last executing test programs: 17.224052246s ago: executing program 1 (id=38): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=ANY=[@ANYBLOB="4c060000", @ANYRES16=r4, @ANYBLOB="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"], 0x64c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r5 = socket$nl_generic(0x10, 0x3, 0x10) writev(r5, &(0x7f0000000200), 0x20) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x5165, 0x40000, 0x3, 0xe2}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6e9, 0x10000, 0x0, 0x347, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbcf6, 0x100, 0x3, 0x1eb, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa6c1, 0x4000, 0x1, 0x32a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8776, 0x4, 0x0, 0x2a3, 0x0, r0}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f0000000280)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2}, 0x0, 0x0, '\x00', {0x2, 0x16, 0x0, &(0x7f0000000840)=@buf_max_buf="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"}}, &(0x7f00000018c0)) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="210329bd7000fcdf002517"], 0x14}, 0x1, 0x0, 0x0, 0x404c855}, 0x4) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r10, 0xc144f000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000020f000/0x400000)=nil) fadvise64(r10, 0x5, 0x4, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap$IORING_OFF_SQES(r7, 0x2e) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0xfffd, 0x4}}}, &(0x7f0000000300)) r11 = socket(0x28, 0x805, 0x0) r12 = syz_io_uring_complete(r1, r6) ioctl$VHOST_SET_FEATURES(r12, 0x4008af00, &(0x7f0000000340)=0x1c) bind$vsock_stream(r11, &(0x7f0000000580)={0x28, 0x0, 0x0, @local}, 0x10) listen(r11, 0x4) accept4$unix(r11, 0x0, 0x0, 0x800) 17.166392947s ago: executing program 1 (id=41): personality(0x4000000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x2000000db002) brk(0x200000ffc000) 16.860088354s ago: executing program 1 (id=42): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x2, 0x3, 0x0, 0x3, 0x15, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, '\x00'}, @sadb_address={0x5, 0x6, 0x0, 0x80, 0x0, @in6={0xa, 0x4e21, 0x10000, @remote, 0x73f}}, @sadb_lifetime={0x4, 0x2, 0x5, 0x1ad, 0x7, 0x8}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xafca}, @in6={0xa, 0x4e23, 0x2000, @loopback, 0x1e8}}]}, 0xa8}, 0x1, 0x7}, 0x34008014) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x6, 0x1701) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f00000000c0)={0x82ae, 0x1, [{}]}) sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22001, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r5, 0x4008ae48, &(0x7f0000000000)=0x50000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setresuid(0x0, 0xee01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="0f21af66baf80cb8c66c1a84ef66bafc0c66b8000066ef66b867008ed066b8ea000f00d042cdd748b8c82dc56d000000000f23c00f21f83502000f000f23f8c481edd2d1c4027d790248b807000000000000000f23c00f21f835020009000f23f80f00560f", 0x65}], 0x1, 0x4f, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r11, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) syz_usb_connect$midi(0x6, 0x4e, 0x0, 0x0) fsopen(0x0, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000009, 0x401d031, r1, 0x0) ioctl$sock_bt_hci(r12, 0x400448dd, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB="000000a893f4352e41e27c98f5a468b402fa979b37e58272414cdb175e55d0e7d8d19bc52ea647cba06b88ad553eb3fbe105d8140655b1ad8dfb7d7e90d75330018bb464fbe6cc37f20402c96dcc8afb5c69e41922e9fe1ad7d7087de020b5f717f11467c2152610e609edeaf5139721e3b7712d3ae877471192c8168bb9b5790d9ef49af8fae7c990a3e398a5316e96a2abab9c1735b9472a607634a2feca8ed8bf", @ANYRES16=r3, @ANYRES16, @ANYRES32=r13, @ANYRES64=r2], 0x44}}, 0x0) 16.208201061s ago: executing program 1 (id=45): setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)="a271a3c1f845e58adf7a5ea44a88f95303a4cded3a84a6dd3f7a6a6308da149207324dc6440bfee16c7afca07bb7c82ed3dff44ac90ebee9b40d4d3a83d7bd605e08cd1486c9356e76c13ecf129eeb8d2842b25da3c1fed99221aef75f8a849d4afe182e5b63e2d634be00a084b170d8ec275c1f5807763c6a60ed6f66dbdb67ea65836c4153f2e7409be8618d58ae9023ad82fcd8ed3e", 0x97, 0x3) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000340)=0x7ff, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_GET_KEEPCAPS(0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2, 0x1f00}, 0x1c) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="240000002100010000000000000000000a00edffffffff0001620000080002"], 0x24}], 0x1}, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x120) ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0) syz_usb_connect$midi(0x0, 0x50, &(0x7f0000000380)=ANY=[@ANYBLOB="1201100100000040b4041e9340000102030109023e00010105000d09040000030103000809050400ff0303000205259bc963880103cfeef8090502030000080000052501018500"/80, @ANYRESOCT=r1, @ANYRESDEC=0x0, @ANYBLOB="2d3f9f1aea5fda42722891131cc90e9ff49868b56f076826c25a750a7aebfce51bf2fb0b59cd2df71acde95d75b509d4891b5e7ad483e1fe0844701f96b50440929b79c1027cdbf8e7048dd4fe73e83074b9c976a9e8d8ca560bab603e48d9c09bf55129a5b8e27141725afdb31ea1b8f00a9586c548edaf00da7cfedd5a53cea94c1077a1a68447d383401c498d0ef02115bb8ca1b00219286ca385a2787ee8e4ebbba02628dbeb5e2848b2c6c9c0a62650e49438fe31a64d068899df3c79a0d031e302c888752d564076b6d162c9f13838914f0707116fdfc32c395522", @ANYRESHEX=r0], 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000005c0)={0x4, 0x1, {0x401, @struct={0x0, 0x60000000}, 0x0, 0x2, 0x9, 0x3, 0x1800, 0x97, 0x0, @struct={0x5, 0x10001}, 0x8001, 0x101, [0x7, 0x0, 0x3, 0x7, 0x0, 0x7]}, {0x0, @struct={0x1, 0xcc2}, 0x0, 0x1, 0x3e, 0x9ea, 0x5, 0x1, 0x42, @struct={0xf0, 0x5}, 0x81000000, 0x6, [0x4, 0xff, 0x8, 0x7, 0x5, 0x7]}, {0x5, @usage=0x9, 0x0, 0x3, 0x4, 0x0, 0x4, 0x6, 0x800, @usage=0x7, 0x6, 0x8001, [0x18, 0x800, 0x9, 0x8, 0x8db, 0x81]}, {0x873e, 0x4, 0xfa11}}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f00000009c0)={r5, "e6fa2b4caa90de8d4f100c3fd892bb7a"}) 15.04579133s ago: executing program 1 (id=46): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='my_debugfs/asoc/dais\x00', 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180)) ptrace$getregset(0x4204, r3, 0x1, &(0x7f00000005c0)={&(0x7f00000004c0)=""/200, 0xc8}) recvmmsg(r2, 0x0, 0x0, 0x10120, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000080)={'wg1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) 15.023464191s ago: executing program 1 (id=47): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000002c0)={@broadcast, @private=0xa010101, 0x1, 0x3, [@multicast2, @rand_addr=0x64010102, @empty]}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\x87\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?o9\x85\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\xe7\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc1R\xda8\x7f}0\xec\xa9)a_\n\xbcf\xe6\xb3\x8b=\xbc\xdb\xb7\xe3\xc2W\xd9\fL\xf5t\xea\x15;\x8d\xad\x93\x11\xe3\x89\xb19k\x8fF\xfc\xd0\xcfz\a#zcv\xb2\x10\x02\xe4\x94:\x88L\xe8A\x88l', 0x0) setrlimit(0x1, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x1c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x40000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000009}, 0x4000000) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x70b5) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x15, 0x0, 0x4, 0x2}, {0x7, 0x0, 0xc}]}) write$selinux_load(r1, &(0x7f0000000440)={0xf97cff8c, 0x8, 'SE Linux', "a712eb88dbabc891e7389678fc01d5695fe038d01c3b504a73c3ca13cb7dd3a020c604707e05b56fd180b8f8da67ad8b3ca201306ad510310e972c20fc969c81fcf4fa9fdfa0d8e2515af924f70fea4dbc58e495026470714540ba72dd06749e30a62260ab7f02ee6a5849ff3dc259b7a1133933cc290be7220736c78f3ecb88a4c753f31539a29b994927150cecbd37339101f5ab55fa59e673821fe1beb4962a31e3b57e15df84654baaf6d17db3cf616fbd1ad6fb4cebbe75903d3b0d2ec2f766cc1694c3f0349f6d856e9af7ccceda5f6c662f5f8fc820bab32c2fe2a065b6083e2ef0e5198ce0c02e1db4f4d88d"}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 4.420770268s ago: executing program 3 (id=116): ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000000)={0x10001, 0x2, 0x0, [{0x8cc, 0xffff, 0x200000000000, 0xf8, 0xf9, 0x7f, 0x9, '\x00', 0x4}, {0x8, 0x1, 0x1, 0x1, 0xd5, 0x3b, 0xff, '\x00', 0x6}]}) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f00000000c0)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100)) ioctl$BLKGETNRZONES(0xffffffffffffffff, 0x80041285, &(0x7f0000000140)=0xfffffff7) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000480)={{0x1b8, 0x4, 0x7, 0x2, 0x8}, &(0x7f0000000180)=[{}, {}, {}, {}]}) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000500)=0x3, 0x4) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000540)={0x4, 0xfffffff8}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000580), 0xb8000, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f00000005c0)) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000600)=""/124, &(0x7f0000000680)=0x7c) ioctl$BLKGETZONESZ(r1, 0x80041284, &(0x7f00000006c0)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x24008818) r5 = signalfd(r0, &(0x7f0000000880)={[0xf]}, 0x8) pwrite64(r2, &(0x7f00000008c0)="bd41d440dcac543709072b5dcf0bd0e721c0d1128f14da44b5dafe2bba1b31d2af1c7bb4149ba313336056ba5510f122543522e9c57e2b211633b8630b6f4e53ae7dc486dca093ff934ae3df673155a0722e4198f20cf818547de4fdde8f", 0x5e, 0x9d1) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r2) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000001a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a00)={&(0x7f00000009c0)={0x103c, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1010, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x70}]}]}]}, 0x103c}, 0x1, 0x0, 0x0, 0x10}, 0x40084) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000001a80), &(0x7f0000001ac0)={0x0, 0xfb, 0xc4, 0x5, 0xfd, "41c1503327ad6ef6bf25e8ed1ba6510f", "e036e802130aa12952508f0579807302f6121a2ee2d3635da5c31e69434c7699f91ef815046cacd9eafe2e16490d63cea84eedd374580dc847a2b3358c36ceb6bc13ff763bc757e4eb51760b6f0a2520b3cd74193b9abec19b0f97104045922a98bd1f328df5c2ad249a6ee13bb46fba72d06278eded6148612a6fb06b089cd840f392eaf49e4529edb1d52bbe9bd492610487d06f44df8920c07f0e072b845c379eaaa20077c93bdd2b00a1b51180"}, 0xc4, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000001bc0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000001c00)) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000001c40)={0xaa, 0x1}) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000001c80)) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x24, 0x0, 0x200, 0xe3c, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r2) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x2c, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$BLKCRYPTOIMPORTKEY(0xffffffffffffffff, 0xc0401289, &(0x7f0000001f80)={&(0x7f0000001f00)="ec789a444e91c41281f17b44bf78610424223c9e8a6df2a6d431479bfb1a1921d3b33b3fa8ef3a43acffe218c68d364ae0", 0x31, &(0x7f0000001f40)=""/25, 0x19}) 4.420321108s ago: executing program 3 (id=117): syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x2a39, 0x3fa0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x5, 0x0, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xb, 0x3, 0x7, {0x7, 0x25, 0x1, 0x4, 0x4, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xd, 0x7, 0x6, {0x7, 0x25, 0x1, 0x4, 0x1, 0x6}}}}}}}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000740)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x3b, 0x3, 0x200000000, 0xc}}], 0x38}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000600)={0x1, 0x0, [{0x0, 0xd794, 0x1, 0x76, 0x7, 0x80ce, 0x2000002}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x10000a, 0xe4, 0x40000}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_ep_write(r7, 0x81, 0x0, &(0x7f0000000000)) syz_usb_ep_write(r7, 0x81, 0x0, 0x0) syz_usb_ep_write(r7, 0x81, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) mount(&(0x7f0000000040)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hfsplus\x00', 0x2001000, 0x0) 2.964055985s ago: executing program 3 (id=129): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000100)='/\'\x00', 0x20a000, &(0x7f00000003c0)={@_ha_fsid={[0x3, 0x9c8]}, {0x6, 0x0, 0xfffffff9, 0x10}}, 0xffc000, &(0x7f0000000400), &(0x7f00000004c0)=0x8}) ioctl(r0, 0x9, &(0x7f0000000540)="baf038aeed7181f2e65f57a9f434") unshare(0x64000600) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) close(r2) (async, rerun: 32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r4 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 64) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000140)={r5, r5, 0x6, 0x0, 0x0, 0x9, 0x9, 0x0, 0x3, 0x8, 0x2, 0x1, 'syz1\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x8, &(0x7f0000000200), 0x4) (async) r9 = fsmount(r4, 0x0, 0x82) ioctl$NILFS_IOCTL_GET_VINFO(r8, 0xc0186e86, &(0x7f0000000240)={&(0x7f0000000180)=[{0x9, 0x0, 0x5, 0xfffffffffffffff8}, {0x3, 0x7788, 0x3d, 0x1}, {0x800, 0xfffffffffffffffb, 0x1000, 0x7}, {0xffffffffffffffff, 0x3, 0x7fffffffffffffff, 0x62e}], 0x4, 0x20, 0x5, 0xfffffffffffffffc}) (async) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r11, 0x1, 0x3f, 0x0, &(0x7f0000000780)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', r10, 0x4, 0x6, 0x51, 0x7, 0x5e, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x10, 0x374, 0x5}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) accept4(r3, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000300)=0x80, 0x80800) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', r12, 0x1, 0x8050, 0x5, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @loopback}}}}) (rerun: 64) 2.868163827s ago: executing program 3 (id=130): r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200601, 0x2) setuid(0x0) syz_usb_connect$uac2(0x5, 0x9f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003000000209904091540000102030109028d00030104007f080b0101010a20020904000000010120000924010700051500b20c24030501070a25007f00a00904f200000102200009040101010102200008240201e603040610240105050002100000050500000044090501090002"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x52b242d) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="000e50"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000003c0)={0x20, 0x14, 0x6c, "cd320e2c4650eaa85502705daff961126db952268052e7555994231cab127751e90bffc02f242d9b08c98b2640b03a54e01a1f471af58fa78dc97e372354c18021c47f75a8af3377c03a49cb511a77ba3858d76b9a6a4c8963e27c639296ec9c1c47f7790599e4a7f1b948a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r3) add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000004c0)={0x3, 0x0, @a}, 0x48, 0xfffffffffffffff9) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x800) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) r7 = openat(r6, &(0x7f0000000340)='.\x00', 0x400, 0x0) lseek(r7, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) syz_usb_connect$uac1(0x1, 0xfffffffffffffe8c, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x8, 0x90, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xf, 0x7, 0x40, {0x7, 0x25, 0x1, 0x0, 0x5, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8c, 0x19, 0xfa, {0x7, 0x25, 0x1, 0x0, 0x4, 0x7}}}}}}}}]}}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000200)=""/21, 0x15}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r11 = dup3(r10, r9, 0x0) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, 0x0) 2.304711681s ago: executing program 0 (id=132): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000cdc000/0x1000)=nil) 2.240194143s ago: executing program 0 (id=133): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000400)=0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000380)=""/245, &(0x7f0000000880)=""/87, &(0x7f0000000780)=""/103}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000300)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001040)={0x1, 0x0, [{0x20000, 0x1, &(0x7f0000000a00)=""/1}]}) capset(&(0x7f0000000180)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r4 = gettid() capget(&(0x7f00000001c0)={0x20071026, r4}, &(0x7f0000000100)={0xdbb, 0xc, 0x7, 0x1, 0x1, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) 2.238343803s ago: executing program 0 (id=134): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_open_dev$ublk_chdev(&(0x7f0000002000), 0x0, 0x2) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000280)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3ff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x2, 0x67d, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x14}}}, &(0x7f0000000340)=0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r8, 0xa}, 0x10) (async) syz_ublk_setup_queues(r4, r5, &(0x7f0000000700)={0x0, 0x0, 0x800}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1c9c, 0x0, 0x0, 0x32d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0xfffffffd}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1000}}], 0x1, 0x0, 0x0) 2.231309933s ago: executing program 0 (id=135): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @dev}, 0x10) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x4, 0x3) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000100)=""/188) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f00000001c0)) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000200)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000240)=0x7fff) ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000280), &(0x7f00000002c0)=0x40) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000300)=""/30, 0x1e, 0x40012001, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000380)) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r1) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r2, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mlockall(0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000500)={0x0, 0x7}) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa8, 0x464, 0x2, 0x70bd25, 0x25dfdbfe, "258dffa67c8e7f03074694e3b4d138fd547b89182a12369b90ba2ad7d4e989f5f22e51ea8335c8c62c99e98fd69620d4854c723037684214209daf3d360dda877d9c11991638d770c0567721746cf895e1c5734b976842cbb87118dbcce82d3c2ff4f4ecc04f6d8fabdd0ebcb96c00af7539bfe408f15ade1939db20d6d6f5056c4a69d1eded6b471c81375e325fdb800517d7d2f8", [""]}, 0xa8}, 0x1, 0x0, 0x0, 0x40d5}, 0x40810) write$P9_RLERRORu(r1, &(0x7f00000006c0)={0x19, 0x7, 0x1, {{0xc, '^@{^]:!%/.@{'}, 0x661}}, 0x19) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000700)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000780)={'filter\x00', 0x74, "920baf350992260f0e5f23bd3b657fa68401290c742c8c22392f97e7965982aefd840b1abb668edc72d194c6b2ab307923050255f6b241cd0a9306c4cefed51f29b39b71a6b1c66e70ebfab2bfe907e433d443c39d7fdc638cae1d74bef7662e5c8c291b454e346cf2bb73d3e4a2dc3af5ac265b"}, &(0x7f0000000840)=0x98) connect$bt_l2cap(r1, &(0x7f0000000880)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x1}, 0xe) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000008c0)=0x0) kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, r1, &(0x7f0000000900)={r3, r3, 0x800}) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000940)={'pim6reg0\x00'}) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x174) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000980)={0x50000018}) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000009c0)=0x4, 0x4) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000a00)) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000a40)) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000a80)) 2.180858524s ago: executing program 0 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd4000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="f081550000a000000f0048180045000fbe252e8a094d36420f705626002e660f3a176a4b00b9800000c00f3267420f01c30f5966ba2c0cb8c087678eef66ba470f080ced45c194710a000000058a3bc4827dbcae009008f2", 0x58}], 0x1, 0x2a, 0x0, 0x0) memfd_create(&(0x7f0000000300)='/dev/kvm\x00', 0x5) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) write$snapshot(0xffffffffffffffff, &(0x7f0000000380)="950048e05961d439dd5b114b205081e90ee0421432e2b639c54fcb7a6580bb09578676c3a999194834737702a73f67f4e5d64605e524373fd02b2f68482002cae16350d450791b8a05b3351b035ad98f", 0x50) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x1000, 0xfffffffffffffffc}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) dup3(r1, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x0, 0x622100) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r5}, @fd}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2d, &(0x7f0000000000)=[@cr4={0x1, 0x9a0}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.718875917s ago: executing program 0 (id=137): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x13, 0x0, &(0x7f0000000280)) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)="18607651149dbeab38fd95af55a3f399c02f7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52b19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) syz_usb_connect$uac2(0x1, 0xb8, &(0x7f0000000180)=ANY=[@ANYRES8=r1], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1]}, 0x8, 0xa641f72ddafdd055) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) socket(0x10, 0x6, 0x0) 1.58425797s ago: executing program 3 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) epoll_create(0x4) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d1ad11d9666e065b29b344d8af5e980dbf007003a2817bbf5434941c37b088561c5257afe847bc2b7bbebd24d142cdc8ae610133afffaada0330e11eff3d030e2ade91c69b7d8f7e47cb92fd536a50a4a16aee9c901423a960836a0e13066401f", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',ignoreqv,\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) (async) epoll_create(0x4) (async) pipe2$9p(&(0x7f0000000080), 0x800) (async) dup(r1) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d1ad11d9666e065b29b344d8af5e980dbf007003a2817bbf5434941c37b088561c5257afe847bc2b7bbebd24d142cdc8ae610133afffaada0330e11eff3d030e2ade91c69b7d8f7e47cb92fd536a50a4a16aee9c901423a960836a0e13066401f", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',ignoreqv,\x00']) (async) 1.58358354s ago: executing program 3 (id=139): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc51b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x40, "", [{{0x9, 0x4, 0x0, 0x10, 0xfe, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x81, 0x2}}}}}]}}]}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0xffffffff, 0x0, 0x0, 0x1202, 0x80, 0x6}}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x31, 0x28, {0x28, 0x4, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.106066292s ago: executing program 2 (id=140): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00') (async) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x9, &(0x7f0000000040)={[{}]}) sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtaction={0x18, 0x31, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) 1.076806993s ago: executing program 2 (id=141): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000002100)=ANY=[@ANYBLOB="5c0000001500010029bd7000fcdbdf25ff0200000000000000000000dbd606f192f34ff6a8b836aea00000000100000000000000000000ffff000000004e2300", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b26b6e00020000000a0010000100000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000038c0)={0x20, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@generic="f4837e629eda4a7ea9"]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x7, 0x5, 0x4, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x10, 0x8, 0x2}}) read$FUSE(0xffffffffffffffff, &(0x7f0000005440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000007480)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, 0x4e24, 0x8, 0x4e23, 0x7, 0x8, 0xc0, 0x0, 0x3c, r3, r4}, {0x8000, 0x10000, 0x2, 0x92, 0x2, 0x8, 0x1, 0x939d}, {0x9, 0x1, 0x7, 0x1}, 0x0, 0x6e6bb9, 0x1, 0x1, 0x2}, {{@in=@rand_addr=0x64010101, 0x4d2, 0xff}, 0x2, @in6=@private1, 0x34ff, 0x4, 0x1, 0x9, 0x5, 0x8, 0x1}}, 0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRESOCT=r1, @ANYBLOB="881eba08a9691787ab8f492190fbea86ff868c545b3a4d8ac021ed85797a368ba1801d3f8b747f7f71c42310109b2d97282ede77bf7edd0917280d04d4690c22e66cabf0cefb5432b4e2077ebaccb8e87b27848b6b7cd04b10cde94003df03cf9f7d5408214a0aedaf8cb8d75090603936824140a3772e12b861b4876733a522c9536f1cabd504f496fdb446e32d775509ff54781e116ab3f4f82f0697152a8943a90ad9964a2f8a922b0c71f60d90ac1228bea5f6a8fe0ac1b419522986fbe8c17d07a51d220ce9164662e8596c20dad8bc525a3098594f", @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006dc7350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r6, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x10001, 0x0, 0x0, 0x8, 0x8000, 0xc}, 0x20) r8 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b800000014000100feffffff00004000e00000020000000000006795036800000000000000000000000000000000000000000000000000000a00000087000000ed3c09b7cc963f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 1.008317844s ago: executing program 2 (id=142): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) (async) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) (async, rerun: 32) close_range(r0, r0, 0x0) (rerun: 32) userfaultfd(0x0) 994.000964ms ago: executing program 2 (id=143): mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x198) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="380100001000010028bd700000010000fe880000000000000000000000000001fc010000000000000000000000000002000115b24e230005020000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d433000000ac1414bb00000000000000000000000000000000000000009201000000000000fbff000000000000ffff0000000000001c250800000000000100000001000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000002300000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a000200200000000000000048000100686d6163287368613235362900"/240], 0x138}, 0x1, 0x0, 0x0, 0x8005}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x198) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) (async) syz_open_procfs(0x0, &(0x7f0000000e00)='maps\x00') (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="380100001000010028bd700000010000fe880000000000000000000000000001fc010000000000000000000000000002000115b24e230005020000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d433000000ac1414bb00000000000000000000000000000000000000009201000000000000fbff000000000000ffff0000000000001c250800000000000100000001000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000002300000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a000200200000000000000048000100686d6163287368613235362900"/240], 0x138}, 0x1, 0x0, 0x0, 0x8005}, 0x0) (async) 975.109405ms ago: executing program 2 (id=144): socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmsg(r1, &(0x7f0000003e00)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x4}, 0x10) r3 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r3], 0x20}}, 0x40816) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000100)={0x0, r3, r2, 0x80, 0x7820ac72, '\x00', {0x7, 0x7, 0x9, 0x1, 0x8, 0x51c, 0x3, 0x11, {0xffff}, {0x5, 0x8237}, {0x7fffffffffffffff, 0x4}, 0x8, 0x7fffffff, 0x101, 0x497, 0x3, 0x4, 0x6, 0x1, 0x3, 0x2, '\x00', 0xd, 0x10, 0x56b, 0x3}}) 75.899428ms ago: executing program 2 (id=145): userfaultfd(0x80001) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x18, 0x2, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000100)=0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'pimreg0\x00', {0x2, 0x4e21, @remote}}) (async) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r4, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0xa, 0x4, 0x30, 0x12, @private0, @private2={0xfc, 0x2, '\x00', 0xff}, 0x10, 0x80, 0xfffffffc, 0x4c51}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) (async) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) (async) setpriority(0x2, 0xff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) (async) r8 = socket$unix(0x1, 0x2, 0x0) (async) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1}, 0x6e) (async) r10 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r11 = landlock_create_ruleset(&(0x7f0000000080)={0xf4da, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r11, 0x0) landlock_restrict_self(r10, 0x0) (async) connect$unix(r8, &(0x7f0000000640)=@file={0x1}, 0x6e) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) syz_ublk_setup_queues(r7, r2, &(0x7f0000000180)={0x0, 0xfffffffa, 0x4000, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0xffffff, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x85fd, 0x40e7, 0x3, 0x241}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x0, 0x40000001, 0x148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x400, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 0s ago: executing program 32 (id=47): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000002c0)={@broadcast, @private=0xa010101, 0x1, 0x3, [@multicast2, @rand_addr=0x64010102, @empty]}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\x87\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?o9\x85\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\xe7\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc1R\xda8\x7f}0\xec\xa9)a_\n\xbcf\xe6\xb3\x8b=\xbc\xdb\xb7\xe3\xc2W\xd9\fL\xf5t\xea\x15;\x8d\xad\x93\x11\xe3\x89\xb19k\x8fF\xfc\xd0\xcfz\a#zcv\xb2\x10\x02\xe4\x94:\x88L\xe8A\x88l', 0x0) setrlimit(0x1, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x1c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x40000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000009}, 0x4000000) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x70b5) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x15, 0x0, 0x4, 0x2}, {0x7, 0x0, 0xc}]}) write$selinux_load(r1, &(0x7f0000000440)={0xf97cff8c, 0x8, 'SE Linux', "a712eb88dbabc891e7389678fc01d5695fe038d01c3b504a73c3ca13cb7dd3a020c604707e05b56fd180b8f8da67ad8b3ca201306ad510310e972c20fc969c81fcf4fa9fdfa0d8e2515af924f70fea4dbc58e495026470714540ba72dd06749e30a62260ab7f02ee6a5849ff3dc259b7a1133933cc290be7220736c78f3ecb88a4c753f31539a29b994927150cecbd37339101f5ab55fa59e673821fe1beb4962a31e3b57e15df84654baaf6d17db3cf616fbd1ad6fb4cebbe75903d3b0d2ec2f766cc1694c3f0349f6d856e9af7ccceda5f6c662f5f8fc820bab32c2fe2a065b6083e2ef0e5198ce0c02e1db4f4d88d"}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) kernel console output (not intermixed with test programs): T36] audit: type=1400 audit(1785823916.810:62): avc: denied { rlimitinh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.440248][ T36] audit: type=1400 audit(1785823916.810:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 20.990269][ T36] audit: type=1400 audit(1785823924.370:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.991456][ T286] cgroup: Unknown subsys name 'net' [ 21.013027][ T36] audit: type=1400 audit(1785823924.370:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.040319][ T36] audit: type=1400 audit(1785823924.410:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.040478][ T286] cgroup: Unknown subsys name 'devices' [ 21.164443][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.170073][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.262213][ T36] audit: type=1400 audit(1785823924.640:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.285401][ T36] audit: type=1400 audit(1785823924.650:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.310122][ T36] audit: type=1400 audit(1785823924.650:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.338749][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.347539][ T36] audit: type=1400 audit(1785823924.730:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.373002][ T36] audit: type=1400 audit(1785823924.730:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.407364][ T36] audit: type=1400 audit(1785823924.790:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.432961][ T36] audit: type=1400 audit(1785823924.790:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.433224][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.688708][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.695877][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.703175][ T296] bridge_slave_0: entered allmulticast mode [ 22.709384][ T296] bridge_slave_0: entered promiscuous mode [ 22.716564][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.723669][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.730723][ T296] bridge_slave_1: entered allmulticast mode [ 22.737124][ T296] bridge_slave_1: entered promiscuous mode [ 22.756905][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.765243][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.772435][ T295] bridge_slave_0: entered allmulticast mode [ 22.778765][ T295] bridge_slave_0: entered promiscuous mode [ 22.792484][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.799542][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.806791][ T293] bridge_slave_0: entered allmulticast mode [ 22.813093][ T293] bridge_slave_0: entered promiscuous mode [ 22.819396][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.826529][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.833629][ T295] bridge_slave_1: entered allmulticast mode [ 22.839795][ T295] bridge_slave_1: entered promiscuous mode [ 22.863299][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.870357][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.877488][ T293] bridge_slave_1: entered allmulticast mode [ 22.883671][ T293] bridge_slave_1: entered promiscuous mode [ 22.929285][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.937131][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.944398][ T294] bridge_slave_0: entered allmulticast mode [ 22.950613][ T294] bridge_slave_0: entered promiscuous mode [ 22.957370][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.964435][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.971513][ T294] bridge_slave_1: entered allmulticast mode [ 22.977942][ T294] bridge_slave_1: entered promiscuous mode [ 23.089777][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.096976][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.104299][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.111454][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.127029][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.134147][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.141408][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.148457][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.188866][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.195954][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.203241][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.210263][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.222681][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.229728][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.237012][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.244060][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.261494][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.268952][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.276639][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.283879][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.291134][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.298721][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.305897][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.313139][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.329230][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.336295][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.345288][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.352339][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.364995][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.372033][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.383901][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.390949][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.422407][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.429619][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.446004][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.453086][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.469161][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.476245][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.484000][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.491023][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.508444][ T293] veth0_vlan: entered promiscuous mode [ 23.526598][ T295] veth0_vlan: entered promiscuous mode [ 23.539463][ T293] veth1_macvtap: entered promiscuous mode [ 23.566128][ T295] veth1_macvtap: entered promiscuous mode [ 23.574726][ T296] veth0_vlan: entered promiscuous mode [ 23.595632][ T294] veth0_vlan: entered promiscuous mode [ 23.609096][ T296] veth1_macvtap: entered promiscuous mode [ 23.627916][ T294] veth1_macvtap: entered promiscuous mode [ 23.641989][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.771913][ T332] tipc: Started in network mode [ 23.777171][ T332] tipc: Node identity ac14140f, cluster identity 4711 [ 23.784578][ T332] tipc: New replicast peer: 255.255.255.255 [ 23.790789][ T332] tipc: Enabled bearer , priority 10 [ 23.810064][ T328] hub 1-0:1.0: USB hub found [ 23.815165][ T328] hub 1-0:1.0: 1 port detected [ 23.820585][ T337] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.932539][ T66] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.992363][ T347] Zero length message leads to an empty skb [ 23.998417][ T347] syzkaller1: entered allmulticast mode [ 24.012020][ T13] device offline error, dev sda, sector 281526 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 24.023248][ T13] device offline error, dev sda, sector 282032 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 24.034621][ T13] device offline error, dev sda, sector 282542 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 24.045551][ T13] device offline error, dev sda, sector 283048 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 24.058730][ T50] device offline error, dev sda, sector 283558 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 24.069426][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35444) [ 24.072228][ T66] usb 2-1: device descriptor read/64, error -71 [ 24.080999][ T50] device offline error, dev sda, sector 283574 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 24.098071][ T50] device offline error, dev sda, sector 284080 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 24.108870][ T50] device offline error, dev sda, sector 284590 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 24.119708][ T50] device offline error, dev sda, sector 285096 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 2 [ 24.130569][ T50] device offline error, dev sda, sector 285606 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 24.141081][ T50] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35700) [ 24.153206][ T311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.161774][ T13] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35956) [ 24.177394][ T13] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2021 starting block 35958) [ 24.189145][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2021, error -5) [ 24.195971][ T352] fuse: Bad value for 'user_id' [ 24.203209][ T12] Buffer I/O error on device sda1, logical block 35920 [ 24.212026][ T64] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139302) [ 24.214300][ T12] Buffer I/O error on device sda1, logical block 35921 [ 24.225264][ T64] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139304) [ 24.235106][ T352] fuse: Bad value for 'user_id' [ 24.244194][ T64] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139328) [ 24.249326][ T12] Buffer I/O error on device sda1, logical block 35922 [ 24.260145][ T64] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139332) [ 24.268703][ T12] Buffer I/O error on device sda1, logical block 35923 [ 24.278659][ T64] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139346) [ 24.286186][ T12] Buffer I/O error on device sda1, logical block 35924 [ 24.297032][ T64] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2022 starting block 139350) [ 24.310441][ T12] Buffer I/O error on device sda1, logical block 35925 [ 24.322897][ T12] Buffer I/O error on device sda1, logical block 35926 [ 24.329901][ T12] Buffer I/O error on device sda1, logical block 35927 [ 24.337655][ T12] Buffer I/O error on device sda1, logical block 35928 [ 24.342247][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 24.344655][ T12] Buffer I/O error on device sda1, logical block 35929 [ 24.358359][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 24.367815][ T311] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.371114][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 24.389615][ T311] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 24.394164][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 24.403248][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.415760][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 24.426336][ T311] usb 1-1: Product: syz [ 24.436557][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 24.440735][ T311] usb 1-1: Manufacturer: syz [ 24.453149][ T66] usb 2-1: device descriptor read/64, error -71 [ 24.458635][ T311] usb 1-1: SerialNumber: syz [ 24.464070][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 24.481638][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 24.487815][ T311] usb 1-1: config 0 descriptor?? [ 24.494293][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 24.494391][ T12] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2022, error -5) [ 24.500637][ T110] udevd[110]: worker [345] terminated by signal 7 (Bus error) [ 24.515392][ T347] Buffer I/O error on dev sda1, logical block 0, lost async page write [ 24.525504][ T110] udevd[110]: worker [345] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 24.533875][ T73] Aborting journal on device sda1-8. [ 24.541896][ T311] sr9700 1-1:0.0: probe with driver sr9700 failed with error -22 [ 24.551132][ T73] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 24.556919][ T347] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 24.564215][ T73] JBD2: I/O error when updating journal superblock for sda1-8. [ 24.580212][ T110] udevd[110]: worker [313] terminated by signal 7 (Bus error) [ 24.581017][ T347] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 24.588601][ T110] udevd[110]: worker [313] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0' [ 24.615329][ T347] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 24.623830][ T347] Buffer I/O error on dev sda1, logical block 150, lost async page write [ 24.632405][ T347] Buffer I/O error on dev sda1, logical block 157, lost async page write [ 24.640847][ T347] Buffer I/O error on dev sda1, logical block 158, lost async page write [ 24.649315][ T347] Buffer I/O error on dev sda1, logical block 159, lost async page write [ 24.658072][ T347] Buffer I/O error on dev sda1, logical block 226, lost async page write [ 24.686709][ T110] udevd[110]: worker [318] terminated by signal 7 (Bus error) [ 24.695874][ T110] udevd[110]: worker [318] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 24.709344][ T347] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 24.754079][ T311] usb 1-1: USB disconnect, device number 2 [ 24.801109][ T66] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 24.830850][ T9] tipc: Node number set to 2886997007 [ 24.905425][ T366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 24.962424][ T66] usb 2-1: device descriptor read/64, error -71 [ 25.202292][ T66] usb 2-1: device descriptor read/64, error -71 [ 25.282242][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.282242][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.312538][ T66] usb usb2-port1: attempt power cycle [ 25.432251][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 25.438680][ T9] usb 3-1: config index 0 descriptor too short (expected 548, got 36) [ 25.447431][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.459042][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.462566][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 25.469268][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.487014][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 25.496263][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.506564][ T45] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 25.512656][ T9] usb 3-1: config 0 descriptor?? [ 25.515814][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.530467][ T45] usb 4-1: Product: syz [ 25.533171][ T110] udevd[110]: worker [359] terminated by signal 7 (Bus error) [ 25.536385][ T45] usb 4-1: Manufacturer: syz [ 25.542423][ T110] udevd[110]: worker [359] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 25.546877][ T45] usb 4-1: SerialNumber: syz [ 25.571035][ T110] udevd[110]: worker [360] terminated by signal 7 (Bus error) [ 25.579015][ T110] udevd[110]: worker [360] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 25.652235][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.672303][ T66] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 25.701584][ T66] usb 2-1: device descriptor read/8, error -71 [ 25.764361][ T45] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 25.798763][ T45] usb 4-1: USB disconnect, device number 2 [ 25.805261][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 25.822243][ T311] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 25.833207][ T66] usb 2-1: device descriptor read/8, error -71 [ 25.842416][ T311] usb 1-1: string descriptor 0 read error: -71 [ 25.848624][ T311] usb 1-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 25.880102][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.903319][ T311] r8152-cfgselector 1-1: Unknown version 0x0000 [ 25.909603][ T311] r8152-cfgselector 1-1: rejected 8 configurations due to insufficient available bus power [ 25.932920][ T311] r8152-cfgselector 1-1: no configuration chosen from 8 choices [ 25.947482][ T311] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 25.977813][ T9] hid-picolcd 0003:04D8:C002.0001: unknown main item tag 0x7 [ 25.985342][ T9] hid-picolcd 0003:04D8:C002.0001: unknown global tag 0xe [ 25.993137][ T9] hid-picolcd 0003:04D8:C002.0001: item 0 2 1 14 parsing failed [ 26.001044][ T9] hid-picolcd 0003:04D8:C002.0001: device report parse failed [ 26.008730][ T9] hid-picolcd 0003:04D8:C002.0001: probe with driver hid-picolcd failed with error -22 [ 26.082255][ T66] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 26.095330][ T36] kauditd_printk_skb: 86 callbacks suppressed [ 26.095347][ T36] audit: type=1400 audit(1785824185.484:160): avc: denied { write } for pid=401 comm="syz.0.26" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.128959][ T66] usb 2-1: device descriptor read/8, error -71 [ 26.180437][ T311] usb 3-1: USB disconnect, device number 2 [ 26.211250][ T36] audit: type=1400 audit(1785824185.594:161): avc: denied { create } for pid=406 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.212823][ T407] capability: warning: `syz.0.27' uses deprecated v2 capabilities in a way that may be insecure [ 26.231619][ T36] audit: type=1400 audit(1785824185.594:162): avc: denied { write } for pid=406 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.262985][ T36] audit: type=1400 audit(1785824185.594:163): avc: denied { setopt } for pid=406 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.263592][ T66] usb 2-1: device descriptor read/8, error -71 [ 26.282999][ T36] audit: type=1400 audit(1785824185.604:164): avc: denied { create } for pid=406 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.308302][ T36] audit: type=1400 audit(1785824185.604:165): avc: denied { setopt } for pid=406 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.365618][ T36] audit: type=1400 audit(1785824185.754:166): avc: denied { mounton } for pid=417 comm="syz.3.30" path="/9/file0" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.392447][ T66] usb usb2-port1: unable to enumerate USB device [ 26.410080][ T36] audit: type=1400 audit(1785824185.794:167): avc: denied { ioctl } for pid=419 comm="syz.0.31" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.550136][ T36] audit: type=1400 audit(1785824185.934:168): avc: denied { create } for pid=422 comm="syz.0.32" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.706923][ T36] audit: type=1400 audit(1785824186.094:169): avc: denied { map } for pid=432 comm="syz.2.34" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4084 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 26.743525][ T438] syz.1.33 uses obsolete (PF_INET,SOCK_PACKET) [ 26.752249][ T66] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 26.913983][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 26.922017][ T66] usb 4-1: not running at top speed; connect to a high speed hub [ 26.931857][ T66] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 26.941204][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.949247][ T66] usb 4-1: Product: syz [ 26.953528][ T66] usb 4-1: Manufacturer: syz [ 26.958140][ T66] usb 4-1: SerialNumber: syz [ 27.042276][ T387] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.173013][ T387] usb 3-1: device descriptor read/64, error -71 [ 27.422245][ T387] usb 3-1: device descriptor read/64, error -71 [ 27.672237][ T387] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.802239][ T387] usb 3-1: device descriptor read/64, error -71 [ 28.042227][ T387] usb 3-1: device descriptor read/64, error -71 [ 28.152398][ T387] usb usb3-port1: attempt power cycle [ 28.382233][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.402232][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 28.492548][ T387] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 28.513291][ T387] usb 3-1: device descriptor read/8, error -71 [ 28.532235][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 28.538888][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 28.548854][ T9] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 28.557949][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.563297][ T31] usb 2-1: config 1 has an invalid descriptor of length 136, skipping remainder of the config [ 28.565994][ T9] usb 1-1: Product: syz [ 28.576425][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 28.576458][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 28.577954][ T31] usb 2-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice= 0.40 [ 28.581277][ T9] usb 1-1: Manufacturer: syz [ 28.591663][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.604738][ T9] usb 1-1: SerialNumber: syz [ 28.613631][ T31] usb 2-1: Product: syz [ 28.634857][ T31] usb 2-1: Manufacturer: syz [ 28.639455][ T31] usb 2-1: SerialNumber: syz [ 28.663358][ T387] usb 3-1: device descriptor read/8, error -71 [ 28.902231][ T387] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 28.923278][ T387] usb 3-1: device descriptor read/8, error -71 [ 29.024726][ T469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.033352][ T469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.041795][ T9] usb 1-1: unit 0 not found! [ 29.053557][ T387] usb 3-1: device descriptor read/8, error -71 [ 29.162339][ T387] usb usb3-port1: unable to enumerate USB device [ 29.244844][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 29.245805][ T31] usb 2-1: MIDIStreaming interface descriptor not found [ 29.264576][ T9] usb 1-1: unit 0 not found! [ 29.264872][ T31] usb 2-1: USB disconnect, device number 6 [ 29.275525][ T9] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 29.287068][ T9] usb 1-1: unit 0 not found! [ 29.299461][ T9] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 29.315375][ T9] usb 1-1: USB disconnect, device number 4 [ 29.496244][ T66] usb 4-1: invalid MIDI in EP 0 [ 29.516327][ T66] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 29.531531][ T110] udevd[110]: worker [427] terminated by signal 7 (Bus error) [ 29.540987][ T66] usb 4-1: USB disconnect, device number 3 [ 29.547535][ T110] udevd[110]: worker [427] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 29.567278][ T110] udevd[110]: worker [477] terminated by signal 7 (Bus error) [ 29.574899][ T110] udevd[110]: worker [477] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0' [ 29.604377][ T481] udevd[481]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.629012][ T487] syzkaller1: entered promiscuous mode [ 29.634967][ T487] syzkaller1: entered allmulticast mode [ 30.001979][ T509] fuse: Bad value for 'fd' [ 30.432243][ T31] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 30.442367][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.564451][ T31] usb 3-1: device descriptor read/64, error -71 [ 30.614503][ T45] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 30.623633][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.631635][ T45] usb 4-1: Product: syz [ 30.636138][ T45] usb 4-1: Manufacturer: syz [ 30.640747][ T45] usb 4-1: SerialNumber: syz [ 30.653100][ T45] pl2303 4-1:1.0: pl2303 converter detected [ 30.660423][ T110] udevd[110]: worker [486] terminated by signal 7 (Bus error) [ 30.668323][ T45] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 30.675142][ T110] udevd[110]: worker [486] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 30.692333][ T110] udevd[110]: worker [482] terminated by signal 7 (Bus error) [ 30.700057][ T110] udevd[110]: worker [482] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0' [ 30.719547][ T110] udevd[110]: worker [481] terminated by signal 7 (Bus error) [ 30.812232][ T31] usb 3-1: device descriptor read/64, error -71 [ 30.812233][ T66] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 30.854437][ T45] usb 4-1: USB disconnect, device number 4 [ 30.861543][ T45] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 30.879927][ T45] pl2303 4-1:1.0: device disconnected [ 30.965050][ T66] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 30.974401][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.982758][ T66] usb 1-1: Product: syz [ 30.986994][ T66] usb 1-1: Manufacturer: syz [ 30.991598][ T66] usb 1-1: SerialNumber: syz [ 31.003329][ T66] pl2303 1-1:1.0: pl2303 converter detected [ 31.012764][ T66] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 31.072229][ T31] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 31.204914][ T66] usb 1-1: USB disconnect, device number 5 [ 31.212295][ T66] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 31.222259][ T31] usb 3-1: device descriptor read/64, error -71 [ 31.222426][ T66] pl2303 1-1:1.0: device disconnected [ 31.403281][ T584] UHID_CREATE from different security context by process 54 (syz.3.59), this is not allowed. [ 31.413524][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 31.413542][ T36] audit: type=1400 audit(1785824190.794:194): avc: denied { read write } for pid=583 comm="syz.3.59" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 31.448832][ T36] audit: type=1400 audit(1785824190.794:195): avc: denied { open } for pid=583 comm="syz.3.59" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 31.502237][ T31] usb 3-1: device descriptor read/64, error -71 [ 31.612418][ T31] usb usb3-port1: attempt power cycle [ 31.740333][ T589] can0: slcan on ttynull. [ 31.751052][ T36] audit: type=1400 audit(1785824191.134:196): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.777299][ T36] audit: type=1400 audit(1785824191.134:197): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=741 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.800218][ T36] audit: type=1400 audit(1785824191.134:198): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=741 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.848769][ T36] audit: type=1400 audit(1785824191.134:199): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=741 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.865371][ T588] can0 (unregistered): slcan off ttynull. [ 31.906621][ T36] audit: type=1400 audit(1785824191.294:200): avc: denied { load_policy } for pid=595 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 31.906760][ T596] SELinux: failed to load policy [ 31.952234][ T31] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 31.973309][ T31] usb 3-1: device descriptor read/8, error -71 [ 32.114017][ T31] usb 3-1: device descriptor read/8, error -71 [ 32.354806][ T31] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 32.383445][ T31] usb 3-1: device descriptor read/8, error -71 [ 32.411944][ T36] audit: type=1400 audit(1785824191.794:201): avc: denied { ioctl } for pid=607 comm="syz.3.67" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5509 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 32.443140][ T608] syzkaller1: entered promiscuous mode [ 32.448645][ T608] syzkaller1: entered allmulticast mode [ 32.513255][ T31] usb 3-1: device descriptor read/8, error -71 [ 32.622357][ T31] usb usb3-port1: unable to enumerate USB device [ 32.668635][ T36] audit: type=1400 audit(1785824192.054:202): avc: denied { ioctl } for pid=613 comm="syz.3.69" path="socket:[4844]" dev="sockfs" ino=4844 ioctlcmd=0x5841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.705267][ T36] audit: type=1400 audit(1785824192.054:203): avc: denied { write } for pid=613 comm="syz.3.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.962229][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 33.122220][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 33.128885][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.137674][ T31] usb 1-1: config 9 has an invalid interface number: 212 but max is 0 [ 33.146101][ T31] usb 1-1: config 9 has an invalid descriptor of length 46, skipping remainder of the config [ 33.156544][ T31] usb 1-1: config 9 has no interface number 0 [ 33.162921][ T31] usb 1-1: config 9 interface 212 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 33.176244][ T31] usb 1-1: config 9 interface 212 has no altsetting 0 [ 33.185078][ T31] usb 1-1: New USB device found, idVendor=0499, idProduct=1036, bcdDevice=cc.d5 [ 33.194544][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.202774][ T31] usb 1-1: Product: syz [ 33.207053][ T31] usb 1-1: Manufacturer: syz [ 33.223252][ T629] capability: warning: `syz.2.73' uses 32-bit capabilities (legacy support in use) [ 33.225033][ T31] usb 1-1: SerialNumber: syz [ 33.442830][ T621] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.502058][ T31] snd-usb-audio 1-1:9.212: probe with driver snd-usb-audio failed with error -2 [ 33.523694][ T31] usb 1-1: USB disconnect, device number 6 [ 33.636630][ T656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 33.636630][ T658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.79'. [ 33.912232][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.942228][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 34.072227][ T10] usb 3-1: device descriptor read/64, error -71 [ 34.072224][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 34.084747][ T45] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 34.094033][ T45] usb 4-1: config 0 has no interface number 0 [ 34.100148][ T45] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 34.110631][ T45] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 34.124999][ T45] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 34.152328][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.160443][ T45] usb 4-1: Product: syz [ 34.182209][ T45] usb 4-1: Manufacturer: syz [ 34.186844][ T45] usb 4-1: SerialNumber: syz [ 34.200915][ T45] usb 4-1: config 0 descriptor?? [ 34.208299][ T665] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 34.215755][ T665] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 34.322231][ T10] usb 3-1: device descriptor read/64, error -71 [ 34.379738][ T670] netlink: 'syz.0.83': attribute type 4 has an invalid length. [ 34.426821][ T665] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 34.438456][ T665] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 34.582277][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 34.652552][ T45] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 34.712216][ T10] usb 3-1: device descriptor read/64, error -71 [ 34.832230][ T66] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 34.952239][ T10] usb 3-1: device descriptor read/64, error -71 [ 34.992225][ T66] usb 1-1: Using ep0 maxpacket: 16 [ 34.998857][ T66] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.007525][ T66] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.017743][ T66] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 35.028602][ T66] usb 1-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice= 0.40 [ 35.038801][ T66] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.047024][ T66] usb 1-1: Product: syz [ 35.051301][ T66] usb 1-1: Manufacturer: syz [ 35.056753][ T665] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 35.064778][ T10] usb usb3-port1: attempt power cycle [ 35.070820][ T66] usb 1-1: SerialNumber: syz [ 35.083289][ T110] udevd[110]: worker [657] terminated by signal 7 (Bus error) [ 35.090956][ T110] udevd[110]: worker [657] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 35.284314][ T66] usb 1-1: unit 2 not found! [ 35.299785][ T110] udevd[110]: worker [663] terminated by signal 7 (Bus error) [ 35.307423][ T66] usb 1-1: USB disconnect, device number 7 [ 35.315310][ T110] udevd[110]: worker [663] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0' [ 35.327638][ T110] udevd[110]: worker [666] terminated by signal 7 (Bus error) [ 35.335314][ T110] udevd[110]: worker [666] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2' [ 35.346769][ T110] udevd[110]: worker [683] terminated by signal 7 (Bus error) [ 35.354466][ T110] udevd[110]: worker [683] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1' [ 35.371977][ T684] udevd[684]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.393366][ T110] udevd[110]: worker [684] terminated by signal 7 (Bus error) [ 35.402366][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 35.423295][ T10] usb 3-1: device descriptor read/8, error -71 [ 35.498809][ T45] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 35.511070][ T45] asix 4-1:0.34: probe with driver asix failed with error -71 [ 35.525556][ T45] usb 4-1: USB disconnect, device number 5 [ 35.553258][ T10] usb 3-1: device descriptor read/8, error -71 [ 35.822229][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 35.849198][ T699] virtio-fs: tag not found [ 35.855914][ T699] tmpfs: Invalid gid '0x00000000ffffffff' [ 35.861719][ T10] usb 3-1: device descriptor read/8, error -71 [ 35.934640][ T707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'. [ 36.007001][ T10] usb 3-1: device descriptor read/8, error -71 [ 36.132333][ T10] usb usb3-port1: unable to enumerate USB device [ 36.181826][ T714] block device autoloading is deprecated and will be removed. [ 36.273283][ T45] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 36.378972][ T719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.389054][ T719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.422246][ T45] usb 1-1: device descriptor read/64, error -71 [ 36.435793][ T719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.445185][ T719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.612231][ T311] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.662254][ T45] usb 1-1: device descriptor read/64, error -71 [ 36.743980][ T722] platform regulatory.0: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -5 [ 36.752283][ T311] usb 4-1: device descriptor read/64, error -71 [ 36.755196][ T722] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -5 [ 36.771366][ T722] platform regulatory.0: loading /lib/firmware/syzkaller/regulatory.db failed with error -5 [ 36.781755][ T722] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -5 [ 36.791129][ T722] platform regulatory.0: Direct firmware load for regulatory.db failed with error -5 [ 36.912238][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 36.992234][ T311] usb 4-1: device descriptor read/64, error -71 [ 37.052252][ T45] usb 1-1: device descriptor read/64, error -71 [ 37.062248][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 37.216094][ T10] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 37.242220][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.242250][ T311] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 37.262435][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 37.293260][ T45] usb 1-1: device descriptor read/64, error -71 [ 37.294077][ T10] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 37.308773][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.322302][ T10] usb 3-1: config 0 descriptor?? [ 37.332546][ T10] usb-storage 3-1:0.0: USB Mass Storage device detected [ 37.343943][ T10] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 37.393608][ T311] usb 4-1: device descriptor read/64, error -71 [ 37.413451][ T45] usb usb1-port1: attempt power cycle [ 37.536221][ T387] usb 3-1: USB disconnect, device number 15 [ 37.633852][ T311] usb 4-1: device descriptor read/64, error -71 [ 37.742328][ T311] usb usb4-port1: attempt power cycle [ 37.752242][ T45] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 37.773351][ T45] usb 1-1: device descriptor read/8, error -71 [ 37.903314][ T45] usb 1-1: device descriptor read/8, error -71 [ 38.082642][ T311] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 38.131136][ T311] usb 4-1: device descriptor read/8, error -71 [ 38.142238][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 38.162917][ T734] fuse: root generation should be zero [ 38.163407][ T45] usb 1-1: device descriptor read/8, error -71 [ 38.202230][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 38.202248][ T36] audit: type=1400 audit(1785824197.584:224): avc: denied { ioctl } for pid=735 comm="syz.2.101" path="socket:[5095]" dev="sockfs" ino=5095 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.233848][ T36] audit: type=1400 audit(1785824197.594:225): avc: denied { connect } for pid=735 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.260869][ T36] audit: type=1400 audit(1785824197.644:226): avc: denied { write } for pid=737 comm="syz.2.102" name="igmp" dev="proc" ino=4026532465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 38.284321][ T36] audit: type=1400 audit(1785824197.674:227): avc: denied { getattr } for pid=737 comm="syz.2.102" path="/" dev="nsfs" ino=4026532342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.293346][ T311] usb 4-1: device descriptor read/8, error -71 [ 38.321252][ T45] usb 1-1: device descriptor read/8, error -71 [ 38.338809][ T742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=742 comm=syz.2.103 [ 38.351412][ T742] x_tables: duplicate entry at hook 2 [ 38.432331][ T45] usb usb1-port1: unable to enumerate USB device [ 38.573316][ T311] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 38.593301][ T311] usb 4-1: device descriptor read/8, error -71 [ 38.664571][ T36] audit: type=1400 audit(1785824198.054:228): avc: denied { read } for pid=754 comm="syz.2.106" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.693304][ T36] audit: type=1400 audit(1785824198.054:229): avc: denied { open } for pid=754 comm="syz.2.106" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.717231][ T36] audit: type=1400 audit(1785824198.074:230): avc: denied { ioctl } for pid=754 comm="syz.2.106" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.723175][ T311] usb 4-1: device descriptor read/8, error -71 [ 38.854685][ T311] usb usb4-port1: unable to enumerate USB device [ 38.932236][ T66] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 39.094651][ T66] usb 3-1: Using ep0 maxpacket: 8 [ 39.101036][ T66] usb 3-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config [ 39.111379][ T66] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 39.121178][ T66] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 39.130372][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.141189][ T66] usb 3-1: config 0 descriptor?? [ 39.354034][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 39.410504][ T36] audit: type=1400 audit(1785824198.794:231): avc: denied { mmap_zero } for pid=762 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 39.454078][ T36] audit: type=1400 audit(1785824198.844:232): avc: denied { execute } for pid=762 comm="syz.3.109" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.497812][ T36] audit: type=1400 audit(1785824198.864:233): avc: denied { ioctl } for pid=762 comm="syz.3.109" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.544072][ T10] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 39.554408][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 39.563525][ T66] usb 3-1: string descriptor 0 read error: -71 [ 39.573039][ T66] usb 3-1: USB disconnect, device number 16 [ 39.587727][ T10] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=86.34 [ 39.599424][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.614249][ T10] usb 1-1: config 0 descriptor?? [ 39.622346][ T10] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 39.629235][ T10] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 39.662220][ T10] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 39.721178][ T768] kvm: kvm [767]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc1) = 0xe50000000000 [ 39.730671][ T768] kvm: kvm [767]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc2) = 0xe50000000000 [ 39.742259][ T768] kvm: kvm [767]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x11e) = 0xe500be702111 [ 39.754240][ T768] kvm: kvm [767]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x186) = 0xe50000000000 [ 39.764194][ T768] kvm: kvm [767]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x187) = 0xe50000000000 [ 39.821893][ T66] usb 1-1: USB disconnect, device number 12 [ 40.155844][ T790] kvm: user requested TSC rate below hardware speed [ 40.232275][ T311] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 40.255528][ T793] netlink: 'syz.2.120': attribute type 13 has an invalid length. [ 40.353057][ T797] overlayfs: overlapping lowerdir path [ 40.382228][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 40.391337][ T311] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 40.402236][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.413135][ T311] usb 4-1: Product: syz [ 40.417333][ T311] usb 4-1: Manufacturer: syz [ 40.430775][ T311] usb 4-1: SerialNumber: syz [ 40.537830][ T66] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 40.574250][ T811] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 40.584695][ T811] rust_binder: Write failure EINVAL in pid:136 [ 40.584817][ T811] rust_binder: 810:811 got transaction to invalid handle 1 [ 40.598845][ T811] rust_binder: 810:811 transaction async to 0:0 failed ENOENT, code 0 size 72-24 [ 40.608674][ T10] rust_binder: 810: undelivered TRANSACTION_ERROR: 29201 [ 40.672267][ T66] usb 3-1: device descriptor read/64, error -71 [ 40.674484][ T816] cgroup: none used incorrectly [ 40.683650][ T786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.692647][ T786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.707922][ T816] syzkaller1: entered promiscuous mode [ 40.713532][ T816] syzkaller1: entered allmulticast mode [ 40.922242][ T66] usb 3-1: device descriptor read/64, error -71 [ 40.938084][ T311] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 40.945064][ T311] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 40.961751][ T110] udevd[110]: worker [769] terminated by signal 7 (Bus error) [ 40.969419][ T311] usb 4-1: USB disconnect, device number 10 [ 40.975845][ T110] udevd[110]: worker [769] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 40.999052][ T110] udevd[110]: worker [771] terminated by signal 7 (Bus error) [ 41.011051][ T110] udevd[110]: worker [771] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0' [ 41.030425][ T110] udevd[110]: worker [820] terminated by signal 7 (Bus error) [ 41.038045][ T110] udevd[110]: worker [820] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1' [ 41.049334][ T110] udevd[110]: worker [821] terminated by signal 7 (Bus error) [ 41.056950][ T110] udevd[110]: worker [821] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2' [ 41.076006][ T822] udevd[822]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.080193][ T110] udevd[110]: worker [823] terminated by signal 7 (Bus error) [ 41.162238][ T66] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 41.304066][ T66] usb 3-1: device descriptor read/64, error -71 [ 41.542286][ T66] usb 3-1: device descriptor read/64, error -71 [ 41.652351][ T66] usb usb3-port1: attempt power cycle [ 41.752252][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 41.902221][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 41.908870][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 41.917553][ T10] usb 4-1: config 1 has an invalid interface number: 242 but max is 2 [ 41.925769][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.936286][ T10] usb 4-1: config 1 has no interface number 2 [ 41.942790][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 41.953828][ T10] usb 4-1: config 1 interface 1 has no altsetting 0 [ 41.961951][ T10] usb 4-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 41.971342][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.979513][ T10] usb 4-1: Product: syz [ 41.983913][ T10] usb 4-1: Manufacturer: syz [ 41.988652][ T10] usb 4-1: SerialNumber: syz [ 42.011421][ T843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 42.012221][ T66] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 42.063263][ T66] usb 3-1: device descriptor read/8, error -71 [ 42.193579][ T66] usb 3-1: device descriptor read/8, error -71 [ 42.201089][ T841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.220333][ T841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.244591][ T841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.262367][ T841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.283866][ T10] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 42.291736][ T10] usb 4-1: 1:1 : unsupported format bits 0x2004 [ 42.322447][ T10] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 42.332108][ T10] usb 4-1: selecting invalid altsetting 0 [ 42.352016][ T10] usb 4-1: selecting invalid altsetting 0 [ 42.376231][ T10] usb 4-1: USB disconnect, device number 11 [ 42.409724][ T863] rust_binder: 861:863 error while translating object: EPERM [ 42.440509][ T863] rust_binder: Failure in copy_transaction_data: EPERM [ 42.440550][ T863] rust_binder: 861:863 transaction call to 861:0 failed EPERM, code 0 size 72-24 [ 42.452768][ T66] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 42.493217][ T66] usb 3-1: device descriptor read/8, error -71 [ 42.612245][ T31] rust_binder: 861: undelivered TRANSACTION_ERROR: 29201 [ 42.626739][ T66] usb 3-1: device descriptor read/8, error -71 [ 42.762328][ T66] usb usb3-port1: unable to enumerate USB device [ 42.791321][ T878] 9pnet_fd: Insufficient options for proto=fd [ 42.798483][ T878] 9pnet_fd: Insufficient options for proto=fd [ 42.942245][ T473] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 43.062238][ T66] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 43.072264][ T473] usb 1-1: device descriptor read/64, error -71 [ 43.212246][ T66] usb 4-1: Using ep0 maxpacket: 16 [ 43.218647][ T66] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 43.229842][ T66] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 43.243137][ T66] usb 4-1: config 0 interface 0 has no altsetting 0 [ 43.249753][ T66] usb 4-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 43.259335][ T66] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.272314][ T66] usb 4-1: config 0 descriptor?? [ 43.314589][ T473] usb 1-1: device descriptor read/64, error -71 [ 43.322881][ T883] overlayfs: missing 'lowerdir' [ 43.343951][ T885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'. [ 43.377345][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 43.377362][ T36] audit: type=1400 audit(1785824202.764:257): avc: denied { bind } for pid=886 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.412286][ T36] audit: type=1400 audit(1785824202.794:258): avc: denied { setopt } for pid=886 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.448811][ T36] audit: type=1400 audit(1785824202.834:259): avc: denied { read } for pid=895 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 43.562209][ T473] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 43.684748][ T66] logitech-djreceiver 0003:046D:C51B.0002: ignoring exceeding usage max [ 43.693194][ T473] usb 1-1: device descriptor read/64, error -71 [ 43.701709][ T66] logitech-djreceiver 0003:046D:C51B.0002: hidraw0: USB HID v0.01 Device [HID 046d:c51b] on usb-dummy_hcd.3-1/input0 [ 43.886016][ T311] usb 4-1: USB disconnect, device number 12 [ 43.932233][ T473] usb 1-1: device descriptor read/64, error -71 [ 44.042287][ T473] usb usb1-port1: attempt power cycle [ 44.295898][ T36] audit: type=1400 audit(1785824203.684:260): avc: denied { getopt } for pid=901 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 44.382215][ T473] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 44.412301][ T473] usb 1-1: device descriptor read/8, error -71 [ 44.424039][ T36] audit: type=1400 audit(1785824203.804:261): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1597]" dev="pipefs" ino=1597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.493468][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.511648][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.535467][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.544552][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.554348][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.565197][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.574448][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.590255][ T573] bridge_slave_1: left allmulticast mode [ 44.596242][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.605204][ T573] bridge_slave_1: left promiscuous mode [ 44.610874][ T573] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.629373][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.639040][ T573] bridge_slave_0: left allmulticast mode [ 44.639535][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.652234][ T573] bridge_slave_0: left promiscuous mode [ 44.653837][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.659388][ T573] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.668728][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.684462][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.693772][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.702992][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.712425][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.721541][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.730838][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.740020][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.750456][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.759680][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.770098][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.779367][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.788559][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.797725][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.807046][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.817006][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.826066][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.836433][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.845478][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.854834][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 44.868258][ T573] veth1_macvtap: left promiscuous mode [ 44.873818][ T573] veth0_vlan: left promiscuous mode [ 44.968207][ T473] usb 1-1: device descriptor read/8, error -71 [ 45.184737][ T573] bridge_slave_1: left allmulticast mode [ 45.190389][ T573] bridge_slave_1: left promiscuous mode [ 45.196136][ T573] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.203658][ T573] bridge_slave_0: left allmulticast mode [ 45.209294][ T573] bridge_slave_0: left promiscuous mode [ 45.214943][ T573] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.222763][ T573] bridge_slave_1: left allmulticast mode [ 45.228424][ T573] bridge_slave_1: left promiscuous mode [ 45.234181][ T573] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.241848][ T573] bridge_slave_0: left allmulticast mode [ 45.247597][ T573] bridge_slave_0: left promiscuous mode [ 45.253246][ T573] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.261544][ T573] bridge_slave_1: left allmulticast mode [ 45.267258][ T573] bridge_slave_1: left promiscuous mode [ 45.272858][ T573] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.280277][ T573] bridge_slave_0: left allmulticast mode [ 45.286011][ T573] bridge_slave_0: left promiscuous mode [ 45.291599][ T573] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.494966][ T573] tipc: Disabling bearer [ 45.500310][ T573] tipc: Left network mode [ 45.506370][ T573] veth1_macvtap: left promiscuous mode [ 45.511862][ T573] veth0_vlan: left promiscuous mode [ 45.517476][ T573] veth1_macvtap: left promiscuous mode [ 45.523069][ T573] veth0_vlan: left promiscuous mode [ 45.528597][ T573] veth1_macvtap: left promiscuous mode [ 45.534137][ T573] veth0_vlan: left promiscuous mode [ 45.865741][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 45.874850][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 45.883801][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 45.892770][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 45.901802][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 45.910890][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 45.920109][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 45.929142][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 45.938277][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 45.947377][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 45.956407][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001 [ 45.965399][ T1] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=2001