last executing test programs: 2m12.068973479s ago: executing program 1 (id=255): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0xa20, 0x7fff) 2m11.871362904s ago: executing program 1 (id=259): mkdir(&(0x7f0000000300)='./bus\x00', 0x63) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000140), 0x0, 0x0, 0x1) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x3, {0xa, 0x4e23, 0xa, @private1, 0x4}}}, 0x32) r3 = socket$packet(0x11, 0x2, 0x300) r4 = accept$inet(r0, &(0x7f0000000180)={0x2, 0x0, @empty}, &(0x7f0000000240)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1003, 0x800}, 0x10) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f00000000c0), 0x4) 2m11.834704131s ago: executing program 1 (id=260): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10022, 0x0) socket(0x24, 0x6, 0xfffffffb) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22008041, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r2, 0x1) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) 2m11.813364125s ago: executing program 1 (id=261): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_012={0x2, 0x0, 0x9, "fb7a"}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "eb212189"}, @main=@item_4={0x3, 0x0, 0x8, "f0377737"}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_012={0x2, 0x0, 0x9, "fb7a"}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x0, "eb212189"}, @main=@item_4={0x3, 0x0, 0x8, "f0377737"}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_connect$midi(0x4, 0xcb, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x1, 0x1, 0xf, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x20, 0xff, [@midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x6, 0x7, [{0x5, 0x7}, {0xe8}, {0xd, 0x2}, {0xe5, 0x6}, {0x74, 0x3}, {0x9a, 0x8}, {0x10, 0x40}], 0x38}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x10}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x8}, @ms_header={0x7, 0x24, 0x1, 0xf, 0x7}], [{{0x9, 0x5, 0x7, 0xc, 0x8, 0x53, 0xe1, 0x1, {0xa, 0x25, 0x1, 0x6, "5b40e2d62fad"}}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x7, 0x2, 0x0, {0x7, 0x25, 0x1, 0x3, "1c9008"}}}, {{0x9, 0x5, 0xc2985cc1b2d7a0f9, 0x10, 0x0, 0x9, 0x4, 0x10, {0x14, 0x25, 0x1, 0x10, "80682df5f04dbec5057195733a8e8d66"}}}, {{0x9, 0x5, 0x80, 0x45009d8a7c472776, 0x400, 0xff, 0x7, 0xc, {0x13, 0x25, 0x1, 0xf, "43fe9226158ff534d700ff4a2b0b4b"}}}, {{0x9, 0x5, 0x9, 0x19, 0x20, 0x0, 0x4, 0x6, {0xd, 0x25, 0x1, 0x9, "b420db2101500c9d86"}}}]}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x9, 0x4, 0x2, 0x20, 0x3}, 0x111, &(0x7f0000000200)={0x5, 0xf, 0x111, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x5d, "d4e03ac20b15ed405dee377066e49d44"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "74a1cdc6560fb9d2158e940a9a173820"}, @generic={0xe4, 0x10, 0x3, "90cce01e5fc07d8ecc222205618708b41e5a9bb34cf59c42fd861109ca1757ff8080884fadb1be60a2abf4561b7fd6ab8b314268acacab41703301948fb2d35de92705402e2a6910bc28ea770867f97a784865684d0121e7038664e043dd58d1407eb29dad58c329623b3f28218b8b5c7d0e46c835a02af0a92db62c43a7658ea616eb011bba6eb3f737e69b61bfcf80133da7abc4e10c53ba181c9caa66f6281361cdec77f0b7221ca37451209d822a88373688af37e0c3d7cd03b22eade8f1e4b6789f7b846996bf5be81ec05e3a9117bb3faa6bda0eacb2d654d80648d45e71"}]}, 0x4, [{0x4f, &(0x7f00000003c0)=@string={0x4f, 0x3, "30c4b3b8b5948260e139b3d6be666f75888ce70efb82b8cb63b163304dc1f13e61f55377d34f3ff2b17499203b2a372344a220a3f4711b3ec387d5f4f49c8879a736672226ba31908e4aefb204"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x380a}}, {0x49, &(0x7f0000000480)=@string={0x49, 0x3, "b28735ffd8b31441486c62518d2d827832e8ea7fa970df3eb5896a4be6ecd5a645a768b7b1d7f0f58ec56c1e5043c47e09cd08c240731d3d5c470953fe7ecc484ce2f0ab21eb71"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x459}}]}) (async) r1 = syz_usb_connect$midi(0x4, 0xcb, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x1, 0x1, 0xf, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x20, 0xff, [@midi_out_jack={0x15, 0x24, 0x3, 0x3, 0x6, 0x7, [{0x5, 0x7}, {0xe8}, {0xd, 0x2}, {0xe5, 0x6}, {0x74, 0x3}, {0x9a, 0x8}, {0x10, 0x40}], 0x38}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x10}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x3, 0x8}, @ms_header={0x7, 0x24, 0x1, 0xf, 0x7}], [{{0x9, 0x5, 0x7, 0xc, 0x8, 0x53, 0xe1, 0x1, {0xa, 0x25, 0x1, 0x6, "5b40e2d62fad"}}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x7, 0x2, 0x0, {0x7, 0x25, 0x1, 0x3, "1c9008"}}}, {{0x9, 0x5, 0xc2985cc1b2d7a0f9, 0x10, 0x0, 0x9, 0x4, 0x10, {0x14, 0x25, 0x1, 0x10, "80682df5f04dbec5057195733a8e8d66"}}}, {{0x9, 0x5, 0x80, 0x45009d8a7c472776, 0x400, 0xff, 0x7, 0xc, {0x13, 0x25, 0x1, 0xf, "43fe9226158ff534d700ff4a2b0b4b"}}}, {{0x9, 0x5, 0x9, 0x19, 0x20, 0x0, 0x4, 0x6, {0xd, 0x25, 0x1, 0x9, "b420db2101500c9d86"}}}]}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x9, 0x4, 0x2, 0x20, 0x3}, 0x111, &(0x7f0000000200)={0x5, 0xf, 0x111, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x5d, "d4e03ac20b15ed405dee377066e49d44"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "74a1cdc6560fb9d2158e940a9a173820"}, @generic={0xe4, 0x10, 0x3, "90cce01e5fc07d8ecc222205618708b41e5a9bb34cf59c42fd861109ca1757ff8080884fadb1be60a2abf4561b7fd6ab8b314268acacab41703301948fb2d35de92705402e2a6910bc28ea770867f97a784865684d0121e7038664e043dd58d1407eb29dad58c329623b3f28218b8b5c7d0e46c835a02af0a92db62c43a7658ea616eb011bba6eb3f737e69b61bfcf80133da7abc4e10c53ba181c9caa66f6281361cdec77f0b7221ca37451209d822a88373688af37e0c3d7cd03b22eade8f1e4b6789f7b846996bf5be81ec05e3a9117bb3faa6bda0eacb2d654d80648d45e71"}]}, 0x4, [{0x4f, &(0x7f00000003c0)=@string={0x4f, 0x3, "30c4b3b8b5948260e139b3d6be666f75888ce70efb82b8cb63b163304dc1f13e61f55377d34f3ff2b17499203b2a372344a220a3f4711b3ec387d5f4f49c8879a736672226ba31908e4aefb204"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x380a}}, {0x49, &(0x7f0000000480)=@string={0x49, 0x3, "b28735ffd8b31441486c62518d2d827832e8ea7fa970df3eb5896a4be6ecd5a645a768b7b1d7f0f58ec56c1e5043c47e09cd08c240731d3d5c470953fe7ecc484ce2f0ab21eb71"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x459}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000006c0)={0x14, &(0x7f00000005c0)={0x20, 0x5, 0x82, {0x82, 0x2, "64db8baf7e958685d21ae5526e73b86c4d8f8534849ce35dfebe433a95c7657eacce68147515f5c047f5af20f5b107d55f2ac7bda21cc8e4b5c2ca86cf6f5979884d397262d15e9e4d2062328253c4511cdacd5ff8e5e2e0a7125983722bf6614ab4db5e60b3eed3b1e068c08225132ce53c9f08e2e5799629d9922811b365e3"}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)={0x0, 0xa, 0x1, 0x48}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0xac7, 0x8, 0x2, 0x6, 0x21, 0x18, 0x2, 0x0, 0x2, 0x8, 0xc, 0x86d3}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x19d}, &(0x7f0000000900)={0x20, 0x83, 0x2}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000980)={0x20, 0x89, 0x2, 0x1}}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) ioctl$BLKTRACESTART(r2, 0x1269, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x80000019, 0x1d57, 0x2, 0x8, 0x4e59, 0x1, 0x200}]}) 2m9.679317759s ago: executing program 3 (id=270): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c00000002030300000000bbc0720300000000100800010002000015"], 0x1c}}, 0xc040) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) 2m8.77809874s ago: executing program 1 (id=274): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x5, 0x20003) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) r1 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000005480)={0xffffffffffffffff}) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES32=r0, @ANYRESOCT=r0], 0x44}}, 0x2000c060) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (rerun: 32) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0xffffff94, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb8}, 0x80) sendto$unix(r6, &(0x7f0000000340)="85b49c30e9a5e5b86c8311787c7715b7f3f0a5fd2d362d54d6beab2ee7bdde6c8d7bc26a828db4528c25a75648c90eab763c6a", 0x33, 0x2000, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) syz_ublk_add_dev(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$EVIOCGID(r8, 0x80084502, &(0x7f0000000240)=""/130) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x250, 0x0, 0x800100000000000}]}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x9) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 64) socket$inet(0x2, 0x2, 0x1) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async, rerun: 64) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x20000, 0x80) (rerun: 64) 2m8.082545626s ago: executing program 3 (id=275): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) gettimeofday(&(0x7f0000000040), &(0x7f0000000080)) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f00000000c0)=[@nested_create_vm={0x12d, 0x18, 0x2}, @rdmsr={0x66, 0x18, {0x4000009f}}, @wr_drn={0x68, 0x20, {0x4, 0x100000000}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x1, 0x401}}, @nested_amd_vmsave={0x183, 0x18}, @out_dx={0x6a, 0x28, {0x90a1, 0x6, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x7, 0xfffffffffffffff3, 0x3, 0x6}}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x60, 0x4, 0x0, 0x2}}, @wr_crn={0x67, 0x20, {0x3, 0x1}}, @wrmsr={0x65, 0x20, {0xaae, 0x9cec}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_load_code={0x12e, 0x6f, {0x0, "f3440fc775000f0f95e355b228bf3e3ef30f3367430fc71c9066ba4200b8f1350000ef640ab01d451f46470f01c3b805000000b90e0000000f01c166baf80cb8639cfc82ef66bafc0cb00aee8f0850979ce40000000000"}}, @nested_amd_clgi={0x17f, 0x10}, @in_dx={0x69, 0x20, {0xfa70, 0x6}}], 0x23f}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000340)) r1 = getuid() fsetxattr$security_capability(r0, &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0x0, 0x3}, {0x4, 0x7ff}], r1}, 0x18, 0x2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000400), &(0x7f0000000440)=0x4) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0xf9, "39589757d8fb4f1e8d50e67094cf73bff6fc82d431f865772753b1652fa1ade8c8b354f5a506c5b358bbed92a4d8e2ffc8d338ca153a9df50d360590de842a636ea922cf3599ef7bd5dd6a3ef6a93d970fe02a3a6c8f4a1535032dc492bc0651e2c502f80880a0fb26bee11c40af15940409409d76f7a9c6d391134efc60e5d6f23525b2e1d3d657dd472535e424d65168e71407174bf7e7ac9357eba8cb1fd9e90646f7864257f431f7dc264bc85cca1451d3e9e6f26fca895db1dc59394e9c03d9518fc1814645b4afa8b23f371f79e2d0b4f10c341639fd24bcfdb4b2f39d329b422d91038eb78b7843968f9ecb0d2a0d23103e60fe8a1f"}, &(0x7f00000005c0)=0x11d) r2 = syz_create_resource$binfmt(&(0x7f0000000600)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) syz_create_resource$binfmt(&(0x7f0000000640)='./file0\x00') ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000680)={0x2, 'batadv0\x00', {0x80000000}}) r3 = syz_open_dev$hidraw(&(0x7f00000006c0), 0xffff, 0x2) ioctl$HIDIOCGRAWPHYS(r3, 0x80404805, &(0x7f0000000700)) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000740)={0xb, "7db3c24070db2019b396f8e5b228e0a735d883c421e413010561979e6e4425bf3ce50ba084be4f42f94441e41d09b0ae8a31819dc2687bf4772c2c444509a725"}) getsockopt(r0, 0x9, 0x4, &(0x7f00000007c0)=""/120, &(0x7f0000000840)=0x78) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000880)={0x77359400}, 0x10) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x8000, 0x10, 0x1}, 0x18) statx(r4, &(0x7f0000000940)='./file0\x00', 0x400, 0x0, &(0x7f0000000980)) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r5, 0x0, 0x22, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) fgetxattr(0xffffffffffffffff, &(0x7f0000000b00)=@known='trusted.overlay.nlink\x00', &(0x7f0000000b40)=""/40, 0x28) syz_open_dev$usbfs(&(0x7f0000000b80), 0x1, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000bc0)=0x100a, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, r6, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare(0x40000) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000d40)) keyctl$describe(0x6, 0x0, &(0x7f0000000d80)=""/200, 0xc8) 2m8.00346189s ago: executing program 3 (id=276): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0xa20, 0x7fff) 2m7.951816219s ago: executing program 3 (id=278): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10022, 0x0) socket(0x24, 0x6, 0xfffffffb) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r2, 0x0, 0x0, 0x1, 0x0, 0x0) shutdown(r2, 0x1) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) 2m7.864857785s ago: executing program 3 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r2, &(0x7f0000000080)={@void, @val={0x1, 0x3, 0x1c, 0x13, 0x14, 0x6}, @ipv4=@igmp={{0x5, 0x4, 0x3, 0x8, 0xe40, 0x64, 0x0, 0x3, 0x2, 0x0, @empty, @empty=0x20}, {0x11, 0x6, 0x0, @empty}}}, 0x26) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2501000000000000000241000000030013"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xee00]) setregid(0x0, r6) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) setresgid(r6, r5, r6) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r8, 0x0) ioctl$KVM_INTERRUPT(r8, 0x4004ae86, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010106000009040000ff02020000052406800005240002000d240f010000000000000000000424020009058103200000000a09058202200000000009050302", @ANYRESDEC, @ANYRESHEX=r8, @ANYRES64=r4], 0x0) 2m7.864455695s ago: executing program 1 (id=281): syz_open_dev$hiddev(&(0x7f0000000040), 0x79f, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050200794200000000001000000081d3069fa3ec3a75", @ANYRES32=r3, @ANYBLOB], 0x20}}, 0x44080) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000001c0)={0x2, 0x2, 0x3, 0xe, 0x69a, 0x9}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) futex(0x0, 0x1, 0x4000000, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) syz_open_procfs(r5, &(0x7f0000000380)='fdinfo/3\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) clock_gettime(0x0, &(0x7f0000001340)={0x0, 0x0}) futex_waitv(&(0x7f0000000f00)=[{0x3, &(0x7f00000003c0)=0x1, 0x82}, {0x71a04dae, &(0x7f0000000400)=0x30, 0x82}, {0x0, &(0x7f0000000440)=0xa, 0x2}, {0x1, &(0x7f0000000480)=0x4, 0x82}, {0x0, &(0x7f00000004c0)=0xe, 0x2}, {0x8000000000000000, &(0x7f0000000500)=0x4ad3, 0x82}, {0x784b, &(0x7f0000000540)=0x6, 0x2}, {0x5, &(0x7f0000000580)=0x3, 0x2}, {0x9, &(0x7f00000005c0)=0xd, 0x82}, {0x9, &(0x7f0000000600)=0xa, 0x2}, {0x3, &(0x7f0000000640)=0x6, 0x2}, {0x3, &(0x7f0000000680)=0x100000001, 0x2}, {0x5ea, &(0x7f00000006c0)=0x4, 0x2}, {0xed, &(0x7f0000000700)=0x7fffffff, 0x82}, {0x6, &(0x7f0000000740)=0x8001, 0x82}, {0xc, &(0x7f0000000780), 0x82}, {0x704, &(0x7f00000007c0)=0x9, 0x82}, {0x5, &(0x7f0000000800)=0x8, 0x82}, {0x0, &(0x7f0000000840)=0xfffffffffffffffc, 0x82}, {0x6, &(0x7f0000000880)=0x4, 0x82}, {0xffffffffffff7989, &(0x7f00000008c0)=0x6570, 0x2}, {0x6, &(0x7f0000000900)=0xb45f, 0x82}, {0x5, &(0x7f0000000940)=0x4f9, 0x82}, {0x7699, &(0x7f0000000980)=0xf4f, 0xc3}, {0x3, &(0x7f00000009c0)=0x2, 0x2}, {0x7, &(0x7f0000000a00)=0x4, 0x82}, {0x0, &(0x7f0000000a40)=0x8, 0x82}, {0x5, &(0x7f0000000a80)=0x1, 0x2}, {0x5, &(0x7f0000000ac0), 0x2}, {0x4, &(0x7f0000000b00), 0x2}, {0x7, &(0x7f0000000b40)=0x80000000}, {0x4, &(0x7f0000000b80)=0x1, 0x82}, {0xf07, &(0x7f0000000bc0)=0x4, 0x82}, {0x7ff, &(0x7f0000000c00)=0x9, 0x82}, {0xd047, &(0x7f0000000c40)=0x9, 0x2}, {0x1, &(0x7f0000000c80)=0x3, 0x2}, {0x7, &(0x7f0000000cc0)=0x5, 0x2}, {0x0, &(0x7f0000000d00)=0x4, 0x82}, {0xe, &(0x7f0000000d40)=0xd8, 0x2}, {0x7, &(0x7f0000000d80)=0x7, 0x2}, {0xd, &(0x7f0000000dc0)=0x7fffffffffffffff, 0x82}, {0x1, &(0x7f0000000e00), 0x82}, {0x3195, &(0x7f0000000e40)=0xff, 0x2}, {0x100000001, &(0x7f0000000e80)=0x34, 0x82}, {0x5, &(0x7f0000000ec0), 0x2}], 0x2d, 0x0, &(0x7f0000001380)={r7, r8+60000000}, 0x0) sendto$inet(r6, 0x0, 0x0, 0x24008818, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ftruncate(0xffffffffffffffff, 0x6000000) splice(r6, 0x0, r9, 0x0, 0x7ffff000, 0x0) shutdown(r6, 0x1) r10 = syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000080)={r11, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000001000, 0x0, 0x0, 0x17, 0x1c, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40e78d2c4d03d81a8ca55ba139c01802c4dae416a34dac65b7ad33", [0x8, 0x5]}}) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, r11) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) 2m7.262022054s ago: executing program 3 (id=291): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0x0, 0x800000000000, 0x0, 0x0, 0x3, 0x1}, {}, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x2}, {{@in=@private=0xa010101, 0x0, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) 1m52.512480226s ago: executing program 32 (id=281): syz_open_dev$hiddev(&(0x7f0000000040), 0x79f, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050200794200000000001000000081d3069fa3ec3a75", @ANYRES32=r3, @ANYBLOB], 0x20}}, 0x44080) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f00000001c0)={0x2, 0x2, 0x3, 0xe, 0x69a, 0x9}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) futex(0x0, 0x1, 0x4000000, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) syz_open_procfs(r5, &(0x7f0000000380)='fdinfo/3\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) clock_gettime(0x0, &(0x7f0000001340)={0x0, 0x0}) futex_waitv(&(0x7f0000000f00)=[{0x3, &(0x7f00000003c0)=0x1, 0x82}, {0x71a04dae, &(0x7f0000000400)=0x30, 0x82}, {0x0, &(0x7f0000000440)=0xa, 0x2}, {0x1, &(0x7f0000000480)=0x4, 0x82}, {0x0, &(0x7f00000004c0)=0xe, 0x2}, {0x8000000000000000, &(0x7f0000000500)=0x4ad3, 0x82}, {0x784b, &(0x7f0000000540)=0x6, 0x2}, {0x5, &(0x7f0000000580)=0x3, 0x2}, {0x9, &(0x7f00000005c0)=0xd, 0x82}, {0x9, &(0x7f0000000600)=0xa, 0x2}, {0x3, &(0x7f0000000640)=0x6, 0x2}, {0x3, &(0x7f0000000680)=0x100000001, 0x2}, {0x5ea, &(0x7f00000006c0)=0x4, 0x2}, {0xed, &(0x7f0000000700)=0x7fffffff, 0x82}, {0x6, &(0x7f0000000740)=0x8001, 0x82}, {0xc, &(0x7f0000000780), 0x82}, {0x704, &(0x7f00000007c0)=0x9, 0x82}, {0x5, &(0x7f0000000800)=0x8, 0x82}, {0x0, &(0x7f0000000840)=0xfffffffffffffffc, 0x82}, {0x6, &(0x7f0000000880)=0x4, 0x82}, {0xffffffffffff7989, &(0x7f00000008c0)=0x6570, 0x2}, {0x6, &(0x7f0000000900)=0xb45f, 0x82}, {0x5, &(0x7f0000000940)=0x4f9, 0x82}, {0x7699, &(0x7f0000000980)=0xf4f, 0xc3}, {0x3, &(0x7f00000009c0)=0x2, 0x2}, {0x7, &(0x7f0000000a00)=0x4, 0x82}, {0x0, &(0x7f0000000a40)=0x8, 0x82}, {0x5, &(0x7f0000000a80)=0x1, 0x2}, {0x5, &(0x7f0000000ac0), 0x2}, {0x4, &(0x7f0000000b00), 0x2}, {0x7, &(0x7f0000000b40)=0x80000000}, {0x4, &(0x7f0000000b80)=0x1, 0x82}, {0xf07, &(0x7f0000000bc0)=0x4, 0x82}, {0x7ff, &(0x7f0000000c00)=0x9, 0x82}, {0xd047, &(0x7f0000000c40)=0x9, 0x2}, {0x1, &(0x7f0000000c80)=0x3, 0x2}, {0x7, &(0x7f0000000cc0)=0x5, 0x2}, {0x0, &(0x7f0000000d00)=0x4, 0x82}, {0xe, &(0x7f0000000d40)=0xd8, 0x2}, {0x7, &(0x7f0000000d80)=0x7, 0x2}, {0xd, &(0x7f0000000dc0)=0x7fffffffffffffff, 0x82}, {0x1, &(0x7f0000000e00), 0x82}, {0x3195, &(0x7f0000000e40)=0xff, 0x2}, {0x100000001, &(0x7f0000000e80)=0x34, 0x82}, {0x5, &(0x7f0000000ec0), 0x2}], 0x2d, 0x0, &(0x7f0000001380)={r7, r8+60000000}, 0x0) sendto$inet(r6, 0x0, 0x0, 0x24008818, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ftruncate(0xffffffffffffffff, 0x6000000) splice(r6, 0x0, r9, 0x0, 0x7ffff000, 0x0) shutdown(r6, 0x1) r10 = syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000080)={r11, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000001000, 0x0, 0x0, 0x17, 0x1c, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40e78d2c4d03d81a8ca55ba139c01802c4dae416a34dac65b7ad33", [0x8, 0x5]}}) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, r11) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) 1m52.084904473s ago: executing program 33 (id=291): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x24}, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0x0, 0x800000000000, 0x0, 0x0, 0x3, 0x1}, {}, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x2}, {{@in=@private=0xa010101, 0x0, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) 22.303030459s ago: executing program 4 (id=896): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000840)={0x1, 0x6, {0x8000000000000001, @struct={0x7}, 0x0, 0x6, 0x6, 0xcd7c, 0x5b, 0x5000000000, 0x4, @usage=0x80, 0x4, 0x5, [0xff, 0x3, 0x62a9, 0x5, 0x3, 0x5]}, {0xffffffffffffffff, @usage=0xffffffffffffffff, 0x0, 0x100, 0x2, 0x8, 0x8, 0x3, 0x400, @usage=0x2, 0x6, 0x7, [0xded, 0xffff, 0x3, 0x2, 0x2, 0x6]}, {0x27fc33ba, @usage=0x4, 0x0, 0x1, 0xec8b, 0x3, 0xffffffffffffffff, 0x2, 0x4, @usage=0xb38, 0xff, 0xfffffeff, [0x400, 0x9147, 0x8, 0x7800000000000000, 0x8, 0xffff]}, {0x400, 0x0, 0x4}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000c40)={r3, 0xe2c6, 0x800}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000340)="f081550000a000000f00000f001e48b8feb65a0d000000000f23d00f21f835200000000f23f8be252e8a094d36420f705626002e660f3a176a4b00b9800000c00f3267420f01c30f5966b8f80cb8c087678eef66bac60fc72a45c194710a000000058a3bc4827dbcae009008f2", 0xffffffffffffffe2}], 0x1, 0x4d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000140)=[@cr4={0x1, 0x40be6}], 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_clone(0x80000080, &(0x7f0000000180)="4f2f550b5f6c00a5744f86f89b7f03fd00acec28afa22a9d8e3e1b8ee90cc97d944234ed8d840560b53ca5b39600f18fb168a6e9e934aa739929db7b445a2911898f11e91bee99f1b73ad576dd608266857ca3e02fcd9a8f23498c41283aa3b15af693d60483e77da1ea38eb482546c24babed533a14932356f018c3ed98f906f0aa8282167fec1eeeac41360839e282ea69b76a9a98bf081a6dcb11811c6447a56ebf8b9b801de34c34", 0xaa, 0x0, &(0x7f0000000280), &(0x7f00000003c0)="1ee805bb1f671969fddd48fbd6a75214d06a393b04d22ad2dfa00ec3f996ad4ddaac75030f98b29470c734411b10a0894e16064b89338e1875f5ebbf3b8af998f0ba39b1b64aa610f88cdcc19bcc82d927693cb5a03f7d72a73e2d") sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x800) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r8, &(0x7f0000000800)='- 1', 0x3) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x4, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x29cc, 0xfe, 0x4, 0x1], 0xc000, 0x141200}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000240)={0x3ff8, 0x104000, 0x1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x82c42, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r9, &(0x7f0000000440)="87fe1cc39966cfc6f6ed7bff1a4cd47fe4a116c62839e3aaff0c85059df3f3535fdd25cf6f255c9877ad180071d4fa594f9bbedf0ab374ce101776c7f586ea62713c3fa4999b1881170920302e8fe085870bddd842d95d85d4385b677e63e60f9568c51e4ccfa768ec3c7e1bb50559c910191a72150e75750721d80fd69b", 0x7e, 0x4020, &(0x7f0000000580)={0x2, 0x4e20, @rand_addr=0x80000001}, 0x10) ioctl$KVM_RUN(r7, 0xae80, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x1c}], 0x1}, 0x4008080) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22.238098341s ago: executing program 4 (id=897): r0 = geteuid() lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac3(0x3, 0x98, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000008410e494240000102030109028600030109200c080b0001010130080904000000010130000a24010122000010000013240303000001060004000002050004000a001f24", @ANYRES16=r2], 0x0) lchown(&(0x7f0000000040)='./file0\x00', r0, r1) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x31, 0x80d, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) timerfd_create(0x0, 0x0) (async) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x3}, 0x8) (async) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x3}, 0x8) pipe2$9p(&(0x7f0000000080), 0x0) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470881000200000001001b24", @ANYRES8=r7], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) mkdirat(r7, &(0x7f0000000100)='./file0\x00', 0xa4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x80802, 0x128) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x80802, 0x128) write$UHID_CREATE2(r8, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00'], 0x1c7) mmap(&(0x7f0000716000/0x4000)=nil, 0x4000, 0x3000008, 0x4010, 0xffffffffffffffff, 0x1000) (async) mmap(&(0x7f0000716000/0x4000)=nil, 0x4000, 0x3000008, 0x4010, 0xffffffffffffffff, 0x1000) 19.672724582s ago: executing program 4 (id=918): socket$inet_tcp(0x2, 0x1, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x42, 0x1, 0xf0}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f00000011c0)={r1, &(0x7f00000010c0)='R/+\x00', 0x4c8001, &(0x7f0000001100)={@align=0x9, {0xf5, 0x7fff, 0x5000000, 0x8ce}}, 0x3ff, &(0x7f0000001140)={@_ha_fsid}, &(0x7f0000001180)=0xb}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x9, 0x3, 0x20, 0x3, 0x2, 0x50, 0xfe, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) llistxattr(&(0x7f0000001300)='./file0\x00', &(0x7f00000000c0)=""/4096, 0x1000) r3 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee01, 0xee00) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) (async) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0x9}, 0x1c) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r5, &(0x7f00000002c0)={@val={0x0, 0x6000}, @void, @eth={@multicast, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x1c, 0x868, 0x4000, 0x7, 0x1, 0x0, @empty=0x1c, @multicast1}, @info_reply={0x10, 0x0, 0x0, 0x46d, 0x6}}}}}}, 0x32) sendto$inet6(r4, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x4000810, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) read(r4, &(0x7f0000000300)=""/4067, 0x6f2cb391) socket$netlink(0x10, 0x3, 0x0) (async) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$RNDADDENTROPY(r8, 0x40085203, &(0x7f0000000040)=ANY=[@ANYBLOB="a7831f6c0728"]) 19.57300593s ago: executing program 4 (id=919): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109240, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xc144f000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0xc144f000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000859000/0x3000)=nil, 0x3000}) rename(&(0x7f0000000200)='./file3\x00', &(0x7f0000000240)='./file1\x00') 19.503176382s ago: executing program 4 (id=921): r0 = socket(0x11, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000001a00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/23, 0x17}, {&(0x7f0000000080)=""/101, 0x65}], 0x2, &(0x7f00000001c0)=""/120, 0x78}, 0xfffffff9}, {{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)=""/69, 0x45}, {&(0x7f0000000440)=""/184, 0xb8}], 0x3, &(0x7f0000000540)=""/43, 0x2b}, 0x6}, {{&(0x7f0000000580)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000600)=""/21, 0x15}, {&(0x7f0000000640)=""/209, 0xd1}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001780)=""/81, 0x51}, {&(0x7f0000001800)=""/63, 0x3f}], 0x5, &(0x7f00000018c0)=""/115, 0x73}, 0x276284f6}], 0x3, 0x40000001, &(0x7f0000001a40)={r1, r2+10000000}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f00000003c0)=@xdp={0x2c, 0x8, r4}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000180)='mNiE', 0x4}], 0x1}, 0x818) 19.40691014s ago: executing program 4 (id=923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000c40)=[@request_death], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000c40)=[@request_death], 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 19.24215784s ago: executing program 34 (id=923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000c40)=[@request_death], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000c40)=[@request_death], 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 8.763354004s ago: executing program 0 (id=953): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) socket$inet(0x2, 0x6000000000000001, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x800, @dev, 0x7}, 0x1c) write$binfmt_script(r0, &(0x7f00000028c0)={'#! ', '', [], 0xa, "bdd92f0efe80000000000000b320655800b2b184ef1b05713031e573a3d16b0acc6de928"}, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'wg2\x00', &(0x7f0000000280)=@ethtool_cmd={0x26, 0x10000000, 0xa, 0x6, 0x2, 0x7, 0x7f, 0x8, 0x7, 0x10, 0x9, 0x0, 0x5, 0x1, 0x5, 0x7, [0x1, 0x4]}}) write(r2, &(0x7f0000000280)='prev_state.function ==x', 0x17) write$P9_RVERSION(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="3000000065ffffff00"], 0x15) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) (async) socket$inet(0x2, 0x6000000000000001, 0x0) (async) socket$inet6(0xa, 0x3, 0xff) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x800, @dev, 0x7}, 0x1c) (async) write$binfmt_script(r0, &(0x7f00000028c0)={'#! ', '', [], 0xa, "bdd92f0efe80000000000000b320655800b2b184ef1b05713031e573a3d16b0acc6de928"}, 0x28) (async) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000800)='0', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'wg2\x00', &(0x7f0000000280)=@ethtool_cmd={0x26, 0x10000000, 0xa, 0x6, 0x2, 0x7, 0x7f, 0x8, 0x7, 0x10, 0x9, 0x0, 0x5, 0x1, 0x5, 0x7, [0x1, 0x4]}}) (async) write(r2, &(0x7f0000000280)='prev_state.function ==x', 0x17) (async) write$P9_RVERSION(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="3000000065ffffff00"], 0x15) (async) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) (async) 8.760612604s ago: executing program 2 (id=954): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) (async) splice(r0, 0x0, r0, 0x0, 0x1b4, 0xd) (async, rerun: 64) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x161) (rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000040)) (async, rerun: 64) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x8000, 0x8041, 0x7, 0xdd, {{0x6, 0x4, 0x0, 0x17, 0x18, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @multicast2, {[@timestamp_prespec={0x44, 0x4, 0x25, 0x3, 0x8}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r8, 0x2d, 0xe, 0x22, 0xffff, 0x40, @mcast1, @mcast2, 0x40, 0x80, 0x5, 0x7}}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@private1, r9}, 0x14) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x28, 0x0, 0x8008004, 0x0, 0x2, 0x2, 0x40001, 0x0, 0xfffffffc, 0x80, 0x9, 0x6, 0x0, 0x20004, 0x800005, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0xfffffffc}}) (async) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000000)=0x1000000, 0x4) 8.758849894s ago: executing program 5 (id=955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x72, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xf0, 0x401, 0x4, 0x4000000000007, 0x4, 0x7, 0x80000001, 0x4, 0x200, 0xff, 0x6, 0x5, 0x100000000036, 0x7, 0xc], 0x0, 0x2a80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="d3f366470f38800c1d00180000450f01584bc4a179174100b946020000b800800000ba000000000f30c443fd0037bfc74424000000c0fec7442402dfd260f6c7442406000000000f011c2466baf80cb83ca23886ef66bafc0cb82a0b8981ef0f01d1c7442400e8000000c744240200000000ff2c24", 0x75}], 0x1, 0x13, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)={0x0, 0xfb, 0x111, 0x0, 0x9, "bbf6955ddce8144d939a525110864c2f", "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"}, 0x111, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.270484252s ago: executing program 0 (id=956): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @private=0xa010102}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e) memfd_secret(0x80000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x591080, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 7.268754852s ago: executing program 2 (id=957): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) 7.268287652s ago: executing program 5 (id=958): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$9p_unix(&(0x7f00000014c0)='./cgroup/file0\x00', &(0x7f0000001500)='./cgroup\x00', &(0x7f0000001540), 0x4000, &(0x7f00000015c0)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)={0x40, 0x12, 0x3, "64d99b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x6}, 0x67, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@multicast2, 0x2000000, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x45}, 0x0, 0x3, 0x1, 0xb7, 0x0, 0x8001, 0x3}}, 0xe8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f852"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) syz_usb_control_io(r1, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="400a03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) unlink(&(0x7f0000000080)='./cgroup/file0\x00') 5.618290849s ago: executing program 0 (id=959): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) pwritev2(r0, &(0x7f0000001600)=[{&(0x7f00000000c0)="2e29ba89341dac4ad8fa9419fcfda5a463844c663d087ea5b8544b3dc362304d2a653114b4874c868720817040d811a3fe661518cafdaaaae554ee94ab36afc304e45e59d781a3f2e3c47add07be3d73d75ce1f4805cb0f44a71170a469d00552f944ba41f6a073ef74cfb1419ad68cfa43e0b745fd5dc48", 0x78}, {&(0x7f0000000140)="4ee69d", 0x3}, {&(0x7f0000000600)="15ebed6ba1624f507725ed2ae2c10d0f27c16b9f9185fadc8045cf3633f82b20eac532c5d2f511a5ae401df9b31119dc26d76cff5253a762e421c59b9a48cc38b5b67e3bba81486c6ee292eb22681787967e98f015bcbc654a6bf85a5da74658917801416d54a1d95217a75a28034e1c4508eed0de753bc8ccd903e3a100a6cb1cc3bc602fcc24a96d2a0fa41adade7eb0848c3e51b84a938bc1a27306e6afa0f97e6d0920af21c640557812833247f9fd851fbb7771c8d9252bc2abc49733dd2e9ebb13b5cb39e9d00aca89995163fca1f1f69cbe54f3b77e8a493e665922ae1759fd13e3e3e29ea520929ff6e814bb5a48e69ad08f75c852ef8271c1b16575fd4891dd26ebbb9c04ac4e62fa9e6a65a83eedf86979a996ceb894712487a1ee71287c575d13b88b7fa26d3fbdf1afc93d9c7cc2d2ec973498d638cc7b4b78827445111ca62ac73b3e2e621f106bbc71cceb06274e298217aa4d9699f6f180fd88294c05d386a646c7e5a76b5cd7775b235434e72074e36ce91272700a3c03590acaf6f08853d359da1a13f106709e200e5479b48d435231d2c5a39b1778a012e45041e8d814ceb3235a5ef84a86e214a9ba9570b3cadc147c67747320916dd18b0cbdfa1e21365e6a2e2ac2b332be83dff576171e68220341346b92cb117f8cb72a251349092ded4b988746e30abca6fb7e970592889b36e9e3e4f4cf431279ec6efd6de657179549c22f5a8264afcc8a16128e88d1d00f8b98588411bea24ec302156f9c5b5d6d11abc053ae975ffed065a9d808515e2aa38ae90a3f13214315e1bbe7ca10e3e32fadefe6354bf0b78de9a4e7f8ef73533e8c1500083053d25cb957a7899d79f93c9878785b0300a8bef3c9dd8acd62268b961bda6488f86120551906dd311a92ad060c268123182a3176c9484430b6b77ba0b5ae39d3a854d68c8f3435d6afc11464b1c6032e0037907c4056a5957a181f1cb5bca091df748cabfc03c555a32e2c23c29d766faeb2da79dd9c6f5ae903376d11ccc259fedb479c56a5e44212902d50d8866ca9902f10436876cb939db8afed0c8d2d92abb5256988b8b5b34fdb8c61f66726163c0fff0c2974dfae303cc10c6ef3f2b542de6a4629c759c2baa11a5521f1d575bb433fb99ed4c38f12dcf85aea27acd1467657cd788cbceaf0044b3529dff353ce7b8cfb7c8c7740d936d3b11eb1979bc1edff1fc7cbd2b48b77ff8dee0f9e7295fc104ab1c021333448b2d1099c00fcf271d13a4a26f14359e2c9f8d6d9cc145235fd9d18ecf27465b268e5d38871faa58d7042936f730c6cf5e6ddbfc619f544743fddb4dd5db8ed5a0faafea8b8842c8861dd8213dc4bdb41fdc688119417ec02c8c0931c77a8c18d419f94ccd97ac9b87cd06966f043b3c41d4b5e183c61790d2fc151e3e83774e555d1ebf0fe0dbc747f522c408b9947c1130ee6571410a75570bad93c8291c8cc4300d516f893e8c81bbd074895150d9a6bebcf2126b03922d4e05e47307bc5fbd585e8ed035501726e65cce7ddf07d5e757fa1cd32697842f5eed30a155720d9e72f2af82305cdbae9896962e48ed522f8030ca01646674c0311ad4f9ca3c4160f581200ce41c158fe26b94d1c7fa145f47325b8345ffac2d77a1352784f6efc6cb20315eced576717b984e3fdd658955f57cc09d362b1337614298c5fe75fab82fbdec8f66dc8a12e96843e7ad7b22af2872359abb92cea7c2aba0ce03f7266d819a1ec998c780d58e2c7704d913a6e944dc516eff1a5fa2f4519ad96a7fa2e64d2f998ebe5b55099bff587b998f9884a0798ef1efe454cf1bfa8d1d605b267ddc9cb86e8f38433016cbe9e9126c0f5f0059d4c85a746c241f95977a37f1845087db7917b258c80bf2a85438a430bf34cae0b5496948412b6d6dc987b7ba92c4b820dce60dd1e9dac7ea689be6433ad3bdd97510f6015cdc713fd491114cb972f66f6fe555925d2922dd807115744de6c3149e8758a8400119dfa7ddd2f5c99a0de9ad28a7ad652905007cf3d6853b9329592f669ba69e4639345fc23d60c2b467e0963a49450b0523de0fc40ea5e5e38710b7c3a8b6ad9ebe057a671af2064fcfc2323559e2bfe25c751ab5039223b5faef36e01ecc176ab70ceb9e5b344a35467d53710947f153dc2b58cb9029ce00c2499138d305af52d4e9d523fa7f2083248af50734b87a62a73d2851db147b02e65da5f9dd5f64df49488354752b3029484d177c74f5fc293ab5f4aba574336906795f4f3f432bc41110d6d7afe2861c4389e0a6252080464e2176732c33cbd3b32d921de07338e5885ba291b863076ad11f48fe5f728318ace5c935e1faf3683fe881daf8f7cf9b2f1750983d7531a64541e4d3d77fcf366de85d86d5a8dd11941accc3b02bdcb40635a1c275d423be95d8db5fc3775536dccf52a8af9f9052e521e20aa0ce053c1ff8d7ca005016eb64a71d9bdfce369ffa52e732613f414d821b45782506002793819c9fbbe368eee62c4df5c5853d82f2f54cc903e48a4fa2071a999c1c8f52a674e147318ae1edceaec8f8156d2888cb28c172af1d2e48f56a25b09a03503d0e480b3c590181fc9cf5274eb16e34e30bb04d6c782c047505a9bc1686c4a8f08ad58f6f1b486a8098aff81d9a945cc7b3798c705738772695d27bd08a79ffac30db4ed6de42a198606b8c215633b35fb16244b4fdb7b217b4b5d7a372bba692ae445ff137764b8b33b9003433b0f3b233834ff4c8fca9fc96fa9b5e1c289b2c9427700531787d953270f0daa5aa06949e7ed18815a0a7d1880ae9d1511043d676b15073e5691286c25517479cfdf73809a079fd4e5e36da00033e76442fdf506f9220ba282ad95f372f33fd259a2f152800856324e78692480592d9ac53db66c752b78a29c698e220484163ee9711a330a648fffd277e68fe767271aeb2fbe68e459fec74a56cee1b37af8fa349e5aca2190d0ece7cb77cebd3e5360ad8c8ebffe75ea890b2515af2691ac56e8828752be3912f88d9592cca29e8db2339f731b188ad76ff87cbabb19ae9b08904ec96e9692d29fb494587f606556970cb02fc9834c6b9e03de10a64dc225c996ee4e14892eff5657aef51f492f83f876f8514c31a6affe74f18fd867790c07eac6ed95e1aaa9c390d4c20b2c49ed14dde9f9ef0410089fb2d0b88e0d1094953d438e0bc3ff7426ee8d1427f4430004f5c99165f6a38a7727ff48c2bf4e705e603563d48bd290653053c7d6a03e2f419024e354ad9d2fb4748961c6b23655641019aa83629fb6729ca298e141242f231f3d331ac186049400412e3101c12523fe542f6396577f11bc5f2eef960afd485a371792e4eb8b8e2376bad9929d9aacb485bcbd14cb0528d1af203521cf2b6d1eddacefa1d2ad2ba7ac727db9311fe385bb2c25a730b4c941dd0b105d75b73b3d931faeee495862b7d45e28d1d5516d7a5ae0ebce5914ee5f4b2e6a410e2b921326f6fb6d7f1fb4ddffb7801ecb092d3d437489e5f8ac2285e75aec002482b3a7e58afa4acf178eedaa5ac8c4ef5f515012e41013505fe41bd34c04ec8747bf50a76d7250c312ec8aa74050b7f7873b1331ecca99f5f01941c7c8b76c743032e713ffa64c8c26a7ec09a7eee6ade889e2fa6eca41c61e89bff2a2e2754f4b67694d80169969de0c03c50ebe32b69eff0293bece21615be9786ee12f64e9256820f45b2986a2fa01bf5152a0e3d5dd56eb4c89989b3b1dd9068c9b3a32c03760e96bf231e98c6da29260d224b9370d15df3811b65331d180a28d3b5ae5e04c0b134324107fa6f8fe1f0fbebf8a556fecda985e413ebf36402e2ea21c662536fefa091adf60b8e21f1374fa54fbed6513149b79b4357f78ad4a70cc5a1eac7d3cccb15e8c13bc67a49e3fa3749a9b2d13027153208d1c6ecc234629bb2e1b876b017fdc675c7fee62c22b799ac71251dead9ebbf7a1501a699a80c68a803beffd34657e1d7048f4650ad19f3031787b1bf9d5a8e150f550b67baf15d337d4c2c673dbe972da4a65d05a7881b0f30ae489aaf85944150e8fcd9918ec020233ba93c894f8b472abd882e9c030a07dd548869d83c9e6fb16082a548628f2df12176d7bcea03736caf0926368534d708825487994ee54d1a0fe0a442b421349e85b2c521352d33d57c5d2c1d1bf3c1b0a034b5f42a7bb68feb8b45d4efe54c9889eca23f22b422cc94d59b7e80835b900d1ea84b6c72eab66e1b4cf33aa1c24275b83f1c18a1a87e3ab1f59bced858b3e8f02f8f8d706bdc886a881aa5000e952d76aa6211f426ae57e26a0826efb907f8802c5e26aaac1706d4eadf195bba9f2a46505a4992976c004f7695200e55589682d40a8ee63161c6b794c65bda055b42c230083cff3b068843e60d677d9c3962512d957ebfdc23a2e81a4a77c6d373bc93430186ba90728fa1a74da68a4fa896fcec5b45e91aa62c41949b2789c15ae0830999d29157321bdf434fb740fa0c79cf967e999e2fd5454af84064bc89dbcef8e96f9aa88bdafad02cf52e975cae7e75dbf11e1733498413e40a300242641722440ba6b2d5d62ff7705b0efe229a7de8a16ad8ac67e4aa354e652233af5f061bb5576e8b0ba19087315a1586454323c3bbc0377de4b58634dad9416d365d849a2461d0856acb5c6a6b73f69da56583fb10305625d01a125ac54439ed420c77e820bdfc2cb63a49081c2a84591a80e06b9007e58cfa8ef6d4f6735ac1e91d3c635df9e3502207dc10ab9efd9583b82c72e9454a45c0f1f34a7848a91a6f54a012792b5bf477db19df1ac1e414380891a77d3ec0f0cfa2191959a3a64e9e0ea86a33343d2ceda9ec7cfeae9e2aa1590c90105427e7a0bc3d839a34acface3628e0fd4505c732d6325ae2705b63fd282459a86ef3dc0964d7d471abb55eba8847bb0f1b8c5531f0c1b2aff71447ef96ec810a709a16644668d54fd2ea3cef441145958b7e4c0906edc07bd39a093c31b39da4f44cab951b9234d9f57b5a14daf5f8e4e0ed6b536112b251f6cd132dd6923a8e5edd87154656a24f4b6943363f42262a32e488f264ffbdd955c7957d5f2b20238d20e6d3145595fb56dc56ab80491f87a8b99dfb2530fc70b55bb385c21d6bf2db6a4f2caa62643b509f0c2ab13ed6e50b3960e428e45d529f38522267d4cc70afd6081b8ebff4ae242d9eb3624ee1f1c6d1586cdfe19fae79b20ba734818c74b22a6e8eb46181434a889375e41b4ca84d4352fe28f02380f1b24934309746767bf4e1fae5ce4ca56a473ee7a9cb775b2f29945e89167f12283604f74175240644f4a6fb6e32564dc770e592d019e61add11f1488015ac250723d4396913a7b43f29ae115e51e600d09023d50b3a9cfd4facd8869febbf29f88cc7f89350c1fa030820a4d77506cc92090f774508d6463501a36d453dd6fd5e498beda417e380f2ef5c6d9caa4e12fb8976f4837ad07782083c8873ab96e010dd1199cf53f4dfbf26ae53816a1bc5b22282110a5c41cdc360c51a8904cde821fe4461beac4f073b21098b0683b9a19c8c7a6e9a4ff57a7cdc8c425486cc2f328d382f93cdeef9e743cbd753a4e803093b9b28d397df7658024c666ac50d1040e01c5ba266f481e2831454e173786c2a1c119dd4531061d2607cbd14b4d90e898e7f37794148a61c1fe93677a26022c876c4039fbba8684371e250e7eb3104ebe2123eaf602a3a42c4b2ad8603bfe0c201f21a524a10ecca066c7453b934566c348d5c0954d30be12bb", 0x1000}], 0x3, 0x5, 0x3, 0x11) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@textreal={0x8, 0x0}], 0x1, 0x73, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x100003, 0x0, {[0xfffffffd, 0x8, 0x3, 0x4, 0x93b, 0x80, 0xd, 0x9]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.617920989s ago: executing program 2 (id=960): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) syz_usb_connect$uac1(0x3, 0x82, &(0x7f0000000240)={{0x12, 0x1, 0x341, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x5a, 0x80, 0x18, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1ff, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x6, 0xc, {0x7, 0x25, 0x1, 0x8, 0x81, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xc2, 0x3, 0x0, 0xa, 0x3}, @as_header={0x7, 0x24, 0x1, 0x3, 0x4, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x9, 0x8, 0x7, {0x7, 0x25, 0x1, 0x4, 0x1, 0x8}}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) setuid(0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r5, &(0x7f0000001fc0)=[{{0x0, 0xffffffffffffff2b, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="8c", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x8004}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="b0", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x841}}], 0x2, 0x11) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000200)={0x0, 0x210000}) openat$kvm(0xffffffffffffff9c, 0x0, 0x385c0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x120422, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff000000070581024000000705020240000007058303"], 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x12df00, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x60) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r9, 0x0, 0x119) ioperm(0x0, 0x1, 0x1) close_range(r7, r8, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, &(0x7f0000000180)}) close_range(r10, 0xffffffffffffffff, 0x0) 5.617197079s ago: executing program 5 (id=961): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x10) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000280)={{&(0x7f0000000040)=[{0x0, 0xa, 0x1, {0x2ee, 0x4}, 0x13, 0x200, 0xd8}], 0x1, 0x40, 0x8, 0x80}, {&(0x7f0000000080)=[{0x2, 0x80000}, {0x80000001, 0x7009}, {0x1000}, {0x5, 0x1000}, {0x5, 0x8}, {0x5, 0x5}, {0x5, 0x7}, {0x1, 0xfe}, {0x800, 0xbb4}], 0x9, 0x10, 0x5, 0x3}, {&(0x7f0000000140)=[0x1, 0x800, 0x100000001], 0x3, 0x8, 0x52c0, 0x5}, {&(0x7f0000000180)=[{0xffffffff, 0x6, 0x8, 0x5, 0x8}, {0x6, 0x7, 0x948, 0x589}, {0x2, 0xa7, 0x684d4b79, 0x5, 0x4}, {0x82c, 0x3, 0xfe21, 0x6, 0x8}], 0x4, 0x28, 0x3, 0x5}, {&(0x7f0000000240)=[0x0], 0x1, 0x8, 0x5, 0x2}}) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000300)=""/217) (async, rerun: 64) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000400)={0x7, 0x1}) (rerun: 64) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000440)={0x2, 0x0, [{0x80000019, 0xd, 0x4, 0x2, 0x0, 0x3500bcd7, 0x93}, {0xc0000001, 0x6, 0x7, 0x9, 0x4, 0x2, 0xfffffff6}]}) (async) r2 = inotify_init1(0x800) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000004c0)) (async, rerun: 64) ioctl$int_out(r2, 0x5460, &(0x7f0000000500)) (async, rerun: 64) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x9, 0x2) ioctl$HIDIOCSFLAG(r3, 0x4004480f, &(0x7f0000000580)=0x2) r4 = accept$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'syztnl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0x4, 0x0, {{0x34, 0x4, 0x0, 0x7, 0xd0, 0x68, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @private=0xa010101, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x1b, 0xfe, [@local, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010102, @rand_addr=0x64010102, @multicast1, @remote]}, @timestamp={0x44, 0x24, 0x51, 0x0, 0x9, [0x7, 0x101, 0x3, 0x7, 0x7, 0xa, 0x10001, 0x6]}, @timestamp_prespec={0x44, 0x2c, 0x9, 0x3, 0x9, [{@multicast1, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xde}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x4}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x3}]}, @timestamp={0x44, 0xc, 0x6a, 0x0, 0x6, [0x3, 0x26c31b0]}, @generic={0x83, 0x6, "1f50544f"}, @cipso={0x86, 0x35, 0x0, [{0x6, 0xe, "f40ced3095e7a9317e209646"}, {0x7, 0x11, "2a7ac8747f4edac4b85b38bd6a0154"}, {0x0, 0x5, "3bac3d"}, {0x5, 0xb, "5fbc2643b1aa8573ab"}]}]}}}}}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000780)={r5, 0x1, 0x6}, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x11190902}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20040084) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r7, &(0x7f0000000a40)={&(0x7f0000000900), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x5c, r8, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, '%(>[\'\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48802}, 0x40004) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x101000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r10, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x48040) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), r9) sendmsg$TIPC_NL_MON_GET(r11, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xdc, r12, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x41, 0x3, "c46278af659d6c31ca28ed7ff4a571b538f81ded671923349ddc1148d80912dfa9480666f288c47b00696e7a3a50d1b1619d96b7725545e5694f344b9e"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "b66744716a39249bed935067c405a259c21984b9dd0416c34cc3c3b6e4b277"}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40001}, 0x2000004) fallocate(r4, 0x3a, 0xb7c, 0x0) (async, rerun: 32) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFNL_MSG_ACCT_GET(r13, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x84, 0x1, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffe00}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10d}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3ff}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008884}, 0x900) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) 3.877494912s ago: executing program 0 (id=962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x9, 0x7fffffff, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, 0x700, 0x80, 0x9, 0xfffffff1}}) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffdfffffd) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0xc0010003, 0x0, 0x1}, {0x34, 0x0, 0xff}]}) 3.876553453s ago: executing program 2 (id=963): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = openat(r0, &(0x7f0000000040)='./dev\x00', 0x42, 0x0) fallocate(r2, 0x0, 0xa20, 0x8000c65) syz_open_dev$loop(&(0x7f0000000100), 0xffffffffffffffd0, 0x412000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) inotify_init() sendfile(r3, r3, 0x0, 0x8000000f3aa6ea) 3.876335173s ago: executing program 5 (id=964): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x5, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe, r0, &(0x7f00000000c0)='\f\v', 0x2, 0x0, 0x0, 0x4}]) syz_ublk_setup_io_uring(0x256, &(0x7f0000002500)={0x0, 0xe2f1, 0x87, 0x1, 0x219}, &(0x7f0000002580), &(0x7f0000000000), &(0x7f0000002600)) 1.94295114s ago: executing program 0 (id=965): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newsa={0x160, 0x10, 0x413, 0x70bd2b, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@empty, 0x20, 0x7, 0x4e24, 0x0, 0xa, 0x0, 0x20}, {@in6=@remote, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x4, 0x7, 0x0, 0x40000000000005, 0xffffffffff7fffff, 0x6, 0x7f, 0x2}, {0x0, 0xfbffffffffffffff, 0x4}, {0xf6, 0x2, 0x100}, 0x70bd21, 0x34fc, 0x2, 0x1, 0xbe}, [@algo_aead={0x70, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x120, 0x40, "e40d9c8427202d9ffa6e0368fd3c61811ffa17a01d21165fbcd6129c37e9e192b6913019"}}]}, 0x160}}, 0x810) (async) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000003000), 0x201, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x5) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, 0x0) (async) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20001, 0x0) (async) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) (async) keyctl$chown(0x4, r3, 0xee01, r4) (async, rerun: 64) keyctl$setperm(0x5, r3, 0x30925) (async, rerun: 64) keyctl$KEYCTL_MOVE(0x3, r3, 0x0, 0x0, 0x0) (async, rerun: 32) sendmmsg$inet(r2, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0xfffffd0e, &(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D \r'], 0x38}}], 0x400000000000049, 0x46000) (rerun: 32) 1.94225206s ago: executing program 2 (id=966): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000540)=0xf) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1a4}}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x88080, 0x16) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) syz_clone3(0x0, 0x0) capset(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='hist:keys=next_pid', 0x12) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000005, 0x11, r0, 0x331fa000) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x82, 0x0}, 0x10) 1.94200319s ago: executing program 5 (id=967): unshare(0x20000000) (async, rerun: 64) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r1 = syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r0], 0x1}, 0x58) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(r1, &(0x7f0000000000)='numa_maps\x00') (async) unshare(0x400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12}}) openat(0xffffffffffffff9c, 0x0, 0x143040, 0x58) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 2.538529ms ago: executing program 0 (id=968): pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x401) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x1c019, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) newfstatat(0xffffffffffffff9c, &(0x7f0000004c00)='./file0\x00', &(0x7f0000004c40), 0x4000) 820.8µs ago: executing program 2 (id=969): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x400000b0}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$FUSE_STATX(r3, &(0x7f00000027c0)={0x130, 0x0, 0x0, {0x7, 0x463, 0x0, '\x00', {0x200, 0x800, 0x401, 0x347, 0x0, 0x0, 0x1000, '\x00', 0xfff, 0x10005, 0x0, 0x4, {0x10, 0x5}, {0x1, 0x2}, {0x27a0, 0x7}, {0x5, 0x401}, 0x5, 0x3, 0x2, 0x2}}}, 0x130) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) write$cgroup_netprio_ifpriomap(r5, &(0x7f00000010c0)={'vlan1', 0x32, 0x39}, 0x8) fchdir(r4) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) (async) socket$packet(0x11, 0x2, 0x300) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async) write$tun(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="02031b00fbff100003006332c5ab004c2fff00000000000000000000000000000000ff020000000000000000000000000001"], 0x7e) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)="22e3251524bc70f5fbc250fb7d316c", 0xf}], 0x1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x13, r3, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x14002, 0x0) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}}) (async) read$FUSE(r10, &(0x7f0000002fc0)={0x2020}, 0x2020) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000002100)={{0x12, 0x1, 0x250, 0x94, 0x26, 0xd4, 0x8, 0x502, 0x3394, 0x6221, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x9, 0x60, 0x7, "", [{{0x9, 0x4, 0xc4, 0x0, 0x2, 0xff, 0x5d, 0x81, 0x0, [], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0xe, 0x1, 0xe}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x2, 0x5, 0x4}}]}}]}}]}}, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=970): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x2, 0x0, &(0x7f0000000000)) bind$bt_sco(r1, &(0x7f0000000400), 0x8) (async) bind$bt_sco(r1, &(0x7f0000000400), 0x8) kernel console output (not intermixed with test programs): 051, got 27) [ 27.288542][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 27.299932][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 27.318959][ T312] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 27.329067][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.338025][ T312] usb 1-1: Product: syz [ 27.342384][ T312] usb 1-1: Manufacturer: syz [ 27.347233][ T312] usb 1-1: SerialNumber: syz [ 27.362724][ T312] usb 1-1: config 0 descriptor?? [ 27.493561][ T405] Zero length message leads to an empty skb [ 27.496312][ T67] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 27.502883][ T36] audit: type=1400 audit(1790941121.600:165): avc: denied { create } for pid=403 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.527249][ T36] audit: type=1400 audit(1790941121.620:166): avc: denied { write } for pid=403 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.559510][ T36] audit: type=1400 audit(1790941121.660:167): avc: denied { create } for pid=406 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.582524][ T329] usb 1-1: USB disconnect, device number 2 [ 27.588437][ T36] audit: type=1400 audit(1790941121.660:168): avc: denied { write } for pid=406 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.610733][ T36] audit: type=1400 audit(1790941121.670:169): avc: denied { bind } for pid=403 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.632845][ T412] veth1: entered allmulticast mode [ 27.638481][ T410] veth1: left allmulticast mode [ 27.646332][ T67] usb 4-1: device descriptor read/64, error -71 [ 27.896195][ T67] usb 4-1: device descriptor read/64, error -71 [ 28.006278][ T67] usb usb4-port1: attempt power cycle [ 28.346280][ T67] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 28.377280][ T67] usb 4-1: device descriptor read/8, error -71 [ 28.396166][ T329] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.507588][ T67] usb 4-1: device descriptor read/8, error -71 [ 28.546163][ T329] usb 1-1: Using ep0 maxpacket: 8 [ 28.552545][ T329] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 191, changing to 7 [ 28.569543][ T329] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 28.583755][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.592403][ T329] usb 1-1: Product: syz [ 28.596792][ T329] usb 1-1: Manufacturer: syz [ 28.604785][ T329] usb 1-1: SerialNumber: syz [ 28.610403][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 28.633150][ T443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4120 sclass=netlink_route_socket pid=443 comm=syz.1.40 [ 28.756209][ T67] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 28.777311][ T67] usb 4-1: device descriptor read/8, error -71 [ 28.826590][ T329] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 28.847288][ T329] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 28.863526][ T329] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 28.874909][ T329] usb 1-1: USB disconnect, device number 3 [ 28.888935][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.907512][ T67] usb 4-1: device descriptor read/8, error -71 [ 29.026438][ T67] usb usb4-port1: unable to enumerate USB device [ 29.351059][ T446] type: 8192 invalid [ 29.783413][ T329] smpboot: CPU 1 is now offline [ 29.850771][ T485] usb usb9: usbfs: process 485 (syz.3.56) did not claim interface 30 before use [ 29.996760][ T329] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.050936][ T504] SELinux: Context Ď is not valid (left unmapped). [ 30.060303][ T507] overlayfs: failed to resolve './file0': -2 [ 30.156146][ T329] usb 2-1: Using ep0 maxpacket: 8 [ 30.167234][ T329] usb 2-1: config index 0 descriptor too short (expected 1060, got 36) [ 30.179990][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.206217][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.222477][ T329] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.240169][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.257509][ T329] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 30.277330][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.296195][ T329] usb 2-1: config 0 descriptor?? [ 30.397773][ T9] usb 1-1: config index 0 descriptor too short (expected 26977, got 36) [ 30.407807][ T9] usb 1-1: config 45 has too many interfaces: 108, using maximum allowed: 32 [ 30.423335][ T9] usb 1-1: config 45 has an invalid descriptor of length 0, skipping remainder of the config [ 30.446484][ T9] usb 1-1: config 45 has 0 interfaces, different from the descriptor's value: 108 [ 30.466050][ T9] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 30.484024][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.666189][ T440] Bluetooth: hci0: command 0x1003 tx timeout [ 30.672361][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 30.678696][ T437] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 30.716801][ T329] sony 0003:1345:3008.0002: unknown main item tag 0x0 [ 30.723648][ T329] sony 0003:1345:3008.0002: unbalanced collection at end of report description [ 30.744613][ T329] sony 0003:1345:3008.0002: parse failed [ 30.758479][ T329] sony 0003:1345:3008.0002: probe with driver sony failed with error -22 [ 31.746151][ T497] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 31.897297][ T497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.908507][ T497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.918777][ T497] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.931985][ T497] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.941316][ T497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.950840][ T497] usb 4-1: config 0 descriptor?? [ 32.360363][ T497] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.371126][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 32.371141][ T36] audit: type=1400 audit(1790941126.470:211): avc: denied { create } for pid=565 comm="syz.2.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 32.405297][ T497] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.418666][ T497] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.430076][ T497] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.437776][ T36] audit: type=1400 audit(1790941126.530:212): avc: denied { ioctl } for pid=567 comm="syz.2.80" path="socket:[6277]" dev="sockfs" ino=6277 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.462121][ T497] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.469860][ T497] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.477544][ T497] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.485154][ T497] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.492897][ T497] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.500555][ T497] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.508232][ T497] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.516260][ T497] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.523829][ T497] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.531533][ T497] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.539399][ T497] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.547206][ T497] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 32.569683][ T497] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 32.620087][ T497] usb 4-1: USB disconnect, device number 7 [ 32.627476][ T36] audit: type=1400 audit(1790941126.720:213): avc: denied { read } for pid=561 comm="syz.3.78" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.658730][ T36] audit: type=1400 audit(1790941126.720:214): avc: denied { open } for pid=561 comm="syz.3.78" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.681863][ T329] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 32.775899][ T357] usb 2-1: USB disconnect, device number 3 [ 32.810056][ T36] audit: type=1400 audit(1790941126.910:215): avc: denied { append } for pid=572 comm="syz.1.82" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.866153][ T329] usb 3-1: Using ep0 maxpacket: 16 [ 32.874325][ T9] usb 1-1: string descriptor 0 read error: -71 [ 32.891148][ T329] usb 3-1: unable to get BOS descriptor or descriptor too short [ 32.899939][ T9] usb 1-1: USB disconnect, device number 4 [ 32.924418][ T36] audit: type=1400 audit(1790941127.020:216): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 32.944525][ T329] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 32.977473][ T329] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7 [ 33.010239][ T329] usb 3-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 33.021257][ T36] audit: type=1400 audit(1790941127.100:217): avc: denied { mounton } for pid=581 comm="syz.1.86" path="/24/file0" dev="tmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.047622][ T329] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 33.074149][ T329] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid maxpacket 12408, setting to 64 [ 33.096635][ T36] audit: type=1400 audit(1790941127.200:218): avc: denied { mounton } for pid=584 comm="syz.0.87" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 33.121964][ T585] netlink: 'syz.0.87': attribute type 11 has an invalid length. [ 33.131970][ T329] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 33.141393][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.172116][ T329] usb 3-1: Product: syz [ 33.187391][ T36] audit: type=1400 audit(1790941127.230:219): avc: denied { append } for pid=584 comm="syz.0.87" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.211408][ T329] usb 3-1: Manufacturer: syz [ 33.219730][ T329] usb 3-1: SerialNumber: syz [ 33.241993][ T36] audit: type=1400 audit(1790941127.250:220): avc: denied { setopt } for pid=584 comm="syz.0.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.428883][ T329] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 33.454375][ T329] usb 3-1: USB disconnect, device number 3 [ 33.460386][ T357] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 33.506220][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.606181][ T357] usb 4-1: device descriptor read/64, error -71 [ 33.656201][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 33.662623][ T9] usb 1-1: config index 0 descriptor too short (expected 1060, got 36) [ 33.671246][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.682516][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.692669][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.705732][ T9] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 33.714953][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.724069][ T9] usb 1-1: config 0 descriptor?? [ 33.860513][ T357] usb 4-1: device descriptor read/64, error -71 [ 33.870063][ T596] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 33.985363][ T609] ./dev/sda1: Can't lookup blockdev [ 34.116139][ T357] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 34.266159][ T357] usb 4-1: device descriptor read/64, error -71 [ 34.333746][ T9] sony 0003:1345:3008.0004: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 34.344367][ T329] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.353165][ T9] sony 0003:1345:3008.0004: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.0-1/input0 [ 34.382932][ T497] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 34.390507][ T9] sony 0003:1345:3008.0004: failed to claim input [ 34.517357][ T329] usb 3-1: config index 0 descriptor too short (expected 26977, got 36) [ 34.525894][ T329] usb 3-1: config 45 has too many interfaces: 108, using maximum allowed: 32 [ 34.534738][ T357] usb 4-1: device descriptor read/64, error -71 [ 34.541369][ T497] usb 2-1: device descriptor read/64, error -71 [ 34.547755][ T329] usb 3-1: config 45 has an invalid descriptor of length 0, skipping remainder of the config [ 34.558268][ T329] usb 3-1: config 45 has 0 interfaces, different from the descriptor's value: 108 [ 34.567653][ T329] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 34.576967][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.646291][ T357] usb usb4-port1: attempt power cycle [ 34.796140][ T497] usb 2-1: device descriptor read/64, error -71 [ 34.986166][ T357] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 35.007147][ T357] usb 4-1: device descriptor read/8, error -71 [ 35.036158][ T497] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 35.137109][ T357] usb 4-1: device descriptor read/8, error -71 [ 35.166149][ T497] usb 2-1: device descriptor read/64, error -71 [ 35.376149][ T357] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 35.397141][ T357] usb 4-1: device descriptor read/8, error -71 [ 35.406282][ T497] usb 2-1: device descriptor read/64, error -71 [ 35.516264][ T497] usb usb2-port1: attempt power cycle [ 35.527282][ T357] usb 4-1: device descriptor read/8, error -71 [ 35.636235][ T357] usb usb4-port1: unable to enumerate USB device [ 35.856154][ T497] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 35.877091][ T497] usb 2-1: device descriptor read/8, error -71 [ 36.007078][ T497] usb 2-1: device descriptor read/8, error -71 [ 36.246147][ T497] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 36.268192][ T497] usb 2-1: device descriptor read/8, error -71 [ 36.280448][ T357] usb 1-1: USB disconnect, device number 5 [ 36.407097][ T497] usb 2-1: device descriptor read/8, error -71 [ 36.526332][ T497] usb usb2-port1: unable to enumerate USB device [ 36.586209][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 36.726137][ T9] usb 4-1: device descriptor read/64, error -71 [ 36.746203][ C0] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 36.966137][ T9] usb 4-1: device descriptor read/64, error -71 [ 36.990203][ T329] usb 3-1: string descriptor 0 read error: -71 [ 37.014736][ T329] usb 3-1: USB disconnect, device number 4 [ 37.216161][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 37.356143][ T9] usb 4-1: device descriptor read/64, error -71 [ 37.381864][ T635] capability: warning: `syz.1.102' uses deprecated v2 capabilities in a way that may be insecure [ 37.399545][ T329] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.418570][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 37.418608][ T36] audit: type=1400 audit(1790941131.520:232): avc: denied { read write } for pid=633 comm="syz.1.102" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 37.480840][ T36] audit: type=1400 audit(1790941131.550:233): avc: denied { open } for pid=633 comm="syz.1.102" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 37.531403][ T36] audit: type=1400 audit(1790941131.550:234): avc: denied { mounton } for pid=633 comm="syz.1.102" path="/30/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 37.587126][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.598186][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.607975][ T9] usb 4-1: device descriptor read/64, error -71 [ 37.616702][ T329] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 37.635488][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.653793][ T329] usb 3-1: config 0 descriptor?? [ 37.716240][ T9] usb usb4-port1: attempt power cycle [ 38.056152][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 38.070580][ T329] usbhid 3-1:0.0: can't add hid device: -71 [ 38.078906][ T329] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 38.097022][ T329] usb 3-1: USB disconnect, device number 5 [ 38.109282][ T9] usb 4-1: device descriptor read/8, error -71 [ 38.247097][ T9] usb 4-1: device descriptor read/8, error -71 [ 38.486138][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 38.517071][ T9] usb 4-1: device descriptor read/8, error -71 [ 38.593571][ T36] audit: type=1400 audit(1790941132.690:235): avc: denied { append } for pid=641 comm="syz.2.103" name="uprobe_events" dev="tracefs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.618675][ T642] x_tables: duplicate underflow at hook 2 [ 38.654177][ T9] usb 4-1: device descriptor read/8, error -71 [ 38.766218][ T9] usb usb4-port1: unable to enumerate USB device [ 39.242832][ T652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.106'. [ 39.280532][ T652] ./dev/sda1: Can't lookup blockdev [ 39.293132][ T36] audit: type=1400 audit(1790941133.390:236): avc: denied { map } for pid=651 comm="syz.3.106" path="/22/mnt" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.410672][ T660] fuse: Unknown parameter 'fd‰‚‡H§®š (8 S' [ 39.433332][ T36] audit: type=1400 audit(1790941133.530:237): avc: denied { associate } for pid=659 comm="syz.0.109" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.550385][ T667] fuse: Unknown parameter '0x00000000000000040xffffffffffffffff' [ 39.926225][ T497] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.997033][ T36] audit: type=1400 audit(1790941134.100:238): avc: denied { append } for pid=678 comm="syz.0.117" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.040176][ T9] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 40.077563][ T497] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.087857][ T497] usb 3-1: config 0 has no interfaces? [ 40.093425][ T497] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 40.102799][ T497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.114282][ T497] usb 3-1: config 0 descriptor?? [ 40.196182][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 40.312975][ T36] audit: type=1400 audit(1790941134.410:239): avc: denied { mounton } for pid=692 comm="syz.1.120" path="/32/file0" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 40.346158][ T9] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 40.371526][ T497] usb 3-1: USB disconnect, device number 6 [ 40.526161][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 40.531832][ T9] usb usb4-port1: attempt power cycle [ 40.616199][ T329] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 40.766871][ T329] usb 2-1: not running at top speed; connect to a high speed hub [ 40.775348][ T329] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.785685][ T329] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 40.794977][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.808954][ T329] usb 2-1: Found UVC 1.00 device (0000:0000) [ 40.816052][ T329] usb 2-1: No streaming interface found for terminal 2. [ 40.876186][ T9] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 40.896562][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 41.008520][ T329] usb 2-1: USB disconnect, device number 8 [ 41.026163][ T9] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 41.046609][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 41.052133][ T9] usb usb4-port1: unable to enumerate USB device [ 41.074756][ T36] audit: type=1400 audit(1790941135.170:240): avc: denied { map } for pid=698 comm="syz.2.122" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.098905][ T699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=534 sclass=netlink_route_socket pid=699 comm=syz.2.122 [ 41.128988][ T699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=534 sclass=netlink_route_socket pid=699 comm=syz.2.122 [ 41.154669][ T36] audit: type=1400 audit(1790941135.250:241): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.197285][ T708] netlink: 'syz.2.124': attribute type 21 has an invalid length. [ 41.616171][ T329] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 41.766220][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 41.774749][ T329] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.785208][ T329] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768 [ 41.795293][ T329] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 41.809764][ T329] usb 3-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 41.819169][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.827345][ T329] usb 3-1: Product: syz [ 41.831710][ T329] usb 3-1: Manufacturer: syz [ 41.836631][ T329] usb 3-1: SerialNumber: syz [ 41.843252][ T329] usb-storage 3-1:1.0: USB Mass Storage device detected [ 41.852939][ T329] scsi host1: usb-storage 3-1:1.0 [ 41.916177][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 41.922382][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.933759][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 41.946955][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 41.956260][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.965516][ T9] usb 2-1: config 0 descriptor?? [ 42.044545][ T329] usb 3-1: USB disconnect, device number 7 [ 42.197733][ T721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.207493][ T721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.427383][ T9] ryos 0003:1E7D:3138.0005: unknown main item tag 0x2 [ 42.434352][ T9] ryos 0003:1E7D:3138.0005: unknown main item tag 0x0 [ 42.441369][ T9] ryos 0003:1E7D:3138.0005: unknown main item tag 0x0 [ 42.448389][ T9] ryos 0003:1E7D:3138.0005: unknown main item tag 0x0 [ 42.455217][ T9] ryos 0003:1E7D:3138.0005: unknown main item tag 0x0 [ 42.462434][ T9] ryos 0003:1E7D:3138.0005: unknown global tag 0xe [ 42.469095][ T9] ryos 0003:1E7D:3138.0005: item 0 1 1 14 parsing failed [ 42.476456][ T9] ryos 0003:1E7D:3138.0005: parse failed [ 42.482175][ T9] ryos 0003:1E7D:3138.0005: probe with driver ryos failed with error -22 [ 42.616972][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 42.616987][ T36] audit: type=1400 audit(1790941136.720:246): avc: denied { listen } for pid=727 comm="syz.3.131" path=2F32392FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 42.655424][ T616] usb 2-1: USB disconnect, device number 9 [ 42.687170][ T36] audit: type=1400 audit(1790941136.770:247): avc: denied { map } for pid=729 comm="syz.3.132" path="pipe:[2905]" dev="pipefs" ino=2905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 42.725128][ T732] ./dev/sda1: Can't lookup blockdev [ 42.806216][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 42.871264][ T737] netlink: 'syz.3.135': attribute type 2 has an invalid length. [ 42.936154][ T9] usb 3-1: device descriptor read/64, error -71 [ 43.142743][ T36] audit: type=1400 audit(1790941137.240:248): avc: denied { getopt } for pid=752 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.178187][ T9] usb 3-1: device descriptor read/64, error -71 [ 43.184874][ T755] ./dev/sda1: Can't lookup blockdev [ 43.285346][ T36] audit: type=1400 audit(1790941137.380:249): avc: denied { getopt } for pid=759 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.357124][ T36] audit: type=1400 audit(1790941137.460:250): avc: denied { getattr } for pid=763 comm="syz.1.146" path="/37/tracing/events/sched/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 43.386258][ T616] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 43.443792][ T36] audit: type=1400 audit(1790941137.480:251): avc: denied { create } for pid=763 comm="syz.1.146" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.464326][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 43.512382][ T36] audit: type=1400 audit(1790941137.480:252): avc: denied { read } for pid=763 comm="syz.1.146" name="file2" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.546216][ T616] usb 4-1: device descriptor read/64, error -71 [ 43.564771][ T36] audit: type=1400 audit(1790941137.480:253): avc: denied { open } for pid=763 comm="syz.1.146" path="/37/file2" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 43.616404][ T9] usb 3-1: device descriptor read/64, error -71 [ 43.622776][ T36] audit: type=1400 audit(1790941137.490:254): avc: denied { read } for pid=763 comm="syz.1.146" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 43.667548][ T36] audit: type=1400 audit(1790941137.490:255): avc: denied { open } for pid=763 comm="syz.1.146" path="/37/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 43.746175][ T329] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 43.786140][ T616] usb 4-1: device descriptor read/64, error -71 [ 43.839001][ T788] ./dev/sda1: Can't lookup blockdev [ 43.876137][ T9] usb 3-1: device descriptor read/64, error -71 [ 43.897112][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 43.911629][ T329] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 43.931585][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 43.948878][ T329] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 43.963789][ T329] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 43.976125][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.986315][ T9] usb usb3-port1: attempt power cycle [ 44.004396][ T329] usb 1-1: Product: syz [ 44.009040][ T329] usb 1-1: Manufacturer: syz [ 44.013653][ T329] usb 1-1: SerialNumber: syz [ 44.026143][ T616] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 44.034348][ T329] usb 1-1: config 0 descriptor?? [ 44.046389][ T329] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 44.176143][ T616] usb 4-1: device descriptor read/64, error -71 [ 44.269105][ T329] scsi host1: usb-storage 1-1:0.0 [ 44.275482][ T497] kernel read not supported for file /144/net/fib_trie (pid: 497 comm: kworker/0:4) [ 44.287568][ T329] usb 1-1: USB disconnect, device number 6 [ 44.297826][ T497] kernel read not supported for file /144/net/fib_trie (pid: 497 comm: kworker/0:4) [ 44.346165][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 44.367481][ T9] usb 3-1: device descriptor read/8, error -71 [ 44.426159][ T616] usb 4-1: device descriptor read/64, error -71 [ 44.497398][ T9] usb 3-1: device descriptor read/8, error -71 [ 44.536293][ T616] usb usb4-port1: attempt power cycle [ 44.736158][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 44.757295][ T9] usb 3-1: device descriptor read/8, error -71 [ 44.876924][ T616] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 44.891941][ T9] usb 3-1: device descriptor read/8, error -71 [ 44.917053][ T616] usb 4-1: device descriptor read/8, error -71 [ 45.007305][ T9] usb usb3-port1: unable to enumerate USB device [ 45.047103][ T616] usb 4-1: device descriptor read/8, error -71 [ 45.088652][ T827] ./dev/sda1: Can't lookup blockdev [ 45.296566][ T616] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 45.347112][ T616] usb 4-1: device descriptor read/8, error -71 [ 45.487969][ T616] usb 4-1: device descriptor read/8, error -71 [ 45.507718][ T853] ./dev/sda1: Can't lookup blockdev [ 45.592384][ T856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.172'. [ 45.615331][ T616] usb usb4-port1: unable to enumerate USB device [ 45.705227][ T865] random: crng reseeded on system resumption [ 46.260908][ T906] ./dev/sda1: Can't lookup blockdev [ 46.272776][ T898] usb usb7: usbfs: process 898 (syz.3.180) did not claim interface 0 before use [ 46.657439][ T616] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 46.786156][ T497] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 46.840532][ T616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.874715][ T616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.904822][ T616] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 46.926783][ T962] FAULT_INJECTION: forcing a failure. [ 46.926783][ T962] name failslab, interval 1, probability 0, space 0, times 0 [ 46.939790][ T497] usb 1-1: device descriptor read/64, error -71 [ 46.956010][ T616] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.966372][ T962] CPU: 0 UID: 0 PID: 962 Comm: syz.2.189 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 46.966400][ T962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.966451][ T962] Call Trace: [ 46.966456][ T962] [ 46.966463][ T962] __dump_stack+0x21/0x30 [ 46.966491][ T962] dump_stack_lvl+0x140/0x1c0 [ 46.966516][ T962] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.966543][ T962] dump_stack+0x19/0x20 [ 46.966565][ T962] should_fail_ex+0x3c2/0x510 [ 46.966587][ T962] ? security_sk_alloc+0x65/0x260 [ 46.966613][ T962] should_failslab+0xac/0x100 [ 46.966634][ T962] __kmalloc_noprof+0x69/0x510 [ 46.966652][ T962] ? kasan_save_alloc_info+0x3a/0x50 [ 46.966667][ T962] ? security_sk_alloc+0x65/0x260 [ 46.966692][ T962] ? __kasan_kmalloc+0x96/0xb0 [ 46.966714][ T962] security_sk_alloc+0x65/0x260 [ 46.966739][ T962] sk_prot_alloc+0x123/0x3a0 [ 46.966763][ T962] sk_alloc+0x40/0x590 [ 46.966786][ T962] netlink_create+0x3d0/0x630 [ 46.966801][ T962] ? __cfi_rtnetlink_bind+0x10/0x10 [ 46.966821][ T962] __sock_create+0x3a5/0x810 [ 46.966843][ T962] __sys_socket+0xe1/0x1c0 [ 46.966863][ T962] __x64_sys_socket+0x7e/0x90 [ 46.966883][ T962] x64_sys_call+0x2608/0x2ee0 [ 46.966899][ T962] do_syscall_64+0x57/0xf0 [ 46.966916][ T962] ? clear_bhb_loop+0x50/0xa0 [ 46.966939][ T962] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.966962][ T962] RIP: 0033:0x7f164e79e159 [ 46.966976][ T962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.966990][ T962] RSP: 002b:00007f164f5eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 46.967007][ T962] RAX: ffffffffffffffda RBX: 00007f164ea25fa0 RCX: 00007f164e79e159 [ 46.967020][ T962] RDX: 0000000000000000 RSI: 0000000000000803 RDI: 0000000000000010 [ 46.967030][ T962] RBP: 00007f164e83506b R08: 0000000000000000 R09: 0000000000000000 [ 46.967041][ T962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.967051][ T962] R13: 00007f164ea26038 R14: 00007f164ea25fa0 R15: 00007ffeb74afee8 [ 46.967066][ T962] [ 47.194428][ T616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.215608][ T616] usb 4-1: config 0 descriptor?? [ 47.225927][ T968] ./dev/sda1: Can't lookup blockdev [ 47.350501][ T971] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 47.506245][ T497] usb 1-1: device descriptor read/64, error -71 [ 47.746141][ T497] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 47.755051][ T616] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 47.764900][ T616] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 47.772701][ T616] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 47.780512][ T616] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 47.788285][ T616] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 47.796031][ T616] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 47.803713][ T616] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 47.811412][ T616] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 47.819023][ T616] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 47.826706][ T616] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 47.834251][ T616] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 47.842020][ T616] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 47.849654][ T616] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 47.857419][ T616] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 47.864904][ T616] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 47.872983][ T616] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 47.893655][ T616] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 47.916140][ T497] usb 1-1: device descriptor read/64, error -71 [ 48.036827][ T616] usb 4-1: USB disconnect, device number 24 [ 48.156153][ T497] usb 1-1: device descriptor read/64, error -71 [ 48.266666][ T497] usb usb1-port1: attempt power cycle [ 48.316051][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 48.316064][ T36] audit: type=1400 audit(1790941142.410:293): avc: denied { create } for pid=1007 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 48.346184][ T36] audit: type=1400 audit(1790941142.440:294): avc: denied { write } for pid=1007 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 48.411714][ T1017] ./dev/sda1: Can't lookup blockdev [ 48.564451][ T36] audit: type=1400 audit(1790941142.660:295): avc: denied { mounton } for pid=1025 comm="syz.1.202" path="/71/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 48.607626][ T497] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 48.617810][ T1030] incfs: Options parsing error. -22 [ 48.629133][ T1030] incfs: mount failed -22 [ 48.638082][ T36] audit: type=1400 audit(1790941142.690:296): avc: denied { write } for pid=1025 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.672826][ T497] usb 1-1: device descriptor read/8, error -71 [ 48.719436][ T36] audit: type=1400 audit(1790941142.720:297): avc: denied { setopt } for pid=1028 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.739477][ T36] audit: type=1400 audit(1790941142.720:298): avc: denied { connect } for pid=1028 comm="syz.1.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.779987][ T36] audit: type=1400 audit(1790941142.720:299): avc: denied { append } for pid=1028 comm="syz.1.204" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 48.805765][ T1041] kvm: kvm [1040]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xfc1f [ 48.814775][ T1041] kvm: kvm [1040]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x1ad7 [ 48.827175][ T497] usb 1-1: device descriptor read/8, error -71 [ 48.879292][ T1046] ./dev/sda1: Can't lookup blockdev [ 48.935530][ T36] audit: type=1400 audit(1790941143.030:300): avc: denied { search } for pid=1036 comm="syz.3.206" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 48.957558][ T1037] netlink: 44 bytes leftover after parsing attributes in process `syz.3.206'. [ 49.012978][ T1050] overlayfs: unescaped trailing colons in lowerdir mount option. [ 49.096146][ T497] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 49.118050][ T497] usb 1-1: device descriptor read/8, error -71 [ 49.247337][ T497] usb 1-1: device descriptor read/8, error -71 [ 49.276201][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 49.346169][ T616] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 49.356363][ T497] usb usb1-port1: unable to enumerate USB device [ 49.427618][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.438663][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.448772][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.462032][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.471362][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.482796][ T9] usb 2-1: config 0 descriptor?? [ 49.497436][ T616] usb 3-1: unable to get BOS descriptor or descriptor too short [ 49.511437][ T616] usb 3-1: not running at top speed; connect to a high speed hub [ 49.529842][ T616] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.544630][ T616] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.569281][ T36] audit: type=1400 audit(1790941143.660:301): avc: denied { remount } for pid=1059 comm="syz.3.215" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.607439][ T1070] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0x31 [ 49.624673][ T616] usb 3-1: string descriptor 0 read error: -22 [ 49.631291][ T616] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.649213][ T36] audit: type=1400 audit(1790941143.720:302): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.675019][ T616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.706868][ T616] usb 3-1: 0:2 : does not exist [ 49.821932][ T1080] netlink: 104 bytes leftover after parsing attributes in process `syz.3.220'. [ 49.833808][ T1081] netlink: 104 bytes leftover after parsing attributes in process `syz.3.220'. [ 49.843836][ T1082] netlink: 104 bytes leftover after parsing attributes in process `syz.3.220'. [ 49.867509][ T1090] tipc: Started in network mode [ 49.872429][ T1090] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 49.881742][ T1090] tipc: Enabled bearer , priority 10 [ 50.016271][ T497] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 50.038213][ T1099] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(64.8192.1853191215), cmd(8) [ 50.103422][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 50.109642][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 50.128762][ T9] usb 2-1: USB disconnect, device number 10 [ 50.177395][ T497] usb 1-1: unable to get BOS descriptor or descriptor too short [ 50.187374][ T497] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 50.202586][ T497] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 50.212085][ T497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.221427][ T497] usb 1-1: Product: syz [ 50.225728][ T497] usb 1-1: Manufacturer: syz [ 50.230709][ T497] usb 1-1: SerialNumber: syz [ 50.318573][ T1056] syz.2.213 uses obsolete (PF_INET,SOCK_PACKET) [ 50.582069][ T1105] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 50.591023][ T1105] overlayfs: missing 'lowerdir' [ 50.597635][ T1105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.607059][ T1105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.616507][ T1105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.633565][ T1105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.996145][ T9] tipc: Node number set to 4269801488 [ 51.670916][ T1137] ======================================================= [ 51.670916][ T1137] WARNING: The mand mount option has been deprecated and [ 51.670916][ T1137] and is ignored by this kernel. Remove the mand [ 51.670916][ T1137] option from the mount to silence this warning. [ 51.670916][ T1137] ======================================================= [ 51.720817][ T1139] sock: sock_set_timeout: `syz.1.240' (pid 1139) tries to set negative timeout [ 51.896499][ T1155] No source specified [ 52.084791][ T1160] loop8: detected capacity change from 0 to 16384 [ 52.135925][ T616] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 52.164678][ T616] usb 3-1: Warning! Unlikely big volume range (=24635), cval->res is probably wrong. [ 52.194205][ T616] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = -24635/0/1 [ 52.220986][ T616] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 52.250654][ T616] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 52.279355][ T497] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 52.280530][ T616] usb 3-1: USB disconnect, device number 12 [ 52.299323][ T497] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 52.365832][ T497] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 52.403662][ T497] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 52.446175][ T497] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 52.473650][ T497] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 52.495910][ T497] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 52.526928][ T497] usb 1-1: failed to enable PITCH for EP 0x82 [ 52.560519][ T497] usb 1-1: USB disconnect, device number 11 [ 52.610053][ T1186] binder: Bad value for 'defcontext' [ 52.639290][ T1190] No source specified [ 52.906205][ T497] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 53.067498][ T497] usb 1-1: unable to get BOS descriptor or descriptor too short [ 53.075595][ T497] usb 1-1: not running at top speed; connect to a high speed hub [ 53.087848][ T497] usb 1-1: config 87 has an invalid interface number: 152 but max is 0 [ 53.098634][ T497] usb 1-1: config 87 has no interface number 0 [ 53.111307][ T497] usb 1-1: config 87 interface 152 has no altsetting 0 [ 53.118246][ T357] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 53.126985][ T616] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 53.147694][ T497] usb 1-1: New USB device found, idVendor=0df6, idProduct=004a, bcdDevice=36.71 [ 53.157016][ T497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.175387][ T497] usb 1-1: Product: syz [ 53.181878][ T497] usb 1-1: Manufacturer: syz [ 53.191968][ T497] usb 1-1: SerialNumber: syz [ 53.296160][ T357] usb 2-1: Using ep0 maxpacket: 16 [ 53.306820][ T616] usb 3-1: config index 0 descriptor too short (expected 26977, got 36) [ 53.316445][ T357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.336484][ T616] usb 3-1: config 45 has too many interfaces: 108, using maximum allowed: 32 [ 53.347477][ T357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.357473][ T616] usb 3-1: config 45 has an invalid descriptor of length 0, skipping remainder of the config [ 53.379392][ T357] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 53.394638][ T616] usb 3-1: config 45 has 0 interfaces, different from the descriptor's value: 108 [ 53.414187][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 53.414201][ T36] audit: type=1400 audit(1790941147.510:326): avc: denied { write } for pid=1134 comm="syz.0.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.446338][ T497] cdc_ether 1-1:87.152: More than one union descriptor, skipping ... [ 53.454581][ T616] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 53.466221][ T357] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 53.475339][ T497] usb 1-1: bad CDC descriptors [ 53.487584][ T616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.506022][ T497] usb 1-1: USB disconnect, device number 12 [ 53.515502][ T357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.536219][ T357] usb 2-1: config 0 descriptor?? [ 53.959449][ T357] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input7 [ 53.988039][ T36] audit: type=1400 audit(1790941148.090:327): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=522 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.013314][ T357] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 54.061788][ T36] audit: type=1400 audit(1790941148.090:328): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=522 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.085326][ T36] audit: type=1400 audit(1790941148.150:329): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=522 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.266152][ T497] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 54.417147][ T497] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 54.429771][ T497] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 54.440518][ T497] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.448788][ T497] usb 1-1: Product: syz [ 54.453115][ T497] usb 1-1: Manufacturer: syz [ 54.457991][ T497] usb 1-1: SerialNumber: syz [ 54.679660][ T497] usb 1-1: Can't get UAC3 power state for id 10 [ 54.688434][ T497] usb 1-1: BAAD HEADPHONE p_chmask mismatch [ 54.702087][ T497] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 54.727416][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.745079][ T497] usb 1-1: USB disconnect, device number 13 [ 54.778710][ T1226] x_tables: unsorted underflow at hook 1 [ 54.818727][ T1231] No source specified [ 55.206147][ T497] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 55.366133][ T497] usb 4-1: Using ep0 maxpacket: 32 [ 55.372609][ T497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.383831][ T497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.393968][ T497] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 55.403414][ T497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.412277][ T497] usb 4-1: config 0 descriptor?? [ 55.456154][ T357] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 55.606163][ T357] usb 1-1: Using ep0 maxpacket: 8 [ 55.612515][ T357] usb 1-1: config index 0 descriptor too short (expected 1060, got 36) [ 55.629120][ T357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.651537][ T357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.662279][ T357] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.675615][ T357] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 55.684877][ T357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.696218][ T357] usb 1-1: config 0 descriptor?? [ 55.762486][ T616] usb 3-1: string descriptor 0 read error: -71 [ 55.781761][ T616] usb 3-1: USB disconnect, device number 13 [ 55.876485][ T497] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 55.890470][ T497] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 55.905111][ T564] usb 2-1: USB disconnect, device number 11 [ 55.915315][ T497] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 55.938211][ T497] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 55.945302][ T497] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 55.953058][ T497] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 55.962621][ T497] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 55.969909][ T497] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 55.980144][ T497] savu 0003:1E7D:2D5A.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 56.014090][ T36] audit: type=1400 audit(1790941150.110:330): avc: denied { mounton } for pid=1248 comm="syz.1.274" path="/94/mnt" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.091948][ T564] usb 4-1: USB disconnect, device number 25 [ 56.314390][ T357] sony 0003:1345:3008.0009: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 56.330760][ T357] sony 0003:1345:3008.0009: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.0-1/input0 [ 56.352776][ T357] sony 0003:1345:3008.0009: failed to claim input [ 56.612629][ T36] audit: type=1400 audit(1790941150.710:331): avc: denied { setattr } for pid=1256 comm="syz.3.275" name="RAW" dev="sockfs" ino=10915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.669884][ T1261] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1261 comm=syz.2.277 [ 56.696494][ T1261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=1261 comm=syz.2.277 [ 56.722731][ T1261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1261 comm=syz.2.277 [ 56.811342][ T1269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.281'. [ 56.842002][ T1272] process 'syz.2.282' launched './file0' with NULL argv: empty string added [ 56.851342][ T36] audit: type=1400 audit(1790941150.950:332): avc: denied { execute_no_trans } for pid=1271 comm="syz.2.282" path="/57/file0" dev="tmpfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.890152][ T36] audit: type=1400 audit(1790941150.990:333): avc: denied { bind } for pid=1273 comm="syz.2.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.917862][ T1275] loop3: detected capacity change from 0 to 7 [ 56.925295][ T1274] overlayfs: failed to resolve './bus': -2 [ 56.956001][ T36] audit: type=1400 audit(1790941151.050:334): avc: denied { map } for pid=1278 comm="syz.2.285" path="socket:[11068]" dev="sockfs" ino=11068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.981980][ T36] audit: type=1400 audit(1790941151.080:335): avc: denied { accept } for pid=1278 comm="syz.2.285" path="socket:[11068]" dev="sockfs" ino=11068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.526186][ T564] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 57.677272][ T564] usb 3-1: config index 0 descriptor too short (expected 4257, got 161) [ 57.685790][ T564] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.695713][ T564] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 57.705056][ T564] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.916624][ T1301] SELinux: Context system_u:object_r:usbmon_device_t:s0 is not valid (left unmapped). [ 57.928810][ T1301] netlink: 112 bytes leftover after parsing attributes in process `syz.2.290'. [ 57.938582][ T564] usb 3-1: string descriptor 0 read error: -71 [ 57.953304][ T564] uvcvideo 3-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 57.963248][ T564] usb 3-1: Found UVC 1.00 device (046d:0825) [ 57.970474][ T564] uvcvideo 3-1:1.1: No supported video formats found. [ 57.977542][ T564] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 57.989136][ T564] usb 3-1: USB disconnect, device number 14 [ 58.225421][ T564] usb 1-1: USB disconnect, device number 14 [ 58.476641][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 58.476655][ T36] audit: type=1400 audit(1790941152.580:342): avc: denied { ioctl } for pid=1305 comm="syz.2.293" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x6f04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 58.558563][ T1307] fuse: Unknown parameter 'rootmodÝÄe' [ 59.356306][ T36] audit: type=1400 audit(1790941153.450:343): avc: denied { setopt } for pid=1326 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.442947][ T36] audit: type=1400 audit(1790941153.540:344): avc: denied { load_policy } for pid=1329 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 59.464516][ T1330] SELinux: failed to load policy [ 59.766183][ T357] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 59.916123][ T357] usb 1-1: Using ep0 maxpacket: 8 [ 59.922428][ T357] usb 1-1: config index 0 descriptor too short (expected 1060, got 36) [ 59.930932][ T357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.941954][ T357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.951890][ T357] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.964933][ T357] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 59.974221][ T357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.990832][ T357] usb 1-1: config 0 descriptor?? [ 60.606176][ T357] sony 0003:1345:3008.000A: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 60.619499][ T357] sony 0003:1345:3008.000A: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.0-1/input0 [ 60.643084][ T357] sony 0003:1345:3008.000A: failed to claim input [ 61.209883][ T1360] fuse: Bad value for 'fd' [ 61.446193][ T357] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 61.596172][ T357] usb 3-1: Using ep0 maxpacket: 16 [ 61.602470][ T357] usb 3-1: config 0 has an invalid interface number: 98 but max is 0 [ 61.610940][ T357] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.621304][ T357] usb 3-1: config 0 has no interface number 0 [ 61.627554][ T357] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 61.637720][ T357] usb 3-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 61.647817][ T357] usb 3-1: config 0 interface 98 has no altsetting 0 [ 61.655905][ T357] usb 3-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 61.665399][ T357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.673629][ T357] usb 3-1: Product: syz [ 61.677948][ T357] usb 3-1: Manufacturer: syz [ 61.682618][ T357] usb 3-1: SerialNumber: syz [ 61.688064][ T357] usb 3-1: config 0 descriptor?? [ 61.694676][ T1360] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 61.702061][ T1360] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 61.909881][ T1360] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 61.917447][ T1360] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 62.129554][ T1371] fuse: Bad value for 'fd' [ 62.135140][ T1373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.144858][ T1373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.345542][ T357] asix 3-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 62.358127][ T357] asix 3-1:0.98: probe with driver asix failed with error -71 [ 62.366903][ T357] usb 3-1: USB disconnect, device number 15 [ 62.543881][ T357] usb 1-1: USB disconnect, device number 15 [ 62.574355][ T1383] batadv_slave_0: mtu less than device minimum [ 62.744803][ T36] audit: type=1400 audit(1790941156.840:345): avc: denied { mount } for pid=1388 comm="syz.0.311" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.782652][ T36] audit: type=1400 audit(1790941156.870:346): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.833237][ T1393] rust_binder: 1390:1393 BC_FREEZE_NOTIFICATION_DONE 0000317200000000 not found [ 62.842775][ T1392] rust_binder: Write failure EINVAL in pid:170 [ 62.843283][ T1393] rust_binder: Write failure EINVAL in pid:170 [ 63.039010][ T1407] syzkaller0: entered promiscuous mode [ 63.065794][ T1407] syzkaller0: entered allmulticast mode [ 63.076413][ T1408] netlink: 'syz.2.316': attribute type 27 has an invalid length. [ 63.090338][ T1408] veth1_to_bridge: left promiscuous mode [ 63.103932][ T1408] syzkaller0: left promiscuous mode [ 63.109698][ T1408] syzkaller0: left allmulticast mode [ 63.116197][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.123275][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.256262][ T564] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 63.294374][ T1412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41490 sclass=netlink_route_socket pid=1412 comm=syz.2.319 [ 63.326195][ T1412] netlink: 892 bytes leftover after parsing attributes in process `syz.2.319'. [ 63.388408][ T1417] tipc: Started in network mode [ 63.393294][ T1417] tipc: Node identity 2000004, cluster identity 4711 [ 63.416183][ T564] usb 1-1: Using ep0 maxpacket: 8 [ 63.421580][ T1417] tipc: Node number set to 33554436 [ 63.427902][ T564] usb 1-1: config index 0 descriptor too short (expected 1060, got 36) [ 63.436445][ T564] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.457607][ T564] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.477600][ T564] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.504841][ T564] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 63.523065][ T564] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.541922][ T564] usb 1-1: config 0 descriptor?? [ 64.158803][ T564] sony 0003:1345:3008.000B: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 64.174425][ T564] sony 0003:1345:3008.000B: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.0-1/input0 [ 64.198454][ T564] sony 0003:1345:3008.000B: failed to claim input [ 64.431861][ T1427] FAULT_INJECTION: forcing a failure. [ 64.431861][ T1427] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 64.445013][ T1427] CPU: 0 UID: 0 PID: 1427 Comm: syz.2.323 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 64.445038][ T1427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.445049][ T1427] Call Trace: [ 64.445055][ T1427] [ 64.445062][ T1427] __dump_stack+0x21/0x30 [ 64.445089][ T1427] dump_stack_lvl+0x140/0x1c0 [ 64.445111][ T1427] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.445135][ T1427] ? check_stack_object+0x10f/0x150 [ 64.445153][ T1427] dump_stack+0x19/0x20 [ 64.445175][ T1427] should_fail_ex+0x3c2/0x510 [ 64.445195][ T1427] should_fail+0xf/0x20 [ 64.445214][ T1427] should_fail_usercopy+0x1e/0x30 [ 64.445235][ T1427] _copy_from_user+0x20/0xa0 [ 64.445258][ T1427] do_sys_poll+0x2b6/0x1210 [ 64.445290][ T1427] ? poll_select_finish+0x600/0x600 [ 64.445314][ T1427] ? is_bpf_text_address+0x17b/0x1a0 [ 64.445339][ T1427] ? kernel_text_address+0xa9/0xe0 [ 64.445371][ T1427] ? __kasan_check_write+0x18/0x20 [ 64.445387][ T1427] ? proc_fail_nth_write+0x184/0x220 [ 64.445412][ T1427] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 64.445440][ T1427] ? set_user_sigmask+0xce/0x1c0 [ 64.445463][ T1427] ? __cfi_set_user_sigmask+0x10/0x10 [ 64.445485][ T1427] ? mutex_unlock+0x90/0x240 [ 64.445506][ T1427] ? __cfi_mutex_unlock+0x10/0x10 [ 64.445528][ T1427] __se_sys_ppoll+0x20a/0x2b0 [ 64.445550][ T1427] ? fput+0x1a4/0x230 [ 64.445571][ T1427] ? __x64_sys_ppoll+0xf0/0xf0 [ 64.445594][ T1427] ? __cfi_ksys_write+0x10/0x10 [ 64.445612][ T1427] __x64_sys_ppoll+0xc3/0xf0 [ 64.445635][ T1427] x64_sys_call+0xd20/0x2ee0 [ 64.445649][ T1427] do_syscall_64+0x57/0xf0 [ 64.445665][ T1427] ? clear_bhb_loop+0x50/0xa0 [ 64.445687][ T1427] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.445708][ T1427] RIP: 0033:0x7f164e79e159 [ 64.445721][ T1427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.445735][ T1427] RSP: 002b:00007f164f5eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 64.445752][ T1427] RAX: ffffffffffffffda RBX: 00007f164ea25fa0 RCX: 00007f164e79e159 [ 64.445764][ T1427] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 64.445776][ T1427] RBP: 00007f164f5eb090 R08: 0000000000000000 R09: 0000000000000000 [ 64.445786][ T1427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.445795][ T1427] R13: 00007f164ea26038 R14: 00007f164ea25fa0 R15: 00007ffeb74afee8 [ 64.445809][ T1427] [ 64.789970][ T1431] fuse: Unknown parameter 'r' [ 64.842162][ T1435] input: syz0 as /devices/virtual/input/input11 [ 65.086186][ T564] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 65.237256][ T564] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 65.248263][ T564] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 65.259244][ T564] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 13 [ 65.273140][ T564] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.282431][ T564] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 65.291561][ T564] usb 3-1: SerialNumber: syz [ 65.298842][ T1435] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 65.307711][ T1435] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 65.518452][ T564] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 65.533190][ T564] usb 3-1: USB disconnect, device number 16 [ 66.010094][ T564] usb 1-1: USB disconnect, device number 16 [ 66.042201][ T36] audit: type=1400 audit(1790941160.140:347): avc: denied { accept } for pid=1436 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 66.076592][ T1441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'. [ 66.093659][ T1441] erspan0: entered promiscuous mode [ 66.104973][ T1441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'. [ 66.136238][ T1447] FAULT_INJECTION: forcing a failure. [ 66.136238][ T1447] name failslab, interval 1, probability 0, space 0, times 0 [ 66.148936][ T1447] CPU: 0 UID: 0 PID: 1447 Comm: syz.0.332 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 66.148962][ T1447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.148973][ T1447] Call Trace: [ 66.148978][ T1447] [ 66.148985][ T1447] __dump_stack+0x21/0x30 [ 66.149013][ T1447] dump_stack_lvl+0x140/0x1c0 [ 66.149035][ T1447] ? __cfi_dump_stack_lvl+0x10/0x10 [ 66.149080][ T1447] ? avc_has_perm+0x155/0x240 [ 66.149101][ T1447] ? __cfi_avc_has_perm+0x10/0x10 [ 66.149121][ T1447] dump_stack+0x19/0x20 [ 66.149142][ T1447] should_fail_ex+0x3c2/0x510 [ 66.149163][ T1447] ? do_sys_poll+0x32d/0x1210 [ 66.149186][ T1447] should_failslab+0xac/0x100 [ 66.149207][ T1447] __kmalloc_noprof+0x69/0x510 [ 66.149224][ T1447] ? do_sys_poll+0x32d/0x1210 [ 66.149247][ T1447] do_sys_poll+0x32d/0x1210 [ 66.149273][ T1447] ? poll_select_finish+0x600/0x600 [ 66.149296][ T1447] ? is_bpf_text_address+0x17b/0x1a0 [ 66.149322][ T1447] ? kernel_text_address+0xa9/0xe0 [ 66.149353][ T1447] ? __kasan_check_write+0x18/0x20 [ 66.149370][ T1447] ? proc_fail_nth_write+0x184/0x220 [ 66.149394][ T1447] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 66.149421][ T1447] ? set_user_sigmask+0xce/0x1c0 [ 66.149444][ T1447] ? __cfi_set_user_sigmask+0x10/0x10 [ 66.149466][ T1447] ? mutex_unlock+0x90/0x240 [ 66.149487][ T1447] ? __cfi_mutex_unlock+0x10/0x10 [ 66.149507][ T1447] __se_sys_ppoll+0x20a/0x2b0 [ 66.149529][ T1447] ? fput+0x1a4/0x230 [ 66.149551][ T1447] ? __x64_sys_ppoll+0xf0/0xf0 [ 66.149574][ T1447] ? __cfi_ksys_write+0x10/0x10 [ 66.149592][ T1447] __x64_sys_ppoll+0xc3/0xf0 [ 66.149614][ T1447] x64_sys_call+0xd20/0x2ee0 [ 66.149629][ T1447] do_syscall_64+0x57/0xf0 [ 66.149644][ T1447] ? clear_bhb_loop+0x50/0xa0 [ 66.149666][ T1447] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.149687][ T1447] RIP: 0033:0x7fad4fd9e159 [ 66.149701][ T1447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.149715][ T1447] RSP: 002b:00007fad50b87028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 66.149731][ T1447] RAX: ffffffffffffffda RBX: 00007fad50025fa0 RCX: 00007fad4fd9e159 [ 66.149743][ T1447] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 66.149755][ T1447] RBP: 00007fad50b87090 R08: 0000000000000000 R09: 0000000000000000 [ 66.149765][ T1447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.149774][ T1447] R13: 00007fad50026038 R14: 00007fad50025fa0 R15: 00007fff16fc4bd8 [ 66.149788][ T1447] [ 66.470791][ T36] audit: type=1326 audit(1790941160.570:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.0.334" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad4fd9e159 code=0x0 [ 66.666307][ T357] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 66.766143][ T564] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 66.817325][ T357] usb 3-1: config index 0 descriptor too short (expected 26977, got 36) [ 66.825890][ T357] usb 3-1: config 45 has too many interfaces: 108, using maximum allowed: 32 [ 66.834981][ T357] usb 3-1: config 45 has an invalid descriptor of length 0, skipping remainder of the config [ 66.845458][ T357] usb 3-1: config 45 has 0 interfaces, different from the descriptor's value: 108 [ 66.854805][ T357] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 66.864101][ T357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.916153][ T564] usb 1-1: Using ep0 maxpacket: 8 [ 66.922274][ T564] usb 1-1: config index 0 descriptor too short (expected 1060, got 36) [ 66.930809][ T564] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.941888][ T564] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.951896][ T564] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.964867][ T564] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 66.974029][ T564] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.985167][ T564] usb 1-1: config 0 descriptor?? [ 67.592503][ T564] sony 0003:1345:3008.000C: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 67.606723][ T564] sony 0003:1345:3008.000C: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.0-1/input0 [ 67.630460][ T564] sony 0003:1345:3008.000C: failed to claim input [ 69.123077][ T357] usb 3-1: string descriptor 0 read error: -71 [ 69.138491][ T357] usb 3-1: USB disconnect, device number 17 [ 69.506172][ T357] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 69.539633][ T564] usb 1-1: USB disconnect, device number 17 [ 69.636235][ T357] usb 3-1: device descriptor read/64, error -71 [ 69.846158][ T564] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 69.876340][ T357] usb 3-1: device descriptor read/64, error -71 [ 69.996178][ T564] usb 1-1: Using ep0 maxpacket: 32 [ 70.002633][ T564] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 254, using maximum allowed: 30 [ 70.013860][ T564] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 70.025270][ T564] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 70.038471][ T564] usb 1-1: config 0 interface 0 has no altsetting 0 [ 70.045085][ T564] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 70.054396][ T564] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.064406][ T564] usb 1-1: config 0 descriptor?? [ 70.116184][ T357] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 70.246162][ T357] usb 3-1: device descriptor read/64, error -71 [ 70.486166][ T357] usb 3-1: device descriptor read/64, error -71 [ 70.539763][ T564] uclogic 0003:5543:0781.000D: unknown main item tag 0xd [ 70.547145][ T564] uclogic 0003:5543:0781.000D: item fetching failed at offset 23/24 [ 70.555406][ T564] uclogic 0003:5543:0781.000D: parse failed [ 70.561727][ T564] uclogic 0003:5543:0781.000D: probe with driver uclogic failed with error -22 [ 70.596299][ T357] usb usb3-port1: attempt power cycle [ 70.936203][ T357] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 70.957270][ T357] usb 3-1: device descriptor read/8, error -71 [ 71.087309][ T357] usb 3-1: device descriptor read/8, error -71 [ 71.326143][ T357] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 71.347206][ T357] usb 3-1: device descriptor read/8, error -71 [ 71.477427][ T357] usb 3-1: device descriptor read/8, error -71 [ 71.586392][ T357] usb usb3-port1: unable to enumerate USB device [ 72.187839][ T36] audit: type=1400 audit(1790941166.290:349): avc: denied { ioctl } for pid=1466 comm="syz.2.339" path="cgroup:[4026532298]" dev="nsfs" ino=4026532298 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 72.250411][ T36] audit: type=1400 audit(1790941166.310:350): avc: denied { setopt } for pid=1466 comm="syz.2.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.336732][ T1470] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.343962][ T1470] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.351435][ T1470] bridge_slave_0: entered allmulticast mode [ 72.357977][ T1470] bridge_slave_0: entered promiscuous mode [ 72.364607][ T1470] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.371959][ T1470] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.379432][ T1470] bridge_slave_1: entered allmulticast mode [ 72.385891][ T1470] bridge_slave_1: entered promiscuous mode [ 72.434805][ T1470] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.442023][ T1470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.449364][ T1470] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.456421][ T1470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.479930][ T1331] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.488169][ T1331] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.505688][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.512808][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.520909][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.528078][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.551139][ T1470] veth0_vlan: entered promiscuous mode [ 72.573161][ T1470] veth1_macvtap: entered promiscuous mode [ 72.586251][ T329] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 72.606393][ T564] usb 1-1: USB disconnect, device number 18 [ 72.647349][ T36] audit: type=1400 audit(1790941166.750:351): avc: denied { mounton } for pid=1470 comm="syz-executor" path="/root/syzkaller.Mlmkzs/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.738924][ T36] audit: type=1400 audit(1790941166.800:352): avc: denied { search } for pid=1477 comm="syz.0.342" name="/" dev="configfs" ino=2461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.766399][ T329] usb 3-1: device descriptor read/64, error -71 [ 72.827715][ T1487] ./dev/sda1: Can't lookup blockdev [ 72.845408][ T36] audit: type=1400 audit(1790941166.940:353): avc: denied { getopt } for pid=1486 comm="syz.4.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.947271][ T1489] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.960406][ T1489] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.976205][ T1489] bridge_slave_0: entered allmulticast mode [ 72.988453][ T1489] bridge_slave_0: entered promiscuous mode [ 72.995237][ T1489] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.002715][ T1489] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.010219][ T1489] bridge_slave_1: entered allmulticast mode [ 73.016895][ T1489] bridge_slave_1: entered promiscuous mode [ 73.026211][ T329] usb 3-1: device descriptor read/64, error -71 [ 73.071016][ T1489] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.078139][ T1489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.085401][ T1489] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.092476][ T1489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.116405][ T1331] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.123609][ T564] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 73.132049][ T1331] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.148424][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.155615][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.163817][ T1331] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.170892][ T1331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.194366][ T1489] veth0_vlan: entered promiscuous mode [ 73.205765][ T1489] veth1_macvtap: entered promiscuous mode [ 73.236394][ T357] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.266454][ T329] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 73.297285][ T564] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.309061][ T564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.321756][ T564] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.331506][ T564] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.351163][ T564] usb 1-1: Product: syz [ 73.358122][ T36] audit: type=1400 audit(1790941167.460:354): avc: denied { write } for pid=1502 comm="syz.5.348" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 73.382000][ T564] usb 1-1: Manufacturer: syz [ 73.394453][ T564] usb 1-1: SerialNumber: syz [ 73.406212][ T329] usb 3-1: device descriptor read/64, error -71 [ 73.415482][ T564] cdc_mbim 1-1:1.0: skipping garbage [ 73.420942][ T357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.436610][ T564] cdc_mbim 1-1:1.0: skipping garbage [ 73.446131][ T357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.457814][ T564] cdc_mbim 1-1:1.0: MBIM functional descriptor missing [ 73.464773][ T564] cdc_mbim 1-1:1.0: bind() failure [ 73.475128][ T357] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 73.485421][ T357] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 73.500391][ T357] usb 5-1: Manufacturer: syz [ 73.508330][ T357] usb 5-1: config 0 descriptor?? [ 73.634845][ T1510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.644367][ T1510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.653962][ T564] usb 1-1: USB disconnect, device number 19 [ 73.677078][ T329] usb 3-1: device descriptor read/64, error -71 [ 73.707421][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 73.787589][ T329] usb usb3-port1: attempt power cycle [ 73.866147][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 73.873237][ T9] usb 6-1: config index 0 descriptor too short (expected 1060, got 36) [ 73.881881][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.893073][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.903136][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 73.916343][ T9] usb 6-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 73.925531][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.937249][ T9] usb 6-1: config 0 descriptor?? [ 74.126170][ T329] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 74.147102][ T329] usb 3-1: device descriptor read/8, error -71 [ 74.277123][ T329] usb 3-1: device descriptor read/8, error -71 [ 74.332314][ T357] input: syz Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000E/input/input13 [ 74.352606][ T357] input: syz Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000E/input/input14 [ 74.369869][ T357] input: syz Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000E/input/input15 [ 74.387105][ T357] input: syz Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.000E/input/input16 [ 74.406216][ T357] uclogic 0003:256C:006D.000E: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0 [ 74.417363][ T564] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 74.516687][ T329] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 74.567774][ T357] usb 5-1: USB disconnect, device number 2 [ 74.579485][ T329] usb 3-1: device descriptor read/8, error -71 [ 74.592907][ T564] usb 1-1: Using ep0 maxpacket: 8 [ 74.602080][ T564] usb 1-1: too many configurations: 134, using maximum allowed: 8 [ 74.612821][ T564] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 74.620945][ T564] usb 1-1: can't read configurations, error -61 [ 74.707306][ T329] usb 3-1: device descriptor read/8, error -71 [ 74.756256][ T564] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 74.816435][ T329] usb usb3-port1: unable to enumerate USB device [ 74.906260][ T564] usb 1-1: Using ep0 maxpacket: 8 [ 74.911720][ T564] usb 1-1: too many configurations: 134, using maximum allowed: 8 [ 74.920983][ T564] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 74.928764][ T564] usb 1-1: can't read configurations, error -61 [ 74.935303][ T564] usb usb1-port1: attempt power cycle [ 74.945128][ T9] sony 0003:1345:3008.000F: can't set operational mode: step 2 [ 74.955371][ T9] sony 0003:1345:3008.000F: Failed to set controller into operational mode [ 74.969021][ T9] sony 0003:1345:3008.000F: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.5-1/input0 [ 74.995476][ T9] sony 0003:1345:3008.000F: failed to claim input [ 75.010556][ T9] usb 6-1: USB disconnect, device number 2 [ 75.194317][ T36] audit: type=1400 audit(1790941169.290:355): avc: denied { create } for pid=1521 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 75.267096][ T36] audit: type=1400 audit(1790941169.370:356): avc: denied { map } for pid=1529 comm="syz.2.357" path="socket:[13455]" dev="sockfs" ino=13455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.297238][ T564] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 75.324253][ T1534] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 75.339875][ T564] usb 1-1: Using ep0 maxpacket: 8 [ 75.346405][ T1534] SELinux: security_context_str_to_sid (^) failed with errno=-22 [ 75.355836][ T36] audit: type=1400 audit(1790941169.370:357): avc: denied { read write } for pid=1529 comm="syz.2.357" path="socket:[13455]" dev="sockfs" ino=13455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.379542][ T564] usb 1-1: too many configurations: 134, using maximum allowed: 8 [ 75.409685][ T564] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 75.418935][ T564] usb 1-1: can't read configurations, error -61 [ 75.444655][ T36] audit: type=1400 audit(1790941169.450:358): avc: denied { map } for pid=1535 comm="syz.4.360" path="socket:[13476]" dev="sockfs" ino=13476 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.556124][ T564] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 75.587701][ T564] usb 1-1: Using ep0 maxpacket: 8 [ 75.598544][ T564] usb 1-1: too many configurations: 134, using maximum allowed: 8 [ 75.617788][ T564] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 75.629007][ T564] usb 1-1: can't read configurations, error -61 [ 75.650819][ T564] usb usb1-port1: unable to enumerate USB device [ 75.724696][ T1576] fuse: Bad value for 'fd' [ 75.758281][ T1579] FAULT_INJECTION: forcing a failure. [ 75.758281][ T1579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.771489][ T1579] CPU: 0 UID: 0 PID: 1579 Comm: syz.5.372 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 75.771515][ T1579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 75.771526][ T1579] Call Trace: [ 75.771532][ T1579] [ 75.771539][ T1579] __dump_stack+0x21/0x30 [ 75.771569][ T1579] dump_stack_lvl+0x140/0x1c0 [ 75.771593][ T1579] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.771620][ T1579] dump_stack+0x19/0x20 [ 75.771643][ T1579] should_fail_ex+0x3c2/0x510 [ 75.771665][ T1579] should_fail+0xf/0x20 [ 75.771685][ T1579] should_fail_usercopy+0x1e/0x30 [ 75.771708][ T1579] _copy_from_iter+0x3b6/0x1520 [ 75.771734][ T1579] ? __cfi__copy_from_iter+0x10/0x10 [ 75.771758][ T1579] ? __check_object_size+0x54c/0x870 [ 75.771777][ T1579] ? __cfi___check_object_size+0x10/0x10 [ 75.771796][ T1579] ? skb_put+0x10e/0x200 [ 75.771818][ T1579] netlink_sendmsg+0x66d/0xad0 [ 75.771844][ T1579] ? __cfi_netlink_sendmsg+0x10/0x10 [ 75.771870][ T1579] ? __futex_queue+0x19f/0x350 [ 75.771894][ T1579] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 75.771914][ T1579] ? security_socket_sendmsg+0x3d/0x100 [ 75.771940][ T1579] ____sys_sendmsg+0x99e/0xa00 [ 75.771966][ T1579] ? __import_iovec+0x3fa/0x7d0 [ 75.771982][ T1579] ? __sys_sendmsg_sock+0x50/0x50 [ 75.772008][ T1579] ? import_iovec+0x80/0xb0 [ 75.772024][ T1579] ___sys_sendmsg+0x2a6/0x370 [ 75.772057][ T1579] ? __kasan_check_read+0x15/0x20 [ 75.772075][ T1579] ? __sys_sendmsg+0x260/0x260 [ 75.772102][ T1579] ? __cfi_futex_wait+0x10/0x10 [ 75.772119][ T1579] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 75.772139][ T1579] ? __fget_files+0x2bc/0x330 [ 75.772163][ T1579] __x64_sys_sendmsg+0x1be/0x2a0 [ 75.772202][ T1579] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 75.772228][ T1579] ? __kasan_check_write+0x18/0x20 [ 75.772245][ T1579] ? fpregs_restore_userregs+0x11c/0x260 [ 75.772266][ T1579] ? switch_fpu_return+0x12/0x20 [ 75.772286][ T1579] x64_sys_call+0x2a4c/0x2ee0 [ 75.772302][ T1579] do_syscall_64+0x57/0xf0 [ 75.772319][ T1579] ? clear_bhb_loop+0x50/0xa0 [ 75.772341][ T1579] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.772363][ T1579] RIP: 0033:0x7fda58f9e159 [ 75.772378][ T1579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.772393][ T1579] RSP: 002b:00007fda579f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.772411][ T1579] RAX: ffffffffffffffda RBX: 00007fda59225fa0 RCX: 00007fda58f9e159 [ 75.772424][ T1579] RDX: 0000000000008000 RSI: 0000200000000580 RDI: 000000000000000a [ 75.772454][ T1579] RBP: 00007fda5903506b R08: 0000000000000000 R09: 0000000000000000 [ 75.772465][ T1579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.772475][ T1579] R13: 00007fda59226038 R14: 00007fda59225fa0 R15: 00007ffefa1be1c8 [ 75.772493][ T1579] [ 76.346493][ T564] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 76.496176][ T564] usb 6-1: Using ep0 maxpacket: 8 [ 76.502655][ T564] usb 6-1: config index 0 descriptor too short (expected 1060, got 36) [ 76.526155][ T564] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.537548][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 76.545294][ T564] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.556977][ T564] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.576158][ T564] usb 6-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 76.596983][ T564] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.619084][ T564] usb 6-1: config 0 descriptor?? [ 76.716120][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 76.722377][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.732968][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.748800][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.761328][ T9] usb 3-1: string descriptor 0 read error: -71 [ 76.768318][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.777643][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 76.789319][ T9] usb 3-1: can't set config #1, error -71 [ 76.797773][ T9] usb 3-1: USB disconnect, device number 26 [ 77.253983][ T1610] overlay: ./bus is not a directory [ 77.412569][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 77.412609][ T36] audit: type=1400 audit(1790941171.510:361): avc: denied { create } for pid=1616 comm="syz.0.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 77.447555][ T564] sony 0003:1345:3008.0010: can't set operational mode: step 1 [ 77.464017][ T564] sony 0003:1345:3008.0010: Failed to set controller into operational mode [ 77.492292][ T564] sony 0003:1345:3008.0010: hiddev96,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.5-1/input0 [ 77.516126][ T9] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 77.557603][ T564] sony 0003:1345:3008.0010: failed to claim input [ 77.586611][ T564] usb 6-1: USB disconnect, device number 3 [ 77.608194][ T36] audit: type=1404 audit(1790941171.710:362): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 77.653532][ T36] audit: type=1400 audit(1790941171.730:363): avc: denied { read } for pid=1628 comm="syz.4.387" dev="nsfs" ino=4026532799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 77.706728][ T9] usb 3-1: device descriptor read/all, error -71 [ 77.720698][ T36] audit: type=1400 audit(1790941171.750:364): avc: denied { read } for pid=1470 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.790180][ T36] audit: type=1400 audit(1790941171.780:365): avc: denied { create } for pid=1631 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 77.830281][ T36] audit: type=1400 audit(1790941171.780:366): avc: denied { read } for pid=1470 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 77.877862][ T36] audit: type=1400 audit(1790941171.790:367): avc: denied { create } for pid=1635 comm="syz.4.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 77.910226][ T36] audit: type=1400 audit(1790941171.800:368): avc: denied { read } for pid=1635 comm="syz.4.390" dev="nsfs" ino=4026532799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 77.934726][ T36] audit: type=1400 audit(1790941171.800:369): avc: denied { ioctl } for pid=1611 comm="syz.2.381" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 78.000005][ T36] audit: type=1400 audit(1790941171.800:370): avc: denied { create } for pid=1611 comm="syz.2.381" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 78.050370][ T1331] Bluetooth: hci0: Frame reassembly failed (-84) [ 79.296141][ T1715] netlink: 'syz.5.417': attribute type 12 has an invalid length. [ 80.106167][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.681307][ T1810] netlink: 'syz.4.452': attribute type 7 has an invalid length. [ 80.777859][ T1830] can0: slcan on ttynull. [ 80.996390][ T1830] can0 (unregistered): slcan off ttynull. [ 81.246206][ T1836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1346 sclass=netlink_route_socket pid=1836 comm=syz.0.460 [ 81.776034][ T1856] netlink: 96 bytes leftover after parsing attributes in process `syz.5.467'. [ 81.987925][ T1869] capability: warning: `syz.5.473' uses 32-bit capabilities (legacy support in use) [ 82.172252][ T1882] syzkaller0: entered promiscuous mode [ 82.192802][ T1882] syzkaller0: entered allmulticast mode [ 82.416104][ T36] kauditd_printk_skb: 11276 callbacks suppressed [ 82.416127][ T36] audit: type=1400 audit(1790941176.510:11647): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 82.461268][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 82.468823][ T294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 82.486220][ T150] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 82.494423][ T294] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 82.512547][ T294] audit: backlog limit exceeded [ 82.517640][ T150] audit: backlog limit exceeded [ 82.528761][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 82.536517][ T36] audit: type=1400 audit(1790941176.550:11648): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 82.567074][ T1907] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.057306][ T1331] Bluetooth: hci0: Frame reassembly failed (-84) [ 87.426192][ T36] kauditd_printk_skb: 42609 callbacks suppressed [ 87.426207][ T36] audit: type=1400 audit(1790941181.520:52250): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 87.475699][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.490439][ T1470] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.497259][ T150] audit: audit_lost=673 audit_rate_limit=0 audit_backlog_limit=64 [ 87.505156][ T36] audit: type=1400 audit(1790941181.520:52251): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 87.526731][ T1470] audit: audit_lost=674 audit_rate_limit=0 audit_backlog_limit=64 [ 87.534890][ T150] audit: backlog limit exceeded [ 87.540129][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 87.546818][ T1470] audit: backlog limit exceeded [ 87.553948][ T150] audit: audit_lost=675 audit_rate_limit=0 audit_backlog_limit=64 [ 88.645057][ T2047] bridge0: entered promiscuous mode [ 88.655646][ T2047] bridge0: entered allmulticast mode [ 89.066234][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 89.072395][ T440] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.612893][ T2108] netlink: 'syz.5.564': attribute type 4 has an invalid length. [ 90.627561][ T2108] netlink: 17 bytes leftover after parsing attributes in process `syz.5.564'. [ 92.436183][ T36] kauditd_printk_skb: 38572 callbacks suppressed [ 92.436197][ T36] audit: type=1400 audit(1790941186.540:90820): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.493376][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 92.507186][ T1489] audit: audit_backlog=65 > audit_backlog_limit=64 [ 92.516123][ T150] audit: audit_lost=677 audit_rate_limit=0 audit_backlog_limit=64 [ 92.526310][ T1489] audit: audit_lost=678 audit_rate_limit=0 audit_backlog_limit=64 [ 92.544341][ T150] audit: backlog limit exceeded [ 92.549406][ T1489] audit: backlog limit exceeded [ 92.554308][ T36] audit: type=1400 audit(1790941186.580:90821): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 92.575754][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 92.592167][ T294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 95.228927][ T2304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 96.194445][ T2362] futex_wake_op: syz.5.649 tries to shift op by 144; fix this program [ 96.341802][ T2375] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 96.580525][ T2386] netlink: 'syz.2.658': attribute type 4 has an invalid length. [ 96.608888][ T2386] netlink: 'syz.2.658': attribute type 6 has an invalid length. [ 96.640074][ T2386] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.658'. [ 97.446164][ T36] kauditd_printk_skb: 32046 callbacks suppressed [ 97.446178][ T36] audit: type=1400 audit(1790941191.550:121748): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.478407][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 97.485256][ T150] audit: audit_lost=1053 audit_rate_limit=0 audit_backlog_limit=64 [ 97.493479][ T36] audit: type=1400 audit(1790941191.580:121749): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.514758][ T150] audit: backlog limit exceeded [ 97.519863][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 97.526627][ T150] audit: audit_lost=1054 audit_rate_limit=0 audit_backlog_limit=64 [ 97.534653][ T36] audit: type=1400 audit(1790941191.580:121750): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 97.555956][ T150] audit: backlog limit exceeded [ 97.561194][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.456097][ T36] kauditd_printk_skb: 54313 callbacks suppressed [ 102.456112][ T36] audit: type=1400 audit(1790941196.550:174898): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 102.487558][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.494184][ T150] audit: audit_lost=1444 audit_rate_limit=0 audit_backlog_limit=64 [ 102.502541][ T150] audit: backlog limit exceeded [ 102.508087][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.514719][ T150] audit: audit_lost=1445 audit_rate_limit=0 audit_backlog_limit=64 [ 102.522873][ T36] audit: type=1400 audit(1790941196.550:174899): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 102.544005][ T150] audit: backlog limit exceeded [ 102.549175][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 102.555671][ T150] audit: audit_lost=1446 audit_rate_limit=0 audit_backlog_limit=64 [ 107.466154][ T36] kauditd_printk_skb: 55076 callbacks suppressed [ 107.466168][ T36] audit: type=1400 audit(1790941201.570:229975): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.498722][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 107.505261][ T150] audit: audit_lost=1447 audit_rate_limit=0 audit_backlog_limit=64 [ 107.513474][ T150] audit: backlog limit exceeded [ 107.518526][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 107.525032][ T150] audit: audit_lost=1448 audit_rate_limit=0 audit_backlog_limit=64 [ 107.533184][ T36] audit: type=1400 audit(1790941201.600:229976): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 107.554387][ T150] audit: backlog limit exceeded [ 107.559853][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 107.566641][ T36] audit: type=1400 audit(1790941201.600:229977): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 112.476129][ T36] kauditd_printk_skb: 57083 callbacks suppressed [ 112.476143][ T36] audit: type=1400 audit(1790941206.580:284440): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 112.508319][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 112.514839][ T150] audit: audit_lost=2323 audit_rate_limit=0 audit_backlog_limit=64 [ 112.523021][ T150] audit: backlog limit exceeded [ 112.527980][ T36] audit: type=1400 audit(1790941206.610:284441): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 112.549288][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 112.555963][ T150] audit: audit_lost=2324 audit_rate_limit=0 audit_backlog_limit=64 [ 112.564026][ T150] audit: backlog limit exceeded [ 112.568992][ T36] audit: type=1400 audit(1790941206.610:284442): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 112.590337][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 114.626639][ T2497] netlink: 1 bytes leftover after parsing attributes in process `syz.5.694'. [ 117.487815][ T36] kauditd_printk_skb: 34306 callbacks suppressed [ 117.487834][ T36] audit: type=1400 audit(1790941211.590:317178): avc: denied { read write } for pid=2587 comm="syz.2.726" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 117.533429][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 117.543509][ T2592] audit: audit_backlog=65 > audit_backlog_limit=64 [ 117.550263][ T150] audit: audit_lost=2849 audit_rate_limit=0 audit_backlog_limit=64 [ 117.558555][ T2592] audit: audit_lost=2850 audit_rate_limit=0 audit_backlog_limit=64 [ 117.566750][ T150] audit: backlog limit exceeded [ 117.571889][ T36] audit: type=1400 audit(1790941211.590:317179): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 117.600596][ T2592] audit: backlog limit exceeded [ 117.605729][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 117.613433][ T1470] audit: audit_backlog=65 > audit_backlog_limit=64 [ 118.760886][ T2621] syzkaller0: entered promiscuous mode [ 118.814430][ T2621] syzkaller0: entered allmulticast mode [ 119.022196][ T2642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.745'. [ 119.107178][ T111] udevd[111]: worker [323] /devices/virtual/block/loop3 is taking a long time [ 120.587528][ T2702] netlink: 228 bytes leftover after parsing attributes in process `syz.4.767'. [ 120.896565][ T2724] netlink: 40 bytes leftover after parsing attributes in process `syz.4.774'. [ 121.013536][ T1331] Bluetooth: hci0: Frame reassembly failed (-84) [ 122.496095][ T36] kauditd_printk_skb: 38882 callbacks suppressed [ 122.496110][ T36] audit: type=1400 audit(1790941216.590:354783): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 122.535195][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 122.549406][ T150] audit: audit_lost=3278 audit_rate_limit=0 audit_backlog_limit=64 [ 122.558033][ T2772] audit: audit_backlog=65 > audit_backlog_limit=64 [ 122.564802][ T150] audit: backlog limit exceeded [ 122.570216][ T2772] audit: audit_lost=3279 audit_rate_limit=0 audit_backlog_limit=64 [ 122.578293][ T36] audit: type=1400 audit(1790941216.630:354784): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 122.599836][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 122.606777][ T2772] audit: backlog limit exceeded [ 122.611810][ T150] audit: audit_lost=3280 audit_rate_limit=0 audit_backlog_limit=64 [ 123.066104][ T440] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.072244][ T55] Bluetooth: hci0: command 0x1003 tx timeout [ 127.506149][ T36] kauditd_printk_skb: 51299 callbacks suppressed [ 127.506164][ T36] audit: type=1400 audit(1790941221.610:405423): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 127.538631][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 127.545152][ T150] audit: audit_lost=3501 audit_rate_limit=0 audit_backlog_limit=64 [ 127.553213][ T150] audit: backlog limit exceeded [ 127.558242][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 127.564735][ T150] audit: audit_lost=3502 audit_rate_limit=0 audit_backlog_limit=64 [ 127.572663][ T36] audit: type=1400 audit(1790941221.640:405424): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 127.593984][ T150] audit: backlog limit exceeded [ 127.599109][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 127.605700][ T150] audit: audit_lost=3503 audit_rate_limit=0 audit_backlog_limit=64 [ 132.516140][ T36] kauditd_printk_skb: 55483 callbacks suppressed [ 132.516155][ T36] audit: type=1400 audit(1790941226.620:460907): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 132.549281][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 132.555810][ T150] audit: audit_lost=3504 audit_rate_limit=0 audit_backlog_limit=64 [ 132.564017][ T150] audit: backlog limit exceeded [ 132.569036][ T36] audit: type=1400 audit(1790941226.650:460908): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 132.590503][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 132.597234][ T150] audit: audit_lost=3505 audit_rate_limit=0 audit_backlog_limit=64 [ 132.605146][ T150] audit: backlog limit exceeded [ 132.610277][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 132.617030][ T36] audit: type=1400 audit(1790941226.650:460909): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 137.526165][ T36] kauditd_printk_skb: 56644 callbacks suppressed [ 137.526180][ T36] audit: type=1400 audit(1790941231.630:515422): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 137.558478][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.565035][ T150] audit: audit_lost=4217 audit_rate_limit=0 audit_backlog_limit=64 [ 137.573354][ T150] audit: backlog limit exceeded [ 137.578383][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.584974][ T150] audit: audit_lost=4218 audit_rate_limit=0 audit_backlog_limit=64 [ 137.593068][ T36] audit: type=1400 audit(1790941231.660:515423): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 137.614413][ T150] audit: backlog limit exceeded [ 137.619590][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.626426][ T36] audit: type=1400 audit(1790941231.660:515424): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 142.536080][ T36] kauditd_printk_skb: 41559 callbacks suppressed [ 142.536096][ T36] audit: type=1400 audit(1790941236.630:554924): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 142.568446][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 142.574970][ T150] audit: audit_lost=4906 audit_rate_limit=0 audit_backlog_limit=64 [ 142.583064][ T150] audit: backlog limit exceeded [ 142.589098][ T36] audit: type=1400 audit(1790941236.670:554925): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 142.610527][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 142.617452][ T150] audit: audit_lost=4907 audit_rate_limit=0 audit_backlog_limit=64 [ 142.625343][ T150] audit: backlog limit exceeded [ 142.630361][ T36] audit: type=1400 audit(1790941236.670:554926): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 142.651621][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 147.546091][ T36] kauditd_printk_skb: 56100 callbacks suppressed [ 147.546106][ T36] audit: type=1400 audit(1790941241.640:609459): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 147.578820][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 147.585359][ T150] audit: audit_lost=5431 audit_rate_limit=0 audit_backlog_limit=64 [ 147.593524][ T150] audit: backlog limit exceeded [ 147.598568][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 147.605080][ T150] audit: audit_lost=5432 audit_rate_limit=0 audit_backlog_limit=64 [ 147.613148][ T36] audit: type=1400 audit(1790941241.680:609460): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 147.634448][ T150] audit: backlog limit exceeded [ 147.639586][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 147.646262][ T36] audit: type=1400 audit(1790941241.680:609461): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 152.556110][ T36] kauditd_printk_skb: 57241 callbacks suppressed [ 152.556126][ T36] audit: type=1400 audit(1790941246.660:664844): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 152.591626][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 152.600081][ T150] audit: audit_lost=6053 audit_rate_limit=0 audit_backlog_limit=64 [ 152.608246][ T150] audit: backlog limit exceeded [ 152.613195][ T36] audit: type=1400 audit(1790941246.690:664845): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 152.634682][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 152.641302][ T150] audit: audit_lost=6054 audit_rate_limit=0 audit_backlog_limit=64 [ 152.649406][ T150] audit: backlog limit exceeded [ 152.654332][ T36] audit: type=1400 audit(1790941246.690:664846): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 152.675907][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 157.566122][ T36] kauditd_printk_skb: 55571 callbacks suppressed [ 157.566137][ T36] audit: type=1400 audit(1790941251.670:719240): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 157.614205][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 157.622788][ T2915] audit: audit_backlog=65 > audit_backlog_limit=64 [ 157.629764][ T2917] audit: audit_backlog=65 > audit_backlog_limit=64 [ 157.636401][ T2918] audit: audit_backlog=65 > audit_backlog_limit=64 [ 157.650842][ T150] audit: audit_lost=6448 audit_rate_limit=0 audit_backlog_limit=64 [ 157.659315][ T2915] audit: audit_lost=6449 audit_rate_limit=0 audit_backlog_limit=64 [ 157.667509][ T2917] audit: audit_lost=6450 audit_rate_limit=0 audit_backlog_limit=64 [ 157.675872][ T2921] audit: audit_backlog=65 > audit_backlog_limit=64 [ 157.683469][ T296] audit: audit_backlog=65 > audit_backlog_limit=64 [ 157.694727][ T2917] FAULT_INJECTION: forcing a failure. [ 157.694727][ T2917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.768189][ T2917] CPU: 0 UID: 0 PID: 2917 Comm: syz.5.833 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 157.768224][ T2917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.768235][ T2917] Call Trace: [ 157.768240][ T2917] [ 157.768245][ T2917] __dump_stack+0x21/0x30 [ 157.768278][ T2917] dump_stack_lvl+0x140/0x1c0 [ 157.768301][ T2917] ? __cfi_dump_stack_lvl+0x10/0x10 [ 157.768324][ T2917] ? check_stack_object+0x138/0x150 [ 157.768343][ T2917] dump_stack+0x19/0x20 [ 157.768364][ T2917] should_fail_ex+0x3c2/0x510 [ 157.768385][ T2917] should_fail+0xf/0x20 [ 157.768403][ T2917] should_fail_usercopy+0x1e/0x30 [ 157.768424][ T2917] _copy_to_user+0x24/0xa0 [ 157.768452][ T2917] simple_read_from_buffer+0xed/0x160 [ 157.768475][ T2917] proc_fail_nth_read+0x1aa/0x220 [ 157.768500][ T2917] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 157.768524][ T2917] ? bpf_lsm_file_permission+0xd/0x20 [ 157.768546][ T2917] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 157.768569][ T2917] vfs_read+0x28b/0xc70 [ 157.768587][ T2917] ? __cfi_vfs_read+0x10/0x10 [ 157.768602][ T2917] ? __kasan_check_write+0x18/0x20 [ 157.768638][ T2917] ? mutex_lock+0x97/0x1d0 [ 157.768659][ T2917] ? __cfi_mutex_lock+0x10/0x10 [ 157.768682][ T2917] ksys_read+0x145/0x260 [ 157.768699][ T2917] ? __cfi_ksys_read+0x10/0x10 [ 157.768716][ T2917] ? __kasan_check_read+0x15/0x20 [ 157.768733][ T2917] __x64_sys_read+0x7f/0x90 [ 157.768750][ T2917] x64_sys_call+0x2638/0x2ee0 [ 157.768765][ T2917] do_syscall_64+0x57/0xf0 [ 157.768782][ T2917] ? clear_bhb_loop+0x50/0xa0 [ 157.768842][ T2917] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 157.768876][ T2917] RIP: 0033:0x7fda58f5e98e [ 157.768891][ T2917] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 157.768921][ T2917] RSP: 002b:00007fda579f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.768948][ T2917] RAX: ffffffffffffffda RBX: 00007fda579f76c0 RCX: 00007fda58f5e98e [ 157.768966][ T2917] RDX: 000000000000000f RSI: 00007fda579f70a0 RDI: 0000000000000003 [ 157.768997][ T2917] RBP: 00007fda579f7090 R08: 0000000000000000 R09: 0000000000000000 [ 157.769008][ T2917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.769030][ T2917] R13: 00007fda59226038 R14: 00007fda59225fa0 R15: 00007ffefa1be1c8 [ 157.769044][ T2917] [ 158.061007][ T2944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'. [ 158.102781][ T2952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56319 sclass=netlink_route_socket pid=2952 comm=syz.2.843 [ 158.149015][ T2956] syzkaller0: entered promiscuous mode [ 158.154738][ T2956] syzkaller0: entered allmulticast mode [ 158.711264][ T2970] netlink: 80 bytes leftover after parsing attributes in process `syz.0.847'. [ 158.739414][ T2973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2973 comm=syz.5.850 [ 161.078236][ T3054] netlink: 72 bytes leftover after parsing attributes in process `syz.4.878'. [ 162.124969][ T3111] netlink: 'syz.2.894': attribute type 13 has an invalid length. [ 162.576064][ T36] kauditd_printk_skb: 27551 callbacks suppressed [ 162.576079][ T36] audit: type=1400 audit(1790941256.670:746783): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 162.639457][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 162.652470][ T3130] audit: audit_backlog=65 > audit_backlog_limit=64 [ 162.659155][ T3126] audit: audit_backlog=65 > audit_backlog_limit=64 [ 162.672164][ T3132] audit: audit_backlog=65 > audit_backlog_limit=64 [ 162.681258][ T150] audit: audit_lost=6454 audit_rate_limit=0 audit_backlog_limit=64 [ 162.696095][ T3130] audit: audit_lost=6455 audit_rate_limit=0 audit_backlog_limit=64 [ 162.706223][ T3132] audit: audit_lost=6456 audit_rate_limit=0 audit_backlog_limit=64 [ 162.726066][ T150] audit: backlog limit exceeded [ 162.733425][ T3130] audit: backlog limit exceeded [ 163.078186][ T3151] virtio-fs: tag not found [ 165.030968][ T3195] syzkaller1: entered promiscuous mode [ 165.048788][ T3195] syzkaller1: entered allmulticast mode [ 165.259774][ T1331] bridge_slave_1: left allmulticast mode [ 165.289502][ T1331] bridge_slave_1: left promiscuous mode [ 165.317577][ T1331] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.358979][ T1331] bridge_slave_0: left allmulticast mode [ 165.389206][ T1331] bridge_slave_0: left promiscuous mode [ 165.418298][ T1331] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.576880][ T1331] veth1_macvtap: left promiscuous mode [ 165.599113][ T1331] veth0_vlan: left promiscuous mode [ 167.586088][ T36] kauditd_printk_skb: 28240 callbacks suppressed [ 167.586104][ T36] audit: type=1400 audit(1790941261.680:775021): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 167.618537][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 167.625583][ T150] audit: audit_lost=6458 audit_rate_limit=0 audit_backlog_limit=64 [ 167.633686][ T150] audit: backlog limit exceeded [ 167.638642][ T36] audit: type=1400 audit(1790941261.720:775022): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 167.659900][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 167.666585][ T150] audit: audit_lost=6459 audit_rate_limit=0 audit_backlog_limit=64 [ 167.674473][ T150] audit: backlog limit exceeded [ 167.679558][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 167.686110][ T36] audit: type=1400 audit(1790941261.720:775023): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 169.707053][ T3253] netlink: 'syz.0.938': attribute type 4 has an invalid length. [ 169.735478][ T3253] netlink: 'syz.0.938': attribute type 4 has an invalid length. [ 172.596131][ T36] kauditd_printk_skb: 49755 callbacks suppressed [ 172.596146][ T36] audit: type=1400 audit(1790941266.700:822719): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 172.628624][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 172.635240][ T150] audit: audit_lost=7147 audit_rate_limit=0 audit_backlog_limit=64 [ 172.643363][ T150] audit: backlog limit exceeded [ 172.648424][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 172.655056][ T150] audit: audit_lost=7148 audit_rate_limit=0 audit_backlog_limit=64 [ 172.663118][ T36] audit: type=1400 audit(1790941266.730:822720): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 172.684506][ T150] audit: backlog limit exceeded [ 172.689674][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 172.696345][ T36] audit: type=1400 audit(1790941266.730:822721): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 175.886121][ T3307] futex_wake_op: syz.0.953 tries to shift op by 32; fix this program [ 175.923440][ T3307] futex_wake_op: syz.0.953 tries to shift op by 32; fix this program [ 177.606098][ T36] kauditd_printk_skb: 50241 callbacks suppressed [ 177.606114][ T36] audit: type=1400 audit(1790941271.710:870843): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 177.638453][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 177.645067][ T150] audit: audit_lost=7856 audit_rate_limit=0 audit_backlog_limit=64 [ 177.653103][ T150] audit: backlog limit exceeded [ 177.658106][ T36] audit: type=1400 audit(1790941271.740:870844): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 177.679615][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 177.686512][ T150] audit: audit_lost=7857 audit_rate_limit=0 audit_backlog_limit=64 [ 177.694426][ T150] audit: backlog limit exceeded [ 177.699542][ T36] audit: type=1400 audit(1790941271.740:870845): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 177.720876][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 182.616138][ T36] kauditd_printk_skb: 54154 callbacks suppressed [ 182.616168][ T36] audit: type=1400 audit(1790941276.720:923099): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 182.649218][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 182.655746][ T150] audit: audit_lost=8492 audit_rate_limit=0 audit_backlog_limit=64 [ 182.670259][ T3345] audit: audit_backlog=65 > audit_backlog_limit=64 [ 182.684184][ T3349] audit: audit_backlog=65 > audit_backlog_limit=64 [ 182.696086][ T150] audit: backlog limit exceeded [ 182.701142][ T3352] audit: audit_backlog=65 > audit_backlog_limit=64 [ 182.710283][ T36] audit: type=1400 audit(1790941276.750:923100): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 182.731818][ T3345] audit: audit_lost=8493 audit_rate_limit=0 audit_backlog_limit=64 [ 182.742897][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 183.001818][ T3351] cgroup: fork rejected by pids controller in /syz5 [ 185.866093][ T37] INFO: task syz-executor:295 blocked for more than 122 seconds. [ 185.873915][ T37] Not tainted syzkaller #0 [ 185.890613][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 185.909236][ T37] task:syz-executor state:D stack:0 pid:295 tgid:295 ppid:1 flags:0x00000004 [ 185.929723][ T37] Call Trace: [ 185.933057][ T37] [ 185.936002][ T37] __schedule+0x1496/0x20b0 [ 185.956015][ T37] ? __sched_text_start+0x10/0x10 [ 185.961269][ T37] ? __kasan_check_write+0x18/0x20 [ 185.977893][ T37] ? _raw_spin_lock+0x92/0x120 [ 185.982706][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 185.998236][ T37] schedule+0xc5/0x240 [ 186.002354][ T37] schedule_preempt_disabled+0x14/0x30 [ 186.019409][ T37] __mutex_lock+0x902/0x1b90 [ 186.024040][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 186.042129][ T37] ? __kasan_check_write+0x18/0x20 [ 186.054574][ T37] ? _raw_spin_lock+0x92/0x120 [ 186.066410][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 186.071732][ T37] ? __asan_memcpy+0x5a/0x80 [ 186.085580][ T37] __mutex_lock_slowpath+0xe/0x20 [ 186.096569][ T37] mutex_lock+0x113/0x1d0 [ 186.100953][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 186.105834][ T37] ? disk_block_events+0xaf/0x120 [ 186.124000][ T37] bdev_open+0xe3/0xd30 [ 186.134275][ T37] blkdev_open+0x3d0/0x560 [ 186.145249][ T37] ? __cfi_blkdev_open+0x10/0x10 [ 186.157341][ T37] do_dentry_open+0x97c/0x1510 [ 186.162139][ T37] vfs_open+0x86/0x240 [ 186.175044][ T37] ? __cfi_vfs_open+0x10/0x10 [ 186.186665][ T37] ? may_open+0x352/0x430 [ 186.191025][ T37] path_openat+0x2c49/0x35a0 [ 186.195630][ T37] ? kasan_save_alloc_info+0x3a/0x50 [ 186.214328][ T37] ? getname+0x1b/0x30 [ 186.224194][ T37] ? x64_sys_call+0xe69/0x2ee0 [ 186.235831][ T37] ? do_syscall_64+0x57/0xf0 [ 186.245979][ T37] ? do_filp_open+0x440/0x440 [ 186.255828][ T37] do_filp_open+0x1f2/0x440 [ 186.267632][ T37] ? __cfi_do_filp_open+0x10/0x10 [ 186.272700][ T37] ? alloc_fd+0x4c1/0x570 [ 186.286478][ T37] do_sys_openat2+0x134/0x1d0 [ 186.291192][ T37] ? putname+0x113/0x150 [ 186.295438][ T37] ? do_sys_open+0x100/0x100 [ 186.312032][ T37] ? do_mkdirat+0x4e0/0x530 [ 186.323068][ T37] ? __cfi_do_mkdirat+0x10/0x10 [ 186.334910][ T37] ? __kasan_check_write+0x18/0x20 [ 186.347290][ T37] __x64_sys_openat+0x13a/0x170 [ 186.352188][ T37] x64_sys_call+0xe69/0x2ee0 [ 186.365899][ T37] do_syscall_64+0x57/0xf0 [ 186.376439][ T37] ? clear_bhb_loop+0x50/0xa0 [ 186.381178][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 186.398277][ T37] RIP: 0033:0x7fa7b45592d7 [ 186.402748][ T37] RSP: 002b:00007ffcfded3ad0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 186.422806][ T37] RAX: ffffffffffffffda RBX: 000055558800e500 RCX: 00007fa7b45592d7 [ 186.439855][ T37] RDX: 0000000000000000 RSI: 00007ffcfded3c00 RDI: ffffffffffffff9c [ 186.456958][ T37] RBP: 00007ffcfded3bac R08: 0000000000000000 R09: 0000000000000000 [ 186.464956][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000004e [ 186.489789][ T37] R13: 00000000000927c0 R14: 000000000000ddef R15: 00007ffcfded3c00 [ 186.507358][ T37] [ 186.510415][ T37] INFO: task udevd:323 blocked for more than 123 seconds. [ 186.528058][ T37] Not tainted syzkaller #0 [ 186.539700][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 186.557842][ T37] task:udevd state:D stack:0 pid:323 tgid:323 ppid:111 flags:0x00000000 [ 186.578452][ T37] Call Trace: [ 186.581757][ T37] [ 186.584698][ T37] __schedule+0x1496/0x20b0 [ 186.600884][ T37] ? __sched_text_start+0x10/0x10 [ 186.605973][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 186.621582][ T37] ? __kasan_check_write+0x18/0x20 [ 186.634079][ T37] ? _raw_spin_lock+0x92/0x120 [ 186.645708][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 186.656510][ T37] schedule+0xc5/0x240 [ 186.660610][ T37] schedule_preempt_disabled+0x14/0x30 [ 186.675713][ T37] __mutex_lock+0x902/0x1b90 [ 186.686886][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 186.693696][ T37] ? __kasan_check_write+0x18/0x20 [ 186.709063][ T37] ? _raw_spin_lock+0x92/0x120 [ 186.730889][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 186.780787][ T37] ? __asan_memcpy+0x5a/0x80 [ 186.785428][ T37] __mutex_lock_slowpath+0xe/0x20 [ 186.823358][ T37] mutex_lock+0x113/0x1d0 [ 186.827845][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 186.832733][ T37] ? disk_block_events+0xaf/0x120 [ 186.837833][ T37] bdev_open+0xe3/0xd30 [ 186.842038][ T37] blkdev_open+0x3d0/0x560 [ 186.846589][ T37] ? __cfi_blkdev_open+0x10/0x10 [ 186.851548][ T37] do_dentry_open+0x97c/0x1510 [ 186.856398][ T37] vfs_open+0x86/0x240 [ 186.860491][ T37] ? __cfi_vfs_open+0x10/0x10 [ 186.865214][ T37] ? may_open+0x352/0x430 [ 186.869601][ T37] path_openat+0x2c49/0x35a0 [ 186.874204][ T37] ? kasan_save_alloc_info+0x3a/0x50 [ 186.879619][ T37] ? getname+0x1b/0x30 [ 186.883710][ T37] ? x64_sys_call+0xe69/0x2ee0 [ 186.888499][ T37] ? do_syscall_64+0x57/0xf0 [ 186.893091][ T37] ? do_filp_open+0x440/0x440 [ 186.897802][ T37] do_filp_open+0x1f2/0x440 [ 186.902334][ T37] ? __cfi_do_filp_open+0x10/0x10 [ 186.907399][ T37] ? alloc_fd+0x4c1/0x570 [ 186.911776][ T37] do_sys_openat2+0x134/0x1d0 [ 186.916650][ T37] ? do_sys_open+0x100/0x100 [ 186.921337][ T37] __x64_sys_openat+0x13a/0x170 [ 186.926218][ T37] x64_sys_call+0xe69/0x2ee0 [ 186.930889][ T37] do_syscall_64+0x57/0xf0 [ 186.935477][ T37] ? clear_bhb_loop+0x50/0xa0 [ 186.940186][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 186.946120][ T37] RIP: 0033:0x7fc34e0a7407 [ 186.950529][ T37] RSP: 002b:00007ffc8f4afe20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 186.959005][ T37] RAX: ffffffffffffffda RBX: 00007fc34e822880 RCX: 00007fc34e0a7407 [ 186.967100][ T37] RDX: 00000000000a0800 RSI: 0000563a02dd11f0 RDI: ffffffffffffff9c [ 186.975092][ T37] RBP: 0000563a02b8e2c0 R08: 0000000000000000 R09: 0000000000000000 [ 186.983134][ T37] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563a02dcf560 [ 186.991146][ T37] R13: 0000563a02dcf0f0 R14: 0000000000000000 R15: 0000563a02dcf560 [ 186.999501][ T37] [ 187.013503][ T37] INFO: task syz.1.281:1269 blocked for more than 124 seconds. [ 187.046462][ T37] Not tainted syzkaller #0 [ 187.051465][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.118045][ T37] task:syz.1.281 state:D stack:0 pid:1269 tgid:1266 ppid:297 flags:0x00000004 [ 187.170863][ T37] Call Trace: [ 187.174184][ T37] [ 187.190202][ T37] __schedule+0x1496/0x20b0 [ 187.194809][ T37] ? __sched_text_start+0x10/0x10 [ 187.199885][ T37] ? __kasan_check_write+0x18/0x20 [ 187.205717][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 187.211283][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 187.217224][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 187.222696][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 187.228556][ T37] schedule+0xc5/0x240 [ 187.232651][ T37] blk_mq_freeze_queue_wait+0xf3/0x180 [ 187.238140][ T37] ? __cfi_blk_mq_freeze_queue_wait+0x10/0x10 [ 187.244211][ T37] ? blk_mq_run_hw_queues+0x378/0x440 [ 187.249637][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 187.255904][ T37] ? __cfi_blk_mq_run_hw_queues+0x10/0x10 [ 187.261653][ T37] ? mutex_unlock+0x90/0x240 [ 187.266273][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 187.271302][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 187.277137][ T37] blk_freeze_queue+0xc7/0x100 [ 187.281910][ T37] blk_mq_freeze_queue+0x19/0x30 [ 187.286981][ T37] lo_ioctl+0x1ac1/0x2010 [ 187.291314][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 187.296113][ T37] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 187.302205][ T37] ? dequeue_entity+0x88a/0x13b0 [ 187.307321][ T37] ? update_load_avg+0x4f3/0x1980 [ 187.312372][ T37] ? __kasan_check_read+0x15/0x20 [ 187.317455][ T37] ? update_cfs_group+0x127/0x250 [ 187.322584][ T37] ? dequeue_entities+0x644/0x1370 [ 187.328119][ T37] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 187.334206][ T37] ? update_curr+0xf1/0x9c0 [ 187.338751][ T37] ? xfd_validate_state+0x68/0x140 [ 187.343891][ T37] ? save_fpregs_to_fpstate+0x19d/0x230 [ 187.349482][ T37] ? __kasan_check_write+0x18/0x20 [ 187.354595][ T37] ? __switch_to+0xc6b/0x1320 [ 187.359406][ T37] ? __cfi___switch_to+0x10/0x10 [ 187.364390][ T37] ? _raw_spin_unlock+0x45/0x60 [ 187.369298][ T37] ? finish_task_switch+0x139/0x770 [ 187.374570][ T37] ? __schedule+0x149e/0x20b0 [ 187.379385][ T37] ? avc_has_extended_perms+0x7fb/0xe60 [ 187.384964][ T37] ? __asan_memcpy+0x5a/0x80 [ 187.389633][ T37] ? avc_has_extended_perms+0x94b/0xe60 [ 187.395244][ T37] ? __asan_set_shadow_00+0x12/0x20 [ 187.400529][ T37] ? do_vfs_ioctl+0x1824/0x2010 [ 187.405411][ T37] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 187.411105][ T37] ? schedule+0xc5/0x240 [ 187.415378][ T37] ? futex_unqueue+0x136/0x160 [ 187.420183][ T37] ? __asan_set_shadow_00+0x12/0x20 [ 187.425431][ T37] ? blkdev_common_ioctl+0x11e7/0x2740 [ 187.430927][ T37] ? blkdev_bszset+0x230/0x230 [ 187.435735][ T37] ? __kasan_check_read+0x15/0x20 [ 187.440813][ T37] ? has_cap_mac_admin+0xd0/0xd0 [ 187.445755][ T37] ? futex_wait+0x2b8/0x7c0 [ 187.450292][ T37] ? __cfi_futex_wait+0x10/0x10 [ 187.455141][ T37] ? do_splice+0x149d/0x1cc0 [ 187.459767][ T37] ? selinux_file_ioctl+0x732/0x1480 [ 187.465085][ T37] ? __kasan_check_write+0x18/0x20 [ 187.470518][ T37] ? _raw_spin_lock+0x92/0x120 [ 187.475386][ T37] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 187.480975][ T37] ? do_futex+0x32a/0x510 [ 187.485501][ T37] ? __kasan_check_write+0x18/0x20 [ 187.490847][ T37] ? __cfi_do_futex+0x10/0x10 [ 187.495565][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 187.500287][ T37] blkdev_ioctl+0x548/0x690 [ 187.504906][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 187.509954][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 187.514900][ T37] ? security_file_ioctl+0x3e/0x110 [ 187.520112][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 187.525142][ T37] __se_sys_ioctl+0x126/0x1b0 [ 187.529842][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 187.534452][ T37] x64_sys_call+0x1878/0x2ee0 [ 187.539136][ T37] do_syscall_64+0x57/0xf0 [ 187.543548][ T37] ? clear_bhb_loop+0x50/0xa0 [ 187.548243][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 187.554139][ T37] RIP: 0033:0x7f4a8799e159 [ 187.558587][ T37] RSP: 002b:00007f4a88781028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.567042][ T37] RAX: ffffffffffffffda RBX: 00007f4a87c25fa0 RCX: 00007f4a8799e159 [ 187.575012][ T37] RDX: 000000000000000a RSI: 0000000000004c06 RDI: 0000000000000009 [ 187.582996][ T37] RBP: 00007f4a87a3506b R08: 0000000000000000 R09: 0000000000000000 [ 187.591092][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.599086][ T37] R13: 00007f4a87c26038 R14: 00007f4a87c25fa0 R15: 00007fff4a8b3b28 [ 187.607073][ T37] [ 187.614524][ T37] INFO: task syz.1.281:1275 blocked for more than 124 seconds. [ 187.626335][ T36] kauditd_printk_skb: 37721 callbacks suppressed [ 187.626349][ T36] audit: type=1400 audit(1790941281.730:959147): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 187.674699][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 187.681512][ T37] Not tainted syzkaller #0 [ 187.691412][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.710415][ T37] task:syz.1.281 state:D stack:0 pid:1275 tgid:1266 ppid:297 flags:0x00004004 [ 187.720738][ T37] Call Trace: [ 187.724029][ T37] [ 187.726989][ T37] __schedule+0x1496/0x20b0 [ 187.731506][ T37] ? __sched_text_start+0x10/0x10 [ 187.736578][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 187.742417][ T37] ? xas_start+0x31e/0x3e0 [ 187.746860][ T37] ? xas_load+0x398/0x3d0 [ 187.751205][ T37] ? __kasan_check_write+0x18/0x20 [ 187.756342][ T37] schedule+0xc5/0x240 [ 187.760412][ T37] io_schedule+0x85/0x150 [ 187.764762][ T37] ? folio_wait_bit_common+0x69f/0x940 [ 187.770355][ T37] folio_wait_bit_common+0x6a4/0x940 [ 187.775831][ T37] ? folio_wait_bit+0x50/0x50 [ 187.780548][ T37] ? __cfi_wake_page_function+0x10/0x10 [ 187.786220][ T37] ? __cfi___filemap_get_folio+0x10/0x10 [ 187.791890][ T37] do_read_cache_folio+0x150/0x960 [ 187.797057][ T37] ? __cfi_blkdev_read_folio+0x10/0x10 [ 187.802541][ T37] ? read_cache_folio+0x90/0x90 [ 187.807448][ T37] ? efi_partition+0x3217/0x32b0 [ 187.812486][ T37] read_cache_folio+0x54/0x90 [ 187.817315][ T37] read_part_sector+0xcc/0x250 [ 187.822097][ T37] msdos_partition+0x111/0x3000 [ 187.827058][ T37] ? __cfi_efi_partition+0x10/0x10 [ 187.832472][ T37] ? vsnprintf+0x19ef/0x1ad0 [ 187.837099][ T37] ? snprintf+0xe9/0x140 [ 187.841348][ T37] ? __cfi_msdos_partition+0x10/0x10 [ 187.846841][ T37] ? __cfi_snprintf+0x10/0x10 [ 187.851526][ T37] ? bdev_disk_changed+0x501/0x15d0 [ 187.856770][ T37] bdev_disk_changed+0x820/0x15d0 [ 187.861838][ T37] ? __cfi_bdev_disk_changed+0x10/0x10 [ 187.867365][ T37] ? __kasan_check_write+0x18/0x20 [ 187.872504][ T37] ? mutex_unlock+0x90/0x240 [ 187.877139][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 187.882199][ T37] loop_reread_partitions+0x64/0x110 [ 187.887709][ T37] loop_configure+0x106f/0x13a0 [ 187.892677][ T37] ? __cfi_loop_configure+0x10/0x10 [ 187.897911][ T37] ? __kasan_check_write+0x18/0x20 [ 187.903049][ T37] lo_ioctl+0xa78/0x2010 [ 187.907314][ T37] ? update_load_avg+0x4f3/0x1980 [ 187.912341][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 187.917029][ T37] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 187.923096][ T37] ? dequeue_entity+0x88a/0x13b0 [ 187.928067][ T37] ? update_load_avg+0x4f3/0x1980 [ 187.933092][ T37] ? __kasan_check_read+0x15/0x20 [ 187.938157][ T37] ? update_cfs_group+0x127/0x250 [ 187.943192][ T37] ? dequeue_entities+0x644/0x1370 [ 187.948349][ T37] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 187.954431][ T37] ? update_curr+0xf1/0x9c0 [ 187.958988][ T37] ? xfd_validate_state+0x68/0x140 [ 187.964140][ T37] ? save_fpregs_to_fpstate+0x19d/0x230 [ 187.969726][ T37] ? __kasan_check_write+0x18/0x20 [ 187.974862][ T37] ? __switch_to+0xc6b/0x1320 [ 187.979580][ T37] ? __cfi___switch_to+0x10/0x10 [ 187.984535][ T37] ? _raw_spin_unlock+0x45/0x60 [ 187.989424][ T37] ? finish_task_switch+0x139/0x770 [ 187.994633][ T37] ? __schedule+0x149e/0x20b0 [ 187.999335][ T37] ? avc_has_extended_perms+0x7fb/0xe60 [ 188.004915][ T37] ? __asan_memcpy+0x5a/0x80 [ 188.009555][ T37] ? avc_has_extended_perms+0x94b/0xe60 [ 188.015293][ T37] ? __asan_set_shadow_00+0x12/0x20 [ 188.020533][ T37] ? do_vfs_ioctl+0x1824/0x2010 [ 188.025393][ T37] ? __ia32_compat_sys_ioctl+0x980/0x980 [ 188.031069][ T37] ? schedule+0xc5/0x240 [ 188.035311][ T37] ? futex_unqueue+0x136/0x160 [ 188.040120][ T37] ? __asan_set_shadow_00+0x12/0x20 [ 188.045345][ T37] ? blkdev_common_ioctl+0x11e7/0x2740 [ 188.050822][ T37] ? blkdev_bszset+0x230/0x230 [ 188.055590][ T37] ? has_cap_mac_admin+0xd0/0xd0 [ 188.060563][ T37] ? futex_wait+0x2b8/0x7c0 [ 188.065068][ T37] ? __cfi_do_futex+0x10/0x10 [ 188.069766][ T37] ? __cfi_lo_ioctl+0x10/0x10 [ 188.074439][ T37] blkdev_ioctl+0x548/0x690 [ 188.078958][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 188.084070][ T37] ? bpf_lsm_file_ioctl+0xd/0x20 [ 188.089023][ T37] ? security_file_ioctl+0x3e/0x110 [ 188.094227][ T37] ? __cfi_blkdev_ioctl+0x10/0x10 [ 188.099271][ T37] __se_sys_ioctl+0x126/0x1b0 [ 188.103954][ T37] __x64_sys_ioctl+0x7f/0xa0 [ 188.108659][ T37] x64_sys_call+0x1878/0x2ee0 [ 188.113359][ T37] do_syscall_64+0x57/0xf0 [ 188.117853][ T37] ? clear_bhb_loop+0x50/0xa0 [ 188.122555][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 188.128511][ T37] RIP: 0033:0x7f4a8799e159 [ 188.132924][ T37] RSP: 002b:00007f4a863f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.141358][ T37] RAX: ffffffffffffffda RBX: 00007f4a87c26090 RCX: 00007f4a8799e159 [ 188.149383][ T37] RDX: 0000200000000080 RSI: 0000000000004c0a RDI: 0000000000000009 [ 188.157460][ T37] RBP: 00007f4a87a3506b R08: 0000000000000000 R09: 0000000000000000 [ 188.165517][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.173500][ T37] R13: 00007f4a87c26128 R14: 00007f4a87c26090 R15: 00007fff4a8b3b28 [ 188.181662][ T37] [ 188.184842][ T150] audit: audit_lost=9053 audit_rate_limit=0 audit_backlog_limit=64 [ 188.203470][ T37] NMI backtrace for cpu 0 [ 188.203485][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 188.203506][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.203516][ T37] Call Trace: [ 188.203521][ T37] [ 188.203527][ T37] __dump_stack+0x21/0x30 [ 188.203555][ T37] dump_stack_lvl+0x140/0x1c0 [ 188.203579][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 188.203604][ T37] dump_stack+0x19/0x20 [ 188.203626][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 188.203644][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 188.203660][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 188.203685][ T37] ? sched_show_task+0x371/0x530 [ 188.203708][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 188.203738][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 188.203762][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 188.203779][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 188.203802][ T37] cpumask_backtrace+0x1f/0x30 [ 188.203818][ T37] watchdog+0xe45/0xf90 [ 188.203836][ T37] ? __kasan_check_write+0x18/0x20 [ 188.203855][ T37] ? __cfi_watchdog+0x10/0x10 [ 188.203873][ T37] ? __kasan_check_read+0x15/0x20 [ 188.203889][ T37] ? __kthread_parkme+0x12f/0x180 [ 188.203906][ T37] ? schedule+0xc5/0x240 [ 188.203924][ T37] kthread+0x2c4/0x360 [ 188.203943][ T37] ? __cfi_watchdog+0x10/0x10 [ 188.203961][ T37] ? __cfi_kthread+0x10/0x10 [ 188.203980][ T37] ret_from_fork+0x67/0xa0 [ 188.204004][ T37] ? __cfi_kthread+0x10/0x10 [ 188.204023][ T37] ret_from_fork_asm+0x1a/0x30 [ 188.204040][ T37] [ 188.366863][ T150] audit: backlog limit exceeded [ 188.371938][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.378577][ T150] audit: audit_lost=9054 audit_rate_limit=0 audit_backlog_limit=64 [ 188.386522][ T150] audit: backlog limit exceeded [ 188.391436][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 188.397968][ T150] audit: audit_lost=9055 audit_rate_limit=0 audit_backlog_limit=64 [ 188.405870][ T150] audit: backlog limit exceeded [ 188.415492][ T1331] bridge_slave_1: left allmulticast mode [ 188.421226][ T1331] bridge_slave_1: left promiscuous mode [ 188.427209][ T1331] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.453203][ T1331] bridge_slave_0: left allmulticast mode [ 188.459018][ T1331] bridge_slave_0: left promiscuous mode [ 188.464624][ T1331] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.527517][ T1331] tipc: Left network mode [ 188.532489][ T1331] veth1_macvtap: left promiscuous mode [ 188.538162][ T1331] veth0_vlan: left promiscuous mode [ 188.716859][ T1331] bridge_slave_1: left allmulticast mode [ 188.722551][ T1331] bridge_slave_1: left promiscuous mode [ 188.735144][ T1331] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.753361][ T1331] bridge_slave_0: left allmulticast mode [ 188.767239][ T1331] bridge_slave_0: left promiscuous mode [ 188.772899][ T1331] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.857845][ T1331] veth1_macvtap: left promiscuous mode [ 188.863403][ T1331] veth0_vlan: left promiscuous mode [ 192.636116][ T36] kauditd_printk_skb: 44620 callbacks suppressed [ 192.636131][ T36] audit: type=1400 audit(1790941286.740:1003741): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 192.669616][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 192.676286][ T150] audit: audit_lost=9065 audit_rate_limit=0 audit_backlog_limit=64 [ 192.684226][ T150] audit: backlog limit exceeded [ 192.689330][ T36] audit: type=1400 audit(1790941286.770:1003742): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 192.710791][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 192.717455][ T150] audit: audit_lost=9066 audit_rate_limit=0 audit_backlog_limit=64 [ 192.725367][ T150] audit: backlog limit exceeded [ 192.730547][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 192.737179][ T36] audit: type=1400 audit(1790941286.770:1003743): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0