last executing test programs: 4.16425553s ago: executing program 1 (id=549): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil) unshare(0x24020400) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) pipe(&(0x7f0000000100)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000180)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x7b7, 0x0, 0x0, 0x1000, 0x3, r1, 0x0, 0x2}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r3, r8, &(0x7f0000000200)={0x0, 0x145d, 0x20, 0x0, 0xb0, 0x0, r3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x20400, 0x8000001, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x2, 0xef, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa5f, 0x0, 0x2, 0x2ae, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a09, 0x10000, 0x2, 0x821b, 0x0, r3}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r7, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 3.25296697s ago: executing program 3 (id=556): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) (async) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$binfmt_script(r2, &(0x7f00000010c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0', [], 0xa, "123f26ce659316c4cf3c6d2314cabbeb5b1164990a453894d746146ca93e61ef9ff86c022b07b56c2041d73cbfbb5da390bacb448bdb96b1ced6efde9706e3a058dee5a98a5cecc491d5b0f85543043d0e8e2dd8e5fbe3d255ff512566f492cb3956d740db754f0da2a80a91d2c414ce5e9a3223470276aeb742c6"}, 0x181) (async) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000340)=0x6, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x303}, "ec104bcd6488d2f6", "8f8c2a478c4e48f9575d967978dd13c9", "980900", "c69df17e8d1b3a58"}, 0x28) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r6) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) (async) r7 = dup3(r4, r3, 0x80000) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) 3.197513381s ago: executing program 1 (id=557): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r5, r5, 0x0) sendmmsg$unix(r2, &(0x7f0000003780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}], 0x20, 0x20000800}}], 0x1, 0x90) syz_usb_connect(0x0, 0x64, &(0x7f0000001e00)=ANY=[@ANYRESHEX=r0], 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x2, 0xfffffffc, 0x10, @local, @remote, 0x8000, 0x1, 0x1}}) connect$can_bcm(r7, &(0x7f0000000040)={0x1d, r8}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYRES8=r8, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) recvmmsg(r7, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)=""/96, 0x60}, {0x0}], 0x2}, 0x1}], 0x1, 0x2020, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xe, &(0x7f0000000080)=0xa, 0x4) r11 = fsopen(&(0x7f00000001c0)='pipefs\x00', 0x0) r12 = inotify_init1(0x0) r13 = accept$unix(r2, &(0x7f0000000240)=@abs, &(0x7f0000000340)=0x6e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r16 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000500)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r7, @ANYRES32=r10, @ANYRES16=r14, @ANYRES32=r11, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r12, @ANYRES32=r2, @ANYRES32=r13, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r15, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r16, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r1], 0xa8}, 0x4000000) 3.142743082s ago: executing program 3 (id=559): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6e74657874cc"]) pipe(&(0x7f0000000040)) 3.130119572s ago: executing program 3 (id=560): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x80810) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4c40) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000003fc0)=[{{&(0x7f0000000140)=@tipc=@name, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=""/128, 0x80}, 0x2}, {{&(0x7f0000000380)=@x25={0x9, @remote}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000000440)=""/231, 0xe7}], 0x2}, 0x2}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000680)=""/48, 0x30}, {&(0x7f00000006c0)=""/154, 0x9a}], 0x3, &(0x7f00000007c0)=""/83, 0x53}, 0x5}, {{&(0x7f0000000840)=@can, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/121, 0x79}, 0x6}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/209, 0xd1}, {&(0x7f0000000a80)=""/186, 0xba}, {&(0x7f0000000b40)=""/95, 0x5f}, {&(0x7f0000000bc0)=""/127, 0x7f}], 0x4, &(0x7f0000000c80)=""/131, 0x83}, 0x5}, {{&(0x7f0000000d40)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000dc0)=""/74, 0x4a}, {&(0x7f0000000e40)=""/247, 0xf7}], 0x2, &(0x7f0000000f80)=""/158, 0x9e}, 0x3}, {{&(0x7f0000001040)=@ax25={{0x3, @default}, [@default, @rose, @netrom, @remote, @null, @remote, @null, @null]}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/217, 0xd9}, {&(0x7f00000010c0)=""/98, 0x62}, {&(0x7f0000002540)}, {&(0x7f0000002580)=""/26, 0x1a}, {&(0x7f00000025c0)=""/149, 0x95}, {&(0x7f0000002680)=""/138, 0x8a}, {&(0x7f0000002740)=""/105, 0x69}], 0x8, &(0x7f00000002c0)=""/15, 0xf}, 0x1}, {{&(0x7f0000002880)=@vsock, 0x80, &(0x7f0000003f00)}, 0x1}], 0x8, 0x2000, &(0x7f00000041c0)={0x0, 0x989680}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r3) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf2502"], 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x80810) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4c40) (async) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) (async) recvmmsg(r3, &(0x7f0000003fc0)=[{{&(0x7f0000000140)=@tipc=@name, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=""/128, 0x80}, 0x2}, {{&(0x7f0000000380)=@x25={0x9, @remote}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000000440)=""/231, 0xe7}], 0x2}, 0x2}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000680)=""/48, 0x30}, {&(0x7f00000006c0)=""/154, 0x9a}], 0x3, &(0x7f00000007c0)=""/83, 0x53}, 0x5}, {{&(0x7f0000000840)=@can, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/121, 0x79}, 0x6}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/209, 0xd1}, {&(0x7f0000000a80)=""/186, 0xba}, {&(0x7f0000000b40)=""/95, 0x5f}, {&(0x7f0000000bc0)=""/127, 0x7f}], 0x4, &(0x7f0000000c80)=""/131, 0x83}, 0x5}, {{&(0x7f0000000d40)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000dc0)=""/74, 0x4a}, {&(0x7f0000000e40)=""/247, 0xf7}], 0x2, &(0x7f0000000f80)=""/158, 0x9e}, 0x3}, {{&(0x7f0000001040)=@ax25={{0x3, @default}, [@default, @rose, @netrom, @remote, @null, @remote, @null, @null]}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/217, 0xd9}, {&(0x7f00000010c0)=""/98, 0x62}, {&(0x7f0000002540)}, {&(0x7f0000002580)=""/26, 0x1a}, {&(0x7f00000025c0)=""/149, 0x95}, {&(0x7f0000002680)=""/138, 0x8a}, {&(0x7f0000002740)=""/105, 0x69}], 0x8, &(0x7f00000002c0)=""/15, 0xf}, 0x1}, {{&(0x7f0000002880)=@vsock, 0x80, &(0x7f0000003f00)}, 0x1}], 0x8, 0x2000, &(0x7f00000041c0)={0x0, 0x989680}) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), r3) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf2502"], 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) (async) 2.926871437s ago: executing program 3 (id=562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) syz_usb_connect$uac1(0x5, 0x91, &(0x7f0000000ec0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x3, 0x1, 0x16, 0xa0, 0x49, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x22}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x203, 0x6, 0x6, 0x1, 0xf8}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x3, 0xf8, 0xff00, 0x3, 0xf}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf, 0x3a, 0x7, {0x7, 0x25, 0x1, 0xc, 0x1, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0xd, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x2, 0x5, 0x3, {0x7, 0x25, 0x1, 0xc, 0x7, 0x7}}}}}}}}]}}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449", 0x80) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012abd7000fddbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r2, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e6574646576736d6d28000008008b00", @ANYRES32=r3, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x20008014}, 0x2000c000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000001540)={0x2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.445503807s ago: executing program 2 (id=563): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1, 0x80000}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) fchmod(0xffffffffffffffff, 0x21) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) 2.423446257s ago: executing program 2 (id=564): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2.408904038s ago: executing program 2 (id=565): socket$netlink(0x10, 0x3, 0x0) (async) prctl$PR_SET_KEEPCAPS(0x8, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) lstat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) (async) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000180)=ANY=[], 0xe) (async) sendfile(r1, r1, &(0x7f0000001000), 0xffff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x51, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000440)=@svm={0x8, 0x1, 0x1080, {0xffff1000}, {"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"}}) (rerun: 32) syz_open_dev$usbmon(0x0, 0x7, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) lsm_set_self_attr(0x69, &(0x7f0000000000)={0x6d, 0x5, 0x20}, 0x20, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) (async) r8 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, r9) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="2c7766e583b28e", @ANYRESHEX=r6, @ANYBLOB=',dfltuid=', @ANYRESHEX=r9, @ANYBLOB=',\x00']) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$can_raw(0x1d, 0x3, 0x1) 2.351012409s ago: executing program 2 (id=566): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x40, &(0x7f0000000000)=0x3d, 0x4) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) (async) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201100100000008ec130600000000000001090224000100009005090400fbdf0300020009218100030122280009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00082a0000000100138526792c3cbdf0b28b0d0c712700000000cc6e446c4e88e78881ce2a5297363aa1fb1755"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.627435305s ago: executing program 3 (id=574): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) syz_usb_connect(0x3, 0x4f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010213df6220f30c7a8119eb010203010902"], &(0x7f0000000100)={0x0, 0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="050f020010030000000610400a14070000000000"]}) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2, r2}]) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=""/10, 0xa) mkdir(&(0x7f00000000c0)='./file0\x00', 0x40) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/sync_on_suspend', 0x321042, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="656e633d6f61657020686173683d787868617368363400b4e453872b85908d19783a48f97f3fc300"/78], 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r6, 0x1, 0x2000, 0x4000}) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r5, 0x0, 0x20040804) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) lseek(r4, 0x20, 0x1) getdents(r4, 0x0, 0x48) r9 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x802240, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) fsync(r9) 1.008196568s ago: executing program 2 (id=583): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) (async) mremap(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) 782.903213ms ago: executing program 2 (id=584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "886f161897327a06", "0d36783f2d4bd7b7fd8490ed6a46d661a9a473210c8fddb2f4ff00", '\x00', "d3880e66c0d66caf"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r2 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) syz_open_dev$evdev(&(0x7f0000000200), 0x8001, 0x8000) sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) rt_sigqueueinfo(r2, 0x21, &(0x7f0000000100)={0x1f}) socket$inet(0x2, 0x5, 0x8) 552.732548ms ago: executing program 0 (id=591): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000180)=0x7, 0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 539.333088ms ago: executing program 0 (id=592): r0 = socket(0x10, 0x802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000200)={@void, @void, @eth={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @val={@val={0x88a8, 0x2, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x67, 0x0, 0x7, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x40}}, "71aeb13098395276"}}}}}, 0x32) write(r0, &(0x7f0000000000)="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", 0xfc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201006500000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) 482.935229ms ago: executing program 0 (id=593): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ab) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, 0x1c) r1 = dup2(r0, r0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f0000008380), 0x400000000000174, 0x4008890) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xffffffffe9110f4c, 0xd, 0xfffc, 0xf, 0x2, 0x0, 0x0, 0x40, 0x6}}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0xcda2ddf0202812ff, 0x2000, 0x2000, &(0x7f000000d000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 481.527809ms ago: executing program 0 (id=594): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async) setuid(0xee01) (async) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x4, 0x800, 0x4, 0x200, 0x10, "15cf549d064dea59"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x14) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xfbb, 0x17}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40060}, 0x24048040) (async) mount(&(0x7f0000000340)=@md0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='v7\x00', 0x20, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000400)) (rerun: 32) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000004c0)={&(0x7f0000000440)=""/79, 0x409000, 0x1800, 0x2, 0x3}, 0x20) (async) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000500)={0x10, 0x0, "83dca6b3cd758c56e52c7d544a51382c"}) r6 = getuid() quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000701, r6, &(0x7f0000000540)) (async) sendfile(r3, r0, 0x0, 0x401) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000005c0)=@ccm_128={{0x304}, "1b2fe6b7cb0fddd3", "0920ecde7bd6a3b64cd3c836dbfe5df3", "edc2d852", "d38533f488ec91c6"}, 0x28) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r3) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x16c, r8, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6a2a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x523d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef31}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbf8}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x19}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0, 0x61}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x16c}}, 0x80) (async, rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$IEEE802154_SET_MACPARAMS(r9, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r10, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x6}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xff}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xfffffff9}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0xee}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x9}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xc4bd}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x2}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x24008084) r11 = epoll_create(0x8) epoll_wait(r11, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x6) ioctl$BTRFS_IOC_QUOTA_CTL(r11, 0xc0109428, &(0x7f0000000a80)={0x2, 0x4}) (async, rerun: 64) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x60, r4, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x74}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0xc}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x8}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (rerun: 64) 481.197939ms ago: executing program 0 (id=595): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) close(0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/sockstat6\x00') openat2(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40242, 0x2, 0x12}, 0x18) 478.3185ms ago: executing program 0 (id=596): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40305828, &(0x7f0000000200)={{r0}, "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"}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x103, 0x3, @dev={0xfe, 0x80, '\x00', 0x9}, 0x9}, 0x1c) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x4, 0x4) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000440)=0x17ff, 0x63) r5 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r5, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x7, 0x38, 0xe5}, {0xc46, 0x2a, 0x6, 0x7}, {0x3, 0x2, 0x9, 0xa}, {0xffff, 0x8, 0x8, 0x1}, {0x4, 0xc0, 0x1, 0x9}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r6, &(0x7f00000000c0)={@void, @void, @eth={@multicast, @random, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x5c, 0x68, 0x4100, 0x7, 0x1, 0x0, @empty=0x1c, @local}, @redirect={0x5, 0x1, 0x0, @rand_addr=0x64010106, {0x10, 0x4, 0x1, 0x39, 0x808, 0x66, 0xfffe, 0x6, 0x32, 0xd92, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@ssrr={0x89, 0x3, 0x9c}, @cipso={0x86, 0x20, 0x0, [{0x5, 0x12, "bc7838a2f03ea58e38657648f2a0cf7b"}, {0x5, 0x8, "604079bd96df"}]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}}}}, 0x6e) open(0x0, 0x14927e, 0x0) clock_getres(0xfffffffffffffff4, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000140), 0x10) 424.87941ms ago: executing program 3 (id=597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f00000001c0)='timerslack_ns\x00') mount(0x0, 0x0, 0x0, 0x40, 0x0) (async) exit(0xf) (async) write$binfmt_format(r3, &(0x7f0000000180)='0\x00', 0x2) ioprio_set$uid(0x3, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="b800000000ba008000000f3066410f011b65670fc75bbe669dd006ec66ba4200eddfd6450fc76ff6430f00d2c402b9980586a34f627a42092e6a00", 0x3b}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2001120008c}], 0x1) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 119.220657ms ago: executing program 1 (id=598): ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'raw\x00', 0x0, [0x0, 0x2, 0x6c, 0x80, 0x140]}, &(0x7f0000000080)=0x54) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000100)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "6db3ed5b35"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "da3e985e2a6c38b48417"}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "a219bd3b6625"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7562b8fe41"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x10, 0x0, 0x70bd28, 0x25dfdbfd, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4c000) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000480)) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f00000005c0)={r0, &(0x7f00000004c0)='\x00', 0x40002, &(0x7f0000000500)={@align=0x1ff, {0x3ff, 0x4, 0x1, 0x42}}, 0x400, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000680)={'ip6tnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x4, 0x2, 0x68, @private2, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x20, 0x2, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000006c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1c, r7}) setsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000000700)="a6d7307cabaeebc532489f6f42fe63c0fafd8bd171da7658e3185a2d39572e4997da1fe2", 0x24) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000740)={{r6}, "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"}) syz_ublk_add_dev(r3, 0x0, 0x0, 0x0, &(0x7f0000001780)={0x2e, 0x70, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001740)=@any_dev={0x3, 0xd19, 0x0, 0x0, 0x1000, 0xffffff83, 0x0, 0x0, 0xc0}}}, &(0x7f0000001800)=0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000001b40)={0x40, r2, 'id1\x00'}) syz_ublk_setup_queues(r2, r8, &(0x7f0000001840)={0x0, 0x2a72, 0x20000, 0x2, 0x399, 0x0, r3}, &(0x7f00000018c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x52b6, 0x8000, 0x3, 0x1db, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c45, 0x2, 0x2, 0x1d3, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3354, 0x800, 0x2, 0x30e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2c49, 0x824a1, 0x0, 0x3cc, 0x0, r6}}], 0x4, &(0x7f0000002bc0)={0x2e, 0x2, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x0, 0x416, 0x0, &(0x7f0000001bc0)=@buf_4k="5439ca1a5baa50ca16ac2f071d6e47b4774e5a49c2fc1149d1dadc0debe2f4399d71b1bef48703979a6260b4cbcb02f4148c4537addaf71532f9a3dd20dd089a13585d84e517925a278adcb0c3aecd0f4a5b78ce3bd7fad0e614a87642146f4d88773359b752a7d2750eb7d32338abe4c282f2129592259b700928c0d1b3f8c39295e17777b00e12b528346814b68ce38c912eeac73403cec5fc94e7be7a88dbe6542714eee44d2ed5ee84638f75b5c0bdba7d46bab736e92475168b8c276b254ae2660ae313fb38677e56f8ba4ba1ef4dfe5f71b1c5154681f618b36c63c324d947a83761e1a56cc22babf4880e447cede9789e7c26cd1bc9e936b56490adaca9ecf3d03689ea8837f00ec8afd8f0f663396f2e447469f7fe349de135bdb348412fa32b70bf11699cd9e223bdd975d362c82ddaa1f36fc3143b40cc4d2eda244c42a4281c26f41b56589d5ce7fd6462844fc8faa50950b4c1a6697c0009e631069e277a0ce404be2d2fdfd87a3b9f9650f68aabc5c758f0c0e3b355baa1d6d8343b07242293dfb6679346e9c21d8c0d9c786a01876a39275fd3d0d0f36e6e67d61b2ce7ceebd06daa15b20360995b83d65390961492348288e65cef4ee3fdb7fe2fcb2cbf63eaede06ec43e8ea4efdb1b171466b77517cd38e161b7c6e66033baf67e5d9ced35522754b6b1946209a6bb23a95b06fb5f3cc7d218f4c552a646463489acf9e69cee2255c5b70763e40b9a498f26ebd4ca3003c74c8e9d47b694f127375bf385d0b4272387192540c1ec4c874028593dd2b485f55ac8c49812db0f626e344e574dc15696b44a9f91ea8cf2b17deecdffae214a9e8568b20916b99b4e6923a5f5d46661f1ad86ea47be5d7f60e8ea761d2ed5980a3ccaba6e753d0802b57f32c95ef25320977f21bd95eb647a73b4fe19a911af0b7067c6cab7a065fafc501919c561b23c83937fc17db8c34ee968bfc9bcb682538bf517cfe7e4fb0aac47e8bc64a9913fb97f27f9c8bf39f04261bee4fe5bf7092e95f187688271fd8f8b17c688cdf66d49766e53caedc4e8e04592a0bcfa4ebb3c752b1d3df0fbe337983f542a352b4b36a8697a136400c47b446430cfc06338e051df73892eed0154733ae70d32af5abf06d93e3703935198e82109cc51ab3fd6f37de8659a33f4bea10affaa95df30e9e3d70815ffc48800eb5a1b7217aa8d4b18db4c3d9379e682b478b888e51158663540a30079f20b7dae970eedd29afed3e3439e90ff8d238c58aa8787caaf7b2efaa32f41d70535dd5673a18c732e94ede5adfbe1e12d09a390daf335ff694d6758642b2d3cef2ef4a25a69ce86071bb8839d65f28357ebc8f64cc387e9e6612b0530b76638db86b5720e40ac248d45957321fed2fcfb411464f59d9b65ee3df2f0b27e9504fbdcfe16f650ede8a0c63d3de4dcbaa008f0d0af31620d661001bf9c0e87a014448b794c2b73d7b31b883b848c67321194ccf13ba74f1eb02e27766ff6ce4fa44601670be952b54514111186ec3972f1f911af35d6565bf3a661f16b55878f20bedd4fc59d6a3b7167f824ae367d4e5c344d34fad1f609946d7044537cbf58d7dd090c6d8843e88bad5de7037df738f1a02967713467c314f62118f824058adc87ce4be6967c3c0cc00944f292b50a513973692badc063e309e2de8c769888d493abf7718f8814809defb61a627ae4c98b595199982ecf2f78b4a2a3cb5bc272e43fd53f147b9920f4232be674a5f46e3a9005e73b6d32004524c4b631b6e936776ef5127e9eaf4b705fa5b9ba6a1ffbfef72d1830bbb1a0252459bcfe62947eeff2588f78ed198fba9bf6d66cf66b9c1ef0d26108901d68f2d508627e54266c01d62daf1fa5aa15b95cbd68f75e51c1a2d68d7ed2711fabb25d877fd9b62736d9da5741d59251aaafe2d61c8893778a03f6758f19c89f67bd9da08e2949e24f20af91982aa1b66ccd4ec223c605ed46d9327c4755957598e56d63c042b4fbcb433912887a00b96e54cd1496e1899fbdd1457056e540111c3da9ed1bfba7b5cfda3a5fc44720d80d7154fbbad9b32c02ba155f6f29176e25d80424f7be62f4d7d40808e9a885006a2e4b98e6415c5b509571987fc79c45499b221dce16b67df9a417e77888c8e06194320972b21297173f1afed005b49d1899d8b709e5e7a60f29f29a8781fe42b8bcdea7f622f1e5ec69b8e9a55300d700f0e5a1278ed22e4623d463e1a1b5b5aaad88492961505022ad153b234dbb0b9952ac4c70e78c624c9da0ed83cfbf59c071f09b6c5c94562f26aa8988a4e3f961ab6e7fe5a429a8bc167d43a103f07bbbeff8212cf55c5a761b11ea38e74851e49444bdb8f216aa3448413e66990adb89a9f7f350fab4a6f5ddf26ee8dfd6f35fd045386a1d71a95e9a210a0ec021b17815625823984a04e91c0e3431ba50b5457db5a87779318b0a0bc782e7b212a31b83bf07a1eef65495013b793c516b99f78c4744bcebcc39e21ee1572efb04a80552df14b0842108b66d0e439539ecabe94373be800a3ae62bc2368b8e5919343a084ff31a84c9b031697a8c32b6512eba6d5e817352e464ca2b3ff7fe20ed20cb231ccc15cd824168d728bb9e4ed4b6facf713e7adf4a86c891a328bac1fd077cf9f76607da07876144cbb91e3f805f7ee4cbad9acef11246227f390275be72b3fda245ebdb0fc5c7ade8de4c3121596e90f85ba0801cc85c4c49c10ade925d0b4051acb41744d74c0bd5bf10d7b8b58de73177cc0621ea80cf3433437b3080a342a662c0fd95fcad5410b124d65f886f16b5f0816c7a992499ada75fd271bd829340d96f7d6777653c880ed87d28aa8988e6804a56eac297ce13c4f43d0adaedc4a1dd25458b8a0a288e373c6e0d20e6af40fa105739f0e2f1ccd28ab511f91d3e3f2d9733363ca04021a6b4a6c73f0d3e2d46b17c78a0853a716334b7b7bc5d060545c3cfae34f93bc4bebe9a6636bbee41eae2cc4a7be580bea144672f354b2cd9e4f18c7762c6e290732e6e5e15a055b1014bef8116b053de533a1d81391b5c8cc2cf8bb4dd7bfe0c248d024cbe63999ec9d3be0956e89b10c98001e6cc06f6d921bcf0d13e7672886c0fc6e92cb0b78dc194417a9075edf9598fd03178277e829dd3605d51112a59bcd72774922c11c18c06e9a551122b98b2b415511a786838e2e6ddc7f1b43684e68fa7245551c651f8cc85289bbfa67aeea7e258b254807c377afffce09f893cfba3ca3169aa33fc0bfa97efe9242c339cf75d208535480763935a5b230cf126fd8ddb6a5777d3e6b6a7c9bf414767c30958c649e3c2cd46cf35a8d10da2c1b4aeb49f51ae48a44ac2308f089053da93f2bac2436b899b03f16f04d401e8f3c353da30121879bfeb59ef2b72a224fd6e1ecc48a2991eef48cb85159fb37f2ae011098c4b3ba77adeff15b4f07e09bbf50a457b2218e27f66b49655ff722d1156af1855b8e09b78355300077799d0199b422d0ccd6525a81d949c9bc8dbd540a61798102fb05df32c1c6bc473a37491645c329699288fce57ad6716af6cfefa0ae4e3d66ebfab70c3d86303a6243dfef88ec422052f96a3730610105c74a795668ac66098e69985f8483d9cea7cb0d4bd8076d44ad4ac5195bd0890939d3e35dd577357e6909ceb3989d00ef380bdba9985d0fe98edeab8ac56340e40247dd0759b868171d36ca94d9125206a68dcb585a8ebbe7a3f72e9817007bc1913b8e112cf61c7e3291bc9951349a9f4b6f2b5c54d09ec2a3057b8ed838c266713e246a323c49387b0d74b36f948feb625edf18e14c9c048a842adbfa1cfc3e8e9bacd79b4a5abb1de06246a4880e1d1e4f2ecb29a16478b030d745d26e0786a3d7c608cc9b08b226ebad7a969831db2782fb494e134194a4b0de9b6fca820a1efa280b5f15e7e54fdc22e982a6b716c98070fc48be6caa275b6849280c834421c96c66a0855ae4eb5e6246507478aa1d262a0eef55bf8d9bf641c23cba99bedfba6099194a7eb6777e66ddd9ba7aee2a5c8d6e7916dc4715ff8d4cd206698ffa8b741a1282df454eab33cb079db5caa00cbf8bf1d7dde33c653e8e0c89022000af218b028731c2824736ff57c07f6a53e3feb7e092c814d1972222d296da5cd01a819b252297443a2033e6f944c4c67af7aa54ffcea0e77497d1e1a6ca1190c58e6a1a042b41b6e914d8c6ff031d8543bc44dc03476e8173b790915da4d55e2bad7b5408dcb296004c2f9cd4c51531a8e3bea7e58115324415e03a22f7e23d031a30fc59d6e8055f1c6ebe9cbb0989fabaa978bfa6d8196377d28e22e806ae39aaa5ebedce09eab3eeeebd8928840ce1236320897152314745d04b801a31066761209b887058aa836b391398f8f1c3f628c0a65c32b4114f6453d1b45b2561ae0a0d2bacb67dc841cd0bcad30230dbc3da6b0d0654b3223eb8e2643c18938d151963183857d15c4cc4c4b311e647a9eb0deaf9927fdbdf1d575082cfd0c9b94e4741c43f1601311e904ababfd3760268abb419e8251c2612e5ab094a3a28d70e480f040d67e5be1e3f2caaf3f8c0c81e90d6b4a8b012e5be17bcefd77ac4bec0d1dd61d21fc5a1232050f1c5e83410bd56f9d03497af559b7bcb07c5a72b966fdd5df0e43ec9903fc8c94fdea2e3448be2331248f5db629979f868db98e99825978244c30a61e5f9c5be771630f524ed5865df8d4236ba2b8b34b11b80bf27e4b72c2fbb9233891cf4c066d3b1f5589952aa6ebeca050d6b51f698de1af310be1e242fcc441803ed725dd6886b61eef22ef655da0950a523aa1623d7665652a530310b825149ae70a0ff32e8a4b2b0a33f28527de7d56d529e96f17dab9527645ba6f4440126434d74352a4d4acee415cba5caeb1b6d27209bed2cb12953609ddcb5d69cc77a5ac146b0b2970ff4d8e3cdd3f0dbeb4b12235cbd3933f628c167301bd94bda82a52ce51704b056e52892bf99ce04aa24973845532388a045043b3ee21ef2cbdbe985cf62c44c9a7d969e1a325dcf85163e2811ba6009f043b8c2f60c374d8aacc4876240f76be91e3d547a73858c219bd5ad9a670c2bfb8f20c268bc6eac4fd837065b28198630b2681b936f11b0d0d4879efd2ee36ec5ef0872ca5f044596df6429da009343d7a4eddb5786e3d6945d8b7bcff070ce8f19ab99980ae423e3f4048402579f5c6b6347860850ba8ce48280f440ec7f4d19bb2a11d3daa0c2d69268c88ba22ffa7f7f8b5035020336f81265b7a145e97562bc6cfe22f7527168d3aef42c66b03ef205274af8e9cc3b5fe9a903a3baeccb3a8d09e246d60c58ad3797e6e81fcf1f8ba003df5229ae4927b99ffc7d67e6e58a00236fe483c8d415db4337830003070eb2adbfef58da440ee1eedf20c8acfe75718bee9d1e3fb5a543246d54ccae68dab8624999aab4e750705aec345228623097df0f21ec459541d2bf05fe8c2cf4500c4c77bc38e1065b9563b2d152fdb0a1c72235798443408a611450584cfd96420a7aeaa5ec97fa210968de1232ec2c3d6fda855d9c49ee388a57413a3716b1c3a407040f6798266a9e1f9fb8c373100b9347fea2381c5cc06daf75b4b7c0313272447ccc42896ac7d40dbacf24704afd902d997464ce574efc0fd81577ce44e751ae8bf478d16bd20df7590a403e169544aa677c046c2d74fe5a49f2d693918deb20491a9943e42e0a9a367de98d7aa4b3046f86567dbf7f7b070421a7b521a47e25ff15af6ed4313cfbef24afc13c5a7f408a75c"}}, &(0x7f0000002c40)) r10 = open(&(0x7f0000002c80)='./file0\x00', 0x80, 0xc) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000002cc0)=@svm={0x2, 0x1, 0x1080, {0x50000}, {"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"}}) sendmsg$IPSET_CMD_SAVE(r10, &(0x7f0000003e40)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003e00)={&(0x7f0000003d80)={0x78, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x15) openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000003e80), 0x2, 0x0) r11 = creat(&(0x7f0000003f00)='./file0\x00', 0x194) syz_genetlink_get_family_id$gtp(&(0x7f0000003ec0), r11) ioctl$KVM_GET_DEVICE_ATTR_vm(r3, 0x4018aee2, &(0x7f0000003f80)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000003f40)={0x1, 0x8de}}) ioctl$KVM_RUN(r11, 0xae80, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000003fc0)=0x641d, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000004000)={[0x4, 0x8, 0x6, 0x4, 0xda, 0x0, 0x1, 0x6, 0x1, 0xffffffffffffff0f, 0x9, 0xffffffffffffffff, 0x5, 0x7, 0x5, 0xfff], 0x50000}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000042c0)={&(0x7f00000040c0), 0xc, &(0x7f0000004280)={&(0x7f0000004100)=@delpolicy={0x174, 0x14, 0x10, 0x70bd26, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x4, 0x4e21, 0x1, 0xa, 0x40, 0x20, 0x90, r7, 0xffffffffffffffff}, 0x6e6bc0, 0x1}, [@replay_esn_val={0x30, 0x17, {0x5, 0x70bd28, 0x70bd2d, 0x70bd25, 0x70bd25, 0x2, [0x9, 0x0, 0x4, 0x1, 0x50]}}, @tfcpad={0x8, 0x16, 0x7}, @sa={0xe4, 0x6, {{@in=@local, @in=@multicast2, 0x4e22, 0x7ed, 0x4e23, 0x8000, 0x2, 0x0, 0x0, 0xc, 0x0, 0xee00}, {@in=@remote, 0x4d2, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xf1c0348, 0x5, 0x3ff, 0x8, 0x1, 0xc42, 0x6, 0x14}, {0x55, 0x0, 0x5, 0x6}, {0xc, 0x5}, 0x70bd2d, 0x3506, 0xa, 0x0, 0xc, 0xa3}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7}]}, 0x174}, 0x1, 0x0, 0x0, 0x24048886}, 0x8005) 58.996409ms ago: executing program 1 (id=599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@cpuid={0x64, 0x18, {0x9, 0x5}}], 0x18}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000180)={0xc7, 0x0, 0x1}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x4, 0x1, 0x31237648, 0x1, 0x0, 0x1}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22.927819ms ago: executing program 1 (id=600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8c400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="260fc73b3e660f38821066b810000fc4d0c4e17d0d6e1936360f300f3250baf80cb89afd858a66bafc0c66ed672e660f3881790064660feb9bc42a0000c4e2f9db89f2ffffff", 0x46}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd16380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x3) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=601): setpgid(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) (async) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x8006, 0x0, 0x40000}, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x4, 0x6e1, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700)={0x0, 0x3, 0x0, 0x0, 0x38e, 0x0, r1}, &(0x7f0000000cc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe1ad, 0x0, 0x5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5a9b, 0x1, 0x20002, 0x226}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9874, 0x0, 0x0, 0x80000000}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2441}, 0xffffffffffffffff}], 0x1, &(0x7f0000000900)={0x2e, 0x4, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0) (async, rerun: 32) stat(0x0, 0x0) (async, rerun: 32) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='setgroups\x00') read$FUSE(r11, &(0x7f0000000c40)={0x2020}, 0x2020) syz_ublk_setup_queues(r11, r6, &(0x7f0000000280)={0x0, 0x103f, 0x10000, 0x1, 0x1c1, 0x0, r8}, &(0x7f0000000980)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1909, 0x2, 0x2, 0x1df}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1eb6, 0x200, 0x0, 0x2fd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3b, 0x80000, 0x3, 0x17b, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdef8, 0x0, 0x2, 0x152, 0x0, r1}}], 0x4, &(0x7f0000001f40)={0x2e, 0x40, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, '\x00', {0x4, 0xb7a, 0x0, &(0x7f0000000f40)=@buf_1k="ade14d04dd9cd5d84b794eaef3ef29004f171633fa9f5ea7e67ebe1c7a2776b5de77bf2f761309a7f3f41f650e22356d492173ec4a45148f90a7cd1f03e2b53aa75359d9b00ddf761eec691b7594abe27bb21b2f56bac52e00b11fc1d019a9f988d14e49507505161ba2a766d4a86a90b25736b567fda690fc8033ed6d8aff6bc6a94e3b706c011eceba707d9cac8bfd785d8b26d1d0695482d78cf4eda249370fc42b2984c0e7d6c0534d093c4ad0e0c7a3d89745ec640623a95da1cbed424a1c6840720cf3852d51a62b671ddfdb00bbb1ecd46ee49deb66064f75f41c523cddc172cf2bc0d1f5ea18b069c5d8160cf9f146b48b29ef7aae1156f24db22f29135699abca8f722e5abf7fb9ea6b6a562d4cccc7541fcd6e3ed0c8287665c459e4cca531b1b1362ad755c9c5e94cce02ec91243f9c690bb661afa0fc144b559e38ee7538c93785d0192c150b5310c429b7002ae330ce34e60c2ebf4f60b03b338791baa1b3c4a11541207000da0936f6abd2f77f98993b8726208312815f67cfceb9266e4677eaae4525bd7fc4c65e156e9fdba08246833c087f00b7a99565580867791f8c22814ce98dd0223b5f27c725891ca6f1f57ec761cb3424be0415aeaab68ca02d288c95f66df05a23705c0bdf2b354ebb10b516df79532fc68ffd968e5c9df889348e0cb939077c6321246ed7f9ce3262d9a3807777aa1a475c10bffa753cb377454b10ca54d4c3bbc13cbd358d22305d7ed60686577e928f834c409cab94fb86e0545670afb34e09295639ecb1c926c5f9c4f549863ce77f45ca7c88ee95a859ca3958a080c2f5a887afd2df86d555c80d1d2e4eb3e33ab37601720b0404078006a780605bdcb23e89b08a4b9ec5b541126b8794003dea2751bf156d6a026d92a1412e7c46869134b6cdb0f041a671b45b077a551245c0627a010569c7798cad61bca129719a764b5478e10a2497cfd9515182fd084ea03be558b09873d26c1bf70b9969093109cc2895c806e16cf49dd3b88816295a5de423db22b42d67a6babc2f84d04ff7f0dc518c75f41a826ec8f28810e3462df41fac583433022352f34ab063d3c481e665173cd763d20c81a0dc4c6eb928f6a0b0fd0b582576ff2f24e3ac27adb1bf9c716b8407f2897f02df24cbba5cbf25a86a5b6533fb5e81f4e796eeae0df9f002c09551c36dcfa221d14844e86af67210a7d7b1c3287831a0e43b3c78edce6dcea51dcc2fbed7cb59274d74e6502884531803e39456f1d07666773d43dd5dc62637f553aba692aa9ed79e58a3de1c429adc8a54059f667970a9392c20a76b1e99d026a3b80593abaa5be148c8cfe9c1fa2686880073c5c54b937b6692a36d0829aa71db04828ff36b06567e32baed1cb36933f763812d4fb36b8781fdaed3a91f2443394ac28fcee9ec3ef93703d107a18542a995"}}, &(0x7f0000001fc0)) r12 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xc000, 0x0) read$FUSE(r12, 0x0, 0x0) (async) write$FUSE_INIT(r12, 0x0, 0x0) (async) syz_fuse_handle_req(r12, 0x0, 0x0, 0x0) syz_fuse_handle_req(r12, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (rerun: 32) syz_open_procfs(0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x28}}], 0x1, 0x0) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) (async, rerun: 32) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r13, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r14 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa300090504"], 0x0) syz_usb_control_io$printer(r14, 0x0, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf00) kernel console output (not intermixed with test programs): text=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.992419][ T529] tipc: Started in network mode [ 35.000102][ T529] tipc: Node identity ac14140f, cluster identity 4711 [ 35.007151][ T529] tipc: New replicast peer: 172.20.20.37 [ 35.013426][ T529] tipc: Enabled bearer , priority 10 [ 35.023854][ T36] audit: type=1400 audit(1784055773.840:179): avc: denied { execute } for pid=528 comm="syz.0.78" path="/dev/ashmem" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.027059][ T529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.78'. [ 35.076598][ T326] usb 4-1: USB disconnect, device number 6 [ 35.098375][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.102370][ T36] audit: type=1400 audit(1784055773.920:180): avc: denied { cmd } for pid=534 comm="iou-wrk-535" path="socket:[7173]" dev="sockfs" ino=7173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 35.117512][ T319] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 35.176443][ T319] usb 2-1: device descriptor read/8, error -71 [ 35.306695][ T319] usb 2-1: device descriptor read/8, error -71 [ 35.314739][ T574] netlink: 'syz.0.84': attribute type 29 has an invalid length. [ 35.349425][ T571] FAULT_INJECTION: forcing a failure. [ 35.349425][ T571] name failslab, interval 1, probability 0, space 0, times 1 [ 35.362251][ T571] CPU: 1 UID: 0 PID: 571 Comm: syz.2.83 Not tainted syzkaller #0 a506770653dd131ce1f6b755c8f096a645f29717 [ 35.362287][ T571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 35.362309][ T571] Call Trace: [ 35.362318][ T571] [ 35.362332][ T571] __dump_stack+0x21/0x30 [ 35.362363][ T571] dump_stack_lvl+0x140/0x1c0 [ 35.362385][ T571] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.362407][ T571] ? avc_has_perm+0x155/0x240 [ 35.362426][ T571] ? __cfi_avc_has_perm+0x10/0x10 [ 35.362444][ T571] dump_stack+0x19/0x20 [ 35.362464][ T571] should_fail_ex+0x3c2/0x510 [ 35.362482][ T571] should_failslab+0xac/0x100 [ 35.362502][ T571] __kmalloc_cache_noprof+0x41/0x470 [ 35.362518][ T571] ? vhost_task_create+0x12c/0x3f0 [ 35.362536][ T571] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 35.362555][ T571] vhost_task_create+0x12c/0x3f0 [ 35.362570][ T571] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 35.362589][ T571] ? __cfi_vhost_task_create+0x10/0x10 [ 35.362610][ T571] ? __cfi_vhost_task_fn+0x10/0x10 [ 35.362626][ T571] ? __kasan_check_write+0x18/0x20 [ 35.362641][ T571] ? mutex_lock+0x97/0x1d0 [ 35.362662][ T571] ? __cfi_mutex_lock+0x10/0x10 [ 35.362682][ T571] ? kernel_text_address+0xa9/0xe0 [ 35.362705][ T571] kvm_mmu_post_init_vm+0x161/0x300 [ 35.362728][ T571] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 35.362750][ T571] ? _parse_integer_limit+0x195/0x1e0 [ 35.362767][ T571] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 35.362789][ T571] ? kstrtoull+0x13b/0x1e0 [ 35.362804][ T571] ? kstrtouint+0x78/0xf0 [ 35.362819][ T571] ? ioctl_has_perm+0x1bc/0x500 [ 35.362833][ T571] ? __asan_memcpy+0x5a/0x80 [ 35.362849][ T571] ? ioctl_has_perm+0x408/0x500 [ 35.362863][ T571] ? has_cap_mac_admin+0xd0/0xd0 [ 35.362877][ T571] ? __kasan_check_write+0x18/0x20 [ 35.362892][ T571] ? mutex_lock_killable+0x97/0x1d0 [ 35.362913][ T571] ? __cfi_mutex_lock_killable+0x10/0x10 [ 35.362935][ T571] ? proc_fail_nth_write+0x184/0x220 [ 35.362960][ T571] kvm_vcpu_ioctl+0xa43/0x1000 [ 35.362976][ T571] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 35.362991][ T571] ? __cfi_vfs_write+0x10/0x10 [ 35.363006][ T571] ? __kasan_check_write+0x18/0x20 [ 35.363021][ T571] ? mutex_unlock+0x90/0x240 [ 35.363041][ T571] ? __cfi_mutex_unlock+0x10/0x10 [ 35.363064][ T571] ? bpf_lsm_file_ioctl+0xd/0x20 [ 35.363085][ T571] ? security_file_ioctl+0x3e/0x110 [ 35.363116][ T571] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 35.363130][ T571] __se_sys_ioctl+0x135/0x1b0 [ 35.363150][ T571] __x64_sys_ioctl+0x7f/0xa0 [ 35.363168][ T571] x64_sys_call+0x1878/0x2ee0 [ 35.363182][ T571] do_syscall_64+0x57/0xf0 [ 35.363199][ T571] ? clear_bhb_loop+0x50/0xa0 [ 35.363220][ T571] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.363240][ T571] RIP: 0033:0x7f606d59de59 [ 35.363258][ T571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.363271][ T571] RSP: 002b:00007f606e407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 35.363292][ T571] RAX: ffffffffffffffda RBX: 00007f606d825fa0 RCX: 00007f606d59de59 [ 35.363304][ T571] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 35.363313][ T571] RBP: 00007f606e407090 R08: 0000000000000000 R09: 0000000000000000 [ 35.363323][ T571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.363332][ T571] R13: 00007f606d826038 R14: 00007f606d825fa0 R15: 00007ffe93bc3348 [ 35.363346][ T571] [ 35.719555][ T319] usb usb2-port1: unable to enumerate USB device [ 35.746196][ T36] audit: type=1400 audit(1784055774.570:181): avc: denied { unlink } for pid=575 comm="syz.0.85" name="file1" dev="tmpfs" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 35.816539][ T36] audit: type=1400 audit(1784055774.640:182): avc: denied { getopt } for pid=579 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.951220][ T586] futex_wake_op: syz.3.89 tries to shift op by 144; fix this program [ 35.995721][ T593] ======================================================= [ 35.995721][ T593] WARNING: The mand mount option has been deprecated and [ 35.995721][ T593] and is ignored by this kernel. Remove the mand [ 35.995721][ T593] option from the mount to silence this warning. [ 35.995721][ T593] ======================================================= [ 36.135544][ T311] tipc: Node number set to 2886997007 [ 36.202982][ T603] netlink: 'syz.3.95': attribute type 27 has an invalid length. [ 36.279424][ T603] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.287241][ T603] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.505740][ T319] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 36.635429][ T326] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 36.655500][ T319] usb 4-1: Using ep0 maxpacket: 16 [ 36.663044][ T319] usb 4-1: config 0 interface 0 has no altsetting 0 [ 36.669780][ T319] usb 4-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 36.678872][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.688230][ T319] usb 4-1: config 0 descriptor?? [ 36.795385][ T326] usb 2-1: Using ep0 maxpacket: 32 [ 36.804041][ T326] usb 2-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 36.813224][ T326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.821304][ T326] usb 2-1: Product: syz [ 36.825667][ T326] usb 2-1: Manufacturer: 笡댩홂瓕ഀᵂ쳞ｲ盆ꪍ쿫觅ށꮕ欼ÿ酠ꝕ旦瀴뜳ح僲ݧ㊑䆶卬㴦칑 [ 36.838037][ T326] usb 2-1: SerialNumber: syz [ 36.913984][ T625] overlayfs: missing 'lowerdir' [ 36.919524][ T625] overlayfs: failed to resolve './bus': -2 [ 37.060432][ T609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.069771][ T609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.085737][ T326] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 37.097683][ T319] ortek 0003:05A4:8003.0004: unknown main item tag 0x2 [ 37.098059][ T642] overlayfs: failed to clone upperpath [ 37.110588][ T326] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 37.117881][ T319] ortek 0003:05A4:8003.0004: unknown main item tag 0x6 [ 37.130025][ T326] usb 2-1: USB disconnect, device number 9 [ 37.148507][ T319] ortek 0003:05A4:8003.0004: unknown main item tag 0x4 [ 37.168539][ T319] ortek 0003:05A4:8003.0004: ignoring exceeding usage max [ 37.181556][ T319] ortek 0003:05A4:8003.0004: global environment stack underflow [ 37.189714][ T319] ortek 0003:05A4:8003.0004: item 0 4 1 11 parsing failed [ 37.197673][ T319] ortek 0003:05A4:8003.0004: probe with driver ortek failed with error -22 [ 37.260894][ T652] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.297478][ T604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=604 comm=syz.3.95 [ 37.359055][ T399] usb 4-1: USB disconnect, device number 7 [ 38.135730][ T319] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 38.316916][ T319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 38.326108][ T319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.338117][ T319] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 38.347296][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.355957][ T319] usb 4-1: Product: syz [ 38.360217][ T319] usb 4-1: Manufacturer: syz [ 38.365051][ T319] usb 4-1: SerialNumber: syz [ 38.395399][ T326] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 38.472543][ T734] netlink: 'syz.0.141': attribute type 22 has an invalid length. [ 38.541858][ T743] netlink: 68 bytes leftover after parsing attributes in process `syz.0.146'. [ 38.551326][ T743] netlink: 16 bytes leftover after parsing attributes in process `syz.0.146'. [ 38.557955][ T326] usb 3-1: unable to get BOS descriptor or descriptor too short [ 38.569710][ T326] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.577401][ T743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 38.581352][ T326] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 38.599552][ T326] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 38.610763][ T326] usb 3-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 38.626065][ T326] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 38.635289][ T326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.643923][ T326] usb 3-1: Product: syz [ 38.649022][ T326] usb 3-1: Manufacturer: syz [ 38.653734][ T326] usb 3-1: SerialNumber: syz [ 38.659495][ T319] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 38.669828][ T319] usb 4-1: USB disconnect, device number 8 [ 38.682212][ T705] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 38.698103][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.745380][ T311] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 38.834621][ T764] fuse: Bad value for 'user_id' [ 38.839673][ T764] fuse: Bad value for 'user_id' [ 38.896537][ T311] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 38.906530][ T705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.915465][ T311] usb 2-1: config 0 has no interface number 0 [ 38.921743][ T705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.929667][ T311] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.942479][ T311] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.952518][ T311] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.967798][ T326] usb 3-1: USB disconnect, device number 9 [ 38.973744][ T311] usb 2-1: config 0 interface 1 has no altsetting 0 [ 38.980698][ T311] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 38.992076][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.003673][ T311] usb 2-1: config 0 descriptor?? [ 39.125943][ T783] netlink: 'syz.0.162': attribute type 16 has an invalid length. [ 39.134260][ T783] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.162'. [ 39.405419][ T399] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 39.555402][ T399] usb 4-1: Using ep0 maxpacket: 32 [ 39.569221][ T399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.582478][ T399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.592451][ T399] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 39.605454][ T399] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 39.614565][ T399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.623668][ T737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.632827][ T311] uclogic 0003:145F:0212.0005: pen parameters not found [ 39.641663][ T737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.642475][ T311] uclogic 0003:145F:0212.0005: interface is invalid, ignoring [ 39.659414][ T399] usb 4-1: config 0 descriptor?? [ 39.667251][ T311] usb 2-1: USB disconnect, device number 10 [ 39.706420][ T806] process 'syz.0.168' launched './file0' with NULL argv: empty string added [ 39.720540][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 39.720558][ T36] audit: type=1400 audit(1784055778.540:222): avc: denied { execute_no_trans } for pid=805 comm="syz.0.168" path="/91/file0" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.771775][ T814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 39.814777][ T36] audit: type=1400 audit(1784055778.630:223): avc: denied { setopt } for pid=824 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.835926][ T36] audit: type=1400 audit(1784055778.660:224): avc: denied { getopt } for pid=824 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.857193][ T36] audit: type=1400 audit(1784055778.680:225): avc: denied { ioctl } for pid=824 comm="syz.0.174" path="socket:[8606]" dev="sockfs" ino=8606 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.036683][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 40.082007][ T796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.091092][ T796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.102412][ T399] hid (null): unknown global tag 0xd [ 40.109340][ T399] hid (null): unknown global tag 0xe [ 40.114841][ T399] hid (null): unknown global tag 0xc [ 40.122471][ T399] hid (null): bogus close delimiter [ 40.131474][ T399] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0006/input/input7 [ 40.145615][ T399] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0006/input/input8 [ 40.162819][ T399] kye 0003:0458:5011.0006: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 40.195505][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 40.202394][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.225714][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 146, changing to 7 [ 40.241045][ T10] usb 3-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 40.250425][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.258653][ T10] usb 3-1: Product: syz [ 40.262960][ T10] usb 3-1: Manufacturer: syz [ 40.267891][ T10] usb 3-1: SerialNumber: syz [ 40.326865][ T326] usb 4-1: USB disconnect, device number 9 [ 40.428414][ T845] veth1_to_bond: entered allmulticast mode [ 40.434552][ T845] veth1_to_bond: entered promiscuous mode [ 40.441386][ T845] veth1_to_bond: left promiscuous mode [ 40.447170][ T845] veth1_to_bond: left allmulticast mode [ 40.451192][ T36] audit: type=1400 audit(1784055779.270:226): avc: denied { write } for pid=846 comm="syz.1.181" name="001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.544245][ T36] audit: type=1400 audit(1784055779.360:227): avc: denied { ioctl } for pid=850 comm="syz.0.183" path="socket:[8822]" dev="sockfs" ino=8822 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.568599][ T36] audit: type=1400 audit(1784055779.370:228): avc: denied { bind } for pid=850 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.588302][ T36] audit: type=1400 audit(1784055779.370:229): avc: denied { read } for pid=850 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.715379][ T399] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 40.853170][ T863] FAULT_INJECTION: forcing a failure. [ 40.853170][ T863] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 40.866559][ T863] CPU: 0 UID: 0 PID: 863 Comm: syz.3.187 Not tainted syzkaller #0 a506770653dd131ce1f6b755c8f096a645f29717 [ 40.866602][ T863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 40.866617][ T863] Call Trace: [ 40.866625][ T863] [ 40.866634][ T863] __dump_stack+0x21/0x30 [ 40.866674][ T863] dump_stack_lvl+0x140/0x1c0 [ 40.866707][ T863] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.866740][ T863] ? check_stack_object+0x138/0x150 [ 40.866765][ T863] dump_stack+0x19/0x20 [ 40.866796][ T863] should_fail_ex+0x3c2/0x510 [ 40.866822][ T863] should_fail+0xf/0x20 [ 40.866846][ T863] should_fail_usercopy+0x1e/0x30 [ 40.866873][ T863] _copy_to_user+0x24/0xa0 [ 40.866904][ T863] simple_read_from_buffer+0xed/0x160 [ 40.866936][ T863] proc_fail_nth_read+0x1aa/0x220 [ 40.866969][ T863] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 40.867003][ T863] ? bpf_lsm_file_permission+0xd/0x20 [ 40.867033][ T863] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 40.867065][ T863] vfs_read+0x288/0xc70 [ 40.867088][ T863] ? __cfi_vfs_read+0x10/0x10 [ 40.867111][ T863] ? __kasan_check_write+0x18/0x20 [ 40.867133][ T863] ? mutex_lock+0x97/0x1d0 [ 40.867162][ T863] ? __cfi_mutex_lock+0x10/0x10 [ 40.867196][ T863] ksys_read+0x145/0x260 [ 40.867218][ T863] ? __cfi_ksys_read+0x10/0x10 [ 40.867242][ T863] ? __kasan_check_read+0x15/0x20 [ 40.867265][ T863] __x64_sys_read+0x7f/0x90 [ 40.867288][ T863] x64_sys_call+0x2638/0x2ee0 [ 40.867309][ T863] do_syscall_64+0x57/0xf0 [ 40.867333][ T863] ? clear_bhb_loop+0x50/0xa0 [ 40.867362][ T863] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.867391][ T863] RIP: 0033:0x7fe41a75e68e [ 40.867410][ T863] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 40.867429][ T863] RSP: 002b:00007fe41b600fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 40.867452][ T863] RAX: ffffffffffffffda RBX: 00007fe41b6016c0 RCX: 00007fe41a75e68e [ 40.867469][ T863] RDX: 000000000000000f RSI: 00007fe41b6010a0 RDI: 0000000000000003 [ 40.867483][ T863] RBP: 00007fe41b601090 R08: 0000000000000000 R09: 0000000000000000 [ 40.867497][ T863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.867510][ T863] R13: 00007fe41aa26038 R14: 00007fe41aa25fa0 R15: 00007ffc1999bec8 [ 40.867529][ T863] [ 41.136585][ T399] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.146896][ T399] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.158962][ T399] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 41.168432][ T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.176706][ T399] usb 2-1: Product: syz [ 41.181025][ T399] usb 2-1: Manufacturer: syz [ 41.185742][ T399] usb 2-1: SerialNumber: syz [ 41.220924][ T871] netlink: 68 bytes leftover after parsing attributes in process `syz.0.191'. [ 41.246742][ T36] audit: type=1400 audit(1784055780.070:230): avc: denied { getopt } for pid=872 comm="syz.0.192" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.281361][ T877] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.322089][ T885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=885 comm=syz.0.195 [ 41.365397][ T326] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 41.449388][ T847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.458131][ T847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.469665][ T399] usb 2-1: unit 4 not found! [ 41.478272][ T399] usb 2-1: USB disconnect, device number 11 [ 41.488596][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.516614][ T326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.527844][ T326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.537656][ T326] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 41.550622][ T326] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 41.560014][ T326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.569920][ T326] usb 4-1: config 0 descriptor?? [ 41.874960][ T36] audit: type=1400 audit(1784055780.690:231): avc: denied { create } for pid=887 comm="syz.0.196" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 41.986219][ T326] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 41.999263][ T326] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 42.007720][ T326] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 42.015339][ T326] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 42.023035][ T326] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 42.023333][ T906] fuse: Bad value for 'rootmode' [ 42.035744][ T326] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 42.046792][ T326] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 42.057108][ T326] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 42.066891][ T326] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 42.075858][ T326] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 42.083376][ T326] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 42.091559][ T326] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 42.102854][ T326] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 42.236293][ T9] usb 4-1: USB disconnect, device number 10 [ 42.316217][ T399] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 42.467211][ T399] usb 2-1: config 1 interface 0 altsetting 64 bulk endpoint 0x1 has invalid maxpacket 64 [ 42.477223][ T399] usb 2-1: config 1 interface 0 has no altsetting 0 [ 42.485415][ T399] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 42.494512][ T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.502713][ T399] usb 2-1: Product: syz [ 42.506946][ T399] usb 2-1: Manufacturer: syz [ 42.511648][ T399] usb 2-1: SerialNumber: syz [ 42.517594][ T906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 42.729015][ T399] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 64 proto 2 vid 0x04B8 pid 0x0202 [ 42.741619][ T399] usb 2-1: USB disconnect, device number 12 [ 42.749525][ T399] usblp0: removed [ 42.853676][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 42.870285][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 42.884112][ T10] usb 3-1: USB disconnect, device number 10 [ 42.899940][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.005417][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 43.155472][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 43.161894][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 43.170360][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 43.179981][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 43.189157][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 43.201063][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 43.211012][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 43.224201][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 43.240319][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.255439][ T9] usb 4-1: config 0 descriptor?? [ 43.465467][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 43.477924][ T9] usb 4-1: USB disconnect, device number 11 [ 43.485393][ T9] usblp0: removed [ 43.505456][ T319] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 43.525400][ T326] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 43.655501][ T319] usb 2-1: Using ep0 maxpacket: 32 [ 43.662453][ T319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 43.672488][ T319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.684385][ T319] usb 2-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 43.694003][ T326] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 43.703188][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.711291][ T319] usb 2-1: Product: syz [ 43.715612][ T326] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 43.723636][ T326] usb 3-1: Product: syz [ 43.727957][ T319] usb 2-1: Manufacturer: syz [ 43.732582][ T319] usb 2-1: SerialNumber: syz [ 43.738137][ T326] usb 3-1: config 0 descriptor?? [ 43.744746][ T326] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 43.752841][ T326] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 43.905394][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 43.948444][ T945] tap0: tun_chr_ioctl cmd 1074025677 [ 43.953912][ T945] tap0: linktype set to 768 [ 43.959111][ T945] tap0: tun_chr_ioctl cmd 35108 [ 44.002016][ T326] usb 3-1: USB disconnect, device number 11 [ 44.008860][ T326] ftdi_sio 3-1:0.0: device disconnected [ 44.055378][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 44.062037][ T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 44.071066][ T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 44.080895][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 44.090110][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 44.104535][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 44.118433][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.118592][ T319] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 44.131501][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 44.146498][ T319] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 44.150683][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.170258][ T9] usb 4-1: config 0 descriptor?? [ 44.175715][ T319] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 44.186469][ T319] usb 2-1: USB disconnect, device number 13 [ 44.201796][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.377718][ T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 44.507836][ T975] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.516512][ T975] netlink: 'syz.0.221': attribute type 1 has an invalid length. [ 44.524599][ T975] netlink: 9 bytes leftover after parsing attributes in process `syz.0.221'. [ 44.551256][ T977] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 44.759285][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 44.759315][ T36] audit: type=1400 audit(1784055783.580:247): avc: denied { mounton } for pid=990 comm="syz.1.228" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 44.789216][ T36] audit: type=1400 audit(1784055783.580:248): avc: denied { mount } for pid=990 comm="syz.1.228" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 44.935439][ T319] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 45.079073][ T36] audit: type=1400 audit(1784055783.900:249): avc: denied { read write } for pid=912 comm="syz.3.204" name="lp0" dev="devtmpfs" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 45.102724][ T36] audit: type=1400 audit(1784055783.900:250): avc: denied { open } for pid=912 comm="syz.3.204" path="/dev/usb/lp0" dev="devtmpfs" ino=542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 45.107845][ T319] usb 3-1: Using ep0 maxpacket: 16 [ 45.132480][ T326] usb 4-1: USB disconnect, device number 12 [ 45.139543][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 45.146201][ T326] usblp0: removed [ 45.168010][ T319] usb 3-1: unable to get BOS descriptor or descriptor too short [ 45.185399][ T319] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.197465][ T319] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 45.206620][ T319] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 67, changing to 7 [ 45.219138][ T319] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 45.228529][ T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.236947][ T319] usb 3-1: Product: syz [ 45.241194][ T319] usb 3-1: Manufacturer: syz [ 45.245917][ T319] usb 3-1: SerialNumber: syz [ 45.301093][ T1007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 45.349462][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.360497][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.370458][ T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 45.379591][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.392825][ T9] usb 2-1: config 0 descriptor?? [ 45.463287][ T989] netlink: 'syz.2.227': attribute type 27 has an invalid length. [ 45.485500][ T326] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 45.639053][ T319] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 45.647921][ T326] usb 4-1: Using ep0 maxpacket: 16 [ 45.653216][ T319] usb 3-1: found format II with max.bitrate = 128, frame size=3249 [ 45.662405][ T319] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 45.669035][ T326] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 45.679603][ T326] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.691110][ T319] usb 3-1: 0:2 : does not exist [ 45.696356][ T319] usb 3-1: unit 6 not found! [ 45.701082][ T326] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.715878][ T319] usb 3-1: USB disconnect, device number 12 [ 45.723310][ T326] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 45.736651][ T326] usb 4-1: config 7 interface 0 has no altsetting 0 [ 45.746189][ T326] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 45.755978][ T326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.004364][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 46.015414][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 46.036075][ T9] usb 2-1: USB disconnect, device number 14 [ 46.128967][ T1030] overlayfs: failed to clone upperpath [ 46.334534][ T36] audit: type=1400 audit(1784055785.150:251): avc: denied { name_bind } for pid=1000 comm="syz.3.232" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 46.359545][ T326] hid (null): bogus close delimiter [ 46.370554][ T326] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0008/input/input9 [ 46.386156][ T326] kye 0003:0458:5010.0008: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 46.528968][ T36] audit: type=1400 audit(1784055785.350:252): avc: denied { mounton } for pid=1043 comm="syz.1.246" path="/syzcgroup/unified/syz1" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 46.529969][ T1044] syz.1.246: attempt to access beyond end of device [ 46.529969][ T1044] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 46.564992][ T1044] EXT4-fs (loop1): unable to read superblock [ 46.567446][ T9] usb 4-1: USB disconnect, device number 13 [ 46.707897][ T1054] overlayfs: failed to clone upperpath [ 46.865467][ T319] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 47.015391][ T319] usb 2-1: Using ep0 maxpacket: 32 [ 47.021730][ T319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.031973][ T319] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 47.041042][ T319] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 47.052177][ T319] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 47.065619][ T319] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 47.075718][ T319] usb 2-1: config 1 interface 1 has no altsetting 0 [ 47.083966][ T319] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 47.093241][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.101385][ T319] usb 2-1: Product: syz [ 47.105744][ T319] usb 2-1: Manufacturer: syz [ 47.110438][ T319] usb 2-1: SerialNumber: syz [ 47.155728][ T1058] tmpfs: Bad value for 'gid' [ 47.160402][ T1058] tmpfs: Bad value for 'gid' [ 47.177553][ T1058] loop6: detected capacity change from 0 to 9 [ 47.185711][ C0] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 2 [ 47.224143][ T1061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1061 comm=syz.2.254 [ 47.253442][ T36] audit: type=1400 audit(1784055786.070:253): avc: denied { mount } for pid=1062 comm="syz.0.255" name="/" dev="ramfs" ino=9431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 47.281051][ T36] audit: type=1400 audit(1784055786.100:254): avc: denied { accept } for pid=1062 comm="syz.0.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.318338][ T1050] tmpfs: Invalid gid '0x00000000ffffffff' [ 47.327527][ T1050] GUP no longer grows the stack in syz.1.249 (1050): 200000005000-200000008000 (200000004000) [ 47.338326][ T1050] CPU: 1 UID: 0 PID: 1050 Comm: syz.1.249 Not tainted syzkaller #0 a506770653dd131ce1f6b755c8f096a645f29717 [ 47.338370][ T1050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 47.338387][ T1050] Call Trace: [ 47.338394][ T1050] [ 47.338403][ T1050] __dump_stack+0x21/0x30 [ 47.338444][ T1050] dump_stack_lvl+0x140/0x1c0 [ 47.338486][ T1050] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.338519][ T1050] ? find_vma+0xd3/0x120 [ 47.338545][ T1050] dump_stack+0x19/0x20 [ 47.338576][ T1050] fixup_user_fault+0x616/0x6a0 [ 47.338608][ T1050] fault_in_user_writeable+0x75/0xe0 [ 47.338640][ T1050] futex_lock_pi+0x2ed/0xa70 [ 47.338674][ T1050] ? plist_check_list+0x2a8/0x2c0 [ 47.338703][ T1050] ? __cfi_futex_lock_pi+0x10/0x10 [ 47.338736][ T1050] ? plist_del+0x3f0/0x410 [ 47.338760][ T1050] ? __kasan_check_write+0x18/0x20 [ 47.338783][ T1050] ? wake_up_q+0x10a/0x1c0 [ 47.338822][ T1050] ? __cfi_futex_wake_mark+0x10/0x10 [ 47.338863][ T1050] do_futex+0x270/0x510 [ 47.338896][ T1050] ? __cfi_do_futex+0x10/0x10 [ 47.338925][ T1050] ? __vm_munmap+0x30d/0x3d0 [ 47.338949][ T1050] __se_sys_futex+0x13c/0x320 [ 47.338980][ T1050] ? __x64_sys_futex+0x110/0x110 [ 47.339012][ T1050] ? __kasan_check_write+0x18/0x20 [ 47.339032][ T1050] __x64_sys_futex+0xe9/0x110 [ 47.339062][ T1050] x64_sys_call+0x227f/0x2ee0 [ 47.339083][ T1050] do_syscall_64+0x57/0xf0 [ 47.339108][ T1050] ? clear_bhb_loop+0x50/0xa0 [ 47.339139][ T1050] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.339167][ T1050] RIP: 0033:0x7fa5a919de59 [ 47.339186][ T1050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.339207][ T1050] RSP: 002b:00007fa5a7bf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 47.339233][ T1050] RAX: ffffffffffffffda RBX: 00007fa5a9425fa0 RCX: 00007fa5a919de59 [ 47.339250][ T1050] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 47.339265][ T1050] RBP: 00007fa5a9233e6f R08: 0000000000000000 R09: 0000000000000001 [ 47.339280][ T1050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.339293][ T1050] R13: 00007fa5a9426038 R14: 00007fa5a9425fa0 R15: 00007ffebc9cf458 [ 47.339313][ T1050] [ 47.595360][ T319] usb 2-1: selecting invalid altsetting 0 [ 47.601482][ T319] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 47.608650][ T319] usb 2-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 47.624522][ T319] usb 2-1: USB disconnect, device number 15 [ 47.639544][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.672419][ T1077] netlink: 148 bytes leftover after parsing attributes in process `syz.2.261'. [ 47.736522][ T1081] kvm: MWAIT instruction emulated as NOP! [ 48.045429][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 48.159119][ T36] audit: type=1400 audit(1784055786.980:255): avc: denied { read } for pid=1099 comm="syz.1.269" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.182535][ T36] audit: type=1400 audit(1784055786.980:256): avc: denied { open } for pid=1099 comm="syz.1.269" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.184836][ T1100] SELinux: failed to load policy [ 48.211014][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 48.226475][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.240710][ T1104] fuse: Invalid rootmode [ 48.255351][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.272861][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 48.283038][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.291181][ T9] usb 3-1: Product: syz [ 48.295635][ T9] usb 3-1: Manufacturer: syz [ 48.300326][ T9] usb 3-1: SerialNumber: syz [ 48.315386][ T1104] overlay: ./file0 is not a directory [ 48.367852][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 48.515202][ T9] usb 3-1: 0:2 : does not exist [ 48.521266][ T9] usb 3-1: unit 9 not found! [ 48.526447][ T10] usb 4-1: too many configurations: 207, using maximum allowed: 8 [ 48.536348][ T9] usb 3-1: USB disconnect, device number 13 [ 48.544680][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.554071][ T10] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 48.571603][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.579829][ T10] usb 4-1: Product: syz [ 48.584169][ T10] usb 4-1: Manufacturer: syz [ 48.588867][ T10] usb 4-1: SerialNumber: syz [ 48.625399][ T319] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 48.775386][ T319] usb 2-1: Using ep0 maxpacket: 32 [ 48.782073][ T319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 48.790915][ T319] usb 2-1: config 26 has an invalid interface number: 24 but max is 0 [ 48.799362][ T319] usb 2-1: config 26 has no interface number 0 [ 48.805609][ T319] usb 2-1: config 26 interface 24 altsetting 255 endpoint 0x8 has invalid maxpacket 991, setting to 64 [ 48.817194][ T319] usb 2-1: config 26 interface 24 altsetting 255 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 48.828786][ T319] usb 2-1: config 26 interface 24 has no altsetting 0 [ 48.837543][ T319] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice=d7.a9 [ 48.846720][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.854911][ T319] usb 2-1: Product: syz [ 48.859180][ T319] usb 2-1: Manufacturer: syz [ 48.863953][ T319] usb 2-1: SerialNumber: syz [ 49.009735][ T549] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.016341][ T549] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.085971][ T319] usbhid 2-1:26.24: couldn't find an input interrupt endpoint [ 49.099896][ T319] usb 2-1: USB disconnect, device number 16 [ 49.285501][ T397] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 49.405384][ T319] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 49.435414][ T397] usb 3-1: Using ep0 maxpacket: 32 [ 49.441847][ T397] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 49.450136][ T397] usb 3-1: config 0 has no interface number 0 [ 49.456324][ T397] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 49.466608][ T397] usb 3-1: config 0 interface 196 has no altsetting 0 [ 49.474984][ T397] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 49.484161][ T397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.492375][ T397] usb 3-1: Product: syz [ 49.496626][ T397] usb 3-1: Manufacturer: syz [ 49.501272][ T397] usb 3-1: SerialNumber: syz [ 49.506859][ T397] usb 3-1: config 0 descriptor?? [ 49.512290][ T1120] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 49.556927][ T319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 49.565160][ T319] usb 2-1: not running at top speed; connect to a high speed hub [ 49.573747][ T319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.584872][ T319] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.595382][ T319] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.604604][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.612937][ T319] usb 2-1: Product: syz [ 49.617192][ T319] usb 2-1: Manufacturer: syz [ 49.621999][ T319] usb 2-1: SerialNumber: syz [ 49.829553][ T1125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.838300][ T1125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.956454][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 49.956473][ T36] audit: type=1400 audit(1784055788.780:260): avc: denied { ioctl } for pid=1129 comm="syz.0.281" path="socket:[10609]" dev="sockfs" ino=10609 ioctlcmd=0xae7b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.049606][ T319] usb 2-1: 0:2 : does not exist [ 50.057392][ T319] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 50.069618][ T319] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 50.079559][ T319] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 50.089750][ T319] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 50.101268][ T319] usb 2-1: USB disconnect, device number 17 [ 50.112863][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.130519][ T397] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -32 [ 50.139511][ T397] ipheth 3-1:0.196: probe with driver ipheth failed with error -32 [ 50.275750][ T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: f6:47:44:fa:f7:9b [ 50.287596][ T10] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 50.320140][ T36] audit: type=1400 audit(1784055789.140:261): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.341981][ T36] audit: type=1400 audit(1784055789.160:262): avc: denied { read } for pid=149 comm="dhcpcd" name="n16" dev="tmpfs" ino=1493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.363786][ T36] audit: type=1400 audit(1784055789.160:263): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.387696][ T36] audit: type=1400 audit(1784055789.160:264): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.417225][ T36] audit: type=1400 audit(1784055789.240:265): avc: denied { read } for pid=1133 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.440466][ T36] audit: type=1400 audit(1784055789.240:266): avc: denied { open } for pid=1133 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.465477][ T36] audit: type=1400 audit(1784055789.240:267): avc: denied { getattr } for pid=1133 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.527239][ T36] audit: type=1400 audit(1784055789.350:268): avc: denied { ioctl } for pid=1144 comm="syz.0.283" path="socket:[10625]" dev="sockfs" ino=10625 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.577493][ T36] audit: type=1400 audit(1784055789.370:269): avc: denied { write } for pid=1132 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.663842][ T149] usb 4-1: device reset failed [ 51.075437][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.082455][ T1118] Bluetooth: hci0: command 0x1003 tx timeout [ 51.090510][ C1] usb 4-1: eth1: intr status -71 [ 51.090785][ T10] usb 4-1: USB disconnect, device number 14 [ 51.470264][ T1177] netlink: 'syz.0.288': attribute type 46 has an invalid length. [ 51.855453][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 52.005398][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 52.011906][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.023108][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.032895][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 52.045944][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 52.055203][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.064416][ T10] usb 2-1: config 0 descriptor?? [ 52.069888][ T397] usb 3-1: USB disconnect, device number 14 [ 52.278218][ T1189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.287161][ T1189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.455400][ T397] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 52.605424][ T397] usb 3-1: Using ep0 maxpacket: 32 [ 52.611962][ T397] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 52.620188][ T397] usb 3-1: config 2 has no interface number 0 [ 52.626398][ T397] usb 3-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 52.636522][ T397] usb 3-1: config 2 interface 88 has no altsetting 0 [ 52.645086][ T397] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 52.654217][ T397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 52.662402][ T397] usb 3-1: Product: syz [ 52.666657][ T397] usb 3-1: Manufacturer: syz [ 52.671302][ T397] usb 3-1: SerialNumber: syz [ 52.678668][ T1205] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 52.715416][ T326] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 52.866522][ T326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.877545][ T326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.887377][ T326] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 52.891152][ T1205] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 52.896901][ T326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.912908][ T326] usb 4-1: config 0 descriptor?? [ 52.992637][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 52.999070][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 53.008527][ T10] usb 2-1: USB disconnect, device number 18 [ 53.066664][ T1210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=1210 comm=syz.1.300 [ 53.121108][ T326] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 53.128169][ T326] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 53.135180][ T326] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 53.142234][ T326] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 53.149388][ T326] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 53.156465][ T326] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 53.163364][ T326] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 53.171238][ T326] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 53.198365][ T1214] sit0: entered promiscuous mode [ 53.206998][ T1214] netlink: 'syz.1.301': attribute type 1 has an invalid length. [ 53.215179][ T1214] netlink: 1 bytes leftover after parsing attributes in process `syz.1.301'. [ 53.339719][ T326] arvo 0003:1E7D:30D4.0009: couldn't init struct arvo_device [ 53.358401][ T326] arvo 0003:1E7D:30D4.0009: couldn't install keyboard [ 53.366713][ T326] arvo 0003:1E7D:30D4.0009: probe with driver arvo failed with error -71 [ 53.386937][ T326] usb 4-1: USB disconnect, device number 15 [ 53.407904][ T1227] fuse: Bad value for 'user_id' [ 53.412869][ T1227] fuse: Bad value for 'user_id' [ 53.641185][ T1233] netlink: 188 bytes leftover after parsing attributes in process `syz.1.304'. [ 53.718254][ T1205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.727255][ T1205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.895421][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 54.025392][ T319] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 54.056497][ T9] usb 2-1: config 32 has an invalid interface number: 255 but max is 0 [ 54.064951][ T9] usb 2-1: config 32 has no interface number 0 [ 54.071217][ T9] usb 2-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 54.082569][ T9] usb 2-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 54.096183][ T9] usb 2-1: config 32 interface 255 has no altsetting 0 [ 54.103365][ T9] usb 2-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 54.112706][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.138541][ T397] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 54.150360][ T397] asix 3-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 54.160994][ T397] asix 3-1:2.88: probe with driver asix failed with error -71 [ 54.171048][ T397] usb 3-1: USB disconnect, device number 15 [ 54.185369][ T319] usb 4-1: Using ep0 maxpacket: 32 [ 54.192073][ T319] usb 4-1: unable to get BOS descriptor or descriptor too short [ 54.200649][ T319] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 191, changing to 7 [ 54.213332][ T319] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 54.222633][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.230693][ T319] usb 4-1: Product: syz [ 54.235089][ T319] usb 4-1: Manufacturer: syz [ 54.239778][ T319] usb 4-1: SerialNumber: syz [ 54.323599][ T9] usb 2-1: string descriptor 0 read error: -71 [ 54.330516][ T9] usb-storage 2-1:32.255: USB Mass Storage device detected [ 54.339444][ T9] usb-storage 2-1:32.255: Quirks match for vid 057b pid 0000: 1 [ 54.368230][ T9] usb 2-1: USB disconnect, device number 19 [ 54.450255][ T319] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.457312][ T319] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 54.466732][ T319] usb 4-1: USB disconnect, device number 16 [ 54.480072][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.843144][ T1245] syzkaller1: entered promiscuous mode [ 54.849026][ T1245] syzkaller1: entered allmulticast mode [ 54.855482][ T549] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 54.905499][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 55.055455][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 55.062109][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.073123][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 55.086130][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 55.095322][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.095477][ T397] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 55.112330][ T9] usb 3-1: config 0 descriptor?? [ 55.138679][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 55.138699][ T36] audit: type=1400 audit(1784055793.960:279): avc: denied { cmd } for pid=1257 comm="iou-wrk-1258" path="socket:[10166]" dev="sockfs" ino=10166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 55.196908][ T36] audit: type=1400 audit(1784055794.020:280): avc: denied { read } for pid=1262 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.266752][ T397] usb 2-1: unable to get BOS descriptor or descriptor too short [ 55.275247][ T397] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.285461][ T397] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 55.294511][ T397] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 55.325373][ T397] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 55.355358][ T397] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 55.375347][ T397] usb 2-1: config 1 interface 1 has no altsetting 0 [ 55.384145][ T397] usb 2-1: string descriptor 0 read error: -22 [ 55.390686][ T397] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 55.415423][ T397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.526433][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000A/input/input10 [ 55.564442][ T9] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 55.637229][ T397] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 55.682361][ T1273] overlay: Unknown parameter '/file0' [ 55.721856][ T36] audit: type=1400 audit(1784055794.540:281): avc: denied { listen } for pid=1242 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 55.724148][ T326] usb 3-1: USB disconnect, device number 16 [ 55.845729][ T397] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 55.865620][ T397] usb 2-1: USB disconnect, device number 20 [ 56.260250][ T1278] Invalid logical block size (-3) [ 56.266022][ T1279] Invalid logical block size (-3) [ 56.275196][ T1278] netlink: 76 bytes leftover after parsing attributes in process `syz.2.316'. [ 56.285408][ T1279] netlink: 76 bytes leftover after parsing attributes in process `syz.2.316'. [ 56.525437][ T397] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 56.535413][ T326] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 56.635418][ T65] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 56.677283][ T397] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.687659][ T397] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 56.696741][ T397] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 56.705494][ T326] usb 3-1: Using ep0 maxpacket: 32 [ 56.710694][ T397] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 56.713023][ T326] usb 3-1: config 2 has an invalid interface number: 194 but max is 0 [ 56.721467][ T397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.731396][ T326] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 56.738380][ T397] usb 4-1: Product: syz [ 56.748788][ T326] usb 3-1: config 2 has no interface number 0 [ 56.752915][ T397] usb 4-1: Manufacturer: syz [ 56.759184][ T326] usb 3-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 65 [ 56.763646][ T397] usb 4-1: SerialNumber: syz [ 56.773815][ T326] usb 3-1: config 2 interface 194 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 56.791167][ T326] usb 3-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 56.800448][ T326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.809780][ T1278] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 56.815629][ T65] usb 2-1: Using ep0 maxpacket: 8 [ 56.823193][ T65] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 145, changing to 7 [ 56.834444][ T65] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 56.845732][ T65] usb 2-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice= 0.40 [ 56.854865][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.862931][ T65] usb 2-1: Product: syz [ 56.867220][ T65] usb 2-1: Manufacturer: syz [ 56.871859][ T65] usb 2-1: SerialNumber: syz [ 56.995399][ T397] usb 4-1: USB disconnect, device number 17 [ 57.013198][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.029621][ T326] usb 3-1: string descriptor 0 read error: -71 [ 57.043882][ T326] usb 3-1: USB disconnect, device number 17 [ 57.079802][ T1283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.089567][ T1283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.100952][ T65] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 57.111271][ T65] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 57.123770][ T65] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 57.133571][ T65] usb 2-1: USB disconnect, device number 21 [ 57.147202][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.555791][ T36] audit: type=1400 audit(1784055796.380:282): avc: denied { create } for pid=1288 comm="syz.2.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.594382][ T36] audit: type=1400 audit(1784056052.401:283): avc: denied { connect } for pid=1291 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.663870][ T1292] tipc: Started in network mode [ 57.668947][ T1292] tipc: Node identity 2007ff, cluster identity 4711 [ 57.675872][ T1292] tipc: Node number set to 2099199 [ 57.686284][ T36] audit: type=1400 audit(1784056052.501:284): avc: denied { relabelfrom } for pid=1291 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 57.706412][ T36] audit: type=1400 audit(1784056052.501:285): avc: denied { relabelto } for pid=1291 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 57.754910][ T36] audit: type=1400 audit(1784056052.561:286): avc: denied { create } for pid=1291 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 57.780414][ T1292] /dev/nullb0: Can't lookup blockdev [ 57.929156][ T36] audit: type=1400 audit(1784056052.741:287): avc: denied { write } for pid=1313 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 57.953208][ T36] audit: type=1400 audit(1784056052.761:288): avc: denied { read write } for pid=1316 comm="syz.2.329" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.976304][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 58.105438][ T9] usb 2-1: device descriptor read/64, error -71 [ 58.355414][ T9] usb 2-1: device descriptor read/64, error -71 [ 58.405443][ T65] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 58.556701][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.567770][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.577629][ T65] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 58.587030][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.596222][ T65] usb 3-1: config 0 descriptor?? [ 58.605395][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 58.735379][ T9] usb 2-1: device descriptor read/64, error -71 [ 58.777082][ T326] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 58.790985][ T1333] overlayfs: failed to clone upperpath [ 58.935449][ T326] usb 4-1: Using ep0 maxpacket: 16 [ 58.943312][ T326] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 58.952718][ T326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.960842][ T326] usb 4-1: Product: syz [ 58.965123][ T326] usb 4-1: Manufacturer: syz [ 58.969880][ T326] usb 4-1: SerialNumber: syz [ 58.975378][ T9] usb 2-1: device descriptor read/64, error -71 [ 58.975725][ T326] usb 4-1: config 0 descriptor?? [ 58.987932][ T326] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 58.995969][ T326] usb 4-1: Detected FT-X [ 59.004476][ T1327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.013246][ T1327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.085588][ T9] usb usb2-port1: attempt power cycle [ 59.189970][ T326] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 59.197213][ T326] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 59.204383][ T326] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 59.211933][ T326] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 59.221319][ T326] usb 4-1: USB disconnect, device number 18 [ 59.229297][ T326] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 59.239448][ T326] ftdi_sio 4-1:0.0: device disconnected [ 59.425424][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 59.446514][ T9] usb 2-1: device descriptor read/8, error -71 [ 59.576545][ T9] usb 2-1: device descriptor read/8, error -71 [ 59.811526][ T1350] tc_dump_action: action bad kind [ 59.816709][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 59.846845][ T9] usb 2-1: device descriptor read/8, error -71 [ 59.976551][ T9] usb 2-1: device descriptor read/8, error -71 [ 60.065383][ T397] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 60.085684][ T9] usb usb2-port1: unable to enumerate USB device [ 60.226574][ T397] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 60.238082][ T397] usb 4-1: config 0 interface 0 has no altsetting 0 [ 60.244748][ T397] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 60.253865][ T397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.263105][ T397] usb 4-1: config 0 descriptor?? [ 60.441711][ T1363] batadv_slave_1: entered promiscuous mode [ 60.449200][ T1363] netlink: 'syz.0.349': attribute type 3 has an invalid length. [ 60.459847][ T1362] batadv_slave_1: left promiscuous mode [ 60.469993][ T1350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.479008][ T1350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.820501][ T1379] bpf: Bad value for 'gid' [ 60.950044][ T397] usbhid 4-1:0.0: can't add hid device: -71 [ 60.956885][ T397] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 60.965736][ T397] usb 4-1: USB disconnect, device number 19 [ 61.101162][ T65] usbhid 3-1:0.0: can't add hid device: -71 [ 61.110575][ T65] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 61.120138][ T65] usb 3-1: USB disconnect, device number 18 [ 61.127362][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 61.127382][ T36] audit: type=1400 audit(1784056055.941:304): avc: denied { read } for pid=1382 comm="syz.2.355" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.157838][ T9] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 61.169034][ T36] audit: type=1400 audit(1784056055.941:305): avc: denied { open } for pid=1382 comm="syz.2.355" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.193395][ T36] audit: type=1400 audit(1784056055.941:306): avc: denied { ioctl } for pid=1382 comm="syz.2.355" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.231939][ T1390] netlink: 'syz.2.357': attribute type 4 has an invalid length. [ 61.241114][ T36] audit: type=1400 audit(1784056056.061:307): avc: denied { append } for pid=1389 comm="syz.2.357" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.335424][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 61.468018][ T9] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 61.515477][ T36] audit: type=1400 audit(1784056056.331:308): avc: denied { bind } for pid=1417 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.560121][ T36] audit: type=1400 audit(1784056056.371:309): avc: denied { create } for pid=1407 comm="syz.3.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 61.635598][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 61.642403][ T9] usb usb2-port1: attempt power cycle [ 61.705813][ T36] audit: type=1400 audit(1784056056.521:310): avc: denied { write } for pid=1437 comm="syz.3.363" path="socket:[11552]" dev="sockfs" ino=11552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.005516][ T9] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 62.025780][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 62.065389][ T397] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 62.155426][ T9] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 62.175869][ T9] usb 2-1: Invalid ep0 maxpacket: 16 [ 62.181327][ T9] usb usb2-port1: unable to enumerate USB device [ 62.195478][ T397] usb 3-1: device descriptor read/64, error -71 [ 62.435428][ T397] usb 3-1: device descriptor read/64, error -71 [ 62.516605][ T1447] SELinux: Context ϧ is not valid (left unmapped). [ 62.525805][ T36] audit: type=1400 audit(1784056057.341:311): avc: denied { wake_alarm } for pid=1446 comm="syz.3.366" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.630680][ T1466] netlink: 'syz.0.373': attribute type 12 has an invalid length. [ 62.685428][ T397] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 62.795418][ T65] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 62.815409][ T397] usb 3-1: device descriptor read/64, error -71 [ 62.945429][ T65] usb 4-1: Using ep0 maxpacket: 8 [ 62.951947][ T65] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.962911][ T65] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 62.972725][ T65] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 62.982513][ T65] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 62.992988][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 63.002145][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 63.010278][ T65] usb 4-1: SerialNumber: syz [ 63.016091][ T1452] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 63.023959][ T65] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 63.032463][ T65] usb-storage 4-1:1.0: USB Mass Storage device detected [ 63.040377][ T65] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 63.048560][ T65] scsi host1: usb-storage 4-1:1.0 [ 63.065418][ T397] usb 3-1: device descriptor read/64, error -71 [ 63.175514][ T397] usb usb3-port1: attempt power cycle [ 63.515441][ T397] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 63.536507][ T397] usb 3-1: device descriptor read/8, error -71 [ 63.576310][ T1472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.585380][ T1472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.598475][ T399] usb 4-1: USB disconnect, device number 20 [ 63.643635][ T36] audit: type=1400 audit(1784056058.451:312): avc: denied { setopt } for pid=1478 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.646589][ T1479] fuse: Bad value for 'fd' [ 63.663670][ T36] audit: type=1400 audit(1784056058.451:313): avc: denied { connect } for pid=1478 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.706360][ T397] usb 3-1: device descriptor read/8, error -71 [ 63.715302][ T1486] SELinux: Context system_u:object_r:iptables_exec_t:s0 is not valid (left unmapped). [ 63.785193][ T1500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=1500 comm=syz.0.383 [ 63.804811][ T1500] netlink: 32 bytes leftover after parsing attributes in process `syz.0.383'. [ 63.851941][ T1505] syzkaller1: entered promiscuous mode [ 63.857674][ T1505] syzkaller1: entered allmulticast mode [ 63.945431][ T397] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 63.966439][ T397] usb 3-1: device descriptor read/8, error -71 [ 64.096642][ T397] usb 3-1: device descriptor read/8, error -71 [ 64.205508][ T397] usb usb3-port1: unable to enumerate USB device [ 65.147378][ T1547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 65.315441][ T397] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 65.365461][ T31] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 65.465373][ T397] usb 3-1: Using ep0 maxpacket: 16 [ 65.471660][ T397] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9D, changing to 0x8D [ 65.483545][ T397] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.496420][ T397] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 65.505478][ T31] usb 4-1: device descriptor read/64, error -71 [ 65.511766][ T397] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.520501][ T397] usb 3-1: config 0 descriptor?? [ 65.745407][ T31] usb 4-1: device descriptor read/64, error -71 [ 65.985413][ T31] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 66.115381][ T31] usb 4-1: device descriptor read/64, error -71 [ 66.355425][ T31] usb 4-1: device descriptor read/64, error -71 [ 66.465493][ T31] usb usb4-port1: attempt power cycle [ 66.805408][ T31] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 66.826887][ T31] usb 4-1: device descriptor read/8, error -71 [ 66.956477][ T31] usb 4-1: device descriptor read/8, error -71 [ 67.003451][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 67.003470][ T36] audit: type=1400 audit(1784056061.811:316): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 67.138877][ T36] audit: type=1400 audit(1784056061.951:317): avc: denied { remount } for pid=1586 comm="syz.1.410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.158672][ T1588] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 67.195426][ T31] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 67.226735][ T31] usb 4-1: device descriptor read/8, error -71 [ 67.356576][ T31] usb 4-1: device descriptor read/8, error -71 [ 67.405430][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 67.465466][ T31] usb usb4-port1: unable to enumerate USB device [ 67.556519][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.567574][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.577510][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 67.586643][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.595542][ T9] usb 2-1: config 0 descriptor?? [ 68.003144][ T36] audit: type=1400 audit(1784056062.811:318): avc: denied { mounton } for pid=1591 comm="syz.1.411" path="/proc/196/task" dev="proc" ino=13379 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 68.006085][ T1592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.035064][ T1592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.051549][ T397] usbhid 3-1:0.0: can't add hid device: -71 [ 68.058552][ T397] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 68.062177][ T1597] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 68.066814][ T36] audit: type=1400 audit(1784056062.881:319): avc: denied { mount } for pid=1596 comm="syz.2.413" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 68.092459][ T1597] overlayfs: failed to look up (tracing) for ino (-66) [ 68.099738][ T397] usb 3-1: USB disconnect, device number 23 [ 68.116441][ T36] audit: type=1400 audit(1784056062.881:320): avc: denied { mounton } for pid=1596 comm="syz.2.413" path="/77/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.148628][ T36] audit: type=1400 audit(1784056062.961:321): avc: denied { validate_trans } for pid=1596 comm="syz.2.413" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 68.200768][ T36] audit: type=1400 audit(1784056063.011:322): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 68.362554][ T1621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'. [ 68.527994][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 68.540546][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 68.554122][ T9] usb 2-1: USB disconnect, device number 30 [ 68.590740][ T1626] kvm: emulating exchange as write [ 68.614494][ T1628] rust_binder: Error in use_page_slow: ESRCH [ 68.614532][ T1628] rust_binder: use_range failure ESRCH [ 68.620644][ T1628] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 68.626310][ T1628] rust_binder: Failure in copy_transaction_data: ESRCH [ 68.634084][ T1628] rust_binder: 1623:1628 transaction to 1623 failed: ESRCH [ 68.885445][ T399] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 69.035386][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 69.055457][ T399] usb 4-1: Using ep0 maxpacket: 16 [ 69.061756][ T399] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.072168][ T399] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.082646][ T399] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.091867][ T399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.100089][ T399] usb 4-1: Product: syz [ 69.104408][ T399] usb 4-1: Manufacturer: syz [ 69.109146][ T399] usb 4-1: SerialNumber: syz [ 69.186691][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 69.195154][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.205408][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.215712][ T9] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 69.224799][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.232967][ T9] usb 3-1: Product: syz [ 69.237392][ T9] usb 3-1: Manufacturer: syz [ 69.242055][ T9] usb 3-1: SerialNumber: syz [ 69.249066][ T9] usb 3-1: selecting invalid altsetting 1 [ 69.295377][ T319] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 69.318713][ T399] usb 4-1: 0:2 : does not exist [ 69.328224][ T399] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 69.339350][ T9] usb 3-1: unit 6 not found! [ 69.344187][ T9] usb 3-1: unit 2 not found! [ 69.350211][ T399] usb 4-1: USB disconnect, device number 25 [ 69.366604][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 69.387788][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 69.455395][ T319] usb 2-1: Using ep0 maxpacket: 32 [ 69.462199][ T319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 69.470679][ T319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.481842][ T319] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 69.491084][ T319] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 69.503532][ T319] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 69.512697][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.520820][ T319] usb 2-1: Product: syz [ 69.525138][ T319] usb 2-1: Manufacturer: syz [ 69.529830][ T319] usb 2-1: SerialNumber: syz [ 69.742663][ T319] usb 2-1: unit 250 not found! [ 69.747635][ T319] usb 2-1: unit 245 not found! [ 69.756503][ T319] usb 2-1: USB disconnect, device number 31 [ 69.767600][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.904179][ T1659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 70.024425][ T1662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.035175][ T1662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.445182][ T1685] netlink: 'syz.1.440': attribute type 16 has an invalid length. [ 70.453199][ T1685] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.440'. [ 70.465361][ T319] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 70.504833][ T36] audit: type=1400 audit(1784056065.311:323): avc: denied { connect } for pid=1646 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.550509][ T1694] loop2: detected capacity change from 0 to 8 [ 70.636618][ T319] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 70.646629][ T319] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 70.660583][ T319] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.669775][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 70.677995][ T319] usb 4-1: SerialNumber: syz [ 70.685430][ T1675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.859584][ T1705] rust_binder: Error while translating object. [ 70.859641][ T1705] rust_binder: Failure in copy_transaction_data: EINVAL [ 70.866182][ T1705] rust_binder: 1704:1705 transaction to 1704 failed: EINVAL [ 70.894552][ T1675] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 70.913736][ T1709] sit0: entered promiscuous mode [ 70.919169][ T1709] netlink: 'syz.3.436': attribute type 1 has an invalid length. [ 70.927121][ T1709] netlink: 1 bytes leftover after parsing attributes in process `syz.3.436'. [ 70.947343][ T319] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 70.957272][ T319] usb 4-1: USB disconnect, device number 26 [ 71.047418][ T1714] FAULT_INJECTION: forcing a failure. [ 71.047418][ T1714] name failslab, interval 1, probability 0, space 0, times 0 [ 71.060238][ T1714] CPU: 0 UID: 0 PID: 1714 Comm: syz.3.450 Not tainted syzkaller #0 a506770653dd131ce1f6b755c8f096a645f29717 [ 71.060273][ T1714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 71.060287][ T1714] Call Trace: [ 71.060294][ T1714] [ 71.060303][ T1714] __dump_stack+0x21/0x30 [ 71.060354][ T1714] dump_stack_lvl+0x140/0x1c0 [ 71.060384][ T1714] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.060415][ T1714] ? avc_has_perm+0x155/0x240 [ 71.060439][ T1714] ? __cfi_avc_has_perm+0x10/0x10 [ 71.060465][ T1714] dump_stack+0x19/0x20 [ 71.060494][ T1714] should_fail_ex+0x3c2/0x510 [ 71.060519][ T1714] should_failslab+0xac/0x100 [ 71.060547][ T1714] __kmalloc_cache_noprof+0x41/0x470 [ 71.060571][ T1714] ? vhost_task_create+0x12c/0x3f0 [ 71.060596][ T1714] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 71.060624][ T1714] vhost_task_create+0x12c/0x3f0 [ 71.060648][ T1714] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 71.060676][ T1714] ? __cfi_vhost_task_create+0x10/0x10 [ 71.060702][ T1714] ? __cfi_vhost_task_fn+0x10/0x10 [ 71.060726][ T1714] ? __kasan_check_write+0x18/0x20 [ 71.060748][ T1714] ? mutex_lock+0x97/0x1d0 [ 71.060777][ T1714] ? __cfi_mutex_lock+0x10/0x10 [ 71.060806][ T1714] ? kernel_text_address+0xa9/0xe0 [ 71.060838][ T1714] kvm_mmu_post_init_vm+0x161/0x300 [ 71.060872][ T1714] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 71.060903][ T1714] ? _parse_integer_limit+0x195/0x1e0 [ 71.060950][ T1714] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 71.060981][ T1714] ? kstrtoull+0x13b/0x1e0 [ 71.061003][ T1714] ? kstrtouint+0x78/0xf0 [ 71.061025][ T1714] ? ioctl_has_perm+0x1bc/0x500 [ 71.061046][ T1714] ? __asan_memcpy+0x5a/0x80 [ 71.061068][ T1714] ? ioctl_has_perm+0x408/0x500 [ 71.061089][ T1714] ? has_cap_mac_admin+0xd0/0xd0 [ 71.061109][ T1714] ? __kasan_check_write+0x18/0x20 [ 71.061131][ T1714] ? mutex_lock_killable+0x97/0x1d0 [ 71.061161][ T1714] ? __cfi_mutex_lock_killable+0x10/0x10 [ 71.061191][ T1714] ? proc_fail_nth_write+0x184/0x220 [ 71.061225][ T1714] kvm_vcpu_ioctl+0xa43/0x1000 [ 71.061248][ T1714] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 71.061270][ T1714] ? __cfi_vfs_write+0x10/0x10 [ 71.061292][ T1714] ? __kasan_check_write+0x18/0x20 [ 71.061314][ T1714] ? mutex_unlock+0x90/0x240 [ 71.061343][ T1714] ? __cfi_mutex_unlock+0x10/0x10 [ 71.061375][ T1714] ? bpf_lsm_file_ioctl+0xd/0x20 [ 71.061404][ T1714] ? security_file_ioctl+0x3e/0x110 [ 71.061439][ T1714] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 71.061460][ T1714] __se_sys_ioctl+0x135/0x1b0 [ 71.061487][ T1714] __x64_sys_ioctl+0x7f/0xa0 [ 71.061514][ T1714] x64_sys_call+0x1878/0x2ee0 [ 71.061534][ T1714] do_syscall_64+0x57/0xf0 [ 71.061557][ T1714] ? clear_bhb_loop+0x50/0xa0 [ 71.061588][ T1714] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.061616][ T1714] RIP: 0033:0x7fe41a79de59 [ 71.061648][ T1714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.061669][ T1714] RSP: 002b:00007fe41b601028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.061699][ T1714] RAX: ffffffffffffffda RBX: 00007fe41aa25fa0 RCX: 00007fe41a79de59 [ 71.061717][ T1714] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 71.061732][ T1714] RBP: 00007fe41b601090 R08: 0000000000000000 R09: 0000000000000000 [ 71.061746][ T1714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.061759][ T1714] R13: 00007fe41aa26038 R14: 00007fe41aa25fa0 R15: 00007ffc1999bec8 [ 71.061779][ T1714] [ 71.475404][ T399] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 71.625411][ T399] usb 2-1: Using ep0 maxpacket: 32 [ 71.632246][ T399] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 71.640711][ T399] usb 2-1: config 0 has no interface number 0 [ 71.649663][ T399] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 71.659177][ T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.667253][ T399] usb 2-1: Product: syz [ 71.671595][ T399] usb 2-1: Manufacturer: syz [ 71.676279][ T399] usb 2-1: SerialNumber: syz [ 71.682686][ T399] usb 2-1: config 0 descriptor?? [ 71.688761][ T399] smsc95xx v2.0.0 [ 71.705456][ T9] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 71.857701][ T10] usb 3-1: USB disconnect, device number 24 [ 71.866204][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 71.878893][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 71.895023][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 71.904738][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.904854][ T1724] netlink: 104 bytes leftover after parsing attributes in process `syz.2.453'. [ 71.923593][ T9] usb 4-1: config 0 descriptor?? [ 71.929526][ T1722] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 72.148526][ T399] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 72.165411][ T399] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 72.339788][ T9] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x2 [ 72.348346][ T9] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x4 [ 72.355754][ T9] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0xd [ 72.363011][ T9] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x1 [ 72.370228][ T9] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x3 [ 72.377467][ T9] konepure 0003:1E7D:2DB4.000B: unknown main item tag 0x1 [ 72.385184][ T399] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 72.396329][ T9] konepure 0003:1E7D:2DB4.000B: hidraw0: USB HID v80.09 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0 [ 72.407973][ T399] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 72.478661][ T1736] kvm: kvm [1735]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 72.488019][ T1736] kvm: kvm [1735]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 72.499760][ T1736] kvm: kvm [1735]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 72.511554][ T1736] kvm: kvm [1735]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 72.520768][ T1736] kvm: kvm [1735]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 72.547684][ T1722] raw_sendmsg: syz.3.452 forgot to set AF_INET. Fix it! [ 72.557300][ T399] usb 4-1: USB disconnect, device number 27 [ 72.825410][ T9] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 72.976710][ T9] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 72.986807][ T9] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 72.996851][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 73.005892][ T9] usb 3-1: string descriptor 0 read error: -22 [ 73.012199][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 73.021320][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.030893][ T1740] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.038435][ T1740] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 73.154113][ T1744] FAULT_INJECTION: forcing a failure. [ 73.154113][ T1744] name failslab, interval 1, probability 0, space 0, times 0 [ 73.167142][ T1744] CPU: 0 UID: 0 PID: 1744 Comm: syz.3.460 Not tainted syzkaller #0 a506770653dd131ce1f6b755c8f096a645f29717 [ 73.167179][ T1744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 73.167194][ T1744] Call Trace: [ 73.167202][ T1744] [ 73.167211][ T1744] __dump_stack+0x21/0x30 [ 73.167249][ T1744] dump_stack_lvl+0x140/0x1c0 [ 73.167280][ T1744] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.167313][ T1744] dump_stack+0x19/0x20 [ 73.167343][ T1744] should_fail_ex+0x3c2/0x510 [ 73.167369][ T1744] should_failslab+0xac/0x100 [ 73.167397][ T1744] kmem_cache_alloc_node_noprof+0x45/0x420 [ 73.167421][ T1744] ? dup_task_struct+0xc1/0xd80 [ 73.167449][ T1744] ? kasan_save_alloc_info+0x3a/0x50 [ 73.167482][ T1744] ? __kasan_kmalloc+0x96/0xb0 [ 73.167509][ T1744] ? __kmalloc_cache_noprof+0x23c/0x470 [ 73.167533][ T1744] dup_task_struct+0xc1/0xd80 [ 73.167560][ T1744] ? __kasan_check_write+0x18/0x20 [ 73.167581][ T1744] ? _raw_spin_lock_irq+0x93/0x120 [ 73.167603][ T1744] ? copy_process+0x3350/0x3350 [ 73.167632][ T1744] ? __kasan_check_write+0x18/0x20 [ 73.167660][ T1744] copy_process+0x57c/0x3350 [ 73.167691][ T1744] ? kasan_save_alloc_info+0x3a/0x50 [ 73.167716][ T1744] ? __cfi_copy_process+0x10/0x10 [ 73.167735][ T1744] ? __kmalloc_cache_noprof+0x23c/0x470 [ 73.167752][ T1744] ? __kasan_check_write+0x18/0x20 [ 73.167767][ T1744] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 73.167787][ T1744] vhost_task_create+0x1f7/0x3f0 [ 73.167804][ T1744] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 73.167824][ T1744] ? __cfi_vhost_task_create+0x10/0x10 [ 73.167842][ T1744] ? __cfi_vhost_task_fn+0x10/0x10 [ 73.167858][ T1744] ? __kasan_check_write+0x18/0x20 [ 73.167873][ T1744] ? mutex_lock+0x97/0x1d0 [ 73.167894][ T1744] ? __cfi_mutex_lock+0x10/0x10 [ 73.167914][ T1744] ? kernel_text_address+0xa9/0xe0 [ 73.167966][ T1744] kvm_mmu_post_init_vm+0x161/0x300 [ 73.168000][ T1744] kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0 [ 73.168030][ T1744] ? _parse_integer_limit+0x195/0x1e0 [ 73.168048][ T1744] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 73.168070][ T1744] ? kstrtoull+0x13b/0x1e0 [ 73.168086][ T1744] ? kstrtouint+0x78/0xf0 [ 73.168101][ T1744] ? ioctl_has_perm+0x1bc/0x500 [ 73.168123][ T1744] ? __asan_memcpy+0x5a/0x80 [ 73.168142][ T1744] ? ioctl_has_perm+0x408/0x500 [ 73.168157][ T1744] ? has_cap_mac_admin+0xd0/0xd0 [ 73.168171][ T1744] ? __kasan_check_write+0x18/0x20 [ 73.168187][ T1744] ? mutex_lock_killable+0x97/0x1d0 [ 73.168209][ T1744] ? __cfi_mutex_lock_killable+0x10/0x10 [ 73.168231][ T1744] ? proc_fail_nth_write+0x184/0x220 [ 73.168256][ T1744] kvm_vcpu_ioctl+0xa43/0x1000 [ 73.168272][ T1744] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 73.168287][ T1744] ? __cfi_vfs_write+0x10/0x10 [ 73.168304][ T1744] ? __kasan_check_write+0x18/0x20 [ 73.168319][ T1744] ? mutex_unlock+0x90/0x240 [ 73.168339][ T1744] ? __cfi_mutex_unlock+0x10/0x10 [ 73.168362][ T1744] ? bpf_lsm_file_ioctl+0xd/0x20 [ 73.168383][ T1744] ? security_file_ioctl+0x3e/0x110 [ 73.168407][ T1744] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 73.168422][ T1744] __se_sys_ioctl+0x135/0x1b0 [ 73.168441][ T1744] __x64_sys_ioctl+0x7f/0xa0 [ 73.168461][ T1744] x64_sys_call+0x1878/0x2ee0 [ 73.168475][ T1744] do_syscall_64+0x57/0xf0 [ 73.168492][ T1744] ? clear_bhb_loop+0x50/0xa0 [ 73.168513][ T1744] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.168534][ T1744] RIP: 0033:0x7fe41a79de59 [ 73.168548][ T1744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.168562][ T1744] RSP: 002b:00007fe41b601028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.168579][ T1744] RAX: ffffffffffffffda RBX: 00007fe41aa25fa0 RCX: 00007fe41a79de59 [ 73.168591][ T1744] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 73.168601][ T1744] RBP: 00007fe41b601090 R08: 0000000000000000 R09: 0000000000000000 [ 73.168614][ T1744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.168624][ T1744] R13: 00007fe41aa26038 R14: 00007fe41aa25fa0 R15: 00007ffc1999bec8 [ 73.168638][ T1744] [ 73.662162][ T399] usb 3-1: USB disconnect, device number 25 [ 73.899664][ T319] usb 2-1: USB disconnect, device number 32 [ 74.015371][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 74.100114][ T1771] syz.0.470 uses obsolete (PF_INET,SOCK_PACKET) [ 74.111570][ T36] audit: type=1400 audit(1784056068.931:324): avc: denied { mount } for pid=1773 comm="syz.1.471" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 74.135072][ T36] audit: type=1400 audit(1784056068.951:325): avc: denied { mounton } for pid=1773 comm="syz.1.471" path="/84/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.164146][ T1776] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 74.164689][ T36] audit: type=1400 audit(1784056068.951:326): avc: denied { read } for pid=1773 comm="syz.1.471" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.198284][ T36] audit: type=1400 audit(1784056069.011:327): avc: denied { open } for pid=1773 comm="syz.1.471" path="/84/file0" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.222264][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 74.242844][ T9] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 74.257635][ T9] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.278981][ T36] audit: type=1400 audit(1784056069.041:328): avc: denied { search } for pid=1773 comm="syz.1.471" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 74.305340][ T9] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.316992][ T9] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 74.331057][ T36] audit: type=1400 audit(1784056069.041:329): avc: denied { read } for pid=1773 comm="syz.1.471" name="saved_tgids" dev="tracefs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 74.353862][ T9] usb 4-1: config 7 interface 0 has no altsetting 0 [ 74.360912][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 74.370255][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.378459][ T36] audit: type=1400 audit(1784056069.041:330): avc: denied { getattr } for pid=1773 comm="syz.1.471" name="saved_tgids" dev="tracefs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 74.401897][ T36] audit: type=1400 audit(1784056069.091:331): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 74.517592][ T1786] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 74.751515][ T1799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.761419][ T1799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.834751][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.000C/input/input15 [ 74.856812][ T9] kye 0003:0458:5010.000C: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 74.985428][ T399] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 75.135368][ T399] usb 2-1: Using ep0 maxpacket: 8 [ 75.150990][ T319] usb 4-1: USB disconnect, device number 28 [ 75.158199][ T1809] Bluetooth: hci0: Frame reassembly failed (-90) [ 75.166642][ T1401] Bluetooth: hci0: Frame reassembly failed (-84) [ 75.174062][ T399] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 75.201115][ T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.213461][ T399] usb 2-1: Product: syz [ 75.218115][ T399] usb 2-1: Manufacturer: syz [ 75.222751][ T399] usb 2-1: SerialNumber: syz [ 75.405394][ T65] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 75.440369][ T399] usb 2-1: unit 0 not found! [ 75.449108][ T399] usb 2-1: USB disconnect, device number 33 [ 75.465527][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.555414][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 75.561939][ T65] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.573962][ T65] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 75.583128][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.591213][ T65] usb 3-1: Product: syz [ 75.595520][ T65] usb 3-1: Manufacturer: syz [ 75.600161][ T65] usb 3-1: SerialNumber: syz [ 75.605604][ T65] usb 3-1: config 0 descriptor?? [ 75.812949][ T319] usb 3-1: USB disconnect, device number 26 [ 75.925424][ T65] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 76.076866][ T65] usb 4-1: config 0 has no interfaces? [ 76.082613][ T65] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 76.091860][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.100688][ T65] usb 4-1: config 0 descriptor?? [ 76.170849][ T36] audit: type=1400 audit(1784056070.981:332): avc: denied { bind } for pid=1824 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.205394][ T399] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 76.366900][ T399] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 76.378751][ T399] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 76.389825][ T399] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 76.400083][ T399] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 76.409382][ T399] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.428943][ T36] audit: type=1400 audit(1784056071.241:333): avc: denied { create } for pid=1838 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 76.625941][ T399] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 76.633945][ T399] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input16 [ 76.658440][ T399] usb 2-1: USB disconnect, device number 34 [ 77.085390][ T1847] mmap: syz.0.495 (1847): VmData 29204480 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 77.193530][ T1857] netlink: 32 bytes leftover after parsing attributes in process `syz.1.499'. [ 77.235434][ T1118] Bluetooth: hci0: command 0x1003 tx timeout [ 77.241692][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 77.545522][ T65] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 77.695426][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 77.703133][ T65] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 77.712391][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.720470][ T65] usb 2-1: Product: syz [ 77.724661][ T65] usb 2-1: Manufacturer: syz [ 77.729424][ T65] usb 2-1: SerialNumber: syz [ 77.735981][ T65] r8152-cfgselector 2-1: Unknown version 0x0000 [ 77.742504][ T65] r8152-cfgselector 2-1: config 0 descriptor?? [ 77.950914][ T1866] bridge0: port 3(veth0_to_team) entered blocking state [ 77.957991][ T1866] bridge0: port 3(veth0_to_team) entered disabled state [ 77.965074][ T1866] veth0_to_team: entered allmulticast mode [ 77.971520][ T1866] veth0_to_team: entered promiscuous mode [ 77.978851][ T1866] ip6gre0: mtu less than device minimum [ 77.987296][ T65] r8152-cfgselector 2-1: Unknown version 0x0000 [ 77.993750][ T65] r8152-cfgselector 2-1: bad CDC descriptors [ 78.001275][ T65] r8152-cfgselector 2-1: USB disconnect, device number 35 [ 78.165513][ T319] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 78.315400][ T319] usb 3-1: Using ep0 maxpacket: 32 [ 78.322143][ T319] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 78.330419][ T319] usb 3-1: config 0 has no interface number 0 [ 78.336607][ T319] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 78.346678][ T319] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 78.356836][ T319] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 78.366998][ T319] usb 3-1: config 0 interface 196 has no altsetting 0 [ 78.375371][ T319] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 78.384533][ T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.392911][ T319] usb 3-1: Product: syz [ 78.397184][ T319] usb 3-1: Manufacturer: syz [ 78.401813][ T319] usb 3-1: SerialNumber: syz [ 78.407351][ T319] usb 3-1: config 0 descriptor?? [ 78.412679][ T1875] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 78.723505][ T31] usb 4-1: USB disconnect, device number 29 [ 78.835062][ T319] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 78.858806][ T319] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 79.034730][ T319] usb 3-1: USB disconnect, device number 27 [ 79.095395][ T31] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 79.115432][ T399] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 79.248307][ T31] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 79.257729][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.265811][ T31] usb 4-1: Product: syz [ 79.269997][ T31] usb 4-1: Manufacturer: syz [ 79.274610][ T31] usb 4-1: SerialNumber: syz [ 79.277567][ T399] usb 2-1: unable to get BOS descriptor or descriptor too short [ 79.287883][ T399] usb 2-1: not running at top speed; connect to a high speed hub [ 79.298222][ T399] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.308512][ T399] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.319640][ T399] usb 2-1: string descriptor 0 read error: -22 [ 79.325934][ T399] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.335004][ T399] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.345713][ T399] usb 2-1: 0:2 : does not exist [ 79.489057][ T1903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.497739][ T1903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.507079][ T1903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.515704][ T1903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.526230][ T1903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.535349][ T1903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.544252][ T1903] netlink: 2 bytes leftover after parsing attributes in process `syz.3.513'. [ 79.558282][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 79.558318][ T36] audit: type=1400 audit(1784056074.371:340): avc: denied { read } for pid=1901 comm="syz.3.513" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.591819][ T36] audit: type=1400 audit(1784056074.371:341): avc: denied { open } for pid=1901 comm="syz.3.513" path="/75/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.617576][ T36] audit: type=1400 audit(1784056074.371:342): avc: denied { ioctl } for pid=1901 comm="syz.3.513" path="/75/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.757030][ T399] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 79.767496][ T399] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 79.777088][ T399] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 79.788752][ T399] usb 2-1: USB disconnect, device number 36 [ 79.799150][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 79.819528][ T31] usb 4-1: USB disconnect, device number 30 [ 79.827614][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.355375][ T9] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 80.506726][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 80.515573][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 80.524146][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.534356][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.547653][ T9] usb 4-1: string descriptor 0 read error: -22 [ 80.553920][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.575362][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.595368][ T31] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 80.597654][ T9] usb 4-1: 0:2 : does not exist [ 80.745373][ T31] usb 3-1: device descriptor read/64, error -71 [ 80.804939][ T9] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 80.827537][ T9] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 80.840987][ T9] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 80.860841][ T9] usb 4-1: USB disconnect, device number 31 [ 81.015404][ T31] usb 3-1: device descriptor read/64, error -71 [ 81.165387][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 81.275446][ T31] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 81.326848][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 81.335271][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 81.346613][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 81.359101][ T9] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 81.368202][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.376352][ T9] usb 4-1: Product: syz [ 81.380592][ T9] usb 4-1: Manufacturer: syz [ 81.385216][ T9] usb 4-1: SerialNumber: syz [ 81.405376][ T31] usb 3-1: device descriptor read/64, error -71 [ 81.485456][ T36] audit: type=1400 audit(1784056076.291:343): avc: denied { ioctl } for pid=1964 comm="syz.0.531" path="socket:[16910]" dev="sockfs" ino=16910 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 81.535426][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 81.599648][ T9] usb 4-1: USB disconnect, device number 32 [ 81.612416][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.645429][ T31] usb 3-1: device descriptor read/64, error -71 [ 81.685402][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 81.691943][ T10] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 81.700685][ T10] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 81.709471][ T10] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 81.718600][ T10] usb 2-1: config 250 has no interface number 0 [ 81.724907][ T10] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 81.736734][ T10] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 81.747488][ T10] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 81.757928][ T10] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 81.765872][ T31] usb usb3-port1: attempt power cycle [ 81.768318][ T10] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 81.787576][ T10] usb 2-1: config 250 interface 228 has no altsetting 0 [ 81.795780][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 81.804860][ T10] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 81.813270][ T10] usb 2-1: Product: syz [ 81.817523][ T10] usb 2-1: SerialNumber: syz [ 81.824700][ T10] hub 2-1:250.228: bad descriptor, ignoring hub [ 81.831082][ T10] hub 2-1:250.228: probe with driver hub failed with error -5 [ 82.024293][ T10] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 37 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 82.117504][ T31] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 82.146434][ T31] usb 3-1: device descriptor read/8, error -71 [ 82.161213][ T36] audit: type=1400 audit(1784056076.971:344): avc: denied { write } for pid=1979 comm="syz.3.536" name="snmp6" dev="proc" ino=4026532582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 82.277014][ T31] usb 3-1: device descriptor read/8, error -71 [ 82.415624][ T1963] usb 2-1: reset high-speed USB device number 37 using dummy_hcd [ 82.425367][ T10] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 82.515421][ T31] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 82.536569][ T31] usb 3-1: device descriptor read/8, error -71 [ 82.576198][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 82.584890][ T10] usb 4-1: config 192 has an invalid interface number: 69 but max is 0 [ 82.593286][ T10] usb 4-1: config 192 has no interface number 0 [ 82.599617][ T10] usb 4-1: config 192 interface 69 altsetting 8 endpoint 0xC has invalid maxpacket 2560, setting to 64 [ 82.610742][ T10] usb 4-1: config 192 interface 69 altsetting 8 endpoint 0xD has invalid maxpacket 2047, setting to 64 [ 82.621846][ T10] usb 4-1: config 192 interface 69 has no altsetting 0 [ 82.630322][ T10] usb 4-1: New USB device found, idVendor=8503, idProduct=485d, bcdDevice= 0.87 [ 82.639441][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.647506][ T10] usb 4-1: Product: syz [ 82.651733][ T10] usb 4-1: Manufacturer: syz [ 82.656407][ T10] usb 4-1: SerialNumber: syz [ 82.662600][ T1981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.676452][ T31] usb 3-1: device descriptor read/8, error -71 [ 82.767518][ T1963] usb 2-1: failed to restore interface 228 altsetting 255 (error=-71) [ 82.776204][ T9] usb 2-1: USB disconnect, device number 37 [ 82.783195][ T9] usblp0: removed [ 82.785874][ T31] usb usb3-port1: unable to enumerate USB device [ 82.873313][ T10] usb 4-1: USB disconnect, device number 33 [ 83.207489][ T1987] overlayfs: failed to clone upperpath [ 83.227488][ T1989] page size migration: [1989 (syz.0.539)] madvise_vma_pad_pages:333: Invalid attempt to madvise padding on MAP_SHARED vma [ 83.331584][ T1993] overlay: Unknown parameter '4f' [ 83.350697][ T1993] netlink: 'syz.2.541': attribute type 63 has an invalid length. [ 83.358506][ T1993] netlink: 5 bytes leftover after parsing attributes in process `syz.2.541'. [ 83.367907][ T1993] netlink: 'syz.2.541': attribute type 32 has an invalid length. [ 83.376253][ T36] audit: type=1400 audit(1784056078.191:345): avc: denied { mount } for pid=1992 comm="syz.2.541" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 83.414605][ T1996] fuse: Unknown parameter '0xffffffffffffffff' [ 83.501066][ T2009] syz.3.544(2009): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 83.516483][ T2009] syzkaller1: entered promiscuous mode [ 83.522020][ T2009] syzkaller1: entered allmulticast mode [ 83.725483][ T319] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 83.758650][ T2017] overlayfs: failed to clone lowerpath [ 83.818073][ T2019] netlink: 'syz.0.548': attribute type 27 has an invalid length. [ 83.835876][ T2019] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.886557][ T319] usb 3-1: config index 0 descriptor too short (expected 65321, got 68) [ 83.895765][ T319] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 83.906734][ T319] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 83.921029][ T319] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.930498][ T319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 83.938830][ T319] usb 3-1: SerialNumber: syz [ 83.944793][ T2005] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.153733][ T2005] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.332035][ T36] audit: type=1400 audit(1784056079.141:346): avc: denied { execute } for pid=2026 comm="syz.3.551" path="/sys/power/resume" dev="sysfs" ino=1490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 84.568009][ T319] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 84.677329][ T36] audit: type=1400 audit(1784056079.491:347): avc: denied { cmd } for pid=2041 comm="syz.3.554" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 84.745632][ T36] audit: type=1400 audit(1784056079.521:348): avc: denied { map } for pid=2041 comm="syz.3.554" path="/dev/ublkc0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.807066][ T2060] binder: Unknown parameter 'context' [ 84.878414][ T36] audit: type=1400 audit(1784056079.691:349): avc: denied { accept } for pid=2055 comm="syz.1.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 84.899922][ T2070] netlink: 568 bytes leftover after parsing attributes in process `syz.0.561'. [ 84.919414][ T36] audit: type=1400 audit(1784056079.721:350): avc: denied { create } for pid=2068 comm="syz.0.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.940466][ T2070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 84.956927][ T36] audit: type=1400 audit(1784056079.721:351): avc: denied { write } for pid=2068 comm="syz.0.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.978084][ T399] usb 3-1: USB disconnect, device number 32 [ 84.985232][ T399] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 84.990874][ T36] audit: type=1400 audit(1784056079.721:352): avc: denied { nlmsg_write } for pid=2068 comm="syz.0.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.275354][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 85.425365][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 85.446437][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 85.457026][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.475708][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.483742][ T10] usb 4-1: Product: syz [ 85.505341][ T10] usb 4-1: Manufacturer: syz [ 85.510165][ T10] usb 4-1: SerialNumber: syz [ 85.815394][ T319] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 85.896405][ T10] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 85.903517][ T10] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 85.912259][ T10] usb 4-1: USB disconnect, device number 34 [ 85.925023][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.966610][ T319] usb 3-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 85.977815][ T319] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 85.989029][ T319] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.999018][ T319] usb 3-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 86.012240][ T319] usb 3-1: config 0 interface 0 has no altsetting 0 [ 86.018932][ T319] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 86.028232][ T319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.036925][ T319] usb 3-1: config 0 descriptor?? [ 86.061355][ T36] audit: type=1400 audit(1784056080.871:353): avc: denied { shutdown } for pid=2110 comm="syz.0.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.095198][ T36] audit: type=1400 audit(1784056080.901:354): avc: denied { execute } for pid=2112 comm="syz.0.568" name="file0" dev="tmpfs" ino=1429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.118152][ T36] audit: type=1400 audit(1784056080.911:355): avc: denied { execute_no_trans } for pid=2112 comm="syz.0.568" path="/263/file0" dev="tmpfs" ino=1429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.246065][ T319] zydacron 0003:13EC:0006.000D: unknown main item tag 0x0 [ 86.253764][ T319] zydacron 0003:13EC:0006.000D: unknown main item tag 0x1 [ 86.261267][ T319] zydacron 0003:13EC:0006.000D: unknown main item tag 0x7 [ 86.276452][ T319] zydacron 0003:13EC:0006.000D: unknown main item tag 0x0 [ 86.287597][ T319] zydacron 0003:13EC:0006.000D: unknown main item tag 0x0 [ 86.297381][ T319] zydacron 0003:13EC:0006.000D: unknown main item tag 0x0 [ 86.305584][ T319] zydacron 0003:13EC:0006.000D: unknown main item tag 0x0 [ 86.312959][ T36] audit: type=1400 audit(1784056081.121:356): avc: denied { ioctl } for pid=2133 comm="syz.0.575" path="socket:[17573]" dev="sockfs" ino=17573 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.313086][ T319] zydacron 0003:13EC:0006.000D: ignoring exceeding usage max [ 86.346322][ T319] zydacron 0003:13EC:0006.000D: item fetching failed at offset 36/40 [ 86.354806][ T319] zydacron 0003:13EC:0006.000D: parse failed [ 86.361181][ T319] zydacron 0003:13EC:0006.000D: probe with driver zydacron failed with error -22 [ 86.443478][ T10] usb 3-1: USB disconnect, device number 33 [ 86.535380][ T399] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 86.685338][ T399] usb 4-1: Using ep0 maxpacket: 32 [ 86.694315][ T399] usb 4-1: config 0 has no interfaces? [ 86.702649][ T399] usb 4-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 86.712478][ T399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.721076][ T399] usb 4-1: Product: syz [ 86.725477][ T399] usb 4-1: Manufacturer: syz [ 86.730174][ T399] usb 4-1: SerialNumber: syz [ 86.735845][ T399] usb 4-1: config 0 descriptor?? [ 86.996759][ T319] usb 4-1: USB disconnect, device number 35 [ 87.340144][ T2166] overlayfs: failed to clone lowerpath [ 87.346184][ T2165] overlayfs: failed to clone lowerpath [ 87.986806][ T547] ------------[ cut here ]------------ [ 87.992406][ T547] WARNING: CPU: 0 PID: 547 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x351/0x410 [ 88.003132][ T547] Modules linked in: [ 88.007202][ T547] CPU: 0 UID: 0 PID: 547 Comm: kworker/u8:14 Not tainted syzkaller #0 a506770653dd131ce1f6b755c8f096a645f29717 [ 88.019003][ T547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 88.029198][ T547] Workqueue: iou_exit io_ring_exit_work [ 88.034809][ T547] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410 [ 88.041536][ T547] Code: 5d e9 53 06 52 02 cc e8 5d a9 33 fe 0f 0b eb e3 e8 54 a9 33 fe 0f 0b eb da e8 4b a9 33 fe 0f 0b e9 4d fe ff ff e8 3f a9 33 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89 [ 88.061569][ T547] RSP: 0018:ffffc9000e33f990 EFLAGS: 00010293 [ 88.067865][ T547] RAX: ffffffff8353c8b1 RBX: 1ffff11021b4f545 RCX: ffff88811b258000 [ 88.075910][ T547] RDX: 0000000000000000 RSI: 00000000000000d8 RDI: 00000000000006e1 [ 88.083928][ T547] RBP: ffffc9000e33f9e0 R08: 0000000000000003 R09: 0000000000000004 [ 88.091995][ T547] R10: 0000000000000000 R11: ffffffff8353b890 R12: ffff88811816a600 [ 88.100034][ T547] R13: ffff88810da7aa00 R14: ffff888119ae0000 R15: ffff888119ae0010 [ 88.108134][ T547] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 88.117238][ T547] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.123906][ T547] CR2: 00007fa5a7b51ff8 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 88.131966][ T547] Call Trace: [ 88.135278][ T547] [ 88.138293][ T547] ublk_ch_uring_cmd+0x6f/0xa0 [ 88.143134][ T547] io_uring_try_cancel_uring_cmd+0x196/0x280 [ 88.149274][ T547] io_uring_try_cancel_requests+0x4d6/0x5b5 [ 88.155208][ T547] ? io_uring_cancel_generic+0x6eb/0x6eb [ 88.161102][ T547] io_ring_exit_work+0x23d/0x83b [ 88.166138][ T547] ? finish_task_switch+0x139/0x770 [ 88.171400][ T547] ? __cfi_io_ring_exit_work+0x10/0x10 [ 88.176933][ T547] ? kick_pool+0xb9/0x540 [ 88.181305][ T547] process_scheduled_works+0x7f7/0x1060 [ 88.186915][ T547] worker_thread+0xc99/0x13f0 [ 88.191639][ T547] kthread+0x2c7/0x360 [ 88.195988][ T547] ? __cfi_worker_thread+0x10/0x10 [ 88.201276][ T547] ? __cfi_kthread+0x10/0x10 [ 88.205934][ T547] ret_from_fork+0x67/0xa0 [ 88.210838][ T547] ? __cfi_kthread+0x10/0x10 [ 88.215623][ T547] ret_from_fork_asm+0x1a/0x30 [ 88.220459][ T547] [ 88.223489][ T547] ---[ end trace 0000000000000000 ]---