last executing test programs: 1m29.232139677s ago: executing program 32 (id=63): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000052000100000000000000090002000000090001"], 0x20}}, 0x0) 1m18.811376585s ago: executing program 33 (id=33): ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) 1m14.023691463s ago: executing program 34 (id=281): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000040)=0xa, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 1) 1m11.085496775s ago: executing program 35 (id=324): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x144, 0x10, 0x713, 0x70bd2b, 0x25dfdbfc, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0xb6e, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x2e}, {@in=@loopback, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x100000000004, 0x1, 0x8000000000000021, 0xfffffffeffffffff, 0x10, 0x8001, 0xd43}, {0x4, 0x8000000000002000, 0xb, 0xf4}, {0x8, 0xe}, 0x70bd27, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x52, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x30, 0x40, "009b4a11dea6"}}]}, 0x144}, 0x1, 0x0, 0x0, 0x880}, 0x2094) 1m7.133505503s ago: executing program 5 (id=377): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b07, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000003f00240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) r1 = userfaultfd(0x801) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 1m7.128993513s ago: executing program 5 (id=378): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC]) 1m7.128719293s ago: executing program 5 (id=379): unshare(0x64000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be004433fffe800000000088fc70738daf7b3200aaff020000001200000000000000000001"], 0xfdef) 1m7.045361105s ago: executing program 5 (id=381): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x7, 0x8, 0x0, 0x16, 0x4, 0xc0, 0x5, 0x14c, 0x1}) syz_usb_connect(0x2, 0xb6, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904500b05a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 1m5.677443839s ago: executing program 5 (id=393): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x80000000}) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000940)={0xb, 0x8, 0x6, 0xf}) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./debug\x00', 0x1df) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) open(&(0x7f00000001c0)='./debug/split_huge_pages\x00', 0x0, 0x4) io_setup(0x1, &(0x7f0000002500)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) write$9p(r2, &(0x7f00000000c0)="885dc0eac1c7d7a81911047d0292121997c3a4abd8495e04a9b64f", 0x1b) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) 1m5.65746508s ago: executing program 5 (id=394): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x20, 0x1, 0x23, "9a4ca7e636fe2516b505ea4934786881d5304c60a7781ab20d70164c6bd54396af0f08"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00060100000021"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000440)={0x20, 0x5, 0x36, {0x36, 0x10, "696981bd55bd6175eb563edd3018bc6c196547978332fc06303febe3615b878f497a8acdf52eeae85742404ec4c1a4ea7272202c"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000640)={0x40, 0xd, 0x97, "2ff3d65685bcdcbcd516339ab55623349eaf2483ef2657f1f1622a75597ebb46d504975aa52a56d319a50dcf30579945f91820e1ec126cc0d5032566c5b5c3b3ec54d2e8fae211068be6be1db7288de0060e113eac37aecafec5e85be5c5f47e8694e37ab0ffd65cd4911acb407a3accab04c0813653b347b34a74cb4f02dfdd571ec95c357fd038e5287f0a73017c3cbc866a20c177a1"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000780)={0x20, 0x81, 0x3, "fd298f"}, &(0x7f00000007c0)={0x20, 0x82, 0x3, "299da0"}, &(0x7f0000000800)={0x20, 0x83, 0x2, "4eb7"}, &(0x7f0000000840)={0x20, 0x84, 0x2, "a491"}, &(0x7f0000000880)={0x20, 0x85, 0x3, "4538e4"}}) 1m4.667725854s ago: executing program 4 (id=398): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC]) 1m4.625404265s ago: executing program 4 (id=399): r0 = socket(0x10, 0x803, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x48, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'veth0\x00', {0x2, 0x4e20, @rand_addr=0xdffffc00}}) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000003d40)=""/4052, 0xfd4}, {&(0x7f0000000880)=""/212, 0xd4}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000004d40)=""/4106, 0x100a}, {&(0x7f00000009c0)=""/250, 0xfa}, {&(0x7f0000000500)=""/286, 0x11e}, {&(0x7f00000001c0)=""/257, 0x101}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f00000004c0)=""/37, 0x25}], 0x9}, 0x72}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x1f74}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x2090d2}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x1}], 0x8, 0x0, 0x0) 1m4.545380727s ago: executing program 4 (id=400): socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x2, 0xc000, 0xfffffffe, 0x3cb, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4707, 0x40, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x77}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x7ffffffe, 0x0, 0x0) 1m4.405366121s ago: executing program 4 (id=401): r0 = syz_open_dev$loop(&(0x7f0000002880), 0x5, 0x101282) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x103482) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0xd, "fee8a2ab78fcb4e00d9683dda1af1ea89de2b7fb0a010000000000000000000000000000000000000000e9ff00", "2809e8dbe108598948224ad54afac11d875397bdb203000000000000005240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x591) r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000100)="1c0000001800077bab092500090007000a0700000000000600003693", 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0xb00}) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r8, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r8, 0x0, 0x14, &(0x7f0000000440)=0x135, 0x4) recvmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/25, 0x19}, 0x8000}], 0x1, 0x45833af92e4a39df, 0x0) fcntl$dupfd(r2, 0x406, r7) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x1800000}, {}, {0x28}, {0xb1, 0x0, 0x0, 0x1ff}, {0x6}]}) write(r2, &(0x7f0000000000)="88ca89fe0d9034b69364cd6bb86f99ba38e4345522898f3c8c9eacab8bdadc0917473f2fd10dbe2f013ee2c6ad721c55272b599c3675905acefcf7d24c0fddf3aefb79aea8b656fe7423617447df0014b6fa315e5e68b949c79a392bdaa29e9a22d658fa880e348aed9dffe1d1dffe3da4d17a4daf450dc68e11f9ef1024f92e75c034f742f875024507325529ec3f17cefcd7ce6f76952e6d6a1cdda2fe6ff87872603389244ffb038f9745af322feff1366a3b", 0xb4) 1m4.305548143s ago: executing program 4 (id=402): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x80000000}) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000940)={0xb, 0x8, 0x6, 0xf}) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./debug\x00', 0x1df) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) open(&(0x7f00000001c0)='./debug/split_huge_pages\x00', 0x0, 0x4) io_setup(0x1, &(0x7f0000002500)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) write$9p(r2, &(0x7f00000000c0)="885dc0eac1c7d7a81911047d0292121997c3a4abd8495e04a9b64f", 0x1b) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) 1m4.197477236s ago: executing program 4 (id=403): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000003000000000000000000000000000000000040000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 50.894964794s ago: executing program 36 (id=385): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001880)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000180)=r3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2, 0x0, 0x4}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000001600010a00000000000000000a00007c"], 0x20}, 0x1, 0x0, 0x0, 0xc8001}, 0x0) (async) r5 = dup3(r0, r1, 0x80000) read$watch_queue(r5, &(0x7f0000000340)=""/133, 0x85) (async) statx(r5, &(0x7f0000000000)='./file0\x00', 0x4002, 0x4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r8) sendmsg$DEVLINK_CMD_TRAP_GET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="3fab00000000000000002f00"], 0x14}}, 0x24001844) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r9, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5028}, {0x8, 0x13, 0x6}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x28}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4804}, 0x4000) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, r11, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x34}}, 0x0) (async) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000701, r6, &(0x7f00000001c0)) (async) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe4, r11, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "5aab0b37af09356a9bb46fd64fd6c412105698ff0133"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x64}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x64, 0x3, "b99753a0ca96f40848819dd4f0bacf311a1d02b024f0f0abe2ffc021a99033cc9165e44eb905381d83cc01662f9aaca3fd698ae2e5606b602dcc4e9a3c0046d44f532562ff652cb5736e1f65b5fd80606bb8aa1fc9eb892e898cc09da2319d8f"}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x10004040) (async) r12 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000180)={0x4, 0x0, 0xfffffffb, 0x1}, 0x10) (async) write(r13, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000020000000000800040001000000", 0x24) getsockopt$inet6_opts(r12, 0x29, 0x36, 0x0, &(0x7f0000000440)) (async) socket$igmp(0x2, 0x3, 0x2) 49.746488082s ago: executing program 37 (id=394): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x20, 0x1, 0x23, "9a4ca7e636fe2516b505ea4934786881d5304c60a7781ab20d70164c6bd54396af0f08"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00060100000021"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000440)={0x20, 0x5, 0x36, {0x36, 0x10, "696981bd55bd6175eb563edd3018bc6c196547978332fc06303febe3615b878f497a8acdf52eeae85742404ec4c1a4ea7272202c"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000640)={0x40, 0xd, 0x97, "2ff3d65685bcdcbcd516339ab55623349eaf2483ef2657f1f1622a75597ebb46d504975aa52a56d319a50dcf30579945f91820e1ec126cc0d5032566c5b5c3b3ec54d2e8fae211068be6be1db7288de0060e113eac37aecafec5e85be5c5f47e8694e37ab0ffd65cd4911acb407a3accab04c0813653b347b34a74cb4f02dfdd571ec95c357fd038e5287f0a73017c3cbc866a20c177a1"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000780)={0x20, 0x81, 0x3, "fd298f"}, &(0x7f00000007c0)={0x20, 0x82, 0x3, "299da0"}, &(0x7f0000000800)={0x20, 0x83, 0x2, "4eb7"}, &(0x7f0000000840)={0x20, 0x84, 0x2, "a491"}, &(0x7f0000000880)={0x20, 0x85, 0x3, "4538e4"}}) 49.735780233s ago: executing program 8 (id=472): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000480)=0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x1c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@nested={0x8, 0x10f, 0x0, 0x1, [@typed={0x4, 0xd8, 0x0, 0x0, @binary}]}]}, 0x1c}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a0015"], 0x1c}, {&(0x7f0000000b80)={0x304, 0x19, 0x4, 0x70bd27, 0x25dfdbfe, "", [@nested={0x168, 0xdd, 0x0, 0x1, [@generic="20e9ed94583f86648919b4fe0c2810ae87141768707d16161df890aa7ad6c75da1f73e490599830f1b244f6900c783d407cd327ec0b00aca73d8125e28c74b7e113f0cad68bd71cd854d5f398f93f6160bd7665e298b9690d6d2150ab29cecaaa6ae623adfe92f99af34c44a943121d1eeaa441f9c22e1e816061df4dfbafb69cd6169c62d6eccb489fc2e67eb4b9dc33dfbba51dd13b7989fc82d15bdf36490ac227b0ffda48bb428aaae57c324e0c4f6d37241ed04923b83a43f87eafef4cf6b7d676ac1a22ead370a10566c8bed50d1a5f3709f8a83f66ca1c1cf51c885efc3fc26bc758e792468b1afb68d3adae47bf9ee8c4e7e", @generic="d998b0dec52424215945212172a8e59750fda579480ca121e7ec464929c243fd6183004fc2846cc36ff928557b437521f658f4bc2bc2ca2b6fa79a70d12bb40e3a3e6884a8d631cb472e3e13266db7ffffcdad92f58b6a3ea3a170b9b624aba003ecf83a6c10", @typed={0x8, 0xf8, 0x0, 0x0, @ipv4=@multicast2}]}, @nested={0x18b, 0x122, 0x0, 0x1, [@typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@empty}, @generic="6dd5380419105edbba63056906ccf6a6991636b205db0a26e0ae49ebf1162487b368dc97e2a39f9442086de20fd7a51d78c89db38f860c32f156cf77670bf853eebd0d9b8b4b7b570114ee4e0c669bdda65241aa8f9649af372651cc714acc75f08086d53092d5d10cf7e70a74c6b7593450bffcb050a896e54f9856d49610b1eeef04db47483f71a020b475558dfa4118382a991ed2e9a8a3ee29332592f11b42388bb385bef69a8d8d85f5018284402d719550098cb12449462fbb16bb9f644eb457210908592a78408408934200a2ebab542b37fab0", @nested={0x4, 0xf4}, @nested={0x4, 0x127}, @typed={0x4, 0x15a}, @nested={0x4, 0xa5}, @nested={0x4, 0x1e}, @typed={0x8, 0xb5, 0x0, 0x0, @fd=r2}, @generic="701e4f9852750e462c24466c47e7de8967d7371e0a4c086fa0d91df51e853bdbc8e8b04b628c970db9682907d9dae9345957768479ad77d09b7b69f6c571901aaa9e5ba2aa0a4f75eabacdf213d5a6626b", @generic="ad6fb3920c916d5b405d8819954005ad9cc00cef9fb0f4c3caed4315c892d5cfb920cef1354bc1a32a84cc0c72fe28"]}]}, 0x304}, {&(0x7f0000000ec0)={0x38, 0x1d, 0x10, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x101, 0x0, 0x0, @u32=0xd}, @generic="81eaccc021bf834797c90b8fb5dc26ec98d50f69460a0646c7623d0dd3e56ff6"]}, 0x38}], 0x3}, 0x4000080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000000, 0x7ffe, 0x0, 0x3, 0x100000001, 0x8, 0x0, 0x2}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0xa, 0x4e22, 0x8000, @empty, 0x1}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000140)="51613b6d7ae7d4af54369aff3c92bd52ecc36ce8bb13da1f5ba38e9da502a9fa1641e1eef355563457d7d28890570d91b0177be07fb934b7438e5b2a1ef4f431d105dfda35aee80708dcd79e29fe7b51310b652fe164f9453b9c64f1bf36366edc26be1e7e5b814588e1f2b51414c03426223b2188e5202c9a1c177315413a5fc877c3de2cd197827e077a1dc6ae5ebe42228777cd22d5bc9ca04daf222653db", 0xa0}, {&(0x7f0000000200)="e6290950e7e9be8e34db79ab0b7ad3494e0286514c0c864f2aa3fc1dfe0f79492914415787e4b7e15fb86e16e5f7f32756ce67e37e81a0263d8a2a89c36a1faaa002c46f4eb906279358ef4dc8c12112313d9819d67f53acb204b9c00aa9459323345c642f8c11cd0c351be43838425bfff99e43eabddb2a3e9fa5f6ffbaf14e5efb60fd5e95b0809e3efbd87c8ff206348e5ed99400ee4b81a829c9e0b3592635949b055c68a5148f660f21f221ab6117ec5fba42c3d6452c5ae173c103ff362eca84a42f610a826351b3047872ccf7b1f8b461c9730eab490bb5c1fc646cd9a68c4a510e9273ff880da64166", 0xed}, {&(0x7f0000000300)="bf282d6e35f4b670e51bd867c870bbf7c3de1e7b03aa9bc84bcef2b242", 0x1d}], 0x3}, 0x4000000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r4, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r5) ioctl$KVM_RUN(r5, 0xae80, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f00000008c0)="ac", 0x1}], 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000000000000000000000000000000000000a0101000000000000000000000000004e2003944e280005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0001000000000000000000000000000004d46c000000e0000002000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0900000000000000090000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd300002350000020001fd2000000000000000480003006c7a6a6800"/231], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x400c005) r6 = openat$cgroup_ro(r5, &(0x7f00000004c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x9, 0x218012, r6, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f00000003c0)=@arm64) 49.697541704s ago: executing program 8 (id=486): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 49.609414316s ago: executing program 8 (id=487): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) syz_usb_disconnect(0xffffffffffffffff) process_mrelease(r1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x40000000000d091, 0x16d002) r3 = memfd_create(&(0x7f0000000340)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\x1e\xf1\xaf)\x04\xc3\x18)\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000040)=0x4, 0x4) recvmmsg(r4, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) pselect6(0x2a, 0x0, &(0x7f0000000080)={0x1, 0xa, 0x0, 0x5, 0xf039, 0xffff, 0x2, 0x7}, &(0x7f00000000c0)={0x5, 0x7, 0xe882, 0x1000, 0x5, 0x2, 0x7f, 0x800}, &(0x7f0000000140), &(0x7f00000001c0)={0x0}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x220000, 0x20, 0x4}, 0x18) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x9a2da52ad951eadd}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000001}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbff, 0x4080101}, 0xc) 46.073787103s ago: executing program 9 (id=515): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x363103, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000500)=0xffff0080) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff04, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6020400) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r6 = getpid() r7 = syz_open_procfs(r6, &(0x7f0000000200)='net/udplite6\x00') setresuid(0x0, 0xee00, 0xffffffffffffffff) cachestat(r7, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x200000, 0x0, 0x2f}, 0x18) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) 46.034321234s ago: executing program 9 (id=516): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x80000000}) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000940)={0xb, 0x8, 0x6, 0xf}) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./debug\x00', 0x1df) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) open(&(0x7f00000001c0)='./debug/split_huge_pages\x00', 0x0, 0x4) write$9p(r2, &(0x7f00000000c0)="885dc0eac1c7d7a81911047d0292121997c3a4abd8495e04a9b64f", 0x1b) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, 0x0) 45.954759806s ago: executing program 9 (id=517): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4098, 0x1002}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f0000002400)=""/4097, 0x1001}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x8}], 0x4, 0x10120, 0x0) 45.80018091s ago: executing program 1 (id=519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd00016c0004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000000000000000010000000001042022eb"], 0xfdef) 45.735132311s ago: executing program 1 (id=520): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4801000010000100feffffff00010000fc0000000000000028000000000000000a010100000000000000000000000000000107144e230005000000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 45.673237813s ago: executing program 1 (id=521): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x401, 0x4) sendmsg$inet(r0, &(0x7f0000001400)={&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000080)="1e7267a55b7d690239cde8ad7f75324c523f61e25a6b972cdb91847bace7ccf13e4b185b98b99d7e290074b5085279e1d5470ef6fbc307320ee4576d59be0c74f558b5e49bcf44f48b6350967a895899331f6c52199a55b0bccf89efd42548c120ac76aae37803ea500518bee4bb08835ee2e9ca7734b21731af8cbcdf1afc4f4e756843b00d909c9b840db87e736d6c0a183aa98a67a4c5690ddcddcd807212c22411ff4cc77bbb62442750ce2ffc1b18fee475dd9f3654643b22c0a875c7f6df6855ac3bd79d3fab084af9875ed4f59090fa23f12d2fd4c2e5da16f6defde995f7449f2cbd60e76f9f33e1f26139", 0xef}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)}, {&(0x7f00000011c0)="d577d7708033b9910b3b18b3341b8d09fb39940de746f35fbee87ae6ad9f4fcdf2d0c29227755690cf05d4e398fc7f3dfaef931ef0b3b4fcee21a316f6d46f4c1a192d2f", 0x44}, {&(0x7f0000001240)="fe5ebcd6f7c80b1f2ed0a904e0c9d7f7f0cafb838caec0ff4a279847d4f73e922f32fcbd76dad42cc49bd25eb6c79088c77fab5b1dc78edc9cff9f24ba27a11efde42d099c2a17f4fe966ccf1e3c5485dafd619161608e9944ae68f045e9e4a0189fa91498e0ab9246a886dafce03c989a90f9e920036b0cbdc7ad356348dd527e1e879bd12f68c4b27b1df3cfe4b50e389d6842a2b1062d54b0615297163d18636d81cc2cd9de077d6bfd4035d9267e674b2a07510c2d56ba15fd34f287b10aaa6b1fe49eb67eff8fe0d34ac9aa", 0xce}], 0x5, &(0x7f00000013c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10}}], 0x18}, 0x40050) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, &(0x7f0000001440)="ef1175ffda83fc7a6dacf21353d6006bea1109960627788e74f21578f2d33571c3d51cdd7de83d4c03fa38cd9db9498982699e695f051b0fca2191eb1a72d7482b734672eb28a1", 0x47, 0x20008000, &(0x7f00000014c0)={0x2, 0x4e24, @local}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000036c0)={0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000038c0)=0x0) stat(&(0x7f0000003900)='./file0\x00', &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003a40)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000003b40)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000003b80)='./file0\x00', &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getresuid(&(0x7f0000003dc0), &(0x7f0000003e00), &(0x7f0000003e40)=0x0) r9 = getegid() r10 = geteuid() syz_fuse_handle_req(r2, &(0x7f0000001540)="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", 0x2000, &(0x7f00000040c0)={&(0x7f0000003540)={0x50, 0x24, 0x1000, {0x7, 0x2d, 0x1, 0x20, 0x6, 0x3, 0x2, 0x74b, 0x0, 0x0, 0x20, 0x2}}, &(0x7f00000035c0)={0x18, 0x0, 0x3, {0x8}}, &(0x7f0000003600)={0x18, 0x0, 0x5, {0x8001}}, &(0x7f0000003640)={0x18, 0x0, 0xf, {0x4}}, &(0x7f0000003680)={0x18, 0x0, 0x1, {0x7fff}}, &(0x7f0000003740)={0x28, 0x0, 0x4, {{0x8000000000000000, 0xafa, 0x2, r3}}}, &(0x7f0000003780)={0x60, 0x0, 0x5, {{0x4, 0x587b, 0x2, 0x2, 0x100, 0xe, 0x0, 0x5}}}, &(0x7f0000003800)={0x18, 0xfffffffffffffff5, 0x7, {0x8}}, &(0x7f0000003840)={0x12, 0x0, 0x0, {'*\x00'}}, &(0x7f0000003880)={0x20, 0xfffffffffffffff5, 0x1, {0x0, 0x12}}, &(0x7f00000039c0)={0x78, 0xffffffffffffffda, 0x0, {0x0, 0x9, 0x0, {0x2, 0x8, 0x3f1, 0x1, 0x1, 0x4, 0x8000, 0x1, 0x6, 0xa000, 0x80000001, r4, r5, 0x0, 0x3}}}, &(0x7f0000003c40)={0x90, 0x0, 0xb60a, {0x2, 0x3, 0x45, 0xffffffff, 0x80000001, 0xfffffdcd, {0x6, 0x2, 0x6, 0x1, 0x9, 0x9, 0xffffffff, 0x8, 0xf74, 0xa000, 0xffffc000, r6, r7, 0xa, 0x9}}}, &(0x7f0000003d00)={0x50, 0x0, 0x80, [{0x4, 0x10001, 0x3, 0x757, '\\{{'}, {0x5, 0xe, 0x3, 0x7fffffff, ')^$'}]}, &(0x7f0000003d80)={0x10, 0xffffffffffffffda}, &(0x7f0000003e80)={0xa0, 0x0, 0x6e7e, {{0x2, 0x1, 0x7, 0x5, 0x9, 0x0, {0x0, 0xc041, 0xdd91, 0x2, 0x100, 0x80, 0x5, 0x6, 0xac1, 0x2000, 0x10, r8, r9, 0x101, 0x39b1}}, {0x0, 0x2}}}, &(0x7f0000003f40)={0x20, 0x0, 0x10000, {0x6d, 0x4, 0x0, 0x1}}, &(0x7f0000003f80)={0x130, 0x0, 0x4, {0x23a7, 0x6, 0x0, '\x00', {0x2000, 0x7ff, 0xa, 0x1f, r10, 0xee00, 0x8000, '\x00', 0x1000000000000, 0xaab, 0x101, 0x4, {0x1000, 0x8}, {0x22bde9c7, 0x9}, {0x75, 0x4}, {0x9, 0x8}, 0x200, 0x0, 0x195, 0x401}}}}) bind$inet(r0, &(0x7f0000004180)={0x2, 0x4e21, @multicast1}, 0x10) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000041c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r12 = openat$cgroup(r11, &(0x7f0000004200)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r12, 0x4010942a, &(0x7f0000004240)={0x1, 0x4}) r13 = userfaultfd(0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) syz_clone(0x80000000, &(0x7f0000004280)="8e48c695a976823f88bb22bde5703208cc5e428b410a5b38a369b6d90bf5db6d575f36498c1890f73664a06f3d09013220dfae3e309c4d53250bccaa697b018a5149352b8f2c0443e9fe2a088bdc89956c63c13ad97c63d7ac9379a09b61835dd5b0e0c244dbf35a573ee2a87d3991564ac502dcc88afd56b628a9c35c5a1ce14665e4b07445e5dd", 0x88, &(0x7f0000004340), &(0x7f0000004380), &(0x7f00000043c0)="bed29bc222d91659830f0d40ce1f7e8d303d7ba8e9857ec9a6bd55fd4ee9c68f377d623f790086d71460df5e44bf7e8773e42b57cedd8c889e815a3137fae76e7c1b8f24fd65ce11fc513be5e5ec0c58300b9bc21cdf4f1404eb33b19f6215dace3432f59443f95fe86db76bdddac95d24c9f06118b35c2def5a0633b6ca562aa9c2a5e5797cffb8ea47af138f7164f01b9c905dc70dad2b8d4e53e9e98b4c2df26f4684b67c16f3897702393622065e2f8f6c0153e9ec511b4bef4bc16dd376dbb87a98c9e8ef691dc4de38bf0562b3c4") mkdir(&(0x7f00000044c0)='./file0\x00', 0x108) r14 = signalfd(r13, &(0x7f0000004500)={[0x2]}, 0x8) ioctl$KVM_GET_VCPU_MMAP_SIZE(r14, 0xae04) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000004540)='veno', 0x4) ioctl$UFFDIO_UNREGISTER(r13, 0x8010aa01, &(0x7f0000004580)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) connect$unix(0xffffffffffffffff, &(0x7f00000045c0)=@file={0x0, './file0\x00'}, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000004640)='./file0/file0\x00', &(0x7f0000004680), 0x100) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r14, 0x4a) 45.626721304s ago: executing program 1 (id=523): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2, 0x0, 0xf000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x100000000000000) 45.541938766s ago: executing program 1 (id=525): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x80000000}) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000940)={0xb, 0x8, 0x6, 0xf}) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./debug\x00', 0x1df) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) write$9p(r2, &(0x7f00000000c0)="885dc0eac1c7d7a81911047d0292121997c3a4abd8495e04a9b64f", 0x1b) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, 0x0) 45.540778636s ago: executing program 1 (id=526): syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) socket(0x1e, 0x5, 0x0) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1467, 0x0, 0x2, 0xb5}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10, 0x0, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x40000, 0x4, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x1, 0x1, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x1040021d, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x700000000000000, 0x0, 0x1, {0x6}, 0x0, r5, '\x00', {0x0, 0x48b, 0x0, 0x0}}, 0x0) 31.733006357s ago: executing program 39 (id=491): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/kernel/kptr_restrict\x00', 0x1, 0x0) write(r1, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000200)={0xf8c8, 0x8001ff, 0x4, 0x7fff, 0x7, "ea710000000000f9000000024200000200", 0x4000000, 0x400}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000003c0)=0x2) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000240)=""/136) accept(r0, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000100)={0x4, 0x3, 0x1dbf, 0x5, 0x3, 0x9}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 30.036016659s ago: executing program 40 (id=517): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4098, 0x1002}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f0000002400)=""/4097, 0x1001}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x8}], 0x4, 0x10120, 0x0) 29.410670495s ago: executing program 41 (id=526): syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) socket(0x1e, 0x5, 0x0) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000200)={0x0, 0x1467, 0x0, 0x2, 0xb5}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10, 0x0, 0x31c, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x40000, 0x4, 0x2000008, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x1, 0x1, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x1040021d, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x700000000000000, 0x0, 0x1, {0x6}, 0x0, r5, '\x00', {0x0, 0x48b, 0x0, 0x0}}, 0x0) 27.98944325s ago: executing program 6 (id=653): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x80000000}) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000940)={0xb, 0x8, 0x6, 0xf}) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) write$9p(0xffffffffffffffff, &(0x7f00000000c0)="885dc0eac1c7d7a81911047d0292121997c3a4abd8495e04a9b64f", 0x1b) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, 0x0, 0x0) 27.98340469s ago: executing program 6 (id=654): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4098, 0x1002}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000002400)=""/4097, 0x1001}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) 27.98312365s ago: executing program 6 (id=655): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) unshare(0x60000600) (async) unshare(0x60000600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x8b, 0x6, 0x0, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x2000, 0xba08, 0xa39, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x8b, 0x6, 0x0, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x2000, 0xba08, 0xa39, 0x4}}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x5}, 0x1c) sendmmsg$sock(r3, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc004) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xe5, 0x12) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0xb, 0x5, 0x4, 0x3, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_x_sec_ctx={0x1, 0x18, 0xf, 0xc}]}, 0x18}}, 0x8) write(r3, 0x0, 0x0) (async) write(r3, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r5, 0x12, 0x4, 0x0, 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000000)='system_u:object_r:fuse_device_t:s0\x00', 0x11) (async) write$selinux_attr(r6, &(0x7f0000000000)='system_u:object_r:fuse_device_t:s0\x00', 0x11) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001200998f00000000000000001d00000000004e2300000000ffffffffff07000000000000000000000000000000000000090000000bce2cb1f489dd277e3ab0ad2ed0401f4076fc9a208e398cdd7cc2b2703223fe1814ab51a00c2852a805ef85dae66c2f17f7e1efe69935ec2f08ed569d179d1a80944f4fd9f11601d9b3aea7573add2cc9cf0d38011806a477a0495aa6a619c93a833c26f893b10539ee2d14946979bc12cc03dd182e836574ff0a8c5cd0e41be862b22be9253e00020221", @ANYRES32=0x0, @ANYBLOB="0120200003000000eeff0080000000000800030011"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c4d1) (async) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001200998f00000000000000001d00000000004e2300000000ffffffffff07000000000000000000000000000000000000090000000bce2cb1f489dd277e3ab0ad2ed0401f4076fc9a208e398cdd7cc2b2703223fe1814ab51a00c2852a805ef85dae66c2f17f7e1efe69935ec2f08ed569d179d1a80944f4fd9f11601d9b3aea7573add2cc9cf0d38011806a477a0495aa6a619c93a833c26f893b10539ee2d14946979bc12cc03dd182e836574ff0a8c5cd0e41be862b22be9253e00020221", @ANYRES32=0x0, @ANYBLOB="0120200003000000eeff0080000000000800030011"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c4d1) fsopen(&(0x7f0000000280)='configfs\x00', 0x1) (async) r8 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x1) (async) r9 = fsmount(r8, 0x0, 0x1) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r10, 0x100000000, 0x1) fchdir(r9) r11 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r11, &(0x7f0000000000)=@known='system.posix_acl_default\x00') (async) fremovexattr(r11, &(0x7f0000000000)=@known='system.posix_acl_default\x00') socket$netlink(0x10, 0x3, 0xa) 27.95821283s ago: executing program 6 (id=656): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b07, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a200000000200003f000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) r1 = userfaultfd(0x801) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 27.946257701s ago: executing program 6 (id=657): unshare(0x64000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be004433fffe800000000088fc70738daf7b3200aaff02ffffffea00000000000000000001"], 0xfdef) 27.765436025s ago: executing program 6 (id=658): socket$inet(0x2, 0x4000000000000001, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) recvfrom$inet(r3, 0x0, 0x0, 0x2022, 0x0, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 12.806596384s ago: executing program 42 (id=658): socket$inet(0x2, 0x4000000000000001, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) recvfrom$inet(r3, 0x0, 0x0, 0x2022, 0x0, 0x0) write(r3, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 2.896072179s ago: executing program 7 (id=1055): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000014f000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000640)={0xc0, 0x0, 0x5}) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000000)=@svm={0x102, 0x1, 0x1080, {0xb000}, {"44d4ceeec7a8bcbc6a4afaefb1601b768ade9d690a06775c9da9d6e394eeb8d91aa71930071fd70ef955b948d000f9122d5c870aad16e8544a078b9defcad2db26347bbc5d8787026b746542777efdc7f7ae2bb3f9d814eb5e29fcb280d0459b5f1cf374c373312171124a5bd328b362d3921e4df4801ae5f115e4ff793f213856fe54f99266089b9612577c263b64207e4508531632408c566298f8dd44eea85430c5a421963edc9c586d6c305180f72f274fd1fb6d941b636ae4166d6f142622b211906273c156a18e5ab1c97a0c47c7cd2f41e13340e2cca5f5c50b38edb4ebc297f8600a600ea7c6627ccac3352a6065671789a11ab02e2a66b482634772ad53c9bb3ad58c5b926ae6fad81c5ad785967399cf3bc9bd15a0ede85593fddac539a17d846e1db403825219c4e62a4eb006586e323e1f16190508a476d08b086c961f4213cdeb4c1f57763a1566d3e700fdd5a4874822ef563bebb1dc47f363569d17a42514b5b172b40fb680f0124bc1746299d12bef318d16414483d8f39cd8d7e6c925d270af18304f7d4a33037fadab90248c08b32e740be99f2f0ed9a2c2816d7e49a5f7eed4fde2069c3d303e44cc579d6874ea79511b0333ea79424ad499e72927c32cca64f04c848c930923c1c7195d7d6c9cd546d846fe0cbf2e9b1c1fceec5b792f85cb695302536a2544d48d649ce1309f35181a97a485725240f71fb78c80765bb90a3b2c57acf93da9882495cd5c6346b37edf5292e0818783fe888393af63f4b33bc907fe2fb3d889a20b8fa8bf27c13ec4fd7ec1588809cd545cd38c511fdc9a1e0a86cb0a47f453e2ceebf0f4d9cdb3ff9bc8098e1d0818bbceeb9d4c43048c3a512a9d11f7bd7d42f40621aa9d70525b4997a4a438c92cf3dba569b8a839e986475e11447cea21f95fe194e00e27bab7a4ce3e481d0f29b42967edab130a1fa3d94d601d2dd5d151ed3567575e915618d1af63d7e2d8905b38411a1099955b8c9b76d65b9ddc15ddf3e6dbaa42a91ee048f0c5c4adcb5f2216c1acc4860733e79d556c3a70e0ace12472e51f9c0685e8646130474212797599328632200c3b8e8587c8f60669816746f1b2fa1591bf23ee5199c6c01f605b9ab5f7401ebae842d8901b0cecc94f512ec965c6f046c159308f12361c68c44c3a03efb320356805267949848db26a33bb745c2e6bd00bc484be082f51b9a1a7ab8a25c58134601ee596a025e9f58dae2f67bbd816011a2d273980310fd283b6e4728b90c75173d5ad635b8ace8679334b4ad7a7d8bf52ee8febd5e1cf8557b818a2f562cb5a46122ddee3a41b040f278acdef35ce03615a8e8b2aa710912c6e68915b7b0c10030a28872f53e92d9905bed1124600ca2371cde0faaf4f3ab4ecc4bd0cad1af1c24f2fc63bf9c82d790ab23a4db477b47b3ed03d847a1313a22e4ea3bc8b168bda83cb6afe6e77805746cc379afa1c995e5792b8714138513d1b4e70197627dff5b06f73de2ccfe4e12875f73263ddf300c188d79cdb3a88e56e201b25def575112aac33e37c5c603d52b0d6e51f52564d829dcbffbbd6cda98aeb47f4d28924da46f0db6b016dfa41c53c79e6890c34b23f70777622ad6df41531c2171ecdca3ce4342668330a99748f468c31b251061571536ebbe4949cdad606d89bf68472dd5d755bf61cd5226825a30897ce2f7f5ae2db366d01ac33c0dd13281a333a5a3db2852b9c22658ed320758a3cf8ec5f6b4da2cc2c681c162075aa278abb7fe9516ad0de24779a703314ce589d1ad4d5a8661d6e0e5908f1e2a272a0e661bf9658558c315ab250e5649063b6fa1b1c6da4ac322e42e04607dc8f87e74833907826facd69140f1e4e80c90dca9812b8fdc03ea135388cf82f07f7e921bbb96b11da9e16f5120dbbe76a0ae1053ac2e47b5e758bdd7a258fd5d5d6843709052c8ee4d20965c106255835f07b9d4109634947c89889a22b21ce56db7a33ba0444f5778bd08c8363ecfcbe22df978907658f236c73475d849ccee5ae93353f51e7ba0c3ceb9df24897fed0964a630606c78f37611b7d8b48d576ca13b0c9cd1803909d3f787b5c57f63ae2ef45ce013034558864eb055dacf4e945b792001b0449603418b0fe57faee964a6cbf81cf637ad2d8e056a5c0f4fdf128dcb6c3bb68751be8d6440112295d17186c6f61d6b46420f1e6e0b7d96b447c53cd22be32072c2077cc3462812c0ee00d9a619a2d49fdb4e9f3dac8186349d33af3ed0ed7354de195ef04dc2e00b97139ba3237d6336ee650abdb9b7026205d15b8ae9e91514ebffe29e0894bf2a6e61ca20e1e32269f8ae5778b7aa7fa5763748360951468e959f9b73c76b6721063f6ccd2ad9798f744b600636d67beecd16ade3d05757e7d76b9d09f57c4b9e4d9209685795592a7353ca908ea58c9164188bbdd3e35902aa1d6273d867ff842163c068d9653da4db6cf0eb7ef9e09c4ea5014b15ceccffb7039bc8b5339674668798b44c4b36d0b5fd188866be2eb96c96c51455a7853d5582f4e3c4cc195166517cc544d92ebe7cffdc30db202bf5d1df52b958995110fa1d276127dd93ffa179dc9585eb71e67976d1a9860cb9e432e55b7c1ec55ad324f1fb9d2fe3fb3d47ce7094b8b28ac0af647b25e123536f19c13ac5b189895cac63cdcdc364dc00b84ee796fa9baadbef26c316991fa8375a4895651c29ec584b3e09f8ac548869376ad7bf033aea9979aec7402aea118fadfed8e6602a9d2e3ccf5757a23a556dc4ce478c85afadbec45ad1a7d538fbab0a4ce8e7f82208c07450ec9f17d224b3104591f4899da726a6eb1dfb2a1c699f1b73a479b97cfc441a09a3a538a05830d2fab3a63525e1edcad04e8d7d5352c170cc183169b27179bbd2579b479ea675fb6b44b603fe20cb94bcbc794960ce179c7952265967b850e763f690af9fa400c3af996bac9669706bd7b6f2acd283fcf30c97362007f9baf1d18f05ab9348d9b1438914fd07f0b2f755f92f23ca5fdc89ecd07f49dc7f3cc8cb4713cfdb5bbac1d93b5a1913d5f521038a1b0e6cd36bea094da4f7771071dd73eb79f4f7787b95e7bf902d3998379818484b03d1543999b771b74bc1fdbd22d17c3c2d4e9f97dbe67669b9b81ba0f8aea76ca161af905cdcef80c2339ab5cbec300b41e0c060393c0b6c449e196ce91996d8732f2d329a6e56751c3a4bd65c464d2e092db85c4a50e02f83f5c70624b3521b9e1c817ef7c04c8a2bcae56c39c851715bed063c0a4a77e43caba73223df5e9dc8be1b834f6d24bbfd7ad48e7065ee8fcb34c4b94c565de73cfe44a55be97e665b5399f549210b5d67136a1cb13f47ce16d5f51243689fadbf183a0dee06eb1e42528af596bc2202709a1bcc91cec5ff2db6cc5b6d93fb7309ab142359e0da343dd9e8732bf9b6df49ca9da28aa6eefc0177d3b5157015f7893a6c7bedfc39464d29e96418b5dbbacd750808cc50dac31bb335df6f7aead51655933872e45af598c9b26d659f5b526a7206f347e33a5238908872b5ef0388a06a7af4fe61515c352e491bae4324a7c0ccf750d7c0d8aa136dc8a6e161be715f3db9f9d5353cbd58965be51ba1a89269e9638bd47c4fd7cb4bcb55d9c97811c31765efa912b0499364ad8a9cf6e99fc6615ec777b5c3d83b6fd4c27e5d685ed86719fff224ef97fcb778eeb2f00b9687952f17a01f9fb38c3d4164d597ae88a0c9d4eae8c970b170884fb0e49b03d74c559e356922ccff1c732e1fa253357b734ea1b845e3e52f56d617b3cf64349b02adbbe7d2f34c86ca974a545ae2fc53a1ddb790bf21ed1ef3fb32d5969475c19ad2142dbf7701264e3dece0ba01d4ff851d4181f59cd014af9ae00e9aa69eb419f706201006013ac0e4847436a0f97476406727f6c1fe48bf1c0c727bf3840b0fc0dc4868e9db5643ada9def36dd351e158f49f69101bdc8b6797526e6318fa435ceaeccb41715a0be83e27db920b624a759a5c3a8bd8e1496adc2822b95a3a555dcd21dbe91e023a63d4e6b6a8532e2ddfde47e11e9e46f768a27f30c4d27489243d76364f42e8c5a503c33fa31f9f8c4e9b53daf22b3dc01dbc39352211ca4396261eb33a4adc9e86c459fb6c8f4072f387b204b7c085ad28067d8cd71f32f657cd221e2463b0542b8f541a2d4b6189475307c1416997da649c9375663063771bfa68cff6fff3e4f90d764e263234e9d4e00224aa855388c93383acec145589a0e9d350bb9bfddb6bf65d929629a86f2e2a500c538a3f04b967a07ded70433f13f2e1cee5be0fc092c111e291fb1d357c3cba44922018803d01c284cf1890c6e951c0f033e3278fc136f6dd49483f5fd6955dc126470a23be5593c726f475d44168d24f74de0171c1dd92073641fa94c042cb832d354330737f7339eb5013eb2520a618b9c8a1a4b00f93e0ef4631a2431e02ab730c9b8f119a2f64d8357978ffda6fc01ad9e6799b6385f2ad33d4e1b985df216383ee414c015150d4fc45a1d1bb0f77d89ffbf581ea74dae535f79a0047cf470dcc5067cd0a424415b3c2f6b86ef31760f4e5d52bd9622b23eee12d4bf6d33240b8707c34b9e211520d8e8a780a4924f19991c6a6e8e5e6d25797943b592fc745daf2d3e32fb5b1d7212c461b05fd5348da44c65f0db2936a411220e6a4a213abf4b1faf37867a6685395ef5999fc3155c87e566d2dcbd459ce9dbe187b576dc05882b27fcfd1ad6c0d622655f21ea3c25117fea8329c44c09b6ab63b696fa44dcd8d2d7e4459859b3151cb7118bbb56e8388f0da5272d10d3d316cefc499b6248644093c126e06f9d9999e9d3fd9541ccd0883bd4965b1704a7fff034c04fb98fc135155b3964f5ce79932aeeb61b84f65be421622c809a4031a258029ac2e061f975498011b39ad69bf1bd7768e0e99f682057b9039e563a54011920c39e542aec50381550e844cee3277536aaa1d8d1d46f7308eb54e90927072123a1f00f58746b9cd1475bd06055def616d77542af63f1e634739d30d38ba73a922d74ebce0b4b962e28318c3ddb83e1b5f74a9039fd9baf879b68de89d3d6adf5bce96b6a9513789f0caa7f8af583e97ebcc02f9ce23fea8dd6267c7046c8040b60e623df165c15658b089b503ca7ea92d3845524d8e2ffe8026eb80a876ce083b6d5dd57703c5f2acd741e9ae042aceb0b4dd995c16154032ffb74f39296023eaf0ff9b26e0c6d951109ca5e61ec167e58b89c9aa6de53ee7cacc91577c69857a7e8efd929621c1896ca359c7ee3f46263255e6a7b447643be1fa8fdf1c0229ea21f11b2585a39f9b05121aed2e3ffc01cc44bf292850771757bbc821cfec0d229c1d916b5e830891df9a4ae644523d21a1e7a0f17cd8a431ef5ae2fdaf5e2720b475108b5e0c28a59b4f96d02f72e29c3a4833a2b5e082c51da707b4fb0424fe91b551741c1e64ea9b088b6717a5752880c030486008206fe7ad0f80439387c7a301edfc92071e6e8f3998f35a87963e09574c82c7b4df18ec2acad724b1134b30d44a1438819856368f3f1697c067f46cb31653dd70e3be813100875c1c96161e85262c0e95e511e06bb4a15f8f62429ec350a32599097595d13800ac5a3ac789c94746c7ec29887d560de312fd82312fdd1276837084345a69d09b34de03efec56ec3ab0f069c232ebd4197da932033e4ece23b932fd054c756c9adc318bf0fd6530d28a8e040d56b49361547ec76eeadb734fad74b5c0ab839d550bc47be95fb00"}}) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e0200000705"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r2 = getpgrp(0x0) r3 = gettid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') rt_tgsigqueueinfo(r2, r3, 0x16, &(0x7f00000007c0)={0x27, 0xf0e3, 0x2}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) fchdir(r4) read$FUSE(r4, &(0x7f0000002bc0)={0x2020}, 0x2020) 2.482154019s ago: executing program 0 (id=1078): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4801000010000100feffffff00010000fc00000000002d0000000000000000000a010100000000000000000000000000000107144e230005000000803a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d86c000000ac1414aa0000000000000000000000000000000000000000920100000000000f0100000000000000ffff0000000000003c250800000000000a0e000000000000f8ffffffffffffff0000000000000000ffffffffffffffff0000000000000000000800000000000001000000000000000300000008000000000000002cbd700004350000020001002000000000000000480003006c7a7300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500210001000000080018"], 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.47198965s ago: executing program 0 (id=1079): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) syz_usb_connect$uac1(0x2, 0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028800030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080805000f2402020002ff0f00f441a45d0fb209050109ff037808ba072501080403000904020000010200000904020101010200000b240201fc030801371fc807240108050210090582092000030201072501000e0300"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./tracing/uprobe_events\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000180)='p:s/p ./file0:0\f+', 0x11) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) r3 = dup3(r2, r0, 0x80000) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001c0021002dbd7000000000000700000005"], 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r6, 0x58b) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(r6, 0x8) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x20, 0xff, 0x0, 0xbfff7038}, {0x6, 0x0, 0x7f, 0xfffffffd}]}, 0x10) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000002c0)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000000)={0x80204400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, {r8}}, 0x58) 1.785420987s ago: executing program 7 (id=1094): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x4c, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x403c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5d, 0x0, 0x1, 0x8, 0xffff, 0x2, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0x40000c, 0x36, 0xa, 0x6, 0x2d, 0x9, 0x98, 0x8, 0x0, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0x400d, 0x5, 0x0, 0x6e38, 0x6, 0x8, 0x1, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x2, 0x8, 0x0, 0x34f1, 0x1fc, 0x4, 0x1b2c5a17, 0x2, 0x9, 0x7, 0x0, 0x2, 0x1, 0x9, 0x6, 0xac, 0x5, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x6, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d0, 0x34, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0xfffffffe, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x1, 0x0, 0x1, 0xfffffffe, 0x6, 0x6, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x8, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0x9, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xece9165b, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x0, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0x1, 0x80000000, 0x401, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x7, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x7, 0x4f, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x7, 0x1000, 0xfffffffe, 0x15, 0x800a, 0x5, 0x81, 0x5, 0x7, 0xfff7fffc, 0x4, 0x6, 0xeff]}, 0x45c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000010400000000000006000000000000001a0000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff03000000000000010100030000000084010500"], 0x23c}, 0x1, 0x0, 0x0, 0x4004}, 0x4080) 1.628952741s ago: executing program 7 (id=1098): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x695d8e8, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac710ea03ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.573396232s ago: executing program 7 (id=1099): socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0) setns(0xc9, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) (async) syz_clone3(0x0, 0x0) (async, rerun: 64) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) (rerun: 64) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x12) socket$inet(0x2, 0x2, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) pipe2(0x0, 0x0) (async) syz_ublk_add_dev(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000300)=0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.573259572s ago: executing program 7 (id=1100): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x2, 0x10000, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x7f6f, &(0x7f00000003c0)={0x0, 0x441b, 0x8000, 0x0, 0x374}, &(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) syz_ublk_add_dev(0xffffffffffffffff, r3, r1, r2, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0x200b2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x400, 0x401, 0x2fc, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x3e1, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x4, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa028, 0x20, 0x80002, 0x7b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x40000000, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x579, 0x0, 0x0}}, 0x0) 1.26501296s ago: executing program 7 (id=1109): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x69, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x12aa, 0x7, 0x1, {0x22, 0x67f}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xe, 0xff, 0x3}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x6, 0xd8, 0x7, 0x20, 0xf8}, 0x24, &(0x7f0000000080)={0x5, 0xf, 0x24, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x3, 0x72, 0xe1, 0x5, 0x25}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8e, 0xe, 0x4}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x8}]}, 0x3, [{0x3b, &(0x7f0000000100)=@string={0x3b, 0x3, "e153682082b4af09b1425b6e16e3d60c17f54cdd0159a080502d9214c07ea7f966e5b5f4803393b1b603a4989ccc8c758fc0f522d8de40b9a2"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x9, &(0x7f0000000180)=@string={0x9, 0x3, "7e1d3a6c818756"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000c80)={0x2c, &(0x7f0000000400)={0x0, 0x5, 0x9, {0x9, 0xf, "8f6df2f35a3676"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.114727863s ago: executing program 0 (id=1116): clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x6, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x4100000000000000, 0x400000, 0x100000000003f8c, 0x200000000000, 0x8000000000000000}) 1.114250193s ago: executing program 0 (id=1118): unshare(0x64000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="080086dd0001280004000003a60c6eec00be00442ffffe800000000088fc70738daf7b3200aaff020000050000000000000000000001"], 0xfdef) 997.150316ms ago: executing program 0 (id=1124): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={r2, r3/1000+60000}, 0x10) io_submit(r0, 0x1, &(0x7f0000000a40)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000340)="b6b8a9d794", 0x5, 0x0, 0x0, 0x2}]) 996.942456ms ago: executing program 3 (id=1125): syz_clone(0x22000211, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0) dup(0xffffffffffffffff) write$9p(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, 0x0, 0x0) 996.595726ms ago: executing program 3 (id=1126): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)=""/4098, 0x1002}, {&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000002400)=""/4097, 0x1001}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xb81e}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x10120, 0x0) 996.482036ms ago: executing program 3 (id=1127): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x2000, &(0x7f0000000100)=ANY=[@ANYBLOB="740f2c1c3d3d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c616e616d653d7b2b245d5e5d29a225262c69676e6f726571762c646972656374696f2c63616368653d6d6d61702c6d6d61702c63616368653d6d6d61702c63616368653d667363616368652c00"]) 995.436546ms ago: executing program 3 (id=1128): bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233beaa311ecc5fe3fa158d", 0xa1}, {&(0x7f0000000cc0)="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", 0x12d}, {&(0x7f0000001040)="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", 0x113}, {&(0x7f00000007c0)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e3af37ba4d1bac9280fe71822e0900ef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72373cfc7c03b20d68bac0e03f2957d4cebb8fbac2af9aba141fe5820064122f5bd93ebef6e200989cdb3c826109a322a771d15a939ef2b800089a8694e29cbdf892bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f", 0xb6}, {&(0x7f0000000580)="6b9cacb7f6804c331a3aa9379734ec2aedb597c32af634ddb581e3cef4c3058812b5118b70a11b4169426d7df4887c10782a5cfc7f8ea9995dea4ac79993469d55895298a177c1e96fbc02b422b2f658450f124c1f7fbb0ffc995cac4fb8186835e2811d77f90cd9a4d933cb708bc5a346e7fc85379cca848191ce387c3aba4c12d2c7a110b4ce3114b3bd8d1b7b116a803bd8ce2405f7c43700329ad680dfa721b65823c09cca147a24f365e0cbc678092ae44a632b5c8da7f3e8b31ceaf1b5577b783908da7734f30d7ade6113b3adfebb2b03ed05", 0xd6}, {&(0x7f0000001180)="c545b8e6891930d00e0c9f9a34b60edab22431d599675d86f2f876ea962ace703f8afaf9c4262d97ed63349f484d868856c1bc9cca3150f7e96d42e36ab839caeb28614673b668f1d4bfbc2ffdc9bbb7faa421ca301c10368c46010ec37a088c3414908889082d9fdffe5f74be78e4ab3d545c22d3148d9b024b52ac9280db8ea86894997c083e31229fa2365a8bceb69178468b0b7741df61069d66365ec555624cf395e1359669aec4eb18c84c59149442a7315383dd26efb1c7e3ad05", 0xbe}], 0x6}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="65582f9359a0131171dfb403e1249c431ad1fe8b66afd6ef0c978154f4a27eb98cb25896eeff99e775a758a7a4ce88468bea15e461e3cc83087a642104112fe047a567b0714f81ac002aab74fc8c960ad78df3473fa60d537ecf5a373c13a0c8a6b5686cee856ff661c9399efe5bfe82d20be58ac1339835874e9dcb22e5", 0x7e}], 0x1}}], 0x3, 0xc044) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300), 0x5b0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC]) 927.968558ms ago: executing program 3 (id=1129): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000300000000000000000000000000000000000000000040000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 920.550348ms ago: executing program 3 (id=1130): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)={0x8040, 0x102, 0x3}, 0x18) syz_usb_disconnect(0xffffffffffffffff) prlimit64(0x0, 0x0, &(0x7f0000000540)={0x6, 0x74}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x848080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000003c0)={r0, &(0x7f0000000140)='/dev/uhid\x00', 0x100, &(0x7f0000000180)={@align=0x2, {0x5d16, 0x6, 0x9, 0x5}}, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x800}) r3 = ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) socketpair(0xb, 0x80000, 0x8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000480)) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) ioctl$XFS_IOC_SCRUBV_METADATA(r6, 0xc0285840, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x14a042) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x4e, 0x0, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r9, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x19}}}}, [@NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0xd, 0x4, "472978e07e785306f8"}]}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "dcd4f9fa59bd5abf7492dd"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8001}, 0x4041) ioctl$XFS_IOC_FREE_EOFBLOCKS(r4, 0x8080583a, &(0x7f00000004c0)={0x401, 0x7d19, 0xe, 0xa, 0x7, 0x0, 0x5}) poll(0x0, 0x0, 0x101) close_range(r0, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000580)='./cgroup\x00', &(0x7f00000005c0)=@known='com.apple.FinderInfo\x00') accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x800) 215.593345ms ago: executing program 2 (id=1136): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x34, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0xfffffffffffffea9, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, 0x3}], 0x0, 0x0, 0x0}) r6 = dup3(r5, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) write$P9_RWALK(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="300000006f020003002001000000080000000000000020000000000300000000000000020400000003000000000000002affc53391e37ce3f572051087bcf40b14f55c148a995e673942f26600dbce59841f4b1e16dafeec6d3c0c2e2d093fd8e6ebf52752a92a8a15c2299518a04837f49a0f717ac8f906ec0e24acab1043608648"], 0x30) dup(0xffffffffffffffff) bind$802154_raw(r6, &(0x7f00000016c0)={0x27, @short={0x2, 0x2, 0xaaa2}}, 0x14) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000680)={0x73622a85, 0x100, 0x1}) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000480)={0x41, 0x2, 0x2}, 0x10) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom0\x00', 0x800, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000480)={0xa0002003}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x60000000}) 97.954249ms ago: executing program 0 (id=1137): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002f40)=ANY=[@ANYBLOB="240600001a0001002abd7000000000000200fc003a2a5e247b00000008061b8001"], 0x624}], 0x1, 0x0, 0x0, 0x60400}, 0x54) r1 = socket(0x18, 0x6, 0x0) lsetxattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x2) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @hyper}, 0x10) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f0000000080)={0x1, 0x800}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x20002010}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0xfffffffc, 0x4}}, 0x2e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010800040000002300000b01000008000300", @ANYRES32=r7, @ANYBLOB="280050801400013957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="040025bd7000fddbdf257600000008000300", @ANYRES32=r7, @ANYBLOB="0c009900090000007d0000000c00580000000000000000000c0058000800f0ffffffffff0b00580046000000000000000c00580002000000000000000c00580003000000000000000c0058006e000000000000000c0058004f00000000000000", @ANYRESDEC=0x0, @ANYRESHEX=r2], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r9 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r12 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r13 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000b, 0x12, r13, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000340)=ANY=[@ANYRES8=r9, @ANYRES32=r4, @ANYRES8=r8, @ANYRES8=r11, @ANYRES8=r13, @ANYBLOB="5b7015052157852100ab132eca8da7b761d58f51fee5ce860d1efb025a31b71cd3351885303b3ee0dd7dd8071dcd1170769e1119c49e7fba430f97b083135578cf71bf90b480e87e0d07d264e4d1a8484475932b3738089f6def63c1201a13cd3d3b6c518b1cde0c240f375ded0472d6896a4d1b0ac41eaf64c83f48e1b41f953264947aeb5a66c557a392887f7d911a29cf7ee540c6d939c398b1fb39c0410eafa23df8ee351fb9b271676832978dda75ba375e0a268f39c86e61c7657c9b8c905f898d7722d8cca3319b90995c9356fc"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000) write$selinux_load(r12, &(0x7f0000000000)=ANY=[], 0x3000) 62.757559ms ago: executing program 2 (id=1138): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b07, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a200000000200000000003f240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x10103) r1 = userfaultfd(0x801) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 1.25396ms ago: executing program 2 (id=1139): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x2, 0x2000000000000000) 984.811µs ago: executing program 2 (id=1140): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x4c, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x403c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5d, 0x0, 0x1, 0x8, 0xffff, 0x2, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0x40000c, 0x36, 0xa, 0x6, 0x2d, 0x9, 0x98, 0x8, 0x0, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0x400d, 0x5, 0x0, 0x6e38, 0x6, 0x8, 0x1, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x2, 0x8, 0x0, 0x34f1, 0x1fc, 0x4, 0x1b2c5a17, 0x2, 0x9, 0x7, 0x0, 0x2, 0x1, 0x9, 0x6, 0xac, 0x5, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x6, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d0, 0x34, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0xfffffffe, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x1, 0x0, 0x1, 0xfffffffe, 0x6, 0x6, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x8, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0x9, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xece9165b, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x0, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0x1, 0x80000000, 0x401, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x7, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x7, 0x4f, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x7, 0x1000, 0xfffffffe, 0x15, 0x800a, 0x5, 0x81, 0x5, 0x7, 0xfff7fffc, 0x4, 0x6, 0xeff]}, 0x45c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a008000080000ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001040000000000000600000000000000090000000000000008000000000000000000000000000000000000000000000000000000000020008100000000000000090000000000000083000000000000000000000000000000ff0300000000000001010003000000008401050064010102000000000000000000000000000004d432000000000000002001000000000000000000000000000006350000000002000000000000000000000000007f000001000000000000000000000000000000042b00000000000000fe8000000000000000000000000000bb0000000000000000000800000000000000000000ac141468000000000000000000000000000004d33200000000000000000000000000000000000000000000010000000000"], 0x23c}, 0x1, 0x0, 0x0, 0x4004}, 0x4080) 91.5µs ago: executing program 2 (id=1141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000020303"], 0x1c}}, 0xf0ffff00000000) 0s ago: executing program 2 (id=1142): syz_usb_connect$uac2(0x2, 0xffffff15, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8203, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xb, 0x20, 0x40, {0x8, 0xb, 0x0, 0x1, 0x1, 0x4, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xb, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x5, 0x8, {0x8, 0x25, 0x1, 0x80, 0x12, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x3, 0x40, {0x8, 0x25, 0x1, 0x83, 0x6c, 0x4, 0x8a}}}}}}}}]}}, 0x0) kernel console output (not intermixed with test programs): [ T604] ? __sys_recvmmsg+0x2a0/0x2a0 [ 32.800583][ T604] ? __cfi_vfs_write+0x10/0x10 [ 32.800604][ T604] ? fput+0x1a4/0x230 [ 32.800628][ T604] __x64_sys_recvmmsg+0x199/0x250 [ 32.800651][ T604] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 32.800674][ T604] ? __kasan_check_read+0x15/0x20 [ 32.800693][ T604] x64_sys_call+0x292c/0x2ee0 [ 32.800711][ T604] do_syscall_64+0x57/0xf0 [ 32.800734][ T604] ? clear_bhb_loop+0x50/0xa0 [ 32.800752][ T604] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.800779][ T604] RIP: 0033:0x7f37e119e0d9 [ 32.800795][ T604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.800810][ T604] RSP: 002b:00007f37e1ff5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 32.800830][ T604] RAX: ffffffffffffffda RBX: 00007f37e1425fa0 RCX: 00007f37e119e0d9 [ 32.800843][ T604] RDX: 0000000000000008 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 32.800855][ T604] RBP: 00007f37e1ff5090 R08: 0000000000000000 R09: 0000000000000000 [ 32.800868][ T604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.800879][ T604] R13: 00007f37e1426038 R14: 00007f37e1425fa0 R15: 00007fffa245ea98 [ 32.800894][ T604] [ 33.066941][ T399] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 33.282106][ T607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 33.329795][ T36] audit: type=1400 audit(1787221410.322:182): avc: denied { create } for pid=605 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.349382][ T36] audit: type=1400 audit(1787221410.341:183): avc: denied { setopt } for pid=605 comm="syz.2.94" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.372133][ T608] syzkaller1: entered promiscuous mode [ 33.377020][ T36] audit: type=1400 audit(1787221410.359:184): avc: denied { connect } for pid=605 comm="syz.2.94" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.377675][ T608] syzkaller1: entered allmulticast mode [ 33.410441][ T36] audit: type=1400 audit(1787221410.397:185): avc: denied { write } for pid=605 comm="syz.2.94" laddr=172.20.20.44 lport=4 faddr=172.20.20.14 fport=24096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.439659][ T399] usb 5-1: device descriptor read/8, error -71 [ 33.511527][ T36] audit: type=1400 audit(1787221410.490:186): avc: denied { watch } for pid=606 comm="syz.3.95" path="/25" dev="tmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.535770][ T36] audit: type=1400 audit(1787221410.509:187): avc: denied { mounton } for pid=609 comm="syz.2.96" path="/24/proc_mnt" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 33.557970][ T36] audit: type=1400 audit(1787221410.509:188): avc: denied { read } for pid=609 comm="syz.2.96" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 33.581131][ T36] audit: type=1400 audit(1787221410.509:189): avc: denied { open } for pid=609 comm="syz.2.96" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 33.602452][ T399] usb 5-1: device descriptor read/8, error -71 [ 33.737739][ T617] rust_binder: 616:617 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 33.858121][ T399] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 33.880504][ T399] usb 5-1: device descriptor read/8, error -71 [ 34.019572][ T399] usb 5-1: device descriptor read/8, error -71 [ 34.114982][ T398] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 34.139530][ T399] usb usb5-port1: unable to enumerate USB device [ 34.339521][ T398] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.351166][ T398] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.361315][ T398] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 34.415354][ T398] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 34.437889][ T398] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 34.447053][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.461767][ T398] usb 3-1: Product: syz [ 34.465977][ T398] usb 3-1: Manufacturer: syz [ 34.479565][ T398] usb 3-1: SerialNumber: syz [ 35.142512][ T625] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 35.266504][ T625] usb 5-1: device descriptor read/64, error -71 [ 35.524097][ T625] usb 5-1: device descriptor read/64, error -71 [ 35.762609][ T625] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 35.850845][ T665] process 'syz.3.118' launched './file0' with NULL argv: empty string added [ 35.905704][ T625] usb 5-1: device descriptor read/64, error -71 [ 35.977828][ T674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=674 comm=syz.3.122 [ 36.175537][ T625] usb 5-1: device descriptor read/64, error -71 [ 36.293579][ T625] usb usb5-port1: attempt power cycle [ 36.611378][ T689] veth1_to_bond: entered allmulticast mode [ 36.617584][ T689] veth1_to_bond: entered promiscuous mode [ 36.624150][ T688] veth1_to_bond: left promiscuous mode [ 36.629843][ T688] veth1_to_bond: left allmulticast mode [ 36.657306][ T625] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 36.687843][ T625] usb 5-1: device descriptor read/8, error -71 [ 36.786037][ T398] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.809662][ T398] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 36.819946][ T625] usb 5-1: device descriptor read/8, error -71 [ 36.843716][ T398] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 36.855649][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.872213][ T398] usb 3-1: USB disconnect, device number 6 [ 36.992553][ T698] netlink: 'syz.2.131': attribute type 12 has an invalid length. [ 37.022616][ T700] netlink: 36 bytes leftover after parsing attributes in process `syz.2.132'. [ 37.055264][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 37.055280][ T36] audit: type=1400 audit(1787221413.994:207): avc: denied { map } for pid=701 comm="syz.2.133" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 37.084416][ T625] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 37.092711][ T36] audit: type=1400 audit(1787221413.994:208): avc: denied { execute } for pid=701 comm="syz.2.133" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 37.152022][ T625] usb 5-1: device descriptor read/8, error -71 [ 37.166836][ T36] audit: type=1400 audit(1787221414.104:209): avc: denied { map } for pid=710 comm="syz.3.136" path="pipe:[1566]" dev="pipefs" ino=1566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 37.209473][ T714] capability: warning: `syz.3.137' uses 32-bit capabilities (legacy support in use) [ 37.239466][ T714] Zero length message leads to an empty skb [ 37.241775][ T716] netlink: 104 bytes leftover after parsing attributes in process `syz.2.138'. [ 37.293014][ T625] usb 5-1: device descriptor read/8, error -71 [ 37.403178][ T625] usb usb5-port1: unable to enumerate USB device [ 37.437823][ T36] audit: type=1400 audit(1787221414.372:210): avc: denied { mounton } for pid=736 comm="syz.3.148" path="/55/file0" dev="tmpfs" ino=305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.483425][ T36] audit: type=1326 audit(1787221414.392:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=736 comm="syz.3.148" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce4039e0d9 code=0x0 [ 37.568809][ T741] netlink: 5 bytes leftover after parsing attributes in process `syz.2.149'. [ 37.885923][ T625] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 37.896024][ T752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.154'. [ 37.930157][ T36] audit: type=1400 audit(1787221414.859:212): avc: denied { create } for pid=753 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.969779][ T36] audit: type=1400 audit(1787221414.879:213): avc: denied { write } for pid=753 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 37.991521][ T36] audit: type=1400 audit(1787221414.889:214): avc: denied { ioctl } for pid=756 comm="syz.4.156" path="socket:[6213]" dev="sockfs" ino=6213 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.066970][ T625] usb 3-1: Using ep0 maxpacket: 32 [ 38.074076][ T625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.086405][ T625] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.096721][ T625] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 38.110280][ T625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.139242][ T625] usb 3-1: config 0 descriptor?? [ 38.497147][ T399] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 38.560594][ T745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.571072][ T745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.579723][ T745] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 38.592329][ T625] savu 0003:1E7D:2D5A.0001: item fetching failed at offset 7/8 [ 38.600449][ T625] savu 0003:1E7D:2D5A.0001: parse failed [ 38.606207][ T625] savu 0003:1E7D:2D5A.0001: probe with driver savu failed with error -22 [ 38.671318][ T399] usb 5-1: Using ep0 maxpacket: 8 [ 38.682583][ T399] usb 5-1: unable to get BOS descriptor or descriptor too short [ 38.702434][ T399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 38.713457][ T399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 38.723287][ T399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 38.734397][ T399] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 38.744385][ T399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 38.754128][ T399] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 38.763948][ T399] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 38.775148][ T399] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 38.784331][ T399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.792424][ T399] usb 5-1: Product: syz [ 38.797047][ T399] usb 5-1: Manufacturer: syz [ 38.801722][ T399] usb 5-1: SerialNumber: syz [ 38.807364][ T399] usb 5-1: config 0 descriptor?? [ 38.811464][ T625] usb 3-1: USB disconnect, device number 7 [ 38.812654][ T775] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 38.849422][ T399] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 38.907337][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.045743][ T625] usb 5-1: USB disconnect, device number 10 [ 39.523009][ T36] audit: type=1400 audit(1787221416.408:215): avc: denied { mounton } for pid=785 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 39.554104][ T361] bridge_slave_1: left allmulticast mode [ 39.561217][ T361] bridge_slave_1: left promiscuous mode [ 39.566923][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.575173][ T361] bridge_slave_0: left allmulticast mode [ 39.582986][ T361] bridge_slave_0: left promiscuous mode [ 39.588813][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.640110][ T36] audit: type=1400 audit(1787221416.524:216): avc: denied { bind } for pid=793 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.727085][ T800] netlink: 17 bytes leftover after parsing attributes in process `syz.2.174'. [ 39.739416][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.747138][ T785] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.755364][ T785] bridge_slave_0: entered allmulticast mode [ 39.761884][ T785] bridge_slave_0: entered promiscuous mode [ 39.771137][ T361] veth1_macvtap: left promiscuous mode [ 39.776778][ T361] veth0_vlan: left promiscuous mode [ 39.848128][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.870960][ T785] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.878246][ T785] bridge_slave_1: entered allmulticast mode [ 39.885651][ T785] bridge_slave_1: entered promiscuous mode [ 39.916563][ T812] netlink: 44 bytes leftover after parsing attributes in process `syz.4.178'. [ 39.978462][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.985599][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.992884][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.999970][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.038315][ T537] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.046236][ T537] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.055247][ T586] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.062328][ T586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.079270][ T586] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.086425][ T586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.101585][ T785] veth0_vlan: entered promiscuous mode [ 40.111960][ T785] veth1_macvtap: entered promiscuous mode [ 40.303161][ T836] syzkaller1: entered promiscuous mode [ 40.308756][ T836] syzkaller1: entered allmulticast mode [ 40.424431][ T398] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 40.489742][ T9] input: syz0 as /devices/virtual/misc/uhid/0003:0001:0002.0002/input/input4 [ 40.499674][ T9] hid-generic 0003:0001:0002.0002: input,hidraw0: USB HID v0.01 Mouse [syz0] on syz0 [ 40.560329][ T845] netlink: 40 bytes leftover after parsing attributes in process `syz.4.187'. [ 40.592954][ T398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.604972][ T398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.616736][ T398] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 40.626033][ T398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.637906][ T398] usb 3-1: config 0 descriptor?? [ 40.937550][ T876] syz.3.201 uses obsolete (PF_INET,SOCK_PACKET) [ 41.066246][ T398] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 41.079408][ T398] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 41.087049][ T398] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 41.092508][ T897] loop5: detected capacity change from 0 to 7 [ 41.094464][ T398] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 41.101898][ T897] Buffer I/O error on dev loop5, logical block 0, async page read [ 41.108208][ T398] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 41.116707][ T897] Buffer I/O error on dev loop5, logical block 0, async page read [ 41.131593][ T398] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 41.131872][ T897] loop5: unable to read partition table [ 41.150296][ T368] Buffer I/O error on dev loop5, logical block 0, async page read [ 41.156944][ T897] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 41.158355][ T368] Buffer I/O error on dev loop5, logical block 0, async page read [ 41.179883][ T368] Buffer I/O error on dev loop5, logical block 0, async page read [ 41.188032][ T368] Buffer I/O error on dev loop5, logical block 0, async page read [ 41.198104][ T368] Buffer I/O error on dev loop5, logical block 0, async page read [ 41.206238][ T368] Buffer I/O error on dev loop5, logical block 0, async page read [ 41.215489][ T368] Buffer I/O error on dev loop5, logical block 0, async page read [ 41.223758][ T368] Buffer I/O error on dev loop5, logical block 0, async page read [ 41.437090][ T398] playstation 0003:054C:0DF2.0003: Failed to retrieve feature with reportID 9: -71 [ 41.446655][ T398] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense pairing info: -71 [ 41.456475][ T398] playstation 0003:054C:0DF2.0003: Failed to get MAC address from DualSense [ 41.465186][ T398] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 41.473211][ T398] playstation 0003:054C:0DF2.0003: probe with driver playstation failed with error -71 [ 41.485785][ T398] usb 3-1: USB disconnect, device number 8 [ 41.816855][ T919] netlink: 'syz.2.219': attribute type 12 has an invalid length. [ 41.837107][ T921] netlink: 36 bytes leftover after parsing attributes in process `syz.2.220'. [ 42.086030][ T398] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 42.187928][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 42.187944][ T36] audit: type=1326 audit(1787221419.052:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=908 comm="syz.5.215" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261af9e0d9 code=0x7fc00000 [ 42.233310][ T398] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 42.243126][ T398] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 42.256335][ T933] netlink: 104 bytes leftover after parsing attributes in process `syz.5.226'. [ 42.259390][ T398] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 42.279695][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.288346][ T398] usb 3-1: Product: syz [ 42.292649][ T398] usb 3-1: Manufacturer: syz [ 42.297268][ T398] usb 3-1: SerialNumber: syz [ 42.304118][ T398] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 42.311681][ T398] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 42.311681][ T398] Please send a copy of this message to and [ 42.389370][ T941] netlink: 40 bytes leftover after parsing attributes in process `syz.4.229'. [ 42.467430][ T958] netlink: 5 bytes leftover after parsing attributes in process `syz.3.236'. [ 42.507406][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 42.514017][ T36] audit: type=1400 audit(1787221419.378:243): avc: denied { map } for pid=961 comm="syz.3.238" path="socket:[6925]" dev="sockfs" ino=6925 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.538683][ T36] audit: type=1400 audit(1787221419.388:244): avc: denied { read } for pid=961 comm="syz.3.238" path="socket:[6925]" dev="sockfs" ino=6925 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.588300][ T967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 42.607850][ T970] netlink: 96 bytes leftover after parsing attributes in process `syz.4.241'. [ 42.616890][ T969] netlink: 96 bytes leftover after parsing attributes in process `syz.4.241'. [ 42.637307][ T36] audit: type=1400 audit(1787221419.510:245): avc: denied { associate } for pid=972 comm="syz.4.242" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 42.659565][ T36] audit: type=1400 audit(1787221419.530:246): avc: denied { bind } for pid=972 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.685162][ T36] audit: type=1400 audit(1787221419.530:247): avc: denied { write } for pid=972 comm="syz.4.242" name="pfkey" dev="proc" ino=4026532882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 42.696488][ T977] syz.4.244 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 42.711643][ T9] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 42.727407][ T9] usb 6-1: config 0 has no interface number 0 [ 42.727540][ T977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42778 sclass=netlink_route_socket pid=977 comm=syz.4.244 [ 42.735072][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 42.758542][ T398] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 42.759754][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.771456][ T398] usb 3-1: USB disconnect, device number 9 [ 42.774967][ T9] usb 6-1: Product: syz [ 42.774986][ T9] usb 6-1: Manufacturer: syz [ 42.789607][ T9] usb 6-1: SerialNumber: syz [ 42.794792][ T9] usb 6-1: config 0 descriptor?? [ 42.845314][ T36] audit: type=1400 audit(1787221419.723:248): avc: denied { create } for pid=987 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 43.041813][ T995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=995 comm=syz.3.251 [ 43.136851][ T666] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 43.197397][ T9] usb 6-1: Found UVC 0.08 device syz (046d:0823) [ 43.203816][ T9] usb 6-1: No valid video chain found. [ 43.212129][ T9] usb 6-1: USB disconnect, device number 2 [ 43.287834][ T666] usb 5-1: Using ep0 maxpacket: 32 [ 43.294541][ T666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.305727][ T666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.315588][ T666] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 43.324673][ T666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.341619][ T666] usb 5-1: config 0 descriptor?? [ 43.501230][ T1016] netlink: 44 bytes leftover after parsing attributes in process `syz.2.260'. [ 43.541328][ T36] audit: type=1400 audit(1787221420.426:249): avc: denied { load_policy } for pid=1017 comm="syz.2.261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 43.541374][ T1018] SELinux: ebitmap: truncated map [ 43.569699][ T1018] SELinux: failed to load policy [ 43.695556][ T1031] input: syz1 as /devices/virtual/input/input5 [ 43.742890][ T1036] syzkaller1: entered promiscuous mode [ 43.748482][ T1036] syzkaller1: entered allmulticast mode [ 43.781527][ T666] savu 0003:1E7D:2D5A.0004: item fetching failed at offset 7/8 [ 43.789851][ T666] savu 0003:1E7D:2D5A.0004: parse failed [ 43.796843][ T666] savu 0003:1E7D:2D5A.0004: probe with driver savu failed with error -22 [ 43.851255][ T1048] program syz.2.272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.870901][ T36] audit: type=1400 audit(1787221420.744:250): avc: denied { ioctl } for pid=1047 comm="syz.2.272" path="socket:[9227]" dev="sockfs" ino=9227 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.912986][ T36] audit: type=1400 audit(1787221420.744:251): avc: denied { bind } for pid=1047 comm="syz.2.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.994704][ T625] usb 5-1: USB disconnect, device number 11 [ 44.237581][ T1067] TCP: TCP_TX_DELAY enabled [ 44.310314][ T573] bridge_slave_1: left allmulticast mode [ 44.316015][ T573] bridge_slave_1: left promiscuous mode [ 44.321679][ T573] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.329518][ T573] bridge_slave_0: left allmulticast mode [ 44.335155][ T573] bridge_slave_0: left promiscuous mode [ 44.341014][ T573] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.409339][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.416903][ T1074] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.424071][ T1074] bridge_slave_0: entered allmulticast mode [ 44.430376][ T1074] bridge_slave_0: entered promiscuous mode [ 44.437004][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.444435][ T1074] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.451711][ T1074] bridge_slave_1: entered allmulticast mode [ 44.457893][ T1074] bridge_slave_1: entered promiscuous mode [ 44.464865][ T573] veth1_macvtap: left promiscuous mode [ 44.470451][ T573] veth0_vlan: left promiscuous mode [ 44.577832][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.585043][ T1074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.592349][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.599441][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.619006][ T575] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.626434][ T575] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.637196][ T559] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.644257][ T559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.654192][ T559] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.661317][ T559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.692312][ T1074] veth0_vlan: entered promiscuous mode [ 44.706742][ T1074] veth1_macvtap: entered promiscuous mode [ 44.748369][ T666] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 44.790750][ T1102] netlink: 40 bytes leftover after parsing attributes in process `syz.3.295'. [ 44.830460][ T453] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 44.901982][ T666] usb 6-1: Using ep0 maxpacket: 8 [ 44.908489][ T666] usb 6-1: unable to get BOS descriptor or descriptor too short [ 44.917255][ T666] usb 6-1: config 9 has an invalid interface number: 5 but max is 1 [ 44.925466][ T666] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 44.938833][ T666] usb 6-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 44.947907][ T666] usb 6-1: config 9 has no interface number 0 [ 44.954860][ T666] usb 6-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xFA, changing to 0x8A [ 44.964941][ T1110] netlink: 'syz.6.299': attribute type 12 has an invalid length. [ 44.966580][ T666] usb 6-1: config 9 interface 5 altsetting 9 endpoint 0x8A has invalid wMaxPacketSize 0 [ 44.984067][ T666] usb 6-1: config 9 interface 5 has no altsetting 0 [ 44.990369][ T453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.992105][ T666] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 45.002794][ T453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.011135][ T666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.025910][ T453] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 45.031087][ T666] usb 6-1: Product: syz [ 45.038539][ T453] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 45.042439][ T666] usb 6-1: Manufacturer: syz [ 45.051075][ T453] usb 5-1: Manufacturer: syz [ 45.055200][ T666] usb 6-1: SerialNumber: syz [ 45.063855][ T453] usb 5-1: config 0 descriptor?? [ 45.347947][ T1116] netlink: 'syz.3.301': attribute type 4 has an invalid length. [ 45.366649][ T1119] netlink: 36 bytes leftover after parsing attributes in process `syz.3.302'. [ 45.653362][ T1087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.665420][ T1087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.675406][ T453] uclogic 0003:256C:006D.0005: failed retrieving Huion firmware version: -71 [ 45.693314][ T453] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 45.704781][ T453] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 45.721097][ T453] usb 5-1: USB disconnect, device number 12 [ 46.192252][ T1134] netlink: 104 bytes leftover after parsing attributes in process `syz.4.308'. [ 46.584687][ T9] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 46.743188][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 46.751618][ T9] usb 5-1: config 8 has an invalid interface number: 43 but max is 1 [ 46.759805][ T9] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 46.781293][ T9] usb 5-1: config 8 has an invalid interface number: 35 but max is 1 [ 46.789421][ T9] usb 5-1: config 8 has no interface number 0 [ 46.800887][ T9] usb 5-1: config 8 has no interface number 1 [ 46.808428][ T1161] syz.6.321 (1161): attempted to duplicate a private mapping with mremap. This is not supported. [ 46.831065][ T9] usb 5-1: config 8 interface 43 altsetting 17 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 46.850008][ T9] usb 5-1: config 8 interface 43 altsetting 17 endpoint 0x85 is Bulk; changing to Interrupt [ 46.869777][ T9] usb 5-1: config 8 interface 43 altsetting 17 endpoint 0x4 is Bulk; changing to Interrupt [ 46.880054][ T9] usb 5-1: config 8 interface 43 altsetting 17 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 46.899842][ T9] usb 5-1: config 8 interface 43 has no altsetting 0 [ 46.906609][ T9] usb 5-1: config 8 interface 35 has no altsetting 0 [ 47.048353][ T559] bridge_slave_1: left allmulticast mode [ 47.055479][ T559] bridge_slave_1: left promiscuous mode [ 47.061542][ T559] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.070031][ T559] bridge_slave_0: left allmulticast mode [ 47.075727][ T559] bridge_slave_0: left promiscuous mode [ 47.081816][ T559] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.152988][ T36] kauditd_printk_skb: 17784 callbacks suppressed [ 47.153006][ T36] audit: type=1326 audit(1787221424.029:17903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1122 comm="syz.3.304" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4039e0d9 code=0x50000 [ 47.215098][ T36] audit: type=1326 audit(1787221424.059:18038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1122 comm="syz.3.304" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4039e0d9 code=0x50000 [ 47.257004][ T36] audit: type=1326 audit(1787221424.059:18039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1122 comm="syz.3.304" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4039e0d9 code=0x50000 [ 47.285774][ T36] audit: type=1326 audit(1787221424.059:18040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1122 comm="syz.3.304" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4039e0d9 code=0x50000 [ 47.311762][ T559] veth1_macvtap: left promiscuous mode [ 47.317260][ T36] audit: type=1326 audit(1787221424.059:18041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1122 comm="syz.3.304" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4039e0d9 code=0x50000 [ 47.317304][ T36] audit: type=1326 audit(1787221424.059:18042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1122 comm="syz.3.304" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4039e0d9 code=0x50000 [ 47.342659][ T559] veth0_vlan: left promiscuous mode [ 47.422229][ T36] audit: type=1326 audit(1787221424.059:18043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1122 comm="syz.3.304" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4039e0d9 code=0x50000 [ 47.453888][ T36] audit: type=1326 audit(1787221424.059:18044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1122 comm="syz.3.304" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4039e0d9 code=0x50000 [ 47.471074][ T666] usb 6-1: USB disconnect, device number 3 [ 47.483202][ T36] audit: type=1326 audit(1787221424.059:18045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1122 comm="syz.3.304" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4039e0d9 code=0x50000 [ 47.488869][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.510695][ T36] audit: type=1326 audit(1787221424.049:18037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1122 comm="syz.3.304" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce4039e0d9 code=0x50000 [ 47.538667][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.597573][ T1165] bridge_slave_0: entered allmulticast mode [ 47.605515][ T1165] bridge_slave_0: entered promiscuous mode [ 47.613480][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.629228][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.636407][ T1165] bridge_slave_1: entered allmulticast mode [ 47.646945][ T1165] bridge_slave_1: entered promiscuous mode [ 47.747243][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.754371][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.761694][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.769439][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.810232][ T1174] input: syz1 as /devices/virtual/input/input6 [ 47.817592][ T575] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.825174][ T575] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.836294][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.843553][ T576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.868225][ T576] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.875333][ T576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.949136][ T1165] veth0_vlan: entered promiscuous mode [ 47.964730][ T1165] veth1_macvtap: entered promiscuous mode [ 48.138090][ T1184] overlayfs: conflicting options: metacopy=off,verity=on [ 48.205158][ T453] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 48.348474][ T453] usb 6-1: device descriptor read/64, error -71 [ 48.399935][ T399] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 48.563918][ T399] usb 8-1: device descriptor read/64, error -71 [ 48.601861][ T1204] __nla_validate_parse: 3 callbacks suppressed [ 48.601880][ T1204] netlink: 44 bytes leftover after parsing attributes in process `syz.3.338'. [ 48.604671][ T453] usb 6-1: device descriptor read/64, error -71 [ 48.824987][ T1236] netlink: 40 bytes leftover after parsing attributes in process `syz.3.351'. [ 48.840563][ T399] usb 8-1: device descriptor read/64, error -71 [ 48.881369][ T453] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 49.014446][ T453] usb 6-1: device descriptor read/64, error -71 [ 49.096437][ T399] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 49.241632][ T399] usb 8-1: device descriptor read/64, error -71 [ 49.272814][ T453] usb 6-1: device descriptor read/64, error -71 [ 49.388080][ T453] usb usb6-port1: attempt power cycle [ 49.394263][ T9] usb 5-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 49.404261][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.418137][ T9] usb 5-1: can't set config #8, error -71 [ 49.425615][ T9] usb 5-1: USB disconnect, device number 13 [ 49.501539][ T399] usb 8-1: device descriptor read/64, error -71 [ 49.615417][ T399] usb usb8-port1: attempt power cycle [ 49.747033][ T1275] netlink: 144 bytes leftover after parsing attributes in process `syz.4.367'. [ 49.762328][ T453] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 49.793273][ T453] usb 6-1: device descriptor read/8, error -71 [ 49.928281][ T453] usb 6-1: device descriptor read/8, error -71 [ 49.968516][ T399] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 49.990539][ T399] usb 8-1: device descriptor read/8, error -71 [ 49.999754][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 50.125371][ T399] usb 8-1: device descriptor read/8, error -71 [ 50.156565][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.167608][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 50.176872][ T453] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 50.184439][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.193135][ T9] usb 5-1: config 0 descriptor?? [ 50.204087][ T453] usb 6-1: device descriptor read/8, error -71 [ 50.328189][ T453] usb 6-1: device descriptor read/8, error -71 [ 50.355825][ T399] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 50.376066][ T399] usb 8-1: device descriptor read/8, error -71 [ 50.391083][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 50.397144][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 50.405834][ T9] usb 5-1: USB disconnect, device number 14 [ 50.432255][ T453] usb usb6-port1: unable to enumerate USB device [ 50.500131][ T399] usb 8-1: device descriptor read/8, error -71 [ 50.604400][ T399] usb usb8-port1: unable to enumerate USB device [ 50.813891][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 50.958394][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.969486][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 50.987354][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.999602][ T9] usb 5-1: config 0 descriptor?? [ 51.095841][ T1300] 9pnet_fd: Insufficient options for proto=fd [ 51.483320][ T453] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 51.520160][ T1318] netlink: 'syz.3.387': attribute type 12 has an invalid length. [ 51.542296][ T1320] 9pnet_fd: Insufficient options for proto=fd [ 51.565341][ T1322] netlink: 112 bytes leftover after parsing attributes in process `syz.3.389'. [ 51.632207][ T453] usb 6-1: unable to get BOS descriptor or descriptor too short [ 51.640629][ T453] usb 6-1: not running at top speed; connect to a high speed hub [ 51.649182][ T453] usb 6-1: config 129 has an invalid interface number: 80 but max is 0 [ 51.657750][ T453] usb 6-1: config 129 has an invalid interface number: 5 but max is 0 [ 51.666197][ T453] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 51.676004][ T453] usb 6-1: config 129 has no interface number 0 [ 51.682519][ T453] usb 6-1: config 129 has no interface number 1 [ 51.688844][ T453] usb 6-1: config 129 interface 80 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 51.702466][ T453] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 51.713566][ T453] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 51.726940][ T453] usb 6-1: config 129 interface 80 has no altsetting 0 [ 51.734121][ T453] usb 6-1: config 129 interface 5 has no altsetting 0 [ 51.742889][ T453] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 51.752174][ T453] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.760528][ T453] usb 6-1: Product: syz [ 51.764735][ T453] usb 6-1: Manufacturer: syz [ 51.769968][ T453] usb 6-1: SerialNumber: syz [ 51.798174][ T9] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 51.798496][ T1275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.805985][ T9] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 51.816033][ T1275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.976736][ T453] usb 6-1: MIDIStreaming interface descriptor not found [ 52.000006][ T453] usb 6-1: USB disconnect, device number 8 [ 52.098484][ T1326] netlink: 36 bytes leftover after parsing attributes in process `syz.3.391'. [ 52.140811][ T398] usb 5-1: USB disconnect, device number 15 [ 52.140813][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 53.584862][ T1341] 9pnet_fd: Insufficient options for proto=fd [ 53.845577][ T36] kauditd_printk_skb: 9413 callbacks suppressed [ 53.845694][ T36] audit: type=1400 audit(1787221430.718:27459): avc: denied { append } for pid=1346 comm="syz.4.401" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.895980][ T1347] IPv6: Can't replace route, no match found [ 53.903021][ T1347] rust_binder: Write failure EFAULT in pid:203 [ 55.814793][ T1352] netlink: 40 bytes leftover after parsing attributes in process `syz.3.404'. [ 55.890952][ T36] audit: type=1400 audit(1787221432.689:27460): avc: denied { wake_alarm } for pid=1353 comm="syz.3.405" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.993843][ T1360] 9pnet_fd: Insufficient options for proto=fd [ 56.290788][ T1372] netlink: 1 bytes leftover after parsing attributes in process `syz.3.412'. [ 57.064096][ T1387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 57.165169][ T36] audit: type=1400 audit(1787221433.901:27461): avc: denied { bind } for pid=1390 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.885463][ T36] audit: type=1400 audit(1787221437.382:27462): avc: denied { getopt } for pid=1422 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.735023][ T1426] netlink: 44 bytes leftover after parsing attributes in process `syz.3.434'. [ 62.738355][ T1454] netlink: 40 bytes leftover after parsing attributes in process `syz.3.445'. [ 62.745273][ T36] audit: type=1400 audit(1787221439.101:27463): avc: denied { mount } for pid=1453 comm="syz.3.445" name="/" dev="configfs" ino=2494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 62.820755][ T36] audit: type=1400 audit(1787221439.101:27464): avc: denied { shutdown } for pid=1453 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.445342][ T36] audit: type=1400 audit(1787221440.686:27465): avc: denied { shutdown } for pid=1482 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.152571][ T1500] netlink: 'syz.3.464': attribute type 4 has an invalid length. [ 65.184758][ T1500] netlink: 'syz.3.464': attribute type 4 has an invalid length. [ 66.268697][ T1514] devpts: called with bogus options [ 67.537519][ T569] bridge_slave_1: left allmulticast mode [ 67.543503][ T569] bridge_slave_1: left promiscuous mode [ 67.555218][ T569] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.568438][ T569] bridge_slave_0: left allmulticast mode [ 67.574170][ T569] bridge_slave_0: left promiscuous mode [ 67.581086][ T569] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.710884][ T1523] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.718221][ T1523] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.725443][ T1523] bridge_slave_0: entered allmulticast mode [ 67.731859][ T1523] bridge_slave_0: entered promiscuous mode [ 67.740709][ T1523] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.747770][ T1523] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.768925][ T1523] bridge_slave_1: entered allmulticast mode [ 67.775229][ T1523] bridge_slave_1: entered promiscuous mode [ 67.789058][ T569] veth1_macvtap: left promiscuous mode [ 67.804711][ T569] veth0_vlan: left promiscuous mode [ 68.100902][ T1523] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.104239][ T36] audit: type=1400 audit(1787221444.196:27466): avc: denied { connect } for pid=1541 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.107974][ T1523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.134941][ T1523] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.142093][ T1523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.235611][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.243396][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.290672][ T538] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.297767][ T538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.325299][ T538] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.332387][ T538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.399260][ T1523] veth0_vlan: entered promiscuous mode [ 68.428868][ T1523] veth1_macvtap: entered promiscuous mode [ 68.572766][ T1561] netlink: 'syz.8.486': attribute type 12 has an invalid length. [ 68.643088][ T569] bridge_slave_1: left allmulticast mode [ 68.648900][ T569] bridge_slave_1: left promiscuous mode [ 68.654807][ T569] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.662774][ T569] bridge_slave_0: left allmulticast mode [ 68.668780][ T569] bridge_slave_0: left promiscuous mode [ 68.674961][ T569] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.789629][ T569] veth1_macvtap: left promiscuous mode [ 68.795192][ T569] veth0_vlan: left promiscuous mode [ 68.855629][ T1565] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.865268][ T1565] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.873271][ T1563] loop7: detected capacity change from 0 to 16384 [ 68.880080][ T1565] bridge_slave_0: entered allmulticast mode [ 68.886438][ T1565] bridge_slave_0: entered promiscuous mode [ 68.899965][ T1565] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.907674][ T1565] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.915175][ T1565] bridge_slave_1: entered allmulticast mode [ 68.927143][ T1565] bridge_slave_1: entered promiscuous mode [ 69.015317][ T1565] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.022518][ T1565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.029873][ T1565] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.036940][ T1565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.069053][ T538] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.079633][ T538] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.091033][ T538] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.098153][ T538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.108757][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.115819][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.183098][ T1565] veth0_vlan: entered promiscuous mode [ 69.199555][ T1565] veth1_macvtap: entered promiscuous mode [ 69.610168][ T399] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 69.777371][ T399] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.788563][ T399] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.798891][ T399] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 69.808355][ T399] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.821948][ T399] usb 10-1: config 0 descriptor?? [ 70.070187][ T537] bridge_slave_1: left allmulticast mode [ 70.076227][ T537] bridge_slave_1: left promiscuous mode [ 70.081963][ T537] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.090148][ T537] bridge_slave_0: left allmulticast mode [ 70.095903][ T537] bridge_slave_0: left promiscuous mode [ 70.101690][ T537] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.214439][ T1581] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.222316][ T1581] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.229413][ T1581] bridge_slave_0: entered allmulticast mode [ 70.235962][ T1581] bridge_slave_0: entered promiscuous mode [ 70.246412][ T1574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.256360][ T1581] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.265216][ T1574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.266159][ T1581] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.280837][ T1581] bridge_slave_1: entered allmulticast mode [ 70.287385][ T1581] bridge_slave_1: entered promiscuous mode [ 70.291155][ T399] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 70.303985][ T537] veth1_macvtap: left promiscuous mode [ 70.309529][ T537] veth0_vlan: left promiscuous mode [ 70.314843][ T399] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 70.322272][ T399] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 70.340669][ T399] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 70.353106][ T399] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 70.373758][ T399] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0 [ 70.476378][ T1581] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.483494][ T1581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.490991][ T1581] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.498067][ T1581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.508137][ T399] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 9: -71 [ 70.518905][ T399] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -71 [ 70.528647][ T399] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 70.537366][ T399] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 70.547879][ T569] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.555648][ T569] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.563554][ T399] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -71 [ 70.590580][ T399] usb 10-1: USB disconnect, device number 2 [ 70.603036][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.610149][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.623283][ T569] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.630392][ T569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.663726][ T1581] veth0_vlan: entered promiscuous mode [ 70.677850][ T1581] veth1_macvtap: entered promiscuous mode [ 70.713004][ T1587] netlink: 36 bytes leftover after parsing attributes in process `syz.1.489'. [ 70.989337][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 71.165883][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 71.172472][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 71.181112][ T9] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 71.189578][ T9] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 71.201284][ T9] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 71.210399][ T9] usb 2-1: config 128 has no interface number 0 [ 71.216753][ T9] usb 2-1: config 128 interface 127 altsetting 14 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 71.229086][ T9] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x85 has invalid maxpacket 3410, setting to 64 [ 71.240758][ T9] usb 2-1: config 128 interface 127 has no altsetting 0 [ 71.249702][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 71.259456][ T9] usb 2-1: New USB device strings: Mfr=1, Product=210, SerialNumber=3 [ 71.267692][ T9] usb 2-1: Product: syz [ 71.272381][ T9] usb 2-1: Manufacturer: syz [ 71.277429][ T9] usb 2-1: SerialNumber: syz [ 71.443484][ T1599] netlink: 40 bytes leftover after parsing attributes in process `syz.3.496'. [ 71.556879][ T1589] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 71.569678][ T1589] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 71.666630][ T1616] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1616 comm=syz.1.492 [ 71.759286][ T1618] 9p: Unknown access argument 18446744073709551615: -34 [ 71.781710][ T9] usb 2-1: USB disconnect, device number 7 [ 71.793633][ T1575] udevd[1575]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.966598][ T36] audit: type=1400 audit(1787221448.010:27467): avc: denied { sqpoll } for pid=1636 comm="syz.9.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.019589][ T1643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.513'. [ 72.537250][ T36] audit: type=1400 audit(1787221448.553:27468): avc: denied { getopt } for pid=1663 comm="syz.1.521" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.587023][ T36] audit: type=1400 audit(1787221448.553:27469): avc: denied { ioctl } for pid=1663 comm="syz.1.521" path="socket:[12183]" dev="sockfs" ino=12183 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 72.716236][ T36] audit: type=1400 audit(1787221448.724:27470): avc: denied { shutdown } for pid=1670 comm="syz.3.524" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.291158][ T1682] netlink: 44 bytes leftover after parsing attributes in process `syz.3.529'. [ 75.247489][ T1705] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2581 sclass=netlink_xfrm_socket pid=1705 comm=syz.3.538 [ 75.260083][ T36] audit: type=1400 audit(1787221451.112:27471): avc: denied { audit_write } for pid=1704 comm="syz.3.538" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.354058][ T1709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.540'. [ 75.415087][ T1711] netlink: 'syz.3.541': attribute type 1 has an invalid length. [ 76.584189][ T1743] overlayfs: failed to clone upperpath [ 79.635001][ T36] audit: type=1400 audit(1787221455.225:27472): avc: denied { create } for pid=1774 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 79.661031][ T1775] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 79.688103][ T1775] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 79.835358][ T36] audit: type=1400 audit(1787221455.434:27473): avc: denied { setopt } for pid=1785 comm="syz.3.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.860083][ T1804] netlink: 'syz.3.579': attribute type 12 has an invalid length. [ 80.955953][ T1808] netlink: 104 bytes leftover after parsing attributes in process `syz.3.581'. [ 81.540352][ T1812] netlink: 36 bytes leftover after parsing attributes in process `syz.3.583'. [ 85.247790][ T1820] netlink: 20 bytes leftover after parsing attributes in process `syz.3.586'. [ 85.433274][ T36] audit: type=1326 audit(1787221460.951:27474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1832 comm="syz.3.592" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7fce4033f459 code=0x0 [ 85.520175][ T1838] 9p: Unknown access argument 18446744073709551615: -34 [ 86.579457][ T1846] netlink: 25 bytes leftover after parsing attributes in process `syz.3.597'. [ 86.740962][ T310] bridge_slave_1: left allmulticast mode [ 86.746662][ T310] bridge_slave_1: left promiscuous mode [ 86.758483][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.780088][ T310] bridge_slave_0: left allmulticast mode [ 86.785785][ T310] bridge_slave_0: left promiscuous mode [ 86.800355][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.925555][ T1850] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.950540][ T1850] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.968529][ T1850] bridge_slave_0: entered allmulticast mode [ 86.979667][ T1850] bridge_slave_0: entered promiscuous mode [ 86.991421][ T310] veth1_macvtap: left promiscuous mode [ 87.000753][ T310] veth0_vlan: left promiscuous mode [ 87.130280][ T1850] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.148166][ T1850] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.162081][ T1850] bridge_slave_1: entered allmulticast mode [ 87.168509][ T1850] bridge_slave_1: entered promiscuous mode [ 87.238391][ T1850] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.245483][ T1850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.252817][ T1850] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.259888][ T1850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.293276][ T528] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.311573][ T528] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.326223][ T566] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.333327][ T566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.366361][ T566] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.373433][ T566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.443804][ T1850] veth0_vlan: entered promiscuous mode [ 87.471475][ T1850] veth1_macvtap: entered promiscuous mode [ 87.664901][ T1867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'. [ 87.760614][ T1871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 88.047284][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.228770][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 88.235376][ T9] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 88.250120][ T9] usb 1-1: config 0 has no interface number 0 [ 88.260994][ T9] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid maxpacket 30464, setting to 1024 [ 88.284030][ T9] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 88.284074][ T566] bridge_slave_1: left allmulticast mode [ 88.305090][ T9] usb 1-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.315624][ T566] bridge_slave_1: left promiscuous mode [ 88.323673][ T566] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.335627][ T9] usb 1-1: config 0 interface 196 has no altsetting 0 [ 88.346884][ T566] bridge_slave_0: left allmulticast mode [ 88.347749][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 88.352549][ T566] bridge_slave_0: left promiscuous mode [ 88.373976][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.378824][ T566] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.382170][ T9] usb 1-1: Product: syz [ 88.393353][ T9] usb 1-1: Manufacturer: syz [ 88.397958][ T9] usb 1-1: SerialNumber: syz [ 88.404356][ T9] usb 1-1: config 0 descriptor?? [ 88.409880][ T1873] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.501344][ T1881] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.508458][ T1881] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.515577][ T1881] bridge_slave_0: entered allmulticast mode [ 88.522010][ T1881] bridge_slave_0: entered promiscuous mode [ 88.528953][ T1881] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.536031][ T1881] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.543168][ T1881] bridge_slave_1: entered allmulticast mode [ 88.549673][ T1881] bridge_slave_1: entered promiscuous mode [ 88.563844][ T566] veth1_macvtap: left promiscuous mode [ 88.569394][ T566] veth0_vlan: left promiscuous mode [ 88.635340][ T9] ipheth 1-1:0.196: Unable to find endpoints [ 88.653452][ T9] usb 1-1: USB disconnect, device number 2 [ 88.710408][ T1881] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.717491][ T1881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.724804][ T1881] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.731855][ T1881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.759111][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.766624][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.776962][ T528] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.784069][ T528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.809955][ T528] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.817044][ T528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.837339][ T1881] veth0_vlan: entered promiscuous mode [ 88.853910][ T1881] veth1_macvtap: entered promiscuous mode [ 89.026111][ T1912] netlink: 44 bytes leftover after parsing attributes in process `syz.3.617'. [ 89.028821][ T1898] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.047175][ T1898] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.057286][ T1898] bridge_slave_0: entered allmulticast mode [ 89.064475][ T1898] bridge_slave_0: entered promiscuous mode [ 89.071067][ T1898] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.078738][ T1898] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.085874][ T1898] bridge_slave_1: entered allmulticast mode [ 89.092307][ T1898] bridge_slave_1: entered promiscuous mode [ 89.157499][ T1898] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.164583][ T1898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.171947][ T1898] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.179028][ T1898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.208174][ T528] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.226793][ T528] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.239323][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.246417][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.250723][ T36] audit: type=1400 audit(1787221464.540:27475): avc: denied { ioctl } for pid=1932 comm="syz.0.626" path="uts:[4026532649]" dev="nsfs" ino=4026532649 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.281214][ T1933] netlink: 'syz.0.626': attribute type 4 has an invalid length. [ 89.293261][ T546] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.300345][ T546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.307736][ T36] audit: type=1400 audit(1787221464.577:27476): avc: denied { ioctl } for pid=1938 comm="syz.2.627" path="socket:[14056]" dev="sockfs" ino=14056 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.311713][ T1935] netlink: 'syz.3.625': attribute type 6 has an invalid length. [ 89.340506][ T1935] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.348829][ T566] bridge_slave_1: left allmulticast mode [ 89.354860][ T566] bridge_slave_1: left promiscuous mode [ 89.360493][ T566] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.375421][ T566] bridge_slave_0: left allmulticast mode [ 89.381171][ T566] bridge_slave_0: left promiscuous mode [ 89.387012][ T566] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.454575][ T1933] netlink: 'syz.0.626': attribute type 4 has an invalid length. [ 89.522306][ T566] veth1_macvtap: left promiscuous mode [ 89.528158][ T566] veth0_vlan: left promiscuous mode [ 89.592173][ T1898] veth0_vlan: entered promiscuous mode [ 89.608640][ T1898] veth1_macvtap: entered promiscuous mode [ 89.725160][ T36] audit: type=1400 audit(1787221464.978:27477): avc: denied { unlink } for pid=1971 comm="syz.2.638" name="#1" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 89.735477][ T1972] overlay: filesystem on ./file0 not supported as upperdir [ 89.750241][ T36] audit: type=1400 audit(1787221464.978:27478): avc: denied { mount } for pid=1971 comm="syz.2.638" name="/" dev="overlay" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 89.808398][ T36] audit: type=1400 audit(1787221465.062:27479): avc: denied { create } for pid=1976 comm="syz.6.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 89.829563][ T36] audit: type=1400 audit(1787221465.062:27480): avc: denied { write } for pid=1976 comm="syz.6.641" path="socket:[14811]" dev="sockfs" ino=14811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 89.856487][ T36] audit: type=1400 audit(1787221465.062:27481): avc: denied { ioctl } for pid=1976 comm="syz.6.641" path="socket:[14811]" dev="sockfs" ino=14811 ioctlcmd=0x89f5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 89.882537][ T36] audit: type=1400 audit(1787221465.062:27482): avc: denied { relabelfrom } for pid=1976 comm="syz.6.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 89.902710][ T36] audit: type=1400 audit(1787221465.062:27483): avc: denied { relabelto } for pid=1976 comm="syz.6.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 90.164178][ T1993] netlink: 288 bytes leftover after parsing attributes in process `syz.6.648'. [ 90.395056][ T625] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 90.556441][ T625] usb 1-1: Using ep0 maxpacket: 16 [ 90.562869][ T625] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 90.571184][ T625] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.581337][ T625] usb 1-1: config 0 has no interface number 0 [ 90.589117][ T625] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 90.598168][ T625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.606214][ T625] usb 1-1: Product: syz [ 90.610457][ T625] usb 1-1: Manufacturer: syz [ 90.615048][ T625] usb 1-1: SerialNumber: syz [ 90.620437][ T625] usb 1-1: config 0 descriptor?? [ 90.626356][ T625] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 90.632763][ T625] usb 1-1: No valid video chain found. [ 90.783431][ T2026] netlink: 'syz.3.661': attribute type 9 has an invalid length. [ 90.817079][ T2033] netlink: 'syz.3.664': attribute type 12 has an invalid length. [ 90.840502][ T1991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.849240][ T1991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.857804][ T625] usb 1-1: USB disconnect, device number 3 [ 91.075741][ T2038] netlink: 104 bytes leftover after parsing attributes in process `syz.2.666'. [ 91.094297][ T2040] netlink: 36 bytes leftover after parsing attributes in process `syz.2.667'. [ 91.116193][ T2042] netlink: 'syz.2.668': attribute type 29 has an invalid length. [ 91.359016][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 91.522206][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.533730][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.543794][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 91.553118][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.561469][ T2051] netlink: 40 bytes leftover after parsing attributes in process `syz.3.672'. [ 91.565053][ T9] usb 3-1: config 0 descriptor?? [ 91.599449][ T2058] veth1_to_bond: entered promiscuous mode [ 91.605455][ T2058] netlink: 148 bytes leftover after parsing attributes in process `syz.3.675'. [ 91.615976][ T2058] veth1_to_bond (unregistering): left promiscuous mode [ 91.654697][ T625] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.667072][ T2065] 9p: Unknown access argument 18446744073709551615: -34 [ 91.757151][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 91.757169][ T36] audit: type=1326 audit(1787221466.985:27486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2066 comm="syz.3.678" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fce4039e0d9 code=0x0 [ 91.809226][ T625] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.820060][ T625] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 91.834664][ T625] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 91.844151][ T625] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.852342][ T625] usb 1-1: Product: syz [ 91.856807][ T625] usb 1-1: Manufacturer: syz [ 91.861693][ T625] usb 1-1: SerialNumber: syz [ 91.868722][ T625] usb-storage 1-1:1.0: USB Mass Storage device detected [ 91.877535][ T625] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 91.886554][ T625] scsi host1: usb-storage 1-1:1.0 [ 92.068755][ T625] usb 1-1: USB disconnect, device number 4 [ 92.185969][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 92.192038][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 92.200982][ T9] usb 3-1: USB disconnect, device number 10 [ 92.560578][ T2081] netlink: 25 bytes leftover after parsing attributes in process `syz.3.682'. [ 92.602837][ T36] audit: type=1400 audit(1787221467.840:27487): avc: denied { ioctl } for pid=2087 comm="syz.0.685" path="socket:[15061]" dev="sockfs" ino=15061 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.645757][ T2094] fuse: Bad value for 'rootmode' [ 92.813989][ T2115] netlink: 'syz.2.697': attribute type 3 has an invalid length. [ 92.821829][ T2115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'. [ 93.067590][ T453] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 93.210687][ T453] usb 3-1: Using ep0 maxpacket: 32 [ 93.217351][ T453] usb 3-1: unable to get BOS descriptor or descriptor too short [ 93.227323][ T453] usb 3-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 93.236497][ T453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.245083][ T453] usb 3-1: Product: syz [ 93.249743][ T453] usb 3-1: Manufacturer: syz [ 93.254380][ T453] usb 3-1: SerialNumber: syz [ 93.277110][ T36] audit: type=1400 audit(1787221468.537:27488): avc: denied { connect } for pid=2122 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 93.297363][ T36] audit: type=1400 audit(1787221468.568:27489): avc: denied { getopt } for pid=2122 comm="syz.3.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.317623][ T36] audit: type=1400 audit(1787221468.589:27490): avc: denied { ioctl } for pid=2122 comm="syz.3.701" path="socket:[15594]" dev="sockfs" ino=15594 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 93.343869][ T2128] netlink: 44 bytes leftover after parsing attributes in process `syz.3.703'. [ 93.456883][ T453] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 93.463847][ T453] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 93.473705][ T453] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 93.485361][ T453] usb 3-1: USB disconnect, device number 11 [ 93.495430][ T1875] udevd[1875]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.580435][ T2136] netlink: 32 bytes leftover after parsing attributes in process `syz.0.707'. [ 93.761531][ T36] audit: type=1400 audit(1787221469.049:27491): avc: denied { search } for pid=2154 comm="syz.0.714" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 93.792843][ T36] audit: type=1400 audit(1787221469.080:27492): avc: denied { setopt } for pid=2157 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.812532][ T36] audit: type=1400 audit(1787221469.090:27493): avc: denied { write } for pid=2157 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.967962][ T2177] overlayfs: failed to resolve './file0': -2 [ 94.009130][ T2184] syzkaller0: entered promiscuous mode [ 94.015042][ T2184] syzkaller0: entered allmulticast mode [ 94.155863][ T36] audit: type=1400 audit(1787221469.446:27494): avc: denied { accept } for pid=2191 comm="syz.2.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 94.621542][ T625] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 94.767947][ T625] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 94.780590][ T625] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.791425][ T625] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 94.805722][ T625] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 94.814830][ T625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.823093][ T625] usb 3-1: Product: syz [ 94.827283][ T625] usb 3-1: Manufacturer: syz [ 94.831875][ T625] usb 3-1: SerialNumber: syz [ 94.837287][ T625] usb 3-1: config 0 descriptor?? [ 94.843169][ T625] usb-storage 3-1:0.0: USB Mass Storage device detected [ 94.850901][ T625] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 94.957937][ T36] audit: type=1400 audit(1787221470.277:27495): avc: denied { create } for pid=2224 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 94.978664][ T666] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.037550][ T2210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.046453][ T2210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.057682][ T2210] : renamed from veth0_vlan (while UP) [ 95.066632][ T2210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.075126][ T2210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.130927][ T666] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 95.140776][ T666] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 95.150866][ T9] usb 3-1: USB disconnect, device number 12 [ 95.152053][ T666] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 95.166143][ T666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.174202][ T666] usb 1-1: Product: syz [ 95.178395][ T666] usb 1-1: Manufacturer: syz [ 95.182983][ T666] usb 1-1: SerialNumber: syz [ 95.189808][ T666] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 95.197344][ T666] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 95.197344][ T666] Please send a copy of this message to and [ 95.526481][ T2243] netlink: 'syz.3.747': attribute type 12 has an invalid length. [ 95.551442][ T2248] netlink: 104 bytes leftover after parsing attributes in process `syz.3.749'. [ 95.568282][ T2250] netlink: 36 bytes leftover after parsing attributes in process `syz.3.750'. [ 95.590332][ T666] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 95.600233][ T666] usb 1-1: USB disconnect, device number 5 [ 95.688730][ T2260] netlink: 40 bytes leftover after parsing attributes in process `syz.3.754'. [ 95.900071][ T64] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 96.047638][ T64] usb 3-1: Using ep0 maxpacket: 32 [ 96.054651][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.065598][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.075376][ T64] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 96.084707][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.103989][ T64] usb 3-1: config 0 descriptor?? [ 96.510033][ T64] usbhid 3-1:0.0: can't add hid device: -71 [ 96.520314][ T64] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 96.532306][ T64] usb 3-1: USB disconnect, device number 13 [ 96.638745][ T2284] overlayfs: failed to resolve './file2': -2 [ 96.698079][ T2285] overlayfs: failed to resolve './file0/file1/file0': -20 [ 96.705994][ T2285] batadv_slave_1: entered promiscuous mode [ 96.746547][ T2289] netlink: 25 bytes leftover after parsing attributes in process `syz.3.766'. [ 97.475986][ T2283] batadv_slave_1: left promiscuous mode [ 97.854573][ T2331] netlink: 44 bytes leftover after parsing attributes in process `syz.3.783'. [ 98.377210][ T2351] netlink: 40 bytes leftover after parsing attributes in process `syz.0.792'. [ 98.638065][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 98.803846][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 98.810125][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.816874][ T45] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 98.826004][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.834816][ T45] usb 1-1: config 0 descriptor?? [ 98.961894][ T2375] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 99.257551][ T45] pantherlord 0003:0810:0001.0007: unknown global tag 0xc [ 99.264762][ T45] pantherlord 0003:0810:0001.0007: item 0 0 1 12 parsing failed [ 99.272622][ T45] pantherlord 0003:0810:0001.0007: parse failed [ 99.278975][ T45] pantherlord 0003:0810:0001.0007: probe with driver pantherlord failed with error -22 [ 99.292008][ T398] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 99.447858][ T398] usb 3-1: Using ep0 maxpacket: 16 [ 99.454102][ T398] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 99.462352][ T398] usb 3-1: config 1 has no interface number 0 [ 99.468496][ T398] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 99.478449][ T398] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 99.488514][ T398] usb 3-1: config 1 interface 105 has no altsetting 0 [ 99.496837][ T398] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 99.505940][ T398] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 99.514047][ T398] usb 3-1: Product: syz [ 99.518194][ T398] usb 3-1: Manufacturer: syz [ 99.522843][ T398] usb 3-1: SerialNumber: syz [ 99.529486][ T2384] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.536759][ T2384] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.635505][ T64] usb 1-1: USB disconnect, device number 6 [ 99.757667][ T398] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 99.767009][ T398] usb 3-1: USB disconnect, device number 15 [ 100.274334][ T64] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 100.431609][ T64] usb 1-1: Using ep0 maxpacket: 32 [ 100.437870][ T64] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.448244][ T64] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 100.457256][ T64] usb 1-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 100.468424][ T64] usb 1-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 100.482669][ T64] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.492537][ T64] usb 1-1: config 1 interface 1 has no altsetting 0 [ 100.500545][ T64] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 100.509645][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.517747][ T64] usb 1-1: Product: syz [ 100.521932][ T64] usb 1-1: Manufacturer: syz [ 100.526570][ T64] usb 1-1: SerialNumber: syz [ 100.743097][ T64] usb 1-1: selecting invalid altsetting 0 [ 100.749435][ T64] usb 1-1: 1:1: cannot get freq (v2/v3): err -32 [ 100.761579][ T64] usb 1-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 100.789762][ T64] usb 1-1: USB disconnect, device number 7 [ 100.815940][ T1861] udevd[1861]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 100.906228][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 100.906244][ T36] audit: type=1400 audit(1787221476.165:27502): avc: denied { create } for pid=2426 comm="syz.0.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 101.209771][ T2447] netlink: 'syz.2.824': attribute type 12 has an invalid length. [ 101.260278][ T2451] netlink: 104 bytes leftover after parsing attributes in process `syz.0.825'. [ 101.279983][ T2453] netlink: 36 bytes leftover after parsing attributes in process `syz.0.827'. [ 101.300246][ T2455] netlink: 40 bytes leftover after parsing attributes in process `syz.0.828'. [ 101.324099][ T2457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 101.379970][ T2457] kvm: MWAIT instruction emulated as NOP! [ 101.472664][ T398] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 101.615584][ T398] usb 3-1: Using ep0 maxpacket: 32 [ 101.621879][ T398] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 101.634851][ T398] usb 3-1: config 2 has no interface number 0 [ 101.640993][ T398] usb 3-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 101.651324][ T398] usb 3-1: config 2 interface 88 has no altsetting 0 [ 101.659659][ T398] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 101.668775][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 101.673149][ T453] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 101.676800][ T398] usb 3-1: Product: syz [ 101.688527][ T398] usb 3-1: Manufacturer: syz [ 101.693145][ T398] usb 3-1: SerialNumber: syz [ 101.698564][ T2449] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.830344][ T453] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.840072][ T453] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 101.851149][ T453] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 101.860253][ T453] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.868245][ T453] usb 1-1: Product: syz [ 101.872421][ T453] usb 1-1: Manufacturer: syz [ 101.877052][ T453] usb 1-1: SerialNumber: syz [ 101.884021][ T453] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 101.891779][ T453] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 101.891779][ T453] Please send a copy of this message to and [ 101.903320][ T2449] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.269259][ T36] audit: type=1400 audit(1787221477.573:27503): avc: denied { getopt } for pid=2482 comm="syz.3.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.288980][ T36] audit: type=1400 audit(1787221477.583:27504): avc: denied { ioctl } for pid=2482 comm="syz.3.838" path="socket:[17730]" dev="sockfs" ino=17730 ioctlcmd=0xae81 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.342827][ T453] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -5 [ 102.343768][ T2488] netlink: 5 bytes leftover after parsing attributes in process `syz.2.839'. [ 102.352752][ T453] usb 1-1: USB disconnect, device number 8 [ 102.360571][ T2488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.381195][ T398] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 102.391314][ T398] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 102.402400][ T398] asix 3-1:2.88: probe with driver asix failed with error -71 [ 102.413356][ T398] usb 3-1: USB disconnect, device number 16 [ 102.724917][ T398] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 102.855741][ T398] usb 3-1: device descriptor read/64, error -71 [ 103.107373][ T398] usb 3-1: device descriptor read/64, error -71 [ 103.147635][ T453] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 103.223141][ T2500] netlink: 104 bytes leftover after parsing attributes in process `syz.3.844'. [ 103.298643][ T453] usb 1-1: Using ep0 maxpacket: 32 [ 103.304991][ T453] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.315969][ T453] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.325818][ T453] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 103.334935][ T453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.343453][ T453] usb 1-1: config 0 descriptor?? [ 103.349037][ T398] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 103.479785][ T398] usb 3-1: device descriptor read/64, error -71 [ 103.721889][ T398] usb 3-1: device descriptor read/64, error -71 [ 103.834707][ T398] usb usb3-port1: attempt power cycle [ 103.961332][ T453] usbhid 1-1:0.0: can't add hid device: -71 [ 103.967360][ T453] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 103.976721][ T453] usb 1-1: USB disconnect, device number 9 [ 104.182991][ T398] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 104.204535][ T398] usb 3-1: device descriptor read/8, error -71 [ 104.337795][ T398] usb 3-1: device descriptor read/8, error -71 [ 104.592885][ T398] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 104.615446][ T398] usb 3-1: device descriptor read/8, error -71 [ 104.746877][ T45] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 104.755516][ T398] usb 3-1: device descriptor read/8, error -71 [ 104.871581][ T398] usb usb3-port1: unable to enumerate USB device [ 104.885876][ T36] audit: type=1400 audit(1787221480.163:27505): avc: denied { accept } for pid=2518 comm="syz.3.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 104.903718][ T45] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.917277][ T45] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 104.928151][ T45] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.934788][ T45] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 104.943806][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.952434][ T45] usb 1-1: config 0 descriptor?? [ 104.957708][ T2517] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 105.381780][ T45] hid (null): unknown global tag 0xd [ 105.387178][ T45] hid (null): unknown global tag 0xc [ 105.392554][ T45] hid (null): unknown global tag 0xc [ 105.398495][ T45] kye 0003:0458:501A.0008: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 105.409265][ T45] kye 0003:0458:501A.0008: unknown main item tag 0x0 [ 105.415992][ T45] kye 0003:0458:501A.0008: unknown main item tag 0x0 [ 105.426154][ T45] kye 0003:0458:501A.0008: unknown main item tag 0x0 [ 105.433072][ T45] kye 0003:0458:501A.0008: unknown global tag 0xd [ 105.439835][ T45] kye 0003:0458:501A.0008: item 0 4 1 13 parsing failed [ 105.447393][ T45] kye 0003:0458:501A.0008: parse failed [ 105.453322][ T45] kye 0003:0458:501A.0008: probe with driver kye failed with error -22 [ 105.525425][ T2525] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.532634][ T2525] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.539778][ T2525] bridge_slave_0: entered allmulticast mode [ 105.545976][ T2525] bridge_slave_0: entered promiscuous mode [ 105.552424][ T2525] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.559511][ T2525] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.566606][ T2525] bridge_slave_1: entered allmulticast mode [ 105.572909][ T2525] bridge_slave_1: entered promiscuous mode [ 105.619726][ T2517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 105.629527][ T2525] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.636580][ T2525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.643873][ T2525] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.650950][ T2525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.668807][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.676298][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.685834][ T543] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.692940][ T543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.701918][ T543] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.708988][ T543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.728954][ T2525] veth0_vlan: entered promiscuous mode [ 105.740124][ T2525] veth1_macvtap: entered promiscuous mode [ 105.758019][ T36] audit: type=1400 audit(1787221481.001:27506): avc: denied { mount } for pid=2525 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 105.911847][ T64] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 106.054807][ T2547] FAULT_INJECTION: forcing a failure. [ 106.054807][ T2547] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 106.059440][ T2549] netlink: 44 bytes leftover after parsing attributes in process `syz.3.863'. [ 106.068319][ T2547] CPU: 0 UID: 0 PID: 2547 Comm: syz.7.862 Not tainted syzkaller #0 c744675a2bc56aa4cb6ac321888dd20361806feb [ 106.068349][ T2547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.068362][ T2547] Call Trace: [ 106.068368][ T2547] [ 106.068377][ T2547] __dump_stack+0x21/0x30 [ 106.068427][ T2547] dump_stack_lvl+0x140/0x1c0 [ 106.068452][ T2547] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.068481][ T2547] dump_stack+0x19/0x20 [ 106.068504][ T2547] should_fail_ex+0x3c2/0x510 [ 106.068526][ T2547] should_fail+0xf/0x20 [ 106.068546][ T2547] should_fail_usercopy+0x1e/0x30 [ 106.068568][ T2547] _copy_from_user+0x20/0xa0 [ 106.068592][ T2547] do_vfs_ioctl+0xb93/0x2010 [ 106.068615][ T2547] ? __ia32_compat_sys_ioctl+0x920/0x920 [ 106.068637][ T2547] ? preempt_schedule_thunk+0x1a/0x40 [ 106.068658][ T2547] ? try_to_wake_up+0x119e/0x1fd0 [ 106.068680][ T2547] ? plist_check_list+0x2a8/0x2c0 [ 106.068705][ T2547] ? __cfi_try_to_wake_up+0x10/0x10 [ 106.068727][ T2547] ? ioctl_has_perm+0x39a/0x500 [ 106.068746][ T2547] ? has_cap_mac_admin+0xd0/0xd0 [ 106.068766][ T2547] ? do_splice+0xcc6/0x1cc0 [ 106.068790][ T2547] ? selinux_file_ioctl+0x732/0x1480 [ 106.068808][ T2547] ? vfs_write+0xbcf/0xfd0 [ 106.068826][ T2547] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 106.068845][ T2547] ? do_futex+0x37d/0x510 [ 106.068871][ T2547] ? __cfi_do_futex+0x10/0x10 [ 106.068893][ T2547] ? mutex_unlock+0x90/0x240 [ 106.068914][ T2547] ? bpf_lsm_file_ioctl+0xd/0x20 [ 106.068936][ T2547] ? security_file_ioctl+0x3e/0x110 [ 106.068954][ T2547] __se_sys_ioctl+0x9f/0x1b0 [ 106.068976][ T2547] __x64_sys_ioctl+0x7f/0xa0 [ 106.068997][ T2547] x64_sys_call+0x1878/0x2ee0 [ 106.069014][ T2547] do_syscall_64+0x57/0xf0 [ 106.069037][ T2547] ? clear_bhb_loop+0x50/0xa0 [ 106.069056][ T2547] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.069087][ T2547] RIP: 0033:0x7fdd3639e0d9 [ 106.069116][ T2547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.069133][ T2547] RSP: 002b:00007fdd371d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.069157][ T2547] RAX: ffffffffffffffda RBX: 00007fdd36625fa0 RCX: 00007fdd3639e0d9 [ 106.069172][ T2547] RDX: 0000000000000000 RSI: 00000000401c5820 RDI: 0000000000000003 [ 106.069185][ T2547] RBP: 00007fdd36435024 R08: 0000000000000000 R09: 0000000000000000 [ 106.069198][ T2547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.069211][ T2547] R13: 00007fdd36626038 R14: 00007fdd36625fa0 R15: 00007ffdf3de2d08 [ 106.069227][ T2547] [ 106.080998][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.346879][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.356815][ T64] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 106.365942][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.374646][ T64] usb 3-1: config 0 descriptor?? [ 106.417303][ T398] usb 1-1: USB disconnect, device number 10 [ 106.543855][ T36] audit: type=1400 audit(1787221481.754:27507): avc: denied { read } for pid=2573 comm="syz.7.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.669105][ T2564] netlink: 40 bytes leftover after parsing attributes in process `syz.3.870'. [ 106.803258][ T64] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 106.814350][ T64] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 106.821768][ T64] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 106.846350][ T64] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 106.853782][ T64] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 106.878700][ T64] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 106.941515][ T398] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 107.021176][ T2524] syzkaller1: entered promiscuous mode [ 107.026755][ T2524] syzkaller1: entered allmulticast mode [ 107.071188][ T64] playstation 0003:054C:0DF2.0009: Failed to retrieve feature with reportID 9: -71 [ 107.078800][ T398] usb 1-1: device descriptor read/64, error -71 [ 107.080620][ T64] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -71 [ 107.096156][ T64] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 107.104996][ T64] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 107.113173][ T64] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -71 [ 107.125598][ T64] usb 3-1: USB disconnect, device number 21 [ 107.332638][ T398] usb 1-1: device descriptor read/64, error -71 [ 107.535306][ T36] audit: type=1400 audit(1787221482.692:27508): avc: denied { write } for pid=2591 comm="syz.7.880" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 107.559034][ T36] audit: type=1400 audit(1787221482.692:27509): avc: denied { open } for pid=2591 comm="syz.7.880" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 107.582559][ T36] audit: type=1400 audit(1787221482.692:27510): avc: denied { ioctl } for pid=2591 comm="syz.7.880" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x7435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 107.607309][ T398] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 107.755700][ T398] usb 1-1: device descriptor read/64, error -71 [ 107.920170][ T2614] loop5: detected capacity change from 0 to 7 [ 107.927579][ T1875] buffer_io_error: 2 callbacks suppressed [ 107.927591][ T1875] Buffer I/O error on dev loop5, logical block 0, async page read [ 107.941598][ T2614] Buffer I/O error on dev loop5, logical block 0, async page read [ 107.955807][ T1875] Buffer I/O error on dev loop5, logical block 0, async page read [ 107.968056][ T1875] Buffer I/O error on dev loop5, logical block 0, async page read [ 107.981817][ T2614] Buffer I/O error on dev loop5, logical block 0, async page read [ 107.991457][ T2614] loop5: unable to read partition table [ 107.996578][ T1875] Buffer I/O error on dev loop5, logical block 0, async page read [ 107.997259][ T2614] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 108.005321][ T1875] Buffer I/O error on dev loop5, logical block 0, async page read [ 108.026939][ T1875] Buffer I/O error on dev loop5, logical block 0, async page read [ 108.035117][ T1875] Buffer I/O error on dev loop5, logical block 0, async page read [ 108.042337][ T398] usb 1-1: device descriptor read/64, error -71 [ 108.043958][ T1875] Buffer I/O error on dev loop5, logical block 0, async page read [ 108.134797][ T2627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.895'. [ 108.159486][ T398] usb usb1-port1: attempt power cycle [ 108.162307][ T2633] netlink: 'syz.3.898': attribute type 3 has an invalid length. [ 108.217806][ T36] audit: type=1326 audit(1787221483.333:27511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2639 comm="syz.3.901" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce4039e0d9 code=0x0 [ 108.287879][ T2644] netlink: 'syz.2.903': attribute type 12 has an invalid length. [ 108.319423][ T2653] netlink: 36 bytes leftover after parsing attributes in process `syz.2.906'. [ 108.320553][ T2652] netlink: 104 bytes leftover after parsing attributes in process `syz.7.905'. [ 108.345808][ T2656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.907'. [ 108.355330][ T2656] bridge_slave_1: left allmulticast mode [ 108.355495][ T2660] netlink: 40 bytes leftover after parsing attributes in process `syz.7.908'. [ 108.360988][ T2656] bridge_slave_1: left promiscuous mode [ 108.361091][ T2656] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.383338][ T2656] bridge_slave_0: left allmulticast mode [ 108.389013][ T2656] bridge_slave_0: left promiscuous mode [ 108.394667][ T2656] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.515757][ T36] audit: type=1400 audit(1787221483.615:27512): avc: denied { search } for pid=2670 comm="syz.2.913" name="/" dev="configfs" ino=2494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.539696][ T36] audit: type=1400 audit(1787221483.615:27513): avc: denied { write } for pid=2670 comm="syz.2.913" name="usb_gadget" dev="configfs" ino=2495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.542416][ T398] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 108.562871][ T36] audit: type=1400 audit(1787221483.615:27514): avc: denied { add_name } for pid=2670 comm="syz.2.913" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 108.591017][ T36] audit: type=1400 audit(1787221483.615:27515): avc: denied { create } for pid=2670 comm="syz.2.913" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 108.596615][ T398] usb 1-1: device descriptor read/8, error -71 [ 108.648838][ T64] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 108.662405][ T36] audit: type=1400 audit(1787221483.756:27516): avc: denied { unmount } for pid=1881 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 108.711101][ T2679] kvm: user requested TSC rate below hardware speed [ 108.720800][ T2679] 9p: Unknown access argument 18446744073709551615: -34 [ 108.756236][ T398] usb 1-1: device descriptor read/8, error -71 [ 108.819082][ T64] usb 8-1: Using ep0 maxpacket: 32 [ 108.825347][ T64] usb 8-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 108.836710][ T64] usb 8-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.849669][ T64] usb 8-1: config 0 interface 0 has no altsetting 0 [ 108.856351][ T64] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 108.866958][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.877252][ T64] usb 8-1: config 0 descriptor?? [ 108.936598][ T2685] netlink: 5 bytes leftover after parsing attributes in process `syz.2.917'. [ 108.945755][ T2685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.980729][ T2689] random: crng reseeded on system resumption [ 109.011422][ T398] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 109.031542][ T398] usb 1-1: device descriptor read/8, error -71 [ 109.155606][ T398] usb 1-1: device descriptor read/8, error -71 [ 109.259545][ T398] usb usb1-port1: unable to enumerate USB device [ 109.271960][ T64] pyra 0003:1E7D:2C24.000A: unknown main item tag 0x5 [ 109.278854][ T64] pyra 0003:1E7D:2C24.000A: item fetching failed at offset 5/6 [ 109.286593][ T64] pyra 0003:1E7D:2C24.000A: parse failed [ 109.292495][ T64] pyra 0003:1E7D:2C24.000A: probe with driver pyra failed with error -22 [ 109.464702][ T398] usb 8-1: USB disconnect, device number 6 [ 109.680639][ T2697] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 109.900153][ T2715] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 109.973988][ T2720] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 109.983100][ T2720] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 109.992515][ T2720] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 110.003179][ T2720] overlay: ./file1 is not a directory [ 110.125345][ T398] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 110.204002][ T666] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 110.272874][ T398] usb 3-1: Using ep0 maxpacket: 8 [ 110.279371][ T398] usb 3-1: unable to get BOS descriptor or descriptor too short [ 110.287879][ T398] usb 3-1: config 10 has an invalid interface number: 91 but max is 0 [ 110.296109][ T398] usb 3-1: config 10 has no interface number 0 [ 110.302287][ T398] usb 3-1: config 10 interface 91 has no altsetting 0 [ 110.310415][ T398] usb 3-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a [ 110.319521][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.327520][ T398] usb 3-1: Product: syz [ 110.331700][ T398] usb 3-1: Manufacturer: syz [ 110.336427][ T398] usb 3-1: SerialNumber: syz [ 110.352793][ T666] usb 8-1: unable to get BOS descriptor or descriptor too short [ 110.361171][ T666] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 110.371476][ T666] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 110.380435][ T666] usb 8-1: config 1 has no interface number 0 [ 110.386560][ T666] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.401366][ T666] usb 8-1: string descriptor 0 read error: -22 [ 110.407590][ T666] usb 8-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 110.416650][ T666] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.544602][ T398] uvcvideo 3-1:10.91: Found Unit with invalid ID 0 [ 110.551598][ T398] usb 3-1: Found UVC 0.40 device syz (097b:61f6) [ 110.557942][ T398] usb 3-1: No valid video chain found. [ 110.564458][ T398] usb 3-1: USB disconnect, device number 22 [ 110.628374][ T64] usb 8-1: USB disconnect, device number 7 [ 110.849576][ T2742] netlink: 44 bytes leftover after parsing attributes in process `syz.0.938'. [ 110.921432][ T2747] netlink: 9 bytes leftover after parsing attributes in process `syz.0.940'. [ 110.930655][ T2747] gretap0: entered promiscuous mode [ 110.938067][ T2747] netlink: 5 bytes leftover after parsing attributes in process `syz.0.940'. [ 110.946984][ T2747] 0{X: renamed from gretap0 [ 110.952608][ T2747] 0{X: left promiscuous mode [ 110.957732][ T2747] 0{X: entered allmulticast mode [ 110.963865][ T2747] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 111.097445][ T2759] syzkaller1: entered promiscuous mode [ 111.103149][ T2759] syzkaller1: entered allmulticast mode [ 111.376149][ T64] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 111.528304][ T64] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.536378][ T64] usb 8-1: config 0 has no interface number 0 [ 111.542531][ T64] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.553776][ T64] usb 8-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.563774][ T64] usb 8-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.576815][ T64] usb 8-1: config 0 interface 1 has no altsetting 0 [ 111.586391][ T64] usb 8-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 111.597538][ T64] usb 8-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 111.605640][ T64] usb 8-1: Manufacturer: syz [ 111.611517][ T64] usb 8-1: config 0 descriptor?? [ 111.821950][ T64] usbhid 8-1:0.1: can't add hid device: -71 [ 111.827945][ T64] usbhid 8-1:0.1: probe with driver usbhid failed with error -71 [ 111.839699][ T64] usb 8-1: USB disconnect, device number 8 [ 112.012581][ T666] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 112.176555][ T666] usb 1-1: Using ep0 maxpacket: 32 [ 112.183110][ T666] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 112.191417][ T398] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 112.199024][ T666] usb 1-1: config 0 has no interface number 0 [ 112.205108][ T666] usb 1-1: config 0 interface 184 has no altsetting 0 [ 112.213439][ T666] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 112.222512][ T666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.230528][ T666] usb 1-1: Product: syz [ 112.234692][ T666] usb 1-1: Manufacturer: syz [ 112.239319][ T666] usb 1-1: SerialNumber: syz [ 112.244451][ T666] usb 1-1: config 0 descriptor?? [ 112.250240][ T666] smsc75xx v1.0.0 [ 112.362128][ T398] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 112.373494][ T398] usb 3-1: New USB device found, idVendor=0499, idProduct=0156, bcdDevice= 0.40 [ 112.382704][ T398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.390731][ T398] usb 3-1: Product: syz [ 112.394984][ T398] usb 3-1: Manufacturer: syz [ 112.399597][ T398] usb 3-1: SerialNumber: syz [ 112.451209][ T2804] fuse: Bad value for 'group_id' [ 112.456260][ T2804] fuse: Bad value for 'group_id' [ 112.568860][ T2818] netlink: 'syz.3.969': attribute type 12 has an invalid length. [ 112.588881][ T2822] netlink: 36 bytes leftover after parsing attributes in process `syz.3.971'. [ 112.607968][ T2824] netlink: 104 bytes leftover after parsing attributes in process `syz.3.972'. [ 112.628987][ T398] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 112.632641][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 112.632659][ T36] audit: type=1400 audit(1787221487.738:27527): avc: denied { mounton } for pid=2825 comm="syz.3.973" path="/mysys" dev="ramfs" ino=19924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 112.640971][ T398] usb 3-1: USB disconnect, device number 23 [ 112.683057][ T2830] netlink: 40 bytes leftover after parsing attributes in process `syz.3.974'. [ 112.832334][ T64] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 112.875805][ T666] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 112.886771][ T666] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 112.896184][ T666] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 112.906970][ T666] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 112.916723][ T666] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 112.927062][ T666] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 112.936571][ T666] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 112.945871][ T666] usb 1-1: USB disconnect, device number 15 [ 112.981322][ T64] usb 8-1: Using ep0 maxpacket: 16 [ 112.987674][ T64] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.998789][ T64] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.008551][ T64] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.021620][ T64] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.030712][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.039331][ T64] usb 8-1: config 0 descriptor?? [ 113.242348][ T2845] 9p: Unknown access argument 18446744073709551615: -34 [ 113.288807][ T2849] netlink: 5 bytes leftover after parsing attributes in process `syz.3.983'. [ 113.297879][ T2849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.345106][ T2857] syz_tun: entered allmulticast mode [ 113.352648][ T2857] syz_tun (unregistering): left allmulticast mode [ 113.389878][ T398] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 113.424420][ T2870] netlink: 'syz.3.992': attribute type 4 has an invalid length. [ 113.428107][ T2871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.440705][ T2871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.461929][ T2873] syzkaller1: entered promiscuous mode [ 113.467605][ T2873] syzkaller1: entered allmulticast mode [ 113.544103][ T398] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.557159][ T398] usb 3-1: config 0 interface 0 has no altsetting 0 [ 113.566725][ T398] usb 3-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 113.576924][ T398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.578784][ T2887] 9p: Unknown Cache mode or invalid value dev/kvm [ 113.588289][ T398] usb 3-1: config 0 descriptor?? [ 113.647530][ T64] usbhid 8-1:0.0: can't add hid device: -71 [ 113.653653][ T64] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 113.662472][ T64] usb 8-1: USB disconnect, device number 9 [ 113.712069][ T2897] futex_wake_op: syz.3.1001 tries to shift op by 144; fix this program [ 113.936004][ T666] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 113.984630][ T398] logitech-djreceiver 0003:046D:C532.000B: unknown main item tag 0x0 [ 113.992889][ T398] logitech-djreceiver 0003:046D:C532.000B: unknown main item tag 0x0 [ 114.001361][ T398] logitech-djreceiver 0003:046D:C532.000B: unknown main item tag 0x0 [ 114.009704][ T398] logitech-djreceiver 0003:046D:C532.000B: unknown main item tag 0x0 [ 114.017965][ T398] logitech-djreceiver 0003:046D:C532.000B: unknown main item tag 0x0 [ 114.026110][ T398] logitech-djreceiver 0003:046D:C532.000B: unknown main item tag 0x0 [ 114.034323][ T398] logitech-djreceiver 0003:046D:C532.000B: unknown main item tag 0x0 [ 114.094679][ T666] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.106294][ T666] usb 1-1: New USB device found, idVendor=31b2, idProduct=0011, bcdDevice= 0.40 [ 114.115388][ T666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.123413][ T666] usb 1-1: Product: syz [ 114.127562][ T666] usb 1-1: Manufacturer: syz [ 114.132133][ T666] usb 1-1: SerialNumber: syz [ 114.183656][ T398] usb 3-1: USB disconnect, device number 24 [ 114.275723][ T2914] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.345633][ T2919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.354517][ T2919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.379581][ T2921] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1009'. [ 114.402249][ T666] usb 1-1: USB disconnect, device number 16 [ 114.432561][ T1875] udevd[1875]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.497757][ T2927] fuse: Unknown parameter 'TC' [ 114.693256][ T2939] 9p: Unknown access argument 18446744073709551615: -34 [ 114.738583][ T36] audit: type=1400 audit(1787221489.903:27528): avc: denied { write } for pid=2942 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.946473][ T36] audit: type=1400 audit(1787221490.120:27529): avc: denied { setattr } for pid=2962 comm="syz.2.1027" name="HCI" dev="sockfs" ino=19451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 115.156124][ T2993] netlink: 'syz.3.1041': attribute type 12 has an invalid length. [ 115.188750][ T36] audit: type=1400 audit(1787221490.371:27530): avc: denied { read } for pid=2997 comm="syz.7.1044" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 115.239020][ T3005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10496 sclass=netlink_route_socket pid=3005 comm=syz.3.1046 [ 115.273004][ T3016] rust_binder: Write failure EFAULT in pid:241 [ 115.299242][ T3024] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1053'. [ 115.326808][ T3028] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1054'. [ 115.355911][ T3032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1057'. [ 115.417940][ T3040] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.515888][ T3063] overlayfs: failed to clone upperpath [ 115.532241][ T36] audit: type=1400 audit(1787221490.727:27531): avc: denied { create } for pid=3066 comm="syz.3.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 115.556592][ T64] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 115.578307][ T3073] veth0_to_batadv: mtu greater than device maximum [ 115.709610][ T64] usb 8-1: not running at top speed; connect to a high speed hub [ 115.718199][ T64] usb 8-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 115.729747][ T64] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x89 has invalid maxpacket 23597, setting to 64 [ 115.743789][ T64] usb 8-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 115.753216][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.764072][ T64] usb 8-1: Found UVC 1.00 device (046d:0825) [ 115.825063][ T3086] netlink: 'syz.2.1080': attribute type 3 has an invalid length. [ 115.832902][ T3086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 115.985642][ T45] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 116.073974][ T3092] netlink: 'syz.3.1083': attribute type 12 has an invalid length. [ 116.099728][ T1246] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 116.143289][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.161155][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 116.172236][ T45] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 116.185927][ T45] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 116.195214][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.207940][ T45] usb 1-1: Product: syz [ 116.212329][ T45] usb 1-1: Manufacturer: syz [ 116.217334][ T45] usb 1-1: SerialNumber: syz [ 116.248354][ T3107] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1090'. [ 116.264607][ T1246] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.284671][ T1246] usb 3-1: config 1 interface 0 has no altsetting 0 [ 116.293922][ T1246] usb 3-1: New USB device found, idVendor=056a, idProduct=0011, bcdDevice= 0.40 [ 116.303149][ T1246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.311191][ T1246] usb 3-1: Product: syz [ 116.316207][ T1246] usb 3-1: Manufacturer: syz [ 116.321048][ T1246] usb 3-1: SerialNumber: syz [ 116.352933][ T64] usb 8-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 116.364010][ T64] uvcvideo 8-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 116.375312][ T64] uvcvideo 8-1:1.1: Failed to initialize the device (-71). [ 116.384703][ T64] usb 8-1: USB disconnect, device number 10 [ 116.462615][ T36] audit: type=1400 audit(1787221491.702:27532): avc: denied { mount } for pid=3119 comm="syz.3.1102" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 116.487633][ T3121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1079'. [ 116.499651][ T36] audit: type=1400 audit(1787221491.744:27533): avc: denied { view } for pid=3083 comm="syz.0.1079" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 116.500016][ T3121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1079'. [ 116.530074][ T3123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.541576][ T3123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.559697][ T1246] usbhid 3-1:1.0: can't add hid device: -71 [ 116.565727][ T1246] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 116.577397][ T45] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 116.585923][ T45] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 116.586630][ T1246] usb 3-1: USB disconnect, device number 25 [ 116.604187][ T45] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 116.612911][ T45] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 116.625200][ T45] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 116.639999][ T45] usb 1-1: USB disconnect, device number 17 [ 116.764643][ T36] audit: type=1400 audit(1787221492.017:27534): avc: denied { mounton } for pid=3147 comm="syz.2.1105" path="/proc/305/task" dev="proc" ino=21787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 116.899669][ T3154] netlink: 'syz.2.1107': attribute type 3 has an invalid length. [ 116.907541][ T3154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'. [ 117.018594][ T36] audit: type=1400 audit(1787221492.289:27535): avc: denied { lock } for pid=3159 comm="syz.2.1110" path="socket:[20808]" dev="sockfs" ino=20808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 117.096985][ T3170] netlink: 'syz.2.1115': attribute type 12 has an invalid length. [ 117.135182][ T3178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1119'. [ 117.215981][ T64] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 117.242830][ T3199] 9p: Unknown access argument 18446744073709551615: -34 [ 117.380271][ T64] usb 8-1: Using ep0 maxpacket: 32 [ 117.386608][ T64] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.397700][ T64] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.407693][ T64] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 117.416771][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.425344][ T64] usb 8-1: config 0 descriptor?? [ 117.512814][ T36] audit: type=1400 audit(1787221492.813:27536): avc: denied { create } for pid=3202 comm="syz.3.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 117.625760][ T3158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.634323][ T3158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.834563][ T64] savu 0003:1E7D:2D5A.000C: item fetching failed at offset 7/8 [ 117.842523][ T64] savu 0003:1E7D:2D5A.000C: parse failed [ 117.848264][ T64] savu 0003:1E7D:2D5A.000C: probe with driver savu failed with error -22 [ 118.026326][ T64] usb 8-1: USB disconnect, device number 11 [ 118.028129][ T3220] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 118.032250][ T3220] rust_binder: Read failure Err(EFAULT) in pid:339 [ 118.033199][ T36] audit: type=1400 audit(1787221493.348:27537): avc: denied { map } for pid=3219 comm="syz.2.1136" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 118.043810][ T3220] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 118.050569][ T36] audit: type=1400 audit(1787221493.369:27538): avc: denied { call } for pid=3219 comm="syz.2.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 118.071674][ T3220] rust_binder: Read failure Err(EFAULT) in pid:339 [ 118.081688][ T36] audit: type=1400 audit(1787221493.369:27539): avc: denied { transfer } for pid=3219 comm="syz.2.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 118.107749][ T3220] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.130208][ T3220] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 118.136358][ T3223] netlink: 'syz.0.1137': attribute type 27 has an invalid length. [ 118.138254][ T399] rust_binder: 3219: undelivered TRANSACTION_COMPLETE [ 118.164729][ T399] rust_binder: 3219: undelivered TRANSACTION_ERROR: 29189 [ 118.192479][ T3223] ------------[ cut here ]------------ [ 118.198026][ T3223] WARNING: CPU: 0 PID: 3223 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 118.207587][ T3223] Modules linked in: [ 118.211566][ T3223] CPU: 0 UID: 0 PID: 3223 Comm: syz.0.1137 Not tainted syzkaller #0 c744675a2bc56aa4cb6ac321888dd20361806feb [ 118.223267][ T3223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.233656][ T3223] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 118.239914][ T3223] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 84 c4 0b 06 00 0f 85 c2 00 00 00 c6 05 77 c4 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 118.246736][ T36] audit: type=1400 audit(1787221493.516:27540): avc: denied { load_policy } for pid=3222 comm="syz.0.1137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 118.259687][ T3223] RSP: 0018:ffffc9000768f560 EFLAGS: 00010246 [ 118.286296][ T3223] RAX: 0000000000000000 RBX: 0000000000000013 RCX: 0000000000000000 [ 118.294390][ T3223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000768f618 [ 118.302411][ T3223] RBP: ffffc9000768f6a0 R08: ffffc9000768f617 R09: 0000000000000000 [ 118.310438][ T3223] R10: ffffc9000768f600 R11: fffff52000ed1ec3 R12: ffffc9000768f5a0 [ 118.318461][ T3223] R13: dffffc0000000000 R14: 1ffff92000ed1eb0 R15: 0000000000000000 [ 118.326554][ T3223] FS: 00007f125e47a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 118.335512][ T3223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.342134][ T3223] CR2: 0000200000002000 CR3: 000000011cda2000 CR4: 00000000003526b0 [ 118.350119][ T3223] Call Trace: [ 118.353427][ T3223] [ 118.356358][ T3223] ? vfs_write+0x3c4/0xfd0 [ 118.360769][ T3223] ? ksys_write+0x145/0x260 [ 118.365303][ T3223] ? x64_sys_call+0x271c/0x2ee0 [ 118.370157][ T3223] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 118.375936][ T3223] ? hashtab_init+0xd6/0x1f0 [ 118.380560][ T3223] ___kmalloc_large_node+0x81/0x220 [ 118.385749][ T3223] ? hashtab_init+0xd6/0x1f0 [ 118.390371][ T3223] __kmalloc_large_node_noprof+0x1e/0xd0 [ 118.396006][ T3223] ? hashtab_init+0xd6/0x1f0 [ 118.400612][ T3223] __kmalloc_noprof+0x326/0x510 [ 118.405468][ T3223] ? kasan_save_alloc_info+0x3a/0x50 [ 118.410791][ T3223] hashtab_init+0xd6/0x1f0 [ 118.415216][ T3223] ? common_read+0x175/0x490 [ 118.419859][ T3223] symtab_init+0x44/0x70 [ 118.424112][ T3223] common_read+0x1e7/0x490 [ 118.428543][ T3223] ? hashtab_init+0xd6/0x1f0 [ 118.433140][ T3223] ? __cfi_common_read+0x10/0x10 [ 118.438098][ T3223] ? hashtab_init+0x100/0x1f0 [ 118.442784][ T3223] policydb_read+0xa86/0x2860 [ 118.447526][ T3223] ? __kasan_kmalloc+0x96/0xb0 [ 118.452326][ T3223] ? __cfi_policydb_read+0x10/0x10 [ 118.457470][ T3223] ? security_load_policy+0x130/0x12d0 [ 118.462958][ T3223] security_load_policy+0x16a/0x12d0 [ 118.468326][ T3223] ? irqentry_exit+0x4a/0x60 [ 118.472920][ T3223] ? __kasan_check_write+0x18/0x20 [ 118.475217][ T398] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 118.478075][ T3223] ? mutex_lock+0x97/0x1d0 [ 118.490008][ T3223] ? __cfi_security_load_policy+0x10/0x10 [ 118.495790][ T3223] ? rep_movs_alternative+0x4a/0xa0 [ 118.500988][ T3223] sel_write_load+0x258/0x600 [ 118.505701][ T3223] ? __cfi_futex_wake+0x10/0x10 [ 118.510563][ T3223] ? __cfi_sel_write_load+0x10/0x10 [ 118.515793][ T3223] ? bpf_lsm_file_permission+0xd/0x20 [ 118.521159][ T3223] ? __cfi_sel_write_load+0x10/0x10 [ 118.526381][ T3223] vfs_write+0x3c4/0xfd0 [ 118.530628][ T3223] ? __cfi_vfs_write+0x10/0x10 [ 118.535425][ T3223] ? __kasan_check_write+0x18/0x20 [ 118.540570][ T3223] ? mutex_lock+0x97/0x1d0 [ 118.545000][ T3223] ? __cfi_mutex_lock+0x10/0x10 [ 118.549874][ T3223] ksys_write+0x145/0x260 [ 118.554230][ T3223] ? xfd_validate_state+0x68/0x140 [ 118.559358][ T3223] ? __cfi_ksys_write+0x10/0x10 [ 118.564339][ T3223] ? __kasan_check_write+0x18/0x20 [ 118.569486][ T3223] ? fpregs_restore_userregs+0x11c/0x260 [ 118.575141][ T3223] __x64_sys_write+0x7f/0x90 [ 118.579742][ T3223] x64_sys_call+0x271c/0x2ee0 [ 118.584432][ T3223] do_syscall_64+0x57/0xf0 [ 118.588853][ T3223] ? clear_bhb_loop+0x50/0xa0 [ 118.593551][ T3223] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.599758][ T3223] RIP: 0033:0x7f125d59e0d9 [ 118.604170][ T3223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.623948][ T3223] RSP: 002b:00007f125e47a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 118.632409][ T3223] RAX: ffffffffffffffda RBX: 00007f125d825fa0 RCX: 00007f125d59e0d9 [ 118.640503][ T3223] RDX: 0000000000003000 RSI: 0000200000000000 RDI: 000000000000000d [ 118.648433][ T398] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 118.648521][ T3223] RBP: 00007f125d635024 R08: 0000000000000000 R09: 0000000000000000 [ 118.656533][ T398] usb 3-1: can't read configurations, error -22 [ 118.664373][ T3223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.678614][ T3223] R13: 00007f125d826038 R14: 00007f125d825fa0 R15: 00007ffc5ec78148 [ 118.686611][ T3223] [ 118.689658][ T3223] ---[ end trace 0000000000000000 ]--- [ 118.700951][ T3223] SELinux: failed to load policy [ 118.803781][ T398] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 118.952708][ T398] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 118.960684][ T398] usb 3-1: can't read configurations, error -22 [ 118.967097][ T398] usb usb3-port1: attempt power cycle [ 119.305261][ T398] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 119.326735][ T398] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 119.334712][ T398] usb 3-1: can't read configurations, error -22 [ 119.462595][ T398] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 119.484144][ T398] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 119.492149][ T398] usb 3-1: can't read configurations, error -22 [ 119.498507][ T398] usb usb3-port1: unable to enumerate USB device