last executing test programs: 8.380262503s ago: executing program 2 (id=158): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x10}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x6}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2a}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x80}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x48014) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200)={0x27, 0x0}, &(0x7f0000000280)=0x60, 0x100800) getsockopt$nfc_llcp(r3, 0x118, 0x0, &(0x7f00000002c0)=""/55, 0x37) (async) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000300)={{r5}, "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"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x44, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x70, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6253, 0x20}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x28044011) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x3c, r1, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7cb9e1e2, 0x1f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r6) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001740)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_DEL_STATION(r8, &(0x7f00000018c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xc8, r9, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xfffffffd, 0x72}}}}, [@NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xd}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xe, 0x13, [{0x16}, {0x60, 0x1}, {0xc}, {0x30, 0x1}, {0x5}, {0x2}, {0x18, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}]}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xb}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x81}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xfffa}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x4011) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) r11 = socket$tipc(0x1e, 0x2, 0x0) sendmmsg$sock(r11, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001900)="16323ce1307af9d052378be6e2f924f4db54c21eefdde4fd5a0cef09d19bc7da93f626300d2ecee4d3a7642882665d5ce154e498758aa85da1e285e3c47dc95b169b98d09f96ca96b29b5df1be115c31e2093a7cf80876d4407919d7aabe901571635c4d8f2ecfc4faf784e9e713504bc7fe60d2ff58051d616267bcd1488c700a5f127f8539ed0a3710f153b17b04fa442111cff0d39af030d9fcdec65aa4e01f815a5c708e94918360a4b429b9d92229bb99b9d1b3cec387f583ac7d821d66e2f32965c50e306092ea5742c05e2bcf", 0xd0}, {&(0x7f0000001a00)="a0ea579448f7579d34ec0890ad383048c5632414c75706564a95b6619e2eb46321fb492b70872db8b683a5c0565da48cb180e06f37c98b65a0ef19a99567266000766ba90b64a5fa99725f2767196b55dc3b87c2659047769440e2ff6bb5888881ad80a8916f68ad", 0x68}, {&(0x7f0000001a80)="d3ab6ad7b87c8262ce15d6320732be61b0725f920d32c0634bde917e372b62f910c174ca44288a6c058f1188bfa8bdc3626aaaf28e1c77ae14dd4fcb09a678bce6c7bf6a6fa3a269c84a9769b19ca65f5cf083c456f58b", 0x57}, {&(0x7f0000001b00)="63d08ade38a89cf0e6261d9e10c3d2f5356cb7d426ff7c9fea519ddb2670a55381731f14d955c9e9b01be36554e096fc020aa371ba26faf0bc60780ffa7f7ec49fc59a641f23d1e8024532bc5c87db9d10dd2d1839f8ddfda24a186f78ff949f487e9afec644f9c082025666ae970bf17a6f17851e34015a110dd417211d1d70349fefee5780457cc49536319c9a894d065485ee130af4ed2e330168b9f69368", 0xa0}], 0x4, &(0x7f0000001c00)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x78}}, {{&(0x7f0000001c80)=@nfc_llcp={0x27, r4, 0x1, 0x7, 0x2, 0x6c, "00929144859ef660d1229c4b4692e885b3f48c0dd519c81ca302e42d4ac76a2c1d4c751a6fba738c1c95f68b559b383bc0c248f095da7ffa21a315a6879713", 0x3c}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001d00)="2d0af634a04a065d06272aa091e811ede3bd59fdf85e6ac674b94696054fcee0fe49e789b6d490184cdf231e160a1314238ff7770c760dbcf373ddd8fd7ffda689fd0d9117ffec32c3b79f67237c1bbb281a7c5b92e6fe1b94083c9ae44d3b729925517eaf5a8be2b04c824f2d8d2c36218930e381a4a38972f6a3b82d1d77f8648ccebeea6e003e874b56970b1302696e059eb55dbbe04aacdb5f587cdc", 0x9e}], 0x1, &(0x7f0000001e00)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x30}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001e40)="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", 0x1000}, {&(0x7f0000002e40)="8f85112abc1dbd4568a86ef0e35ce7b99e07e3ace27b8d7328eace6e4d65cd117e", 0x21}], 0x2, &(0x7f0000002ec0)=[@txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x48}}, {{&(0x7f0000002f40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x4, @empty, 0x7fff}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002fc0)="1393e49a6a5131311fb9a4d22c519890902f46aca8c30363adb58df5d4b464d0d1623873637c9b9e282df5cd2940587b2e32bdc89b6308673e78e440231583d7f5c7e5779c089b2189f4a1", 0x4b}], 0x1, &(0x7f0000003080)}}, {{&(0x7f00000030c0)=@in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}, 0x4}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003140)="85d278d90d087611ad6505e903e0", 0xe}, {&(0x7f0000003180)="9c3db3dad22285da73a8ee11f31330a4eed96261af56e5b3a50dc079f75f258f080aa4823ca3e57358ed14338851ef0e5752c7f9acfa5f907c80fc968b338ae8af3046b730458ad5613cf763142a2ce351c8cf5d", 0x54}, {&(0x7f0000003200)="722231338bdfdf00cf5990fc34a0760b801db694e8994717e086230412e10477fe8ad699cb11faa54d6fe878d4dce5c327b0d9284a5465141aece9c416350f457300fce479cb767ae14208a627cc13b10ccdc050f42735f05bf3007676149abfbf53449fb139464ce4754bbb9e6f5f61f86b497ce42f132b55ca57d6ac212768ff1e9e02232d2b359d2036bb76005551dd20bd20490cbba7564fd2974c5cb0b595685c1a6c0050389ec831272f1df5fb0d8051c0e0a57bab1cc2d57d188ae058a62617033ecb2ccfe234d0e314c0031cc213170dac78b64ea1da471e8a7ba672a81fe3324cf777680c693768", 0xec}, {&(0x7f0000003300)="f6c220783c5065f57231872ba9f676a38febfbf47f7bd47efd8332746deace5d90ab6896ceaa8807d508b54e1b97a85b9c71a0a02b2c643f2e7c35af3026a26716a1bba794df33b9699530cccf3173e4c96f0a2b679c733f33826851b7d594b16c73bf688e0e7aeac8d3f93971a7d9c44730f94d0edd65136418739a231e622beeb4e437d923f97fa96bc603b15bdcbbab7efabaf7c7f8c2f7c5c01c8808cbdbcb3b2c6f3793b45c72e145e3391f23b5e347b2d421f11a6ff31ab9cb6d367589a682bfa8b4969a330d013a2b398e6d96da3c3096d597d56c6022b8ca719ea17f825a203286d244167ca9f4a892a1348bc2cfcb63117623c5", 0xf8}, {&(0x7f0000003400)="af7fc5d714a486a21fe35a5605fd3a84424571acfea55bc80a7b1ce1144a0e6e3b067c18fb7e0394ea06738e0422ec5d94d61d40b31036b82810c50aad97de135ad1583a8dcff55fb4d4b37d534d86cefda9dc2002f79321b7", 0x59}, {&(0x7f0000003480)="bda218c676840076fdba2aac028e7bc7a022", 0x12}, {&(0x7f00000034c0)="af583d80248fa4f2f46eed7bb92263f66d111ee44464e78d35a8247df3ea3b78ad0523d929788b7e02eb1e9fcc19543ed78e409fe35c5823", 0x38}], 0x7, &(0x7f0000003580)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xd}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000035c0)="b4e9ec0b0632d5c2b00802c949260acae71a304282d03449f9c75e5aeedde617834cf5c9a8eece8e4585ac7b04ab01c22b798f7793c60a7ea0f82255b3", 0x3d}, {&(0x7f0000003600)="9ddfb01e92f68569e28decad1e31ca1b65e2f1fcdc758ca90de2bc8ce4aa8ea4c56cab716267a80b26ad88ea21978d310ce4ec53905c70a2a41a9729d29f5de756bc41a996205d75234dc6d5887b594f722631e44cfead36eed89100cb2ae55fb6be373396d517c4180b5e07a31585ef2a446f6dfaa306e9b61f2c7d62f9c42455f9b8227eb5cd2b8c26739d7c76c3836f717f8d166dba56e50512ba9ae853f9299a6b9e4f6c397be4201f5e36a48735fde624", 0xb3}, {&(0x7f00000036c0)="090fed87bfbf788b609046356659c76f84840e35c61f63edd30137ee5b93e4ca7905bbfd17e02f5d8b233e823d4fa4adbfe82d30a081546d8652de86fe50a6649a4d88007c7473c6a2c682470298436e9245aa102fb60910715af98119cf4248d9cd1bb7aeddc88d25e5d5304f2771661b0f", 0x72}, {&(0x7f0000003740)="532617b78fdef1a539dff841e53cbc8220c08df8afead7568bf50fdecbc2d6a06a6de91c06dcfe4ee2dd22e32c41875f3cf94e9269a922a6f7bc60a333d80ebceb57d12720e4f903a8e0957b738c22867be9b75f935e654aec85f6210a7da0269f0c671cb081eacfd66332c504e4b53639a72a0da296ca42d7c8a33dafb599d9c537ee36d9c7274348bf5264cc9c9b5e3f70f447a0fb", 0x96}, {&(0x7f0000003800)="e7482c33bbf0163b8619ade5db7ee4be97479313290129350ddea7f5652d5c6db2c90fdd", 0x24}], 0x5, &(0x7f00000038c0)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x18}}], 0x6, 0x10) (async) setns(0xffffffffffffffff, 0x20000) ioctl$SIOCGSTAMP(r11, 0x8906, &(0x7f0000003a80)) (async) sendmsg$NL80211_CMD_DEL_STATION(r8, &(0x7f0000003b80)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003b40)={&(0x7f0000003b00)={0x34, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x575}, @NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000810) (async, rerun: 32) pwritev2(r8, &(0x7f0000003d00)=[{&(0x7f0000003bc0)="1376e96c784bb9db48f699c52415caf83e694e736dc29365f7c0a8e952aa8bbfb5007980c8c8ae8fd575d92c88479aa5f01d4eec98fe5ada1dd7167cd8fba20154f5e371e46be165c7ed32e253e76e79354b3d03de94a16373657220399c9ea6abd1621766e4bb72db6d20f4e3ff03cea758a67b11ca5580afacf9bb59920a693027293885cb8ca8fe9a55357e656b7e530211eabbdc61413133d8cc9444db5d1f94398514a079", 0xa7}, {&(0x7f0000003c80)="1cc687edfeb0558ff6968f3d55177fb78edd45774866f2b7600dc1da2561b2c2fb1087e75dab4e6e88d26b2b129157e445398ff39c3465da41963aff5c5f29b231a67d680cfd0a94a93f279bc291e989577267ade8c1b84e7555de32c94a5f516edd5ea435cd350b26d343ced6aeeb26c15b9cc58037e15a702a72bc", 0x7c}], 0x2, 0x4, 0x3, 0x8) (async, rerun: 32) r12 = socket(0x2b, 0x3, 0x401) ppoll(&(0x7f0000003d40)=[{r8, 0x200}, {r5, 0x2068}, {r6, 0x240}, {r3, 0x1008}], 0x4, &(0x7f0000003d80)={0x0, 0x989680}, &(0x7f0000003dc0)={[0x7]}, 0x8) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r12, &(0x7f0000003ec0)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003e40)={0x14, r9, 0x123, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) creat(&(0x7f0000003f00)='./file0\x00', 0x6a) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003f80), r12) sendmsg$NL80211_CMD_STOP_AP(r12, &(0x7f0000004040)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000004000)={&(0x7f0000003fc0)={0x20, r13, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xbf61, 0x3f}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004014}, 0x4000) 8.242583001s ago: executing program 2 (id=159): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x200000000000) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x148b83, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f0000000e80)="0d0ad7", 0x3, 0x6d91fb6102d8910c, 0x0, 0x0) writev(r4, &(0x7f0000000580)=[{&(0x7f0000000c80)='x', 0x1}], 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x22, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x823e}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r7, 0x0, r8, 0x0, 0x2, 0x0) shutdown(r7, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.181241703s ago: executing program 2 (id=160): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000800, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r0, &(0x7f0000000380)='\x00'/11, 0xb) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7ffffff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x90) r4 = memfd_create(&(0x7f0000000f00)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/uts\x00') syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)={0x0, 0xf, 0x6, "127fafa22b17"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.664845778s ago: executing program 1 (id=167): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000014c0)='\x00', 0x1}], 0x1}}], 0x1, 0x400c405) exit(0x0) sendmmsg$inet6(r0, &(0x7f0000006580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000001c0)={{r0, &(0x7f0000000000)='\'L$\x00', 0x101000, &(0x7f0000000040)={@_ha_fsid={[0x8000, 0x8]}, {0xc, 0x3, 0x4, 0x9}}, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0xdc}, {[0x3, 0x2, 0x1, 0x453]}, 0xfff, 0x0, &(0x7f0000000100)}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000002c0)={@dev, 0x0}, &(0x7f0000000300)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@dev, @rand_addr, 0x0}, &(0x7f0000000380)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x0, 0x4, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x1, 0xb, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x80, 0x0, 0x100, 0x99, {{0x1e, 0x4, 0x3, 0x22, 0x78, 0x67, 0x0, 0xfe, 0x29, 0x0, @rand_addr=0x64010100, @broadcast, {[@end, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0xc1, 0x1, 0x3, [{@rand_addr=0x64010101, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ffd}]}, @cipso={0x86, 0x19, 0x3, [{0x1, 0xa, "4ab035f8a16fe194"}, {0x7, 0x9, "47cee8661e624c"}]}, @timestamp_prespec={0x44, 0x14, 0x95, 0x3, 0x5, [{@multicast1, 0x9}, {@rand_addr=0x64010100}]}, @ssrr={0x89, 0x13, 0x7b, [@dev={0xac, 0x14, 0x14, 0x2b}, @broadcast, @private=0xa010100, @multicast1]}]}}}}}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r9}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r8], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x104, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) 4.339497535s ago: executing program 0 (id=173): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a", 0xc5}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r1, &(0x7f0000001e00)="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", 0x7fb1) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x405}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000000)={&(0x7f00002f7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x2}) 4.289108286s ago: executing program 0 (id=174): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0x4, 0x8001ff, 0x2, 0x3, 0x7, "ea710000000000f9000000024200000200", 0x303, 0xf0}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB='nr_inodes=E']) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86862, &(0x7f0000000080)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@huge_never}]}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x9, 0x2, 0x4, 0x4, 0x1b, "3c8f1d5f06f0374aed0796cda2f09b1dceb91c"}) 4.200701193s ago: executing program 0 (id=175): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x100010, r0, 0xc6190000) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r1, 0xc0186e87, &(0x7f0000000100)={&(0x7f0000000080)=[{0x5, 0xfffffffffffffffb, 0x86, 0x0, 0xfffffffb}, {0x2, 0x1, 0x0, 0xfff}], 0x2, 0x28, 0x4, 0x6}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x48000, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000580)={0x2, 0x1, 0xc, 0x0, 0x15a, &(0x7f0000000180)="b29e462190a275bd205ee95258f58aa9098f57639539cb52a275bc806813a1be9a41ddf3b527504b80794d09c8bc76e350fbf2cb4f5cb632ead17d0d690dddfe58b64d08a460274028af4c40c406aebc4f11c7458d3065ce33d70d90eebf5072994ea41468b0f426fc7cf6b383b7a31effda5e5c46e5e7371feeb7df85a5b271ba2d6628a6bed4aebb696c53069e69cb926043bd31ca19950e51e9e3b29bf5449ca5a964850f33bcfad3bad2a0c400cfda756245475e9e2d340b131430970ba4f3af6fcec6130c6989ec7bbaa59a329b24613312433f3760296d71e2058d2d4d0a3bb8475b0143ba8244f12c1522fd3de8fe367d60e799663bbe88f86d3e30b5834440040a5d3bab7b2cb958d82bd3a19420c4a603cba52d2e0f8f9e60dc5794fa6ab184d5bba219097fe549bd93e0284ddb8406c9a3b11b036145e16eedd2cc193afb2f8fe394760150a900d80d9ca7623b43ca6999a81a1991200b905e5fa83c48612aa304eb9ba3984a1d4096e816d656336ec6abd839cbf96c52afdd7a55f9fec07ee890cfc4bfc143b2854cbd90e42e14318f07506b8af68b9e42bf143a6c45ad5ad7414c38954bc37c0ebc14bd36618dc06d280f2168f0da911b9405613dcfae919bf677460aa224bbdb4da3b50b477e464a321e621df2a433bc6cd73cbdac863b21c841b82407128e48601195af5088dca0679f4bdf9c2889750727c61f24e041d1e97a3413bfda69bb4136a490d47e41479a6a50dc115e48a6daf757d3ceff006f21e60ea0716eaec19e2bc873f831a5ab3d44bf4093a7cde0385e4d637bba1e9e87fd4dc47aa85049ca34e1e61d529d2b1f359a610079f7376cec4f45a85cd46cdf56c87803e478001b07683894acf7646e578d115f19b331e2558358b349e89617f658b31902340e26c0ca51ebc90fdb9fc2ba953dceadbf624a15473136b992b748781bd73750a4f07b634b348b3b8a3d0f800fa2dbb13b5e2ead0cda75f571614e0c9d5ea45e48bfb3053b9b2bf476822e9635c282aa608dbe5ee2727025051ee0dacc8946aad225386a9d0069b7063a5e4f090eeac42a3ea5ae3a58b40eebd423991f9a6ec94e75d7013b8269289f7016af4026d40b01c7e5295300a344545404f43d57cc03e3d8761bb806e04340a781107c1254743cefeb35042b408da7eff7c70332c0bdf0de76474c9af81b0538ed390c4d73158f7980b72527215dfb67cbb1c61b5852230b0e81700a4f5f9f120c84d807a1455457af01d3ea1881b20788610cf6a9d746110ba25edcba138c4732fabaf9fb7022e0f2da054c1b58f36f16c40a3e3da7bb5c09ac508afba0523ad1610a3be2c7ae0499b8acad5f2e3f75d8b21959c01c48237505043f493ba0499b1a050ab0533bc314ac03fb1a14854647ed58797407f71d1ea38cf7a3002c558a6bd15827886ae660a4"}) (async) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000005c0)) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={r0, 0x1, 0x0, 0x1000000}) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000007c0)={&(0x7f0000000640), 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xd0, 0x4, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xccf1a09c92dc7111}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x79c0b160}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1e5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x367}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffeeb}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x40000d4) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000800)=0x4) r4 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) close(r4) ioctl$RTC_WIE_ON(r0, 0x700f) (async) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc) (async) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000840)={0xa32, 0x0, 0x5, 0x550, 0x6, 0x0, [{0x1, 0x2, 0xab04, '\x00', 0x201}, {0x7ff, 0x1000, 0x1b80000, '\x00', 0x800}, {0xfc0, 0xffffffffffff8001, 0x6, '\x00', 0x2000}, {0x3, 0x5, 0x8, '\x00', 0x1501}, {0x1, 0x6, 0x450, '\x00', 0x280}, {0x5, 0x9, 0x5, '\x00', 0x8}]}) (async) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f00000009c0)) (async, rerun: 32) connect$inet(r0, &(0x7f0000000a00)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async, rerun: 32) sendto(r0, &(0x7f0000000a40)="09d6550c880d5bd2efaaa36a559e5c545e81b1ebca2bda7591f23c8113097e4a5d732d5f44581c5f2f751d41d68a179902eed6fe592c31bfccc6a8ae2b60e78f41d76a3bb1571b867def8e22f6b7ea36cd0d1c58d9e4e13a81fe89bc87fc18ce9eddcc9a8b6882ae4b66eb9df6f71d0373e205788b64658c849b3a2422096817895ab4b1464b2a994e91eeecc4a5471af962795d1ea5cbfc3ebc7d06bf9275b4b76145cdeb9dfa9e286e42d29052dde28a3bc345314f38e2ad74d43bc79509b20d3ee5ec4ffefb075b5e41ce1fe84792648f9b6e3e", 0xd5, 0x1, &(0x7f0000000b40)=@sco={0x1f, @none}, 0x80) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000f40)={{r4, &(0x7f0000000bc0)='%&#(*\x00', 0x701900, &(0x7f0000000c00)={@align=0x4, {0x5d, 0x33ac, 0x295, 0x8001}}, 0x2, &(0x7f0000000c40)={@_ha_fsid}, &(0x7f0000000c80)=0x9}, 0x3, &(0x7f0000000ec0)=[{0x1, 0x5, &(0x7f0000000cc0)='/proc/self/net/pfkey\x00', &(0x7f0000000d00)="754c4bd19f5d4a00f4ebc295d2e7ed352e305e1c55b1acb18b79b40e0a8d50ddc9732440aaa65bea2c1f3ff6a6aafdeea83fafcc8f1b37fa6eddfcbbe73e7f03ecd882df4f0c5be9a1355aafa0e60e827453a65c84025dc2ef376c3470c5", 0x5e, 0x12}, {0x1, 0x6, &(0x7f0000000d80)='+\x00', &(0x7f0000000dc0)="2641fb9e4445c57fa1522955c62c536f228b293c4a9da49445e1a025069986d3b6048d3cf8696759770b4f182490b8ddc7cefc701bba3818b25fb40dad226f491e2bf7dd71427c83145f7d48d049b45c", 0x50, 0xa}, {0x1, 0x6, &(0x7f0000000e40)=']-^\x00', &(0x7f0000000e80)="6048c0799bd59c245a2bd48fff9e9aa33f111c870a679cad5434985f4b1f6bd11e", 0x21, 0x20}]}) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000fc0)=0xb, &(0x7f0000001000)=0x4) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f0000001140)={r4, &(0x7f0000001040)='+\x00', 0x8300, &(0x7f0000001080)={@_ha_fsid={[0x1000, 0x101]}, {0x8, 0x1, 0x6, 0x3}}, 0x7, &(0x7f00000010c0)={@_ha_fsid}, &(0x7f0000001100)=0x6}) (async) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000001180), 0x3, 0x0) fchdir(r6) (async) socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f00000011c0)) (async, rerun: 32) ioctl$XFS_IOC_FSGROWFSDATA(r4, 0x4010586e, &(0x7f0000001200)={0xfffffffffffffffa, 0x8}) (async, rerun: 32) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000001240)={0x1, 0x8, 0x3, 0xfffffffa, 0x2, [0x7f, 0xf, 0x6, 0x1000]}) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000001280)={0x5, 0x9, 0xf622, 0x0, 0x15, "b98fb611210f9537814d7bec1ca002da2a776b"}) setitimer(0x2, &(0x7f00000012c0)={{}, {0x77359400}}, 0x0) 4.199030524s ago: executing program 0 (id=176): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x8014) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb2a416, 0x4) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) syz_usb_connect(0x0, 0xc7, &(0x7f0000000080)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c2405", @ANYRESOCT, @ANYBLOB="8396ad69395d3f13d5942d470d37082e85946caafb7ea01985ec62e08ba12183552c92f5b65d"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 3.847836966s ago: executing program 1 (id=177): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x400c0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0x0, 0x3}]}, 0x10) recvmsg$unix(r1, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)}, 0x302) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000100)={0x7, 'geneve1\x00', {0xffffff43}}) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@private=0xa010102, 0x2a, 0x4, 0x14}, @sadb_sa={0x2, 0x1, 0x0, 0xfc, 0x0, 0x9, 0xc, 0xc0000000}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}]}, 0x70}, 0x1, 0x7}, 0x8000) write$cgroup_int(r2, &(0x7f0000000380)=0x80000000000009, 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x400c0) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0x0, 0x3}]}, 0x10) (async) recvmsg$unix(r1, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)}, 0x302) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000080)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) (async) fcntl$lock(r4, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000000100)={0x7, 'geneve1\x00', {0xffffff43}}) (async) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@private=0xa010102, 0x2a, 0x4, 0x14}, @sadb_sa={0x2, 0x1, 0x0, 0xfc, 0x0, 0x9, 0xc, 0xc0000000}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}]}, 0x70}, 0x1, 0x7}, 0x8000) (async) write$cgroup_int(r2, &(0x7f0000000380)=0x80000000000009, 0x12) (async) 3.798625057s ago: executing program 1 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000a3f000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f0000000280)=[@wrmsr={0x65, 0x20, {0xbc8, 0x2e}}], 0x20}) (async) unshare(0x64000400) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'bridge_slave_1\x00', {0x2, 0x4e23, @multicast2}}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000060000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r9) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r10, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4081) (async) recvmmsg(r9, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000180)=""/181, 0xb5}, {&(0x7f0000000000)=""/101, 0x65}, {&(0x7f0000002ec0)=""/4083, 0xff3}, {&(0x7f0000002c80)=""/170, 0xaa}, {&(0x7f00000000c0)=""/170, 0xaa}], 0x5}, 0x817}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x100a0, 0x0) (async, rerun: 32) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r8, @ANYRES8=r6, @ANYRESOCT=r6], 0x18}}, 0x4c088) (async) inotify_init() r12 = socket$tipc(0x1e, 0x5, 0x0) listen(r12, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r13 = getpid() sched_setscheduler(r13, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r14, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 3.251247049s ago: executing program 1 (id=181): syz_clone3(&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4112, 0x1010, 0x0, 0x0}, 0x32) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x5, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d2, 0x32}, @in6=@loopback, {0x1, 0x3, 0x9, 0x9, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1, 0xc0000000}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x49}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x2, 0x5}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x3, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x41e04000) personality(0x5400004) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000) 3.163438827s ago: executing program 2 (id=182): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, 0x0, 0x54}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x2000)=nil, r3, 0x1000000, 0x30, r2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = eventfd2(0x4, 0x0) close(r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9b2865eb3804696a, 0x0) syz_usb_connect(0x1, 0x1c5, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x60, 0xd0, 0x40, 0x20, 0x4e8, 0x5f04, 0xa677, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b3, 0x1, 0x7, 0x2, 0x50, 0x7, "", [{{0x9, 0x4, 0xf9, 0xcc, 0x8, 0xbe, 0x6a, 0x2e, 0x1, [], [{{0x9, 0x5, 0x9b, 0x1, 0x3ff, 0x80, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x100}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x10, 0xb, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x10}]}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0x27, 0xc1, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x9}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0xf9, 0x1, 0x7}}, {{0x9, 0x5, 0xe, 0x1, 0x10, 0x0, 0x0, 0x10, [@generic={0x4f, 0x2, "31a0369367c95d9be39771728e188cd1bce737041ad900757a8e2753779bf1f2f930fb617f9be2c47088fe30d30716a4ca6267602d1255c5a3fd939485c4983e0b66da1d7153e68423d06dce2f"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0xf, 0xa3, 0x5, [@generic={0xd4, 0x1, "9e91df28ff11159f4e91ba151c23dc66d603348017a6b696d5345a3e32a82c535fbb11ed42a4d815353f8c050ef6fac8e81a7314fbd3d6ffcaa5a7a0b7af605ebe350c045d21578bf1ae9ee2dbe903309146278be7599726c90b20fb54dc712fd67719106b6bc0935f1bb4436e7f2b135f4bd914fe23d0083950ff97c5f47450d702d3b3c9d0a790147941053657a157c647307499ed383d3fd3297be23ea05cc9a575c93cae067665d1382057dba365b99286b60ab21cb6d71033f1feffa8207d0b15f045b347f691cd44015c95d21c2b5a"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x3}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x6, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x8, 0x2, 0x36, [@generic={0xc, 0x0, "94c3b75151057937dd84"}]}}]}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x7, 0xfc, 0x6, 0x20, 0x7}, 0x13, &(0x7f0000000380)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x8, 0x7, 0xf6bb, 0x10}, @ptm_cap={0x3}]}, 0x5, [{0xed, &(0x7f0000000440)=@string={0xed, 0x3, "f5c2972248b0da3375bb1e709230acd72a73bfdb1840e118d96432fb720ebc948fe6d55de92832d38db7d308e05973d3358374947bc683fa0694a4e6a92e3e387e3d24462091434bd09b4158e33c118c7858c49815c0557bb421ea00f0c547addb2d115bff319c92eedf6df76bb052a88ac3f8c20c5970efffbb16fdc67e5ff6b495281930524df8423ff68c3dd0951e2d34e41f7a7788776080202e3ddc6861f38506eeccc5f6c332d1683ca294d2cf6134d9109ce0d56f631e60e2555db9bfb38c96eb3a239d9a78ea3a799ff649d76183d1d81d7279823e4fe8226e2174341121d3583be5c5024c87f5"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40f}}, {0x9c, &(0x7f0000000640)=@string={0x9c, 0x3, "5d26769948f106dfec27d412954b679eba38982f1ba5ec06df845ef11773937787514c862689302590c78c6de23e072ca02cf1ee6256cb7a470c9326acc9d1390034a64080a3b0706dec143ab9cc35d28ccb2b7b2d921fe76d1261f91f62e67d5ae8c09ad7ef5e59a1e2c498b09f3b7a7ae7026a2b9d1ca79c58e0cd2c11041fafa8a7de24203e61421fed8c1f8e952985cb96e82f129bc86936"}}, {0x6d, &(0x7f0000000700)=@string={0x6d, 0x3, "0ab05a210d5175b59144d308c6d42be6ced831c66f7fec46ef5616d76dc0c8025f83022913984f2ce3be67b4ce7b9083f84c0cc1c8a7d3db72f5dc95e638c568c597adcb023b0aa9619174a0518826b0d19abd527cea4f844b3213fd95f64b6e0d2b0de82a037f1564e209"}}, {0x9c, &(0x7f0000000780)=@string={0x9c, 0x3, "2b0d548646da065c34d864a19d6f5213fee2245c6b177b198e0d23248ee1368d5aa4e9f7cb1c33c925aaab8ceeafff1aef0413264fe882dc936cbc21a514d768c1a3951f77efd49e29a69da6769e28f6274330fe76d00da8982462d4f81c6813c0b0d0a4de0a691f0a30cc558374c9e01d93534c35669dabd93c2b3fb52a153936f23d5f7be70479b23477a362209b5418248c5f3bcfd840da00"}}]}) write$eventfd(r4, &(0x7f0000000040)=0x5, 0x8) 3.065036328s ago: executing program 1 (id=183): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x0) pipe2(&(0x7f0000000080), 0x80800) pipe2(&(0x7f0000000040), 0x4000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x8d91e000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x3a, 0x1, &(0x7f0000000100), 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.788931285s ago: executing program 0 (id=185): syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @multicast1}}]}, 0x190) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x82, &(0x7f0000000240)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r3, &(0x7f0000001200)='\x00', 0x1, 0x4}]) sendmsg$sock(r3, &(0x7f0000002540)={&(0x7f0000000040)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000240)="c1916d3e2344b7c611c926a3a97e9b62bea4cde589c6af15985e4c7fe9afc569106f3bb58162b6bfc833faa94e8cbfb77b2f266bc45a0d9ac3b9eb35792eb77d88e7e06b5d5d4ec82d4864f8f133916e1abae3f81992c11a787b01c2de31e93579cc947953b10bbf587b6c94ff48c0a38dfdc55c8d0510c80e4b991ae493ccf780c75158f2091f30ea914144ad7b5d594efe7b93aedcad068c0be855f4", 0x9d}, {&(0x7f0000000300)="31ea0e8ce70f3fafb4c75baef382a504ea9de29edac4454fc72b12d7427f161385b7002d4caf2490a41d54ed42ca2337119d96ac36c95b551adb4eef81cd0eca457d047d42533dab41e2a43191bc4d4f451a7f8b9a7189102e38ad109f4c61162e903ac7990d2c3243a1261a74cdac98dea055d1c8a185826ff401d11d828c21343f7a80eba6eb8a5fb60e2cb6f62ae100cabf237760dda3aa1d58", 0x9b}, {&(0x7f00000003c0)="f6a4e325c81ad87d5901cd59120b874003ac7e30f5a559c44a3060c714dcdf198727", 0x22}, {&(0x7f0000000400)="89ad2d54f4bd73263cccd1a0e98474d3c124ff07e269c36c1fcfa3bc1cf3eb6893f4bc3265c327af34bfb20281121eec8a2dcd6d38b576e97b14dfc423d8f162213aa8b81cbebf7d49a7f2f8e864d1cc861aaa6977ae54441dd0ed1dd1249776fce35e46d6d7385f578555e7b9633da7a32a093a2698ed2934ac7d79d1f8bbfab2697d7e", 0x84}, {&(0x7f0000000600)="98ae93ba324178b6fddd3e4d04c407a3ece39d0fcf597ee65a68fc5469730a5083f35b1ff882e8b21f7e62d35d065c79c5ed0cb2d444fff44b4cb83719a86ef180e48c04b1e348e57435c1e631106f61253f8d345ae23602f7e80f84f2d1bcd0c84388380af59fb16322a701e39f86135f5a824adec43eeb6e19ea118b5cfa876abe5a7a7c45ccb4fe0d4f5d43ec520af30fec923ab059c0295424dabed015646dbaab8e5a374b19562ced0257f61fae5d2863762f8a68f38a49e77c969a81196edaafa54edfdebbe97cb3fcc33198c0825b7b912871b4f84a20382569c2f31be844659190abcfeaf30402f4265521705343ea514c6780b5", 0xf8}, {&(0x7f0000001480)="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", 0x1000}], 0x6, &(0x7f0000002500)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}], 0x30}, 0x4) sendmsg(0xffffffffffffffff, 0x0, 0x40) 1.795134449s ago: executing program 0 (id=187): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/multicast_querier\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='1', 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000740)={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x10, 0x60, 0xdb, 0x6, 0xff, 0x4, 0x4}}}, 0x0) r2 = syz_ublk_setup_io_uring(0x68bc, &(0x7f00000000c0)={0x0, 0x178a, 0x1, 0x2, 0x2be}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) syz_ublk_setup_io_uring(0x3225, &(0x7f0000000200)={0x0, 0x93d9, 0x0, 0x0, 0x273}, &(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/net/bridge_slave_0/brport/multicast_fast_leave\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1\n', 0x2) r5 = mmap$IORING_OFF_SQ_RING(0x0, 0x38, 0x3, 0x12, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x132) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x1060, 0x0, 0x0, 0x20000}) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) r8 = syz_clone(0x20080, &(0x7f0000000340)="a565bd057ccddc4d9427b518f5730a3a5a01c91850570e08b321adfe12f8f62e866a83a648a9779e85e58e6a015c", 0x2e, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000480)="94ca764b2b9e1d4c98920fc0edcf01d29b4b17f80a8297782392ee86041070044e9a451249cd86234f22db2b7db4ad2caf957606128264afaf72daf0a74388f23c63c72c93bc7f5e702d706c03277019f3d50b87f49961aff4ab0e363100fc6cf320947459e6b932b7d4fe3789c61984") syz_ublk_add_dev(r2, r3, r5, 0x0, &(0x7f0000000580)={0x2e, 0x50, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000540)=@new_dev={0x1, 0x9d4, 0x0, 0x0, 0x1000, 0xffffffff, r8}}}, &(0x7f0000000600)) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0xfffffcc6, &(0x7f0000000400)="16688a4a3f1cd2db03000007000000000d7c36e51e67f08f961d2fc0c37d7c8c2136536697a794f470c5f44c560dedb1b190fa63c35a3c256fb8b4e2542f15f331") 1.365026678s ago: executing program 3 (id=189): socket$pppl2tp(0x18, 0x1, 0x1) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = inotify_init1(0x800) fcntl$dupfd(r0, 0x406, r1) (async) r2 = fcntl$dupfd(r0, 0x406, r1) accept4$inet(r2, 0x0, 0x0, 0x80800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000240)) 1.340069554s ago: executing program 3 (id=190): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) inotify_init1(0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000001000)='map_files\x00') execve(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x98) r1 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x40, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x41009432, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000001040)) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffff3) mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x8, 0x12, r3, 0xfffff000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r4 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 1.218973248s ago: executing program 3 (id=191): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24e, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x1563, 0x10000006, 0x4, 0x4002dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9e, 0x8, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffd, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x80000003, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xc000000, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x401, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x1, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1009, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0x7, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x80000001, 0x2, 0x100, 0xd8ce, 0x80000002, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x8, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write(r0, &(0x7f0000000400)="bb830db013311e70f4", 0x9) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000)=0x7c, 0x4) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80800) epoll_create1(0x80000) pipe2(&(0x7f0000000240), 0x800) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) read$FUSE(r2, &(0x7f0000001140)={0x2020}, 0x2020) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xe6, 0x40000000000180, 0x3ff, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x200000007, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000100)={0x6}) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 983.247657ms ago: executing program 3 (id=192): openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control32=0x4010, 0xffffffffffffffff, 0x4, 0x5}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0x10}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000001c0)={[0x8000000000000001, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x101, 0x2, 0x1, 0xb9, 0x8d], 0x10000, 0x2011c0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 736.087628ms ago: executing program 3 (id=193): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x61, 0xf}, {0x6, 0x0, 0x0, 0x5}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200"/33, @ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc02000000000000000000000000000100000000320000000000000000000000000000000000000000000000023500000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001030000000000000700000000000000ff020000000000000000000000000001000000003c0000000200000020010000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000003c"], 0x23c}}, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="580000002100010028bd7000fbdbdf257f000001000000000000000000000000000000000000000000000000000000004e2100014e2226940200a080ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="90506e00000000e915024c508413c5f0"], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d4) prctl$PR_SET_SECCOMP(0x16, 0xffffffffffffffff, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) 608.555954ms ago: executing program 3 (id=194): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x9, 0x7fffffff, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @mcast2, 0x700, 0x80, 0x9, 0xfffffff1}}) r2 = dup(r0) (async) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="10010000160001000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000006c"], 0x110}, 0x1, 0x0, 0x0, 0xc1}, 0x0) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000380)={0xffffffffffffed52, 0x2, 0x0, 0x3, 0x5, 0x0, [{0x3, 0x8c62, 0x1, '\x00', 0x88e0c13ae2d2a3e5}, {0x245, 0x8f78, 0x0, '\x00', 0x2}, {0xf13, 0x0, 0x7, '\x00', 0x904}, {0x7fff, 0x9, 0x401, '\x00', 0x1}, {0x0, 0xfffffffffffffffc, 0x4, '\x00', 0x602}]}) (async, rerun: 32) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) (async, rerun: 32) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x4, 0x2000000, 0x0, 0x0, 0x3}}) (async) fsetxattr$security_evm(r2, &(0x7f0000000040), &(0x7f00000000c0)=ANY=[@ANYBLOB="6384c0632d690e65bf3e03899b5556b11f33fc4859c662352455a1"], 0x9, 0x3) (async) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000140)=""/15, 0xf}], 0x1) 734.83µs ago: executing program 1 (id=195): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000240)=0x190, 0x4) write(r1, &(0x7f0000000000)="01", 0x1) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r2 = syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1235, 0xe, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xff, 0x80, 0x81, {0x8, 0xb, 0x2, 0x1, 0x1, 0x22, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0x68b68020}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x5, 0x3, {0xa, 0x25, 0x25, 0x2, 0x2, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x7f, 0x7, 0x4, {0xa, 0x25, 0x25, 0x7, 0xe, 0x2}}}}}}}}]}}, 0x0) syz_usb_control_io$uac3(r2, &(0x7f0000000800)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r2, &(0x7f0000004400)={0x2c, 0x0, &(0x7f0000004140)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "541eee8cacc5c46f8615c01c2a3406b66e0e4abfe47bd21acdad1fd3b60ffef14bffa60480a0c2e6243e98b7eb8dea9be3231d55b00df4c8c1"}}, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x205, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) (async, rerun: 64) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x402, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) (rerun: 64) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2000008, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 0s ago: executing program 2 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x4, 0x80000, 0xc) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd07, &(0x7f0000000000)="040000000000000000e00000380100000000000000000000000000000000000000006d00"/48) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x194, r4, 0x200, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3f, 0x3, "83352e5ea10149980846ee3aaff94cdab6e5b5de3db39b716f3a16eb0771b5ba5bd861a71ec3ae705ad03df5ebbc638976a470f571e194c51e3d06"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x73f6}]}, @TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x413acc5d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdfb5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x194}, 0x1, 0x300}, 0x8000) io_setup(0x7a10, &(0x7f00000001c0)) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r5, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x2, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x202, &(0x7f0000000100)={&(0x7f0000000180)=""/120, 0x78}) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. [ 21.425597][ T36] audit: type=1400 audit(1790506941.970:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.426713][ T286] cgroup: Unknown subsys name 'net' [ 21.448223][ T36] audit: type=1400 audit(1790506941.970:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.475497][ T36] audit: type=1400 audit(1790506942.000:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.475642][ T286] cgroup: Unknown subsys name 'devices' [ 21.594093][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.599693][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.691888][ T36] audit: type=1400 audit(1790506942.230:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.715045][ T36] audit: type=1400 audit(1790506942.230:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.739715][ T36] audit: type=1400 audit(1790506942.240:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.787096][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.795954][ T36] audit: type=1400 audit(1790506942.340:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 21.821351][ T36] audit: type=1400 audit(1790506942.340:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.847573][ T36] audit: type=1400 audit(1790506942.390:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.873105][ T36] audit: type=1400 audit(1790506942.390:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.873391][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.172611][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.179675][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.186836][ T293] bridge_slave_0: entered allmulticast mode [ 23.193139][ T293] bridge_slave_0: entered promiscuous mode [ 23.210508][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.217566][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.224721][ T293] bridge_slave_1: entered allmulticast mode [ 23.230889][ T293] bridge_slave_1: entered promiscuous mode [ 23.252825][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.259944][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.267049][ T296] bridge_slave_0: entered allmulticast mode [ 23.273205][ T296] bridge_slave_0: entered promiscuous mode [ 23.281017][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.288104][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.295233][ T296] bridge_slave_1: entered allmulticast mode [ 23.301435][ T296] bridge_slave_1: entered promiscuous mode [ 23.356788][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.363870][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.370980][ T294] bridge_slave_0: entered allmulticast mode [ 23.377294][ T294] bridge_slave_0: entered promiscuous mode [ 23.383761][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.390813][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.397930][ T294] bridge_slave_1: entered allmulticast mode [ 23.404147][ T294] bridge_slave_1: entered promiscuous mode [ 23.426867][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.433948][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.440997][ T295] bridge_slave_0: entered allmulticast mode [ 23.447286][ T295] bridge_slave_0: entered promiscuous mode [ 23.456133][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.463204][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.470265][ T295] bridge_slave_1: entered allmulticast mode [ 23.476416][ T295] bridge_slave_1: entered promiscuous mode [ 23.569612][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.576687][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.583984][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.590999][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.613596][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.620646][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.627942][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.634980][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.662798][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.669846][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.677131][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.684165][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.711759][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.719242][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.727631][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.734776][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.758554][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.765611][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.782911][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.789952][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.799030][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.806079][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.821581][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.828632][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.854038][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.861080][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.877495][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.884533][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.897002][ T296] veth0_vlan: entered promiscuous mode [ 23.913176][ T294] veth0_vlan: entered promiscuous mode [ 23.931512][ T294] veth1_macvtap: entered promiscuous mode [ 23.941860][ T293] veth0_vlan: entered promiscuous mode [ 23.966959][ T293] veth1_macvtap: entered promiscuous mode [ 23.973241][ T295] veth0_vlan: entered promiscuous mode [ 23.979744][ T296] veth1_macvtap: entered promiscuous mode [ 24.004803][ T295] veth1_macvtap: entered promiscuous mode [ 24.014164][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.074885][ T319] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.292474][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.412205][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.419726][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.442188][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 24.448459][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.458778][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 24.467709][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.477740][ T31] usb 2-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 24.490662][ T31] usb 2-1: config 1 interface 0 has no altsetting 1 [ 24.498945][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.508412][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.516490][ T31] usb 2-1: Product: syz [ 24.520705][ T31] usb 2-1: Manufacturer: syz [ 24.525343][ T31] usb 2-1: SerialNumber: syz [ 24.531858][ T31] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 24.538732][ T31] cdc_ncm 2-1:1.0: bind() failure [ 24.562154][ T9] usb 1-1: device descriptor read/64, error -71 [ 24.582449][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 24.588574][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 24.596772][ T10] usb 4-1: config 0 has no interface number 0 [ 24.602874][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.613744][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.623483][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 24.632520][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.640946][ T10] usb 4-1: config 0 descriptor?? [ 24.741503][ T338] usb 2-1: USB disconnect, device number 2 [ 24.802148][ T9] usb 1-1: device descriptor read/64, error -71 [ 25.042187][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.202140][ T9] usb 1-1: device descriptor read/64, error -71 [ 25.212165][ T338] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.250612][ T10] uclogic 0003:28BD:0094.0001: pen parameters not found [ 25.257650][ T10] uclogic 0003:28BD:0094.0001: interface is invalid, ignoring [ 25.267002][ T10] usb 4-1: USB disconnect, device number 2 [ 25.284170][ T354] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 25.293771][ T354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'. [ 25.415344][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.426474][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.436629][ T338] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.449455][ T338] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 25.458758][ T9] usb 1-1: device descriptor read/64, error -71 [ 25.465123][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.474195][ T338] usb 3-1: config 0 descriptor?? [ 25.582263][ T9] usb usb1-port1: attempt power cycle [ 25.622275][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.772186][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 25.778455][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.791000][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.800079][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.808091][ T31] usb 2-1: Product: syz [ 25.812261][ T31] usb 2-1: Manufacturer: syz [ 25.816844][ T31] usb 2-1: SerialNumber: syz [ 25.881858][ T338] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 25.891335][ T338] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 25.922174][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 25.953170][ T9] usb 1-1: device descriptor read/8, error -71 [ 26.013308][ T372] ======================================================= [ 26.013308][ T372] WARNING: The mand mount option has been deprecated and [ 26.013308][ T372] and is ignored by this kernel. Remove the mand [ 26.013308][ T372] option from the mount to silence this warning. [ 26.013308][ T372] ======================================================= [ 26.048583][ T372] tmpfs: Bad value for 'size' [ 26.054165][ T375] tmpfs: Bad value for 'size' [ 26.090073][ T9] usb 1-1: device descriptor read/8, error -71 [ 26.132902][ T349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.141631][ T381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.150261][ T349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.152732][ T381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.166119][ T315] usb 3-1: USB disconnect, device number 2 [ 26.227011][ T362] device-mapper: ioctl: only supply one of name or uuid, cmd(4) [ 26.332193][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 26.353166][ T9] usb 1-1: device descriptor read/8, error -71 [ 26.483205][ T9] usb 1-1: device descriptor read/8, error -71 [ 26.592239][ T9] usb usb1-port1: unable to enumerate USB device [ 26.636198][ T31] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 26.652639][ T31] cdc_ncm 2-1:1.0: bind() failure [ 26.658269][ T31] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 26.665238][ T31] cdc_ncm 2-1:1.1: bind() failure [ 26.671267][ T31] usb 2-1: USB disconnect, device number 3 [ 26.922221][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.072156][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 27.078302][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.089181][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 27.099103][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 27.108970][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 27.122556][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.131596][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 27.139636][ T9] usb 3-1: SerialNumber: syz [ 27.144456][ T36] kauditd_printk_skb: 80 callbacks suppressed [ 27.144468][ T36] audit: type=1400 audit(1790506947.680:154): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.157497][ T388] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 27.170866][ T338] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.188157][ T384] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 27.195814][ T384] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 27.204252][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 27.210155][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 27.218862][ T36] audit: type=1400 audit(1790506947.760:155): avc: denied { read write } for pid=391 comm="syz.0.23" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.242665][ T36] audit: type=1400 audit(1790506947.760:156): avc: denied { open } for pid=391 comm="syz.0.23" path="/dev/input/event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.269629][ T36] audit: type=1400 audit(1790506947.760:157): avc: denied { create } for pid=387 comm="syz.1.22" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.290816][ T36] audit: type=1400 audit(1790506947.760:158): avc: denied { create } for pid=391 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.311326][ T36] audit: type=1400 audit(1790506947.760:159): avc: denied { write } for pid=391 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.342175][ T338] usb 4-1: Using ep0 maxpacket: 16 [ 27.348714][ T338] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.359624][ T338] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 27.369483][ T338] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 27.382687][ T338] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 27.396596][ T338] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.405786][ T338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 27.413853][ T338] usb 4-1: SerialNumber: syz [ 27.419325][ T386] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 27.426848][ T386] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 27.434988][ T338] hub 4-1:1.0: bad descriptor, ignoring hub [ 27.440924][ T338] hub 4-1:1.0: probe with driver hub failed with error -5 [ 27.452013][ T384] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 27.460919][ T384] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 27.511772][ T36] audit: type=1400 audit(1790506948.050:160): avc: denied { create } for pid=406 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.514913][ T408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.532193][ T36] audit: type=1400 audit(1790506948.050:161): avc: denied { bind } for pid=406 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.539782][ T408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.562283][ T36] audit: type=1400 audit(1790506948.050:162): avc: denied { create } for pid=406 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.585378][ T36] audit: type=1400 audit(1790506948.050:163): avc: denied { listen } for pid=406 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.637055][ T386] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 27.644510][ T386] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 27.742151][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.872289][ T31] usb 2-1: device descriptor read/64, error -71 [ 27.894210][ T9] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 28.091014][ T338] cdc_ether 4-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 28.122187][ T31] usb 2-1: device descriptor read/64, error -71 [ 28.302789][ C1] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 68! [ 28.310686][ C1] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification ca! [ 28.318068][ C1] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 63! [ 28.325440][ C1] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 03! [ 28.332969][ C1] cdc_ether 3-1:1.0 usb0: CDC: unexpected notification 50! [ 28.392173][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 28.522164][ T31] usb 2-1: device descriptor read/64, error -71 [ 28.532998][ C1] cdc_ether 4-1:1.0 usb1: CDC: unexpected notification 68! [ 28.540597][ C1] cdc_ether 4-1:1.0 usb1: CDC: unexpected notification ca! [ 28.547970][ C1] cdc_ether 4-1:1.0 usb1: CDC: unexpected notification 63! [ 28.555326][ C1] cdc_ether 4-1:1.0 usb1: CDC: unexpected notification 03! [ 28.562819][ C1] cdc_ether 4-1:1.0 usb1: CDC: unexpected notification 50! [ 28.570775][ T45] usb 3-1: USB disconnect, device number 3 [ 28.577579][ T45] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 28.772144][ T31] usb 2-1: device descriptor read/64, error -71 [ 28.796267][ T9] usb 4-1: USB disconnect, device number 3 [ 28.802579][ T9] cdc_ether 4-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 28.894594][ T31] usb usb2-port1: attempt power cycle [ 29.242190][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 29.263207][ T31] usb 2-1: device descriptor read/8, error -71 [ 29.278657][ T504] netlink: 20 bytes leftover after parsing attributes in process `syz.2.28'. [ 29.404506][ T31] usb 2-1: device descriptor read/8, error -71 [ 29.623144][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.652155][ T338] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.652155][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 29.683114][ T31] usb 2-1: device descriptor read/8, error -71 [ 29.782633][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 29.789311][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 29.797793][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 29.809064][ T338] usb 4-1: Using ep0 maxpacket: 32 [ 29.815412][ T338] usb 4-1: config index 0 descriptor too short (expected 41252, got 36) [ 29.823187][ T31] usb 2-1: device descriptor read/8, error -71 [ 29.823892][ T338] usb 4-1: config 89 has too many interfaces: 216, using maximum allowed: 32 [ 29.838710][ T9] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 29.847744][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.855731][ T338] usb 4-1: config 89 has an invalid descriptor of length 0, skipping remainder of the config [ 29.866112][ T9] usb 3-1: Product: syz [ 29.870265][ T9] usb 3-1: Manufacturer: syz [ 29.874883][ T338] usb 4-1: config 89 has 0 interfaces, different from the descriptor's value: 216 [ 29.884161][ T9] usb 3-1: SerialNumber: syz [ 29.890813][ T338] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ea [ 29.899937][ T338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.908013][ T338] usb 4-1: Product: syz [ 29.912214][ T338] usb 4-1: Manufacturer: syz [ 29.916811][ T338] usb 4-1: SerialNumber: syz [ 29.932262][ T31] usb usb2-port1: unable to enumerate USB device [ 30.150694][ T338] usb 4-1: USB disconnect, device number 4 [ 30.293594][ T9] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 30.302057][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 30.314557][ T9] usb 3-1: USB disconnect, device number 4 [ 30.323216][ T392] udevd[392]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.482184][ T350] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 30.612295][ T350] usb 1-1: device descriptor read/64, error -71 [ 30.804138][ T522] ./dev/sda1: Can't lookup blockdev [ 30.852154][ T350] usb 1-1: device descriptor read/64, error -71 [ 30.882171][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 30.952224][ T338] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.032159][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 31.092182][ T350] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 31.102267][ T338] usb 4-1: Using ep0 maxpacket: 16 [ 31.108460][ T338] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.119560][ T338] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 31.129514][ T338] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 31.139222][ T338] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.142169][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.153158][ T338] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.169135][ T338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 31.177159][ T338] usb 4-1: SerialNumber: syz [ 31.182728][ T520] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 31.189893][ T520] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 31.197592][ T338] hub 4-1:1.0: bad descriptor, ignoring hub [ 31.203542][ T338] hub 4-1:1.0: probe with driver hub failed with error -5 [ 31.222174][ T350] usb 1-1: device descriptor read/64, error -71 [ 31.302194][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 31.308497][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.318650][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 31.332933][ T31] usb 3-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 31.341969][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.349979][ T31] usb 3-1: Product: syz [ 31.354152][ T31] usb 3-1: Manufacturer: syz [ 31.358733][ T31] usb 3-1: SerialNumber: syz [ 31.398554][ T520] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 31.405810][ T520] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 31.462764][ T350] usb 1-1: device descriptor read/64, error -71 [ 31.572642][ T350] usb usb1-port1: attempt power cycle [ 31.577836][ T31] usb 3-1: MIDIStreaming interface descriptor not found [ 31.587788][ T31] usb 3-1: USB disconnect, device number 5 [ 31.598667][ T312] udevd[312]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.830807][ T338] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 31.912173][ T350] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 31.935323][ T350] usb 1-1: device descriptor read/8, error -71 [ 32.033544][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 68! [ 32.041103][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification ca! [ 32.048481][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 63! [ 32.055870][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 03! [ 32.063395][ C1] cdc_ether 4-1:1.0 usb0: CDC: unexpected notification 50! [ 32.064906][ T350] usb 1-1: device descriptor read/8, error -71 [ 32.159406][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 32.159435][ T36] audit: type=1400 audit(1790506952.700:208): avc: denied { read append } for pid=562 comm="syz.2.39" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.195641][ T36] audit: type=1400 audit(1790506952.700:209): avc: denied { open } for pid=562 comm="syz.2.39" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.218600][ T36] audit: type=1400 audit(1790506952.730:210): avc: denied { ioctl } for pid=562 comm="syz.2.39" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 32.280325][ T45] usb 4-1: USB disconnect, device number 5 [ 32.286984][ T45] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 32.312227][ T350] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 32.334982][ T350] usb 1-1: device descriptor read/8, error -71 [ 32.463795][ T350] usb 1-1: device descriptor read/8, error -71 [ 32.572235][ T350] usb usb1-port1: unable to enumerate USB device [ 32.739434][ T36] audit: type=1400 audit(1790506953.280:211): avc: denied { create } for pid=595 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 32.761087][ T36] audit: type=1400 audit(1790506953.280:212): avc: denied { ioctl } for pid=595 comm="syz.2.41" path="socket:[5328]" dev="sockfs" ino=5328 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 32.785883][ T36] audit: type=1400 audit(1790506953.290:213): avc: denied { getopt } for pid=595 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.860869][ T36] audit: type=1400 audit(1790506953.400:214): avc: denied { read write } for pid=598 comm="syz.2.43" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 32.885308][ T36] audit: type=1400 audit(1790506953.400:215): avc: denied { open } for pid=598 comm="syz.2.43" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 32.909362][ T36] audit: type=1400 audit(1790506953.430:216): avc: denied { ioctl } for pid=598 comm="syz.2.43" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 33.172144][ T338] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 33.182149][ T350] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 33.302148][ T338] usb 3-1: device descriptor read/64, error -71 [ 33.333176][ T350] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.343372][ T350] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 768 [ 33.353198][ T350] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 33.367428][ T350] usb 4-1: New USB device found, idVendor=174c, idProduct=46aa, bcdDevice= 1.00 [ 33.376567][ T350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.384577][ T350] usb 4-1: Product: syz [ 33.388760][ T350] usb 4-1: Manufacturer: syz [ 33.393461][ T350] usb 4-1: SerialNumber: syz [ 33.400005][ T350] usb-storage 4-1:1.0: USB Mass Storage device detected [ 33.407994][ T350] scsi host1: usb-storage 4-1:1.0 [ 33.542145][ T338] usb 3-1: device descriptor read/64, error -71 [ 33.599562][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 33.610391][ T45] usb 4-1: USB disconnect, device number 6 [ 33.617627][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 33.626457][ T9] usb 2-1: can't read configurations, error -71 [ 33.652154][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 33.672480][ T36] audit: type=1400 audit(1790506954.220:217): avc: denied { ioctl } for pid=613 comm="syz.1.45" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=5342 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.782155][ T338] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 33.802506][ T10] usb 1-1: no configurations [ 33.807116][ T10] usb 1-1: can't read configurations, error -22 [ 33.912152][ T338] usb 3-1: device descriptor read/64, error -71 [ 33.942165][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 33.972166][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 34.092516][ T10] usb 1-1: no configurations [ 34.097164][ T10] usb 1-1: can't read configurations, error -22 [ 34.104311][ T10] usb usb1-port1: attempt power cycle [ 34.122142][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 34.131924][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 34.141642][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 34.151324][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.159413][ T338] usb 3-1: device descriptor read/64, error -71 [ 34.165698][ T9] usb 2-1: Product: syz [ 34.169850][ T9] usb 2-1: Manufacturer: syz [ 34.174706][ T9] usb 2-1: SerialNumber: syz [ 34.282240][ T338] usb usb3-port1: attempt power cycle [ 34.442203][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 34.462824][ T10] usb 1-1: no configurations [ 34.467452][ T10] usb 1-1: can't read configurations, error -22 [ 34.602161][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 34.622165][ T338] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 34.630195][ T10] usb 1-1: no configurations [ 34.634929][ T10] usb 1-1: can't read configurations, error -22 [ 34.641288][ T10] usb usb1-port1: unable to enumerate USB device [ 34.648818][ T338] usb 3-1: device descriptor read/8, error -71 [ 34.783122][ T338] usb 3-1: device descriptor read/8, error -71 [ 35.022153][ T338] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 35.044966][ T338] usb 3-1: device descriptor read/8, error -71 [ 35.061207][ T627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.48'. [ 35.173095][ T338] usb 3-1: device descriptor read/8, error -71 [ 35.282305][ T338] usb usb3-port1: unable to enumerate USB device [ 35.482173][ T315] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 35.633193][ T315] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 35.641506][ T315] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 35.649612][ T315] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 35.658493][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 35.668409][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 35.678517][ T315] usb 4-1: string descriptor 0 read error: -22 [ 35.684731][ T315] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 35.693781][ T315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.702420][ T315] usb 4-1: config 0 descriptor?? [ 35.708047][ T315] hub 4-1:0.0: bad descriptor, ignoring hub [ 35.713999][ T315] hub 4-1:0.0: probe with driver hub failed with error -5 [ 35.721851][ T315] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 35.892730][ T636] capability: warning: `syz.2.51' uses deprecated v2 capabilities in a way that may be insecure [ 35.909934][ T315] usb 4-1: USB disconnect, device number 7 [ 36.089076][ T646] rust_binder: 644:646 got reply transaction with no transaction stack [ 36.097556][ T646] rust_binder: 644:646 transaction reply to 0:0 failed EINVAL, code 0 size 80-24 [ 36.107210][ T10] rust_binder: 644: undelivered TRANSACTION_ERROR: 29201 [ 36.362185][ T315] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 36.445578][ T655] 9pnet_fd: Insufficient options for proto=fd [ 36.524590][ T315] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 36.533769][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.541920][ T315] usb 3-1: Product: syz [ 36.552124][ T315] usb 3-1: Manufacturer: syz [ 36.556820][ T315] usb 3-1: SerialNumber: syz [ 36.677560][ T9] usb 2-1: selecting invalid altsetting 1 [ 36.692319][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.704855][ T9] usb 2-1: USB disconnect, device number 9 [ 36.713481][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.862156][ T65] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 36.864246][ T679] mmap: syz.1.67 (679): VmData 29208576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 36.872159][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 37.012312][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 37.018687][ T65] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.029791][ T65] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 37.039847][ T65] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 37.049719][ T65] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 37.063503][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 37.073372][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 37.083240][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.092425][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.105406][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.113619][ T65] usb 4-1: SerialNumber: syz [ 37.119451][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 37.128913][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 37.137156][ T666] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 37.144415][ T666] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 37.151634][ T45] usb 1-1: Product: syz [ 37.156297][ T65] hub 4-1:1.0: bad descriptor, ignoring hub [ 37.162318][ T45] usb 1-1: Manufacturer: syz [ 37.166946][ T45] usb 1-1: SerialNumber: syz [ 37.172025][ T65] hub 4-1:1.0: probe with driver hub failed with error -5 [ 37.364627][ T666] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 37.371812][ T666] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 37.379848][ T315] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4e:bd:a4:d5:d0:e3 [ 37.390529][ T45] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 37.402882][ T315] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 37.594842][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 37.594858][ T36] audit: type=1400 audit(1790506958.140:239): avc: denied { read write } for pid=663 comm="syz.0.62" name="lp0" dev="devtmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 37.626504][ T338] usb 1-1: USB disconnect, device number 14 [ 37.635171][ T338] usblp0: removed [ 37.643351][ T36] audit: type=1400 audit(1790506958.170:240): avc: denied { open } for pid=663 comm="syz.0.62" path="/dev/usb/lp0" dev="devtmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 37.667021][ T36] audit: type=1400 audit(1790506958.170:241): avc: denied { ioctl } for pid=663 comm="syz.0.62" path="/dev/usb/lp0" dev="devtmpfs" ino=482 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 38.757536][ T149] usb 3-1: device reset failed [ 38.774691][ T65] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 38.812603][ T65] usb 4-1: USB disconnect, device number 8 [ 38.819204][ T65] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 38.829780][ C1] usb 3-1: Rx status -71 [ 38.829839][ T338] usb 3-1: USB disconnect, device number 10 [ 38.834056][ C1] usb 3-1: eth1: intr status -71 [ 40.274872][ T36] audit: type=1400 audit(1790506960.820:242): avc: denied { load_policy } for pid=796 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 40.275072][ T801] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 40.298486][ T36] audit: type=1400 audit(1790506960.840:243): avc: denied { bind } for pid=804 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.308235][ T801] SELinux: failed to load policy [ 40.342193][ T36] audit: type=1400 audit(1790506960.840:244): avc: denied { read } for pid=804 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.363514][ T813] netlink: 224 bytes leftover after parsing attributes in process `syz.2.72'. [ 40.391804][ T36] audit: type=1400 audit(1790506960.850:245): avc: denied { write } for pid=796 comm="syz.0.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 40.422775][ T36] audit: type=1400 audit(1790506960.870:246): avc: denied { cmd } for pid=806 comm="iou-wrk-807" path="socket:[5838]" dev="sockfs" ino=5838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 40.459528][ T36] audit: type=1400 audit(1790506960.910:247): avc: denied { nlmsg_read } for pid=804 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.555050][ T823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12318 sclass=netlink_route_socket pid=823 comm=syz.3.77 [ 40.582178][ T65] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 40.692174][ T316] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 40.699786][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 40.733137][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.744035][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.753779][ T65] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.766661][ T65] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.775936][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.784569][ T65] usb 2-1: config 0 descriptor?? [ 40.852132][ T316] usb 1-1: Using ep0 maxpacket: 16 [ 40.858312][ T316] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.869392][ T316] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 40.879280][ T316] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 40.888985][ T316] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 40.902704][ T45] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.913791][ T316] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 40.922852][ T45] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.935686][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 40.943711][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 40.950306][ T45] usb 3-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 40.959352][ T316] usb 1-1: SerialNumber: syz [ 40.964235][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.974423][ T827] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 40.981779][ T827] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 40.981937][ T45] usb 3-1: config 0 descriptor?? [ 40.994357][ T316] hub 1-1:1.0: bad descriptor, ignoring hub [ 41.000302][ T316] hub 1-1:1.0: probe with driver hub failed with error -5 [ 41.195523][ T827] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 41.202883][ T827] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 41.256885][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 41.262924][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 41.271594][ T65] usb 2-1: USB disconnect, device number 10 [ 41.296797][ T834] random: crng reseeded on system resumption [ 41.416585][ T45] wacom 0003:056A:0325.0003: hidraw0: USB HID v36.2b Joystick [HID 056a:0325] on usb-dummy_hcd.2-1/input0 [ 41.632053][ T316] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 41.672309][ T841] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000003' [ 41.693097][ T841] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.022157][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 42.172139][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 42.178548][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 42.188228][ T10] usb 4-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 42.197306][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.205344][ T10] usb 4-1: Product: syz [ 42.209584][ T10] usb 4-1: Manufacturer: syz [ 42.214197][ T10] usb 4-1: SerialNumber: syz [ 42.451209][ T10] usb 4-1: MIDIStreaming interface descriptor not found [ 42.483903][ T10] usb 4-1: USB disconnect, device number 9 [ 42.514780][ T392] udevd[392]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.624638][ T869] kvm: kvm [868]: vcpu0, guest rIP: 0x9112 Unhandled WRMSR(0xc2) = 0x5407 [ 42.633300][ T869] kvm: kvm [868]: vcpu0, guest rIP: 0x9112 Unhandled WRMSR(0xc1) = 0x5b07 [ 42.712228][ T149] usb 1-1: reset high-speed USB device number 15 using dummy_hcd [ 42.720501][ T149] usb 1-1: device reset changed ep0 maxpacket size! [ 42.727397][ T9] usb 1-1: USB disconnect, device number 15 [ 42.733691][ T9] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 42.768124][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 42.768141][ T36] audit: type=1400 audit(1790506963.310:265): avc: denied { mount } for pid=875 comm="syz.1.88" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 42.796882][ T877] ./dev/sda1: Can't lookup blockdev [ 42.849939][ T36] audit: type=1400 audit(1790506963.390:266): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 42.884269][ T36] audit: type=1400 audit(1790506963.430:267): avc: denied { mount } for pid=891 comm="syz.1.90" name="/" dev="ramfs" ino=5992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 42.922155][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 42.971700][ T893] capability: warning: `syz.1.90' uses 32-bit capabilities (legacy support in use) [ 43.014145][ T36] audit: type=1400 audit(1790506963.560:268): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 43.072144][ T899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.082185][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 43.083371][ T899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.093180][ T9] usb 1-1: config index 0 descriptor too short (expected 1060, got 36) [ 43.103441][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.114526][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.124476][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 43.139182][ T9] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 43.148459][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.158098][ T9] usb 1-1: config 0 descriptor?? [ 43.312137][ T338] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 43.366315][ T36] audit: type=1400 audit(1790506963.910:269): avc: denied { block_suspend } for pid=871 comm="syz.0.85" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 43.463590][ T338] usb 2-1: unable to get BOS descriptor or descriptor too short [ 43.471771][ T338] usb 2-1: not running at top speed; connect to a high speed hub [ 43.476300][ T45] usb 3-1: USB disconnect, device number 11 [ 43.484670][ T338] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 43.502693][ T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.512613][ T338] usb 2-1: Product: syz [ 43.516787][ T338] usb 2-1: Manufacturer: syz [ 43.521367][ T338] usb 2-1: SerialNumber: syz [ 43.548573][ T904] kvm: kvm [903]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 43.752839][ T36] audit: type=1400 audit(1790506964.300:270): avc: denied { map } for pid=898 comm="syz.1.92" path="pipe:[2922]" dev="pipefs" ino=2922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 43.932178][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 44.036774][ T36] audit: type=1400 audit(1790506964.580:271): avc: denied { bind } for pid=911 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.081441][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 44.088363][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 44.096229][ T918] GUP no longer grows the stack in syz.0.97 (918): 200000005000-200000008000 (200000004000) [ 44.097206][ T917] virtio-fs: tag not found [ 44.106378][ T36] audit: type=1400 audit(1790506964.640:272): avc: denied { mount } for pid=916 comm="syz.0.97" name="/" dev="configfs" ino=2570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 44.113079][ T913] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 44.133915][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 44.144588][ T918] CPU: 1 UID: 0 PID: 918 Comm: syz.0.97 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 44.144613][ T918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.144626][ T918] Call Trace: [ 44.144632][ T918] [ 44.144639][ T918] __dump_stack+0x21/0x30 [ 44.144675][ T918] dump_stack_lvl+0x140/0x1c0 [ 44.144698][ T918] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.144719][ T918] ? find_vma+0xd3/0x120 [ 44.144739][ T918] dump_stack+0x19/0x20 [ 44.144760][ T918] __get_user_pages+0x1e20/0x22d0 [ 44.144783][ T918] ? __kernel_text_address+0x11/0x40 [ 44.144806][ T918] ? __kasan_check_write+0x18/0x20 [ 44.144825][ T918] ? down_read_killable+0x7f/0x100 [ 44.144848][ T918] ? populate_vma_page_range+0x220/0x220 [ 44.144870][ T918] ? gup_fast_pgd_range+0xd63/0xe40 [ 44.144893][ T918] __gup_longterm_locked+0xc53/0x1570 [ 44.144916][ T918] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.144940][ T918] gup_fast_fallback+0x64f/0x740 [ 44.144963][ T918] ? get_user_pages_fast_only+0xc0/0xc0 [ 44.144987][ T918] get_user_pages_fast+0x73/0xb0 [ 44.145009][ T918] get_futex_key+0x25f/0x940 [ 44.145030][ T918] ? refill_pi_state_cache+0xa9/0x210 [ 44.145054][ T918] ? __cfi_get_futex_key+0x10/0x10 [ 44.145074][ T918] ? __asan_memset+0x39/0x50 [ 44.145090][ T918] ? refill_pi_state_cache+0x146/0x210 [ 44.145114][ T918] futex_requeue+0x26a/0x1490 [ 44.145131][ T918] ? cgroup_rstat_updated+0x144/0x800 [ 44.145150][ T918] ? __cfi_futex_requeue+0x10/0x10 [ 44.145167][ T918] ? handle_mm_fault+0x16fe/0x1ba0 [ 44.145190][ T918] do_futex+0x354/0x510 [ 44.145211][ T918] ? __kasan_check_write+0x18/0x20 [ 44.145228][ T918] ? __cfi_do_futex+0x10/0x10 [ 44.145249][ T918] ? _raw_spin_unlock_irq+0x45/0x70 [ 44.145267][ T918] __se_sys_futex+0x13c/0x320 [ 44.145290][ T918] ? __x64_sys_futex+0x110/0x110 [ 44.145311][ T918] ? __kasan_check_write+0x18/0x20 [ 44.145327][ T918] ? do_user_addr_fault+0xbf5/0x1230 [ 44.145351][ T918] __x64_sys_futex+0xe9/0x110 [ 44.145373][ T918] x64_sys_call+0x227f/0x2ee0 [ 44.145389][ T918] do_syscall_64+0x57/0xf0 [ 44.145405][ T918] ? clear_bhb_loop+0x50/0xa0 [ 44.145425][ T918] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.145445][ T918] RIP: 0033:0x7f562b99e159 [ 44.145464][ T918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.145478][ T918] RSP: 002b:00007f562a3d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 44.145505][ T918] RAX: ffffffffffffffda RBX: 00007f562bc26090 RCX: 00007f562b99e159 [ 44.145519][ T918] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000200000004000 [ 44.145529][ T918] RBP: 00007f562ba3506b R08: 0000000000000000 R09: 0000000000000001 [ 44.145540][ T918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.145551][ T918] R13: 00007f562bc26128 R14: 00007f562bc26090 R15: 00007fff74238988 [ 44.145566][ T918] [ 44.352173][ T36] audit: type=1400 audit(1790506964.740:273): avc: denied { search } for pid=916 comm="syz.0.97" name="/" dev="configfs" ino=2570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.354977][ T9] usb 1-1: USB disconnect, device number 16 [ 44.361183][ T36] audit: type=1400 audit(1790506964.800:274): avc: denied { read } for pid=916 comm="syz.0.97" name="/" dev="configfs" ino=2570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 44.366715][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.500221][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 44.510268][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 44.519965][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.535644][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.552539][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 44.560556][ T10] usb 3-1: SerialNumber: syz [ 44.566409][ T907] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 44.577048][ T907] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 44.592722][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 44.598674][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 44.791869][ T907] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 44.799438][ T907] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 44.912579][ T939] FAULT_INJECTION: forcing a failure. [ 44.912579][ T939] name failslab, interval 1, probability 0, space 0, times 1 [ 44.925408][ T939] CPU: 1 UID: 0 PID: 939 Comm: syz.0.103 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 44.925440][ T939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.925453][ T939] Call Trace: [ 44.925460][ T939] [ 44.925468][ T939] __dump_stack+0x21/0x30 [ 44.925501][ T939] dump_stack_lvl+0x140/0x1c0 [ 44.925528][ T939] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.925553][ T939] ? mas_store_prealloc+0xc69/0x1250 [ 44.925578][ T939] ? __cfi_perf_event_mmap+0x10/0x10 [ 44.925610][ T939] dump_stack+0x19/0x20 [ 44.925634][ T939] should_fail_ex+0x3c2/0x510 [ 44.925658][ T939] should_failslab+0xac/0x100 [ 44.925681][ T939] kmem_cache_alloc_noprof+0x42/0x410 [ 44.925701][ T939] ? vm_area_dup+0x3f/0x560 [ 44.925724][ T939] vm_area_dup+0x3f/0x560 [ 44.925743][ T939] ? __split_vma+0x1b8/0xc10 [ 44.925764][ T939] __split_vma+0x1ce/0xc10 [ 44.925785][ T939] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 44.925808][ T939] ? mas_find+0x415/0x620 [ 44.925832][ T939] vms_gather_munmap_vmas+0x446/0xd90 [ 44.925856][ T939] do_vmi_align_munmap+0x251/0x5f0 [ 44.925880][ T939] ? __cfi_do_vmi_align_munmap+0x10/0x10 [ 44.925904][ T939] do_vmi_munmap+0x245/0x2e0 [ 44.925926][ T939] __vm_munmap+0x25b/0x3d0 [ 44.925948][ T939] ? vm_munmap+0x40/0x40 [ 44.925968][ T939] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 44.925988][ T939] ? __kasan_check_write+0x18/0x20 [ 44.926007][ T939] ? do_user_addr_fault+0xbf5/0x1230 [ 44.926025][ T939] ? blocking_notifier_call_chain+0x7c/0x90 [ 44.926046][ T939] __se_sys_munmap+0xb4/0x390 [ 44.926068][ T939] __x64_sys_munmap+0x5f/0x80 [ 44.926088][ T939] x64_sys_call+0x9c6/0x2ee0 [ 44.926106][ T939] do_syscall_64+0x57/0xf0 [ 44.926124][ T939] ? clear_bhb_loop+0x50/0xa0 [ 44.926148][ T939] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.926170][ T939] RIP: 0033:0x7f562b99df87 [ 44.926187][ T939] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.926202][ T939] RSP: 002b:00007f562a3f5d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 44.926224][ T939] RAX: ffffffffffffffda RBX: 00007f5624000000 RCX: 00007f562b99df87 [ 44.926239][ T939] RDX: 0000000000000000 RSI: 0000000001e00000 RDI: 00007f5622200000 [ 44.926253][ T939] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 44.926266][ T939] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 44.926285][ T939] R13: 0000000000001000 R14: 00007f5628000000 R15: 0000000001e00000 [ 44.926302][ T939] [ 45.617366][ T943] fuse: Bad value for 'user_id' [ 45.632119][ T943] fuse: Bad value for 'user_id' [ 45.652567][ T943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 45.758702][ T949] kvm: kvm [948]: vcpu0, guest rIP: 0x9112 Unhandled WRMSR(0xc2) = 0x5407 [ 45.767530][ T949] kvm: kvm [948]: vcpu0, guest rIP: 0x9112 Unhandled WRMSR(0xc1) = 0x5b07 [ 45.826852][ T953] netlink: 'syz.3.108': attribute type 17 has an invalid length. [ 45.832474][ T956] FAULT_INJECTION: forcing a failure. [ 45.832474][ T956] name fail_futex, interval 1, probability 0, space 0, times 1 [ 45.848219][ T956] CPU: 0 UID: 0 PID: 956 Comm: syz.3.108 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 45.848245][ T956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.848255][ T956] Call Trace: [ 45.848261][ T956] [ 45.848267][ T956] __dump_stack+0x21/0x30 [ 45.848294][ T956] dump_stack_lvl+0x140/0x1c0 [ 45.848311][ T956] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.848324][ T956] ? folio_add_lru+0x116/0x400 [ 45.848337][ T956] ? __kasan_check_read+0x15/0x20 [ 45.848348][ T956] ? folio_add_new_anon_rmap+0x4a2/0x910 [ 45.848360][ T956] dump_stack+0x19/0x20 [ 45.848372][ T956] should_fail_ex+0x3c2/0x510 [ 45.848384][ T956] should_fail+0xf/0x20 [ 45.848394][ T956] get_futex_key+0x178/0x940 [ 45.848408][ T956] ? __cfi_get_futex_key+0x10/0x10 [ 45.848420][ T956] ? cgroup_rstat_updated+0x144/0x800 [ 45.848432][ T956] futex_wait_setup+0xae/0x260 [ 45.848441][ T956] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 45.848452][ T956] ? __cfi_futex_wait_setup+0x10/0x10 [ 45.848461][ T956] ? __asan_memcpy+0x5a/0x80 [ 45.848471][ T956] __futex_wait+0x12c/0x3d0 [ 45.848480][ T956] ? __cfi___futex_wait+0x10/0x10 [ 45.848490][ T956] ? __cfi_futex_wake_mark+0x10/0x10 [ 45.848499][ T956] ? __kasan_check_read+0x15/0x20 [ 45.848508][ T956] ? futex_wake+0x627/0x950 [ 45.848517][ T956] futex_wait+0x128/0x7c0 [ 45.848527][ T956] ? __cfi_futex_wait+0x10/0x10 [ 45.848536][ T956] ? __kasan_check_write+0x18/0x20 [ 45.848547][ T956] do_futex+0x32a/0x510 [ 45.848559][ T956] ? __cfi_do_futex+0x10/0x10 [ 45.848573][ T956] __se_sys_futex+0x13c/0x320 [ 45.848588][ T956] ? __x64_sys_futex+0x110/0x110 [ 45.848600][ T956] ? __put_user_4+0x11/0x30 [ 45.848610][ T956] __x64_sys_futex+0xe9/0x110 [ 45.848626][ T956] x64_sys_call+0x227f/0x2ee0 [ 45.848635][ T956] do_syscall_64+0x57/0xf0 [ 45.848644][ T956] ? clear_bhb_loop+0x50/0xa0 [ 45.848657][ T956] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.848668][ T956] RIP: 0033:0x7fb008f9e159 [ 45.848678][ T956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.848686][ T956] RSP: 002b:00007fb009e300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 45.848699][ T956] RAX: ffffffffffffffda RBX: 00007fb009226368 RCX: 00007fb008f9e159 [ 45.848707][ T956] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb009226368 [ 45.848713][ T956] RBP: 00007fb009226360 R08: 0000000000000000 R09: 0000000000000000 [ 45.848720][ T956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.848726][ T956] R13: 00007fb0092263f8 R14: 00007ffcb1879de0 R15: 00007ffcb1879ec8 [ 45.848734][ T956] [ 45.972203][ T316] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 46.131335][ T338] usb 2-1: USB disconnect, device number 11 [ 46.148217][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.249915][ T963] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 46.272163][ T316] usb 1-1: Using ep0 maxpacket: 32 [ 46.370053][ T316] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.378759][ T316] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 46.391331][ T316] usb 1-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 46.400712][ T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.408908][ T316] usb 1-1: Product: syz [ 46.413326][ T316] usb 1-1: Manufacturer: syz [ 46.417979][ T316] usb 1-1: SerialNumber: syz [ 46.694327][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 46.734103][ T10] usb 3-1: USB disconnect, device number 12 [ 46.849959][ T994] process 'syz.3.117' launched './file0' with NULL argv: empty string added [ 46.872450][ T994] No source specified [ 47.112158][ T350] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 47.135541][ T316] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 47.152193][ T316] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 47.160140][ T316] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 47.168636][ T316] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 47.177411][ T316] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 47.190285][ T316] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 47.212247][ T316] usb 1-1: USB disconnect, device number 17 [ 47.235056][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 47.272192][ T338] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 47.282893][ T350] usb 2-1: unable to get BOS descriptor or descriptor too short [ 47.302861][ T350] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.320660][ T350] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 47.335186][ T350] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 47.366280][ T409] udevd[409]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.392188][ T350] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 47.422133][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 47.431804][ T350] usb 2-1: New USB device found, idVendor=0582, idProduct=8ea8, bcdDevice=a0.af [ 47.441608][ T350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.448714][ T1008] tipc: Started in network mode [ 47.450034][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 47.457309][ T1008] tipc: Node identity ea5fdb750603, cluster identity 4711 [ 47.468145][ T350] usb 2-1: Product: syz [ 47.476170][ T1008] tipc: Enabled bearer , priority 10 [ 47.478326][ T350] usb 2-1: Manufacturer: syz [ 47.487730][ T338] usb 3-1: Using ep0 maxpacket: 16 [ 47.492902][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 47.511497][ T350] usb 2-1: SerialNumber: syz [ 47.517783][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 47.532127][ T338] usb 3-1: config 32 has an invalid interface number: 64 but max is 0 [ 47.550756][ T338] usb 3-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 47.554189][ T1010] tmpfs: Unknown parameter 'h°B²uge' [ 47.562536][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 47.582126][ T338] usb 3-1: config 32 has no interface number 0 [ 47.595517][ T338] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 47.613912][ T10] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 47.624563][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.632627][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.643858][ T10] usb 4-1: Product: syz [ 47.649481][ T10] usb 4-1: Manufacturer: syz [ 47.655387][ T10] usb 4-1: SerialNumber: syz [ 47.672224][ T10] usb 4-1: config 0 descriptor?? [ 47.683802][ T999] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 47.704161][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 47.832682][ T36] kauditd_printk_skb: 222 callbacks suppressed [ 47.832698][ T36] audit: type=1400 audit(1790506968.380:497): avc: denied { ioctl } for pid=1011 comm="syz.0.124" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.863914][ T36] audit: type=1400 audit(1790506968.380:498): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=515 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.893442][ T1000] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 47.903055][ T65] usb 3-1: USB disconnect, device number 13 [ 47.909843][ T36] audit: type=1400 audit(1790506968.380:499): avc: denied { read open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=515 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.949345][ T315] usb 4-1: USB disconnect, device number 10 [ 47.949357][ C0] xpad 4-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 47.966994][ T36] audit: type=1400 audit(1790506968.380:500): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=515 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.975437][ T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 47.991794][ T36] audit: type=1400 audit(1790506968.380:501): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=515 ioctlcmd=0x4521 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.062164][ T36] audit: type=1400 audit(1790506968.380:502): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=515 ioctlcmd=0x4523 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.089119][ T36] audit: type=1400 audit(1790506968.380:503): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=515 ioctlcmd=0x4535 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.120864][ T36] audit: type=1400 audit(1790506968.430:504): avc: denied { create } for pid=998 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.169451][ T36] audit: type=1400 audit(1790506968.430:505): avc: denied { write } for pid=998 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.202172][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 48.213425][ T36] audit: type=1400 audit(1790506968.440:506): avc: denied { read } for pid=998 comm="syz.2.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.235073][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.245995][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 48.255841][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 48.265491][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 48.279893][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.288951][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 48.294823][ T350] usb 2-1: unit 2 not found! [ 48.297861][ T45] usb 1-1: SerialNumber: syz [ 48.301779][ T350] usb 2-1: unit 0 not found! [ 48.324427][ T1012] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.333103][ T1012] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.347092][ T350] usb 2-1: USB disconnect, device number 12 [ 48.362577][ T45] hub 1-1:1.0: bad descriptor, ignoring hub [ 48.375589][ T45] hub 1-1:1.0: probe with driver hub failed with error -5 [ 48.445338][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.522169][ T315] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 48.588441][ T1012] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.596607][ T1012] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.603814][ T65] tipc: Node number set to 3965508469 [ 48.672154][ T315] usb 4-1: device descriptor read/64, error -71 [ 48.782139][ T350] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 48.892159][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 48.922137][ T315] usb 4-1: device descriptor read/64, error -71 [ 48.936269][ T350] usb 2-1: unable to get BOS descriptor or descriptor too short [ 48.945650][ T350] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 is Bulk; changing to Interrupt [ 48.955543][ T350] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 48.965438][ T350] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 48.975295][ T350] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 48.990957][ T350] usb 2-1: string descriptor 0 read error: -22 [ 48.997712][ T350] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 49.006783][ T350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.025041][ T1026] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 49.032590][ T1026] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 49.040134][ T1026] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 49.049190][ T350] usb 2-1: MIDIStreaming interface descriptor not found [ 49.058406][ T350] usb 2-1: too many endpoints [ 49.064658][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 49.073996][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 49.097692][ T10] usb 3-1: config 0 has no interface number 0 [ 49.105960][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 49.115723][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 49.132120][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.140126][ T10] usb 3-1: Product: syz [ 49.152131][ T10] usb 3-1: Manufacturer: syz [ 49.156742][ T10] usb 3-1: SerialNumber: syz [ 49.167786][ T10] usb 3-1: config 0 descriptor?? [ 49.182127][ T315] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 49.184802][ T10] smsc75xx v1.0.0 [ 49.258555][ T65] usb 2-1: USB disconnect, device number 13 [ 49.332137][ T315] usb 4-1: device descriptor read/64, error -71 [ 49.398839][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 49.409709][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 49.419414][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 49.429699][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 49.582138][ T315] usb 4-1: device descriptor read/64, error -71 [ 49.692513][ T315] usb usb4-port1: attempt power cycle [ 49.812496][ T1038] netlink: 'syz.1.128': attribute type 16 has an invalid length. [ 49.820304][ T1038] netlink: 38694 bytes leftover after parsing attributes in process `syz.1.128'. [ 50.032147][ T315] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 50.054780][ T315] usb 4-1: device descriptor read/8, error -71 [ 50.193574][ T315] usb 4-1: device descriptor read/8, error -71 [ 50.204454][ T1046] mmap: syz.1.131 (1046) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.285756][ T1048] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 50.381863][ T1056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 50.442141][ T315] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 50.464712][ T315] usb 4-1: device descriptor read/8, error -71 [ 50.594897][ T315] usb 4-1: device descriptor read/8, error -71 [ 50.712232][ T315] usb usb4-port1: unable to enumerate USB device [ 50.721415][ T45] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 50.743869][ T45] usb 1-1: USB disconnect, device number 18 [ 51.522150][ T350] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 51.660075][ T10] usb 3-1: USB disconnect, device number 14 [ 51.681076][ T350] usb 4-1: unable to get BOS descriptor or descriptor too short [ 51.700690][ T350] usb 4-1: config 1 has an invalid interface descriptor of length 5, skipping [ 51.709947][ T350] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.722881][ T350] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 51.749338][ T350] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 51.762187][ T350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.770907][ T350] usb 4-1: Product: syz [ 51.778104][ T350] usb 4-1: Manufacturer: syz [ 51.784754][ T350] usb 4-1: SerialNumber: syz [ 52.002204][ T1077] tracefs: Bad value for 'mode' [ 52.012532][ T350] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 52.020050][ T350] cdc_ncm 4-1:1.0: bind() failure [ 52.032954][ T350] usb 4-1: USB disconnect, device number 15 [ 52.092135][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 52.112161][ T338] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 52.252145][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 52.259185][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.270177][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 52.280880][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 52.290574][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 52.304462][ T338] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.315142][ T338] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 52.324144][ T338] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 52.334978][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.344091][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 52.352076][ T10] usb 3-1: SerialNumber: syz [ 52.359003][ T338] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.360502][ T1092] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 52.369889][ T338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.383749][ T338] usb 1-1: Product: syz [ 52.383764][ T1092] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 52.387916][ T338] usb 1-1: Manufacturer: syz [ 52.399686][ T338] usb 1-1: SerialNumber: syz [ 52.404628][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 52.410549][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 52.442151][ T341] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 52.592127][ T341] usb 2-1: Using ep0 maxpacket: 32 [ 52.604922][ T341] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 52.607934][ T1092] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 52.620477][ T1092] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 52.632144][ T341] usb 2-1: config 0 has no interface number 0 [ 52.638387][ T341] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.662616][ T341] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.698458][ T341] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 52.713622][ T1108] kernel read not supported for file /policy (pid: 1108 comm: syz.3.147) [ 52.717813][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.743191][ T341] usb 2-1: config 0 descriptor?? [ 52.842645][ T36] kauditd_printk_skb: 1022 callbacks suppressed [ 52.842662][ T36] audit: type=1400 audit(1790506973.390:1529): avc: denied { create } for pid=1091 comm="syz.2.142" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.873734][ T36] audit: type=1400 audit(1790506973.390:1530): avc: denied { map } for pid=1091 comm="syz.2.142" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.914018][ T338] usb 1-1: 1:1 : invalid UAC_AS_GENERAL desc [ 52.926477][ T36] audit: type=1400 audit(1790506973.390:1531): avc: denied { read write } for pid=1091 comm="syz.2.142" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.951214][ T338] usb 1-1: 0:2 : does not exist [ 52.965890][ T338] usb 1-1: USB disconnect, device number 19 [ 52.971945][ T36] audit: type=1400 audit(1790506973.390:1532): avc: denied { map } for pid=1091 comm="syz.2.142" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.005361][ T36] audit: type=1400 audit(1790506973.390:1533): avc: denied { read write } for pid=1091 comm="syz.2.142" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9089 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.036090][ T392] udevd[392]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.036218][ T36] audit: type=1400 audit(1790506973.400:1534): avc: denied { create } for pid=1091 comm="syz.2.142" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.073099][ T36] audit: type=1400 audit(1790506973.400:1535): avc: denied { map } for pid=1091 comm="syz.2.142" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.082807][ T316] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 53.097167][ T36] audit: type=1400 audit(1790506973.400:1536): avc: denied { read write } for pid=1091 comm="syz.2.142" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.131146][ T36] audit: type=1400 audit(1790506973.400:1537): avc: denied { map } for pid=1091 comm="syz.2.142" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.186749][ T36] audit: type=1400 audit(1790506973.400:1538): avc: denied { read write } for pid=1091 comm="syz.2.142" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.255522][ T316] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 53.276592][ T316] usb 4-1: can't read configurations, error -22 [ 53.359663][ T341] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.0004/input/input11 [ 53.402308][ T341] uclogic 0003:28BD:0094.0004: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 53.442185][ T316] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 53.462878][ T1127] rust_binder: 1126:1127 no such ref 0 [ 53.562182][ T45] usb 2-1: USB disconnect, device number 14 [ 53.630686][ T316] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 53.643210][ T316] usb 4-1: can't read configurations, error -22 [ 53.659403][ T1128] fido_id[1128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 53.665226][ T316] usb usb4-port1: attempt power cycle [ 53.772770][ T1130] €Â: renamed from xfrm0 (while UP) [ 53.809206][ T1130] tipc: Disabling bearer [ 54.042151][ T316] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 54.065525][ T316] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 54.073493][ T316] usb 4-1: can't read configurations, error -22 [ 54.202151][ T316] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 54.222145][ T45] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 54.233599][ T316] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 54.241529][ T316] usb 4-1: can't read configurations, error -22 [ 54.248805][ T316] usb usb4-port1: unable to enumerate USB device [ 54.362137][ T341] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 54.372137][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 54.382359][ T45] usb 1-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 54.391460][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.399479][ T45] usb 1-1: Product: syz [ 54.403661][ T45] usb 1-1: Manufacturer: syz [ 54.408252][ T45] usb 1-1: SerialNumber: syz [ 54.512135][ T341] usb 2-1: Using ep0 maxpacket: 16 [ 54.519668][ T341] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 54.528606][ T341] usb 2-1: config 0 has no interface number 0 [ 54.535226][ T341] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 54.545254][ T341] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 54.557919][ T341] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 54.567002][ T341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.575011][ T341] usb 2-1: Product: syz [ 54.579163][ T341] usb 2-1: Manufacturer: syz [ 54.584877][ T341] usb 2-1: SerialNumber: syz [ 54.591263][ T341] usb 2-1: config 0 descriptor?? [ 54.604621][ T1136] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 54.612086][ T1136] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 54.779897][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 54.828257][ T10] usb 3-1: USB disconnect, device number 15 [ 54.831299][ T1136] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 54.872533][ T1136] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 54.897677][ T45] usb 1-1: Fast Track Pro switching to config #2 [ 54.920799][ T45] usb 1-1: USB disconnect, device number 20 [ 55.092886][ T341] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 55.103465][ T341] asix 2-1:0.34: probe with driver asix failed with error -71 [ 55.125055][ T341] usb 2-1: USB disconnect, device number 15 [ 55.297271][ T1153] tap0: tun_chr_ioctl cmd 21731 [ 55.367266][ T1155] FAULT_INJECTION: forcing a failure. [ 55.367266][ T1155] name failslab, interval 1, probability 0, space 0, times 0 [ 55.379944][ T1155] CPU: 1 UID: 0 PID: 1155 Comm: syz.2.160 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 55.379974][ T1155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.379986][ T1155] Call Trace: [ 55.379993][ T1155] [ 55.380000][ T1155] __dump_stack+0x21/0x30 [ 55.380029][ T1155] dump_stack_lvl+0x140/0x1c0 [ 55.380043][ T1155] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.380058][ T1155] dump_stack+0x19/0x20 [ 55.380072][ T1155] should_fail_ex+0x3c2/0x510 [ 55.380085][ T1155] should_failslab+0xac/0x100 [ 55.380097][ T1155] kmem_cache_alloc_node_noprof+0x45/0x420 [ 55.380109][ T1155] ? __alloc_skb+0x10c/0x360 [ 55.380122][ T1155] __alloc_skb+0x10c/0x360 [ 55.380133][ T1155] fdb_notify+0x78/0x150 [ 55.380146][ T1155] fdb_delete+0xb08/0xdc0 [ 55.380159][ T1155] ? fdb_notify+0x150/0x150 [ 55.380171][ T1155] ? cred_has_capability+0x296/0x3a0 [ 55.380183][ T1155] fdb_delete_local+0x3e4/0x4a0 [ 55.380195][ T1155] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 55.380207][ T1155] br_fdb_delete_by_port+0x26b/0x350 [ 55.380220][ T1155] br_dev_delete+0xb5/0x130 [ 55.380229][ T1155] ? br_del_bridge+0xac/0xf0 [ 55.380238][ T1155] br_del_bridge+0xb6/0xf0 [ 55.380247][ T1155] br_ioctl_stub+0x75e/0xcd0 [ 55.380257][ T1155] ? __cfi_br_ioctl_stub+0x10/0x10 [ 55.380267][ T1155] ? selinux_file_ioctl+0x732/0x1480 [ 55.380279][ T1155] ? __kasan_check_write+0x18/0x20 [ 55.380289][ T1155] ? mutex_lock+0x97/0x1d0 [ 55.380301][ T1155] ? file_init_path+0x434/0x590 [ 55.380315][ T1155] ? __cfi_do_futex+0x10/0x10 [ 55.380328][ T1155] ? __cfi_br_ioctl_stub+0x10/0x10 [ 55.380338][ T1155] sock_ioctl+0x4e0/0x7e0 [ 55.380347][ T1155] ? __cfi_sock_ioctl+0x10/0x10 [ 55.380357][ T1155] ? __fget_files+0x2bc/0x330 [ 55.380369][ T1155] ? bpf_lsm_file_ioctl+0xd/0x20 [ 55.380382][ T1155] ? security_file_ioctl+0x3e/0x110 [ 55.380392][ T1155] ? __cfi_sock_ioctl+0x10/0x10 [ 55.380401][ T1155] __se_sys_ioctl+0x123/0x1b0 [ 55.380414][ T1155] __x64_sys_ioctl+0x7f/0xa0 [ 55.380428][ T1155] x64_sys_call+0x1878/0x2ee0 [ 55.380439][ T1155] do_syscall_64+0x57/0xf0 [ 55.380448][ T1155] ? clear_bhb_loop+0x50/0xa0 [ 55.380460][ T1155] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.380473][ T1155] RIP: 0033:0x7ff57239e159 [ 55.380483][ T1155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.380492][ T1155] RSP: 002b:00007ff5732cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.380506][ T1155] RAX: ffffffffffffffda RBX: 00007ff572625fa0 RCX: 00007ff57239e159 [ 55.380514][ T1155] RDX: 0000200000000040 RSI: 00000000000089a1 RDI: 0000000000000004 [ 55.380521][ T1155] RBP: 00007ff57243506b R08: 0000000000000000 R09: 0000000000000000 [ 55.380528][ T1155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.380534][ T1155] R13: 00007ff572626038 R14: 00007ff572625fa0 R15: 00007fff77426a98 [ 55.380542][ T1155] [ 55.932141][ T45] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 55.952144][ T341] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 56.092121][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 56.099559][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 56.114715][ T341] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 56.120908][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 56.132301][ T341] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 56.151813][ T45] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 56.155363][ T341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.168863][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.185174][ T341] usb 2-1: config 0 descriptor?? [ 56.187254][ T45] usb 1-1: config 0 descriptor?? [ 56.200512][ T341] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 56.616929][ T45] lenovo 0003:17EF:6047.0005: ignoring exceeding usage max [ 56.641070][ T45] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 56.649215][ T45] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 56.656890][ T45] lenovo 0003:17EF:6047.0005: item fetching failed at offset 14/40 [ 56.665822][ T45] lenovo 0003:17EF:6047.0005: hid_parse failed [ 56.672019][ T45] lenovo 0003:17EF:6047.0005: probe with driver lenovo failed with error -22 [ 56.832970][ T316] usb 1-1: USB disconnect, device number 21 [ 56.992133][ T338] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 57.152125][ T338] usb 4-1: Using ep0 maxpacket: 16 [ 57.159497][ T338] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.177925][ T338] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 57.198421][ T338] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 57.218077][ T338] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 57.241702][ T338] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.250878][ T338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 57.260963][ T338] usb 4-1: SerialNumber: syz [ 57.277841][ T1167] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 57.292324][ T1167] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 57.300656][ T338] hub 4-1:1.0: bad descriptor, ignoring hub [ 57.309528][ T338] hub 4-1:1.0: probe with driver hub failed with error -5 [ 57.513601][ T1167] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 57.521898][ T1167] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 57.662134][ T316] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 57.830106][ T316] usb 1-1: unable to get BOS descriptor or descriptor too short [ 57.845638][ T316] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 57.856653][ T36] kauditd_printk_skb: 21807 callbacks suppressed [ 57.856667][ T36] audit: type=1326 audit(1790506978.390:23338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1154 comm="syz.2.160" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57239e159 code=0x50000 [ 57.888789][ T36] audit: type=1326 audit(1790506978.390:23339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1154 comm="syz.2.160" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57239e159 code=0x50000 [ 57.914207][ T1173] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.920742][ T1173] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 57.928657][ T1173] audit: backlog limit exceeded [ 57.933793][ T36] audit: type=1326 audit(1790506978.390:23340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1154 comm="syz.2.160" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57239e159 code=0x50000 [ 57.959642][ T1173] audit: audit_backlog=65 > audit_backlog_limit=64 [ 57.966234][ T1173] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 57.973982][ T1173] audit: backlog limit exceeded [ 57.978899][ T36] audit: type=1326 audit(1790506978.390:23341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1154 comm="syz.2.160" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57239e159 code=0x50000 [ 58.007130][ T316] usb 1-1: string descriptor 0 read error: -22 [ 58.013393][ T316] usb 1-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 58.022882][ T316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.044383][ T316] usb 1-1: unit 4 not found! [ 58.050710][ T316] usb 1-1: unit 0 not found! [ 58.272375][ T1173] fuse: Unknown parameter '' [ 58.298083][ T316] usb 1-1: USB disconnect, device number 22 [ 58.672164][ T341] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 58.772062][ T316] usb 2-1: USB disconnect, device number 16 [ 58.822130][ T341] usb 3-1: Using ep0 maxpacket: 16 [ 58.844865][ T341] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 58.853532][ T341] usb 3-1: config 1 has no interface number 0 [ 58.859706][ T341] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 58.869820][ T341] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 58.886321][ T341] usb 3-1: config 1 interface 105 has no altsetting 0 [ 58.896654][ T341] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 58.906783][ T341] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 58.915553][ T341] usb 3-1: Product: syz [ 58.923243][ T341] usb 3-1: Manufacturer: syz [ 58.931131][ T341] usb 3-1: SerialNumber: syz [ 58.941815][ T1176] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.956761][ T1176] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 59.249336][ T1196] tmpfs: Cannot retroactively limit inodes [ 59.387135][ T1176] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 59.394990][ T1176] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 59.572160][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 59.736212][ T338] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 59.750896][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 59.784359][ T338] usb 4-1: USB disconnect, device number 20 [ 59.796586][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.812125][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 59.830342][ T341] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 59.854551][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.867788][ T341] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 59.890228][ T341] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 59.908201][ T341] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 12:7f:af:a2:2b:17 [ 59.921237][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 59.931583][ T1210] netlink: 'syz.1.178': attribute type 27 has an invalid length. [ 59.939448][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 59.948765][ T341] usb 3-1: USB disconnect, device number 16 [ 59.962124][ T10] usb 1-1: Product: syz [ 59.966301][ T10] usb 1-1: Manufacturer: syz [ 59.971749][ T341] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 60.000233][ T1210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 60.029796][ T341] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 60.052701][ T341] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 60.062074][ T341] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 60.202296][ T10] usb 1-1: Found UVC 1.00 device syz (8086:0ad2) [ 60.222319][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 2 on unit 48: -71 (exp. 1). [ 60.238665][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 3 on unit 48: -71 (exp. 1). [ 60.249159][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 6 on unit 48: -71 (exp. 1). [ 60.263031][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 8 on unit 48: -71 (exp. 1). [ 60.276838][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 9 on unit 48: -71 (exp. 1). [ 60.292578][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 1 on unit 48: -71 (exp. 1). [ 60.310833][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 4 on unit 48: -71 (exp. 1). [ 60.337258][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 5 on unit 48: -71 (exp. 1). [ 60.368009][ T10] usb 1-1: Failed to query (GET_CUR) UVC control 5 on unit 48: -71 (exp. 1). [ 60.386477][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 11 on unit 48: -71 (exp. 1). [ 60.419550][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 60.438532][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 17 on unit 48: -71 (exp. 1). [ 60.455392][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 18 on unit 48: -71 (exp. 1). [ 60.472937][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 7 on unit 48: -71 (exp. 1). [ 60.497382][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 4 on unit 48: -71 (exp. 1). [ 60.526778][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 5 on unit 48: -71 (exp. 1). [ 60.562174][ T10] usb 1-1: Failed to query (GET_CUR) UVC control 5 on unit 48: -71 (exp. 1). [ 60.581545][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 16 on unit 48: -71 (exp. 1). [ 60.602873][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 13 on unit 48: -71 (exp. 1). [ 60.622904][ T10] usb 1-1: Failed to query (GET_INFO) UVC control 17 on unit 48: -71 (exp. 1). [ 60.632047][ T10] usb 1-1: No streaming interface found for terminal 2. [ 60.662075][ T10] usb 1-1: USB disconnect, device number 23 [ 60.712134][ T316] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 60.782151][ T341] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 60.872137][ T316] usb 2-1: device descriptor read/64, error -71 [ 60.933343][ T341] usb 3-1: Invalid ep0 maxpacket: 32 [ 61.063475][ T341] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 61.112142][ T316] usb 2-1: device descriptor read/64, error -71 [ 61.222128][ T341] usb 3-1: Invalid ep0 maxpacket: 32 [ 61.231341][ T341] usb usb3-port1: attempt power cycle [ 61.372129][ T316] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 61.512160][ T316] usb 2-1: device descriptor read/64, error -71 [ 61.560157][ T1260] Zero length message leads to an empty skb [ 61.582160][ T341] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 61.624195][ T341] usb 3-1: Invalid ep0 maxpacket: 32 [ 61.752196][ T341] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 61.772214][ T316] usb 2-1: device descriptor read/64, error -71 [ 61.792758][ T341] usb 3-1: Invalid ep0 maxpacket: 32 [ 61.798187][ T341] usb usb3-port1: unable to enumerate USB device [ 61.913313][ T316] usb usb2-port1: attempt power cycle [ 62.042792][ T45] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 62.210308][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 62.230482][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.251626][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 62.269252][ T45] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 62.279959][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 62.293908][ T316] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 62.325065][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.342274][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 62.360503][ T45] usb 1-1: SerialNumber: syz [ 62.365216][ T316] usb 2-1: device descriptor read/8, error -71 [ 62.384669][ T1263] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 62.412143][ T1263] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 62.442489][ T45] hub 1-1:1.0: bad descriptor, ignoring hub [ 62.458608][ T45] hub 1-1:1.0: probe with driver hub failed with error -5 [ 62.522603][ T316] usb 2-1: device descriptor read/8, error -71 [ 62.655253][ T1263] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 62.664188][ T1263] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 62.782146][ T316] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 62.814619][ T316] usb 2-1: device descriptor read/8, error -71 [ 62.820441][ T1284] netlink: 388 bytes leftover after parsing attributes in process `syz.3.193'. [ 62.844018][ T1284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 62.873806][ T36] kauditd_printk_skb: 3921 callbacks suppressed [ 62.873822][ T36] audit: type=1400 audit(1790506983.420:27256): avc: denied { mounton } for pid=1262 comm="syz.0.187" path="/44/sys" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 62.938349][ T36] audit: type=1400 audit(1790506983.420:27257): avc: denied { read write } for pid=296 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 62.964384][ T1286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.194'. [ 62.984272][ T316] usb 2-1: device descriptor read/8, error -71 [ 63.002128][ T36] audit: type=1400 audit(1790506983.420:27258): avc: denied { read write open } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.034585][ T1294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 63.041120][ T1294] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 63.057527][ T36] audit: type=1400 audit(1790506983.420:27259): avc: denied { ioctl } for pid=296 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.074200][ T1290] audit: audit_backlog=65 > audit_backlog_limit=64 [ 63.093424][ T36] audit: type=1400 audit(1790506983.450:27260): avc: denied { mount } for pid=1262 comm="syz.0.187" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 63.112146][ T1290] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 63.116030][ T316] usb usb2-port1: unable to enumerate USB device [ 63.137522][ T1294] audit: backlog limit exceeded [ 63.558974][ T1296] ------------[ cut here ]------------ [ 63.564501][ T1296] skb_assert_len [ 63.611843][ T1296] WARNING: CPU: 0 PID: 1296 at include/linux/skbuff.h:2720 __dev_queue_xmit+0x1e1d/0x3780 [ 63.621842][ T1296] Modules linked in: [ 63.625795][ T1296] CPU: 0 UID: 0 PID: 1296 Comm: syz.1.195 Not tainted syzkaller #0 f6ed0fb9bb938319f6518c785cf37c2d863a58c7 [ 63.637291][ T1296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.647397][ T1296] RIP: 0010:__dev_queue_xmit+0x1e1d/0x3780 [ 63.653428][ T1296] Code: 00 00 00 fc ff df e9 ea e6 ff ff e8 0d e2 04 fd c6 05 85 d4 62 03 01 48 c7 c7 a0 2d 8b 86 48 c7 c6 73 bc 19 87 e8 a3 b2 81 fc <0f> 0b 80 3d 6a d4 62 03 01 0f 84 af e3 ff ff e8 df e1 04 fd c6 05 [ 63.673099][ T1296] RSP: 0018:ffffc90010a57500 EFLAGS: 00010246 [ 63.679180][ T1296] RAX: 036338de7f1f9200 RBX: ffff88812fa451b0 RCX: ffff88811adfa600 [ 63.687210][ T1296] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 63.695218][ T1296] RBP: ffffc90010a577e0 R08: ffff8881f6e294d3 R09: 1ffff1103edc529a [ 63.703265][ T1296] R10: dffffc0000000000 R11: ffffed103edc529b R12: 1ffff11025f48a2a [ 63.711251][ T1296] R13: ffff88812fa45140 R14: 0000000000000000 R15: dffffc0000000000 [ 63.719265][ T1296] FS: 00007fac71ff76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 63.728232][ T1296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.734856][ T1296] CR2: 00007fac71f92fe0 CR3: 000000011ee66000 CR4: 00000000003526b0 [ 63.742888][ T1296] Call Trace: [ 63.746179][ T1296] [ 63.749161][ T1296] ? __kasan_check_write+0x18/0x20 [ 63.754313][ T1296] ? alloc_skb_with_frags+0x80b/0x8b0 [ 63.759701][ T1296] ? audit_log_end+0x1f1/0x240 [ 63.764506][ T1296] ? __cfi___dev_queue_xmit+0x10/0x10 [ 63.769893][ T1296] ? __kasan_check_write+0x18/0x20 [ 63.775052][ T1296] ? skb_set_owner_w+0x280/0x3d0 [ 63.780004][ T1296] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 63.785434][ T1296] ? packet_parse_headers+0x7f0/0xb10 [ 63.790814][ T1296] ? packet_parse_headers+0x883/0xb10 [ 63.796255][ T1296] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 63.802025][ T1296] ? skb_setup_tx_timestamp+0x210/0x210 [ 63.807607][ T1296] packet_xmit+0x76/0x360 [ 63.811944][ T1296] ? is_vmalloc_addr+0x11/0x40 [ 63.816748][ T1296] packet_sendmsg+0x228b/0x56b0 [ 63.821618][ T1296] ? __cfi_packet_sendmsg+0x10/0x10 [ 63.826884][ T1296] ? avc_has_perm+0x211/0x240 [ 63.831574][ T1296] ? mas_commit_b_node+0xd90/0x1b30 [ 63.836803][ T1296] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 63.842130][ T1296] ? security_socket_sendmsg+0x3d/0x100 [ 63.847692][ T1296] ? __cfi_packet_sendmsg+0x10/0x10 [ 63.852951][ T1296] sock_write_iter+0x445/0x490 [ 63.857723][ T1296] ? __cfi_sock_write_iter+0x10/0x10 [ 63.863054][ T1296] ? selinux_socket_setsockopt+0x324/0x3d0 [ 63.868872][ T1296] vfs_write+0x75f/0xfd0 [ 63.873160][ T1296] ? __cfi_vfs_write+0x10/0x10 [ 63.877930][ T1296] ksys_write+0x145/0x260 [ 63.882314][ T1296] ? xfd_validate_state+0x68/0x140 [ 63.887444][ T1296] ? __cfi_ksys_write+0x10/0x10 [ 63.892333][ T1296] ? __kasan_check_write+0x18/0x20 [ 63.897450][ T1296] ? fpregs_restore_userregs+0x11c/0x260 [ 63.903120][ T1296] __x64_sys_write+0x7f/0x90 [ 63.907730][ T1296] x64_sys_call+0x271c/0x2ee0 [ 63.912443][ T1296] do_syscall_64+0x57/0xf0 [ 63.916866][ T1296] ? clear_bhb_loop+0x50/0xa0 [ 63.921554][ T1296] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 63.927489][ T1296] RIP: 0033:0x7fac7359e159 [ 63.931907][ T1296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.951570][ T1296] RSP: 002b:00007fac71ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.960034][ T1296] RAX: ffffffffffffffda RBX: 00007fac73825fa0 RCX: 00007fac7359e159 [ 63.968055][ T1296] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 63.976070][ T1296] RBP: 00007fac7363506b R08: 0000000000000000 R09: 0000000000000000 [ 63.984083][ T1296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.992069][ T1296] R13: 00007fac73826038 R14: 00007fac73825fa0 R15: 00007ffd7a2ed028 [ 64.000088][ T1296] [ 64.003157][ T1296] ---[ end trace 0000000000000000 ]--- [ 64.012943][ T1296] skb len=0 headroom=128 headlen=0 tailroom=256 [ 64.012943][ T1296] mac=(128,0) mac_len=0 net=(128,-1) trans=-1 [ 64.012943][ T1296] shinfo(txflags=64 nr_frags=0 gso(size=0 type=0 segs=0)) [ 64.012943][ T1296] csum(0x0 start=0 offset=0 ip_summed=0 complete_sw=0 valid=0 level=0) [ 64.012943][ T1296] hash(0x0 sw=0 l4=0) proto=0x0000 pkttype=0 iif=0 [ 64.012943][ T1296] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0 [ 64.012943][ T1296] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0) [ 64.065295][ T1296] dev name=tunl0 feat=0x00000006401d4869 [ 64.070973][ T1296] sk family=17 type=3 proto=0 [ 64.684258][ T1259] bridge_slave_1: left allmulticast mode [ 64.689955][ T1259] bridge_slave_1: left promiscuous mode [ 64.696398][ T1259] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.704646][ T1259] bridge_slave_0: left allmulticast mode [ 64.710309][ T1259] bridge_slave_0: left promiscuous mode [ 64.717019][ T1259] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.769172][ T45] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 64.812613][ T45] usb 1-1: USB disconnect, device number 24 [ 64.873365][ T1259] veth1_macvtap: left promiscuous mode [ 64.878926][ T1259] veth0_vlan: left promiscuous mode