10 [ 31.918524][ T449] ? __cfi_do_futex+0x10/0x10 [ 31.918548][ T449] ? mutex_unlock+0x90/0x240 [ 31.918581][ T449] ? __fget_files+0x2bc/0x330 [ 31.918605][ T449] ? bpf_lsm_file_ioctl+0xd/0x20 [ 31.918630][ T449] ? security_file_ioctl+0x3e/0x110 [ 31.918664][ T449] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 31.918686][ T449] __se_sys_ioctl+0x123/0x1b0 [ 31.918711][ T449] __x64_sys_ioctl+0x7f/0xa0 [ 31.918735][ T449] x64_sys_call+0x1878/0x2ee0 [ 31.918759][ T449] do_syscall_64+0x57/0xf0 [ 31.918783][ T449] ? clear_bhb_loop+0x50/0xa0 [ 31.918815][ T449] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.918846][ T449] RIP: 0033:0x7ff205fa94d9 [ 31.918866][ T449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.918885][ T449] RSP: 002b:00007ff206e66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 31.918917][ T449] RAX: ffffffffffffffda RBX: 00007ff206225fa0 RCX: 00007ff205fa94d9 [ 31.918935][ T449] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 31.918950][ T449] RBP: 00007ff20603804e R08: 0000000000000000 R09: 0000000000000000 [ 31.918965][ T449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.918980][ T449] R13: 00007ff206226038 R14: 00007ff206225fa0 R15: 00007ffc9864aec8 [ 31.919001][ T449] [ 32.504079][ T65] usb 4-1: USB disconnect, device number 2 [ 32.619852][ T310] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 32.789832][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 32.800637][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.823147][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.846423][ T310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.879427][ T310] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 32.898143][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.926062][ T310] usb 1-1: config 0 descriptor?? [ 33.041025][ T474] overlayfs: workdir and upperdir must reside under the same mount [ 33.100639][ T480] overlayfs: missing 'lowerdir' [ 33.139056][ T456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.155961][ T456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.157437][ T310] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 33.178472][ T310] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 33.186031][ T310] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 33.193414][ T310] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 33.200803][ T310] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 33.208245][ T310] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 33.210007][ T483] Zero length message leads to an empty skb [ 33.215820][ T310] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 33.228846][ T310] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 33.237889][ T310] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 33.250827][ T310] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 33.266290][ T310] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input5 [ 33.287404][ T310] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 33.356931][ T10] usb 1-1: USB disconnect, device number 6 [ 33.378565][ T492] fido_id[492]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 33.393555][ T65] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 33.489620][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 33.489640][ T36] audit: type=1400 audit(1794590028.346:191): avc: denied { create } for pid=495 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 33.523222][ T36] audit: type=1400 audit(1794590028.356:192): avc: denied { sys_admin } for pid=495 comm="syz.3.55" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 33.545936][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.551077][ T65] usb 3-1: not running at top speed; connect to a high speed hub [ 33.565106][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.577770][ T65] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 33.587029][ T65] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 33.595555][ T65] usb 3-1: Product: syz [ 33.599984][ T65] usb 3-1: Manufacturer: syz [ 33.607186][ T65] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 33.615058][ T65] usb 3-1: No streaming interface found for terminal 2. [ 33.699972][ T45] usb 2-1: device descriptor read/64, error -71 [ 33.836311][ T65] usb 3-1: USB disconnect, device number 3 [ 33.884441][ T36] audit: type=1400 audit(1794590028.746:193): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 33.942284][ T45] usb 2-1: device descriptor read/64, error -71 [ 34.149871][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 34.165586][ T36] audit: type=1400 audit(1794590029.026:194): avc: denied { bind } for pid=514 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.171050][ T515] FAULT_INJECTION: forcing a failure. [ 34.171050][ T515] name failslab, interval 1, probability 0, space 0, times 0 [ 34.184783][ T36] audit: type=1400 audit(1794590029.036:195): avc: denied { setopt } for pid=514 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.197250][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 34.222398][ T515] CPU: 0 UID: 0 PID: 515 Comm: syz.3.60 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 34.222486][ T515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 34.222529][ T515] Call Trace: [ 34.222543][ T515] [ 34.222565][ T515] __dump_stack+0x21/0x30 [ 34.222652][ T515] dump_stack_lvl+0x140/0x1c0 [ 34.222708][ T515] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.222773][ T515] dump_stack+0x19/0x20 [ 34.222829][ T515] should_fail_ex+0x3c2/0x510 [ 34.222898][ T515] should_failslab+0xac/0x100 [ 34.222963][ T515] kmem_cache_alloc_noprof+0x42/0x410 [ 34.223060][ T515] ? can_rx_register+0x176/0x7e0 [ 34.223152][ T515] can_rx_register+0x176/0x7e0 [ 34.223240][ T515] ? __cfi_raw_rcv+0x10/0x10 [ 34.223301][ T515] raw_enable_filters+0x9d/0x210 [ 34.223366][ T515] raw_setsockopt+0xc19/0x1240 [ 34.223429][ T515] ? __cfi_raw_setsockopt+0x10/0x10 [ 34.223483][ T515] ? do_futex+0x32a/0x510 [ 34.223562][ T515] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 34.223620][ T515] ? security_socket_setsockopt+0x3d/0x100 [ 34.223707][ T515] ? __cfi_raw_setsockopt+0x10/0x10 [ 34.223796][ T515] do_sock_setsockopt+0x27f/0x410 [ 34.223838][ T515] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 34.223870][ T515] ? __fget_files+0x2bc/0x330 [ 34.223949][ T515] __x64_sys_setsockopt+0x18c/0x220 [ 34.224079][ T515] x64_sys_call+0x2adc/0x2ee0 [ 34.224152][ T515] do_syscall_64+0x57/0xf0 [ 34.224218][ T515] ? clear_bhb_loop+0x50/0xa0 [ 34.224304][ T515] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.224406][ T515] RIP: 0033:0x7ffb817a94d9 [ 34.224461][ T515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.224514][ T515] RSP: 002b:00007ffb825cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 34.224587][ T515] RAX: ffffffffffffffda RBX: 00007ffb81a25fa0 RCX: 00007ffb817a94d9 [ 34.224631][ T515] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000004 [ 34.224665][ T515] RBP: 00007ffb8183804e R08: 0000000000000f00 R09: 0000000000000000 [ 34.224707][ T515] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 34.224750][ T515] R13: 00007ffb81a26038 R14: 00007ffb81a25fa0 R15: 00007fff0f8eb048 [ 34.224805][ T515] [ 34.462227][ T517] overlayfs: missing 'lowerdir' [ 34.484231][ T36] audit: type=1400 audit(1794590029.346:196): avc: denied { append } for pid=518 comm="syz.2.62" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 34.508937][ T36] audit: type=1400 audit(1794590029.366:197): avc: denied { ioctl } for pid=518 comm="syz.2.62" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 34.529927][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 34.540899][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.549341][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.559731][ T31] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 34.571044][ T31] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 34.581988][ T45] usb 2-1: device descriptor read/64, error -71 [ 34.589286][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 34.604019][ T31] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 34.613258][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.621328][ T31] usb 1-1: Product: syz [ 34.625620][ T31] usb 1-1: Manufacturer: syz [ 34.630386][ T31] usb 1-1: SerialNumber: syz [ 34.637505][ T36] audit: type=1400 audit(1794590029.496:198): avc: denied { getopt } for pid=521 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.809852][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.829859][ T45] usb 2-1: device descriptor read/64, error -71 [ 34.840893][ T31] usb 1-1: MIDIStreaming interface descriptor not found [ 34.851069][ T31] usb 1-1: USB disconnect, device number 7 [ 34.864387][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.899911][ T310] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 34.940032][ T45] usb usb2-port1: attempt power cycle [ 34.981362][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.990182][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 34.997770][ T10] usb 3-1: can't read configurations, error -61 [ 35.051251][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.059434][ T310] usb 4-1: not running at top speed; connect to a high speed hub [ 35.068029][ T310] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 35.075354][ T310] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 35.087674][ T310] usb 4-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 35.096778][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.104822][ T310] usb 4-1: Product: syz [ 35.109018][ T310] usb 4-1: Manufacturer: syz [ 35.113682][ T310] usb 4-1: SerialNumber: syz [ 35.129886][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.281452][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.289853][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 35.291397][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 35.305142][ T10] usb 3-1: can't read configurations, error -61 [ 35.311597][ T10] usb usb3-port1: attempt power cycle [ 35.322781][ T45] usb 2-1: device descriptor read/8, error -71 [ 35.329455][ T310] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 35.336450][ T310] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 35.344408][ T310] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 35.352924][ T310] usb 4-1: 2:1: All rates were zero [ 35.362871][ T36] audit: type=1400 audit(1794590030.226:199): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 35.363860][ T310] usb 4-1: USB disconnect, device number 3 [ 35.401196][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.451020][ T45] usb 2-1: device descriptor read/8, error -71 [ 35.659861][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.681656][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.689872][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 35.700562][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 35.709837][ T10] usb 3-1: can't read configurations, error -61 [ 35.721225][ T45] usb 2-1: device descriptor read/8, error -71 [ 35.849864][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 35.860957][ T45] usb 2-1: device descriptor read/8, error -71 [ 35.871697][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.890759][ T10] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 35.898588][ T10] usb 3-1: can't read configurations, error -61 [ 35.919524][ T10] usb usb3-port1: unable to enumerate USB device [ 35.980692][ T45] usb usb2-port1: unable to enumerate USB device [ 36.060119][ T36] audit: type=1400 audit(1794590030.926:200): avc: denied { execute } for pid=534 comm="syz.3.66" path="/26/file2" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.168887][ T538] sit: Src spoofed 172.30.0.4/2002:95ab:d8c2:dd74:6ed1:b8e7:b953:b5e7 -> 255.255.255.255/39e:e546:652f:979f:45a6:99fe:21e6:4016 [ 36.399593][ T547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.411291][ T547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.419876][ T547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.428668][ T547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.438002][ T547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.446979][ T547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.455372][ T548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.464011][ T548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.479996][ T551] overlayfs: missing 'lowerdir' [ 36.689164][ T559] netlink: 'syz.3.74': attribute type 4 has an invalid length. [ 36.739104][ T567] loop9: detected capacity change from 0 to 16384 [ 36.762542][ T566] loop9: detected capacity change from 16384 to 0 [ 37.049860][ T310] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.199849][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 37.211285][ T310] usb 4-1: config 1 has an invalid descriptor of length 137, skipping remainder of the config [ 37.229827][ T310] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 37.239179][ T310] usb 4-1: too many endpoints for config 1 interface 1 altsetting 0: 157, using maximum allowed: 30 [ 37.259856][ T310] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 157 [ 37.274831][ T310] usb 4-1: New USB device found, idVendor=0580, idProduct=00a3, bcdDevice= 0.40 [ 37.284098][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.292256][ T310] usb 4-1: Product: syz [ 37.296677][ T310] usb 4-1: Manufacturer: syz [ 37.302037][ T310] usb 4-1: SerialNumber: syz [ 37.392150][ T583] overlayfs: missing 'lowerdir' [ 37.520703][ T310] usb 4-1: 0:2 : does not exist [ 37.530012][ T310] usb 4-1: USB disconnect, device number 4 [ 37.547355][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.679823][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 37.830899][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 37.847147][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 36, changing to 7 [ 37.847443][ T51] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.858134][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 18095, setting to 1024 [ 37.871769][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 37.885188][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.893287][ T31] usb 2-1: Product: syz [ 37.897678][ T31] usb 2-1: Manufacturer: syz [ 37.902377][ T31] usb 2-1: SerialNumber: syz [ 37.913466][ T31] usb 2-1: config 0 descriptor?? [ 37.921944][ T31] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 39, bLength 9, bSynchAddress 24 [ 38.073069][ T610] FAULT_INJECTION: forcing a failure. [ 38.073069][ T610] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 38.087474][ T610] CPU: 1 UID: 0 PID: 610 Comm: syz.3.88 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 38.087510][ T610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 38.087525][ T610] Call Trace: [ 38.087532][ T610] [ 38.087540][ T610] __dump_stack+0x21/0x30 [ 38.087570][ T610] dump_stack_lvl+0x140/0x1c0 [ 38.087592][ T610] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.087614][ T610] ? stack_depot_save_flags+0x38/0x800 [ 38.087637][ T610] ? stack_trace_save+0xaa/0x100 [ 38.087658][ T610] dump_stack+0x19/0x20 [ 38.087678][ T610] should_fail_ex+0x3c2/0x510 [ 38.087699][ T610] should_fail_alloc_page+0xec/0x110 [ 38.087724][ T610] __alloc_pages_noprof+0x1c0/0x7e0 [ 38.087754][ T610] ? __x64_sys_mount+0xc3/0xf0 [ 38.087774][ T610] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.087805][ T610] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 38.087837][ T610] ? __kasan_check_write+0x18/0x20 [ 38.087870][ T610] ? lockref_get+0x131/0x1c0 [ 38.087898][ T610] ? __kasan_check_write+0x18/0x20 [ 38.087931][ T610] get_free_pages_noprof+0x14/0x40 [ 38.087959][ T610] selinux_genfs_get_sid+0x63/0x2d0 [ 38.087988][ T610] inode_doinit_with_dentry+0x8f8/0xde0 [ 38.088017][ T610] ? sb_finish_set_opts+0xa40/0xa40 [ 38.088043][ T610] ? __kasan_check_write+0x18/0x20 [ 38.088076][ T610] ? _raw_spin_lock+0x92/0x120 [ 38.088100][ T610] sb_finish_set_opts+0x70b/0xa40 [ 38.088127][ T610] ? may_context_mount_inode_relabel+0x150/0x150 [ 38.088158][ T610] selinux_set_mnt_opts+0x14e7/0x1a20 [ 38.088187][ T610] security_sb_set_mnt_opts+0x9f/0x290 [ 38.088214][ T610] vfs_get_tree+0x176/0x290 [ 38.088247][ T610] do_new_mount+0x251/0xb40 [ 38.088280][ T610] ? security_capable+0x44/0x130 [ 38.088304][ T610] path_mount+0x66a/0xff0 [ 38.088337][ T610] ? putname+0x113/0x150 [ 38.088367][ T610] __se_sys_mount+0x2bf/0x480 [ 38.088389][ T610] ? __x64_sys_mount+0xf0/0xf0 [ 38.088410][ T610] ? __kasan_check_write+0x18/0x20 [ 38.088442][ T610] ? fpregs_restore_userregs+0x11c/0x260 [ 38.088474][ T610] __x64_sys_mount+0xc3/0xf0 [ 38.088495][ T610] x64_sys_call+0x2021/0x2ee0 [ 38.088519][ T610] do_syscall_64+0x57/0xf0 [ 38.088543][ T610] ? clear_bhb_loop+0x50/0xa0 [ 38.088575][ T610] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.088605][ T610] RIP: 0033:0x7ffb817a94d9 [ 38.088623][ T610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.088641][ T610] RSP: 002b:00007ffb825cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.088665][ T610] RAX: ffffffffffffffda RBX: 00007ffb81a25fa0 RCX: 00007ffb817a94d9 [ 38.088683][ T610] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000 [ 38.088699][ T610] RBP: 00007ffb8183804e R08: 0000000000000000 R09: 0000000000000000 [ 38.088713][ T610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.088727][ T610] R13: 00007ffb81a26038 R14: 00007ffb81a25fa0 R15: 00007fff0f8eb048 [ 38.088747][ T610] [ 38.443816][ T585] 9pnet: p9_errstr2errno: server reported unknown error [ 38.474717][ T616] usb usb5: usbfs: process 616 (syz.3.89) did not claim interface 0 before use [ 38.662062][ T620] overlayfs: missing 'lowerdir' [ 38.738409][ T628] capability: warning: `syz.3.92' uses 32-bit capabilities (legacy support in use) [ 38.790654][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 38.790701][ T36] audit: type=1400 audit(1794590033.656:223): avc: denied { read } for pid=629 comm="syz.3.93" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.829537][ T36] audit: type=1400 audit(1794590033.656:224): avc: denied { open } for pid=629 comm="syz.3.93" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.853759][ T36] audit: type=1400 audit(1794590033.656:225): avc: denied { ioctl } for pid=629 comm="syz.3.93" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.886284][ T636] rust_binder: 634:636 got reply transaction with no transaction stack [ 38.895124][ T636] rust_binder: 634:636 transaction reply to 0:0 failed EINVAL, code 2097152 size 0-0 line thread.rs:1556 [ 38.907556][ T36] audit: type=1400 audit(1794590033.746:226): avc: denied { setopt } for pid=634 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.937665][ T529] rust_binder: 634: undelivered TRANSACTION_ERROR: 29204 [ 38.945057][ T529] rust_binder: 634: undelivered TRANSACTION_ERROR: 29201 [ 38.955117][ T529] rust_binder: 634: undelivered transaction 3, process died [ 38.969825][ T36] audit: type=1400 audit(1794590033.746:227): avc: denied { set_context_mgr } for pid=634 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 38.990069][ T36] audit: type=1400 audit(1794590033.746:228): avc: denied { map } for pid=634 comm="syz.2.94" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 39.015428][ T36] audit: type=1400 audit(1794590033.786:229): avc: denied { call } for pid=634 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 39.100820][ T643] ======================================================= [ 39.100820][ T643] WARNING: The mand mount option has been deprecated and [ 39.100820][ T643] and is ignored by this kernel. Remove the mand [ 39.100820][ T643] option from the mount to silence this warning. [ 39.100820][ T643] ======================================================= [ 39.156565][ T644] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 39.180462][ T644] overlayfs: overlapping lowerdir path [ 39.186211][ T36] audit: type=1400 audit(1794590034.046:230): avc: denied { mount } for pid=642 comm="syz.0.96" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 39.225260][ T648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.234386][ T648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.254918][ T36] audit: type=1400 audit(1794590034.116:231): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 39.463646][ T36] audit: type=1400 audit(1794590034.326:232): avc: denied { create } for pid=652 comm="syz.2.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 39.738286][ T661] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.810678][ T31] usb 2-1: USB disconnect, device number 9 [ 39.877041][ T598] Bluetooth: hci0: command 0x1003 tx timeout [ 39.880193][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.968988][ T669] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 40.029895][ T669] SELinux: failed to load policy [ 40.032538][ T671] process 'syz.1.107' launched './file1' with NULL argv: empty string added [ 40.279846][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 40.441004][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.460022][ T31] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 40.481913][ T31] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 40.499884][ T31] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 40.531340][ T31] usb 3-1: New USB device found, idVendor=04d1, idProduct=0082, bcdDevice= 1.00 [ 40.550128][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.559841][ T31] usb 3-1: Product: syz [ 40.564061][ T31] usb 3-1: Manufacturer: syz [ 40.579328][ T31] usb 3-1: SerialNumber: syz [ 40.593998][ T657] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 40.601327][ T657] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 40.611393][ T45] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 40.620619][ T31] cdc_acm 3-1:1.1: probe with driver cdc_acm failed with error -22 [ 40.794476][ T694] kvm: user requested TSC rate below hardware speed [ 40.810997][ T45] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 40.819317][ T45] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 40.841477][ T31] usb 3-1: USB disconnect, device number 8 [ 40.858081][ T45] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 40.877216][ T45] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 40.898376][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 40.918597][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 40.943871][ T45] usb 2-1: string descriptor 0 read error: -22 [ 40.950266][ T45] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 40.969601][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.990591][ T45] usb 2-1: config 0 descriptor?? [ 41.010256][ T45] hub 2-1:0.0: bad descriptor, ignoring hub [ 41.016833][ T45] hub 2-1:0.0: probe with driver hub failed with error -5 [ 41.256565][ T688] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 41.308765][ T708] FAULT_INJECTION: forcing a failure. [ 41.308765][ T708] name failslab, interval 1, probability 0, space 0, times 0 [ 41.346959][ T708] CPU: 1 UID: 0 PID: 708 Comm: syz.3.117 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 41.346999][ T708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 41.347015][ T708] Call Trace: [ 41.347023][ T708] [ 41.347032][ T708] __dump_stack+0x21/0x30 [ 41.347062][ T708] dump_stack_lvl+0x140/0x1c0 [ 41.347085][ T708] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.347107][ T708] ? kasan_save_alloc_info+0x3a/0x50 [ 41.347141][ T708] ? strndup_user+0x6c/0xd0 [ 41.347172][ T708] ? __x64_sys_add_key+0xc3/0xf0 [ 41.347194][ T708] ? x64_sys_call+0x195f/0x2ee0 [ 41.347219][ T708] ? do_syscall_64+0x57/0xf0 [ 41.347245][ T708] dump_stack+0x19/0x20 [ 41.347265][ T708] should_fail_ex+0x3c2/0x510 [ 41.347288][ T708] should_failslab+0xac/0x100 [ 41.347313][ T708] kmem_cache_alloc_noprof+0x42/0x410 [ 41.347348][ T708] ? prepare_creds+0x47/0x6b0 [ 41.347380][ T708] prepare_creds+0x47/0x6b0 [ 41.347409][ T708] lookup_user_key+0x359/0x1230 [ 41.347439][ T708] ? __cfi_lookup_user_key+0x10/0x10 [ 41.347466][ T708] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 41.347495][ T708] ? memdup_user+0xb1/0x170 [ 41.347525][ T708] ? strndup_user+0x40/0xd0 [ 41.347557][ T708] __se_sys_add_key+0x317/0x4b0 [ 41.347580][ T708] ? __x64_sys_add_key+0xf0/0xf0 [ 41.347604][ T708] ? __kasan_check_write+0x18/0x20 [ 41.347638][ T708] ? fpregs_restore_userregs+0x11c/0x260 [ 41.347670][ T708] __x64_sys_add_key+0xc3/0xf0 [ 41.347693][ T708] x64_sys_call+0x195f/0x2ee0 [ 41.347716][ T708] do_syscall_64+0x57/0xf0 [ 41.347740][ T708] ? clear_bhb_loop+0x50/0xa0 [ 41.347772][ T708] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.347802][ T708] RIP: 0033:0x7ffb817a94d9 [ 41.347822][ T708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.347841][ T708] RSP: 002b:00007ffb825cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 41.347867][ T708] RAX: ffffffffffffffda RBX: 00007ffb81a25fa0 RCX: 00007ffb817a94d9 [ 41.347885][ T708] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000200 [ 41.347901][ T708] RBP: 00007ffb8183804e R08: fffffffffffffffe R09: 0000000000000000 [ 41.347917][ T708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.347940][ T708] R13: 00007ffb81a26038 R14: 00007ffb81a25fa0 R15: 00007fff0f8eb048 [ 41.347961][ T708] [ 41.748674][ T719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=719 comm=syz.2.119 [ 41.939921][ T9] usb 2-1: USB disconnect, device number 10 [ 42.459388][ T733] netlink: 'syz.1.123': attribute type 16 has an invalid length. [ 42.467813][ T733] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.123'. [ 42.500385][ T332] Bluetooth: hci1: Frame reassembly failed (-84) [ 42.627172][ T739] netlink: 'syz.2.125': attribute type 4 has an invalid length. [ 42.634978][ T739] netlink: 17 bytes leftover after parsing attributes in process `syz.2.125'. [ 42.649836][ T739] input: syz0 as /devices/virtual/input/input6 [ 42.917650][ T757] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 42.959860][ T756] capability: warning: `syz.3.132' uses deprecated v2 capabilities in a way that may be insecure [ 44.089879][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 44.241165][ T45] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.252240][ T45] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.265450][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 44.272921][ T45] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 44.282437][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.292641][ T45] usb 3-1: config 0 descriptor?? [ 44.502318][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.509509][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.509947][ T598] Bluetooth: hci1: command 0x1003 tx timeout [ 44.516624][ T55] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 44.529126][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.536433][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.543761][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.550958][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.569839][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.578149][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.585604][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.592970][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.600166][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.607368][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.614652][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.621941][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.628956][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.636314][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.643524][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.650822][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.657907][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.665238][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.672416][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.679507][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.686751][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.694038][ T45] lenovo 0003:17EF:6009.0002: unknown main item tag 0x0 [ 44.714479][ T45] lenovo 0003:17EF:6009.0002: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.2-1/input0 [ 44.839874][ T65] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 44.989871][ T65] usb 2-1: Using ep0 maxpacket: 8 [ 44.996868][ T65] usb 2-1: config 4 has an invalid interface number: 235 but max is 3 [ 45.005409][ T65] usb 2-1: config 4 has an invalid interface number: 68 but max is 3 [ 45.013767][ T65] usb 2-1: config 4 has an invalid interface number: 34 but max is 3 [ 45.022200][ T65] usb 2-1: config 4 has an invalid interface number: 240 but max is 3 [ 45.031145][ T65] usb 2-1: config 4 has an invalid interface number: 89 but max is 3 [ 45.039458][ T65] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 45.048515][ T65] usb 2-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 45.057487][ T65] usb 2-1: config 4 has 5 interfaces, different from the descriptor's value: 4 [ 45.066827][ T65] usb 2-1: config 4 has no interface number 0 [ 45.073249][ T65] usb 2-1: config 4 has no interface number 1 [ 45.079435][ T65] usb 2-1: config 4 has no interface number 2 [ 45.086065][ T65] usb 2-1: config 4 has no interface number 3 [ 45.092736][ T65] usb 2-1: config 4 has no interface number 4 [ 45.098939][ T65] usb 2-1: config 4 interface 235 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 45.110116][ T65] usb 2-1: config 4 interface 235 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 45.121267][ T65] usb 2-1: config 4 interface 235 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 45.132796][ T65] usb 2-1: config 4 interface 235 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 45.143764][ T65] usb 2-1: config 4 interface 235 altsetting 4 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 45.155044][ T65] usb 2-1: config 4 interface 235 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 45.166184][ T65] usb 2-1: config 4 interface 235 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 1024 [ 45.176566][ T65] usb 2-1: config 4 interface 68 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 45.189925][ T65] usb 2-1: too many endpoints for config 4 interface 34 altsetting 20: 45, using maximum allowed: 30 [ 45.201074][ T65] usb 2-1: config 4 interface 34 altsetting 20 has an invalid descriptor for endpoint zero, skipping [ 45.212337][ T65] usb 2-1: config 4 interface 34 altsetting 20 has a duplicate endpoint with address 0x9, skipping [ 45.223411][ T65] usb 2-1: config 4 interface 34 altsetting 20 bulk endpoint 0x3 has invalid maxpacket 64 [ 45.233714][ T65] usb 2-1: config 4 interface 34 altsetting 20 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 45.245223][ T65] usb 2-1: config 4 interface 34 altsetting 20 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 45.256372][ T65] usb 2-1: config 4 interface 34 altsetting 20 has a duplicate endpoint with address 0xD, skipping [ 45.267333][ T65] usb 2-1: config 4 interface 34 altsetting 20 has 7 endpoint descriptors, different from the interface descriptor's value: 45 [ 45.280843][ T65] usb 2-1: config 4 interface 240 altsetting 9 has an endpoint descriptor with address 0xCC, changing to 0x8C [ 45.292764][ T65] usb 2-1: config 4 interface 240 altsetting 9 has a duplicate endpoint with address 0x8C, skipping [ 45.303830][ T65] usb 2-1: config 4 interface 240 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 45.314802][ T65] usb 2-1: config 4 interface 240 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 45.325939][ T65] usb 2-1: config 4 interface 240 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 45.337092][ T65] usb 2-1: config 4 interface 240 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 45.348060][ T65] usb 2-1: config 4 interface 240 altsetting 9 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 45.361439][ T65] usb 2-1: config 4 interface 89 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 45.372307][ T65] usb 2-1: config 4 interface 89 altsetting 9 endpoint 0x4 has an invalid bInterval 35, changing to 9 [ 45.383526][ T65] usb 2-1: config 4 interface 89 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 45.394555][ T65] usb 2-1: config 4 interface 89 altsetting 9 endpoint 0x2 has invalid maxpacket 463, setting to 64 [ 45.405612][ T65] usb 2-1: config 4 interface 89 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 45.416488][ T65] usb 2-1: config 4 interface 89 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 45.427370][ T65] usb 2-1: config 4 interface 89 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 45.438351][ T65] usb 2-1: config 4 interface 89 altsetting 9 endpoint 0xB has invalid wMaxPacketSize 0 [ 45.448365][ T65] usb 2-1: config 4 interface 89 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 45.459487][ T65] usb 2-1: config 4 interface 89 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 45.470370][ T65] usb 2-1: config 4 interface 89 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 45.481253][ T65] usb 2-1: config 4 interface 89 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 45.492113][ T65] usb 2-1: config 4 interface 89 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 45.502971][ T65] usb 2-1: config 4 interface 89 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 45.514230][ T65] usb 2-1: config 4 interface 235 has no altsetting 0 [ 45.521262][ T65] usb 2-1: config 4 interface 68 has no altsetting 0 [ 45.528036][ T65] usb 2-1: config 4 interface 34 has no altsetting 0 [ 45.535037][ T65] usb 2-1: config 4 interface 240 has no altsetting 0 [ 45.542076][ T65] usb 2-1: config 4 interface 89 has no altsetting 0 [ 45.550372][ T65] usb 2-1: Dual-Role OTG device on HNP port [ 45.556631][ T65] usb 2-1: New USB device found, idVendor=0856, idProduct=ac27, bcdDevice=13.be [ 45.566302][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.574666][ T65] usb 2-1: Product: syz [ 45.578953][ T65] usb 2-1: Manufacturer: syz [ 45.583857][ T65] usb 2-1: SerialNumber: syz [ 45.592696][ T770] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 45.858168][ T65] ftdi_sio 2-1:4.235: FTDI USB Serial Device converter detected [ 45.880335][ T65] ftdi_sio ttyUSB0: unknown device type: 0x13be [ 45.888177][ T65] ftdi_sio 2-1:4.68: FTDI USB Serial Device converter detected [ 45.896424][ T65] ftdi_sio ttyUSB1: unknown device type: 0x13be [ 45.906554][ T65] ftdi_sio 2-1:4.34: FTDI USB Serial Device converter detected [ 45.915820][ T65] ftdi_sio ttyUSB2: unknown device type: 0x13be [ 45.927190][ T65] ftdi_sio 2-1:4.240: FTDI USB Serial Device converter detected [ 45.936551][ T65] ftdi_sio ttyUSB3: unknown device type: 0x13be [ 45.946926][ T65] ftdi_sio 2-1:4.89: FTDI USB Serial Device converter detected [ 45.955113][ T65] ftdi_sio ttyUSB4: unknown device type: 0x13be [ 45.969511][ T65] usb 2-1: USB disconnect, device number 11 [ 45.977482][ T65] ftdi_sio 2-1:4.235: device disconnected [ 45.985603][ T65] ftdi_sio 2-1:4.68: device disconnected [ 45.995944][ T65] ftdi_sio 2-1:4.34: device disconnected [ 46.004613][ T65] ftdi_sio 2-1:4.240: device disconnected [ 46.012702][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 46.012720][ T36] audit: type=1400 audit(1794590040.873:260): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 46.014216][ T65] ftdi_sio 2-1:4.89: device disconnected [ 46.051657][ T776] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 46.060664][ T776] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 46.249368][ T36] audit: type=1400 audit(1794590041.103:261): avc: denied { read } for pid=779 comm="syz.3.139" name="state" dev="binder" ino=1048629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.272894][ T36] audit: type=1400 audit(1794590041.133:262): avc: denied { open } for pid=779 comm="syz.3.139" path="/dev/binderfs/binder_logs/state" dev="binder" ino=1048629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.300204][ T36] audit: type=1400 audit(1794590041.133:263): avc: denied { ioctl } for pid=779 comm="syz.3.139" path="/dev/binderfs/binder_logs/state" dev="binder" ino=1048629 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.426943][ T787] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 46.435393][ T787] overlayfs: overlapping lowerdir path [ 46.483062][ T794] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 46.490907][ T794] SELinux: failed to load policy [ 46.502634][ T36] audit: type=1400 audit(1794590041.363:264): avc: denied { cmd } for pid=793 comm="iou-wrk-794" path="socket:[9119]" dev="sockfs" ino=9119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 46.928860][ T10] usb 3-1: USB disconnect, device number 9 [ 46.970575][ T65] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 46.984240][ T36] audit: type=1400 audit(1794590041.843:265): avc: denied { create } for pid=822 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 47.029894][ T36] audit: type=1400 audit(1794590041.883:266): avc: denied { create } for pid=820 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 47.129805][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 47.148131][ T65] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 47.169837][ T65] usb 2-1: config 0 has no interface number 0 [ 47.178576][ T65] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 47.191031][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.207812][ T65] usb 2-1: Product: syz [ 47.216460][ T65] usb 2-1: Manufacturer: syz [ 47.229896][ T65] usb 2-1: SerialNumber: syz [ 47.239249][ T65] usb 2-1: config 0 descriptor?? [ 47.252246][ T65] smsc95xx v2.0.0 [ 47.453566][ T65] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 47.464530][ T65] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 47.819530][ T36] audit: type=1400 audit(1794590042.673:267): avc: denied { create } for pid=829 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 48.019342][ T848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.152'. [ 48.119594][ T36] audit: type=1400 audit(1794590042.973:268): avc: denied { map } for pid=850 comm="syz.3.153" path="pipe:[2958]" dev="pipefs" ino=2958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 48.224714][ T36] audit: type=1400 audit(1794590043.083:269): avc: denied { bind } for pid=855 comm="syz.3.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.334498][ T858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.343984][ T858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.455141][ T65] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 48.465999][ T65] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 48.469880][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 48.652051][ T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 48.673446][ T31] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 48.684316][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.692619][ T31] usb 4-1: Product: ❽₻ဂ介䱜ㅄ鋳쒈࿩㊯࿀쉭헣度╍熗ࣹ㘔ᄏ务쓿缐퇴⽋翋뽻좁ꝕ㧈ᱽⓆ鱾䅣厗ᮀ糁㴩䬂䝼廚Ｑ䐎⃨댥궚寄ﴈ [ 48.710167][ T31] usb 4-1: Manufacturer: А [ 48.714778][ T31] usb 4-1: SerialNumber: ю [ 48.809199][ T868] netlink: 140 bytes leftover after parsing attributes in process `syz.1.146'. [ 48.987058][ T31] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 49.010121][ T31] usb 4-1: USB disconnect, device number 5 [ 49.047970][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.759842][ T65] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 49.856074][ T31] usb 2-1: USB disconnect, device number 12 [ 49.921225][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 49.931011][ T65] usb 4-1: config 1 has an invalid interface descriptor of length 5, skipping [ 49.935613][ T886] input: syz0 as /devices/virtual/input/input8 [ 49.960277][ T65] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.972034][ T65] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 49.994628][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.003967][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.012180][ T65] usb 4-1: Product: syz [ 50.016387][ T65] usb 4-1: Manufacturer: syz [ 50.021213][ T65] usb 4-1: SerialNumber: syz [ 50.213406][ T897] FAULT_INJECTION: forcing a failure. [ 50.213406][ T897] name failslab, interval 1, probability 0, space 0, times 0 [ 50.226255][ T897] CPU: 1 UID: 0 PID: 897 Comm: syz.1.162 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 50.226297][ T897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 50.226314][ T897] Call Trace: [ 50.226322][ T897] [ 50.226333][ T897] __dump_stack+0x21/0x30 [ 50.226362][ T897] dump_stack_lvl+0x140/0x1c0 [ 50.226387][ T897] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.226411][ T897] dump_stack+0x19/0x20 [ 50.226433][ T897] should_fail_ex+0x3c2/0x510 [ 50.226457][ T897] should_failslab+0xac/0x100 [ 50.226484][ T897] kmem_cache_alloc_noprof+0x42/0x410 [ 50.226521][ T897] ? security_inode_alloc+0x51/0x230 [ 50.226551][ T897] ? __cfi_make_kgid+0x10/0x10 [ 50.226575][ T897] security_inode_alloc+0x51/0x230 [ 50.226605][ T897] inode_init_always_gfp+0x756/0x9e0 [ 50.226632][ T897] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 50.226659][ T897] alloc_inode+0xc5/0x270 [ 50.226687][ T897] new_inode+0x25/0x1e0 [ 50.226714][ T897] shmem_get_inode+0x352/0xc10 [ 50.226753][ T897] __shmem_file_setup+0x173/0x2c0 [ 50.226779][ T897] shmem_zero_setup+0x90/0x130 [ 50.226803][ T897] mmap_region+0x1659/0x1d10 [ 50.226842][ T897] ? __cfi_mmap_region+0x10/0x10 [ 50.226887][ T897] ? __kasan_check_read+0x15/0x20 [ 50.226926][ T897] ? security_capable+0x44/0x130 [ 50.226953][ T897] do_mmap+0xa47/0x1370 [ 50.226987][ T897] ? __cfi_selinux_mmap_file+0x10/0x10 [ 50.227025][ T897] ? __cfi_do_mmap+0x10/0x10 [ 50.227058][ T897] ? __kasan_check_write+0x18/0x20 [ 50.227093][ T897] ? down_write_killable+0xee/0x2d0 [ 50.227131][ T897] ? __cfi_down_write_killable+0x10/0x10 [ 50.227167][ T897] ? do_futex+0x37d/0x510 [ 50.227195][ T897] vm_mmap_pgoff+0x367/0x4b0 [ 50.227246][ T897] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 50.227282][ T897] ? xfd_validate_state+0x68/0x140 [ 50.227307][ T897] ksys_mmap_pgoff+0xfa/0x1e0 [ 50.227341][ T897] ? __kasan_check_write+0x18/0x20 [ 50.227377][ T897] __x64_sys_mmap+0x121/0x140 [ 50.227405][ T897] x64_sys_call+0x13bf/0x2ee0 [ 50.227432][ T897] do_syscall_64+0x57/0xf0 [ 50.227457][ T897] ? clear_bhb_loop+0x50/0xa0 [ 50.227492][ T897] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.227525][ T897] RIP: 0033:0x7f82e9ba94d9 [ 50.227547][ T897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.227569][ T897] RSP: 002b:00007f82e85f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 50.227596][ T897] RAX: ffffffffffffffda RBX: 00007f82e9e25fa0 RCX: 00007f82e9ba94d9 [ 50.227615][ T897] RDX: 0000000006040000 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 50.227632][ T897] RBP: 00007f82e9c3804e R08: ffffffffffffffff R09: 0000000000000000 [ 50.227650][ T897] R10: 000000000000a031 R11: 0000000000000246 R12: 0000000000000000 [ 50.227665][ T897] R13: 00007f82e9e26038 R14: 00007f82e9e25fa0 R15: 00007ffd3f9ba1c8 [ 50.227689][ T897] [ 50.649861][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 50.779824][ T45] usb 2-1: device descriptor read/64, error -71 [ 50.849911][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 51.019848][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 51.025132][ T45] usb 2-1: device descriptor read/64, error -71 [ 51.036603][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.059823][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 51.080543][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 51.090015][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.098086][ T31] usb 3-1: Product: syz [ 51.100775][ T65] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 51.103516][ T31] usb 3-1: Manufacturer: syz [ 51.123523][ T65] cdc_ncm 4-1:1.0: bind() failure [ 51.123702][ T31] usb 3-1: SerialNumber: syz [ 51.146712][ T65] usb 4-1: USB disconnect, device number 6 [ 51.289832][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 51.429837][ T45] usb 2-1: device descriptor read/64, error -71 [ 51.579826][ T65] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 51.679801][ T45] usb 2-1: device descriptor read/64, error -71 [ 51.739817][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 51.746433][ T65] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 51.754679][ T65] usb 4-1: config 0 has no interface number 0 [ 51.760914][ T65] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 51.771126][ T65] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 51.782860][ T65] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 51.792121][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.800234][ T65] usb 4-1: Product: syz [ 51.804555][ T65] usb 4-1: Manufacturer: syz [ 51.809230][ T65] usb 4-1: SerialNumber: syz [ 51.809961][ T45] usb usb2-port1: attempt power cycle [ 51.819911][ T65] usb 4-1: config 0 descriptor?? [ 51.826271][ T915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 51.833878][ T915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 52.042399][ T915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 52.049732][ T915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 52.159811][ T45] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 52.200907][ T45] usb 2-1: device descriptor read/8, error -71 [ 52.257739][ T65] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 52.267885][ T65] asix 4-1:0.34: probe with driver asix failed with error -61 [ 52.330911][ T45] usb 2-1: device descriptor read/8, error -71 [ 52.459817][ T915] netlink: 'syz.3.166': attribute type 16 has an invalid length. [ 52.468964][ T65] usb 4-1: USB disconnect, device number 7 [ 52.569857][ T45] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 52.600952][ T45] usb 2-1: device descriptor read/8, error -71 [ 52.740892][ T45] usb 2-1: device descriptor read/8, error -71 [ 52.859822][ T45] usb usb2-port1: unable to enumerate USB device [ 53.152892][ T927] FAULT_INJECTION: forcing a failure. [ 53.152892][ T927] name failslab, interval 1, probability 0, space 0, times 0 [ 53.165728][ T927] CPU: 1 UID: 0 PID: 927 Comm: syz.3.168 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 53.165765][ T927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 53.165785][ T927] Call Trace: [ 53.165792][ T927] [ 53.165801][ T927] __dump_stack+0x21/0x30 [ 53.165828][ T927] dump_stack_lvl+0x140/0x1c0 [ 53.165851][ T927] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.165874][ T927] dump_stack+0x19/0x20 [ 53.165894][ T927] should_fail_ex+0x3c2/0x510 [ 53.165916][ T927] ? security_prepare_creds+0x66/0x260 [ 53.165949][ T927] should_failslab+0xac/0x100 [ 53.165974][ T927] __kmalloc_noprof+0x69/0x510 [ 53.166008][ T927] ? kasan_save_alloc_info+0x3a/0x50 [ 53.166039][ T927] ? security_prepare_creds+0x66/0x260 [ 53.166061][ T927] ? __kasan_slab_alloc+0x73/0x90 [ 53.166086][ T927] security_prepare_creds+0x66/0x260 [ 53.166109][ T927] prepare_creds+0x46d/0x6b0 [ 53.166138][ T927] cap_task_prctl+0x234/0x9c0 [ 53.166173][ T927] security_task_prctl+0x99/0x2e0 [ 53.166198][ T927] __se_sys_prctl+0xd4/0x1480 [ 53.166225][ T927] ? __x64_sys_prctl+0xf0/0xf0 [ 53.166253][ T927] ? __kasan_check_write+0x18/0x20 [ 53.166285][ T927] ? fpregs_restore_userregs+0x11c/0x260 [ 53.166318][ T927] __x64_sys_prctl+0xc3/0xf0 [ 53.166345][ T927] x64_sys_call+0x2614/0x2ee0 [ 53.166369][ T927] do_syscall_64+0x57/0xf0 [ 53.166393][ T927] ? clear_bhb_loop+0x50/0xa0 [ 53.166426][ T927] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.166457][ T927] RIP: 0033:0x7ffb817a94d9 [ 53.166478][ T927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.166498][ T927] RSP: 002b:00007ffb825cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 53.166523][ T927] RAX: ffffffffffffffda RBX: 00007ffb81a25fa0 RCX: 00007ffb817a94d9 [ 53.166540][ T927] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000018 [ 53.166556][ T927] RBP: 00007ffb8183804e R08: 0000000000000000 R09: 0000000000000000 [ 53.166570][ T927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.166583][ T927] R13: 00007ffb81a26038 R14: 00007ffb81a25fa0 R15: 00007fff0f8eb048 [ 53.166604][ T927] [ 53.558026][ T31] usb 3-1: 0:2 : does not exist [ 53.565491][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 53.576818][ T31] usb 3-1: USB disconnect, device number 10 [ 53.589491][ T935] overlayfs: missing 'lowerdir' [ 53.596231][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.669805][ T65] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 53.679798][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 53.820910][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.831987][ T65] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 53.841206][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.858021][ T65] usb 2-1: config 0 descriptor?? [ 53.863496][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 53.882225][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.892663][ T9] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.905618][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 53.912802][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 53.912821][ T36] audit: type=1400 audit(1794590048.773:278): avc: denied { mounton } for pid=941 comm="syz.2.174" path="/proc/150/task" dev="proc" ino=10763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 53.945801][ T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 53.955118][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.963306][ T36] audit: type=1400 audit(1794590048.803:279): avc: denied { associate } for pid=943 comm="syz.2.174" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.985169][ T9] usb 4-1: config 0 descriptor?? [ 54.079412][ T931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.088972][ T931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.202102][ T36] audit: type=1400 audit(1794590049.063:280): avc: denied { write } for pid=932 comm="syz.3.170" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 54.249842][ T494] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 54.411023][ T494] usb 3-1: config index 0 descriptor too short (expected 24446, got 36) [ 54.419554][ T494] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 54.433507][ T9] input: HID 17ef:6047 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:17EF:6047.0003/input/input9 [ 54.447782][ T494] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 54.460393][ T494] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.473062][ T9] lenovo 0003:17EF:6047.0003: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 54.481342][ T947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.498055][ T494] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 54.511473][ T494] usb 3-1: config 0 interface 0 has no altsetting 0 [ 54.518162][ T494] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 54.527886][ T494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.538102][ T494] usb 3-1: config 0 descriptor?? [ 54.543574][ T947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.580478][ T65] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 54.589852][ T36] audit: type=1326 audit(1794590049.433:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=929 comm="syz.1.169" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e9ba94d9 code=0x7fc00000 [ 54.620253][ T65] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input10 [ 54.692965][ T65] keytouch 0003:0926:3333.0004: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 54.951859][ T494] logitech 0003:046D:CA04.0005: unknown main item tag 0x2 [ 54.959117][ T494] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 54.967231][ T494] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 54.976334][ T494] input: HID 046d:ca04 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:CA04.0005/input/input11 [ 55.072475][ T494] logitech 0003:046D:CA04.0005: input,hidraw2: USB HID v0.00 Keyboard [HID 046d:ca04] on usb-dummy_hcd.2-1/input0 [ 55.100288][ T494] logitech 0003:046D:CA04.0005: implement() called with too large value 243 (n: 0)! (kworker/0:4) [ 55.115156][ T494] logitech 0003:046D:CA04.0005: Force feedback for Logitech variant 2 rumble devices by Anssi Hannula [ 55.169093][ T36] audit: type=1400 audit(1794590050.023:282): avc: denied { mounton } for pid=953 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 55.213799][ T36] audit: type=1400 audit(1794590050.023:283): avc: denied { create } for pid=953 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 55.236922][ T51] bridge_slave_1: left allmulticast mode [ 55.242824][ T51] bridge_slave_1: left promiscuous mode [ 55.248516][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.256445][ T51] bridge_slave_0: left allmulticast mode [ 55.262210][ T51] bridge_slave_0: left promiscuous mode [ 55.267979][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.277230][ T494] usb 3-1: USB disconnect, device number 11 [ 55.441571][ T953] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.448704][ T953] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.456151][ T953] bridge_slave_0: entered allmulticast mode [ 55.463106][ T953] bridge_slave_0: entered promiscuous mode [ 55.471507][ T51] veth1_macvtap: left promiscuous mode [ 55.477162][ T51] veth0_vlan: left promiscuous mode [ 55.548690][ T953] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.555940][ T953] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.563231][ T953] bridge_slave_1: entered allmulticast mode [ 55.569851][ T953] bridge_slave_1: entered promiscuous mode [ 55.601168][ T31] usb 4-1: USB disconnect, device number 8 [ 55.645334][ T953] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.652494][ T953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.659888][ T953] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.666965][ T953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.691612][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.699144][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.710544][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.717743][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.727851][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.735051][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.766961][ T953] veth0_vlan: entered promiscuous mode [ 55.780152][ T953] veth1_macvtap: entered promiscuous mode [ 55.802403][ T36] audit: type=1400 audit(1794590050.663:284): avc: denied { mounton } for pid=953 comm="syz-executor" path="/root/syzkaller.8EUIxW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 55.876334][ T966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'. [ 55.886507][ T966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=966 comm=syz.2.178 [ 56.150839][ T976] overlayfs: missing 'lowerdir' [ 56.165219][ T36] audit: type=1400 audit(1794590051.023:285): avc: denied { create } for pid=978 comm="syz.2.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 56.185146][ T36] audit: type=1400 audit(1794590051.023:286): avc: denied { watch watch_reads } for pid=978 comm="syz.2.182" path="/48/file0" dev="tmpfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 56.190327][ T979] Bluetooth: ISO socket layer initialized [ 56.219976][ T979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.229297][ T979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.417286][ T36] audit: type=1326 audit(1794590051.273:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=929 comm="syz.1.169" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e9ba94d9 code=0x7fc00000 [ 56.459854][ T310] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 56.469842][ T494] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 56.531210][ T10] usb 2-1: USB disconnect, device number 17 [ 56.610880][ T310] usb 3-1: config index 0 descriptor too short (expected 69, got 51) [ 56.619121][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.629373][ T310] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 56.632397][ T494] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 56.644730][ T310] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 56.653424][ T494] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 56.672226][ T494] usb 4-1: config 1 interface 0 has no altsetting 0 [ 56.675805][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.682702][ T494] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 56.687902][ T310] usb 3-1: Product: syz [ 56.701045][ T494] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.701055][ T310] usb 3-1: Manufacturer: syz [ 56.701076][ T494] usb 4-1: Product: syz [ 56.721022][ T310] usb 3-1: SerialNumber: syz [ 56.726771][ T494] usb 4-1: Manufacturer: syz [ 56.739838][ T494] usb 4-1: SerialNumber: syz [ 56.745783][ T982] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 56.754815][ T982] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 56.807970][ T995] syz.1.186 (995): /proc/994/oom_adj is deprecated, please use /proc/994/oom_score_adj instead. [ 56.853497][ T1000] fuse: Unknown parameter 'g' [ 56.908760][ T1002] kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 56.917418][ T1002] kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 56.925871][ T1002] kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 56.934420][ T1002] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 56.942356][ T310] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 56.955202][ T1002] kvm: requested 140800 ns i8254 timer period limited to 200000 ns [ 56.957826][ T310] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 56.968328][ T1002] kvm: requested 120685 ns i8254 timer period limited to 200000 ns [ 56.976678][ T1007] mmap: syz.3.183 (1007): VmData 29466624 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 56.984371][ T1002] kvm: requested 50285 ns i8254 timer period limited to 200000 ns [ 57.001668][ T1002] kvm: requested 98895 ns i8254 timer period limited to 200000 ns [ 57.002918][ T310] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 57.012000][ T1002] kvm: requested 113142 ns i8254 timer period limited to 200000 ns [ 57.027948][ T310] usb 3-1: USB disconnect, device number 12 [ 57.036701][ T1002] kvm: requested 41066 ns i8254 timer period limited to 200000 ns [ 57.068300][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.228592][ T1005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.239694][ T1005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.248691][ T494] (unnamed net_device) (uninitialized): Assigned a random MAC address: 7a:2d:bd:5d:99:6b [ 57.261827][ T494] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 57.272926][ T494] usb 4-1: USB disconnect, device number 9 [ 57.434289][ T1013] overlayfs: missing 'lowerdir' [ 57.710228][ T65] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 57.859901][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 57.868240][ T65] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 57.878032][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.886105][ T65] usb 3-1: Product: syz [ 57.890527][ T65] usb 3-1: Manufacturer: syz [ 57.895308][ T65] usb 3-1: SerialNumber: syz [ 57.901003][ T65] usb 3-1: config 0 descriptor?? [ 57.907211][ T65] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 57.915453][ T65] usb 3-1: Detected FT2233HP [ 58.039850][ T329] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 58.107134][ T65] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 58.107552][ T1027] rust_binder: 1022:1027 error while translating object: EINVAL [ 58.117368][ T65] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 58.128127][ T1027] rust_binder: 1022:1027 transaction async to 1022:0 failed EINVAL, code 0 size 72-24 line thread.rs:867 [ 58.132688][ T65] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 58.149681][ T494] rust_binder: 1022: undelivered TRANSACTION_COMPLETE [ 58.159900][ T65] usb 3-1: USB disconnect, device number 13 [ 58.165889][ T494] rust_binder: 1022: undelivered TRANSACTION_ERROR: 29201 [ 58.173988][ T65] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 58.184963][ T65] ftdi_sio 3-1:0.0: device disconnected [ 58.201127][ T329] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.213931][ T329] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 58.223405][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.231777][ T329] usb 4-1: Product: syz [ 58.232585][ T31] rust_binder: 1022: undelivered transaction 5, process died [ 58.235977][ T329] usb 4-1: Manufacturer: syz [ 58.248269][ T329] usb 4-1: SerialNumber: syz [ 58.257378][ T329] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 58.263823][ T329] cdc_wdm 4-1:1.0: Unknown control protocol [ 58.330420][ T1035] fuse: Bad value for 'user_id' [ 58.335387][ T1035] fuse: Bad value for 'user_id' [ 58.514597][ T1041] overlayfs: missing 'workdir' [ 58.661951][ T1021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.670744][ T1021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.720581][ T329] usb 4-1: USB disconnect, device number 10 [ 58.769934][ T65] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 58.792161][ T31] rust_binder: 1047: undelivered TRANSACTION_COMPLETE [ 58.798068][ T494] rust_binder: 1047: undelivered transaction 19, process died [ 58.799050][ T31] rust_binder: 1047: undelivered TRANSACTION_COMPLETE [ 58.816956][ T494] rust_binder: 1047: undelivered transaction 12, process died [ 58.909901][ T65] usb 2-1: device descriptor read/64, error -71 [ 58.931017][ T1053] FAULT_INJECTION: forcing a failure. [ 58.931017][ T1053] name fail_futex, interval 1, probability 0, space 0, times 1 [ 58.943947][ T1053] CPU: 0 UID: 0 PID: 1053 Comm: syz.4.205 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 58.943987][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 58.943998][ T1053] Call Trace: [ 58.944004][ T1053] [ 58.944011][ T1053] __dump_stack+0x21/0x30 [ 58.944031][ T1053] dump_stack_lvl+0x140/0x1c0 [ 58.944047][ T1053] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.944064][ T1053] dump_stack+0x19/0x20 [ 58.944079][ T1053] should_fail_ex+0x3c2/0x510 [ 58.944095][ T1053] should_fail+0xf/0x20 [ 58.944109][ T1053] get_futex_key+0x178/0x940 [ 58.944126][ T1053] ? __cfi___futex_wait+0x10/0x10 [ 58.944147][ T1053] ? __cfi_get_futex_key+0x10/0x10 [ 58.944163][ T1053] ? __cfi_futex_wake_mark+0x10/0x10 [ 58.944192][ T1053] futex_wake+0x150/0x950 [ 58.944217][ T1053] ? futex_wait+0x2b8/0x7c0 [ 58.944238][ T1053] ? __cfi_futex_wake+0x10/0x10 [ 58.944260][ T1053] ? vfs_write+0xbd2/0xfd0 [ 58.944275][ T1053] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 58.944301][ T1053] do_futex+0x37d/0x510 [ 58.944320][ T1053] ? __cfi_do_futex+0x10/0x10 [ 58.944337][ T1053] ? mutex_unlock+0x90/0x240 [ 58.944360][ T1053] __se_sys_futex+0x13c/0x320 [ 58.944377][ T1053] ? fput+0x1a4/0x230 [ 58.944396][ T1053] ? __x64_sys_futex+0x110/0x110 [ 58.944414][ T1053] ? __cfi_ksys_write+0x10/0x10 [ 58.944428][ T1053] ? __kasan_check_write+0x18/0x20 [ 58.944462][ T1053] __x64_sys_futex+0xe9/0x110 [ 58.944489][ T1053] x64_sys_call+0x227f/0x2ee0 [ 58.944507][ T1053] do_syscall_64+0x57/0xf0 [ 58.944525][ T1053] ? clear_bhb_loop+0x50/0xa0 [ 58.944549][ T1053] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.944572][ T1053] RIP: 0033:0x7fa5ca5a94d9 [ 58.944587][ T1053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.944601][ T1053] RSP: 002b:00007fa5c8ff70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 58.944619][ T1053] RAX: ffffffffffffffda RBX: 00007fa5ca825fa8 RCX: 00007fa5ca5a94d9 [ 58.944632][ T1053] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa5ca825fac [ 58.944643][ T1053] RBP: 00007fa5ca825fa0 R08: 4000000000000000 R09: 0000000000000000 [ 58.944654][ T1053] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 58.944665][ T1053] R13: 00007fa5ca826038 R14: 00007ffe49366e40 R15: 00007ffe49366f28 [ 58.944680][ T1053] [ 59.239891][ T31] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 59.259842][ T1065] overlayfs: missing 'workdir' [ 59.329856][ T65] usb 2-1: device descriptor read/64, error -71 [ 59.404820][ T1055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.427057][ T1055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.439514][ T31] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 59.452948][ T31] usb 3-1: can't read configurations, error -71 [ 59.513498][ T329] smpboot: CPU 1 is now offline [ 59.530325][ T1078] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 59.556952][ T1078] kvm: kvm [1077]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 59.578819][ T1078] kvm: kvm [1077]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 59.589828][ T65] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 59.607731][ T1078] kvm: kvm [1077]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 59.729866][ T65] usb 2-1: device descriptor read/64, error -71 [ 59.970580][ T1092] overlayfs: cannot append lower layer [ 59.979817][ T65] usb 2-1: device descriptor read/64, error -71 [ 60.069771][ T494] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 60.089902][ T65] usb usb2-port1: attempt power cycle [ 60.230759][ T494] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.249796][ T494] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 60.271073][ T494] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.289835][ T31] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 60.297698][ T494] usb 4-1: config 0 interface 0 has no altsetting 0 [ 60.314597][ T494] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 60.329804][ T494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.348694][ T494] usb 4-1: config 0 descriptor?? [ 60.358354][ T1090] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 60.439805][ T65] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 60.450990][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.462111][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.471477][ T65] usb 2-1: device descriptor read/8, error -71 [ 60.479482][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.488777][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.497069][ T31] usb 3-1: Product: syz [ 60.501514][ T31] usb 3-1: Manufacturer: syz [ 60.506144][ T31] usb 3-1: SerialNumber: syz [ 60.600844][ T65] usb 2-1: device descriptor read/8, error -71 [ 60.768796][ T494] usbhid 4-1:0.0: can't add hid device: -71 [ 60.778720][ T494] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 60.797865][ T494] usb 4-1: USB disconnect, device number 11 [ 60.849832][ T65] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 60.880823][ T65] usb 2-1: device descriptor read/8, error -71 [ 61.010804][ T65] usb 2-1: device descriptor read/8, error -71 [ 61.120896][ T65] usb usb2-port1: unable to enumerate USB device [ 61.301020][ T1094] overlayfs: missing 'workdir' [ 61.341553][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 61.341571][ T36] audit: type=1400 audit(1794590056.203:301): avc: denied { name_bind } for pid=1095 comm="syz.3.220" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 61.589968][ T36] audit: type=1400 audit(1794590056.453:302): avc: denied { getopt } for pid=1106 comm="syz.1.223" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.625502][ T36] audit: type=1400 audit(1794590056.483:303): avc: denied { remount } for pid=1103 comm="syz.3.222" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.651058][ T1111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.711072][ T1111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.828674][ T1104] syz.3.222 (1104): drop_caches: 2 [ 61.843306][ T1105] syz.3.222 (1105): drop_caches: 2 [ 61.889792][ T65] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 62.051137][ T65] usb 4-1: unable to get BOS descriptor or descriptor too short [ 62.063719][ T36] audit: type=1400 audit(1794590056.923:304): avc: denied { search } for pid=1120 comm="syz.1.227" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 62.065184][ T65] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 62.096825][ T36] audit: type=1400 audit(1794590056.963:305): avc: denied { map } for pid=1120 comm="syz.1.227" path="socket:[12826]" dev="sockfs" ino=12826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.120141][ T36] audit: type=1400 audit(1794590056.963:306): avc: denied { read } for pid=1120 comm="syz.1.227" path="socket:[12826]" dev="sockfs" ino=12826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.130809][ T65] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 62.144249][ T36] audit: type=1400 audit(1794590056.963:307): avc: denied { ioctl } for pid=1120 comm="syz.1.227" path="socket:[12828]" dev="sockfs" ino=12828 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.197202][ T65] usb 4-1: language id specifier not provided by device, defaulting to English [ 62.207392][ T65] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 62.216618][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.233306][ T65] usb 4-1: Product: syz [ 62.242065][ T65] usb 4-1: Manufacturer: syz [ 62.252224][ T65] usb 4-1: SerialNumber: syz [ 62.460386][ T31] cdc_ncm 3-1:1.0: bind() failure [ 62.467825][ T31] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 62.482588][ T31] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 62.496519][ T31] usb 3-1: USB disconnect, device number 15 [ 62.510172][ T36] audit: type=1400 audit(1794590057.363:308): avc: denied { mount } for pid=1129 comm="syz.4.230" name="/" dev="ramfs" ino=13044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 62.521006][ T1131] netlink: 80 bytes leftover after parsing attributes in process `syz.4.230'. [ 62.542761][ T36] audit: type=1400 audit(1794590057.403:309): avc: denied { mounton } for pid=1130 comm="syz.1.231" path="/56/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 62.574963][ T65] usb 4-1: unit 4: unexpected type 0x03 [ 62.584722][ T65] usb 4-1: unit 0 not found! [ 62.589391][ T65] usb 4-1: unit 8 not found! [ 62.612640][ T1137] geneve1: tun_chr_ioctl cmd 1074025673 [ 62.624882][ T65] usb 4-1: USB disconnect, device number 12 [ 62.647610][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.701420][ T1144] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.756319][ T1149] 9pnet_fd: Insufficient options for proto=fd [ 62.786888][ T1153] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=53 sclass=netlink_xfrm_socket pid=1153 comm=syz.1.239 [ 63.059822][ T65] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 63.173601][ T1167] syz.3.244 uses obsolete (PF_INET,SOCK_PACKET) [ 63.210877][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.229841][ T494] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 63.244093][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.266260][ T65] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 63.275514][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.284308][ T65] usb 2-1: config 0 descriptor?? [ 63.410843][ T494] usb 3-1: too many endpoints for config 0 interface 0 altsetting 40: 130, using maximum allowed: 30 [ 63.421970][ T494] usb 3-1: config 0 interface 0 altsetting 40 endpoint 0x81 has invalid maxpacket 1983, setting to 8 [ 63.433061][ T494] usb 3-1: config 0 interface 0 altsetting 40 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 63.446341][ T494] usb 3-1: config 0 interface 0 has no altsetting 0 [ 63.453070][ T494] usb 3-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 63.462294][ T494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.472129][ T494] usb 3-1: config 0 descriptor?? [ 63.477743][ T1160] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 63.493262][ T65] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 63.500654][ T65] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 63.507764][ T65] hid-led 0003:1D34:000A.0006: unknown main item tag 0x0 [ 63.516727][ T65] hid-led 0003:1D34:000A.0006: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 63.530166][ T65] hid-led 0003:1D34:000A.0006: Dream Cheeky Webmail Notifier initialized [ 63.887204][ T494] usbhid 3-1:0.0: can't add hid device: -71 [ 63.893396][ T494] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 63.902374][ T494] usb 3-1: USB disconnect, device number 16 [ 64.485968][ T36] audit: type=1400 audit(1794590059.343:310): avc: denied { write } for pid=1188 comm="syz.2.251" name="tcp" dev="proc" ino=4026532576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 64.490786][ T1189] rust_binder: 1188:1189 got transaction with invalid offset [ 64.517052][ T1189] rust_binder: 1188:1189 transaction reply to 1188:1189 failed EINVAL, code 0 size 72-24 line thread.rs:1239 [ 64.541324][ T65] rust_binder: 1188: undelivered TRANSACTION_COMPLETE [ 64.548201][ T65] rust_binder: 1188: undelivered TRANSACTION_ERROR: 29201 [ 64.570777][ T1192] kvm: MONITOR instruction emulated as NOP! [ 64.909905][ T65] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 65.070957][ T65] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.082114][ T65] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.092067][ T65] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 65.101333][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.513974][ T65] usbhid 3-1:1.0: can't add hid device: -71 [ 65.526108][ T65] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 65.537890][ T65] usb 3-1: USB disconnect, device number 17 [ 65.829879][ T65] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 65.845418][ T329] usb 2-1: USB disconnect, device number 22 [ 66.000747][ T65] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.023071][ T65] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.043028][ T65] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 66.061997][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.282802][ T65] usbhid 3-1:1.0: can't add hid device: -71 [ 66.301042][ T65] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 66.324150][ T65] usb 3-1: USB disconnect, device number 18 [ 66.549807][ T9] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 66.679792][ T9] usb 4-1: device descriptor read/64, error -71 [ 66.828701][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 66.828721][ T36] audit: type=1326 audit(1794590061.683:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1233 comm="syz.2.266" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205fa94d9 code=0x7ffc0000 [ 66.860102][ T36] audit: type=1326 audit(1794590061.693:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1233 comm="syz.2.266" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205fa94d9 code=0x7ffc0000 [ 66.885490][ T36] audit: type=1326 audit(1794590061.693:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1233 comm="syz.2.266" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff205fa94d9 code=0x7ffc0000 [ 66.911658][ T36] audit: type=1326 audit(1794590061.693:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1233 comm="syz.2.266" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205fa94d9 code=0x7ffc0000 [ 66.936932][ T9] usb 4-1: device descriptor read/64, error -71 [ 66.937675][ T36] audit: type=1326 audit(1794590061.693:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1233 comm="syz.2.266" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205fa94d9 code=0x7ffc0000 [ 66.968640][ T36] audit: type=1326 audit(1794590061.693:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1233 comm="syz.2.266" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205fa94d9 code=0x7ffc0000 [ 66.993840][ T36] audit: type=1326 audit(1794590061.693:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1233 comm="syz.2.266" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205fa94d9 code=0x7ffc0000 [ 67.019287][ T36] audit: type=1326 audit(1794590061.693:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1233 comm="syz.2.266" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7ff205fa94d9 code=0x7ffc0000 [ 67.044458][ T36] audit: type=1326 audit(1794590061.693:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1233 comm="syz.2.266" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205fa94d9 code=0x7ffc0000 [ 67.069608][ T36] audit: type=1326 audit(1794590061.693:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1233 comm="syz.2.266" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff205fa94d9 code=0x7ffc0000 [ 67.112483][ T1241] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.189863][ T9] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 67.319852][ T9] usb 4-1: device descriptor read/64, error -71 [ 67.559826][ T9] usb 4-1: device descriptor read/64, error -71 [ 67.669929][ T9] usb usb4-port1: attempt power cycle [ 67.949858][ T329] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 68.009853][ T9] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 68.030999][ T9] usb 4-1: device descriptor read/8, error -71 [ 68.101313][ T329] usb 3-1: unable to get BOS descriptor or descriptor too short [ 68.109695][ T329] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 68.122756][ T329] usb 3-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 68.132018][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.140161][ T329] usb 3-1: Product: syz [ 68.144441][ T329] usb 3-1: Manufacturer: syz [ 68.149044][ T329] usb 3-1: SerialNumber: syz [ 68.160822][ T9] usb 4-1: device descriptor read/8, error -71 [ 68.356547][ T1247] sysfs: Unknown parameter 'lowerdir' [ 68.364052][ T329] usb 3-1: unit 4 not found! [ 68.368728][ T329] usb 3-1: unit 0 not found! [ 68.375723][ T329] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 68.384023][ T329] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 68.394299][ T329] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 68.402624][ T9] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 68.411184][ T329] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 68.421249][ T329] usb 3-1: USB disconnect, device number 19 [ 68.435029][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.441831][ T9] usb 4-1: device descriptor read/8, error -71 [ 68.580870][ T9] usb 4-1: device descriptor read/8, error -71 [ 68.689957][ T9] usb usb4-port1: unable to enumerate USB device [ 69.201583][ T1269] tmpfs: Unsupported parameter 'mpol' [ 69.439896][ T329] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 69.578639][ T1312] netlink: 28 bytes leftover after parsing attributes in process `syz.4.285'. [ 69.590775][ T329] usb 3-1: config 127 has an invalid descriptor of length 209, skipping remainder of the config [ 69.611458][ T329] usb 3-1: config 127 has 0 interfaces, different from the descriptor's value: 1 [ 69.631125][ T329] usb 3-1: New USB device found, idVendor=9b98, idProduct=ca47, bcdDevice=19.87 [ 69.645157][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.656239][ T1314] : renamed from vlan0 (while UP) [ 69.661871][ T329] usb 3-1: Product: syz [ 69.667343][ T329] usb 3-1: Manufacturer: syz [ 69.672495][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 69.686067][ T329] usb 3-1: SerialNumber: syz [ 69.819840][ T9] usb 4-1: device descriptor read/64, error -71 [ 69.898282][ T329] usb 3-1: USB disconnect, device number 20 [ 70.059937][ T9] usb 4-1: device descriptor read/64, error -71 [ 70.299838][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 70.430080][ T9] usb 4-1: device descriptor read/64, error -71 [ 70.680599][ T9] usb 4-1: device descriptor read/64, error -71 [ 70.799919][ T9] usb usb4-port1: attempt power cycle [ 71.206682][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 71.240772][ T9] usb 4-1: device descriptor read/8, error -71 [ 72.230691][ T9] usb 4-1: device descriptor read/8, error -71 [ 73.204030][ T36] kauditd_printk_skb: 84 callbacks suppressed [ 73.204049][ T36] audit: type=1400 audit(1794590068.063:411): avc: denied { getopt } for pid=1356 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.264467][ T36] audit: type=1400 audit(1794590068.123:412): avc: denied { map } for pid=1366 comm="syz.3.302" path="/100/dev/sda" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.288295][ T36] audit: type=1400 audit(1794590068.123:413): avc: denied { execute } for pid=1366 comm="syz.3.302" path="/100/dev/sda" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.434395][ T36] audit: type=1400 audit(1794590068.293:414): avc: denied { append } for pid=1379 comm="syz.3.307" name="uprobe_events" dev="tracefs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 73.439930][ T65] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 73.479807][ T36] audit: type=1400 audit(1794590068.293:415): avc: denied { append } for pid=1379 comm="syz.3.307" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 73.530273][ T1388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.544451][ T1388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.625634][ T1390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.644728][ T1390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.654772][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.675927][ T65] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 73.697941][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.717282][ T65] usb 2-1: config 0 descriptor?? [ 73.879863][ T9] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 73.900793][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 73.909374][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.919724][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.930245][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 73.944705][ T9] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 73.959173][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.967446][ T9] usb 4-1: Product: syz [ 73.971824][ T9] usb 4-1: Manufacturer: syz [ 73.976490][ T9] usb 4-1: SerialNumber: syz [ 74.131189][ T65] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 74.141219][ T65] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0007/input/input12 [ 74.213947][ T65] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 74.233437][ T65] usb 4-1: USB disconnect, device number 20 [ 74.406654][ T36] audit: type=1400 audit(1794590069.263:416): avc: denied { read } for pid=1403 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 203) OK Stopping crond: stopped /usr/sbin/crond (pid 195) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 149) [ 74.659398][ T36] audit: type=1400 audit(1794590069.513:417): avc: denied { search } for pid=1414 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 74.780652][ T36] audit: type=1400 audit(1794590069.633:418): avc: denied { write } for pid=150 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.827181][ T36] audit: type=1400 audit(1794590069.633:419): avc: denied { remove_name } for pid=150 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.855132][ T36] audit: type=1400 audit(1794590069.633:420): avc: denied { unlink } for pid=150 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 OK Stopping iptables: OK Stopping system message bus: [ 75.032385][ T1442] input: syz0 as /devices/virtual/input/input13 [ 75.067866][ T1454] FAULT_INJECTION: forcing a failure. [ 75.067866][ T1454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.084561][ T1454] CPU: 0 UID: 0 PID: 1454 Comm: syz.2.320 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 75.084598][ T1454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 75.084616][ T1454] Call Trace: [ 75.084624][ T1454] [ 75.084633][ T1454] __dump_stack+0x21/0x30 [ 75.084661][ T1454] dump_stack_lvl+0x140/0x1c0 [ 75.084683][ T1454] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.084706][ T1454] ? selinux_file_ioctl+0x732/0x1480 [ 75.084742][ T1454] dump_stack+0x19/0x20 [ 75.084763][ T1454] should_fail_ex+0x3c2/0x510 [ 75.084785][ T1454] should_fail+0xf/0x20 [ 75.084805][ T1454] should_fail_usercopy+0x1e/0x30 [ 75.084828][ T1454] _copy_from_user+0x20/0xa0 [ 75.084854][ T1454] get_user_ifreq+0x70/0x180 [ 75.084889][ T1454] sock_ioctl+0x6f3/0x7e0 [ 75.084911][ T1454] ? __cfi_sock_ioctl+0x10/0x10 [ 75.084932][ T1454] ? __fget_files+0x2bc/0x330 [ 75.084957][ T1454] ? bpf_lsm_file_ioctl+0xd/0x20 [ 75.084988][ T1454] ? security_file_ioctl+0x3e/0x110 [ 75.085022][ T1454] ? __cfi_sock_ioctl+0x10/0x10 [ 75.085043][ T1454] __se_sys_ioctl+0x123/0x1b0 [ 75.085077][ T1454] __x64_sys_ioctl+0x7f/0xa0 [ 75.085102][ T1454] x64_sys_call+0x1878/0x2ee0 [ 75.085126][ T1454] do_syscall_64+0x57/0xf0 [ 75.085151][ T1454] ? clear_bhb_loop+0x50/0xa0 [ 75.085183][ T1454] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.085214][ T1454] RIP: 0033:0x7ff205fa94d9 [ 75.085234][ T1454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.085254][ T1454] RSP: 002b:00007ff206e66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.085279][ T1454] RAX: ffffffffffffffda RBX: 00007ff206225fa0 RCX: 00007ff205fa94d9 [ 75.085296][ T1454] RDX: 0000200000000380 RSI: 00000000000089f3 RDI: 0000000000000003 [ 75.085311][ T1454] RBP: 00007ff206e66090 R08: 0000000000000000 R09: 0000000000000000 [ 75.085327][ T1454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.085342][ T1454] R13: 00007ff206226038 R14: 00007ff206225fa0 R15: 00007ffc9864aec8 [ 75.085362][ T1454] done killall: can't kill pid 319: No such process killall: can't kill pid 322: No such process killall: can't kill pid 490: No such process killall: can't kill pid 505: No such process killall: can't kill pid 506: No such process Stopping klogd: OK Stopping acpid: [ 75.569772][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 75.665087][ T65] usb 2-1: USB disconnect, device number 23 [ 75.720856][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.740144][ T9] usb 3-1: config 0 has no interfaces? [ 75.745734][ T9] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 5.00 [ 75.759840][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.782894][ T9] usb 3-1: config 0 descriptor?? [ 75.827996][ T1481] rust_binder: Error in use_page_slow: ESRCH [ 75.842548][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 75.853580][ T1481] rust_binder: use_range failure ESRCH [ 75.860748][ T1481] rust_binder: 1480:1481 transaction async to 1480:0 failed ESRCH, code 0 size 76-24 line process.rs:1128 [ 75.874373][ T9] rust_binder: 1480: undelivered TRANSACTION_ERROR: 29201 [ 75.997748][ T9] usb 3-1: USB disconnect, device number 21 [ 76.087153][ T1497] FAULT_INJECTION: forcing a failure. [ 76.087153][ T1497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.100488][ T1497] CPU: 0 UID: 0 PID: 1497 Comm: syz.1.329 Not tainted syzkaller #0 5676c8b0feefcba4e903dddff460827408f065be [ 76.100516][ T1497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 76.100527][ T1497] Call Trace: [ 76.100533][ T1497] [ 76.100540][ T1497] __dump_stack+0x21/0x30 [ 76.100559][ T1497] dump_stack_lvl+0x140/0x1c0 [ 76.100574][ T1497] ? __cfi_dump_stack_lvl+0x10/0x10 [ 76.100589][ T1497] ? check_stack_object+0x138/0x150 [ 76.100614][ T1497] dump_stack+0x19/0x20 [ 76.100627][ T1497] should_fail_ex+0x3c2/0x510 [ 76.100643][ T1497] should_fail+0xf/0x20 [ 76.100656][ T1497] should_fail_usercopy+0x1e/0x30 [ 76.100672][ T1497] _copy_to_user+0x24/0xa0 [ 76.100690][ T1497] simple_read_from_buffer+0xed/0x160 [ 76.100710][ T1497] proc_fail_nth_read+0x1aa/0x220 [ 76.100731][ T1497] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 76.100752][ T1497] ? bpf_lsm_file_permission+0xd/0x20 [ 76.100770][ T1497] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 76.100790][ T1497] vfs_read+0x288/0xc70 [ 76.100815][ T1497] ? __cfi_vfs_read+0x10/0x10 [ 76.100837][ T1497] ? __kasan_check_write+0x18/0x20 [ 76.100861][ T1497] ? mutex_lock+0x97/0x1d0 [ 76.100921][ T1497] ? __cfi_mutex_lock+0x10/0x10 [ 76.100944][ T1497] ksys_read+0x145/0x260 [ 76.100957][ T1497] ? __cfi_ksys_read+0x10/0x10 [ 76.100971][ T1497] ? __kasan_check_write+0x18/0x20 [ 76.100993][ T1497] ? fput+0x1a4/0x230 [ 76.101016][ T1497] ? __kasan_check_read+0x15/0x20 [ 76.101039][ T1497] __x64_sys_read+0x7f/0x90 [ 76.101053][ T1497] x64_sys_call+0x2638/0x2ee0 [ 76.101070][ T1497] do_syscall_64+0x57/0xf0 [ 76.101086][ T1497] ? clear_bhb_loop+0x50/0xa0 [ 76.101109][ T1497] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 76.101131][ T1497] RIP: 0033:0x7f82e9b69d0e [ 76.101144][ T1497] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.101159][ T1497] RSP: 002b:00007f82e85f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.101177][ T1497] RAX: ffffffffffffffda RBX: 00007f82e85f76c0 RCX: 00007f82e9b69d0e [ 76.101189][ T1497] RDX: 000000000000000f RSI: 00007f82e85f70a0 RDI: 0000000000000004 [ 76.101200][ T1497] RBP: 00007f82e85f7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.101210][ T1497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.101220][ T1497] R13: 00007f82e9e26038 R14: 00007f82e9e25fa0 R15: 00007ffd3f9ba1c8 [ 76.101234][ T1497] OK Stopping syslogd: stopped /sbin/syslogd (pid 93) OK umount: can't remount debugfs read-only Connection to 10.128.0.62 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 76.920725][ T332] bridge_slave_1: left allmulticast mode [ 76.926492][ T332] bridge_slave_1: left promiscuous mode [ 76.932257][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.940184][ T332] bridge_slave_0: left allmulticast mode [ 76.945868][ T332] bridge_slave_0: left promiscuous mode [ 76.952051][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.092716][ T332] veth1_macvtap: left promiscuous mode [ 77.098313][ T332] veth0_vlan: left promiscuous mode [ 77.381708][ T332] bridge_slave_1: left allmulticast mode [ 77.387405][ T332] bridge_slave_1: left promiscuous mode [ 77.393286][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.400983][ T332] bridge_slave_0: left allmulticast mode [ 77.406666][ T332] bridge_slave_0: left promiscuous mode [ 77.412432][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.420301][ T332] bridge_slave_1: left allmulticast mode [ 77.425957][ T332] bridge_slave_1: left promiscuous mode [ 77.431670][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.439270][ T332] bridge_slave_0: left allmulticast mode [ 77.445055][ T332] bridge_slave_0: left promiscuous mode [ 77.450738][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.592447][ T332] tipc: Disabling bearer [ 77.597875][ T332] tipc: Left network mode [ 77.604367][ T332] veth1_macvtap: left promiscuous mode [ 77.609998][ T332] veth0_vlan: left promiscuous mode [ 77.615621][ T332] veth1_macvtap: left promiscuous mode [ 77.621194][ T332] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 77.869831][ T55] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 77.869858][ T598] Bluetooth: hci1: command 0x1003 tx timeout [ 78.750242][ T1511] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 78.757156][ T1511] ACPI: PM: Preparing to enter system sleep state S5 [ 78.764118][ T1511] kvm: exiting hardware virtualization [ 78.769643][ T1511] reboot: Power down serialport: VM disconnected.