last executing test programs: 1m11.897436544s ago: executing program 0 (id=227): madvise(&(0x7f0000214000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 64) sigaltstack(&(0x7f0000000000)={&(0x7f0000000080)=""/4096, 0x80000001, 0x1000}, 0x0) (async, rerun: 64) sigaltstack(0x0, &(0x7f0000000040)={0x0}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001800090200000000000000000200000008eaff0100b4"], 0x2c}, 0x1, 0x0, 0x0, 0x990}, 0x0) (async) write$tun(r2, 0x0, 0xfdef) (async, rerun: 64) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000100)="631388bd83cad06950b07bfac4b97ff44924326c47428f1be1059ffad5a4588c9fa1b71161482e1fa8efb7a9a6128d2e28b5e4b66f6b69a5e9c494184d6c8f", 0x3f) (async) r5 = socket(0x1000000000000010, 0x80802, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) close_range(r5, 0xffffffffffffffff, 0x0) (async, rerun: 64) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) (rerun: 64) clock_gettime(0x0, &(0x7f0000000000)) (async, rerun: 32) timer_settime(r6, 0x1, &(0x7f0000040fe0)={{0x77359400}, {0x0, 0x9}}, 0x0) (async, rerun: 32) timer_delete(r6) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async) syz_clone(0x88280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x1ff, 0x0, 0x0, 0x4}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0x11, 0x0, 0xffffffff, 0x0, 0x0, 0x1202, 0x80, 0x6}}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 1m11.819076635s ago: executing program 0 (id=228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r3, 0x111, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtaction={0x1604, 0x30, 0x80d, 0x70bd29, 0x25dfdbfb, {}, [{0x4}, {0x11bc, 0x1, [@m_ipt={0x10a0, 0xc, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x0, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x58, 0x1, 'nat\x00'}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x68c41fc90da30b90}}}}, @m_ipt={0x118, 0x9, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0xe8, 0x6, "12760cd54eca35163f12223a006f2432dad9ef5aa6bf3ee02a81c8a30683fada5d0e5b9bbfb26d574d3b234e704cc53723f89897dbce86d1e8da276440b67a1721a615707c64a2937bc0806ed443a66151cdfc437af1cbe601e0e652fc000c24bd2209d61c0cce6b04e450f8f7cb782d286995409a38ba0fc72c3080823e422d1d24cdd17d1f6c89592928a3bc4397fc9bb10c764c5de21591b4ed1fd35432d6216fac93645f5471f3e2a514ae2aebb20ec73cfda976ebd907b859755baed291f74981f9e5f0bda868458921f6730169bcd74caac6d69784a21378d46389592ea86b84ab"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x430, 0x1, [@m_ipt={0x1f4, 0x9, 0x0, 0x0, {{0x8}, {0x118, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xa9, 0x6, {0x100, 'security\x00', 0x2, 0xe01b, "a64f9b8523a00e5ae32057b51c16e65ed2d9b72b6d0de629be67526c495bb5f90973104a52b8e0ed05939055eacb18c5d2c5f7dc6d897113c367cb7250dd8901237ed44dc9f753956a88df8a9193d6c70bca5f7a2c9c2a7490cfe9d984e68ccb8536456519ab7e05f9ac9134a1974292cbf7ef98af143ef4f48d8ed809a11e"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_HOOK={0x0, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x8000}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xd}]}, {0xb5, 0x6, "4b8c53b4f9f78dd5627678449c116182ace37e2c6a6e5ad32e877a6fdfcc933326bc9cd8b05a636ae76640ba65839f35bfe7181773e4024b4609f0ed6154c346d68493579b42c22f417537f393228c0972992f8cf33320a3ec41ac1f0964bfd7779e2334a453af324e2a7c3aa8900c168a3047da746191776433bac5946134b390aa74d62199ff4d5b1eb1d27bf9aa3e5aa2b239eb37882f020ea75cabe36513903ad6b3890e0028114b1b8b6557f5ad9d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ipt={0x238, 0x3, 0x0, 0x0, {{0x8}, {0x4, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x200}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0xad, 0x6, {0x800, 'mangle\x00', 0x6, 0xa, "9c35f2dc7e920adebecdbe07d483159f56791535316ab32a8de7b3301c8d5565085d5c48a5a9694b50c8bcf9005b63857375d7396a17cc734d0498cc07027929c3822677fd788809b3d3b71b90bc7926e6a8ece49de45a893d8785e2ff834301e050ab3b6122482b7c651548344e187e0bde1c61de646a031c8d491842392983f37c71"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xe9c3}, @TCA_IPT_TARG={0x3a, 0x6, {0x7, 'security\x00', 0x5, 0x3df3, "60c4714775c6bdf6b85ea9e48f332e32"}}]}, {0x96, 0x6, "91894810406b731170f81edadf540d62e8cf4ffd4b088585553880fe32f61722377d8a633703fdc7c5099476bfc32fe66044d57f5fbad815a2c0ccb66b537d21b2cb2dc655c29d08c40805e57439f8553dc975d25838dd8184d391d43cb0037b4d4f6c4f79a814e3685781031d080f69ae8882de15d007c543f385601b7680fc4a1793552d23ba10fbda73f0cda5c43539c7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x1604}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='pstore\x00', 0x10005, 0x0) 1m11.799890206s ago: executing program 0 (id=229): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180)='aio\x00', 0x12400, &(0x7f00000001c0)=',*/\x00') 1m11.735266867s ago: executing program 0 (id=230): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x20000003}}, 0x10, 0x0}, 0x4005815) close_range(r4, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@flat=@weak_handle={0x77682a85, 0x1001}, @ptr={0x70742a85, 0x0, 0x0, 0x1f, 0x1, 0x14}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x32}}, &(0x7f0000000680)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1m11.709948388s ago: executing program 0 (id=231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)="9eb1", 0x2) syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r6, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r6, 0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000221", @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x98, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x54, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x81, 0x25, 0x70, 0x3ff}}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0xc, 0x2, 0x5, 0x0, {0x93, 0x11df, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2}, 0x1, 0x152a, 0x5}}, @void, @void, @val={0x76, 0x6, {0x7, 0x3, 0x24, 0x1}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}, @NL80211_ATTR_SSID={0x8, 0x34, @random="4fc4717f"}, @NL80211_ATTR_HIDDEN_SSID={0x8}]}, 0x98}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x21}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "736bff17812afa69fa335f03145b4823"}]}, 0x48}, 0x1, 0x0, 0x0, 0x8041}, 0x40000) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8030}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) 1m11.680236889s ago: executing program 0 (id=232): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c74be3f9fbafa4bd44a001000000000000000000000000000000000000007"], &(0x7f0000000200)=0x2f) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000951000/0x1000)=nil) socket$tipc(0x1e, 0x2, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000380)={0xf, 0x6, [{0x8, 0x0, 0x39baa21d}, {0x3988d011, 0x0, 0x530}, {0x5, 0x0, 0x9}, {0xffffffff}, {0x8001, 0x0, 0xffffffffffffffff}, {0x101, 0x0, 0x3}, {0xae2}, {0x9, 0x0, 0x100000000}, {0x5, 0x0, 0x1}, {0xa9, 0x0, 0x1}, {0x8, 0x0, 0x3}, {0x0, 0x0, 0x8001}, {0x1}, {0x9, 0x0, 0xfb0c}, {0xa, 0x0, 0x2}, {0xfffffffe, 0x0, 0x8}]}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000056000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d9000000", @ANYRES16=0x0, @ANYBLOB="030b000000000000000013000000"], 0x14}}, 0x0) r5 = socket(0x2, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000000000034"], 0x18}, 0x0) sendmmsg(r2, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\"', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4) timer_delete(0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r6, 0x2, 0x5003) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 54.934208499s ago: executing program 32 (id=232): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c74be3f9fbafa4bd44a001000000000000000000000000000000000000007"], &(0x7f0000000200)=0x2f) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000951000/0x1000)=nil) socket$tipc(0x1e, 0x2, 0x0) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000380)={0xf, 0x6, [{0x8, 0x0, 0x39baa21d}, {0x3988d011, 0x0, 0x530}, {0x5, 0x0, 0x9}, {0xffffffff}, {0x8001, 0x0, 0xffffffffffffffff}, {0x101, 0x0, 0x3}, {0xae2}, {0x9, 0x0, 0x100000000}, {0x5, 0x0, 0x1}, {0xa9, 0x0, 0x1}, {0x8, 0x0, 0x3}, {0x0, 0x0, 0x8001}, {0x1}, {0x9, 0x0, 0xfb0c}, {0xa, 0x0, 0x2}, {0xfffffffe, 0x0, 0x8}]}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a400000056000100000000000000800007"], 0xa4}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d9000000", @ANYRES16=0x0, @ANYBLOB="030b000000000000000013000000"], 0x14}}, 0x0) r5 = socket(0x2, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000000000034"], 0x18}, 0x0) sendmmsg(r2, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\"', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4) timer_delete(0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r6, 0x2, 0x5003) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 47.320295324s ago: executing program 3 (id=352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000100000000000008010000001400020077673100000000000000000000000000240003000000000000000000000000000000000000000000000000000000000000000000de6b2085474990fbc408354e833f0174b3db96557039f67b12f502ffe5c205cb492b6de17e83d7716562cd2d80fdf88ebba17d41ab535a57127b7d640111c4e048d1042083c71f5a227a49d72b4326c36947ddc3078515d49bfd62a1e2bbe72a37841026c3db3a32f248b0a0b4aa8ee5a7c44d4400d4ffcba48b9c97432113ae2c110a6724721e9c95628100e5a764a5af122153c8195722895c69e79b2c94b481"], 0x4c}}, 0x4) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r2, 0x900, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x20000800) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x190, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x170, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xce, 0x4, "f86f30b2a1cf8dd2bb91ce7c5621864d38e45f0da84a5451f85ba84c311fb5bdce103ad3268c761a96d95cb61dec880beb677a7361a73731915842e5096ef4627811501b11f39daa12ce229b8903d24d0212185949a30f84c206f591b7f9bcb3b8c9ece979fb31196ffd980d968f12a62329574367cdfa43257f760a0493b5514033ff95c119a802eaad5bff7d46986ca070c63d5d887eb77d052f58a62367334a7ec56b81785a8ccafc378747112a1010262be93ac2f2a22bd111da040ada09b24d0d0b05a380d59f9c"}, @ETHTOOL_A_BITSET_MASK={0x91, 0x5, "dc6272dbbdbcaca73b18da350386d1d80540dbb55471c1095840ac6f18cd4f0e1c74b8737db63ebe3c0234475371c1abfa7651b7a4fd75797e1c93e1ea7d3ef3411dff9b4a7d2692a62821fdd860665176a4f7132ff794c0e4ac2c0eac0455e1b15c74bd11dd286a9daf244f3d156cf47295221510ccda3e1781bb18b030a0d72cbbe96e5319c87d3e77cccedd"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8000}, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, 0x0, 0x0) 47.319963874s ago: executing program 3 (id=353): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x5, 0x1, 0x401}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r3], 0xffe) 47.317681044s ago: executing program 3 (id=355): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x3) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) landlock_restrict_self(r1, 0xc) fchdir(r1) open(&(0x7f0000000380)='./file0\x00', 0xe6242, 0x4ebfac6bbaf7949) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) shutdown(r2, 0x1) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000, 0x0) 47.274035005s ago: executing program 3 (id=357): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/24, 0x18}, {&(0x7f00000001c0)=""/82, 0x52}, {&(0x7f0000000240)=""/94, 0x5e}, {&(0x7f00000002c0)=""/116, 0x74}, {&(0x7f0000000340)=""/182, 0xb6}], 0x5, &(0x7f0000000480)=""/32, 0x20}}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r3}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff7, 0x42, 0x0, 0x0}}, 0x0) (async) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x20000, 0x0, 0x1, 0x154, 0x0, r3}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff7, 0x42, 0x0, 0x0}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x20, 0x80, 0x88, 0x0, 0xee01}, {0x0, 0x19, 0x1, 0x8}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) mount$tmpfs(0x0, 0x0, 0x0, 0x88, &(0x7f0000000040)=ANY=[]) (async) mount$tmpfs(0x0, 0x0, 0x0, 0x88, &(0x7f0000000040)=ANY=[]) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="00000000000adb7cf668837caeadc4f4eeecd0f7b08c02eccc672c06588092dac8f4d5d623f10ff6d777ff3c99ff607961886750dbbd"], 0x1c}], 0x1, 0x0, 0x0, 0x20000805}, 0x4000080) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_cmd={0x2a, 0x7ffffffe, 0x1000, 0x4a78, 0x4, 0x0, 0xf, 0x4, 0x0, 0x6, 0x3, 0x0, 0x5, 0x0, 0x10, 0xf996, [0x2, 0x400]}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) readv(r7, &(0x7f0000000300)=[{&(0x7f0000000100)=""/50, 0x32}], 0x1) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 47.147222289s ago: executing program 3 (id=358): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x9, 0x7ffffffffffffffd, 0xffffffffffffffff, 0x3ffffd, 0x400000000006, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x6, 0x6, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x80, 0x4, 0x5, 0x0, 0x8, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x84, 0x3, 0x4, '\x00', 0x4, 0x2}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 47.11614971s ago: executing program 3 (id=360): socket(0xa, 0x5, 0x9) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) syz_usb_connect$uac2(0x3, 0x83, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x3, 0x30, 0x81, {0x8, 0xb, 0x0, 0x1, 0x1, 0xff, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x4, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x3, 0x72, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0xf9, 0x6, {0x8, 0x25, 0x1, 0x0, 0x3c, 0x7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x5, {0x8, 0x25, 0x1, 0x4, 0x3e, 0xb1}}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)={'vlan0\x00'}) ftruncate(0xffffffffffffffff, 0x51a9497) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0) setuid(0xee01) r3 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) (async) ioctl(r2, 0xc138fd07, &(0x7f0000003000)="0400000000000000000000003801") (async) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000100)=0x46a0d539, 0x4) 47.057722591s ago: executing program 33 (id=360): socket(0xa, 0x5, 0x9) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) syz_usb_connect$uac2(0x3, 0x83, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x3, 0x30, 0x81, {0x8, 0xb, 0x0, 0x1, 0x1, 0xff, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x4, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x3, 0x72, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0xf9, 0x6, {0x8, 0x25, 0x1, 0x0, 0x3c, 0x7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x0, 0x5, {0x8, 0x25, 0x1, 0x4, 0x3e, 0xb1}}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)={'vlan0\x00'}) ftruncate(0xffffffffffffffff, 0x51a9497) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0) setuid(0xee01) r3 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) (async) ioctl(r2, 0xc138fd07, &(0x7f0000003000)="0400000000000000000000003801") (async) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000100)=0x46a0d539, 0x4) 3.87432758s ago: executing program 2 (id=755): userfaultfd(0x80801) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1c3, 0x2f) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES64=r1], 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000a80)={0x5, 0x40, 0x100, &(0x7f0000000680)=[0x7, 0x9, 0xfffffffffffffff8, 0x7, 0x2, 0x2ed, 0x6434, 0x50d, 0x100000001, 0x9, 0x3, 0x1, 0xe97, 0x881, 0x5, 0x3, 0x86, 0xfffffffffffffff9, 0x2, 0x6, 0x5, 0xff, 0x9, 0x101, 0x8, 0x1, 0x9, 0x3fe0000000000, 0xb88, 0xa, 0x4, 0x3ff, 0x2, 0x9, 0x800, 0x8ac, 0x4, 0x9, 0x2cdf, 0x6, 0x6, 0x2, 0x200, 0x400, 0x7fffffff, 0x7, 0x8000000000000001, 0x8, 0x9ddf5ba, 0x9, 0x7, 0x6, 0x7, 0x4, 0x0, 0x7f, 0x3, 0x6d2, 0x3, 0x8, 0xdc6, 0x9, 0xfffffffffffffffc, 0x3, 0xdae, 0x8, 0x0, 0x101, 0x1ff, 0x8, 0x0, 0x25a, 0x1, 0x5, 0x1ff, 0x6, 0x5, 0x7, 0x6, 0x9, 0x10000, 0x7, 0x9, 0x8, 0x5, 0xcfa9, 0x71f323ee, 0x1000, 0x0, 0x8, 0x7, 0x9, 0x0, 0x6, 0xb9, 0x8, 0xc, 0x7, 0x0, 0x9, 0x4, 0x9, 0x10, 0x6, 0x6, 0x7f, 0x0, 0x3, 0x6, 0x6, 0x1, 0x4d6, 0xa, 0x10000, 0x80, 0x3, 0x800, 0x4, 0x8, 0x7, 0x80000001, 0x2828, 0x7, 0x7ff, 0x3, 0x1, 0x9, 0x7]}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 3.038824952s ago: executing program 5 (id=763): r0 = inotify_init() (async) r1 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040)=0x4, 0x4) (async) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000140)={r1, &(0x7f0000000000)='{^**m\')-\x00', 0x4a00, &(0x7f0000000080)={@align=0x6, {0x0, 0x2, 0x3, 0xe4}}, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4000}) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8e10, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x2, 0x9ad, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x120}}}, &(0x7f0000000240)=0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write$cgroup_devices(r5, 0x0, 0xffdd) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket(0x10, 0x2, 0x0) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x4) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x91c4, 0x8, 0x3, 0x327}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9014, 0x8, 0x0, 0x14c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfc8e, 0x800, 0x2, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc2ba, 0x2, 0x0, 0x39b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a3, 0x2, 0x3, 0xb3}}], 0x4, &(0x7f0000001b00)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x5baa}, 0x0, 0x0, '\x00', {0x0, 0xb2f, 0x0, &(0x7f0000000b00)=@buf_512="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"}}, &(0x7f0000001b80)) syz_ublk_setup_queues(r2, r3, &(0x7f0000000280)={0x0, 0x86a8, 0x1000, 0x1, 0x19a}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbc1a, 0x2000, 0x1, 0x271}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x81ee, 0x20, 0x2, 0x350, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd3e, 0x0, 0x3, 0xb, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc7de, 0x40, 0x0, 0x23c, 0x0, r6}}], 0x4, &(0x7f0000002bc0)={0x2e, 0x4, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x3, 0x5fb, 0x0, &(0x7f0000001bc0)=@buf_512="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"}}, &(0x7f0000002c40)) (async) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x449) (async) r9 = inotify_init1(0x0) (async) r10 = inotify_init() inotify_add_watch(r10, &(0x7f00000003c0)='.\x00', 0x5db) inotify_add_watch(r9, &(0x7f0000000040)='.\x00', 0x40000f9f) 2.994103473s ago: executing program 5 (id=765): symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x23f) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000880), 0x20a02, 0x0) read$FUSE(r0, &(0x7f0000000f40)={0x2020}, 0x2020) write$tun(r0, 0x0, 0x0) setuid(0xee01) socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x2) 2.972801284s ago: executing program 1 (id=766): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{}, {r1, r2+60000000}}, 0x0) timer_delete(r0) r3 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d000905810300020000120904010000020d00000904010102020d00000905820200020000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x11, 0x9, 0x400, 0x14, 0x604, 0x823c, 0xc, 0x8001, 0x8, 0x4, 0xe4, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x54, 0x0, 0x0, 0x80}, {0x6}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x1, 0x5, 0x5, 0x4}, {0x6, 0x9, 0x3, 0x7499}]}) timer_create(0x3, 0x0, &(0x7f0000044000)) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{}, {r1, r2+60000000}}, 0x0) (async) timer_delete(r0) (async) syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d000905810300020000120904010000020d00000904010102020d00000905820200020000000905030240"], 0x0) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x11, 0x9, 0x400, 0x14, 0x604, 0x823c, 0xc, 0x8001, 0x8, 0x4, 0xe4, 0x7}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x54, 0x0, 0x0, 0x80}, {0x6}]}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x1, 0x5, 0x5, 0x4}, {0x6, 0x9, 0x3, 0x7499}]}) (async) 2.923165675s ago: executing program 5 (id=767): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) (async) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x7a86f09a, 0x800) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000140)={0x7, 0x16, 0x6, 0x5, "565272bee3f474b9e2f6967b177963aca8dcafe0b4c1a43c7b765b46f3c93ecd"}) (async, rerun: 32) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) (async, rerun: 32) syz_usb_connect$uac2(0x5, 0xad, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x4068, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0xa3, 0x80, 0x2, {0x8, 0xb, 0x0, 0x0, 0x1, 0x2, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x5, 0xe, 0x86}, [@mixer_unit={0x5, 0x24, 0x4, 0x3, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x80, 0x9, 0xfa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x100, 0x6, 0x1}, @as_header={0x10, 0x24, 0x1, 0x1, 0xae, 0x0, 0x1002, 0x1, 0x3, 0xc}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x81, 0x0, "", '(['}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xe, 0x0, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0xf, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xc, 0xff, 0x1, {0x8, 0x25, 0x1, 0x81, 0xc, 0x1, 0x7}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x2, 0x60, 0x58, 0x20}, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="050043deb1663be4a3ecd9d88a15b4a705fd16cb86e4d629c7f8b58e3cc026a251c155b498e9dc12125ea18d860b8d2f09b1cdc947edbeef078416b409dd3839ae10db272600d9cdee529698148377e183766bb88e7cd528cacfeaaf711d2dafe05530aa6ded8ea24c153b547048453678b9643b00413e100a2d9b24f5eda45ea16f18c3e474c53a2a803258e50d2acc7e5e40169bb3f532e75507da0921794c741cc392ddf349e696b48c262c9d724a35ee733ca726400098d45c0e05602486104cd4"], 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") (async, rerun: 32) dup(0xffffffffffffffff) (rerun: 32) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003420000002cbd7000ffdbdf2502000900080000001c00000000000000050006003c0000000a004e2400000006ff010000000000000000000000000001000000000000000002000100000000000000020c000000c005000500000000000a004e2400000009000000000000000000000000000000000600000000000000320008"], 0x210}, 0x1, 0x7}, 0x0) 2.431027488s ago: executing program 2 (id=770): prlimit64(0x0, 0xb, &(0x7f0000000180)={0x80000001, 0x5}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) tkill(r0, 0x14) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xe, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000180)=0xa4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$TIOCMGET(r5, 0x5415, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0x5, 0x3, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0x8, 0x0, 0x80000, 0xc000, 0x0, 0x0, r7, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={r1, r3, r7}, 0xc) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x9, r1, 0x7ff, 0x3) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) ptrace$cont(0x21, r1, 0x80000001, 0x4) 2.423977237s ago: executing program 4 (id=773): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) statx(r3, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x9400000, 0x0, 0x0, 0x81, 0x7, 0x0, 0x0, 0x0, 0x4}}, 0x50) read$FUSE(r1, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r4}, 0x10) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2.373508429s ago: executing program 2 (id=774): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) read$FUSE(r1, &(0x7f00000031c0)={0x2020}, 0x2020) time(&(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}, 0x1, 0x0, 0x0, 0x1}, 0x4000814) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1e4, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x80}, 0x48044) write(r4, &(0x7f0000000080), 0x0) syz_usb_connect$midi(0x2, 0x31, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000403e13150840000102030109021f00010109100409040000010103000b0905053f"], 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='[{$\x00', 0x0, r2) 2.199043453s ago: executing program 5 (id=775): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1a8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x103002, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) r2 = syz_usb_connect$uac3(0x5, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="200604000000e971ec7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000002240)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f00000017c0)={0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB="40000000000004c7d7c642e4a81919511e10f75ac3b218a4a93261511ed1fc45cdda01b07252bea602a0d2604666b5a572a1fa505ec862d10db3763c61b5153a176f3c10e6ff61aa379d67916375d84e57da83a8edde67fb93a6a358e60dda4e17ddcc3a35b2359cfd1946c53474e317e0c007fdd9d6137e7640e2b540b93eef86e5279e4280f0d0368fd0aa9ce5388eed1ff260ece6b6420046418c66dc5a969c1f0bd38cff923e92e96d647141ffeca9377d6cdedc0fbd6a89497bc29154a78c31274b9147fc6d0fbf122b42b7d4f8e3964401ba85ab3dd5679ce541796ece6d9323aae198468add81359c0d"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, &(0x7f00000001c0)={0x14, 0x0, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x101a82, 0x30) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x806, 0x0, 0x4, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x10000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000000000"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130000032cbd7000fbdbdf25fc000000000009000000000000000001e400000200000000000000000040000000000004000000000a0060803b000000", @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000002003c00000000000000fdfff7ffffffffff50000000000000000000000000000000050000000000000000000000000000000500000000000000030000000000000006000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="592bc32d06d12a", @ANYBLOB="fd53f9b01fc6cd6f6403a84a2b54bcae6bdea1b97eadfa942c454de104e8227dc95a", @ANYRESDEC=r0], 0xb8}, 0x1, 0x0, 0x0, 0x80004}, 0x0) 1.489338312s ago: executing program 4 (id=776): syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x800, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000280)="1441f03303", 0x5}], 0x1) (async) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000280)="1441f03303", 0x5}], 0x1) process_mrelease(r0, 0x0) 1.472193922s ago: executing program 4 (id=777): socket(0x26, 0xd60e8e71293717b2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000001c0)={0x0, 0x1}) 1.413895904s ago: executing program 4 (id=778): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, &(0x7f0000001f80)=""/52, 0x34}, 0xc0000}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)=""/75, 0x4b}], 0x1}, 0xfffffffd}], 0x2, 0x40010112, 0x0) socket$inet(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x5) (async) socket$netlink(0x10, 0x3, 0x5) syz_ublk_setup_io_uring(0x7412, &(0x7f0000003440)={0x0, 0xb732, 0x1, 0x0, 0x3de}, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904008000010100000a24010000000201020c0d2407000005010000000000000c240000e9fffff5ffffffff092403f3ff000005024524e21ff62857324eac9292619046585cc0d5a53ce5f119ee68a82c7085c1afdf2ab123075b03b24da067db094c868bf477a6366fc35777", @ANYRES8=r3, @ANYBLOB="05"], 0x0) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904008000010100000a24010000000201020c0d2407000005010000000000000c240000e9fffff5ffffffff092403f3ff000005024524e21ff62857324eac9292619046585cc0d5a53ce5f119ee68a82c7085c1afdf2ab123075b03b24da067db094c868bf477a6366fc35777", @ANYRES8=r3, @ANYBLOB="05"], 0x0) 1.034128273s ago: executing program 2 (id=779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) (async, rerun: 32) r1 = fcntl$dupfd(r0, 0x406, r0) (rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0xc085) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 1.002672814s ago: executing program 2 (id=780): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x80) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) (async) preadv(r2, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1, 0x2000000e, 0x6) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000500006804c00040067636d28616573290000000000000000000000000000000000000000000000002400000002000000f52330c49a5533037f016be77614432d00519bf28ed9cdc98f1104041d96526f"], 0x64}}, 0x0) 895.133957ms ago: executing program 1 (id=781): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x4000000000000009, 0x7ffffffffffffffd, 0x2a8, 0x3ffffd, 0x400000000006, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x8, 0x6, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000001c0)=@x86={0x80, 0x4, 0x5, 0x0, 0x8, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x84, 0x3, 0x4, '\x00', 0x4, 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)="653a6d795f726561645f6d737231202d12725236bdb1a498e4c59cb27a1671339a254188fb2a8b47b404f1a79012dbca52da81eadc8cb45d0e4e833ca479b79b6342a3b4a9b5173ce58618a56e1feff1f6244756447e17c5e5a6572f05a63ec937b5ddecc77d9cef151bf6bca020274bb65e1ee739a0588a618a79be47d707824b", 0x81) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff1, 0x1, 0x0}, &(0x7f0000000780)=0x40) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 857.054008ms ago: executing program 4 (id=782): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(&(0x7f0000000100), 0x10, 0x1ac902) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x10002, 0x172}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x80000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x4000, 0x2, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa4b5, 0x2, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r12, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 844.884858ms ago: executing program 1 (id=783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$setsig(r4, 0xa, 0x18) fcntl$getownex(r4, 0x10, &(0x7f0000000b80)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x61, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 739.098061ms ago: executing program 2 (id=784): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x20, 0x2, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r0, 0xc038480a, &(0x7f0000000200)={0x2, 0x2, 0x1, 0x3, 0x2, 0xfffffff8, 0xcba, 0x8, 0x0, 0x1, 0x1ff, 0x2, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xbc, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 733.332811ms ago: executing program 1 (id=785): r0 = socket$netlink(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x5, [0x0, 0x2, 0x0, 0xc, 0x5, 0x20000000, 0x0, 0x40000002]}}) 706.892412ms ago: executing program 1 (id=786): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000240)=0xe, 0x4) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r2 = dup(r0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4fe, &(0x7f00000009c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x1000000, 0x0, 0x0, 0x1, 0x3f, r3, &(0x7f0000000240)='\x00j', 0x2, 0x10000000005971}]) write$uinput_user_dev(r2, &(0x7f00000004c0)={'syz1\x00', {0x101, 0x2204, 0xaca0, 0x5}, 0x34, [0x3474, 0x7ff, 0x8a6c, 0xffff8001, 0x1, 0x5, 0xdb, 0x1, 0x5, 0x6, 0x1, 0x3, 0x57e3, 0x8, 0x0, 0x2, 0x7, 0x81, 0x7ff, 0x20, 0x10, 0x4, 0x0, 0x8, 0x3, 0x23, 0x2, 0x0, 0x9, 0x80000000, 0x7, 0x8001, 0x401, 0x80000001, 0x8000, 0xe, 0x8, 0x8000, 0x200, 0x7, 0x9, 0x5, 0xfc, 0xab, 0x8, 0x7ff, 0xa, 0x5, 0x7c, 0xfffffff2, 0xe3b, 0x3ff, 0x4, 0x8, 0x6, 0x6, 0x8, 0xe, 0x8, 0x9, 0x1, 0x4, 0xad, 0x7dd608e3], [0x2e1, 0x1, 0x10000, 0x6, 0x3, 0x401, 0x6, 0x5, 0x8001, 0x3, 0x8, 0x8, 0x7, 0x8001, 0x6, 0x1, 0x89, 0x9, 0xfc7, 0x401, 0x7, 0x400, 0xfff, 0xfffffff9, 0x100, 0x5, 0x5, 0x40000069, 0x9, 0x200, 0xe, 0x6, 0x5, 0x3, 0x9, 0x8, 0xc2, 0x0, 0x1000, 0x2, 0x9, 0x9703, 0x0, 0x7, 0xd15, 0x6, 0x2, 0x9, 0x3ff, 0x4, 0x80000001, 0x0, 0x6, 0x1a22, 0x16, 0x3, 0x9, 0x4, 0x9, 0x8, 0x9, 0x3, 0x8], [0x8, 0x200, 0x4e, 0x7, 0x1, 0xf, 0xcf43, 0x0, 0x2, 0x2, 0x10000, 0x1000, 0x8, 0xfffffffb, 0xb22, 0x7869, 0x70d6, 0xc, 0x400, 0x5b77, 0xf, 0x2, 0x5, 0x1, 0x416, 0xe5bb, 0x8, 0x4, 0x7, 0x66f0cfbf, 0x81, 0x5, 0x8, 0x0, 0x594, 0x0, 0x5, 0x91c3, 0x8, 0x9, 0x14ab, 0x0, 0x9, 0x3, 0x5, 0x7, 0x0, 0x1, 0x4, 0xfffffffa, 0x8, 0x2, 0x40, 0x0, 0xffffffff, 0xfff, 0x9, 0x9, 0x200, 0x97, 0x0, 0x0, 0x40, 0x3], [0xe0, 0x6, 0x0, 0xa1, 0x8, 0x0, 0x101, 0x799f, 0x6, 0xfffffff7, 0x4, 0x200, 0x5446801c, 0x400, 0x9, 0x0, 0x4, 0xc, 0x10, 0x5, 0x7f, 0x3, 0x8, 0xffffffb7, 0x25, 0x9, 0x400, 0xa, 0x3, 0x8, 0x0, 0x12, 0x5, 0x1, 0x4, 0x0, 0x1, 0x3469, 0x4, 0x18c3f243, 0xa, 0x4, 0x49, 0x7fd, 0x4, 0x4d7, 0xff, 0x9, 0xd, 0xfca, 0x9, 0x0, 0xb68a, 0x1, 0x3, 0x5, 0x6, 0x8000, 0x800, 0x2, 0x29d5, 0x4, 0x7, 0x2]}, 0x45c) 651.007263ms ago: executing program 4 (id=787): mkdir(&(0x7f0000000400)='./file0\x00', 0x3f) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x21, 0x6}, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f00000000c0)=0xbfe, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="020f00000f0000000000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000fe800000000000000000f2ffffffffff04001700000000000a"], 0x78}}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x100) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) recvfrom(r4, 0x0, 0x14, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000001340)=""/189, 0xbd}], 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x2, 0xfffffffa, 0x7, 0x81, 0x2400000}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) creat(&(0x7f00000000c0)='./file0/../file0/file0\x00', 0x1) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000280)=0x1, 0x4) syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xa, {0x3, 0xffffffffffffffff, 0xfffffffffffffe, 0x800, 0x0, 0x0, {0x0, 0x3, 0x2, 0x0, 0x0, 0x46, 0x1, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x50000, 0x0, 0x0, 0x40, 0x3}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') ptrace$ARCH_GET_GS(0x1e, r7, &(0x7f0000000240), 0x1004) 608.501094ms ago: executing program 1 (id=788): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007800)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002040)='\x00', 0x1}], 0x1, 0x0, 0x320}}], 0x1, 0x2401c444) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x5e20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109023b0001010bf0010904007d3c0206000000247dc80a03f06c011a00240f01000000000000000000090582020000000400090503020000000000"], &(0x7f0000000640)={0x0, 0x0, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="050f142e2a"]}) 439.110368ms ago: executing program 5 (id=789): mkdir(&(0x7f0000000300)='./bus\x00', 0x63) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_require}]}) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x10040) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 32) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c10000000224effffffff", 0x58}], 0x1) (async, rerun: 64) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x82, 0x0) (rerun: 64) 0s ago: executing program 5 (id=790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000001dc0)=""/4096, 0x1000) lseek(r1, 0xffffffffffffffff, 0x1) (async) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="15cfb39d9ebd4c8776507596a1476786e096879c48b3b772f6eb0d770abf767c5bff55c9a077ea66211acd5e80c18ff2a27e6631d2ec8233ca7e4557c6e0f6e28d230e046b6b6ba889a79b830e7ec9674cecf248faef2cb24e5178040d60678df665f995e5ff4a9de0dc3d55466f4eb4ae4928380e7fcb451420a47c3cdce219"], 0xffdd) (async) sendfile(r0, r0, &(0x7f0000000100)=0xfffffffffffffffa, 0x5fcd) kernel console output (not intermixed with test programs): 3-1: Manufacturer: syz [ 64.289463][ T9] usb 3-1: SerialNumber: syz [ 64.310451][ T31] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 64.331974][ T31] usb 4-1: USB disconnect, device number 25 [ 64.357341][ T359] snd-usb-audio 2-1:0.176: probe with driver snd-usb-audio failed with error -12 [ 64.363355][ T1329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 64.389780][ T359] usb 2-1: USB disconnect, device number 27 [ 64.391049][ T466] udevd[466]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.176/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 64.529994][ T9] usb 3-1: selecting invalid altsetting 0 [ 64.535938][ T9] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 64.542614][ T9] usb 3-1: No valid video chain found. [ 64.553419][ T9] usb 3-1: USB disconnect, device number 24 [ 64.843951][ T359] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 65.019494][ T359] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.030489][ T359] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 65.039855][ T359] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 65.055562][ T359] usb 2-1: string descriptor 0 read error: -22 [ 65.061994][ T359] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.071315][ T359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.083525][ T359] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 65.102501][ T359] cdc_ncm 2-1:1.0: bind() failure [ 65.158168][ T62] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 65.193657][ T1338] fuse: Bad value for 'fd' [ 65.319682][ T359] usb 2-1: USB disconnect, device number 28 [ 65.326048][ T62] usb 4-1: Using ep0 maxpacket: 32 [ 65.341591][ T62] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 65.358977][ T62] usb 4-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40 [ 65.368396][ T62] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.376459][ T62] usb 4-1: Product: syz [ 65.389902][ T62] usb 4-1: Manufacturer: syz [ 65.395470][ T62] usb 4-1: SerialNumber: syz [ 65.472393][ T31] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 65.629357][ T62] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 65.642155][ T62] usb 4-1: USB disconnect, device number 26 [ 65.652898][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.656596][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 65.675907][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.686934][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.697086][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 65.706422][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.732719][ T31] usb 3-1: config 0 descriptor?? [ 65.742061][ T31] hub 3-1:0.0: USB hub found [ 65.958465][ T31] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 65.990431][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 65.990450][ T36] audit: type=1400 audit(64.496:3740): avc: denied { mounton } for pid=1346 comm="syz.1.273" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.994743][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 65.997900][ T1347] binder: Bad value for 'stats' [ 66.046724][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 66.080102][ T31] usb 3-1: USB disconnect, device number 25 [ 66.190180][ T1357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.276'. [ 66.209362][ T1355] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1942630685 (31082090960 ns) > initial count (20590071328 ns). Using initial count to start timer. [ 66.471261][ T1364] fuse: Bad value for 'fd' [ 66.516641][ T770] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.523252][ T36] audit: type=1400 audit(64.985:3741): avc: denied { ioctl } for pid=1367 comm="syz.2.281" path="socket:[12128]" dev="sockfs" ino=12128 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.772698][ T31] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 66.799988][ T36] audit: type=1400 audit(65.243:3742): avc: denied { write } for pid=1372 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 66.837212][ T36] audit: type=1400 audit(65.271:3743): avc: denied { sqpoll } for pid=1375 comm="syz.3.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.897278][ T1382] fuse: Unknown parameter 'g' [ 66.940022][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.962067][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.983951][ T36] audit: type=1400 audit(65.419:3744): avc: denied { lock } for pid=1381 comm="syz.3.286" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 66.989434][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.019983][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.029324][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.042670][ T31] usb 3-1: config 0 descriptor?? [ 67.202829][ T36] audit: type=1400 audit(65.612:3745): avc: denied { bind } for pid=1392 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.351514][ T36] audit: type=1400 audit(65.751:3746): avc: denied { append } for pid=1396 comm="syz.3.292" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.436795][ T1402] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=39451 sclass=netlink_xfrm_socket pid=1402 comm=syz.3.293 [ 67.486445][ T31] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd [ 67.495466][ T31] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 67.511426][ T31] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 67.651461][ T36] audit: type=1400 audit(66.037:3747): avc: denied { ioctl } for pid=1409 comm="syz.3.295" path="socket:[11188]" dev="sockfs" ino=11188 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.767500][ T36] audit: type=1400 audit(66.139:3748): avc: denied { mounton } for pid=1412 comm="syz.3.296" path="/proc/210/task" dev="proc" ino=11196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 67.818014][ T36] audit: type=1400 audit(66.185:3749): avc: denied { accept } for pid=1421 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.573411][ T1437] IPv6: A: Disabled Multicast RS [ 68.667992][ T1439] rust_binder: 1436:1439 no such ref 0 [ 68.744939][ T1154] Bluetooth: hci0: command 0x1003 tx timeout [ 68.744938][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.410610][ T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 69.557739][ T31] usb 2-1: device descriptor read/64, error -71 [ 69.752772][ T62] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 69.817797][ T31] usb 2-1: device descriptor read/64, error -71 [ 70.007171][ T1461] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 70.066901][ T1461] fuse: Unknown parameter 'Fd' [ 70.099552][ T31] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 70.132687][ T45] usb 3-1: USB disconnect, device number 26 [ 70.262137][ T31] usb 2-1: device descriptor read/64, error -71 [ 70.543890][ T31] usb 2-1: device descriptor read/64, error -71 [ 70.578058][ T45] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 70.674030][ T31] usb usb2-port1: attempt power cycle [ 70.771684][ T1471] fuseblk: Bad value for 'rootmode' [ 70.887505][ T1478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.926415][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 70.945501][ T45] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 70.953119][ T45] usb 3-1: can't read configurations, error -71 [ 70.996153][ T1478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.053259][ T31] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 71.087747][ T31] usb 2-1: device descriptor read/8, error -71 [ 71.238549][ T31] usb 2-1: device descriptor read/8, error -71 [ 71.519221][ T31] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 71.554618][ T31] usb 2-1: device descriptor read/8, error -71 [ 71.565558][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 71.565576][ T36] audit: type=1400 audit(69.645:3759): avc: denied { create } for pid=1481 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 71.693730][ T31] usb 2-1: device descriptor read/8, error -71 [ 71.817288][ T31] usb usb2-port1: unable to enumerate USB device [ 72.115349][ T45] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 72.288680][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 72.300755][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 72.311320][ T45] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 72.332005][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.340066][ T45] usb 3-1: Product: syz [ 72.353702][ T45] usb 3-1: Manufacturer: syz [ 72.358532][ T45] usb 3-1: SerialNumber: syz [ 72.606703][ T45] usb 3-1: Unsupported UAC3 BADD profile [ 72.619549][ T45] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 72.640000][ T45] usb 3-1: USB disconnect, device number 28 [ 72.659486][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 73.303035][ T36] audit: type=1400 audit(71.241:3760): avc: denied { mounton } for pid=1499 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 73.411400][ T1499] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.421652][ T1499] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.430560][ T1499] bridge_slave_0: entered allmulticast mode [ 73.437281][ T1499] bridge_slave_0: entered promiscuous mode [ 73.445117][ T1499] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.452446][ T1499] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.460137][ T1499] bridge_slave_1: entered allmulticast mode [ 73.466850][ T1499] bridge_slave_1: entered promiscuous mode [ 73.473212][ T359] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 73.559738][ T1499] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.566866][ T1499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.574259][ T1499] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.581428][ T1499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.615309][ T772] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.632930][ T772] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.660537][ T773] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.667683][ T773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.677247][ T359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.688690][ T359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.701478][ T772] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.708384][ T359] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.708679][ T772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.728018][ T359] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.739790][ T773] bridge_slave_1: left allmulticast mode [ 73.745553][ T773] bridge_slave_1: left promiscuous mode [ 73.749921][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.751249][ T773] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.770320][ T359] usb 3-1: config 0 descriptor?? [ 73.771410][ T773] bridge_slave_0: left allmulticast mode [ 73.785572][ T773] bridge_slave_0: left promiscuous mode [ 73.791357][ T773] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.926760][ T1499] veth0_vlan: entered promiscuous mode [ 73.955664][ T773] tipc: Left network mode [ 73.957056][ T1499] veth1_macvtap: entered promiscuous mode [ 73.971217][ T773] veth1_macvtap: left promiscuous mode [ 73.976921][ T773] veth0_vlan: left promiscuous mode [ 74.072841][ T36] audit: type=1400 audit(71.952:3761): avc: denied { write } for pid=1503 comm="syz.3.320" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 74.095729][ T1504] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(2.0.1), cmd(3) [ 74.138938][ T36] audit: type=1400 audit(72.007:3762): avc: denied { mounton } for pid=1499 comm="syz-executor" path="/root/syzkaller.OXvqlz/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.199035][ T1504] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 74.216769][ T1510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.226950][ T359] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 74.236725][ T359] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 74.249522][ T1510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.332748][ T36] audit: type=1400 audit(72.192:3763): avc: denied { bind } for pid=1513 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.374536][ T959] usb 3-1: USB disconnect, device number 29 [ 74.384360][ T36] audit: type=1400 audit(72.192:3764): avc: denied { name_bind } for pid=1513 comm="syz.4.322" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 74.434498][ T36] audit: type=1400 audit(72.192:3765): avc: denied { node_bind } for pid=1513 comm="syz.4.322" saddr=172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 74.577344][ T637] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.900636][ T959] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 74.976541][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.063062][ T959] usb 3-1: Using ep0 maxpacket: 16 [ 75.071128][ T959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 75.083053][ T959] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 75.098598][ T959] usb 3-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 75.107734][ T959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.116345][ T959] usb 3-1: config 0 descriptor?? [ 75.138994][ T45] usb 5-1: device descriptor read/64, error -71 [ 75.399109][ T45] usb 5-1: device descriptor read/64, error -71 [ 75.561064][ T959] wacom 0003:056A:005B.0011: unknown main item tag 0x7 [ 75.568118][ T959] wacom 0003:056A:005B.0011: unknown main item tag 0x0 [ 75.575294][ T959] wacom 0003:056A:005B.0011: unknown main item tag 0x1 [ 75.582212][ T959] wacom 0003:056A:005B.0011: unknown main item tag 0xd [ 75.590069][ T959] wacom 0003:056A:005B.0011: hidraw0: USB HID vc3.3a Device [HID 056a:005b] on usb-dummy_hcd.2-1/input0 [ 75.659167][ T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.779269][ T62] usb 3-1: USB disconnect, device number 30 [ 75.800075][ T45] usb 5-1: device descriptor read/64, error -71 [ 76.070994][ T45] usb 5-1: device descriptor read/64, error -71 [ 76.125454][ T359] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 76.190399][ T45] usb usb5-port1: attempt power cycle [ 76.298572][ T359] usb 2-1: Using ep0 maxpacket: 8 [ 76.304970][ T359] usb 2-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 76.315499][ T359] usb 2-1: config 1 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 76.328685][ T359] usb 2-1: config 1 interface 0 has no altsetting 0 [ 76.342808][ T359] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.349293][ T36] audit: type=1400 audit(74.056:3766): avc: denied { mounton } for pid=1539 comm="syz.2.331" path="/80/file0" dev="tmpfs" ino=457 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.351917][ T359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.381940][ T359] usb 2-1: Product: َ勂䄁㎗ㅠ﵃뫶蒶㴲礿氄募ꙍ涄꤭ɡᐾ꧸踚ꬪ帖瀂㤻毑ᚘㅳ樕a䎒⋾驷꟨?ᥱﰀ潟쭿睃楃㚷ᓗ炤珽뻘᧧輵쑯Ⓓ珑陼俓ﳦᑋ㬖彼溿꣗엶໤㬙㒫튘夠覘Ẃﯰڷ쁔겱爩ꔘ흺⾙孧쯉譇䃏씙ᔕ魕ꎯ枝캐뱩펚 [ 76.410952][ T359] usb 2-1: Manufacturer: 恌 [ 76.415665][ T359] usb 2-1: SerialNumber: с [ 76.558831][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.581421][ T45] usb 5-1: device descriptor read/8, error -71 [ 76.602043][ T310] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 76.638998][ T359] usb 2-1: bad CDC descriptors [ 76.722590][ T45] usb 5-1: device descriptor read/8, error -71 [ 76.766178][ T310] usb 3-1: unable to get BOS descriptor or descriptor too short [ 76.774615][ T310] usb 3-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 76.784995][ T310] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.795627][ T310] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 76.804736][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.812889][ T1440] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.812894][ T1153] Bluetooth: hci0: command 0x1003 tx timeout [ 76.825286][ T310] usb 3-1: Product: syz [ 76.829658][ T310] usb 3-1: Manufacturer: syz [ 76.834418][ T310] usb 3-1: SerialNumber: syz [ 76.929473][ T62] usb 2-1: USB disconnect, device number 33 [ 76.981376][ T45] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.004056][ T45] usb 5-1: device descriptor read/8, error -71 [ 77.062728][ T310] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 77.073072][ T310] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 77.083017][ T310] usb 3-1: USB disconnect, device number 31 [ 77.104022][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.145160][ T45] usb 5-1: device descriptor read/8, error -71 [ 77.263314][ T45] usb usb5-port1: unable to enumerate USB device [ 77.413221][ T36] audit: type=1400 audit(75.034:3767): avc: denied { connect } for pid=1541 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 77.432474][ T36] audit: type=1400 audit(75.034:3768): avc: denied { execute } for pid=1541 comm="syz.3.332" name="file0" dev="tmpfs" ino=486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.454515][ T36] audit: type=1400 audit(75.034:3769): avc: denied { execute_no_trans } for pid=1541 comm="syz.3.332" path="/84/file0" dev="tmpfs" ino=486 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.477594][ T36] audit: type=1400 audit(75.061:3770): avc: denied { create } for pid=1543 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 77.688088][ T36] audit: type=1400 audit(75.292:3771): avc: denied { create } for pid=1553 comm="syz.2.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 77.707356][ T36] audit: type=1400 audit(75.292:3772): avc: denied { write } for pid=1553 comm="syz.2.336" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 77.736092][ T1554] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 77.746567][ T36] audit: type=1400 audit(75.292:3773): avc: denied { open } for pid=1553 comm="syz.2.336" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 77.750850][ T45] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 77.924251][ T45] usb 2-1: device descriptor read/64, error -71 [ 78.002312][ T1568] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.011451][ T1568] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.195360][ T45] usb 2-1: device descriptor read/64, error -71 [ 78.227676][ T359] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 78.392609][ T359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.403772][ T359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.413666][ T359] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 78.422921][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.431590][ T359] usb 3-1: config 0 descriptor?? [ 78.436641][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 78.455331][ T45] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 78.596180][ T45] usb 2-1: device descriptor read/64, error -71 [ 78.608331][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.619349][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.629323][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.642492][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.651657][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.660371][ T10] usb 5-1: config 0 descriptor?? [ 78.856290][ T45] usb 2-1: device descriptor read/64, error -71 [ 78.884673][ T359] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 78.892695][ T359] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 78.900872][ T359] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 78.908474][ T359] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 78.916025][ T359] playstation 0003:054C:0DF2.0012: unknown main item tag 0x0 [ 78.924440][ T359] playstation 0003:054C:0DF2.0012: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 78.975907][ T45] usb usb2-port1: attempt power cycle [ 79.101620][ T359] playstation 0003:054C:0DF2.0012: Failed to retrieve feature with reportID 9: -71 [ 79.111153][ T359] playstation 0003:054C:0DF2.0012: Failed to retrieve DualSense pairing info: -71 [ 79.120614][ T359] playstation 0003:054C:0DF2.0012: Failed to get MAC address from DualSense [ 79.129459][ T359] playstation 0003:054C:0DF2.0012: Failed to create dualsense. [ 79.138268][ T359] playstation 0003:054C:0DF2.0012: probe with driver playstation failed with error -71 [ 79.150035][ T359] usb 3-1: USB disconnect, device number 32 [ 79.354812][ T45] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 79.377540][ T45] usb 2-1: device descriptor read/8, error -71 [ 79.518451][ T45] usb 2-1: device descriptor read/8, error -71 [ 79.788319][ T45] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 79.829690][ T45] usb 2-1: device descriptor read/8, error -71 [ 79.950864][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 79.964978][ T1595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.974244][ T1595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.982949][ T45] usb 2-1: device descriptor read/8, error -71 [ 80.011281][ T36] audit: type=1400 audit(77.433:3774): avc: denied { write } for pid=1594 comm="syz.4.350" name="sockstat" dev="proc" ino=4026532854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 80.102737][ T45] usb usb2-port1: unable to enumerate USB device [ 80.113623][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 80.120841][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 80.131113][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 80.140526][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.148626][ T9] usb 3-1: Product: syz [ 80.152862][ T9] usb 3-1: Manufacturer: syz [ 80.157520][ T9] usb 3-1: SerialNumber: syz [ 80.384343][ T9] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 80.391382][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 80.398435][ T9] usb 3-1: unit 1 not found! [ 80.407309][ T9] usb 3-1: USB disconnect, device number 33 [ 80.417221][ T906] udevd[906]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.778953][ T36] audit: type=1400 audit(78.143:3775): avc: denied { mounton } for pid=1609 comm="syz.3.355" path="/file0" dev="ramfs" ino=14148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 80.812698][ T36] audit: type=1400 audit(78.171:3776): avc: denied { write } for pid=1611 comm="syz.4.356" name="/" dev="incremental-fs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.967073][ T1623] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 80.981176][ T772] bridge_slave_1: left allmulticast mode [ 80.986962][ T772] bridge_slave_1: left promiscuous mode [ 80.994484][ T772] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.006940][ T772] @0: left allmulticast mode [ 81.011752][ T772] @0: left promiscuous mode [ 81.017577][ T772] bridge0: port 1(c@0) entered disabled state [ 81.146052][ T772] veth1_macvtap: left promiscuous mode [ 81.151618][ T772] veth0_vlan: left promiscuous mode [ 81.197235][ T45] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 81.270648][ T1627] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.278146][ T1627] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.286140][ T1627] bridge_slave_0: entered allmulticast mode [ 81.292617][ T1627] bridge_slave_0: entered promiscuous mode [ 81.299648][ T1627] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.306916][ T1627] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.314019][ T1627] bridge_slave_1: entered allmulticast mode [ 81.321217][ T1627] bridge_slave_1: entered promiscuous mode [ 81.359748][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 81.371680][ T45] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 81.381421][ T45] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 81.391811][ T45] usb 2-1: config 179 has no interface number 0 [ 81.417326][ T45] usb 2-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 81.434968][ T1627] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.442082][ T1627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.449524][ T1627] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.456880][ T1627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.464421][ T45] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 81.474709][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.537617][ T773] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.554462][ T773] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.568882][ T768] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.576095][ T768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.588612][ T773] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.595724][ T773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.648570][ T1627] veth0_vlan: entered promiscuous mode [ 81.663129][ T1627] veth1_macvtap: entered promiscuous mode [ 81.704716][ T1608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.732132][ T1608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.752672][ T359] usb 2-1: USB disconnect, device number 38 [ 81.979673][ T1705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.989786][ T1705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.107638][ T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 82.271561][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.282573][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.292433][ T45] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 82.302187][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.317882][ T45] usb 6-1: config 0 descriptor?? [ 82.646565][ T1726] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2961764976 (5923529952 ns) > initial count (2430913814 ns). Using initial count to start timer. [ 82.766283][ T45] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 82.773321][ T45] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 82.780799][ T45] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 82.787645][ T45] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 82.794885][ T45] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 82.803321][ T45] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 82.810138][ T45] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0 [ 82.817880][ T45] pyra 0003:1E7D:2CF6.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 83.021359][ T1739] overlayfs: missing 'lowerdir' [ 83.027316][ T1739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.036103][ T1739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.417384][ T45] pyra 0003:1E7D:2CF6.0013: couldn't init struct pyra_device [ 83.425573][ T45] pyra 0003:1E7D:2CF6.0013: couldn't install mouse [ 83.433610][ T45] pyra 0003:1E7D:2CF6.0013: probe with driver pyra failed with error -71 [ 83.443799][ T45] usb 6-1: USB disconnect, device number 2 [ 83.626725][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 83.626751][ T36] audit: type=1400 audit(80.773:3786): avc: denied { lock } for pid=1743 comm="syz.4.381" path="socket:[15113]" dev="sockfs" ino=15113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 83.702716][ T1753] kvm: kvm [1752]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xeb7 [ 83.892628][ T1779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 83.979867][ T36] audit: type=1400 audit(81.096:3787): avc: denied { bind } for pid=1781 comm="syz.5.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.999494][ T1784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.008416][ T1784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.043438][ T1784] netlink: 32 bytes leftover after parsing attributes in process `syz.4.392'. [ 84.225108][ T36] audit: type=1400 audit(81.327:3788): avc: denied { append } for pid=1791 comm="syz.5.394" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.247446][ T36] audit: type=1400 audit(81.345:3789): avc: denied { create } for pid=1791 comm="syz.5.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 84.463617][ T1796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.472866][ T1796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.481093][ T1796] tmpfs: Bad value for 'gid' [ 84.485727][ T1796] tmpfs: Bad value for 'gid' [ 84.524992][ T10] usbhid 5-1:0.0: can't add hid device: -32 [ 84.531005][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 84.608146][ T36] audit: type=1400 audit(81.677:3790): avc: denied { bind } for pid=1797 comm="syz.2.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.609084][ T1798] program syz.2.396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.730339][ T959] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 84.869177][ T1816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 84.878826][ T1816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.401'. [ 84.888312][ T1816] netlink: 40 bytes leftover after parsing attributes in process `syz.1.401'. [ 84.893988][ T959] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.913664][ T959] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 84.932436][ T959] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 84.955516][ T959] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 84.965017][ T959] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 84.973280][ T959] usb 6-1: Manufacturer: syz [ 84.985815][ T1795] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 85.071603][ T1825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 85.211453][ T959] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 85.219593][ T959] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input9 [ 85.233427][ T959] usb 6-1: USB disconnect, device number 3 [ 85.239339][ C1] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 85.293871][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 85.468397][ T9] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 85.476563][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 85.486849][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 85.495280][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 85.504485][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 85.512843][ T9] usb 3-1: Product: syz [ 85.517113][ T9] usb 3-1: Manufacturer: syz [ 85.521790][ T9] usb 3-1: SerialNumber: syz [ 85.527037][ T9] usb 3-1: config 0 descriptor?? [ 85.533144][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 85.539174][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 85.546785][ T9] usb 3-1: selecting invalid altsetting 0 [ 85.554089][ T31] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 85.727390][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 85.733971][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 85.742632][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.753061][ T31] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 85.756571][ T1823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.764086][ T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 8 [ 85.782771][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 85.788138][ T1823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.805929][ T31] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 85.815533][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.823723][ T31] usb 2-1: Product: syz [ 85.829367][ T31] usb 2-1: Manufacturer: syz [ 85.834287][ T31] usb 2-1: SerialNumber: syz [ 85.840461][ T1830] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 85.863783][ T1823] kvm: kvm [1822]: vcpu0, guest rIP: 0x913e Unhandled WRMSR(0x11e) = 0xbe702111 [ 86.111764][ T31] usb 2-1: MIDIStreaming interface descriptor not found [ 86.121805][ T31] usb 2-1: USB disconnect, device number 39 [ 86.132474][ T906] udevd[906]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 86.161048][ T9] usb 3-1: USB disconnect, device number 34 [ 86.598288][ T36] audit: type=1400 audit(83.513:3791): avc: denied { connect } for pid=1839 comm="syz.2.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.796893][ T1855] netlink: 164 bytes leftover after parsing attributes in process `syz.1.416'. [ 86.866203][ T1153] Bluetooth: hci0: command 0x1003 tx timeout [ 86.872311][ T1440] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 86.912168][ T1864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.930648][ T1864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.082147][ T959] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 87.244680][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 87.262280][ T36] audit: type=1400 audit(84.122:3792): avc: denied { read } for pid=1873 comm="syz.2.423" name="set_event" dev="tracefs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 87.285030][ T1874] netlink: 'syz.2.423': attribute type 12 has an invalid length. [ 87.430174][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.441712][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.451508][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.464821][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.474347][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.483089][ T9] usb 6-1: config 0 descriptor?? [ 87.540214][ T1882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.549103][ T1882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.560173][ T1882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.568978][ T1882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.944305][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.952651][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.960393][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.967918][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.975646][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.983531][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.991031][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.998821][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 88.006801][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 88.014250][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 88.021674][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 88.029131][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 88.036929][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 88.044711][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 88.052214][ T9] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 88.060031][ T9] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 88.069297][ T9] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 88.209202][ T36] audit: type=1400 audit(84.999:3793): avc: denied { create } for pid=1892 comm="syz.4.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 88.239517][ T1862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.252794][ T1862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.293989][ T1902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.303363][ T1902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.313090][ T1902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.322204][ T1902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.331196][ T1902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.340132][ T1902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.486303][ T1921] syzkaller1: entered promiscuous mode [ 88.492212][ T1921] syzkaller1: entered allmulticast mode [ 88.596673][ T1925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.606034][ T1925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.615230][ T1925] netlink: 'syz.4.438': attribute type 4 has an invalid length. [ 88.850407][ T36] audit: type=1400 audit(85.599:3794): avc: denied { create } for pid=1931 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.870950][ T36] audit: type=1400 audit(85.617:3795): avc: denied { write } for pid=1931 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.162969][ T45] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 89.204921][ T1938] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 89.212802][ T1938] netlink: 'syz.4.444': attribute type 2 has an invalid length. [ 89.286745][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 89.286784][ T36] audit: type=1400 audit(85.995:3797): avc: denied { create } for pid=1943 comm="syz.4.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 89.314313][ T45] usb 3-1: device descriptor read/64, error -71 [ 89.346230][ T1949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.356226][ T1949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.509787][ T31] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 89.585632][ T45] usb 3-1: device descriptor read/64, error -71 [ 89.845731][ T45] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 89.993121][ T45] usb 3-1: device descriptor read/64, error -71 [ 90.142615][ T959] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.149569][ T1964] random: crng reseeded on system resumption [ 90.158276][ T36] audit: type=1400 audit(86.798:3798): avc: denied { write } for pid=1963 comm="syz.4.452" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.192025][ T959] usb 2-1: too many configurations: 58, using maximum allowed: 8 [ 90.214229][ T959] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 90.221940][ T959] usb 2-1: can't read configurations, error -71 [ 90.229286][ T36] audit: type=1400 audit(86.835:3799): avc: denied { ioctl } for pid=1963 comm="syz.4.452" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 90.268516][ T45] usb 3-1: device descriptor read/64, error -71 [ 90.276187][ T36] audit: type=1400 audit(86.909:3800): avc: denied { execmem } for pid=1971 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 90.387712][ T45] usb usb3-port1: attempt power cycle [ 90.454551][ T36] audit: type=1400 audit(87.075:3801): avc: denied { write } for pid=1985 comm="syz.1.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.582510][ T36] audit: type=1400 audit(87.186:3802): avc: denied { accept } for pid=2004 comm="syz.1.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.669453][ T31] usb 6-1: device descriptor read/64, error -71 [ 90.777796][ T45] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 90.789017][ T31] usb 6-1: device reset changed ep0 maxpacket size! [ 90.795891][ T310] usb 6-1: USB disconnect, device number 4 [ 90.803042][ T45] usb 3-1: device descriptor read/8, error -71 [ 90.941474][ T45] usb 3-1: device descriptor read/8, error -71 [ 90.951190][ T310] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 91.113734][ T310] usb 6-1: Using ep0 maxpacket: 16 [ 91.120529][ T310] usb 6-1: unable to get BOS descriptor or descriptor too short [ 91.128951][ T310] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 91.141543][ T310] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 91.150635][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.158755][ T310] usb 6-1: Product: syz [ 91.162935][ T310] usb 6-1: Manufacturer: syz [ 91.167609][ T310] usb 6-1: SerialNumber: syz [ 91.172237][ T959] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 91.200439][ T45] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 91.223156][ T45] usb 3-1: device descriptor read/8, error -71 [ 91.312719][ T2014] netlink: 'syz.4.467': attribute type 27 has an invalid length. [ 91.321921][ T2014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.330406][ T2014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.341312][ T959] usb 2-1: Using ep0 maxpacket: 16 [ 91.347701][ T959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.358841][ T959] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 91.371724][ T959] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 91.381581][ T959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.390077][ T45] usb 3-1: device descriptor read/8, error -71 [ 91.396892][ T959] usb 2-1: config 0 descriptor?? [ 91.399815][ T1981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.411369][ T1981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.426714][ T2019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.441348][ T2019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.464918][ T310] usb 6-1: cannot find UAC_HEADER [ 91.474093][ T310] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 91.485972][ T310] usb 6-1: USB disconnect, device number 5 [ 91.494130][ T312] udevd[312]: setting owner of /dev/bus/usb/006/005 to uid=0, gid=0 failed: No such file or directory [ 91.509382][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.514965][ T45] usb usb3-port1: unable to enumerate USB device [ 91.534281][ T2022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.543432][ T2022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.847223][ T959] HID 045e:07da: Invalid code 65791 type 1 [ 91.855131][ T959] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0015/input/input11 [ 91.950885][ T959] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 92.113822][ T2034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.122469][ T2034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.182571][ T2036] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.191782][ T2036] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.305889][ T10] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 92.469682][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.479953][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.490956][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.500710][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 92.509820][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.518727][ T10] usb 6-1: config 0 descriptor?? [ 92.522569][ T959] usb 2-1: USB disconnect, device number 41 [ 92.587667][ T359] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 92.720127][ T2044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.728909][ T2044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.738040][ T2044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.747146][ T2044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.751745][ T359] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.764754][ T359] usb 3-1: not running at top speed; connect to a high speed hub [ 92.773408][ T359] usb 3-1: config 9 has an invalid interface number: 219 but max is 0 [ 92.781686][ T359] usb 3-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 92.791929][ T359] usb 3-1: config 9 has no interface number 0 [ 92.798068][ T359] usb 3-1: config 9 interface 219 has no altsetting 0 [ 92.806417][ T359] usb 3-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=2b.ba [ 92.815639][ T359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.823703][ T359] usb 3-1: Product: syz [ 92.827953][ T359] usb 3-1: Manufacturer: syz [ 92.832582][ T359] usb 3-1: SerialNumber: syz [ 93.021218][ T10] hid-picolcd 0003:04D8:F002.0016: No report with id 0xf3 found [ 93.028962][ T10] hid-picolcd 0003:04D8:F002.0016: No report with id 0xf4 found [ 93.119147][ T359] usb 3-1: USB disconnect, device number 39 [ 93.178868][ T2032] input: syz1 as /devices/virtual/input/input12 [ 93.187000][ T10] usb 6-1: USB disconnect, device number 6 [ 93.357169][ T310] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 93.402427][ T2050] netlink: 'syz.4.479': attribute type 10 has an invalid length. [ 93.498063][ T310] usb 2-1: device descriptor read/64, error -71 [ 93.672350][ T36] audit: type=1400 audit(90.046:3803): avc: denied { connect } for pid=2054 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.706794][ T2058] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 93.722200][ T2058] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 93.758133][ T310] usb 2-1: device descriptor read/64, error -71 [ 93.814569][ T2064] Invalid argument reading file caps for ./file0 [ 94.007423][ T359] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 94.039920][ T310] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 94.172104][ T2060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.180968][ T2060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.202506][ T310] usb 2-1: device descriptor read/64, error -71 [ 94.300086][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 94.440950][ T10] usb 3-1: device descriptor read/64, error -71 [ 94.465723][ T310] usb 2-1: device descriptor read/64, error -71 [ 94.489847][ T2093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.498518][ T2093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.575782][ T2093] veth1_to_bond: entered promiscuous mode [ 94.582076][ T310] usb usb2-port1: attempt power cycle [ 94.587683][ T2093] netlink: 148 bytes leftover after parsing attributes in process `syz.4.492'. [ 94.598146][ T2093] veth1_to_bond (unregistering): left promiscuous mode [ 94.701075][ T10] usb 3-1: device descriptor read/64, error -71 [ 94.737725][ T359] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 94.750588][ T359] usb 6-1: can't read configurations, error -71 [ 94.754183][ T2095] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.766907][ T2095] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.855172][ T2098] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.855448][ T2097] rust_binder: 2096:2097 got transaction to invalid handle 1 [ 94.869490][ T2097] rust_binder: 2096:2097 transaction call to 0:0 failed ENOENT, code 0 size 112-24 [ 94.882130][ T959] rust_binder: 2096: undelivered TRANSACTION_ERROR: 29201 [ 94.961140][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 94.972824][ T310] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 94.995641][ T310] usb 2-1: device descriptor read/8, error -71 [ 95.102044][ T10] usb 3-1: device descriptor read/64, error -71 [ 95.135810][ T310] usb 2-1: device descriptor read/8, error -71 [ 95.228195][ T36] audit: type=1400 audit(91.476:3804): avc: denied { call } for pid=2105 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 95.228327][ T2106] rust_binder: 2105:2106 error while translating object: EBADF [ 95.246707][ T36] audit: type=1400 audit(91.476:3805): avc: denied { transfer } for pid=2105 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 95.254746][ T2106] rust_binder: Failure in copy_transaction_data: EBADF [ 95.273228][ T2106] rust_binder: 2105:2106 transaction call to 2105:0 failed EBADF, code 0 size 72-24 [ 95.295084][ T363] rust_binder: 2105: undelivered TRANSACTION_ERROR: 29201 [ 95.329909][ T2108] netlink: 'syz.4.498': attribute type 6 has an invalid length. [ 95.338165][ T36] audit: type=1400 audit(91.578:3806): avc: denied { accept } for pid=2107 comm="syz.4.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 95.362152][ T10] usb 3-1: device descriptor read/64, error -71 [ 95.374893][ T36] audit: type=1400 audit(91.615:3807): avc: denied { ioctl } for pid=2110 comm="syz.4.499" path="socket:[18352]" dev="sockfs" ino=18352 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.384963][ T2111] syzkaller0: entered promiscuous mode [ 95.400257][ T310] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 95.405806][ T2111] syzkaller0: entered allmulticast mode [ 95.425095][ T36] audit: type=1400 audit(91.652:3808): avc: denied { getopt } for pid=2110 comm="syz.4.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 95.445041][ T310] usb 2-1: device descriptor read/8, error -71 [ 95.448865][ T359] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 95.481446][ T10] usb usb3-port1: attempt power cycle [ 95.591107][ T310] usb 2-1: device descriptor read/8, error -71 [ 95.610182][ T2120] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.619415][ T2120] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.628323][ T359] usb 6-1: Using ep0 maxpacket: 8 [ 95.635217][ T359] usb 6-1: unable to get BOS descriptor or descriptor too short [ 95.646011][ T359] usb 6-1: string descriptor 0 read error: -22 [ 95.652308][ T359] usb 6-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 95.661408][ T359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.673928][ T359] usb 6-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 95.682443][ T359] usb 6-1: 1:1 : sample bitwidth 252 in over sample bytes 4 [ 95.730747][ T310] usb usb2-port1: unable to enumerate USB device [ 95.791601][ T2128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.800393][ T2128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.849888][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 95.873535][ T10] usb 3-1: device descriptor read/8, error -71 [ 95.895015][ T359] usb 6-1: failed to enable PITCH for EP 0x1 [ 95.907969][ T359] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 95.932168][ T359] usb 6-1: USB disconnect, device number 8 [ 95.948315][ T2140] netlink: 25 bytes leftover after parsing attributes in process `syz.5.507'. [ 96.013507][ T10] usb 3-1: device descriptor read/8, error -71 [ 96.061195][ T2144] overlayfs: failed to resolve './file1': -2 [ 96.078966][ T36] audit: type=1326 audit(92.261:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2145 comm="syz.5.509" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef54b9e0d9 code=0x0 [ 96.127609][ T2150] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.137451][ T2150] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.220013][ T2156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.228544][ T2156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.237725][ T36] audit: type=1400 audit(92.408:3810): avc: denied { connect } for pid=2155 comm="syz.4.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 96.257861][ T2156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.266654][ T2156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.274559][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 96.295358][ T10] usb 3-1: device descriptor read/8, error -71 [ 96.361618][ T36] audit: type=1400 audit(92.528:3811): avc: denied { setopt } for pid=2158 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 96.394179][ T2163] tipc: Started in network mode [ 96.399119][ T2163] tipc: Node identity 7f000001, cluster identity 4711 [ 96.406257][ T2163] tipc: Enabling of bearer rejected, failed to enable media [ 96.433542][ T2165] WARNING! power/level is deprecated; use power/control instead [ 96.436144][ T10] usb 3-1: device descriptor read/8, error -71 [ 96.565263][ T10] usb usb3-port1: unable to enumerate USB device [ 97.681429][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 97.724774][ T359] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 97.844005][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 97.850416][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.860998][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.871884][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.881110][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.889148][ T359] usb 3-1: Using ep0 maxpacket: 32 [ 97.894341][ T10] usb 2-1: Product: syz [ 97.898824][ T10] usb 2-1: Manufacturer: syz [ 97.903533][ T10] usb 2-1: SerialNumber: syz [ 97.908684][ T359] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 97.922189][ T359] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 97.931348][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.941008][ T359] usb 3-1: config 0 descriptor?? [ 97.952640][ T359] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 98.157853][ T10] usb 2-1: 0:2 : does not exist [ 98.165663][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 98.169619][ T310] usb 3-1: USB disconnect, device number 44 [ 98.177303][ T10] usb 2-1: USB disconnect, device number 46 [ 98.188163][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 98.646014][ T359] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 98.724966][ T2174] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.734208][ T2174] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.807727][ T2176] netlink: 'syz.1.521': attribute type 27 has an invalid length. [ 98.815804][ T359] usb 3-1: Using ep0 maxpacket: 16 [ 98.827825][ T359] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 98.840524][ T359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.855614][ T359] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 98.869402][ T359] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 98.878544][ T359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.887387][ T359] usb 3-1: config 0 descriptor?? [ 99.112009][ T310] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 99.285414][ T310] usb 2-1: Using ep0 maxpacket: 16 [ 99.291946][ T310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.303607][ T310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 99.316941][ T310] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 99.326061][ T310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.335068][ T310] usb 2-1: config 0 descriptor?? [ 99.335332][ T2170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.349358][ T2170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.370765][ T359] nintendo 0003:057E:2019.0017: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 99.437152][ T359] nintendo 0003:057E:2019.0017: Failed to get joycon info; ret=-38 [ 99.448732][ T359] nintendo 0003:057E:2019.0017: Failed to retrieve controller info; ret=-38 [ 99.457805][ T359] nintendo 0003:057E:2019.0017: Failed to initialize controller; ret=-38 [ 99.458041][ T36] audit: type=1400 audit(95.379:3812): avc: denied { checkpoint_restore } for pid=2192 comm="syz.5.525" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.478256][ T359] nintendo 0003:057E:2019.0017: probe - fail = -38 [ 99.496152][ T359] nintendo 0003:057E:2019.0017: probe with driver nintendo failed with error -38 [ 99.547388][ T2199] netlink: 'syz.4.527': attribute type 58 has an invalid length. [ 99.673020][ T2209] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.682786][ T2209] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.757647][ T2211] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.766804][ T2211] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.775667][ T2211] FAULT_INJECTION: forcing a failure. [ 99.775667][ T2211] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.779252][ T310] microsoft 0003:045E:07DA.0018: item fetching failed at offset 31/34 [ 99.788754][ T2211] CPU: 0 UID: 0 PID: 2211 Comm: syz.5.531 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 99.788787][ T2211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.788797][ T2211] Call Trace: [ 99.788804][ T2211] [ 99.788812][ T2211] __dump_stack+0x21/0x30 [ 99.788842][ T2211] dump_stack_lvl+0x140/0x1c0 [ 99.788865][ T2211] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.788889][ T2211] ? check_stack_object+0x138/0x150 [ 99.788908][ T2211] dump_stack+0x19/0x20 [ 99.788930][ T2211] should_fail_ex+0x3c2/0x510 [ 99.788951][ T2211] should_fail+0xf/0x20 [ 99.788966][ T2211] should_fail_usercopy+0x1e/0x30 [ 99.788979][ T2211] _copy_to_user+0x24/0xa0 [ 99.789000][ T2211] simple_read_from_buffer+0xed/0x160 [ 99.789024][ T2211] proc_fail_nth_read+0x1aa/0x220 [ 99.789049][ T2211] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 99.789073][ T2211] ? bpf_lsm_file_permission+0xd/0x20 [ 99.789095][ T2211] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 99.789118][ T2211] vfs_read+0x288/0xc70 [ 99.789137][ T2211] ? __cfi_vfs_read+0x10/0x10 [ 99.789163][ T2211] ? __kasan_check_write+0x18/0x20 [ 99.789181][ T2211] ? mutex_lock+0x97/0x1d0 [ 99.789204][ T2211] ? __cfi_mutex_lock+0x10/0x10 [ 99.789229][ T2211] ksys_read+0x145/0x260 [ 99.789247][ T2211] ? __cfi_ksys_read+0x10/0x10 [ 99.789265][ T2211] ? __kasan_check_read+0x15/0x20 [ 99.789283][ T2211] __x64_sys_read+0x7f/0x90 [ 99.789301][ T2211] x64_sys_call+0x2638/0x2ee0 [ 99.789318][ T2211] do_syscall_64+0x57/0xf0 [ 99.789337][ T2211] ? clear_bhb_loop+0x50/0xa0 [ 99.789361][ T2211] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.789383][ T2211] RIP: 0033:0x7fef54b5e90e [ 99.789400][ T2211] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 99.789415][ T2211] RSP: 002b:00007fef55990fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.789436][ T2211] RAX: ffffffffffffffda RBX: 00007fef559916c0 RCX: 00007fef54b5e90e [ 99.789450][ T2211] RDX: 000000000000000f RSI: 00007fef559910a0 RDI: 0000000000000006 [ 99.789463][ T2211] RBP: 00007fef55991090 R08: 0000000000000000 R09: 0000000000000000 [ 99.789475][ T2211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.789487][ T2211] R13: 00007fef54e26038 R14: 00007fef54e25fa0 R15: 00007ffdccc74d68 [ 99.789502][ T2211] [ 99.884774][ T359] usb 3-1: USB disconnect, device number 45 [ 99.889763][ T310] microsoft 0003:045E:07DA.0018: parse failed [ 100.046062][ T310] microsoft 0003:045E:07DA.0018: probe with driver microsoft failed with error -22 [ 100.504261][ T2221] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.512374][ T2221] netlink: 148 bytes leftover after parsing attributes in process `syz.4.536'. [ 100.548447][ T2226] input: syz0 as /devices/virtual/input/input13 [ 100.579389][ T2228] fuse: Bad value for 'rootmode' [ 100.657559][ T359] usb 2-1: USB disconnect, device number 47 [ 100.789553][ T2246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.800136][ T2246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.858175][ T36] audit: type=1400 audit(96.671:3813): avc: denied { write } for pid=2253 comm="syz.5.546" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.881766][ T2254] netlink: 'syz.5.546': attribute type 4 has an invalid length. [ 100.889623][ T2254] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.546'. [ 100.900268][ T2254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=2254 comm=syz.5.546 [ 100.915428][ T2255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.925265][ T2255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.965848][ T2259] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 101.223021][ T2268] netlink: 68 bytes leftover after parsing attributes in process `syz.1.550'. [ 101.232159][ T45] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 101.236208][ T2268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.550'. [ 101.249824][ T2268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 101.258655][ T2268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.550'. [ 101.270989][ T2268] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.399912][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.411290][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.423326][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.437374][ T36] audit: type=1400 audit(97.206:3814): avc: denied { getopt } for pid=2271 comm="syz.1.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.457327][ T45] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.467544][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.476507][ T45] usb 6-1: config 0 descriptor?? [ 101.660322][ T2286] ip6_vti0: entered promiscuous mode [ 101.670662][ T2285] ip6_vti0: left promiscuous mode [ 101.708127][ T36] audit: type=1400 audit(97.455:3815): avc: denied { nlmsg_read } for pid=2294 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 101.849915][ T2304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.859197][ T2304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.924982][ T45] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 101.932699][ T45] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 101.940137][ T45] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 101.947730][ T45] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 101.955227][ T45] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 101.962832][ T45] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 101.970342][ T45] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 101.977799][ T45] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 101.985258][ T45] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 101.992968][ T45] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 102.004239][ T45] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 102.125045][ T10] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 102.215395][ T31] usb 6-1: USB disconnect, device number 9 [ 102.299706][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 102.307723][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 102.316944][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.325900][ T10] usb 2-1: config 0 descriptor?? [ 102.406707][ T45] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 102.547593][ T45] usb 3-1: device descriptor read/64, error -71 [ 102.775643][ T10] appleir 0003:05AC:8241.001A: unknown main item tag 0x3 [ 102.783979][ T10] appleir 0003:05AC:8241.001A: unknown main item tag 0x2 [ 102.791266][ T10] appleir 0003:05AC:8241.001A: invalid report_size 63349 [ 102.798369][ T10] appleir 0003:05AC:8241.001A: item 0 2 1 7 parsing failed [ 102.805772][ T10] appleir 0003:05AC:8241.001A: parse failed [ 102.811938][ T10] appleir 0003:05AC:8241.001A: probe with driver appleir failed with error -22 [ 102.818506][ T45] usb 3-1: device descriptor read/64, error -71 [ 102.994310][ T310] usb 2-1: USB disconnect, device number 48 [ 103.072159][ T2327] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.081894][ T2327] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.090762][ T45] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 103.178737][ T2329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.188240][ T2329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.230369][ T45] usb 3-1: device descriptor read/64, error -71 [ 103.490579][ T45] usb 3-1: device descriptor read/64, error -71 [ 103.585902][ T2331] TCP: TCP_TX_DELAY enabled [ 103.601194][ T2331] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.620759][ T45] usb usb3-port1: attempt power cycle [ 103.729016][ T36] audit: type=1400 audit(99.328:3816): avc: denied { setopt } for pid=2336 comm="syz.5.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.821809][ T36] audit: type=1400 audit(99.402:3817): avc: denied { create } for pid=2354 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.982663][ T36] audit: type=1400 audit(99.559:3818): avc: denied { create } for pid=2361 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 103.989300][ T2362] netlink: 25 bytes leftover after parsing attributes in process `syz.1.580'. [ 104.010492][ T45] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 104.037403][ T45] usb 3-1: device descriptor read/8, error -71 [ 104.103053][ T2368] Bluetooth: ISO socket layer initialized [ 104.123463][ T2370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.132388][ T2370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.140807][ T2371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.150976][ T2371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.185208][ T45] usb 3-1: device descriptor read/8, error -71 [ 104.200017][ T36] audit: type=1400 audit(99.753:3819): avc: denied { read } for pid=2374 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.324969][ T310] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 104.397557][ T2378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.406622][ T2378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.415932][ T2378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.424664][ T2378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.465925][ T45] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 104.488612][ T45] usb 3-1: device descriptor read/8, error -71 [ 104.498398][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 104.504653][ T310] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 104.512959][ T310] usb 2-1: config 0 has no interface number 0 [ 104.519172][ T310] usb 2-1: config 0 interface 184 has no altsetting 0 [ 104.527825][ T310] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 104.537158][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.550968][ T310] usb 2-1: Product: syz [ 104.557750][ T310] usb 2-1: Manufacturer: syz [ 104.562576][ T310] usb 2-1: SerialNumber: syz [ 104.574731][ T310] usb 2-1: config 0 descriptor?? [ 104.581366][ T310] smsc75xx v1.0.0 [ 104.629490][ T45] usb 3-1: device descriptor read/8, error -71 [ 104.747824][ T45] usb usb3-port1: unable to enumerate USB device [ 104.803839][ T2366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2366 comm=syz.1.582 [ 104.866892][ T359] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 105.007796][ T359] usb 6-1: device descriptor read/64, error -71 [ 105.078284][ T2392] mmap: syz.4.592 (2392): VmData 29073408 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 105.170478][ T2396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.179745][ T2396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.251455][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 105.262533][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 105.267964][ T359] usb 6-1: device descriptor read/64, error -71 [ 105.527984][ T359] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 105.577468][ T2410] syzkaller1: entered promiscuous mode [ 105.583036][ T2410] syzkaller1: entered allmulticast mode [ 105.668842][ T359] usb 6-1: device descriptor read/64, error -71 [ 105.711785][ T36] audit: type=1400 audit(101.146:3820): avc: denied { ioctl } for pid=2419 comm="syz.2.603" path="socket:[21380]" dev="sockfs" ino=21380 ioctlcmd=0x9419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 105.940508][ T359] usb 6-1: device descriptor read/64, error -71 [ 105.993964][ T45] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 106.059131][ T359] usb usb6-port1: attempt power cycle [ 106.141312][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 106.152576][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 106.162451][ T310] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 106.172314][ T310] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 106.181974][ T310] usb 2-1: USB disconnect, device number 49 [ 106.188079][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 106.198659][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 7 [ 106.210394][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 42084, setting to 1024 [ 106.223236][ T45] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 106.232619][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.240796][ T45] usb 3-1: Product: syz [ 106.245134][ T45] usb 3-1: Manufacturer: syz [ 106.249795][ T45] usb 3-1: SerialNumber: syz [ 106.255180][ T45] usb 3-1: config 0 descriptor?? [ 106.260445][ T2422] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 106.268343][ T45] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 106.427507][ T359] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 106.450420][ T359] usb 6-1: device descriptor read/8, error -71 [ 106.591285][ T359] usb 6-1: device descriptor read/8, error -71 [ 106.712497][ T2432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.721250][ T2432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.730760][ T36] audit: type=1400 audit(102.087:3821): avc: denied { connect } for pid=2430 comm="syz.1.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 106.742545][ T2433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.759416][ T2432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.763628][ T2433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.768140][ T2432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.809669][ T2438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.819045][ T2438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.861038][ T359] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 106.883785][ T359] usb 6-1: device descriptor read/8, error -71 [ 107.025248][ T359] usb 6-1: device descriptor read/8, error -71 [ 107.142966][ T359] usb usb6-port1: unable to enumerate USB device [ 107.153848][ T310] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 107.329078][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 107.338061][ T310] usb 2-1: config 1 has an invalid interface number: 5 but max is 2 [ 107.346194][ T310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.356407][ T310] usb 2-1: config 1 has no interface number 2 [ 107.362566][ T310] usb 2-1: config 1 interface 5 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 107.375680][ T310] usb 2-1: config 1 interface 5 has no altsetting 0 [ 107.389612][ T2440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.398208][ T310] usb 2-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 107.398615][ T2440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.409485][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.422364][ T2440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.424646][ T310] usb 2-1: Product: syz [ 107.433361][ T2440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.437478][ T310] usb 2-1: Manufacturer: syz [ 107.449177][ T310] usb 2-1: SerialNumber: syz [ 107.676617][ T310] usb 2-1: unit 2 not found! [ 107.681717][ T310] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 107.696790][ T310] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 107.706142][ T310] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 107.722508][ T310] usb 2-1: USB disconnect, device number 50 [ 107.730206][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.824879][ T36] audit: type=1400 audit(103.093:3822): avc: denied { execute } for pid=2441 comm="syz.5.611" name="file0" dev="ramfs" ino=21966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 107.846501][ T36] audit: type=1400 audit(103.093:3823): avc: denied { execute_no_trans } for pid=2441 comm="syz.5.611" path="/file0" dev="ramfs" ino=21966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 108.012046][ T2446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.021074][ T2446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.029756][ T2446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.038955][ T2446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.149256][ T2454] rust_binder: Error in use_page_slow: ESRCH [ 108.149285][ T2454] rust_binder: use_range failure ESRCH [ 108.155904][ T2454] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 108.161819][ T2454] rust_binder: Failure in copy_transaction_data: ESRCH [ 108.169929][ T2454] rust_binder: 2453:2454 transaction async to 2453:0 failed ESRCH, code 0 size 0-0 [ 108.238509][ T36] audit: type=1400 audit(103.481:3824): avc: denied { read } for pid=2456 comm="syz.4.615" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 108.291699][ T36] audit: type=1400 audit(103.481:3825): avc: denied { open } for pid=2456 comm="syz.4.615" path="/113/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 108.326710][ T36] audit: type=1400 audit(103.508:3826): avc: denied { ioctl } for pid=2456 comm="syz.4.615" path="/113/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 108.354073][ T2463] netlink: 'syz.4.618': attribute type 21 has an invalid length. [ 108.374525][ T36] audit: type=1400 audit(103.536:3827): avc: denied { map } for pid=2460 comm="syz.4.617" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 108.403506][ T2463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.451508][ T2463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.636080][ T545] rust_binder: 2453: undelivered TRANSACTION_ERROR: 29201 [ 108.703401][ T310] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 108.876821][ T310] usb 6-1: Using ep0 maxpacket: 16 [ 108.883300][ T310] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 108.891784][ T310] usb 6-1: config 0 has no interface number 0 [ 108.898001][ T310] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 108.908471][ T310] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 108.920352][ T310] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 108.929810][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.938169][ T310] usb 6-1: Product: syz [ 108.942697][ T310] usb 6-1: Manufacturer: syz [ 108.947384][ T310] usb 6-1: SerialNumber: syz [ 108.957065][ T310] usb 6-1: config 0 descriptor?? [ 108.963578][ T2465] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 108.971293][ T2465] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 109.007126][ T545] usb 3-1: USB disconnect, device number 50 [ 109.128330][ T2473] dump_vmcs: 1 callbacks suppressed [ 109.128351][ T2473] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 109.190033][ T2470] syzkaller0: entered promiscuous mode [ 109.195797][ T2470] syzkaller0: entered allmulticast mode [ 109.202450][ T2465] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 109.209707][ T2465] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 109.436947][ T310] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 109.657559][ T310] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 109.667679][ T310] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 109.678218][ T310] asix 6-1:0.34: probe with driver asix failed with error -61 [ 110.080829][ T2499] binfmt_misc: register: failed to install interpreter file ./file0 [ 110.129078][ T2511] cgroup: Need name or subsystem set [ 110.170139][ T2518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.179065][ T2518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.188058][ T2518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.197025][ T2521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.199154][ T2518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.205522][ T2521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.437497][ T310] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 110.601165][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.612208][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.622176][ T310] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 110.631217][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.640262][ T310] usb 3-1: config 0 descriptor?? [ 110.825975][ T36] audit: type=1400 audit(105.861:3828): avc: denied { create } for pid=2534 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 110.846396][ T2535] x_tables: unsorted underflow at hook 4 [ 110.906277][ T2542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.915250][ T2542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.923353][ T2542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.932103][ T2542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.940240][ T2542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.948789][ T2542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.957032][ T2542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.965766][ T2542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.974013][ T2542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.982546][ T2542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.082522][ T310] steelseries 0003:1038:12B6.001B: unknown main item tag 0x0 [ 111.090186][ T310] steelseries 0003:1038:12B6.001B: unknown main item tag 0x0 [ 111.097606][ T310] steelseries 0003:1038:12B6.001B: unknown main item tag 0x0 [ 111.105117][ T310] steelseries 0003:1038:12B6.001B: unknown main item tag 0x0 [ 111.112768][ T310] steelseries 0003:1038:12B6.001B: unknown main item tag 0x0 [ 111.120213][ T310] steelseries 0003:1038:12B6.001B: unknown main item tag 0x0 [ 111.127685][ T310] steelseries 0003:1038:12B6.001B: unknown main item tag 0x0 [ 111.136479][ T310] steelseries 0003:1038:12B6.001B: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 111.163653][ T363] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 111.298821][ T310] steelseries 0003:1038:12B6.001B: hid_hw_raw_request() failed with -71 [ 111.309452][ T310] usb 3-1: USB disconnect, device number 51 [ 111.315292][ T363] usb 2-1: device descriptor read/64, error -71 [ 111.575471][ T363] usb 2-1: device descriptor read/64, error -71 [ 111.695811][ T9] usb 6-1: USB disconnect, device number 14 [ 111.730899][ T2548] 9pnet_fd: Insufficient options for proto=fd [ 111.756494][ T36] audit: type=1326 audit(106.728:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.5.647" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef54b9e0d9 code=0x7ff00000 [ 111.787476][ T36] audit: type=1326 audit(106.728:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.5.647" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef54b9e0d9 code=0x7ff00000 [ 111.846357][ T363] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 111.873307][ T2559] SELinux: Context K is not valid (left unmapped). [ 111.906287][ T2565] netlink: 1 bytes leftover after parsing attributes in process `syz.2.650'. [ 111.987238][ T363] usb 2-1: device descriptor read/64, error -71 [ 112.149958][ T36] kauditd_printk_skb: 2961 callbacks suppressed [ 112.149979][ T36] audit: type=1326 audit(107.098:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.5.647" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef54b9e0d9 code=0x7ff00000 [ 112.186978][ T36] audit: type=1326 audit(107.125:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.5.647" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef54b9e0d9 code=0x7ff00000 [ 112.212813][ T36] audit: type=1326 audit(107.125:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.5.647" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef54b9e0d9 code=0x7ff00000 [ 112.238262][ T36] audit: type=1326 audit(107.125:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.5.647" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef54b9e0d9 code=0x7ff00000 [ 112.263225][ T36] audit: type=1326 audit(107.125:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.5.647" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef54b9e0d9 code=0x7ff00000 [ 112.287903][ T363] usb 2-1: device descriptor read/64, error -71 [ 112.295223][ T36] audit: type=1326 audit(107.125:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.5.647" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef54b9e0d9 code=0x7ff00000 [ 112.320180][ T36] audit: type=1326 audit(107.125:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.5.647" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef54b9e0d9 code=0x7ff00000 [ 112.345134][ T36] audit: type=1326 audit(107.125:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.5.647" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef54b9e0d9 code=0x7ff00000 [ 112.370144][ T36] audit: type=1326 audit(107.125:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.5.647" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef54b9e0d9 code=0x7ff00000 [ 112.395906][ T36] audit: type=1326 audit(107.125:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.5.647" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef54b9e0d9 code=0x7ff00000 [ 112.421704][ T363] usb usb2-port1: attempt power cycle [ 112.789256][ T363] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 112.798504][ T9] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 112.812406][ T363] usb 2-1: device descriptor read/8, error -71 [ 112.890394][ T2583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.655'. [ 112.951831][ T9] usb 3-1: device descriptor read/64, error -71 [ 112.959581][ T363] usb 2-1: device descriptor read/8, error -71 [ 113.130822][ T2606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.142239][ T2606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.167820][ T2606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.176630][ T2606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.185133][ T2606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.193785][ T2606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.202027][ T2606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.210684][ T2606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.218827][ T2606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.227387][ T363] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 113.234013][ T2606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.235376][ T9] usb 3-1: device descriptor read/64, error -71 [ 113.245131][ T2606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.258560][ T2606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.278138][ T363] usb 2-1: device descriptor read/8, error -71 [ 113.320326][ T310] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 113.419035][ T363] usb 2-1: device descriptor read/8, error -71 [ 113.461252][ T310] usb 6-1: device descriptor read/64, error -71 [ 113.504607][ T9] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 113.537169][ T363] usb usb2-port1: unable to enumerate USB device [ 113.645470][ T9] usb 3-1: device descriptor read/64, error -71 [ 113.721313][ T310] usb 6-1: device descriptor read/64, error -71 [ 113.888374][ T2640] rust_binder: 2639:2640 got reply transaction with no transaction stack [ 113.897318][ T2640] rust_binder: 2639:2640 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 113.906715][ T9] usb 3-1: device descriptor read/64, error -71 [ 113.992244][ T310] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 114.024947][ T9] usb usb3-port1: attempt power cycle [ 114.137580][ T545] rust_binder: 2639: undelivered TRANSACTION_ERROR: 29201 [ 114.154910][ T310] usb 6-1: device descriptor read/64, error -71 [ 114.360161][ T2653] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 114.381679][ T2658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 114.393275][ T9] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 114.411195][ T2657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.669'. [ 114.421327][ T9] usb 3-1: device descriptor read/8, error -71 [ 114.425904][ T310] usb 6-1: device descriptor read/64, error -71 [ 114.527651][ T2662] overlayfs: missing 'lowerdir' [ 114.537000][ T2662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.546195][ T310] usb usb6-port1: attempt power cycle [ 114.553075][ T2662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.568202][ T9] usb 3-1: device descriptor read/8, error -71 [ 114.710622][ T2665] kernel profiling enabled (shift: 0) [ 114.826737][ T9] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 114.860303][ T9] usb 3-1: device descriptor read/8, error -71 [ 114.935130][ T310] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 114.968537][ T310] usb 6-1: device descriptor read/8, error -71 [ 115.012055][ T9] usb 3-1: device descriptor read/8, error -71 [ 115.115301][ T310] usb 6-1: device descriptor read/8, error -71 [ 115.130311][ T9] usb usb3-port1: unable to enumerate USB device [ 115.233326][ T2676] netlink: 156 bytes leftover after parsing attributes in process `syz.4.674'. [ 115.379465][ T310] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 115.423918][ T310] usb 6-1: device descriptor read/8, error -71 [ 115.461026][ T2680] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.470089][ T2680] kvm: kvm [2679]: vcpu0, guest rIP: 0x58ad29489c2a7d0a Unhandled WRMSR(0x4000006d) = 0x6 [ 115.564856][ T310] usb 6-1: device descriptor read/8, error -71 [ 115.687368][ T310] usb usb6-port1: unable to enumerate USB device [ 116.235657][ T310] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 116.430791][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 116.437697][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.452832][ T310] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8 [ 116.462747][ T310] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 54, changing to 9 [ 116.475801][ T310] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 116.490540][ T310] usb 3-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 116.500612][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.509184][ T310] usb 3-1: Product: syz [ 116.513714][ T310] usb 3-1: Manufacturer: syz [ 116.518532][ T310] usb 3-1: SerialNumber: syz [ 116.526404][ T2697] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 116.553162][ T2716] usb usb7: usbfs: process 2716 (syz.1.688) did not claim interface 0 before use [ 116.701701][ T545] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 116.760063][ T310] usb 3-1: MIDIStreaming interface descriptor not found [ 116.810991][ T310] usb 3-1: USB disconnect, device number 56 [ 116.876466][ T545] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 116.887723][ T545] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 116.900457][ T545] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 116.915042][ T545] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.924682][ T545] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.933352][ T545] usb 6-1: SerialNumber: syz [ 116.981098][ T2725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.989715][ T2725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.158235][ T545] cdc_acm 6-1:1.0: skipping garbage [ 117.165552][ T545] usb 6-1: USB disconnect, device number 19 [ 117.299493][ T772] tipc: Subscription rejected, illegal request [ 117.558319][ T2734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.566997][ T2734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.980553][ T545] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 118.145492][ T545] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.159029][ T545] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.170774][ T545] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 118.186132][ T545] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.196079][ T545] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.206028][ T545] usb 6-1: Product: syz [ 118.210521][ T545] usb 6-1: Manufacturer: syz [ 118.215530][ T545] usb 6-1: SerialNumber: syz [ 118.222899][ T545] cdc_ncm 6-1:1.0: skipping garbage [ 118.229415][ T545] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 118.231325][ T36] kauditd_printk_skb: 2117 callbacks suppressed [ 118.231344][ T36] audit: type=1326 audit(112.698:8919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2749 comm="syz.4.700" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7f8d9e0d9 code=0x0 [ 118.237434][ T545] cdc_ncm 6-1:1.0: bind() failure [ 118.274493][ T545] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 118.281287][ T545] cdc_ncm 6-1:1.1: bind() failure [ 118.300839][ T2751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.310666][ T2753] netlink: 'syz.2.701': attribute type 6 has an invalid length. [ 118.310982][ T2751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.319630][ T2753] IPv6: NLM_F_CREATE should be specified when creating new route [ 118.337316][ T36] audit: type=1400 audit(112.800:8920): avc: denied { bind } for pid=2749 comm="syz.4.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 118.357169][ T36] audit: type=1400 audit(112.818:8921): avc: denied { ioctl } for pid=2749 comm="syz.4.700" path="socket:[25780]" dev="sockfs" ino=25780 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 118.376268][ T2760] syzkaller1: entered promiscuous mode [ 118.387570][ T2760] syzkaller1: entered allmulticast mode [ 118.414093][ T310] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 118.442895][ T9] usb 6-1: USB disconnect, device number 20 [ 118.576687][ T310] usb 2-1: Using ep0 maxpacket: 8 [ 118.583030][ T310] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 118.591898][ T310] usb 2-1: config 0 has no interface number 0 [ 118.599905][ T310] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 118.609413][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.617477][ T310] usb 2-1: Product: syz [ 118.621980][ T310] usb 2-1: Manufacturer: syz [ 118.626617][ T310] usb 2-1: SerialNumber: syz [ 118.632642][ T310] usb 2-1: config 0 descriptor?? [ 118.863035][ T2745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.880325][ T2745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.901735][ T310] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 118.913030][ T310] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 118.928641][ T310] usb 2-1: USB disconnect, device number 55 [ 119.013178][ T2797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.029650][ T2797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.281069][ T545] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 119.336540][ T2804] kvm: user requested TSC rate below hardware speed [ 119.466482][ T545] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.482329][ T545] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.496060][ T545] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.518068][ T545] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.527644][ T545] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.540892][ T545] usb 6-1: config 0 descriptor?? [ 119.766470][ T545] usbhid 6-1:0.0: can't add hid device: -71 [ 119.774144][ T36] audit: type=1400 audit(114.129:8922): avc: denied { ioctl } for pid=2814 comm="syz.1.714" path="socket:[25173]" dev="sockfs" ino=25173 ioctlcmd=0x587f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.799102][ T545] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 119.820624][ T545] usb 6-1: USB disconnect, device number 21 [ 120.256512][ T310] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 120.290529][ T2831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'. [ 120.300899][ T36] audit: type=1400 audit(114.618:8923): avc: denied { getopt } for pid=2830 comm="syz.2.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.420783][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.435198][ T310] usb 2-1: not running at top speed; connect to a high speed hub [ 120.447701][ T310] usb 2-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 120.457079][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.465488][ T310] usb 2-1: Product: syz [ 120.469768][ T310] usb 2-1: Manufacturer: syz [ 120.474539][ T310] usb 2-1: SerialNumber: syz [ 120.702361][ T363] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 120.712224][ T2829] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.721254][ T2829] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.736454][ T310] usb 2-1: USB disconnect, device number 56 [ 120.747439][ T906] udevd[906]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 120.864682][ T363] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.874971][ T363] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.883889][ T363] usb 6-1: config 1 has no interface number 0 [ 120.890158][ T363] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 120.905270][ T363] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.914403][ T363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.922430][ T363] usb 6-1: Product: syz [ 120.926587][ T363] usb 6-1: Manufacturer: syz [ 120.931216][ T363] usb 6-1: SerialNumber: syz [ 120.937277][ T363] usb 6-1: selecting invalid altsetting 1 [ 121.210183][ T310] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 121.267559][ T363] cdc_ncm 6-1:1.1: bind() failure [ 121.276674][ T363] usb 6-1: USB disconnect, device number 22 [ 121.377365][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.391638][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.406328][ T310] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 121.415593][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.432599][ T310] usb 3-1: config 0 descriptor?? [ 121.438584][ T36] audit: type=1400 audit(115.651:8924): avc: denied { relabelfrom } for pid=2857 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 121.458482][ T36] audit: type=1400 audit(115.651:8925): avc: denied { relabelto } for pid=2857 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 121.481777][ T2858] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.492133][ T2859] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.527521][ T2865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.536266][ T2865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.613028][ T36] audit: type=1400 audit(115.826:8926): avc: denied { setopt } for pid=2867 comm="syz.1.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.632075][ T36] audit: type=1400 audit(115.826:8927): avc: denied { ioctl } for pid=2867 comm="syz.1.731" path="socket:[25329]" dev="sockfs" ino=25329 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.830125][ T36] audit: type=1400 audit(116.029:8928): avc: denied { accept } for pid=2877 comm="syz.5.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.915575][ T310] cp2112 0003:10C4:EA90.001C: collection stack underflow [ 121.922701][ T310] cp2112 0003:10C4:EA90.001C: item 0 4 0 12 parsing failed [ 121.931004][ T310] cp2112 0003:10C4:EA90.001C: parse failed [ 121.937174][ T310] cp2112 0003:10C4:EA90.001C: probe with driver cp2112 failed with error -22 [ 121.957998][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 122.120618][ T363] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 122.129239][ T9] usb 2-1: config index 0 descriptor too short (expected 45, got 26) [ 122.137412][ T9] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 122.147641][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.162432][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 122.171837][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.180202][ T9] usb 2-1: Product: syz [ 122.184468][ T9] usb 2-1: Manufacturer: syz [ 122.189122][ T9] usb 2-1: SerialNumber: syz [ 122.195234][ T9] rtl8150 2-1:1.0: couldn't find required endpoints [ 122.202691][ T9] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 122.283120][ T363] usb 6-1: Using ep0 maxpacket: 16 [ 122.289513][ T363] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 122.297794][ T363] usb 6-1: config 0 has no interface number 0 [ 122.303930][ T363] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 122.314030][ T363] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 122.325428][ T363] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 122.334609][ T363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.342858][ T363] usb 6-1: Product: syz [ 122.347036][ T363] usb 6-1: Manufacturer: syz [ 122.351719][ T363] usb 6-1: SerialNumber: syz [ 122.357409][ T363] usb 6-1: config 0 descriptor?? [ 122.362808][ T2880] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 122.370296][ T2880] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 122.422115][ T2876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.430903][ T2876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.440595][ T310] usb 2-1: USB disconnect, device number 57 [ 122.594922][ T2880] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 122.602355][ T2880] raw-gadget.5 gadget.5: fail, usb_ep_enable returned -22 [ 122.827366][ T363] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 123.221238][ T2891] futex_wake_op: syz.4.739 tries to shift op by 144; fix this program [ 123.513127][ T2897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.521825][ T2897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.683504][ T2916] netlink: 'syz.1.748': attribute type 2 has an invalid length. [ 123.691502][ T2916] netlink: 1 bytes leftover after parsing attributes in process `syz.1.748'. [ 123.995535][ T359] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 124.176837][ T359] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 124.189878][ T359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.203798][ T359] usb 2-1: Product: syz [ 124.208219][ T359] usb 2-1: Manufacturer: syz [ 124.213107][ T359] usb 2-1: SerialNumber: syz [ 124.223975][ T310] usb 3-1: USB disconnect, device number 57 [ 124.226052][ T2937] overlayfs: failed to resolve './file1/file0': -2 [ 124.357441][ T363] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 124.367818][ T363] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 124.383314][ T363] asix 6-1:0.34: probe with driver asix failed with error -71 [ 124.392220][ T363] usb 6-1: USB disconnect, device number 23 [ 124.404917][ T2946] 9pnet_fd: Insufficient options for proto=fd [ 124.448563][ T359] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 124.461266][ T359] usb 2-1: USB disconnect, device number 58 [ 124.474488][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.624104][ T310] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 124.787933][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.798328][ T310] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.808519][ T310] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.817625][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 124.826128][ T310] usb 3-1: SerialNumber: syz [ 124.994059][ T2960] netlink: 'syz.5.762': attribute type 10 has an invalid length. [ 125.051578][ T310] usb 3-1: 0:2 : does not exist [ 125.071859][ T310] usb 3-1: USB disconnect, device number 58 [ 125.087662][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.404436][ T545] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 125.426096][ T359] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 125.522754][ T2978] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.535837][ T2978] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 125.568374][ T545] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.582356][ T545] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.591753][ T545] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.600689][ T359] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.600901][ T545] usb 6-1: config 0 descriptor?? [ 125.613055][ T359] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 125.632451][ T359] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 125.650798][ T359] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.660382][ T359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.671807][ T359] usb 2-1: Product: syz [ 125.676364][ T359] usb 2-1: Manufacturer: syz [ 125.681138][ T359] usb 2-1: SerialNumber: syz [ 125.688696][ T2974] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 125.847638][ T545] usbhid 6-1:0.0: can't add hid device: -71 [ 125.858185][ T545] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 125.873098][ T545] usb 6-1: USB disconnect, device number 24 [ 125.935658][ T2974] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 126.076420][ T310] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 126.195568][ T545] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 126.240018][ T310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.250262][ T310] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 126.261308][ T310] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.272772][ T310] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 126.281865][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.290078][ T310] usb 3-1: Product: syz [ 126.294304][ T310] usb 3-1: Manufacturer: syz [ 126.298939][ T310] usb 3-1: SerialNumber: syz [ 126.359803][ T545] usb 6-1: unable to get BOS descriptor or descriptor too short [ 126.368364][ T545] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.378651][ T545] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.389783][ T545] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 126.399137][ T545] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.407389][ T545] usb 6-1: Product: syz [ 126.411726][ T545] usb 6-1: Manufacturer: syz [ 126.416636][ T545] usb 6-1: SerialNumber: syz [ 126.424197][ T545] usb 6-1: selecting invalid altsetting 1 [ 126.430563][ T545] usb 6-1: unit 6 not found! [ 126.524708][ T310] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 126.535189][ T310] usb 3-1: USB disconnect, device number 59 [ 126.596057][ T2974] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 126.660425][ T3006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.669752][ T3007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.678621][ T3006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.683431][ T3007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.821051][ T359] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 126.827580][ T359] cdc_ncm 2-1:1.0: dwNtbInMaxSize=1024 is too small. Using 2048 [ 126.835656][ T359] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 127.038388][ T36] audit: type=1326 audit(120.827:8929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2973 comm="syz.1.766" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f926e39e0d9 code=0x0 [ 127.077839][ T2997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.092490][ T2997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.115398][ T545] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 127.129639][ T545] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 127.139918][ T545] usb 6-1: USB disconnect, device number 25 [ 127.153575][ T906] udevd[906]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 127.176595][ T359] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 127.186151][ T359] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 127.200854][ T359] usb 2-1: USB disconnect, device number 59 [ 127.208858][ T359] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 127.690002][ T3042] incfs: mount failed -22 [ 127.694504][ T3042] incfs: mount failed -22 [ 127.698940][ T3042] incfs: mount failed -22 [ 127.704213][ T3042] incfs: mount failed -22 [ 127.708742][ T3042] incfs: mount failed -22 [ 127.713290][ T3042] incfs: mount failed -22 [ 127.717921][ T3042] incfs: mount failed -22 [ 127.722358][ T3042] incfs: mount failed -22 [ 127.726932][ T3042] incfs: mount failed -22 [ 127.731632][ T3042] incfs: mount failed -22 [ 127.736185][ T3042] incfs: mount failed -22 [ 127.740617][ T3042] incfs: mount failed -22 [ 127.745162][ T3042] incfs: mount failed -22 [ 127.749651][ T3042] incfs: mount failed -22 [ 127.754099][ T3042] incfs: mount failed -22 [ 127.758581][ T3042] incfs: mount failed -22 [ 127.763003][ T3042] incfs: mount failed -22 [ 127.767482][ T359] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 127.775390][ T3042] incfs: mount failed -22 [ 127.779971][ T3042] incfs: mount failed -22 [ 127.784583][ T3042] incfs: mount failed -22 [ 127.789269][ T3042] incfs: mount failed -22 [ 127.793910][ T3042] incfs: mount failed -22 [ 127.798353][ T3042] incfs: mount failed -22 [ 127.802930][ T3042] incfs: mount failed -22 [ 127.807572][ T3042] incfs: mount failed -22 [ 127.812161][ T3042] incfs: mount failed -22 [ 127.816782][ T3042] incfs: mount failed -22 [ 127.821512][ T3042] incfs: mount failed -22 [ 127.825951][ T3042] incfs: mount failed -22 [ 127.830377][ T3042] incfs: mount failed -22 [ 127.834868][ T3042] incfs: mount failed -22 [ 127.839292][ T3042] incfs: mount failed -22 [ 127.843917][ T3042] incfs: mount failed -22 [ 127.848338][ T3042] incfs: mount failed -22 [ 127.852792][ T3042] incfs: mount failed -22 [ 127.857586][ T3042] incfs: mount failed -22 [ 127.862021][ T3042] incfs: mount failed -22 [ 127.866700][ T3042] incfs: mount failed -22 [ 127.871250][ T3042] incfs: mount failed -22 [ 127.875796][ T3042] incfs: mount failed -22 [ 127.880265][ T3042] incfs: mount failed -22 [ 127.884825][ T3042] incfs: mount failed -22 [ 127.889390][ T3042] incfs: mount failed -22 [ 127.893831][ T3042] incfs: mount failed -22 [ 127.898326][ T3042] incfs: mount failed -22 [ 127.902875][ T3042] incfs: mount failed -22 [ 127.907387][ T3042] incfs: mount failed -22 [ 127.912177][ T3042] incfs: mount failed -22 [ 127.916735][ T3042] incfs: mount failed -22 [ 127.921333][ T3042] incfs: mount failed -22 [ 127.925782][ T3042] incfs: mount failed -22 [ 127.930455][ T3042] incfs: mount failed -22 [ 127.934896][ T3042] incfs: mount failed -22 [ 127.939409][ T3042] incfs: mount failed -22 [ 127.943910][ T3042] incfs: mount failed -22 [ 127.948436][ T3042] incfs: mount failed -22 [ 127.952814][ T359] usb 2-1: Using ep0 maxpacket: 16 [ 127.958195][ T3042] incfs: mount failed -22 [ 127.962934][ T3042] incfs: mount failed -22 [ 127.967475][ T3042] incfs: mount failed -22 [ 127.972122][ T359] usb 2-1: unable to get BOS descriptor set [ 127.972955][ T3042] incfs: mount failed -22 [ 127.978831][ T359] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.982780][ T3042] incfs: mount failed -22 [ 127.993841][ T359] usb 2-1: too many endpoints for config 1 interface 0 altsetting 125: 60, using maximum allowed: 30 [ 127.998994][ T3042] incfs: mount failed -22 [ 128.009245][ T359] usb 2-1: config 1 interface 0 altsetting 125 has 0 endpoint descriptors, different from the interface descriptor's value: 60 [ 128.014221][ T3042] incfs: mount failed -22 [ 128.027199][ T359] usb 2-1: config 1 interface 0 has no altsetting 0 [ 128.032032][ T3042] incfs: mount failed -22 [ 128.039805][ T359] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.055259][ T359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.063449][ T359] usb 2-1: Product: syz [ 128.063811][ T1627] ------------[ cut here ]------------ [ 128.067642][ T359] usb 2-1: Manufacturer: syz [ 128.067661][ T359] usb 2-1: SerialNumber: syz [ 128.082872][ T1627] WARNING: CPU: 1 PID: 1627 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 128.092687][ T1627] Modules linked in: [ 128.096784][ T1627] CPU: 1 UID: 0 PID: 1627 Comm: syz-executor Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 128.108766][ T1627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.119213][ T1627] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 128.125339][ T1627] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 82 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c eb 5d 03 cc e8 26 be 3e ff <0f> 0b e9 3e ff ff ff e8 1a be 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 128.145673][ T1627] RSP: 0018:ffffc9000e19fb88 EFLAGS: 00010293 [ 128.152096][ T1627] RAX: ffffffff8248b39a RBX: 0000000000000000 RCX: ffff888118069300 [ 128.160321][ T1627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.168515][ T1627] RBP: ffffc9000e19fbb0 R08: ffff88812f9ef37f R09: 1ffff11025f3de6f [ 128.176617][ T1627] R10: dffffc0000000000 R11: ffffed1025f3de70 R12: 0000000000000000 [ 128.184756][ T1627] R13: dffffc0000000000 R14: ffff88812f9ef2e0 R15: ffff8881264c4660 [ 128.193028][ T1627] FS: 000055556b673500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 128.202023][ T1627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.208772][ T1627] CR2: 000055556b68e918 CR3: 000000012a602000 CR4: 00000000003526b0 [ 128.216896][ T1627] DR0: 0000000000003706 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.225048][ T1627] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 128.233070][ T1627] Call Trace: [ 128.236373][ T1627] [ 128.239673][ T1627] ovl_do_remove+0x824/0xd10 [ 128.244363][ T1627] ? ovl_set_redirect+0x780/0x780 [ 128.249507][ T1627] ? __cfi_down_write+0x10/0x10 [ 128.254395][ T1627] ovl_rmdir+0x1e/0x30 [ 128.258515][ T1627] vfs_rmdir+0x3de/0x560 [ 128.262958][ T1627] incfs_kill_sb+0x102/0x220 [ 128.267707][ T1627] deactivate_locked_super+0xd5/0x270 [ 128.273112][ T1627] deactivate_super+0xb8/0xe0 [ 128.273575][ T3044] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.277957][ T1627] cleanup_mnt+0x438/0x4d0 [ 128.289495][ T3044] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.291194][ T1627] __cleanup_mnt+0x1d/0x40 [ 128.304226][ T1627] task_work_run+0x1e8/0x260 [ 128.308942][ T1627] ? __cfi_task_work_run+0x10/0x10 [ 128.314214][ T359] usb 2-1: bad CDC descriptors [ 128.314260][ T1627] ? __x64_sys_umount+0x12e/0x180 [ 128.324149][ T1627] ? __cfi___x64_sys_umount+0x10/0x10 [ 128.329563][ T1627] ? __kasan_check_read+0x15/0x20 [ 128.332450][ T359] usb 2-1: USB disconnect, device number 60 [ 128.334729][ T1627] resume_user_mode_work+0x35/0x50 [ 128.345947][ T1627] syscall_exit_to_user_mode+0x63/0xb0 [ 128.351717][ T1627] do_syscall_64+0x63/0xf0 [ 128.356380][ T1627] ? clear_bhb_loop+0x50/0xa0 [ 128.361273][ T1627] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 128.367214][ T1627] RIP: 0033:0x7fef54b9f317 [ 128.371925][ T1627] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 128.392296][ T1627] RSP: 002b:00007ffdccc73fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 128.401068][ T1627] RAX: 0000000000000000 RBX: 00007fef54c34474 RCX: 00007fef54b9f317 [ 128.409115][ T1627] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdccc74090 [ 128.417517][ T1627] RBP: 00007ffdccc74090 R08: 00007ffdccc75090 R09: 00000000ffffffff [ 128.426075][ T1627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdccc75120 [ 128.435539][ T1627] R13: 00007fef54c34474 R14: 000000000001dba4 R15: 00007ffdccc75160 [ 128.444216][ T1627] [ 128.447352][ T1627] ---[ end trace 0000000000000000 ]--- [ 128.453326][ T1627] ------------[ cut here ]------------ [ 128.458976][ T1627] WARNING: CPU: 0 PID: 1627 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 128.468971][ T1627] Modules linked in: [ 128.473019][ T1627] CPU: 0 UID: 0 PID: 1627 Comm: syz-executor Tainted: G W syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 128.486648][ T1627] Tainted: [W]=WARN [ 128.490547][ T1627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.500882][ T1627] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 128.506724][ T1627] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 82 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c eb 5d 03 cc e8 26 be 3e ff <0f> 0b e9 3e ff ff ff e8 1a be 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 128.526561][ T1627] RSP: 0018:ffffc9000e19fb88 EFLAGS: 00010293 [ 128.532649][ T1627] RAX: ffffffff8248b39a RBX: 0000000000000000 RCX: ffff888118069300 [ 128.540662][ T1627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.548766][ T1627] RBP: ffffc9000e19fbb0 R08: ffff88812f9ef37f R09: 1ffff11025f3de6f [ 128.556740][ T1627] R10: dffffc0000000000 R11: ffffed1025f3de70 R12: 0000000000000000 [ 128.564767][ T1627] R13: dffffc0000000000 R14: ffff88812f9ef2e0 R15: ffff8881264c4660 [ 128.572787][ T1627] FS: 000055556b673500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 128.581754][ T1627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.588446][ T1627] CR2: 000000110c351d2d CR3: 000000012a602000 CR4: 00000000003526b0 [ 128.596809][ T1627] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.604898][ T1627] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 128.612980][ T1627] Call Trace: [ 128.616386][ T1627] [ 128.619489][ T1627] ovl_do_remove+0x824/0xd10 [ 128.624293][ T1627] ? ovl_set_redirect+0x780/0x780 [ 128.629353][ T1627] ? __cfi_down_write+0x10/0x10 [ 128.634228][ T1627] ovl_rmdir+0x1e/0x30 [ 128.638318][ T1627] vfs_rmdir+0x3de/0x560 [ 128.642565][ T1627] incfs_kill_sb+0x197/0x220 [ 128.647207][ T1627] deactivate_locked_super+0xd5/0x270 [ 128.652616][ T1627] deactivate_super+0xb8/0xe0 [ 128.657347][ T1627] cleanup_mnt+0x438/0x4d0 [ 128.661806][ T1627] __cleanup_mnt+0x1d/0x40 [ 128.666247][ T1627] task_work_run+0x1e8/0x260 [ 128.670936][ T1627] ? __cfi_task_work_run+0x10/0x10 [ 128.676174][ T1627] ? __x64_sys_umount+0x12e/0x180 [ 128.681330][ T1627] ? __cfi___x64_sys_umount+0x10/0x10 [ 128.686806][ T1627] ? __kasan_check_read+0x15/0x20 [ 128.691883][ T1627] resume_user_mode_work+0x35/0x50 [ 128.697050][ T1627] syscall_exit_to_user_mode+0x63/0xb0 [ 128.702632][ T1627] do_syscall_64+0x63/0xf0 [ 128.707076][ T1627] ? clear_bhb_loop+0x50/0xa0 [ 128.711824][ T1627] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 128.717766][ T1627] RIP: 0033:0x7fef54b9f317 [ 128.722232][ T1627] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 128.742143][ T1627] RSP: 002b:00007ffdccc73fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 128.750938][ T1627] RAX: 0000000000000000 RBX: 00007fef54c34474 RCX: 00007fef54b9f317 [ 128.758952][ T1627] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdccc74090 [ 128.767142][ T1627] RBP: 00007ffdccc74090 R08: 00007ffdccc75090 R09: 00000000ffffffff [ 128.775198][ T1627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdccc75120 [ 128.783444][ T1627] R13: 00007fef54c34474 R14: 000000000001dba4 R15: 00007ffdccc75160 [ 128.791480][ T1627] [ 128.794520][ T1627] ---[ end trace 0000000000000000 ]---