last executing test programs: 1m35.255319224s ago: executing program 0 (id=340): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b07, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a200000000200003f000000240009801c00200008000000140005"], 0x40}], 0x1}, 0x0) 1m35.254942454s ago: executing program 0 (id=341): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) madvise(&(0x7f00003ca000/0x1000)=nil, 0x1000, 0x66) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x5393, 0x0) 1m35.254833424s ago: executing program 0 (id=342): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x70) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216aac908b9a6111c6", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1m35.169611786s ago: executing program 0 (id=343): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x21, 0x70bd2a, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x400, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x4000000, 0x0, 0x0, 0x1d}, {0x200000000000000, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x2b}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0xff, 0x0, 0x400, 0xfffffffe}, {{@in6=@private2, 0x0, 0x32}, 0xa, @in=@multicast1, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffff}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x10, 0x1}]}]}, 0x17c}}, 0x0) 1m35.157374507s ago: executing program 0 (id=344): mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys_mount\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='jfq', 0x3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000200)=0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket(0x10, 0x5, 0x0) recvmmsg$unix(r4, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/212, 0xd4}], 0x1}}], 0x1, 0x10000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{0x80000000, 0x5, 0x1, 0xd, 0x0, 0xffffff48, 0x6}, {0x40000007, 0x3, 0x1, 0xff, 0x9, 0xb06, 0xffff8000}]}) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r1, 0x1) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000000), 0x8) listen(r0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000100)) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005100), 0x242040, 0x0) ioctl$TIOCSRS485(r8, 0x542f, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e23, 0x5, @local}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, 0x0) 1m35.044054319s ago: executing program 0 (id=345): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6c4) close(r0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x6, 0xffffff69) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000001dc0)=""/4096, 0x1000) lseek(r4, 0xffffffffffffffff, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01dfd4"], 0x14}, 0x1, 0x0, 0x0, 0x8030}, 0x50) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x864}, 0x10000880) 1m19.605702564s ago: executing program 32 (id=345): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6c4) close(r0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x6, 0xffffff69) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000001dc0)=""/4096, 0x1000) lseek(r4, 0xffffffffffffffff, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01dfd4"], 0x14}, 0x1, 0x0, 0x0, 0x8030}, 0x50) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x864}, 0x10000880) 1m15.985535695s ago: executing program 3 (id=598): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x21, 0x70bd2a, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x400, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x4000000, 0x0, 0x0, 0x1d}, {0x0, 0x30000000, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x2b}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0xff, 0x0, 0x400, 0xfffffffe}, {{@in6=@private2, 0x0, 0x32}, 0xa, @in=@multicast1, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffff}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x10, 0x1}]}]}, 0x17c}}, 0x0) 1m15.963367635s ago: executing program 3 (id=599): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a009000ffffffffffff00000000000086dd694fd2cd001b3afffe80000000000000000100000000000eff0200000000000000000000f4c0a1a50200"], 0x55) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x40001, 0x41) write(r4, &(0x7f0000000300)='lzo-rle', 0x7) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYRES16, @ANYRES16=r0, @ANYRES64=r4], 0x32600) unshare(0xc040480) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="0000ee15b9030000"], 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x119) r7 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) r8 = dup3(r7, r6, 0x80000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r11, &(0x7f0000000380)=ANY=[@ANYRES64=r9, @ANYRESDEC=r9], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r10, 0xc018620c, &(0x7f0000000000)={0x1}) ioctl$HIDIOCGRDESC(r8, 0x90044802, 0x0) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @private=0xa010100}, 0x4, 0x0, 0x3, 0x1}}, 0x26) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x0, 0x100}, 0x0) syz_clone(0x40001000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m15.76852599s ago: executing program 3 (id=600): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x200000000100000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x1000004, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}}) 1m15.76822614s ago: executing program 3 (id=601): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010105}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0xc33, 0x5}, @window={0x3, 0x200, 0xff97}, @timestamp], 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0x2) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) sendto$inet(r0, &(0x7f0000000040)='@', 0x1, 0x4000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) write$vga_arbiter(r2, &(0x7f0000000080), 0xf) sendfile(r0, r1, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/169, 0xa9, 0x0, 0x0}, &(0x7f0000000400)=0x40) 1m15.75537245s ago: executing program 3 (id=602): prctl$PR_SET_PDEATHSIG(0x1, 0x40) prctl$PR_SET_PDEATHSIG(0x1, 0x38) prctl$PR_SET_PDEATHSIG(0x1, 0x21) prctl$PR_SET_PDEATHSIG(0x1, 0x3e) prctl$PR_SET_PDEATHSIG(0x1, 0x5) prctl$PR_SET_PDEATHSIG(0x1, 0x13) prctl$PR_SET_PDEATHSIG(0x1, 0x3c) prctl$PR_SET_PDEATHSIG(0x1, 0x11) prctl$PR_SET_PDEATHSIG(0x1, 0x3) prctl$PR_SET_PDEATHSIG(0x1, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x26) prctl$PR_SET_PDEATHSIG(0x1, 0x3c) prctl$PR_SET_PDEATHSIG(0x1, 0x27) prctl$PR_SET_PDEATHSIG(0x1, 0x3a) prctl$PR_SET_PDEATHSIG(0x1, 0x1e) prctl$PR_SET_PDEATHSIG(0x1, 0x1d) prctl$PR_SET_PDEATHSIG(0x1, 0xc) prctl$PR_SET_PDEATHSIG(0x1, 0x38) prctl$PR_SET_PDEATHSIG(0x1, 0x16) prctl$PR_SET_PDEATHSIG(0x1, 0x2a) prctl$PR_SET_PDEATHSIG(0x1, 0x18) prctl$PR_SET_PDEATHSIG(0x1, 0xd) prctl$PR_SET_PDEATHSIG(0x1, 0x1d) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(r0, 0x5, 0x6, &(0x7f0000000000)="d1e4db133b8ee383c180e255f1812e2c7bbcfab466425c7a45", 0x19) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x2f) prctl$PR_SET_PDEATHSIG(0x1, 0x36) prctl$PR_SET_PDEATHSIG(0x1, 0x14) prctl$PR_SET_PDEATHSIG(0x1, 0x3e) 1m15.660852153s ago: executing program 3 (id=604): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000030000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) 1m15.586596484s ago: executing program 33 (id=604): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000030000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) 1m1.019509658s ago: executing program 4 (id=875): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfe, 0x1000000}, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6(0x10, 0x3, 0x7) sendto$inet6(r1, &(0x7f0000000080)='L\x00\x00', 0x3, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x10001, 0x0, 0x3, 0x7, 0x200, 0x7, 0x2, 0xffffffffffffff30}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x200, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @remote}, 0x72, r2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$FIBMAP(r4, 0x5385, 0x0) 1m1.006182318s ago: executing program 4 (id=876): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, 0x0) 1m0.95280092s ago: executing program 4 (id=877): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b07, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a200000000200003f000000240009801c00000008000000140005"], 0x40}], 0x1, 0x0, 0x0, 0xfc}, 0x0) 1m0.895713731s ago: executing program 4 (id=878): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000002880)={0x38, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x6, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) write(r0, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a107000003e700"/96, 0x60) (async) write(r0, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a107000003e700"/96, 0x60) 1m0.895452471s ago: executing program 4 (id=879): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {0x0, 0x0, 0xd}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) close(0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001220020002000000bd00000000001000330002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 1m0.895237731s ago: executing program 4 (id=880): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000be34000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) 1m0.859864852s ago: executing program 34 (id=880): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000be34000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) 37.991025942s ago: executing program 5 (id=1144): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) pwritev(r1, &(0x7f0000001580)=[{&(0x7f0000000300)="d4c4b8c259cc13fecd725d26814bbb65368221e71408c93c0f42813726bfe736a370f53f77693b156dc94b1822b09b19768a60be9020ce2fecb1bdd3bef2ff0559c179de4e1e", 0x46}], 0x1, 0xf, 0x83) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) 37.990938972s ago: executing program 5 (id=1145): r0 = socket$inet6(0xa, 0x1, 0x0) listen(r0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01f0ff00000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 37.962537063s ago: executing program 5 (id=1146): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {0x0, 0x0, 0xd}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) close(0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bdefffffff001000330002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 37.950229163s ago: executing program 5 (id=1147): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) epoll_create1(0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r1 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x200013) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, &(0x7f00000003c0)={&(0x7f00000002c0)="6107cf09df94dbc047408a7ae2fe5b748fe94085454f67c4c52779db7ee3dcaafd3511a87d94ef08c8cbbe00c5f5f22e02e6c61c671f633fedec9d2af1c5fb75d29c4bd65b5bedc99b09f2b660ad657392a1", 0x52, &(0x7f0000000340)=""/126, 0x7e}) wait4(0x0, 0x0, 0x2, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) 37.755945358s ago: executing program 5 (id=1148): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0x21, 0x70bd2a, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x400, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x4000000, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x7000000, 0x0, 0x1, 0x3, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x32}, 0xa, @in=@multicast1, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffff}]}]}, 0xfc}}, 0x0) 37.478980815s ago: executing program 5 (id=1152): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000000000f000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) 37.444463616s ago: executing program 35 (id=1152): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000000000f000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) 3.895075103s ago: executing program 6 (id=1533): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x5c8}}], 0x1, 0x4001c00) 3.831948064s ago: executing program 6 (id=1534): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0x1bf61000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = signalfd4(r0, &(0x7f0000000040)={[0x6ad]}, 0x8, 0x80000) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x476, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x80000000, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x8000, 0x9, 0xa, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x65, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) 3.007544625s ago: executing program 6 (id=1553): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000000c0)={{r1}, r2, 0x6, @inherit={0x70, &(0x7f0000000040)={0x1, 0x5, 0x1, 0x3ff, {0x2e4f597b4ff68cca, 0x2, 0x5, 0x4, 0x3}, [0x1, 0x9, 0x1, 0x9, 0x100000001]}}, @devid}) (async) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001380)={{'\x00', 0x1}, {0xed6c}, 0xbfc1b538375091b5, 0x0, 0x0, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)='./file0\x00', &(0x7f0000001140)="1ee7b5702fc80bbe575296f502eb55d0aea6c182b7f1b9ebc8e1", 0x1a, 0x0, &(0x7f0000001180)={0x2, 0xe3, {0x1, 0xc, 0xa6, "5dc3358de04449ed7e5d4ec93cfa48978f6579a3581ade1c3cb02512038d3abd505b4991e4d792aed8c43197ffdc748bb154b074a13b99ec0e892634e6705d1962ffb4aa7b57a78f5b6c3a04742d919026c3b5e1a66ce8a01facb2ef733216b8fe606c610769b0cb6923f181168ea67ac05b9ae3d23a10aee87a6903b09c1044c0de83b7abd18da91daef855e34c21779e773555fc054e015a791c1305ff9e813fa0e90f13db", 0x30, "d058ce03a6cbbb957b9b3134c8a4f50bbe0ed49a712016704e62815fa407b12b64f56266863aae7b0c6d2244fea276d1"}, 0xd9, "2c99c7a63ea94825cce636a1a0d4d9645b35a9aeb8d2316af9c94b60f379ba18c897d667b5b606c5488a65c6a7285e64b9cf8352419467dcfdb07447f2798e97eef0553d823335fb9a7a3b8efbeca4085061a96a86b1717adbe91b1bf208ba05515b80bee11acb6e3224435a0ed6d74fefa799fff6bfb3e3a4b18a5034389bf073a15b220cd23750974780ba1b8fcd341b42354ac6b27d50d514333a6f89debe5785d437430af6482fff25713de56128907480ebfe49f306391c4927440021c52c96c673a9e14a50d7f8e0dc7779569bbe7e0eb1b3dc25a259"}, 0x1c8}) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001400), 0x200000, 0x0) ioctl$EXT4_IOC_SETFSUUID(r4, 0x4008662c, &(0x7f0000001440)={0x0, 0x0, "689d53471d6408cebfe028439bba803d"}) (async) r5 = fspick(0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000014c0)='/dev/snapshot\x00', 0x0, r0) r6 = fsopen(&(0x7f0000001500)='ufs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001540)='-\\\x00', &(0x7f0000001580)="0e36fe293a871d59a26b08c64a74b2d8cfe6cdcb7b1215a0736ccdff226588436c8d7a0fdeca2f896e67e1a9a3f5d972459fb0083db1506c87dc4d2524dd2e22ef3cd2d2584200a65482e97084f5d33eb295e9bab09ba3ba9c38b0f3f0625fd6573ff2461ecf7008170ec7e1baebc5e8474e1055566248c3f55fa6bdd13bbf5d4b6f885c76e5dd056148a7b0b474f0", 0x8f) (async) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001640), 0x200081, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r7, &(0x7f0000001b40)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001740)={0x398, r8, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x13}}}}, [@NL80211_ATTR_TESTDATA={0xeb, 0x45, "cc05f36c7258f3039864b075359966108e4dc5eceb83b2a91266922251bee99838b435c4065c1cd1e9b0b88d8301bad860abf404e8532d5d6747dea46707734d24d88aea84568153f5a255aa84950e308099e5cce84dcc4983da0fee1ed7ef97d32a2e7e5d4c7b609054f08956217991e9b0fdd5decda24c9f6cd51544638e6391ca002b4995359b5f2ff576dc9cb945ec593b05a8285290e0fd25c3d02b3a1f3c47b33980574bca414ac07c77d8e60211a6379b9beeedb1b36f5452d826e4171ecbb1041f402ee09acde5f18a57ab0a813d541a33f3d3b09a70449991bd422c4ac3e57d492614"}, @NL80211_ATTR_TESTDATA={0x1b, 0x45, "70c31b8fa89706d30a601c6da548cbe42d12cf9e74c22d"}, @NL80211_ATTR_TESTDATA={0x6c, 0x45, "74aa9afce33f2fea6afb3a31391b47341f31b2312e15b45bac82abdd0ead7c785caf5ce6babc46a7ee6d11162dec82f38f0539c59cfe1f0fcfb211e1f909239dc4b241ec52199c8999b779928d7f7d2f297304260116f7ca0e97a4b8339915ffec248f9143bd96f6"}, @NL80211_ATTR_TESTDATA={0xfa, 0x45, "6f6f1f1f12c5885b3a8da5d648236d5354dd1d2681cb3fdc89b5a82f4e38d1076db872f61c301fa2b5714e0f435bbe3c4a9199c97d6d64ea132ca91310d8973e11601a30858ee6aee3cc91fc83e33cfe070ad29d15cd868bd4f00670616bafb73c11b3c2f7eb9f53bb36b144d1d35f2f7a3c349d9d6162425ec928adfae04d1d3f5cd641f2c9ad551ff0d3fc15c7664a9c873a64bab31dde5b31561cfadab3129263f482619e44044a21d95dad25a012996d1dfb298da4f91a552d5a40c549b6bb54dcf04ed51ca09f09f1c1d52f7ecdbfd9c929e660a268772f62e87cdde9737f5bf358f82cd31e1f90f50b106d9626e42da55e0c6a"}, @NL80211_ATTR_TESTDATA={0xfd, 0x45, "1b57614600a7213ee378297c71ccba9613de9bc3a627fca221cd9ee9062e918e2a7581d49a3381842ef51964b414a02c86cf8bc7aac363f68c2a619f3b9a3d365c10a54216597fb7a06d04371542ab075f8b38289201ea7052fe1fcf5ee0a26fca2630dc6adc1f1600a4311855d51c4f0696060fe632878f5fb0308cacf63c596d2463402ca0ff04c9d7819e891203a90546aa8e68ffd94e19d9cbbffb568b6fea03791abaf1da128b9eca3ba90c36765c28ba4de077547ed90ca8c5419e3c0c5080d63b82de07afb86cbaefbcffd27781557a74dcd8def46112f1ab48360fc4cc354ceb7307a5ad57f93040dc3a5d8491360a47dcf3058d55"}]}, 0x398}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) (async) ioctl$HIDIOCGCOLLECTIONINDEX(r7, 0x40184810, &(0x7f0000001b80)={0x1, 0x200, 0x7, 0xfffffff2, 0xed2a, 0xacc}) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r10, &(0x7f0000001cc0)={&(0x7f0000001bc0), 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x50, r8, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x80}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}]]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getdents64(r7, &(0x7f0000001d00)=""/229, 0xe5) getsockname$packet(0xffffffffffffffff, &(0x7f0000001e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001e80)=0x14) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000001fc0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x90, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r12}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8000}]}, 0x90}, 0x1, 0x0, 0x0, 0x810}, 0x40) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000002040), r10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x28, r13, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}}, 0x0) ioctl$TIOCMBIS(r7, 0x5416, &(0x7f0000002140)=0x1) openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000002180), 0x2, 0x0) (async) ioctl$FIONCLEX(r11, 0x5450) (async) landlock_restrict_self(r7, 0x8) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000002200)=0xfffffffffffffff3) 2.999419335s ago: executing program 6 (id=1554): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x1) r1 = gettid() process_vm_readv(r1, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000900)={{&(0x7f00001eb000/0x800000)=nil, 0x800000}, 0x1}) r2 = syz_usb_connect$uac3(0x5, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="200604000000e971ec7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000002240)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x40, 0x5, 0x2c, {0x2c, 0xf, "b57bb1b875ae9f61aa556b78685fade5f7f290089077a3326d42795b1e13c81cc20fdbbe21f7a9862ad8"}}, &(0x7f0000000100)={0x0, 0x3, 0xbb, @string={0xbb, 0x3, "eed12e5a83943c7267c21e63ef3649f4c8cf83d6ce58e0512b52d330f983298973a023caac9390fa5035720d36ab9f26eb58cae2f6ddc3fe404c22f1d7713b55a30b791470e3ab5f5a5eb37882980004228c5403038ee8a4b7b870956609282c872fe89fe5283674c2ac770734fb1435b86f16abd5ed29ed549943177774f34af0adf97c3cc97575dda85c452650b977d3b924581d9714ebcd0452d40ef63bf204bf93707d15e515af6c03f07588a7b36d31a56d1ce8494942"}}}, &(0x7f0000000640)={0x44, &(0x7f00000002c0)={0x40, 0x5, 0xc9, "5910a5e187b15255d4012416f2685961cab2453c99b82a870f13c07e1bb008a9cc4567b0d103fdd4d57d6ff098a4e12b3d43f59581934e438ee6439e4d70435619c4f211f9fd2a9ec42f9a8a911adeebf47c6f58688debc573e196313ac320aae0ae070857783f136f3e703914f9818ce025d96909b0d8f8d0833b54b27c32fc58d1361e81ad52b7251548eb6da045f1c67c5f32d85e4c1172778a110b64e0ebffbe2a69890a5eff67b6e575e0f939b96a58969a3479990b963cab4dc5512a9359fdd9fbdfd9ce001c"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x81, 0x1, '}'}, &(0x7f0000000480)={0x20, 0x82, 0x2, "dc51"}, &(0x7f00000004c0)={0x20, 0x83, 0x3, "f74c46"}, &(0x7f0000000500)={0x20, 0x84, 0x2, "8408"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "c0d987"}}) 2.103781047s ago: executing program 2 (id=1562): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0xfffffffd, 0x0, 0x1}}) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000040)=[@exit_looper, @exit_looper, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) 2.086438368s ago: executing program 2 (id=1563): r0 = socket$inet6(0xa, 0x3, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.memory_spread_page\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) write$FUSE_IOCTL(r4, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, 0x0, {0x4, 0x4, 0x98d, 0x3}}, 0x20) sendfile(r3, r3, 0x0, 0x5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x1, 0x3, 0x12, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x12}, 0x8000, 0x20, 0xba, 0x9}}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r8, &(0x7f00000003c0)={0x2c, 0x0, r7, 0x1, 0xffffffff}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0xcc, 0x0, 0x900, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4881}, 0x4000805) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) r10 = inotify_init1(0x0) r11 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000010) inotify_rm_watch(r10, r11) 1.99163728s ago: executing program 2 (id=1566): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000002000000008001200030002000000bd00000000001000330002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 1.96708613s ago: executing program 2 (id=1567): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x21, 0x70bd2a, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x400, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x4000000, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, [@tmpl={0x104, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x2b}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0xff, 0x0, 0x400, 0xfffffffe}, {{@in6=@private2, 0x30, 0x32}, 0xa, @in=@multicast1, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x10, 0x1}]}]}, 0x1bc}}, 0x0) 1.947619621s ago: executing program 2 (id=1568): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001040)='./cgroup/syz0\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r0) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="0abb0523675090003707e4ff0060"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000001280)=ANY=[@ANYBLOB="5dd8bb64db89c4f0f5e6f7403bd1a08fe3f98040cda82159d2b0de112a0cc198d0c9074c67e553a155935ffbe3dea66e8bf1b86f479e1a7485e1b86cc09975775599edf9f4086354f1569b44c7613a0aa1349638b38078f0fa6aea1e71b8", @ANYBLOB="b0d9a0e3e5f6f09729c6dc4d2ae3a2d86311e430e0431666d961d6ae1f9debb6d5", @ANYRESOCT=0x0, @ANYRESDEC, @ANYBLOB="1ffd4cce53d3fae0ab9981aa705f869f67f9d1638b0d5d5db5d0027e9053bf01b69ad53257ba088ebabe0bbb97e905bbf34a646eb8e121f43c4a79fa6293ce729523432073c43ed193018d198b35cce1b748328065eec4a05e82b69add64fb9f31aba807322ff696629239f4b5628832c60bd4b8757ad9b62d9db0016737d4ff67d3a51c0907d2d073072423d49a5fdfa8bfb0e0dafb", @ANYRES64=r2, @ANYBLOB="f774bd710fd228912bfbcc31576c87b7fefc519b69522fccd71da2661b2b23c4e131bba5512e5c0620e7d9be2a58d93a90d9a7"], 0xfdef) setsockopt$sock_int(r1, 0x1, 0x1a, &(0x7f0000001000)=0x1, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) 1.136286131s ago: executing program 1 (id=1576): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) close(0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b07, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x2000000) 739.136081ms ago: executing program 2 (id=1577): sched_setscheduler(0x0, 0x1, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) syz_pidfd_open(r0, 0x0) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x20202, 0x0) sendfile(r4, r4, 0x0, 0xc3) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) read$FUSE(r1, &(0x7f0000001740)={0x2020}, 0x2020) io_submit(r3, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0xfffffdfc}]) 738.284321ms ago: executing program 6 (id=1578): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x2800}}], 0x1, 0x4001c00) 679.862073ms ago: executing program 6 (id=1579): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) recvmmsg(r1, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x25dfdbff, {0xb, 0x0, 0x0, 0xfc, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7ff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}, 0xfffffffd}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000020"}]}, 0x8e}}, 0x20004010) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0x6}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_connect$cdc_ncm(0x3, 0x84, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x0, 0xd0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "99"}, {0x5, 0x24, 0x0, 0xb141}, {0xd, 0x24, 0xf, 0x1, 0xfffffc00, 0xc028, 0xde7c, 0x3}, {0x6, 0x24, 0x1a, 0x100, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x5, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x18, 0x7}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0x81, 0x7, 0x20, 0x5}, 0xa0, &(0x7f0000000180)={0x5, 0xf, 0xa0, 0x3, [@generic={0x78, 0x10, 0x4, "c05f8c212281d16168f4f68db39d88b64f1d031987aa8c2a0c19a5b70ea1d00574d22ca333e27caccada1250c14fd3d619d7341d18599741d163ac7ac9a48f6fad1ee14040f624a51ecdcac3fdb24185a39d71bbdf5fd34972c31175ef1635a3dfc78f73520ddc66580abc228b9f456156a898d468"}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x2, 0xf00, 0x101, [0xc000, 0xffc000, 0x0, 0xc0, 0xcf]}, @ptm_cap={0x3}]}, 0x5, [{0xef, &(0x7f0000000240)=@string={0xef, 0x3, "2b0c86d937aca58a20d80d603ac9cb018658127b1855903cf91ad65175f5a1cb0214df533972ef077f79586693fa6dc12134ec0622336bcb827539253ba436fdf66aa7a1c9c2c7aa33b63958ea66c269741e6e4160fd4f6d41c132a5ce0680553fe1e640d85086348904924630d7d8d31c7cdee03bdb73ff1b05777a71022f93ef7c892bc672853ba37d03a514a9edd485823df69931e91e259dbc5836fa16fefe5fa22ec81f8ee37d0a19548806680b50d3c18d70f26520e6e209dc87ec48f101bd33c9f1013692f3bb9b4168d99944106a6190574ae87ab9663353ebc213e267a9ebce567a8b9d5557baff59"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x23, &(0x7f0000000380)=@string={0x23, 0x3, "58b080494463f5e7cccbcfaa8bd7f4b0b89e7d43c2a7336e4cbbcbe0a5213ebc9a"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x280a}}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) (async) recvmmsg(r1, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x25dfdbff, {0xb, 0x0, 0x0, 0xfc, {0x0, 0x4e23, [0x0, 0xffffffff, 0x7ff], [0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x3]}, 0xfffffffd}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000020"}]}, 0x8e}}, 0x20004010) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r0, 0x6}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) (async) syz_usb_connect$cdc_ncm(0x3, 0x84, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0x1, 0x0, 0xd0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "99"}, {0x5, 0x24, 0x0, 0xb141}, {0xd, 0x24, 0xf, 0x1, 0xfffffc00, 0xc028, 0xde7c, 0x3}, {0x6, 0x24, 0x1a, 0x100, 0x20}, [@mdlm={0x15, 0x24, 0x12, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0x5, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x18, 0x7}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0x81, 0x7, 0x20, 0x5}, 0xa0, &(0x7f0000000180)={0x5, 0xf, 0xa0, 0x3, [@generic={0x78, 0x10, 0x4, "c05f8c212281d16168f4f68db39d88b64f1d031987aa8c2a0c19a5b70ea1d00574d22ca333e27caccada1250c14fd3d619d7341d18599741d163ac7ac9a48f6fad1ee14040f624a51ecdcac3fdb24185a39d71bbdf5fd34972c31175ef1635a3dfc78f73520ddc66580abc228b9f456156a898d468"}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x2, 0xf00, 0x101, [0xc000, 0xffc000, 0x0, 0xc0, 0xcf]}, @ptm_cap={0x3}]}, 0x5, [{0xef, &(0x7f0000000240)=@string={0xef, 0x3, "2b0c86d937aca58a20d80d603ac9cb018658127b1855903cf91ad65175f5a1cb0214df533972ef077f79586693fa6dc12134ec0622336bcb827539253ba436fdf66aa7a1c9c2c7aa33b63958ea66c269741e6e4160fd4f6d41c132a5ce0680553fe1e640d85086348904924630d7d8d31c7cdee03bdb73ff1b05777a71022f93ef7c892bc672853ba37d03a514a9edd485823df69931e91e259dbc5836fa16fefe5fa22ec81f8ee37d0a19548806680b50d3c18d70f26520e6e209dc87ec48f101bd33c9f1013692f3bb9b4168d99944106a6190574ae87ab9663353ebc213e267a9ebce567a8b9d5557baff59"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x23, &(0x7f0000000380)=@string={0x23, 0x3, "58b080494463f5e7cccbcfaa8bd7f4b0b89e7d43c2a7336e4cbbcbe0a5213ebc9a"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x280a}}]}) (async) 667.314143ms ago: executing program 7 (id=1582): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, 0x0, &(0x7f00000009c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r1 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000afd000/0x400000)=nil) r2 = syz_kvm_add_vcpu$x86(r1, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) 655.882823ms ago: executing program 7 (id=1583): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x6, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x34, 0x34, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x65, 0x0, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x62, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x5a, 0x30, 0x64, 0x39, 0x30, 0x30, 0x30, 0x30, 0x38, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccdceeff0011223344556613be755f104f6abfff", 0x3d}, 0x48, r1) request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, r1) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 600.170645ms ago: executing program 7 (id=1584): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x83, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0x4018aee2, &(0x7f0000000080)) 599.756394ms ago: executing program 7 (id=1585): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89fd, &(0x7f0000000840)={'gre0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)={0x14, r2, 0x41, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 599.564465ms ago: executing program 7 (id=1586): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff000000000000000000000000000000000000000000000000fffe00"/88, 0x58) 590.653775ms ago: executing program 7 (id=1587): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x1) r1 = gettid() process_vm_readv(r1, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r2 = syz_usb_connect$uac3(0x5, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="200604000000e971ec7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000002240)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x40, 0x5, 0x2c, {0x2c, 0xf, "b57bb1b875ae9f61aa556b78685fade5f7f290089077a3326d42795b1e13c81cc20fdbbe21f7a9862ad8"}}, &(0x7f0000000100)={0x0, 0x3, 0xbb, @string={0xbb, 0x3, "eed12e5a83943c7267c21e63ef3649f4c8cf83d6ce58e0512b52d330f983298973a023caac9390fa5035720d36ab9f26eb58cae2f6ddc3fe404c22f1d7713b55a30b791470e3ab5f5a5eb37882980004228c5403038ee8a4b7b870956609282c872fe89fe5283674c2ac770734fb1435b86f16abd5ed29ed549943177774f34af0adf97c3cc97575dda85c452650b977d3b924581d9714ebcd0452d40ef63bf204bf93707d15e515af6c03f07588a7b36d31a56d1ce8494942"}}}, &(0x7f0000000640)={0x44, &(0x7f00000002c0)={0x40, 0x5, 0xc9, "5910a5e187b15255d4012416f2685961cab2453c99b82a870f13c07e1bb008a9cc4567b0d103fdd4d57d6ff098a4e12b3d43f59581934e438ee6439e4d70435619c4f211f9fd2a9ec42f9a8a911adeebf47c6f58688debc573e196313ac320aae0ae070857783f136f3e703914f9818ce025d96909b0d8f8d0833b54b27c32fc58d1361e81ad52b7251548eb6da045f1c67c5f32d85e4c1172778a110b64e0ebffbe2a69890a5eff67b6e575e0f939b96a58969a3479990b963cab4dc5512a9359fdd9fbdfd9ce001c"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x81, 0x1, '}'}, &(0x7f0000000480)={0x20, 0x82, 0x2, "dc51"}, &(0x7f00000004c0)={0x20, 0x83, 0x3, "f74c46"}, &(0x7f0000000500)={0x20, 0x84, 0x2, "8408"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "c0d987"}}) 290.557053ms ago: executing program 1 (id=1588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000002000", @ANYRESDEC], 0xffdd) 175.939515ms ago: executing program 1 (id=1589): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) (async) listen(r1, 0x0) r2 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) write$binfmt_script(r2, &(0x7f00000008c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x204) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = dup(r3) read(r4, &(0x7f0000000140)=""/113, 0x71) listen(r4, 0x7fff) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async) setuid(0xee00) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000000)) (async) memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xb2m\xe6\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\x00\x00\x00\x00\x01\x00\x00\x00nh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=w=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xec\xd3c\xdc\x88y\xbb+=#\t\x92<\x87Ro\xdeP\xab\xd5i\xebRW[\x16\x85\xe2\x81\x87\x1f\x88\x85\xef^N\xe8\x9a\xbb\xa7\x1c#\xc1I\xa3\xc0\"\xe3\xba`\x9e\x9a\xb8\xc6\xc8\x10!\xf1\xa2\xbfSL\xa3\x05\xf4\xaa\r\x89F\xac-\xd6[\x17\xcd\"\x8c\xb3\xab\x04bl\x0f\x8c\xfe\xb03 \xe1\x81\x84{C\xe5\x83\xc3\xf3\xaf\xd7\x7fg)\xf4&\xd9| \xb0\xdac\x9e\x16\xe5\aC\xf5q\x82\x033\xedG\x1e\x81}\xda\x95\xe5\xd5\x00\x1d\x1f.N\"dxn>D?\x81\xcd\xf2\xd4\xb2\xbf\x15z\xc3\xd9\xd3.!8\xff8\xf7\xf5\xa9D\x0eb\xeb\x89~\xd4Y\xad\xc9\x04\x18\x11\xd3\xfbpT\t\xebD\v\xea\xd8d\x94%?t\xcc\xa3\x041\x06\x80\xa3\xc6{\xce\x97\x1b\x81!o\xa3v\x96\xf6\xa4\x03Z\t\x04\xccR{\xd1(\x97b\x1b\xda\x80\xdc.w\xdbGC\xba?\xa1c@\xc2`y9\xca\x94\xe8\x10\x9c\xc0\x89>\x81\xd2@\x1c\xd6\xcc\xd9\xdbR\xecn\xd0\xd1\x12\xb5\xf2\xdb#Dk\x9d\xa7\xc2\"\xe2\x03D\x12J\rWe\xaf\xfc],\x7f\xe6\x8b\xab\x96\x92\xf6\xd7\r\xa8\x99e\xa4\xb7X\xfd|\x95\xdcek\xe8\x97\xd2\x9a\xdc\vSCI\xe5\xc1K4\xce\x99\xb3\xbfL=\xe6g0\t[nM\xc8G\xfc\xb2_w\'K\bI\vX\xd6\x95Q\xccvW42\x11\xe7\x18%uU\xd4\x96W\\^\xbf\f5\x14Rd%\xb9k\xbb\x8d\x90\x02\xa1\xd6*\xd7L\xa5\xb6\xea\x19\x8d\x83\x04\xdd\xfd\x06p\x17\x88\xb8\xe1X\x9a\xd4E2\b\b\x05\x9cRg\xb5\\\xa7}\x19\xd5\xe6o\xedd\xa0P\x88H\xd2\xe6\xb6\x93\xf7J6\rA\xec\xaa HID v0.00 Device [syz1] on syz0 [ 26.392005][ T344] fido_id[344]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 26.477974][ T31] usb 1-1: config index 0 descriptor too short (expected 2166, got 118) [ 26.486423][ T311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.493951][ T31] usb 1-1: config 1 has an invalid interface number: 17 but max is 2 [ 26.502670][ T31] usb 1-1: config 1 has an invalid interface number: 11 but max is 2 [ 26.511534][ T31] usb 1-1: config 1 has 5 interfaces, different from the descriptor's value: 3 [ 26.520641][ T31] usb 1-1: config 1 has no interface number 3 [ 26.526973][ T31] usb 1-1: config 1 has no interface number 4 [ 26.533131][ T31] usb 1-1: config 1 interface 1 has no altsetting 0 [ 26.539984][ T31] usb 1-1: config 1 interface 11 has no altsetting 0 [ 26.548244][ T31] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 26.557402][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.565442][ T31] usb 1-1: Product: syz [ 26.569943][ T31] usb 1-1: Manufacturer: syz [ 26.574569][ T31] usb 1-1: SerialNumber: syz [ 26.648377][ T311] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.658621][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 26.672400][ T311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.690103][ T311] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 26.699364][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.707474][ T311] usb 3-1: Product: syz [ 26.711768][ T311] usb 3-1: Manufacturer: syz [ 26.716486][ T311] usb 3-1: SerialNumber: syz [ 26.722476][ T311] usb 3-1: config 0 descriptor?? [ 26.769673][ T357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.778405][ T357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.934211][ T31] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 26.941434][ T31] usb 1-1: selecting invalid altsetting 0 [ 26.953279][ T31] usb 1-1: USB disconnect, device number 2 [ 27.003783][ T363] udevd[363]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 27.006035][ T341] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.107459][ T368] netlink: 96 bytes leftover after parsing attributes in process `syz.1.18'. [ 27.175963][ T341] usb 4-1: Using ep0 maxpacket: 32 [ 27.183065][ T341] usb 4-1: unable to get BOS descriptor or descriptor too short [ 27.191845][ T341] usb 4-1: config 1 has an invalid interface number: 64 but max is 2 [ 27.200024][ T341] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.212955][ T341] usb 4-1: config 1 has no interface number 2 [ 27.220716][ T341] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 27.229896][ T341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.237988][ T341] usb 4-1: Product: syz [ 27.242247][ T341] usb 4-1: Manufacturer: syz [ 27.246905][ T341] usb 4-1: SerialNumber: syz [ 27.414041][ T389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.423844][ T389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.457949][ T341] usb 4-1: 0:2 : does not exist [ 27.467844][ T341] usb 4-1: USB disconnect, device number 2 [ 27.485583][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 27.511591][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.519210][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.527075][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.534531][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.542093][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.549809][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.560037][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.567637][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.575184][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.577039][ T10] usb 3-1: USB disconnect, device number 2 [ 27.583814][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.597453][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.605394][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.620245][ T397] netlink: 96 bytes leftover after parsing attributes in process `syz.2.29'. [ 27.629226][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.637178][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.644601][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.652208][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.660098][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.666020][ T63] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 27.667956][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.682579][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.690319][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.697982][ T31] hid-generic 0008:0008:0001.0002: unknown main item tag 0x0 [ 27.706754][ T31] hid-generic 0008:0008:0001.0002: hidraw0: HID v0.04 Device [syz1] on syz0 [ 27.753903][ T400] fido_id[400]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 27.807573][ T63] usb 1-1: device descriptor read/64, error -71 [ 28.064709][ T63] usb 1-1: device descriptor read/64, error -71 [ 28.171382][ T440] netlink: 96 bytes leftover after parsing attributes in process `syz.1.46'. [ 28.192015][ T442] fuse: Bad value for 'fd' [ 28.207619][ T444] netlink: 9 bytes leftover after parsing attributes in process `syz.1.49'. [ 28.226995][ T444] gretap0: entered promiscuous mode [ 28.299602][ T457] netlink: 'syz.1.55': attribute type 12 has an invalid length. [ 28.312409][ T63] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 28.467237][ T63] usb 1-1: device descriptor read/64, error -71 [ 28.578046][ T487] input: syz1 as /devices/virtual/input/input4 [ 28.634458][ T491] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 28.719295][ T63] usb 1-1: device descriptor read/64, error -71 [ 28.749968][ T36] kauditd_printk_skb: 81 callbacks suppressed [ 28.749987][ T36] audit: type=1400 audit(1786112854.930:155): avc: denied { create } for pid=499 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 28.838965][ T63] usb usb1-port1: attempt power cycle [ 28.873590][ T505] netlink: 96 bytes leftover after parsing attributes in process `syz.2.76'. [ 28.904250][ T510] fuse: Bad value for 'fd' [ 28.928056][ T512] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 28.983046][ T394] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.106990][ T36] audit: type=1400 audit(1786112855.279:156): avc: denied { connect } for pid=530 comm="syz.2.86" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.127892][ T36] audit: type=1400 audit(1786112855.298:157): avc: denied { bind } for pid=530 comm="syz.2.86" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.152428][ T36] audit: type=1400 audit(1786112855.298:158): avc: denied { name_bind } for pid=530 comm="syz.2.86" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 29.173041][ T36] audit: type=1400 audit(1786112855.298:159): avc: denied { node_bind } for pid=530 comm="syz.2.86" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 29.193865][ T63] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 29.201744][ T36] audit: type=1400 audit(1786112855.337:160): avc: denied { create } for pid=530 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 29.221282][ T394] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 29.231032][ T394] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1F, changing to 0xF [ 29.245539][ T394] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 29.256821][ T394] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 18095, setting to 1024 [ 29.268016][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 29.276968][ T63] usb 1-1: device descriptor read/8, error -71 [ 29.284021][ T394] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 29.293242][ T394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.301314][ T394] usb 2-1: Product: syz [ 29.305566][ T394] usb 2-1: Manufacturer: syz [ 29.310260][ T394] usb 2-1: SerialNumber: syz [ 29.316259][ T394] usb 2-1: config 0 descriptor?? [ 29.346219][ T536] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 29.421017][ T63] usb 1-1: device descriptor read/8, error -71 [ 29.426478][ T36] audit: type=1400 audit(1786112855.580:161): avc: denied { create } for pid=540 comm="syz.2.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.439122][ T10] usb 4-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 29.459346][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 29.468467][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.477716][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.485819][ T10] usb 4-1: Product: syz [ 29.490751][ T10] usb 4-1: Manufacturer: syz [ 29.495450][ T10] usb 4-1: SerialNumber: syz [ 29.536573][ T394] usb 2-1: USB disconnect, device number 2 [ 29.673349][ T63] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 29.694886][ T63] usb 1-1: device descriptor read/8, error -71 [ 29.708858][ T36] audit: type=1400 audit(1786112855.852:162): avc: denied { read } for pid=520 comm="syz.3.83" dev="nsfs" ino=4026532337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.717535][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 29.736625][ T36] audit: type=1400 audit(1786112855.852:163): avc: denied { open } for pid=520 comm="syz.3.83" path="net:[4026532337]" dev="nsfs" ino=4026532337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.745634][ T10] usb 4-1: USB disconnect, device number 3 [ 29.762169][ T36] audit: type=1400 audit(1786112855.852:164): avc: denied { create } for pid=520 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.827862][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.829427][ T63] usb 1-1: device descriptor read/8, error -71 [ 29.951384][ T63] usb usb1-port1: unable to enumerate USB device [ 29.982109][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 29.990083][ T311] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 29.999250][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.007299][ T311] usb 3-1: Product: syz [ 30.011462][ T311] usb 3-1: Manufacturer: syz [ 30.016555][ T311] usb 3-1: SerialNumber: syz [ 30.234460][ T311] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 30.257886][ T562] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 30.267451][ T311] usb 3-1: USB disconnect, device number 3 [ 30.296509][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.447361][ T585] netlink: 96 bytes leftover after parsing attributes in process `syz.3.105'. [ 30.491533][ T587] syzkaller0: entered promiscuous mode [ 30.497123][ T587] syzkaller0: entered allmulticast mode [ 30.530007][ T589] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 30.763468][ T611] netlink: 'syz.1.117': attribute type 12 has an invalid length. [ 30.778305][ T611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=611 comm=syz.1.117 [ 30.884244][ T621] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 30.931496][ T627] netlink: 96 bytes leftover after parsing attributes in process `syz.2.123'. [ 30.940569][ T394] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 30.982375][ T631] option changes via remount are deprecated (pid=630 comm=syz.1.125) [ 30.990550][ T631] cgroup: option or name mismatch, new: 0x2 "noprefix", old: 0x0 "" [ 31.112787][ T394] usb 1-1: Using ep0 maxpacket: 32 [ 31.120232][ T394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 31.131709][ T394] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 31.134986][ T645] bridge0: port 3(syz_tun) entered blocking state [ 31.144011][ T394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 31.153856][ T645] bridge0: port 3(syz_tun) entered disabled state [ 31.167797][ T645] syz_tun: entered allmulticast mode [ 31.173836][ T645] syz_tun: entered promiscuous mode [ 31.174044][ T394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 31.179316][ T645] bridge0: port 3(syz_tun) entered blocking state [ 31.179337][ T645] bridge0: port 3(syz_tun) entered forwarding state [ 31.210065][ T394] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 31.219249][ T394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.227352][ T394] usb 1-1: Product: syz [ 31.235934][ T394] usb 1-1: Manufacturer: syz [ 31.240567][ T394] usb 1-1: SerialNumber: syz [ 31.252966][ T394] usb 1-1: config 0 descriptor?? [ 31.258283][ T609] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 31.272820][ T394] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 31.335955][ T654] netlink: 96 bytes leftover after parsing attributes in process `syz.2.136'. [ 31.382542][ T659] fuse: Bad value for 'fd' [ 31.475322][ T311] usb 1-1: USB disconnect, device number 7 [ 31.481208][ C1] xpad 1-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 31.614037][ T671] bridge0: port 3(syz_tun) entered blocking state [ 31.620557][ T671] bridge0: port 3(syz_tun) entered disabled state [ 31.627254][ T671] syz_tun: entered allmulticast mode [ 31.632971][ T671] syz_tun: entered promiscuous mode [ 31.638619][ T671] bridge0: port 3(syz_tun) entered blocking state [ 31.645122][ T671] bridge0: port 3(syz_tun) entered forwarding state [ 31.739344][ T394] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.872377][ T394] usb 3-1: device descriptor read/64, error -71 [ 31.934587][ T689] netlink: 96 bytes leftover after parsing attributes in process `syz.3.151'. [ 32.040975][ T698] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.118464][ T394] usb 3-1: device descriptor read/64, error -71 [ 32.187312][ T715] netlink: 'syz.0.162': attribute type 9 has an invalid length. [ 32.195792][ T715] netlink: 'syz.0.162': attribute type 2 has an invalid length. [ 32.367964][ T726] netlink: 9 bytes leftover after parsing attributes in process `syz.1.165'. [ 32.376882][ T394] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.466799][ T311] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 32.515827][ T732] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 32.524179][ T732] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 32.528329][ T394] usb 3-1: device descriptor read/64, error -71 [ 32.620452][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 32.631475][ T311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 32.641822][ T311] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 32.650910][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.651369][ T63] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.667433][ T311] usb 1-1: config 0 descriptor?? [ 32.680008][ T311] usb 1-1: bad CDC descriptors [ 32.804993][ T394] usb 3-1: device descriptor read/64, error -71 [ 32.826700][ T63] usb 2-1: unable to get BOS descriptor or descriptor too short [ 32.835113][ T63] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.845318][ T63] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 32.855324][ T63] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 32.867725][ T63] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 32.876906][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.884933][ T63] usb 2-1: Product: syz [ 32.889446][ T63] usb 2-1: Manufacturer: syz [ 32.894221][ T63] usb 2-1: SerialNumber: syz [ 32.902815][ T311] usb 1-1: USB disconnect, device number 8 [ 32.917727][ T394] usb usb3-port1: attempt power cycle [ 33.110858][ T728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.119480][ T728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.136447][ T63] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 33.144797][ T63] usb 2-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 33.152178][ T63] usb 2-1: 1:1 : unsupported format bits 0x7b6c0006 [ 33.159072][ T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 33.166680][ T63] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 33.177555][ T63] usb 2-1: unit 2 not found! [ 33.182201][ T63] usb 2-1: unit 236 not found! [ 33.191500][ T63] usb 2-1: USB disconnect, device number 3 [ 33.224856][ T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.265625][ T394] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 33.287298][ T394] usb 3-1: device descriptor read/8, error -71 [ 33.328163][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 33.334831][ T10] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 33.344085][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.352840][ T10] usb 4-1: config 0 descriptor?? [ 33.420105][ T394] usb 3-1: device descriptor read/8, error -71 [ 33.664575][ T394] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 33.686162][ T394] usb 3-1: device descriptor read/8, error -71 [ 33.715726][ T311] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 33.770693][ T10] elecom 0003:056E:00FC.0003: unknown main item tag 0x3 [ 33.777861][ T10] elecom 0003:056E:00FC.0003: unknown main item tag 0x2 [ 33.784867][ T10] elecom 0003:056E:00FC.0003: unknown main item tag 0x3 [ 33.791938][ T10] elecom 0003:056E:00FC.0003: unknown main item tag 0x3 [ 33.798999][ T10] elecom 0003:056E:00FC.0003: unknown main item tag 0x3 [ 33.806017][ T10] elecom 0003:056E:00FC.0003: unknown main item tag 0x3 [ 33.813039][ T10] elecom 0003:056E:00FC.0003: unknown main item tag 0x3 [ 33.820089][ T10] elecom 0003:056E:00FC.0003: unknown main item tag 0x3 [ 33.827121][ T10] elecom 0003:056E:00FC.0003: unknown main item tag 0x3 [ 33.834249][ T10] elecom 0003:056E:00FC.0003: unknown main item tag 0x3 [ 33.841313][ T10] elecom 0003:056E:00FC.0003: unknown main item tag 0x3 [ 33.848442][ T10] elecom 0003:056E:00FC.0003: unknown main item tag 0x3 [ 33.855527][ T10] elecom 0003:056E:00FC.0003: unknown main item tag 0x3 [ 33.863113][ T394] usb 3-1: device descriptor read/8, error -71 [ 33.869583][ T10] elecom 0003:056E:00FC.0003: hidraw0: USB HID v0.c1 Device [HID 056e:00fc] on usb-dummy_hcd.3-1/input0 [ 33.881093][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.892183][ T311] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 33.901328][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.911812][ T311] usb 1-1: config 0 descriptor?? [ 33.981822][ T394] usb usb3-port1: unable to enumerate USB device [ 34.085089][ T759] netlink: 104 bytes leftover after parsing attributes in process `syz.1.178'. [ 34.108460][ T761] netlink: 'syz.1.179': attribute type 12 has an invalid length. [ 34.333994][ T311] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 34.345659][ T775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.354224][ T311] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0004/input/input6 [ 34.366649][ T775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.425343][ T311] keytouch 0003:0926:3333.0004: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 34.524408][ T778] bridge0: port 3(syz_tun) entered blocking state [ 34.530915][ T778] bridge0: port 3(syz_tun) entered disabled state [ 34.537506][ T778] syz_tun: entered allmulticast mode [ 34.543868][ T778] syz_tun: entered promiscuous mode [ 34.549658][ T778] bridge0: port 3(syz_tun) entered blocking state [ 34.556207][ T778] bridge0: port 3(syz_tun) entered listening state [ 34.584499][ T394] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 34.653565][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 34.653596][ T36] audit: type=1400 audit(1786112860.680:193): avc: denied { write } for pid=785 comm="syz.2.189" name="mcfilter6" dev="proc" ino=4026532432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 34.707628][ T36] audit: type=1400 audit(1786112860.738:194): avc: denied { write } for pid=790 comm="syz.2.190" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.730417][ T36] audit: type=1400 audit(1786112860.738:195): avc: denied { open } for pid=790 comm="syz.2.190" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.739476][ T394] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 34.759854][ T311] usb 1-1: USB disconnect, device number 9 [ 34.766889][ T394] usb 2-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 34.786259][ T394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.798587][ T394] usb 2-1: config 0 descriptor?? [ 34.952300][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 35.018835][ T394] lenovo 0003:04B3:3100.0005: hidraw1: USB HID v0.9a Device [HID 04b3:3100] on usb-dummy_hcd.1-1/input0 [ 35.032130][ T394] usb 2-1: USB disconnect, device number 4 [ 35.059019][ T794] fido_id[794]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 35.105431][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 35.111972][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.122799][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.134910][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.144143][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.152226][ T10] usb 3-1: Product: syz [ 35.156538][ T10] usb 3-1: Manufacturer: syz [ 35.161259][ T10] usb 3-1: SerialNumber: syz [ 35.316068][ T805] bridge0: port 3(syz_tun) entered blocking state [ 35.322654][ T805] bridge0: port 3(syz_tun) entered disabled state [ 35.329216][ T805] syz_tun: entered allmulticast mode [ 35.335136][ T805] syz_tun: entered promiscuous mode [ 35.340660][ T805] bridge0: port 3(syz_tun) entered blocking state [ 35.347141][ T805] bridge0: port 3(syz_tun) entered forwarding state [ 35.381648][ T10] usb 3-1: 0:2 : does not exist [ 35.390337][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 35.404447][ T10] usb 3-1: USB disconnect, device number 8 [ 35.419046][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.462510][ T394] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 35.616452][ T394] usb 2-1: not running at top speed; connect to a high speed hub [ 35.625158][ T394] usb 2-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 35.635605][ T394] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 35.644555][ T394] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 35.659023][ T394] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.668173][ T394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.676190][ T394] usb 2-1: Product: ᐉ [ 35.680460][ T394] usb 2-1: Manufacturer: 《 [ 35.685208][ T394] usb 2-1: SerialNumber: ⠁ [ 35.896259][ T394] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 35.903269][ T394] cdc_ncm 2-1:1.0: bind() failure [ 35.911010][ T394] usb 2-1: USB disconnect, device number 5 [ 35.977677][ T360] usb 4-1: USB disconnect, device number 4 [ 36.099661][ T36] audit: type=1400 audit(1786112862.091:196): avc: denied { read } for pid=835 comm="syz.3.206" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.131521][ T36] audit: type=1400 audit(1786112862.091:197): avc: denied { open } for pid=835 comm="syz.3.206" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.155175][ T36] audit: type=1400 audit(1786112862.091:198): avc: denied { ioctl } for pid=835 comm="syz.3.206" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.180747][ T36] audit: type=1400 audit(1786112862.091:199): avc: denied { mount } for pid=835 comm="syz.3.206" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 36.251518][ T841] netlink: 9 bytes leftover after parsing attributes in process `syz.2.208'. [ 36.260855][ T841] gretap0: entered promiscuous mode [ 36.330730][ T36] audit: type=1400 audit(1786112862.326:200): avc: denied { getopt } for pid=851 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.357907][ T855] tipc: Started in network mode [ 36.362910][ T855] tipc: Node identity , cluster identity 4711 [ 36.369022][ T855] tipc: Failed to obtain node identity [ 36.374593][ T855] tipc: Enabling of bearer rejected, failed to enable media [ 36.407753][ T36] audit: type=1400 audit(1786112862.395:201): avc: denied { name_bind } for pid=858 comm="syz.2.216" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 36.432582][ T36] audit: type=1400 audit(1786112862.424:202): avc: denied { read write } for pid=858 comm="syz.2.216" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 36.433635][ T859] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 36.492062][ T863] 9pnet_fd: Insufficient options for proto=fd [ 36.542973][ T866] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.563782][ T870] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 36.794932][ T892] netlink: 9 bytes leftover after parsing attributes in process `syz.3.230'. [ 36.804226][ T892] gretap0: entered promiscuous mode [ 36.971869][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 37.094704][ T920] netlink: 'syz.3.240': attribute type 12 has an invalid length. [ 37.103726][ T31] usb 1-1: device descriptor read/64, error -71 [ 37.129919][ T922] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.235748][ T927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 37.269241][ T928] fuse: Bad value for 'fd' [ 37.359191][ T31] usb 1-1: device descriptor read/64, error -71 [ 37.440425][ T983] netlink: 9 bytes leftover after parsing attributes in process `syz.3.251'. [ 37.446434][ T979] binder: Binderfs stats mode cannot be changed during a remount [ 37.516962][ T996] netlink: 'syz.3.256': attribute type 12 has an invalid length. [ 37.554814][ T999] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 37.611742][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 37.654747][ T1008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1008 comm=syz.2.261 [ 37.744871][ T31] usb 1-1: device descriptor read/64, error -71 [ 37.784767][ T1024] tipc: Started in network mode [ 37.789738][ T1024] tipc: Node identity , cluster identity 4711 [ 37.795912][ T1024] tipc: Failed to obtain node identity [ 37.801430][ T1024] tipc: Enabling of bearer rejected, failed to enable media [ 37.836929][ T1030] syz.3.266 uses obsolete (PF_INET,SOCK_PACKET) [ 37.870909][ T1036] netlink: 9 bytes leftover after parsing attributes in process `syz.1.272'. [ 37.933140][ T1044] netlink: 'syz.2.274': attribute type 12 has an invalid length. [ 37.989151][ T31] usb 1-1: device descriptor read/64, error -71 [ 38.101175][ T31] usb usb1-port1: attempt power cycle [ 38.154035][ T1056] can: request_module (can-proto-0) failed. [ 38.267034][ T1058] netlink: 96 bytes leftover after parsing attributes in process `syz.2.279'. [ 38.293565][ T1060] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 38.446910][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 38.468124][ T31] usb 1-1: device descriptor read/8, error -71 [ 38.484787][ T1073] netlink: 9 bytes leftover after parsing attributes in process `syz.2.286'. [ 38.556410][ T1080] netlink: 'syz.2.288': attribute type 12 has an invalid length. [ 38.610402][ T31] usb 1-1: device descriptor read/8, error -71 [ 38.691646][ T1092] input: syz0 as /devices/virtual/input/input7 [ 38.853578][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 38.884930][ T31] usb 1-1: device descriptor read/8, error -71 [ 38.885077][ T1111] netlink: 96 bytes leftover after parsing attributes in process `syz.3.301'. [ 38.938032][ T394] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 39.027357][ T31] usb 1-1: device descriptor read/8, error -71 [ 39.098664][ T394] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 39.111121][ T394] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.121292][ T394] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 39.135872][ T394] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 39.145004][ T394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.148535][ T31] usb usb1-port1: unable to enumerate USB device [ 39.153055][ T394] usb 3-1: Product: syz [ 39.163620][ T394] usb 3-1: Manufacturer: syz [ 39.168248][ T394] usb 3-1: SerialNumber: syz [ 39.173590][ T394] usb 3-1: config 0 descriptor?? [ 39.180253][ T394] usb-storage 3-1:0.0: USB Mass Storage device detected [ 39.188273][ T394] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 39.384155][ T394] usb 3-1: USB disconnect, device number 9 [ 39.522783][ T1122] tipc: Started in network mode [ 39.527818][ T1122] tipc: Node identity , cluster identity 4711 [ 39.534210][ T1122] tipc: Failed to obtain node identity [ 39.539734][ T1122] tipc: Enabling of bearer rejected, failed to enable media [ 39.563512][ T1124] netlink: 9 bytes leftover after parsing attributes in process `syz.3.306'. [ 39.585606][ T1126] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 39.633784][ T1128] netlink: 'syz.0.308': attribute type 12 has an invalid length. [ 39.759357][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 39.759377][ T36] audit: type=1400 audit(1786112865.698:233): avc: denied { read } for pid=1141 comm="syz.0.315" lport=11 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.838750][ T63] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.970771][ T63] usb 4-1: device descriptor read/64, error -71 [ 40.041868][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 40.163669][ T360] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 40.173762][ T31] usb 2-1: device descriptor read/64, error -71 [ 40.214343][ T63] usb 4-1: device descriptor read/64, error -71 [ 40.327277][ T360] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.337509][ T360] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 40.346466][ T360] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.356270][ T360] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 40.365483][ T360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.375482][ T360] hub 3-1:1.0: bad descriptor, ignoring hub [ 40.381580][ T360] hub 3-1:1.0: probe with driver hub failed with error -5 [ 40.389186][ T360] cdc_wdm 3-1:1.0: skipping garbage [ 40.394467][ T360] cdc_wdm 3-1:1.0: skipping garbage [ 40.399785][ T360] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 40.427451][ T31] usb 2-1: device descriptor read/64, error -71 [ 40.468021][ T63] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 40.599908][ T63] usb 4-1: device descriptor read/64, error -71 [ 40.671082][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.691358][ T360] usb 3-1: USB disconnect, device number 10 [ 40.802974][ T31] usb 2-1: device descriptor read/64, error -71 [ 40.847329][ T63] usb 4-1: device descriptor read/64, error -71 [ 40.862334][ T1164] tipc: Started in network mode [ 40.867373][ T1164] tipc: Node identity , cluster identity 4711 [ 40.873604][ T1164] tipc: Failed to obtain node identity [ 40.879712][ T1164] tipc: Enabling of bearer rejected, failed to enable media [ 40.925871][ T36] audit: type=1400 audit(1786112866.841:234): avc: denied { connect } for pid=1167 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.965323][ T63] usb usb4-port1: attempt power cycle [ 41.046355][ T31] usb 2-1: device descriptor read/64, error -71 [ 41.158968][ T31] usb usb2-port1: attempt power cycle [ 41.188303][ T394] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 41.309919][ T63] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 41.317809][ T1190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.326623][ T1190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.341778][ T394] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.351981][ T63] usb 4-1: device descriptor read/8, error -71 [ 41.358282][ T394] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.368324][ T394] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 41.377500][ T394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 41.385649][ T394] usb 1-1: SerialNumber: syz [ 41.493627][ T63] usb 4-1: device descriptor read/8, error -71 [ 41.512686][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 41.534086][ T31] usb 2-1: device descriptor read/8, error -71 [ 41.598834][ T394] usb 1-1: 0:2 : does not exist [ 41.604169][ T394] usb 1-1: unit 5: unexpected type 0x0e [ 41.611652][ T394] usb 1-1: USB disconnect, device number 14 [ 41.623129][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.665928][ T31] usb 2-1: device descriptor read/8, error -71 [ 41.736252][ T63] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 41.757257][ T63] usb 4-1: device descriptor read/8, error -71 [ 41.888788][ T63] usb 4-1: device descriptor read/8, error -71 [ 41.918177][ T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 41.939503][ T31] usb 2-1: device descriptor read/8, error -71 [ 41.947346][ T1193] netlink: 96 bytes leftover after parsing attributes in process `syz.2.337'. [ 41.999382][ T63] usb usb4-port1: unable to enumerate USB device [ 42.071405][ T31] usb 2-1: device descriptor read/8, error -71 [ 42.199351][ T31] usb usb2-port1: unable to enumerate USB device [ 42.284074][ T360] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 42.311513][ T1208] capability: warning: `syz.0.344' uses deprecated v2 capabilities in a way that may be insecure [ 42.347749][ T36] audit: type=1400 audit(1786112868.242:235): avc: denied { listen } for pid=1207 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.436025][ T360] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 42.444174][ T360] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 42.454467][ T360] usb 3-1: config 0 has no interface number 0 [ 42.460724][ T360] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 42.471680][ T360] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 42.484971][ T360] usb 3-1: config 0 interface 48 has no altsetting 0 [ 42.493275][ T360] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 42.502445][ T360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.510517][ T360] usb 3-1: Product: syz [ 42.514811][ T360] usb 3-1: Manufacturer: syz [ 42.519498][ T360] usb 3-1: SerialNumber: syz [ 42.525104][ T360] usb 3-1: config 0 descriptor?? [ 42.668376][ T1213] netlink: 'syz.3.347': attribute type 12 has an invalid length. [ 42.697258][ T36] audit: type=1400 audit(1786112868.587:236): avc: denied { setopt } for pid=1214 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.719486][ T1216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.728878][ T1216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.744540][ T360] usb 3-1: USB disconnect, device number 11 [ 42.995933][ T36] audit: type=1400 audit(1786112868.884:237): avc: denied { write } for pid=1224 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.032581][ T63] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 43.087252][ T1227] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3722248192 (7444496384 ns) > initial count (28 ns). Using initial count to start timer. [ 43.198289][ T63] usb 4-1: Using ep0 maxpacket: 32 [ 43.205557][ T63] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.224750][ T63] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.236107][ T63] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.246148][ T63] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 43.259230][ T63] usb 4-1: config 0 interface 0 has no altsetting 0 [ 43.266037][ T63] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 43.275127][ T63] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.284182][ T63] usb 4-1: config 0 descriptor?? [ 43.303332][ T1234] netlink: 44 bytes leftover after parsing attributes in process `syz.2.356'. [ 43.330509][ T1239] tipc: Started in network mode [ 43.335745][ T1239] tipc: Node identity , cluster identity 4711 [ 43.342701][ T1239] tipc: Failed to obtain node identity [ 43.352224][ T1239] tipc: Enabling of bearer rejected, failed to enable media [ 43.457525][ T360] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 43.493788][ T63] usbhid 4-1:0.0: can't add hid device: -71 [ 43.508176][ T63] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 43.521424][ T63] usb 4-1: USB disconnect, device number 9 [ 43.618788][ T360] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 43.632767][ T360] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 43.642038][ T360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.659956][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 43.669450][ T360] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 43.682352][ T360] usb 2-1: No valid video chain found. [ 43.831961][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 43.838538][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.851019][ T31] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 43.860627][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.877953][ T31] usb 3-1: config 0 descriptor?? [ 44.176822][ T1257] fuse: Bad value for 'fd' [ 44.214078][ T36] audit: type=1400 audit(1786112870.089:238): avc: denied { mounton } for pid=1258 comm="syz.3.366" path="/94/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 44.216907][ T1260] overlayfs: maximum fs stacking depth exceeded [ 44.300585][ T31] monterey 0003:0566:3004.0006: unknown main item tag 0x0 [ 44.314733][ T31] monterey 0003:0566:3004.0006: unknown main item tag 0x0 [ 44.331847][ T1264] netlink: 9 bytes leftover after parsing attributes in process `syz.3.367'. [ 44.338037][ T31] monterey 0003:0566:3004.0006: unknown main item tag 0x0 [ 44.347919][ T31] monterey 0003:0566:3004.0006: unknown main item tag 0x0 [ 44.355093][ T31] monterey 0003:0566:3004.0006: unknown main item tag 0x0 [ 44.378270][ T31] monterey 0003:0566:3004.0006: unknown main item tag 0x0 [ 44.385487][ T31] monterey 0003:0566:3004.0006: unknown main item tag 0x0 [ 44.393013][ T31] monterey 0003:0566:3004.0006: unknown main item tag 0x0 [ 44.400383][ T31] monterey 0003:0566:3004.0006: unknown main item tag 0x0 [ 44.410360][ T31] monterey 0003:0566:3004.0006: hidraw0: USB HID v0.02 Device [HID 0566:3004] on usb-dummy_hcd.2-1/input0 [ 44.504175][ T36] audit: type=1400 audit(1786112870.376:239): avc: denied { create } for pid=1246 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 44.528868][ T394] usb 3-1: USB disconnect, device number 12 [ 45.298380][ T394] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 45.377135][ T1278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.387729][ T1278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.460066][ T394] usb 3-1: Using ep0 maxpacket: 16 [ 45.466641][ T394] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.478918][ T394] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 45.488478][ T394] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 45.503381][ T394] usb 3-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 45.512799][ T394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.521905][ T394] usb 3-1: Product: syz [ 45.526218][ T394] usb 3-1: Manufacturer: syz [ 45.531157][ T394] usb 3-1: SerialNumber: syz [ 45.611657][ T545] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 45.752558][ T394] usb 3-1: unit 1 not found! [ 45.758107][ T394] usb 3-1: unit 12 not found! [ 45.763756][ T394] usb 3-1: unit 4 not found! [ 45.768844][ T394] usb 3-1: unit 8 not found! [ 45.775078][ T545] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 45.786204][ T545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.794498][ T545] usb 4-1: Product: syz [ 45.799257][ T394] usb 3-1: USB disconnect, device number 13 [ 45.805575][ T545] usb 4-1: Manufacturer: syz [ 45.811383][ T545] usb 4-1: SerialNumber: syz [ 45.844183][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.026480][ T545] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 46.033587][ T545] usb 4-1: found format II with max.bitrate = 44931, frame size=8 [ 46.046692][ T545] usb 4-1: found format II with max.bitrate = 44931, frame size=8 [ 46.056474][ T545] usb 4-1: 2:1: cannot set freq 4584960 to ep 0x82 [ 46.068701][ T545] usb 4-1: USB disconnect, device number 10 [ 46.097607][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.287149][ T1280] netlink: 'syz.2.373': attribute type 12 has an invalid length. [ 46.314648][ T1282] netlink: 96 bytes leftover after parsing attributes in process `syz.2.374'. [ 46.332353][ T545] usb 2-1: USB disconnect, device number 10 [ 46.574923][ T36] audit: type=1400 audit(1786112872.424:240): avc: denied { create } for pid=1297 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.596485][ T1298] netlink: 'syz.3.382': attribute type 1 has an invalid length. [ 46.631975][ T49] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 46.763860][ T545] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 46.793583][ T49] usb 3-1: Using ep0 maxpacket: 16 [ 46.799941][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.811088][ T49] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04 [ 46.822125][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 46.830430][ T49] usb 3-1: SerialNumber: syz [ 46.838606][ T49] usb 3-1: config 0 descriptor?? [ 46.850566][ T49] hub 3-1:0.0: bad descriptor, ignoring hub [ 46.859039][ T49] hub 3-1:0.0: probe with driver hub failed with error -5 [ 46.866916][ T1303] FAULT_INJECTION: forcing a failure. [ 46.866916][ T1303] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 46.867284][ T49] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 46.888764][ T49] usb 3-1: Detected SIO [ 46.893789][ T49] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 46.903273][ T1303] CPU: 1 UID: 0 PID: 1303 Comm: syz.3.384 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 46.903304][ T1303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.903334][ T1303] Call Trace: [ 46.903340][ T1303] [ 46.903348][ T1303] __dump_stack+0x21/0x30 [ 46.903389][ T1303] dump_stack_lvl+0x140/0x1c0 [ 46.903420][ T1303] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.903454][ T1303] dump_stack+0x19/0x20 [ 46.903482][ T1303] should_fail_ex+0x3c2/0x510 [ 46.903509][ T1303] should_fail_alloc_page+0xec/0x110 [ 46.903538][ T1303] __alloc_pages_noprof+0x1c0/0x7e0 [ 46.903569][ T1303] ? arch_stack_walk+0x10a/0x170 [ 46.903590][ T1303] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 46.903624][ T1303] ? stack_depot_save_flags+0x38/0x800 [ 46.903652][ T1303] __pmd_alloc+0xb0/0x9a0 [ 46.903679][ T1303] ? kasan_save_track+0x4f/0x80 [ 46.903704][ T1303] ? security_inode_alloc+0x51/0x230 [ 46.903731][ T1303] ? inode_init_always_gfp+0x756/0x9e0 [ 46.903757][ T1303] ? __cfi___pmd_alloc+0x10/0x10 [ 46.903783][ T1303] ? proc_pident_instantiate+0x6d/0x2c0 [ 46.903812][ T1303] ? do_filp_open+0x1f2/0x440 [ 46.903843][ T1303] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 46.903876][ T1303] handle_mm_fault+0xd23/0x1ba0 [ 46.903906][ T1303] ? __cfi_handle_mm_fault+0x10/0x10 [ 46.903932][ T1303] ? find_vma+0xd3/0x120 [ 46.903957][ T1303] ? lock_mm_and_find_vma+0xb8/0x390 [ 46.903984][ T1303] do_user_addr_fault+0x4ee/0x1230 [ 46.904020][ T1303] exc_page_fault+0x58/0xc0 [ 46.904055][ T1303] asm_exc_page_fault+0x2b/0x30 [ 46.904082][ T1303] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 46.904117][ T1303] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 e9 bf 6a 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 46.904134][ T1303] RSP: 0018:ffffc90010277990 EFLAGS: 00050246 [ 46.904162][ T1303] RAX: 00007ffffffff001 RBX: 0000000000000040 RCX: 0000000000000040 [ 46.904178][ T1303] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90010277bc0 [ 46.904194][ T1303] RBP: ffffc900102779b0 R08: ffffc90010277bff R09: 1ffff9200204ef7f [ 46.904210][ T1303] R10: dffffc0000000000 R11: fffff5200204ef80 R12: 1ffff11021e55c01 [ 46.904227][ T1303] R13: ffffc90010277bc0 R14: ffffc90010277bc0 R15: 0000000000000000 [ 46.904246][ T1303] ? _copy_from_user+0x6d/0xa0 [ 46.904276][ T1303] scsi_ioctl+0x475/0x1f90 [ 46.904314][ T1303] ? __cfi_scsi_ioctl+0x10/0x10 [ 46.904342][ T1303] ? _parse_integer+0x2e/0x40 [ 46.904364][ T1303] ? __asan_set_shadow_00+0x12/0x20 [ 46.904394][ T1303] ? blkdev_common_ioctl+0x11e7/0x2740 [ 46.904416][ T1303] ? avc_has_perm_noaudit+0x26b/0x360 [ 46.904443][ T1303] ? __asan_memcpy+0x5a/0x80 [ 46.904466][ T1303] ? avc_has_perm_noaudit+0x289/0x360 [ 46.904494][ T1303] ? selinux_perf_event_alloc+0x110/0x110 [ 46.904517][ T1303] ? scsi_block_when_processing_errors+0x2b3/0x370 [ 46.904556][ T1303] ? __cfi_scsi_block_when_processing_errors+0x10/0x10 [ 46.904589][ T1303] ? selinux_capable+0x38/0x50 [ 46.904617][ T1303] ? bpf_lsm_capable+0xd/0x20 [ 46.904649][ T1303] ? security_capable+0x44/0x130 [ 46.904673][ T1303] sd_ioctl+0x14a/0x190 [ 46.904693][ T1303] ? __cfi_sd_ioctl+0x10/0x10 [ 46.904714][ T1303] blkdev_ioctl+0x54b/0x690 [ 46.904734][ T1303] ? __cfi_blkdev_ioctl+0x10/0x10 [ 46.904768][ T1303] ? bpf_lsm_file_ioctl+0xd/0x20 [ 46.904795][ T1303] ? security_file_ioctl+0x3e/0x110 [ 46.904829][ T1303] ? __cfi_blkdev_ioctl+0x10/0x10 [ 46.904863][ T1303] __se_sys_ioctl+0x135/0x1b0 [ 46.904891][ T1303] __x64_sys_ioctl+0x7f/0xa0 [ 46.904918][ T1303] x64_sys_call+0x1878/0x2ee0 [ 46.904939][ T1303] do_syscall_64+0x57/0xf0 [ 46.904964][ T1303] ? clear_bhb_loop+0x50/0xa0 [ 46.904993][ T1303] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.905021][ T1303] RIP: 0033:0x7f88fd99e0d9 [ 46.905040][ T1303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.905058][ T1303] RSP: 002b:00007f88fe859028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 46.905081][ T1303] RAX: ffffffffffffffda RBX: 00007f88fdc25fa0 RCX: 00007f88fd99e0d9 [ 46.905097][ T1303] RDX: 0000000000000000 RSI: 0000000000005393 RDI: 0000000000000004 [ 46.905111][ T1303] RBP: 00007f88fe859090 R08: 0000000000000000 R09: 0000000000000000 [ 46.905124][ T1303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.905138][ T1303] R13: 00007f88fdc26038 R14: 00007f88fdc25fa0 R15: 00007fff458c4bd8 [ 46.905158][ T1303] [ 46.914823][ T545] usb 2-1: Using ep0 maxpacket: 8 [ 47.167468][ T49] usb 3-1: USB disconnect, device number 14 [ 47.210107][ T545] usb 2-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.286079][ T49] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 47.349746][ T545] usb 2-1: config 0 interface 0 has no altsetting 0 [ 47.398099][ T545] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 47.407491][ T545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.419621][ T545] usb 2-1: config 0 descriptor?? [ 47.427852][ T49] ftdi_sio 3-1:0.0: device disconnected [ 47.449259][ T1310] fuse: Bad value for 'fd' [ 47.628787][ T36] audit: type=1400 audit(1786112873.464:241): avc: denied { setopt } for pid=1293 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 47.648230][ T36] audit: type=1400 audit(1786112873.464:242): avc: denied { read } for pid=1293 comm="syz.1.380" path="socket:[10106]" dev="sockfs" ino=10106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 47.837017][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.844231][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.851411][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.858537][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.865691][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.872785][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.879933][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.887135][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.894381][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.901472][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.908645][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.915750][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.922887][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.930016][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.937208][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.944419][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.951545][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.964539][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.971645][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.987337][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 47.994462][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.002146][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.009286][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.016510][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.023606][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.032540][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.040747][ T36] audit: type=1400 audit(1786112873.870:243): avc: denied { ioctl } for pid=1311 comm="syz.2.388" path="socket:[11069]" dev="sockfs" ino=11069 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.044954][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.073274][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.096271][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.103447][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.110617][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.122582][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.139968][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.150702][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.166672][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.173797][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.184619][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.191914][ T545] uclogic 0003:5543:0004.0007: unknown main item tag 0x0 [ 48.201516][ T545] uclogic 0003:5543:0004.0007: No inputs registered, leaving [ 48.219369][ T545] uclogic 0003:5543:0004.0007: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.1-1/input0 [ 48.256514][ T545] usb 2-1: USB disconnect, device number 11 [ 48.364769][ T36] audit: type=1400 audit(1786112874.197:244): avc: denied { setattr } for pid=1331 comm="syz.2.395" name="/" dev="incremental-fs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.439748][ T36] audit: type=1400 audit(1786112874.277:245): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.584528][ T1339] FAULT_INJECTION: forcing a failure. [ 48.584528][ T1339] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 48.597950][ T1339] CPU: 1 UID: 0 PID: 1339 Comm: syz.1.398 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 48.597986][ T1339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.598000][ T1339] Call Trace: [ 48.598007][ T1339] [ 48.598015][ T1339] __dump_stack+0x21/0x30 [ 48.598053][ T1339] dump_stack_lvl+0x140/0x1c0 [ 48.598085][ T1339] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.598117][ T1339] ? get_page_from_freelist+0x4aea/0x4ba0 [ 48.598154][ T1339] dump_stack+0x19/0x20 [ 48.598185][ T1339] should_fail_ex+0x3c2/0x510 [ 48.598212][ T1339] should_fail_alloc_page+0xec/0x110 [ 48.598241][ T1339] __alloc_pages_noprof+0x1c0/0x7e0 [ 48.598275][ T1339] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 48.598310][ T1339] ? __alloc_pages_noprof+0x7e0/0x7e0 [ 48.598342][ T1339] ? gfp_to_alloc_flags_cma+0x96/0x1c0 [ 48.598367][ T1339] pte_alloc_one+0x92/0x530 [ 48.598392][ T1339] ? __cfi_pte_alloc_one+0x10/0x10 [ 48.598417][ T1339] ? __alloc_pages_noprof+0x35a/0x7e0 [ 48.598450][ T1339] ? vma_data_pages+0x105/0x140 [ 48.598472][ T1339] do_pte_missing+0x22a6/0x4440 [ 48.598506][ T1339] ? pte_marker_clear+0x1b0/0x1b0 [ 48.598535][ T1339] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 48.598568][ T1339] ? kasan_save_track+0x4f/0x80 [ 48.598594][ T1339] ? security_inode_alloc+0x51/0x230 [ 48.598622][ T1339] ? __cfi___pmd_alloc+0x10/0x10 [ 48.598649][ T1339] ? proc_pident_instantiate+0x6d/0x2c0 [ 48.598679][ T1339] ? do_filp_open+0x1f2/0x440 [ 48.598718][ T1339] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 48.598754][ T1339] handle_mm_fault+0x1189/0x1ba0 [ 48.598785][ T1339] ? __cfi_handle_mm_fault+0x10/0x10 [ 48.598813][ T1339] ? find_vma+0xd3/0x120 [ 48.598838][ T1339] ? lock_mm_and_find_vma+0xb8/0x390 [ 48.598866][ T1339] do_user_addr_fault+0x4ee/0x1230 [ 48.598905][ T1339] exc_page_fault+0x58/0xc0 [ 48.598940][ T1339] asm_exc_page_fault+0x2b/0x30 [ 48.598968][ T1339] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 48.599011][ T1339] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 e9 bf 6a 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 48.599030][ T1339] RSP: 0018:ffffc900103e7990 EFLAGS: 00050246 [ 48.599052][ T1339] RAX: 00007ffffffff001 RBX: 0000000000000040 RCX: 0000000000000040 [ 48.599068][ T1339] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900103e7bc0 [ 48.599083][ T1339] RBP: ffffc900103e79b0 R08: ffffc900103e7bff R09: 1ffff9200207cf7f [ 48.599101][ T1339] R10: dffffc0000000000 R11: fffff5200207cf80 R12: 1ffff11021e55c01 [ 48.599119][ T1339] R13: ffffc900103e7bc0 R14: ffffc900103e7bc0 R15: 0000000000000000 [ 48.599139][ T1339] ? _copy_from_user+0x6d/0xa0 [ 48.599171][ T1339] scsi_ioctl+0x475/0x1f90 [ 48.599203][ T1339] ? __cfi_scsi_ioctl+0x10/0x10 [ 48.599233][ T1339] ? _parse_integer+0x2e/0x40 [ 48.599258][ T1339] ? __asan_set_shadow_00+0x12/0x20 [ 48.599290][ T1339] ? blkdev_common_ioctl+0x11e7/0x2740 [ 48.599312][ T1339] ? avc_has_perm_noaudit+0x26b/0x360 [ 48.599340][ T1339] ? __asan_memcpy+0x5a/0x80 [ 48.599363][ T1339] ? avc_has_perm_noaudit+0x289/0x360 [ 48.599391][ T1339] ? selinux_perf_event_alloc+0x110/0x110 [ 48.599416][ T1339] ? scsi_block_when_processing_errors+0x2b3/0x370 [ 48.599451][ T1339] ? __cfi_scsi_block_when_processing_errors+0x10/0x10 [ 48.599504][ T1339] ? selinux_capable+0x38/0x50 [ 48.599533][ T1339] ? bpf_lsm_capable+0xd/0x20 [ 48.599566][ T1339] ? security_capable+0x44/0x130 [ 48.599592][ T1339] sd_ioctl+0x14a/0x190 [ 48.599614][ T1339] ? __cfi_sd_ioctl+0x10/0x10 [ 48.599633][ T1339] blkdev_ioctl+0x54b/0x690 [ 48.599654][ T1339] ? __cfi_blkdev_ioctl+0x10/0x10 [ 48.599689][ T1339] ? bpf_lsm_file_ioctl+0xd/0x20 [ 48.599726][ T1339] ? security_file_ioctl+0x3e/0x110 [ 48.599761][ T1339] ? __cfi_blkdev_ioctl+0x10/0x10 [ 48.599796][ T1339] __se_sys_ioctl+0x135/0x1b0 [ 48.599825][ T1339] __x64_sys_ioctl+0x7f/0xa0 [ 48.599852][ T1339] x64_sys_call+0x1878/0x2ee0 [ 48.599874][ T1339] do_syscall_64+0x57/0xf0 [ 48.599900][ T1339] ? clear_bhb_loop+0x50/0xa0 [ 48.599930][ T1339] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.599960][ T1339] RIP: 0033:0x7fd4b1d9e0d9 [ 48.599978][ T1339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.599997][ T1339] RSP: 002b:00007fd4b2c53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.600021][ T1339] RAX: ffffffffffffffda RBX: 00007fd4b2025fa0 RCX: 00007fd4b1d9e0d9 [ 48.600036][ T1339] RDX: 0000000000000000 RSI: 0000000000005393 RDI: 0000000000000004 [ 48.600049][ T1339] RBP: 00007fd4b2c53090 R08: 0000000000000000 R09: 0000000000000000 [ 48.600061][ T1339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.600074][ T1339] R13: 00007fd4b2026038 R14: 00007fd4b2025fa0 R15: 00007ffd2c7cf748 [ 48.600091][ T1339] [ 49.197210][ T1347] SELinux: policydb version -1413084136 does not match my version range 15-33 [ 49.206268][ T36] audit: type=1400 audit(1786112875.020:246): avc: denied { load_policy } for pid=1343 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.229730][ T1356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.405'. [ 49.249121][ T1347] SELinux: failed to load policy [ 49.274129][ T1359] netlink: 64 bytes leftover after parsing attributes in process `syz.3.405'. [ 49.293919][ T1356] netlink: 64 bytes leftover after parsing attributes in process `syz.3.405'. [ 49.311905][ T1361] fuse: Bad value for 'fd' [ 49.321894][ T36] audit: type=1400 audit(1786112875.149:247): avc: denied { ioctl } for pid=1360 comm="syz.2.407" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x9414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.446275][ T1367] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 49.459299][ T36] audit: type=1400 audit(1786112875.268:248): avc: denied { write } for pid=1364 comm="syz.1.409" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 49.506778][ T36] audit: type=1400 audit(1786112875.268:249): avc: denied { open } for pid=1364 comm="syz.1.409" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 49.511302][ T1373] netlink: 9 bytes leftover after parsing attributes in process `syz.2.413'. [ 49.558850][ T545] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 49.601380][ T1380] FAULT_INJECTION: forcing a failure. [ 49.601380][ T1380] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 49.621007][ T1380] CPU: 0 UID: 0 PID: 1380 Comm: syz.1.415 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 49.621047][ T1380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.621062][ T1380] Call Trace: [ 49.621069][ T1380] [ 49.621078][ T1380] __dump_stack+0x21/0x30 [ 49.621124][ T1380] dump_stack_lvl+0x140/0x1c0 [ 49.621155][ T1380] ? __cfi_dump_stack_lvl+0x10/0x10 [ 49.621187][ T1380] ? post_alloc_hook+0x37d/0x3b0 [ 49.621219][ T1380] dump_stack+0x19/0x20 [ 49.621249][ T1380] should_fail_ex+0x3c2/0x510 [ 49.621276][ T1380] should_fail_alloc_page+0xec/0x110 [ 49.621306][ T1380] __alloc_pages_noprof+0x1c0/0x7e0 [ 49.621339][ T1380] ? call_rcu_nocb+0x694/0xc60 [ 49.621371][ T1380] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 49.621405][ T1380] ? __cfi_post_alloc_hook+0x10/0x10 [ 49.621435][ T1380] __folio_alloc_noprof+0x14/0x80 [ 49.621467][ T1380] shmem_alloc_and_add_folio+0x45f/0x10b0 [ 49.621499][ T1380] ? shmem_replace_folio+0x9b0/0x9b0 [ 49.621528][ T1380] ? shmem_huge_global_enabled+0x2da/0x360 [ 49.621555][ T1380] ? shmem_allowable_huge_orders+0x405/0x430 [ 49.621583][ T1380] shmem_get_folio_gfp+0x5cd/0x12e0 [ 49.621613][ T1380] ? shmem_get_folio+0xc0/0xc0 [ 49.621637][ T1380] ? pte_alloc_one+0x1ed/0x530 [ 49.621660][ T1380] ? __cfi_filemap_map_pages+0x10/0x10 [ 49.621691][ T1380] shmem_fault+0x17d/0x350 [ 49.621718][ T1380] do_pte_missing+0x364c/0x4440 [ 49.621751][ T1380] ? pte_marker_clear+0x1b0/0x1b0 [ 49.621778][ T1380] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 49.621811][ T1380] ? kasan_save_track+0x4f/0x80 [ 49.621838][ T1380] ? security_inode_alloc+0x51/0x230 [ 49.621867][ T1380] ? __cfi___pmd_alloc+0x10/0x10 [ 49.621891][ T1380] ? proc_pident_instantiate+0x6d/0x2c0 [ 49.621918][ T1380] ? do_filp_open+0x1f2/0x440 [ 49.621948][ T1380] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 49.621979][ T1380] handle_mm_fault+0x1189/0x1ba0 [ 49.622007][ T1380] ? __cfi_handle_mm_fault+0x10/0x10 [ 49.622034][ T1380] ? find_vma+0xd3/0x120 [ 49.622058][ T1380] ? lock_mm_and_find_vma+0xb8/0x390 [ 49.622085][ T1380] do_user_addr_fault+0x4ee/0x1230 [ 49.622133][ T1380] exc_page_fault+0x58/0xc0 [ 49.622167][ T1380] asm_exc_page_fault+0x2b/0x30 [ 49.622196][ T1380] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 49.622233][ T1380] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 e9 bf 6a 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 49.622254][ T1380] RSP: 0018:ffffc9001013f990 EFLAGS: 00050246 [ 49.622275][ T1380] RAX: 00007ffffffff001 RBX: 0000000000000040 RCX: 0000000000000040 [ 49.622291][ T1380] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9001013fbc0 [ 49.622306][ T1380] RBP: ffffc9001013f9b0 R08: ffffc9001013fbff R09: 1ffff92002027f7f [ 49.622324][ T1380] R10: dffffc0000000000 R11: fffff52002027f80 R12: 1ffff11021e55c01 [ 49.622341][ T1380] R13: ffffc9001013fbc0 R14: ffffc9001013fbc0 R15: 0000000000000000 [ 49.622360][ T1380] ? _copy_from_user+0x6d/0xa0 [ 49.622390][ T1380] scsi_ioctl+0x475/0x1f90 [ 49.622421][ T1380] ? __cfi_scsi_ioctl+0x10/0x10 [ 49.622449][ T1380] ? _parse_integer+0x2e/0x40 [ 49.622472][ T1380] ? __asan_set_shadow_00+0x12/0x20 [ 49.622504][ T1380] ? blkdev_common_ioctl+0x11e7/0x2740 [ 49.622526][ T1380] ? avc_has_perm_noaudit+0x26b/0x360 [ 49.622552][ T1380] ? __asan_memcpy+0x5a/0x80 [ 49.622574][ T1380] ? avc_has_perm_noaudit+0x289/0x360 [ 49.622603][ T1380] ? selinux_perf_event_alloc+0x110/0x110 [ 49.622626][ T1380] ? scsi_block_when_processing_errors+0x2b3/0x370 [ 49.622662][ T1380] ? __cfi_scsi_block_when_processing_errors+0x10/0x10 [ 49.622698][ T1380] ? selinux_capable+0x38/0x50 [ 49.622727][ T1380] ? bpf_lsm_capable+0xd/0x20 [ 49.622761][ T1380] ? security_capable+0x44/0x130 [ 49.622788][ T1380] sd_ioctl+0x14a/0x190 [ 49.622809][ T1380] ? __cfi_sd_ioctl+0x10/0x10 [ 49.622828][ T1380] blkdev_ioctl+0x54b/0x690 [ 49.622849][ T1380] ? __cfi_blkdev_ioctl+0x10/0x10 [ 49.622886][ T1380] ? bpf_lsm_file_ioctl+0xd/0x20 [ 49.622915][ T1380] ? security_file_ioctl+0x3e/0x110 [ 49.622950][ T1380] ? __cfi_blkdev_ioctl+0x10/0x10 [ 49.622984][ T1380] __se_sys_ioctl+0x135/0x1b0 [ 49.623013][ T1380] __x64_sys_ioctl+0x7f/0xa0 [ 49.623041][ T1380] x64_sys_call+0x1878/0x2ee0 [ 49.623064][ T1380] do_syscall_64+0x57/0xf0 [ 49.623098][ T1380] ? clear_bhb_loop+0x50/0xa0 [ 49.623131][ T1380] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 49.623161][ T1380] RIP: 0033:0x7fd4b1d9e0d9 [ 49.623179][ T1380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.623199][ T1380] RSP: 002b:00007fd4b2c53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.623223][ T1380] RAX: ffffffffffffffda RBX: 00007fd4b2025fa0 RCX: 00007fd4b1d9e0d9 [ 49.623241][ T1380] RDX: 0000000000000000 RSI: 0000000000005393 RDI: 0000000000000004 [ 49.623256][ T1380] RBP: 00007fd4b2c53090 R08: 0000000000000000 R09: 0000000000000000 [ 49.623272][ T1380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.623286][ T1380] R13: 00007fd4b2026038 R14: 00007fd4b2025fa0 R15: 00007ffd2c7cf748 [ 49.623307][ T1380] [ 49.625350][ T1382] tipc: Started in network mode [ 49.935133][ C0] bridge0: port 3(syz_tun) entered learning state [ 50.146580][ T1382] tipc: Node identity , cluster identity 4711 [ 50.152698][ T1382] tipc: Failed to obtain node identity [ 50.158272][ T1382] tipc: Enabling of bearer rejected, failed to enable media [ 50.224806][ T545] usb 4-1: unable to get BOS descriptor or descriptor too short [ 50.233290][ T545] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 50.249965][ T545] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 50.269573][ T545] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 50.281121][ T545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.303615][ T545] usb 4-1: Product: syz [ 50.314111][ T545] usb 4-1: Manufacturer: syz [ 50.318782][ T545] usb 4-1: SerialNumber: syz [ 50.365163][ T1407] netlink: 9 bytes leftover after parsing attributes in process `syz.1.425'. [ 50.389836][ T1409] raw_sendmsg: syz.1.426 forgot to set AF_INET. Fix it! [ 50.424410][ T1412] netlink: 'syz.1.427': attribute type 12 has an invalid length. [ 50.542209][ T545] usb 4-1: unit 9 not found! [ 50.559862][ T545] usb 4-1: USB disconnect, device number 11 [ 50.644285][ T1426] FAULT_INJECTION: forcing a failure. [ 50.644285][ T1426] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.657614][ T1426] CPU: 1 UID: 0 PID: 1426 Comm: syz.2.434 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 50.657650][ T1426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.657668][ T1426] Call Trace: [ 50.657675][ T1426] [ 50.657683][ T1426] __dump_stack+0x21/0x30 [ 50.657720][ T1426] dump_stack_lvl+0x140/0x1c0 [ 50.657755][ T1426] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.657788][ T1426] dump_stack+0x19/0x20 [ 50.657817][ T1426] should_fail_ex+0x3c2/0x510 [ 50.657842][ T1426] should_fail+0xf/0x20 [ 50.657865][ T1426] should_fail_usercopy+0x1e/0x30 [ 50.657892][ T1426] _copy_from_user+0x20/0xa0 [ 50.657922][ T1426] sg_io+0x2a9/0x8a0 [ 50.657951][ T1426] scsi_ioctl+0x13a8/0x1f90 [ 50.657982][ T1426] ? __cfi_scsi_ioctl+0x10/0x10 [ 50.658010][ T1426] ? _parse_integer+0x2e/0x40 [ 50.658062][ T1426] ? __asan_set_shadow_00+0x12/0x20 [ 50.658094][ T1426] ? blkdev_common_ioctl+0x11e7/0x2740 [ 50.658115][ T1426] ? avc_has_perm_noaudit+0x26b/0x360 [ 50.658142][ T1426] ? __asan_memcpy+0x5a/0x80 [ 50.658163][ T1426] ? avc_has_perm_noaudit+0x289/0x360 [ 50.658190][ T1426] ? selinux_perf_event_alloc+0x110/0x110 [ 50.658214][ T1426] ? scsi_block_when_processing_errors+0x2b3/0x370 [ 50.658247][ T1426] ? __cfi_scsi_block_when_processing_errors+0x10/0x10 [ 50.658282][ T1426] ? selinux_capable+0x38/0x50 [ 50.658309][ T1426] ? bpf_lsm_capable+0xd/0x20 [ 50.658341][ T1426] ? security_capable+0x44/0x130 [ 50.658366][ T1426] sd_ioctl+0x14a/0x190 [ 50.658386][ T1426] ? __cfi_sd_ioctl+0x10/0x10 [ 50.658407][ T1426] blkdev_ioctl+0x54b/0x690 [ 50.658426][ T1426] ? __cfi_blkdev_ioctl+0x10/0x10 [ 50.658459][ T1426] ? bpf_lsm_file_ioctl+0xd/0x20 [ 50.658486][ T1426] ? security_file_ioctl+0x3e/0x110 [ 50.658520][ T1426] ? __cfi_blkdev_ioctl+0x10/0x10 [ 50.658554][ T1426] __se_sys_ioctl+0x135/0x1b0 [ 50.658581][ T1426] __x64_sys_ioctl+0x7f/0xa0 [ 50.658607][ T1426] x64_sys_call+0x1878/0x2ee0 [ 50.658628][ T1426] do_syscall_64+0x57/0xf0 [ 50.658653][ T1426] ? clear_bhb_loop+0x50/0xa0 [ 50.658684][ T1426] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.658713][ T1426] RIP: 0033:0x7f8ad539e0d9 [ 50.658731][ T1426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.658751][ T1426] RSP: 002b:00007f8ad6311028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.658776][ T1426] RAX: ffffffffffffffda RBX: 00007f8ad5625fa0 RCX: 00007f8ad539e0d9 [ 50.658794][ T1426] RDX: 0000000000000000 RSI: 0000000000005393 RDI: 0000000000000004 [ 50.658808][ T1426] RBP: 00007f8ad6311090 R08: 0000000000000000 R09: 0000000000000000 [ 50.658823][ T1426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.658837][ T1426] R13: 00007f8ad5626038 R14: 00007f8ad5625fa0 R15: 00007ffe00ce6c68 [ 50.658857][ T1426] [ 51.040466][ T1436] tipc: Started in network mode [ 51.052061][ T1436] tipc: Node identity , cluster identity 4711 [ 51.058297][ T1436] tipc: Failed to obtain node identity [ 51.076899][ T1436] tipc: Enabling of bearer rejected, failed to enable media [ 51.091953][ T1438] netlink: 'syz.3.440': attribute type 15 has an invalid length. [ 51.099934][ T1439] netlink: 'syz.3.440': attribute type 15 has an invalid length. [ 51.261255][ T545] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 51.287253][ T1449] netlink: 9 bytes leftover after parsing attributes in process `syz.2.444'. [ 51.422852][ T545] usb 2-1: too many configurations: 37, using maximum allowed: 8 [ 51.440554][ T545] usb 2-1: string descriptor 0 read error: -71 [ 51.452737][ T545] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 51.468718][ T545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.487086][ T545] usb 2-1: can't set config #1, error -71 [ 51.502991][ T545] usb 2-1: USB disconnect, device number 12 [ 51.647887][ T1469] kvm: kvm [1468]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 51.656631][ T1469] kvm: kvm [1468]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 51.995124][ T1480] process 'syz.1.458' launched './file0' with NULL argv: empty string added [ 52.004274][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 52.004292][ T36] audit: type=1400 audit(1786112877.809:254): avc: denied { execute_no_trans } for pid=1479 comm="syz.1.458" path="/125/file0" dev="tmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.036745][ T545] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 52.071201][ T1484] netlink: 'syz.1.460': attribute type 12 has an invalid length. [ 52.090034][ T36] audit: type=1400 audit(1786112877.898:255): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 52.225765][ T545] usb 3-1: config index 0 descriptor too short (expected 64575, got 68) [ 52.237007][ T545] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 52.247454][ T545] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 52.261462][ T545] usb 3-1: config index 1 descriptor too short (expected 64575, got 68) [ 52.278921][ T545] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 52.298563][ T545] usb 3-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 52.331188][ T545] usb 3-1: string descriptor 0 read error: -71 [ 52.337447][ T545] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 52.358948][ T545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.368615][ T545] usb 3-1: can't set config #1, error -71 [ 52.390234][ T545] usb 3-1: USB disconnect, device number 15 [ 52.439516][ T394] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 52.511692][ T1505] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 52.619584][ T394] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.639042][ T394] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.649154][ T394] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 52.658629][ T394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 52.666969][ T394] usb 2-1: SerialNumber: syz [ 52.887149][ T394] usb 2-1: skipping empty audio interface (v1) [ 52.905623][ T394] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 52.929420][ T394] usb 2-1: USB disconnect, device number 13 [ 52.940128][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.151363][ T1528] mmap: syz.2.478 (1528) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.289236][ T36] audit: type=1400 audit(1786112879.080:256): avc: denied { mount } for pid=1535 comm="syz.2.481" name="/" dev="configfs" ino=1604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 53.329028][ T36] audit: type=1400 audit(1786112879.110:257): avc: denied { search } for pid=1535 comm="syz.2.481" name="/" dev="configfs" ino=1604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.351448][ T36] audit: type=1400 audit(1786112879.110:258): avc: denied { write } for pid=1535 comm="syz.2.481" name="usb_gadget" dev="configfs" ino=1605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.376625][ T36] audit: type=1400 audit(1786112879.110:259): avc: denied { add_name } for pid=1535 comm="syz.2.481" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 53.398260][ T36] audit: type=1400 audit(1786112879.110:260): avc: denied { create } for pid=1535 comm="syz.2.481" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 53.418715][ T36] audit: type=1400 audit(1786112879.110:261): avc: denied { write } for pid=1535 comm="syz.2.481" name="bDeviceClass" dev="configfs" ino=12648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 53.442608][ T36] audit: type=1400 audit(1786112879.110:262): avc: denied { open } for pid=1535 comm="syz.2.481" path="/185/config/usb_gadget/g1/bDeviceClass" dev="configfs" ino=12648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 53.502922][ T36] audit: type=1400 audit(1786112879.299:263): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 53.567954][ T1547] netlink: 9 bytes leftover after parsing attributes in process `syz.3.487'. [ 53.600985][ T1549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 53.626931][ T1552] netlink: 128 bytes leftover after parsing attributes in process `syz.3.488'. [ 53.636385][ T1552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.488'. [ 53.727993][ T360] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 53.767489][ T1562] tmpfs: Unsupported parameter 'mpol' [ 53.778979][ T1564] tmpfs: Unsupported parameter 'mpol' [ 53.835152][ T1570] Zero length message leads to an empty skb [ 53.888869][ T360] usb 2-1: Using ep0 maxpacket: 32 [ 53.895650][ T360] usb 2-1: config index 0 descriptor too short (expected 548, got 36) [ 53.904319][ T360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.919084][ T360] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.928881][ T360] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.943270][ T360] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 53.952819][ T360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.966782][ T360] usb 2-1: config 0 descriptor?? [ 54.080045][ T49] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 54.212369][ T49] usb 3-1: device descriptor read/64, error -71 [ 54.377024][ T360] hid-picolcd 0003:04D8:C002.0008: unknown main item tag 0x7 [ 54.386669][ T360] hid-picolcd 0003:04D8:C002.0008: unknown global tag 0xe [ 54.394039][ T360] hid-picolcd 0003:04D8:C002.0008: item 0 2 1 14 parsing failed [ 54.402429][ T360] hid-picolcd 0003:04D8:C002.0008: device report parse failed [ 54.409992][ T360] hid-picolcd 0003:04D8:C002.0008: probe with driver hid-picolcd failed with error -22 [ 54.467528][ T49] usb 3-1: device descriptor read/64, error -71 [ 54.579945][ T360] usb 2-1: USB disconnect, device number 14 [ 54.716324][ T49] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 54.854642][ T49] usb 3-1: device descriptor read/64, error -71 [ 55.045756][ T360] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 55.096067][ T49] usb 3-1: device descriptor read/64, error -71 [ 55.127417][ T1579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=1579 comm=syz.1.500 [ 55.176487][ T360] usb 4-1: device descriptor read/64, error -71 [ 55.216892][ T49] usb usb3-port1: attempt power cycle [ 55.417871][ T360] usb 4-1: device descriptor read/64, error -71 [ 55.558597][ T49] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 55.587476][ T49] usb 3-1: device descriptor read/8, error -71 [ 55.669226][ T360] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 55.720597][ T49] usb 3-1: device descriptor read/8, error -71 [ 55.799944][ T360] usb 4-1: device descriptor read/64, error -71 [ 55.960819][ T49] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 55.982033][ T49] usb 3-1: device descriptor read/8, error -71 [ 56.041240][ T360] usb 4-1: device descriptor read/64, error -71 [ 56.112741][ T49] usb 3-1: device descriptor read/8, error -71 [ 56.159858][ T360] usb usb4-port1: attempt power cycle [ 56.222373][ T49] usb usb3-port1: unable to enumerate USB device [ 56.373782][ T311] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 56.503717][ T360] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 56.523779][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 56.530029][ T360] usb 4-1: device descriptor read/8, error -71 [ 56.536825][ T311] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.550242][ T311] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 56.559677][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.567972][ T311] usb 2-1: Product: syz [ 56.572472][ T311] usb 2-1: Manufacturer: syz [ 56.582318][ T311] usb 2-1: SerialNumber: syz [ 56.594887][ T311] usb 2-1: config 0 descriptor?? [ 56.601138][ T311] smsc75xx v1.0.0 [ 56.605116][ T311] smsc75xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 56.616070][ T311] smsc75xx 2-1:0.0: probe with driver smsc75xx failed with error -22 [ 56.685794][ T360] usb 4-1: device descriptor read/8, error -71 [ 56.804792][ T311] usb 2-1: USB disconnect, device number 15 [ 56.925855][ T360] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 56.960912][ T360] usb 4-1: device descriptor read/8, error -71 [ 57.064061][ T1594] Invalid logical block size (200) [ 57.099465][ T360] usb 4-1: device descriptor read/8, error -71 [ 57.112690][ T1598] tipc: Started in network mode [ 57.117731][ T1598] tipc: Node identity 7f000001, cluster identity 4711 [ 57.124804][ T1598] tipc: Enabling of bearer rejected, failed to enable media [ 57.145853][ T1598] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 57.154663][ T1598] tipc: Enabled bearer , priority 10 [ 57.163652][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 57.163672][ T36] audit: type=1400 audit(1786112882.938:271): avc: denied { write } for pid=1597 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.217804][ T360] usb usb4-port1: unable to enumerate USB device [ 57.357713][ T1602] netlink: 'syz.2.509': attribute type 11 has an invalid length. [ 57.367581][ T36] audit: type=1400 audit(1786112883.137:272): avc: denied { read } for pid=1601 comm="syz.2.509" name="/" dev="configfs" ino=1604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.389558][ T36] audit: type=1400 audit(1786112883.137:273): avc: denied { open } for pid=1601 comm="syz.2.509" path="/" dev="configfs" ino=1604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 57.609226][ T360] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 57.739845][ T360] usb 3-1: device descriptor read/64, error -71 [ 57.888636][ T1605] fuse: Bad value for 'fd' [ 57.914031][ T36] audit: type=1400 audit(1786112883.685:274): avc: denied { sqpoll } for pid=1606 comm="syz.3.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.980988][ T360] usb 3-1: device descriptor read/64, error -71 [ 57.987622][ T808] bridge0: port 3(syz_tun) entered disabled state [ 58.003170][ T808] syz_tun (unregistering): left allmulticast mode [ 58.021209][ T808] syz_tun (unregistering): left promiscuous mode [ 58.029816][ T808] bridge0: port 3(syz_tun) entered disabled state [ 58.041068][ T36] audit: type=1400 audit(1786112883.814:275): avc: denied { mounton } for pid=1611 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 58.095395][ T1613] netlink: 'syz.3.513': attribute type 12 has an invalid length. [ 58.115863][ T967] bridge_slave_1: left allmulticast mode [ 58.122991][ T967] bridge_slave_1: left promiscuous mode [ 58.129079][ T967] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.137614][ T967] bridge_slave_0: left allmulticast mode [ 58.144136][ T967] bridge_slave_0: left promiscuous mode [ 58.150045][ T967] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.234764][ T1623] netlink: 96 bytes leftover after parsing attributes in process `syz.3.516'. [ 58.243861][ T1611] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.251012][ T1611] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.258229][ T360] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 58.266210][ T1611] bridge_slave_0: entered allmulticast mode [ 58.275322][ T1611] bridge_slave_0: entered promiscuous mode [ 58.284905][ T10] tipc: Node number set to 2130706433 [ 58.290824][ T1611] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.298493][ T1611] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.306640][ T1611] bridge_slave_1: entered allmulticast mode [ 58.313571][ T1611] bridge_slave_1: entered promiscuous mode [ 58.327803][ T967] veth1_macvtap: left promiscuous mode [ 58.337046][ T967] veth0_vlan: left promiscuous mode [ 58.402993][ T360] usb 3-1: device descriptor read/64, error -71 [ 58.430591][ T36] audit: type=1400 audit(1786112884.192:276): avc: denied { map } for pid=1633 comm="syz.3.520" path="socket:[12961]" dev="sockfs" ino=12961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.454985][ T36] audit: type=1400 audit(1786112884.192:277): avc: denied { read accept } for pid=1633 comm="syz.3.520" path="socket:[12961]" dev="sockfs" ino=12961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.480717][ T36] audit: type=1400 audit(1786112884.242:278): avc: denied { write } for pid=1633 comm="syz.3.520" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 58.520537][ T1611] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.527669][ T1611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.535027][ T1611] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.542185][ T1611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.571557][ T951] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.580395][ T951] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.595013][ T951] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.602203][ T951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.613050][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.620183][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.657375][ T1611] veth0_vlan: entered promiscuous mode [ 58.666639][ T1642] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.684761][ T360] usb 3-1: device descriptor read/64, error -71 [ 58.694709][ T1611] veth1_macvtap: entered promiscuous mode [ 58.727886][ T36] audit: type=1400 audit(1786112884.481:279): avc: denied { mounton } for pid=1611 comm="syz-executor" path="/root/syzkaller.QxOytH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 58.754713][ T1646] tipc: Started in network mode [ 58.754731][ T1646] tipc: Node identity , cluster identity 4711 [ 58.754750][ T1646] tipc: Failed to obtain node identity [ 58.771830][ T1646] tipc: Enabling of bearer rejected, failed to enable media [ 58.794840][ T360] usb usb3-port1: attempt power cycle [ 58.823891][ T1653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.527'. [ 58.862590][ T1660] netlink: 9 bytes leftover after parsing attributes in process `syz.3.530'. [ 58.898575][ T1664] netlink: 96 bytes leftover after parsing attributes in process `syz.3.532'. [ 58.984042][ T36] audit: type=1400 audit(1786112884.750:280): avc: denied { bind } for pid=1665 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.146396][ T360] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 59.168061][ T360] usb 3-1: device descriptor read/8, error -71 [ 59.298304][ T360] usb 3-1: device descriptor read/8, error -71 [ 59.538015][ T360] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 59.568819][ T360] usb 3-1: device descriptor read/8, error -71 [ 59.598294][ T10] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 59.701949][ T360] usb 3-1: device descriptor read/8, error -71 [ 59.725913][ T1729] netlink: 'syz.4.552': attribute type 12 has an invalid length. [ 59.753676][ T1731] capability: warning: `syz.4.553' uses 32-bit capabilities (legacy support in use) [ 59.770222][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.787699][ T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 59.801133][ T10] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.819969][ T360] usb usb3-port1: unable to enumerate USB device [ 59.831508][ T10] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 59.851134][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.876652][ T10] usb 2-1: Product: syz [ 59.889503][ T10] usb 2-1: Manufacturer: syz [ 59.894365][ T10] usb 2-1: SerialNumber: syz [ 60.031935][ T1753] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 60.105737][ T10] usb 2-1: unit 3 not found! [ 60.124390][ T10] usb 2-1: USB disconnect, device number 16 [ 60.166515][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.214841][ T1758] netlink: 9 bytes leftover after parsing attributes in process `syz.4.564'. [ 60.224332][ T1758] gretap0: entered promiscuous mode [ 60.275755][ T1762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 60.285459][ T1762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 60.783177][ T360] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 60.815176][ T1784] netlink: 9 bytes leftover after parsing attributes in process `syz.1.577'. [ 60.861180][ T1793] netlink: 'syz.1.580': attribute type 12 has an invalid length. [ 60.968422][ T360] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.979843][ T360] usb 3-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 60.989148][ T360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.998579][ T360] usb 3-1: config 0 descriptor?? [ 61.005084][ T360] usb 3-1: unsupported MDLM descriptors [ 61.176505][ T1823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.185157][ T1823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.195161][ T1823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.207021][ T1824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.216882][ T1823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.224769][ T1771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.228522][ T1824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.243117][ T1771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.244056][ T394] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 61.260126][ T31] usb 3-1: USB disconnect, device number 24 [ 61.279959][ T394] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 61.405556][ T1832] netlink: 9 bytes leftover after parsing attributes in process `syz.4.593'. [ 61.415574][ T360] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 61.512559][ T1844] syzkaller1: entered promiscuous mode [ 61.518196][ T1844] syzkaller1: entered allmulticast mode [ 61.655583][ T1849] ======================================================= [ 61.655583][ T1849] WARNING: The mand mount option has been deprecated and [ 61.655583][ T1849] and is ignored by this kernel. Remove the mand [ 61.655583][ T1849] option from the mount to silence this warning. [ 61.655583][ T1849] ======================================================= [ 61.691507][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.722000][ T1655] bridge0: port 3(syz_tun) entered disabled state [ 61.737825][ T1655] syz_tun (unregistering): left allmulticast mode [ 61.744477][ T1655] syz_tun (unregistering): left promiscuous mode [ 61.751302][ T1655] bridge0: port 3(syz_tun) entered disabled state [ 61.825488][ T969] bridge_slave_1: left allmulticast mode [ 61.841316][ T969] bridge_slave_1: left promiscuous mode [ 61.847011][ T969] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.857211][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 61.872717][ T969] bridge_slave_0: left allmulticast mode [ 61.874350][ T31] usb 5-1: unable to get BOS descriptor set [ 61.888069][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.896500][ T969] bridge_slave_0: left promiscuous mode [ 61.906215][ T969] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.914776][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.931447][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.947305][ T31] usb 5-1: Product: syz [ 61.955342][ T31] usb 5-1: Manufacturer: syz [ 61.960068][ T31] usb 5-1: SerialNumber: syz [ 62.090221][ T969] veth1_macvtap: left promiscuous mode [ 62.095802][ T969] veth0_vlan: left promiscuous mode [ 62.166256][ T1868] netlink: 9 bytes leftover after parsing attributes in process `syz.2.611'. [ 62.170531][ T1836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.185785][ T1836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.197974][ T31] usb 5-1: bad CDC descriptors [ 62.229772][ T31] usb 5-1: USB disconnect, device number 2 [ 62.267309][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 62.267328][ T36] audit: type=1400 audit(1786112888.017:288): avc: denied { mount } for pid=1876 comm="syz.2.614" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 62.291177][ T1862] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.302993][ T1862] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.313388][ T1862] bridge_slave_0: entered allmulticast mode [ 62.320054][ T1862] bridge_slave_0: entered promiscuous mode [ 62.327008][ T1862] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.328754][ T36] audit: type=1400 audit(1786112888.047:289): avc: denied { search } for pid=1876 comm="syz.2.614" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 62.341258][ T1862] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.356894][ T36] audit: type=1400 audit(1786112888.047:290): avc: denied { read write } for pid=1876 comm="syz.2.614" name="set_event" dev="tracefs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 62.387484][ T36] audit: type=1400 audit(1786112888.047:291): avc: denied { open } for pid=1876 comm="syz.2.614" path="/207/trace/set_event" dev="tracefs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 62.392222][ T1862] bridge_slave_1: entered allmulticast mode [ 62.417937][ T1862] bridge_slave_1: entered promiscuous mode [ 62.492345][ T1862] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.499441][ T1862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.506817][ T1862] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.514189][ T1862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.535957][ T969] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.543383][ T394] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 62.551617][ T969] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.562095][ T943] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.569227][ T943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.591272][ T943] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.598570][ T943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.635560][ T1862] veth0_vlan: entered promiscuous mode [ 62.647320][ T1862] veth1_macvtap: entered promiscuous mode [ 62.681375][ T1890] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.694970][ T36] audit: type=1400 audit(1786112888.445:292): avc: denied { connect } for pid=1889 comm="syz.5.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.722152][ T394] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 62.731434][ T394] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 62.742093][ T394] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 62.752869][ T394] usb 3-1: config 1 has no interface number 0 [ 62.759049][ T394] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 62.769970][ T394] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 62.788671][ T394] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.798066][ T394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.814202][ T394] usb 3-1: Product: syz [ 62.820138][ T394] usb 3-1: Manufacturer: syz [ 62.825583][ T394] usb 3-1: SerialNumber: syz [ 62.832412][ T394] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 62.839239][ T394] cdc_ncm 3-1:1.1: bind() failure [ 62.850175][ T36] audit: type=1400 audit(1786112888.595:293): avc: denied { block_suspend } for pid=1895 comm="syz.1.621" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.930757][ T1905] netlink: 'syz.1.624': attribute type 8 has an invalid length. [ 62.941131][ T63] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.032710][ T1910] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3599605440 (3599605440 ns) > initial count (3285526220 ns). Using initial count to start timer. [ 63.037679][ T360] usb 3-1: USB disconnect, device number 25 [ 63.091663][ T63] usb 6-1: device descriptor read/64, error -71 [ 63.110169][ T1910] pimreg1: tun_chr_ioctl cmd 1074025677 [ 63.116138][ T1910] pimreg1: linktype set to 769 [ 63.212049][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 63.224251][ T545] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 63.232958][ T545] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 63.333443][ T63] usb 6-1: device descriptor read/64, error -71 [ 63.363840][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.374107][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.385156][ T31] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.394951][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.408162][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 63.417545][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.553207][ T360] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 63.566658][ T36] audit: type=1400 audit(1786112889.312:294): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 63.587140][ T63] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 63.713731][ T1925] tipc: Enabled bearer , priority 10 [ 63.714243][ T360] usb 2-1: Using ep0 maxpacket: 32 [ 63.724307][ T63] usb 6-1: device descriptor read/64, error -71 [ 63.728161][ T360] usb 2-1: unable to get BOS descriptor or descriptor too short [ 63.740615][ T360] usb 2-1: config index 0 descriptor too short (expected 65530, got 18) [ 63.749107][ T360] usb 2-1: config 13 has an invalid interface number: 0 but max is -1 [ 63.757384][ T360] usb 2-1: config 13 has 1 interface, different from the descriptor's value: 0 [ 63.769443][ T360] usb 2-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 63.778917][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.787079][ T360] usb 2-1: Product: syz [ 63.795569][ T360] usb 2-1: Manufacturer: syz [ 63.800257][ T360] usb 2-1: SerialNumber: syz [ 63.830938][ T31] usbhid 5-1:1.0: can't add hid device: -71 [ 63.837314][ T31] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 63.849857][ T31] usb 5-1: USB disconnect, device number 3 [ 63.948482][ T36] audit: type=1326 audit(1786112889.691:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1944 comm="syz.2.642" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ad539e0d9 code=0x0 [ 63.984599][ T63] usb 6-1: device descriptor read/64, error -71 [ 64.001029][ T1947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.009874][ T1947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.021374][ T1915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.031501][ T1915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.095071][ T63] usb usb6-port1: attempt power cycle [ 64.121559][ T360] usb 2-1: Fast Track Pro config OK [ 64.127857][ T360] usb 2-1: MIDIStreaming interface descriptor not found [ 64.137442][ T360] usb 2-1: USB disconnect, device number 17 [ 64.149781][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.235448][ T545] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 64.389234][ T545] usb 3-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice= 0.40 [ 64.398854][ T545] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.407394][ T545] usb 3-1: Product: syz [ 64.411602][ T545] usb 3-1: Manufacturer: syz [ 64.416277][ T545] usb 3-1: SerialNumber: syz [ 64.436022][ T63] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 64.461268][ T63] usb 6-1: device descriptor read/8, error -71 [ 64.597504][ T63] usb 6-1: device descriptor read/8, error -71 [ 64.724153][ T36] audit: type=1326 audit(1786112890.475:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1971 comm="syz.1.651" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4b1d9e0d9 code=0x0 [ 64.776577][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 64.784642][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 64.792679][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 64.800699][ T31] rtc_cmos 00:00: Alarms can be up to one day in the future [ 64.808358][ T31] rtc rtc0: __rtc_set_alarm: err=-22 [ 64.814773][ T1973] rtc_cmos 00:00: Alarms can be up to one day in the future [ 64.837212][ T63] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 64.858538][ T63] usb 6-1: device descriptor read/8, error -71 [ 64.865780][ T36] audit: type=1400 audit(1786112890.605:297): avc: denied { connect } for pid=1974 comm="syz.4.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.988262][ T63] usb 6-1: device descriptor read/8, error -71 [ 65.097143][ T63] usb usb6-port1: unable to enumerate USB device [ 65.126979][ T360] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 65.276965][ T360] usb 5-1: Using ep0 maxpacket: 16 [ 65.283526][ T360] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 65.294476][ T360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 65.305739][ T360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 65.319047][ T360] usb 5-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 65.328354][ T360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.337574][ T360] usb 5-1: config 0 descriptor?? [ 65.376933][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 65.383645][ C0] bridge0: topology change detected, propagating [ 65.763645][ T360] usbhid 5-1:0.0: can't add hid device: -71 [ 65.771028][ T360] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 65.780428][ T360] usb 5-1: USB disconnect, device number 4 [ 65.866979][ T63] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 65.915712][ T1990] FAULT_INJECTION: forcing a failure. [ 65.915712][ T1990] name failslab, interval 1, probability 0, space 0, times 1 [ 65.931595][ T1990] CPU: 0 UID: 0 PID: 1990 Comm: syz.5.656 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 65.931622][ T1990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.931633][ T1990] Call Trace: [ 65.931638][ T1990] [ 65.931645][ T1990] __dump_stack+0x21/0x30 [ 65.931687][ T1990] dump_stack_lvl+0x140/0x1c0 [ 65.931719][ T1990] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.931746][ T1990] ? __kasan_check_write+0x18/0x20 [ 65.931762][ T1990] ? proc_fail_nth_write+0x184/0x220 [ 65.931786][ T1990] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 65.931809][ T1990] dump_stack+0x19/0x20 [ 65.931830][ T1990] should_fail_ex+0x3c2/0x510 [ 65.931848][ T1990] should_failslab+0xac/0x100 [ 65.931867][ T1990] kmem_cache_alloc_noprof+0x42/0x410 [ 65.931883][ T1990] ? getname_flags+0xcc/0x6b0 [ 65.931900][ T1990] ? __cfi_vfs_write+0x10/0x10 [ 65.931916][ T1990] getname_flags+0xcc/0x6b0 [ 65.931934][ T1990] getname+0x1b/0x30 [ 65.931950][ T1990] do_sys_openat2+0xda/0x1d0 [ 65.931972][ T1990] ? fput+0x1a4/0x230 [ 65.931991][ T1990] ? do_sys_open+0x100/0x100 [ 65.932013][ T1990] ? ksys_write+0x1f3/0x260 [ 65.932029][ T1990] ? __cfi_ksys_write+0x10/0x10 [ 65.932045][ T1990] __x64_sys_openat+0x13a/0x170 [ 65.932069][ T1990] x64_sys_call+0xe69/0x2ee0 [ 65.932083][ T1990] do_syscall_64+0x57/0xf0 [ 65.932101][ T1990] ? clear_bhb_loop+0x50/0xa0 [ 65.932123][ T1990] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.932143][ T1990] RIP: 0033:0x7fee85f5e90e [ 65.932161][ T1990] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 65.932175][ T1990] RSP: 002b:00007fee86e96ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 65.932196][ T1990] RAX: ffffffffffffffda RBX: 00007fee86e976c0 RCX: 00007fee85f5e90e [ 65.932210][ T1990] RDX: 0000000000000002 RSI: 00007fee86e96f90 RDI: ffffffffffffff9c [ 65.932242][ T1990] RBP: 00007fee86e97090 R08: 0000000000000000 R09: 0000000000000000 [ 65.932257][ T1990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.932270][ T1990] R13: 00007fee86226038 R14: 00007fee86225fa0 R15: 00007fff8df28d38 [ 65.932295][ T1990] [ 66.248588][ T63] usb 2-1: unable to get BOS descriptor or descriptor too short [ 66.256787][ T63] usb 2-1: not running at top speed; connect to a high speed hub [ 66.265530][ T63] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 66.278371][ T63] usb 2-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 66.287530][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.295544][ T63] usb 2-1: Product: syz [ 66.299787][ T63] usb 2-1: Manufacturer: syz [ 66.304512][ T63] usb 2-1: SerialNumber: syz [ 66.343499][ T1993] printk: legacy console [ttyS0] disabled Stopping sshd: stopped /usr/sbin/sshd (pid 204) OK Stopping crond: stopped /usr/sbin/crond (pid 195) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 149) Stopping network: OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 93) OK umount: can't remount debugfs read-only umount: can't remount sysfs read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.108 closed by remote host. Sent SIGTERM to all processes Sent SIGKILL to all processes Requesting system poweroff serialport: VM disconnected.