last executing test programs: 18.252898881s ago: executing program 1 (id=118): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025007a00190040000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 18.173576225s ago: executing program 1 (id=119): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setns(r0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000140001032db57000fedbdf250c0000000c0004"], 0x20}}, 0x20008080) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x2008c041}, 0x2040040) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/config.gz\x00', 0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc0000001b00010000000000fedbdf2500000000000000000000000000000000fe88000000000000000000000000000100"/62, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000002000000000000000feffffffffffffff000000000000000002000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000010100000000000000000000000000000c0008"], 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0\x00', 0x300}) 18.152987736s ago: executing program 1 (id=120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x18}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000001000)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002000)={0x3, 0x0, [{0x40000083, 0x0, 0x1001}, {0x400000b0, 0x0, 0x10001}, {0x400000b1, 0x0, 0x1}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000009, 0x200000005c832, 0xffffffffffffffff, 0x3000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.019121202s ago: executing program 1 (id=121): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) lseek(r0, 0x3, 0x4) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x20) chdir(&(0x7f0000000000)='./bus\x00') (async) linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000180)='./file0\x00', 0x1000) (async) openat2(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x240, 0x60, 0x8}, 0x18) (async) r3 = socket(0x10, 0x3, 0x0) (async) close(0x3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xf8}}, 0x40000) (async) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x24}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001400)=ANY=[@ANYBLOB="14000000520001f6"], 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x40) (async) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) (async) syz_clone3(&(0x7f0000000740)={0x84000000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17.877585349s ago: executing program 1 (id=122): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0x42cb, 0x2, 0x5, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe2dd, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x20, 0x4, 0x1f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8bec, 0x800, 0x1, 0x124}}], 0x1, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000000)=0x1aae) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000005000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 17.845582321s ago: executing program 1 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) mount(0x0, &(0x7f0000002200)='.\x00', 0x0, 0x199c65, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) ioctl$XFS_IOC_START_COMMIT(r3, 0x770a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[@nested_amd_invlpga={0x17d, 0x20, {0x2000, 0x4046}}, @wr_drn={0x68, 0x20, {0x7, 0x6}}, @nested_create_vm={0x12d, 0x18, 0x2}], 0x58}) r5 = socket(0x8000000010, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, r5) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, 0x0, 0x40000) write(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x0, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470881000200000001001b24", @ANYRES8=r8], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) splice(r1, &(0x7f0000000040)=0x4, r4, &(0x7f0000000200)=0x80000001, 0x4, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "ab624f6011dc5562", "21004bb854986b0b74c0152fbf338bad", "270689dd", "2969c92218294513"}, 0x28) 17.752866415s ago: executing program 32 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) mount(0x0, &(0x7f0000002200)='.\x00', 0x0, 0x199c65, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) ioctl$XFS_IOC_START_COMMIT(r3, 0x770a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[@nested_amd_invlpga={0x17d, 0x20, {0x2000, 0x4046}}, @wr_drn={0x68, 0x20, {0x7, 0x6}}, @nested_create_vm={0x12d, 0x18, 0x2}], 0x58}) r5 = socket(0x8000000010, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, r5) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, 0x0, 0x40000) write(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x0, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470881000200000001001b24", @ANYRES8=r8], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) splice(r1, &(0x7f0000000040)=0x4, r4, &(0x7f0000000200)=0x80000001, 0x4, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "ab624f6011dc5562", "21004bb854986b0b74c0152fbf338bad", "270689dd", "2969c92218294513"}, 0x28) 3.699881399s ago: executing program 3 (id=230): setuid(0xee01) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000280)={0x3, 'vlan0\x00', {0x2}, 0x4}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) 3.125428465s ago: executing program 3 (id=242): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000002a40)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad;\x92\n\x8d\xb6I\x1fQ\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\xa7Wd\xa4Eu\x8cs\xe0\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceYH\x8f\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xbf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xb6\x87\xa43\xdc50V-\x13F\xb6&\xcb\xa3\xe0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xad\xcf`*8&\feea\x17U=(\xff\xe5t\xe4\xe6\xd8\x8f\x81\xa02\xfed\xde\x03\xdbN98\xb1\x8b\xccg2_\xd4bA\xf1\xf8\xfb\xf8\xd0\xfb_\x1e\"\xedF\x17\xc1\xaf\xee%\x1c\xc6V\x17\x03\xa6&\xa86\xc3\xd5\x02\x10g\x02(EI\x8d\x19\xefJ\xc1x\x92\x8c\x05\xb9\xd2Y\xa0\x13|\x95\xceglx\xfa\xa0\xe5\xf9\xe5\xc9\x9eG\xa9\x14\xff\xe2p\xb4\xda\x1b\t\xc7t\xe3\xe8\xb2\xa5\\\xc6\f\r\xb4\xc1o\x9aS\xf2+\xf7\r04\xb3\xf8\xe38\v\xa4\xbdf', 0x1) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r1, 0xbc4cd000) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x4800) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x49, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb2, 0x90, 0x7, "", [{{0x9, 0x4, 0x0, 0x4e, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0xe, 0xf9, 0x1, {0x22, 0x419}}, {{{0x9, 0x5, 0x81, 0x3, 0x440, 0xf, 0x6, 0x7}}}}}]}}]}}, &(0x7f0000002680)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x0, 0x98, 0x5, 0x10, 0x9}, 0x26, &(0x7f0000000140)={0x5, 0xf, 0x26, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x81, 0x9}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0xfe, 0xfffd}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0xc, 0x7000}]}, 0x8, [{0xa0, &(0x7f0000002700)=@string={0xa0, 0x3, "a92bb85e4a99079e4535f3d2f0f8e47cf588ecd01bb75b07bea17bbe4a221a1cccc7218ff2cd9e1eef18f7684b71ed37070911818d10515ca58b34eb61fa185b462ff1bdd45675dfcaab65bfef496569b54b75b2481c67ab58583ddee34f5d59261358fd452ea332c682d3363ce00d2c98ef35cb813b94f5aa3eaa68e80d5de4f1659d8363fff7a588d0ba89e8e349c99e5732ac3bf5637752fb7a337e4e"}}, {0x49, &(0x7f0000000200)=@string={0x49, 0x3, "53e28c7cad99ffda66372e7f38ac65ca607a66f75911f97a69d729b7624b3627c9abd001d551d8f93f67061c89468ad32b8194c4fa0d18b66c7c5c6ab0e75738ce839954ff21db"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x800}}, {0xab, &(0x7f0000000340)=@string={0xab, 0x3, "02d175365a2cc6d6df6fdcb82a39e0debec8db9d734054ed1f41bea82af8d1976312d79c2a17014b642bb26a5bfd46d618d14322334c7ca300fc76df27964161f88898ebea78f66720ed5fa8c5e50457e4768fbc69a5e33f0dd60dcfc1dc417587a0ad6a2335ba5edb2e5357c8f209958fb1a9b46382df0658f8d05908111e73e47be5102131c00b149ecfd56b97a739fd17002a51ef9c4cb5c62da95e5f456d1d1e30e2c9dbf7d3d0"}}, {0x102, &(0x7f00000027c0)=@string={0x102, 0x3, "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"}}, {0x99, &(0x7f00000004c0)=@string={0x99, 0x3, "79b7379fd20b4dc473fda635c3fb8c200d57318ca0896afd9298670d3dd10c117fc6b2332765b9208cb68c97559c67a5c9a1e15384a4b3027fc9628f4805575c179eaffc7d1c8d19a494f170d5238ed97c5560c700196d968d1b4552fb0965063085592e43edad23611bbeb97171130dc526aa7b6bdbe7a2e26c03aab3158227662c025070376437ea6ee4dbaf26fa91543287de3c5d2f"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x240a}}]}) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x738, 0x1709, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x42, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x18, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000380)={0x24, &(0x7f0000000280)={0x40, 0x23, 0x14, {0x14, 0x21, "2e252152e104dfde6f01d8141e19a1b1d74a"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}, &(0x7f0000000300)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "a42e36ae"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c1508257c0e1686810901a100c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0xa, 0x62080) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1000, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000203000/0x1000)=nil, 0x1000, 0xe) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f00004de000/0x400000)=nil) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) setns(0xc9, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r6) 2.882991317s ago: executing program 4 (id=253): r0 = socket$inet6(0xa, 0x1, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000000)="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", 0x13e) 2.869615627s ago: executing program 4 (id=254): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x8ae83) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$TCSBRK(r1, 0x5409, 0xfffffffffffffffc) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0xd2fc, 0x0, 0x0, 0x0, 0x28, 0x10, "fed1f8a0e91ddaaca7bd6447a4b400000000dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108010400005397bab22d0000b4a95c064c65179ed39e01157d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000002500), 0x10000000008, 0xd18135cf55169abc) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000001c0)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x1, 0xe, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400000100", "90be8b1c55f9640000000000000000000000000002000000efffffffff11e4ff", [0x800, 0x20]}}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000180)={0xcf43, 0x4cb, 0x2, 0x9dff, 0xe, "3d52e3ff00"}) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x1a) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) 2.705605525s ago: executing program 4 (id=260): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x2272, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x2}) 2.621642889s ago: executing program 4 (id=261): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="390000001000034700bb65e1c3e4ffff01000000010000005600000025000000190040000400000007fd17e5ffff0800040000000000000005", 0x39}], 0x1) 2.621383489s ago: executing program 4 (id=262): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x0, 0x5c8c, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x700, 0x0, 0x1fffffff}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, 0x0, 0x800) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000280)={0x98, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x98}}, 0x41040) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@loopback, 0xfffffffd, 0x32}, @in=@loopback, {}, {}, {}, 0x100, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x1f4}]}, 0x140}}, 0x0) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0xfffffffd, 0x32}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) write(r8, &(0x7f0000000140)="0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef", 0x40) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r6, 0x660c) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000140)) (async) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r10, 0x541c, &(0x7f00000001c0)) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x8d, 0x0, 0x89}]}) (async) write$tun(0xffffffffffffffff, &(0x7f0000000380)={@val={0x0, 0x6006}, @val={0xdaf8d904b1c59f82, 0x1, 0x2, 0x2, 0xc8, 0x96}, @ipv4=@udp={{0x1f, 0x4, 0x2, 0x8, 0xc3, 0x64, 0x0, 0x72, 0x11, 0x0, @local, @multicast1, {[@end, @timestamp={0x44, 0x1c, 0xca, 0x0, 0x9, [0x4, 0x8, 0x1000, 0x8000, 0xfffffc01, 0xf69]}, @noop, @timestamp_prespec={0x44, 0x14, 0xe0, 0x3, 0x5, [{@broadcast, 0x6715c871}, {@private=0xa010102, 0x2e8}]}, @timestamp={0x44, 0x10, 0x17, 0x0, 0x9, [0x401, 0x0, 0xc1]}, @timestamp_addr={0x44, 0x24, 0x16, 0x1, 0x8, [{@private=0xa010102, 0x200}, {@remote, 0x15}, {@private=0xa010101, 0x1ff}, {@loopback, 0x6}]}]}}, {0x4e20, 0x4e21, 0x47, 0x0, @gue={{0x1, 0x1, 0x0, 0x4, 0x0, @void}, "f859687c10f6a6f80a972319e0664a38fa9ea5419f2f43c9c2b19e703822326baabd56d75cf8a3bc8a6ac559c4060d315e696266b77808345436e9"}}}}, 0xd1) 2.394219349s ago: executing program 4 (id=264): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d40)=ANY=[@ANYBLOB="4401000000020103000000000000000007000002e4000a80900002800c000280050001002100000006000340000200002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa2c000180140003002001000000000000000000000000000214000400000000000000000000000000000000010c000280050001002100000006000340000300000c000280050001003a0000005000028006000340000300000c0002800500010088000000140001800800010005000100010000000c00028005000100210000000c00028005000100880000003c000a802400028006000340000100000c00028005000100840000000c00028005000100110000000c000280060003400001000008000140000000010800094000000005080009400000b06f00"/324], 0x144}, 0x1, 0x0, 0x0, 0x40010}, 0x10) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000200000010160c081d00000000000109022400010000500009210000090122180009058103100000158708000000000000000062b9"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0xa, 0x62080) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r2) exit(0xfffffffffffffffd) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000254c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000a0}}, {{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x2, 0x0) sendto(r1, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x81, 0x2040) recvmmsg(r4, &(0x7f00000080c0)=[{{&(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x80, &(0x7f0000004800)=[{&(0x7f0000000880)=""/244, 0xf4}, {&(0x7f0000000a00)=""/226, 0xe2}, {&(0x7f0000001fc0)=""/4082, 0xff2}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000008300)=""/4099, 0x1003}], 0x5, &(0x7f0000004880)=""/207, 0xcf}, 0x9}, {{&(0x7f0000004980)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004a00)=""/10, 0xa}, {&(0x7f0000004a40)=""/140, 0x8c}], 0x2}, 0x9}, {{&(0x7f0000004b40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000005c80), 0x0, &(0x7f0000003380)=""/198, 0xc6}, 0x40}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000005dc0)=""/183, 0xb7}, {&(0x7f0000005e80)}, {&(0x7f0000005ec0)=""/239, 0xef}, {&(0x7f0000005fc0)=""/132, 0x84}, {&(0x7f0000006080)=""/95, 0x5f}, {&(0x7f0000006100)}, {&(0x7f0000006140)=""/150, 0x96}, {&(0x7f0000000ec0)=""/240, 0xf0}, {&(0x7f0000003300)=""/54, 0x36}, {&(0x7f0000000340)=""/4, 0x4}, {&(0x7f0000003340)=""/48, 0x30}], 0xb, &(0x7f0000006380)=""/16, 0x10}, 0x7}, {{&(0x7f00000063c0)=@qipcrtr, 0x80, &(0x7f0000007880)=[{&(0x7f0000006440)=""/136, 0x88}, {&(0x7f0000006500)=""/161, 0xa1}, {&(0x7f0000003580)=""/120, 0x72}, {&(0x7f0000002fc0)=""/32, 0x20}, {&(0x7f0000006680)=""/231, 0xe7}, {&(0x7f0000006780)=""/4096, 0x1000}, {&(0x7f0000007780)=""/157, 0x9d}, {&(0x7f0000007840)=""/15, 0xf}], 0x8, &(0x7f0000007900)=""/237, 0xed}, 0x3}, {{&(0x7f0000007a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000007b00)=[{&(0x7f0000007a80)=""/88, 0x58}], 0x1}, 0xeda}, {{&(0x7f0000000740)=@nfc_llcp, 0x80, &(0x7f0000007e00)=[{&(0x7f0000007bc0)=""/190, 0xbe}, {&(0x7f0000007c80)=""/59, 0x3b}, {&(0x7f0000007d00)=""/215, 0xd7}], 0x3, &(0x7f0000003480)=""/204, 0xcc}, 0x8}, {{&(0x7f0000007f40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xffffffffffffffac, &(0x7f0000008080)=[{&(0x7f0000007fc0)=""/133, 0x85}], 0x1}, 0x87}], 0x8, 0x10060, &(0x7f00000082c0)={0x77359400}) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000400)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1", 0x26}, 0x48, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), r5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000b80)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x2, 0x8, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x700, 0xfffffff9, 0x800}}) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, 0x0, 0x0) writev(r10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) getsockname$packet(r4, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003140)=0x14) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f00000032c0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003280)={&(0x7f0000003180)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r8, @ANYBLOB="000329bd7000fddbdf25f9ffffff40000180050002001b00000008000700", @ANYRES32=r9, @ANYBLOB="14000400fe8000000000000000000000000000420600010002000000080003000000000008000700", @ANYRES32=0x0, @ANYBLOB="28000180060001000a00000014000400fc0200000000000000000000000000010600010002000000540001800500020004000000060005004e2000001400040000000000000000000000ffff640101000800060008000000140004000000000000000000000000000000000008000700", @ANYRES32=r11, @ANYBLOB="060001000a000000"], 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) keyctl$KEYCTL_WATCH_KEY(0x6, r6, 0xffffffffffffffff, 0x4) sendto(r1, &(0x7f0000003000)="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", 0xfffffffffffffd83, 0x1, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}, 0x4}}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006800"], 0x1c}], 0x1}, 0x4000080) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000003600)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/110, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0xffffffffffffffde}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 1.614391565s ago: executing program 0 (id=272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) (async) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e604050009000000030109022000010100803209040000020806"], 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x7e, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0xffffffff, 0x8, 0xf, 0x5, 0x4, 0x43, 0x6, 0x0, 0x34, 0xb}, {0x100000, 0xb000, 0xc, 0x2, 0x1, 0x43, 0x7f, 0x6, 0x5, 0x6, 0x7f, 0x5}, {0xdddd0000, 0x80a0000, 0xb, 0x6, 0x80, 0x7, 0x0, 0x9, 0xff, 0xb, 0x8, 0x85}, {0x200000, 0x8080000, 0x10, 0x6, 0x3, 0xff, 0xfd, 0x1, 0xa, 0xa0, 0x9, 0xf1}, {0x1000, 0x2000, 0x8, 0x3, 0xf, 0x2, 0xab, 0x7f, 0xf, 0x7, 0xf7, 0x7}, {0x2000, 0xa000, 0xc, 0xa, 0xf7, 0x6, 0x1, 0x1, 0x80, 0x13, 0x5}, {0x6000, 0x60000, 0xe, 0x5, 0x0, 0x4, 0x4, 0x3, 0x3, 0x7d, 0x1, 0x70}, {0xeeee0000, 0x6000, 0xc, 0xe, 0xf, 0x7, 0x6a, 0xe2, 0xff, 0x18, 0xee, 0x9}, {0xe000, 0x3}, {0x3000, 0x2}, 0x80000031, 0x0, 0x40000, 0x42064, 0x400000006, 0x9d00, 0x25000, [0x400000000000a2, 0x800ffa, 0x400000000063, 0x7]}) 1.570471967s ago: executing program 2 (id=273): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="390000001000034700bb65e1c3e4ffff01000000010000005600000025000000190040000400000007fd17e5ffff0800040000000000000009", 0x39}], 0x1) 1.505640741s ago: executing program 2 (id=274): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001e00210b00000000000008000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 1.50396365s ago: executing program 2 (id=275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) poll(&(0x7f00000001c0)=[{r1, 0x4}, {r1, 0x80}], 0x2, 0xb) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = eventfd2(0x80, 0x800) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x0, r4}) socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x40000, 0x17b) r5 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYBLOB='\a'], 0x0) r6 = accept4$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000180)=0x1c, 0x800) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x6, 0x2, 0x500, 0x1, 0x38200c3, r2}) 1.483413791s ago: executing program 3 (id=276): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x8ae83) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$TCSBRK(r1, 0x5409, 0xfffffffffffffffc) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0xd2fc, 0x0, 0x0, 0x0, 0x28, 0x10, "fed1f8a0e91ddaaca7bd6447a4b400000000dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108010400005397bab22d0000b4a95c064c65179ed39e01157d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000002500), 0x10000000008, 0xd18135cf55169abc) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000001c0)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x1, 0xe, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400000100", "90be8b1c55f9640000000000000000000000000002000000efffffffff11e4ff", [0x800, 0x20]}}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000180)={0xcf43, 0x4cb, 0x2, 0x9dff, 0xe, "3d52e3ff00"}) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) syz_open_pts(r3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x1a) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) 1.000887304s ago: executing program 0 (id=277): r0 = epoll_create1(0x80000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) prlimit64(r1, 0xa, &(0x7f0000000140), 0x0) r2 = syz_io_uring_setup(0x2e80, &(0x7f00000000c0)={0x0, 0x784f, 0x2, 0x3, 0x3b3}, &(0x7f00000001c0), &(0x7f0000000240), 0x0) epoll_pwait2(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/default/forwarding\x00', 0x101201, 0x181) write(r3, &(0x7f0000000200)='1', 0x1) pipe2(0x0, 0x4080) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r1) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x2, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffd, 0x80000, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x1, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x80de, 0x8, 0x8000, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbad3, 0x800, 0x2, 0x61}}], 0x1, &(0x7f00000003c0)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r8, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2001}, 0x0) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r12, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r12, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r12, 0x4008af03, &(0x7f00000005c0)={0x1, 0x0, [{0x8080000, 0x4b, &(0x7f0000000500)=""/75}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r12, 0x4004af61, &(0x7f0000000000)=0x2) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000080)={0x1, 0x7fffffff, 0xc6, 0xbe05, 0x9, 0xd632}) r13 = userfaultfd(0x801) ioctl$UFFDIO_API(r13, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r13, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x7}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r14 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil) readv(r13, &(0x7f0000000780)=[{&(0x7f0000000700)=""/52, 0x34}], 0x1) 593.592193ms ago: executing program 3 (id=278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 487.044257ms ago: executing program 3 (id=279): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x2272, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x2}) 470.898879ms ago: executing program 3 (id=280): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') setns(r0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10f) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x24008080) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="000127bd7000fcdbdf2562000096"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x2004044) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x1, @empty}}, 0x1e) connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x2, @empty}}, 0x1e) write(r4, &(0x7f0000000100)="009c00011a2b3c4d0001000001000000", 0x10) mkdir(&(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x800, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x103003, 0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40043d14, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) timerfd_create(0x0, 0x0) r7 = epoll_create1(0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000001c0)={'veth0_macvtap\x00', @broadcast}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000000)={0xa0000001}) 289.607647ms ago: executing program 2 (id=281): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 232.4612ms ago: executing program 2 (id=282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "7af9c2add30c3b0d788d9a94b0731ab8d4a8502c36822594c41a3a588f9ea10f4ea91dff6ece7b715bd30d75c5da8c5c4dada466bf73ee60295d1d133135d5c7", 0x14}, 0x48, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000022c0)={0x7c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) (async, rerun: 32) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (rerun: 32) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, r1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) write$cgroup_devices(r10, 0x0, 0xfffffeff) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000200)="f0004d540f01ca66b8fdbcd8ab0f23d80f21f86635400000b00f23f866b8000000000f23c80f21f86635040030000f23f881d50e00baf80c66b827ba208166efba3a0cb0e4ee0f18a90700660f3881adea1d26660f382ba858ac0f79945dc9", 0x5f}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) close(r6) (async, rerun: 64) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$TCFLSH(r11, 0x540b, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 145.546164ms ago: executing program 0 (id=283): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="390000001000034700bb65e1c3e4ffff01000000010000005600000025000000190040000400000007fd17e5ffff0800040000000000000020", 0x39}], 0x1) 85.814007ms ago: executing program 0 (id=284): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001e00210b00000000000008000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 84.527877ms ago: executing program 0 (id=285): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e60}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') pread64(r0, &(0x7f0000000900)=""/102400, 0x19000, 0x100008) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101341) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0x80, 0xb, 0x2fe, 0xe5, 0x0, 0xff01, 0x0}) readlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)=""/59, 0x3b) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(r2, &(0x7f0000000580)='./file1\x00', 0x68dead48a10f685e, 0x0) write(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 78.443187ms ago: executing program 0 (id=286): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x6, 0x8ae83) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$TCSBRK(r1, 0x5409, 0xfffffffffffffffc) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0xd2fc, 0x0, 0x0, 0x0, 0x28, 0x10, "fed1f8a0e91ddaaca7bd6447a4b400000000dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108010400005397bab22d0000b4a95c064c65179ed39e01157d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000002500), 0x10000000008, 0xd18135cf55169abc) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000001c0)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x9, 0x4, 0x0, 0x1, 0xe, 0x1c, "0500000000000000d1f8a0e91ddaaca79603dda1af1ea80000000000edffffff0000deff00ffffffffffffffe300000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061acfc3fdc15dfb8ea28000000000400000100", "90be8b1c55f9640000000000000000000000000002000000efffffffff11e4ff", [0x800, 0x20]}}) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000180)={0xcf43, 0x4cb, 0x2, 0x9dff, 0xe, "3d52e3ff00"}) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) syz_open_pts(r3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x1a) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) 0s ago: executing program 2 (id=287): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="0011963509bb"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000240)=0x2194, 0x4) write(r0, &(0x7f0000000000)="01", 0x1) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x6a03) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$ptp(r2, &(0x7f00000000c0)=""/20, 0x14) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000140)='fuseblk\x00', 0x2200892, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000280)={{0x2, 0x4e23, @multicast1}, {0x0, @random="6247bd3632c1"}, 0x0, {0x2, 0x4e20, @local}, 'geneve0\x00'}) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2b, 'pids'}, {0x2d, 'perf_event'}, {0x2b, 'rdma'}, {0x2b, 'net_cls'}, {0x2b, 'cpu'}, {0x2b, 'rdma'}, {0x2d, 'cpu'}, {0x2d, 'memory'}]}, 0x39) socket$vsock_stream(0x28, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000140)='?', 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.30' (ED25519) to the list of known hosts. [ 30.317278][ T36] audit: type=1400 audit(1790218620.660:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.320574][ T287] cgroup: Unknown subsys name 'net' [ 30.339963][ T36] audit: type=1400 audit(1790218620.660:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.367373][ T36] audit: type=1400 audit(1790218620.690:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.367823][ T287] cgroup: Unknown subsys name 'devices' [ 30.476098][ T287] cgroup: Unknown subsys name 'hugetlb' [ 30.481737][ T287] cgroup: Unknown subsys name 'rlimit' [ 30.577689][ T36] audit: type=1400 audit(1790218620.920:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.600901][ T36] audit: type=1400 audit(1790218620.920:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.625688][ T36] audit: type=1400 audit(1790218620.920:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.655697][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.664671][ T36] audit: type=1400 audit(1790218621.010:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.690157][ T36] audit: type=1400 audit(1790218621.010:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.732827][ T36] audit: type=1400 audit(1790218621.070:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.734260][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.758855][ T36] audit: type=1400 audit(1790218621.070:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.617242][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.624440][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.631531][ T296] bridge_slave_0: entered allmulticast mode [ 31.638268][ T296] bridge_slave_0: entered promiscuous mode [ 31.645918][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.652977][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.660158][ T296] bridge_slave_1: entered allmulticast mode [ 31.666426][ T296] bridge_slave_1: entered promiscuous mode [ 31.701744][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.709266][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.716422][ T294] bridge_slave_0: entered allmulticast mode [ 31.722696][ T294] bridge_slave_0: entered promiscuous mode [ 31.731952][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.739050][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.746177][ T294] bridge_slave_1: entered allmulticast mode [ 31.752517][ T294] bridge_slave_1: entered promiscuous mode [ 31.784620][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.791705][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.798896][ T297] bridge_slave_0: entered allmulticast mode [ 31.805294][ T297] bridge_slave_0: entered promiscuous mode [ 31.819037][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.826121][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.833213][ T297] bridge_slave_1: entered allmulticast mode [ 31.839703][ T297] bridge_slave_1: entered promiscuous mode [ 31.873894][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.880990][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.888199][ T295] bridge_slave_0: entered allmulticast mode [ 31.894540][ T295] bridge_slave_0: entered promiscuous mode [ 31.907021][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.914128][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.921299][ T295] bridge_slave_1: entered allmulticast mode [ 31.927662][ T295] bridge_slave_1: entered promiscuous mode [ 32.045229][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.052335][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.059678][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.066731][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.082943][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.090054][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.097457][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.104517][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.119278][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.126395][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.133714][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.140764][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.154432][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.161596][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.168922][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.176089][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.227187][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.234686][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.242324][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.250272][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.257604][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.265038][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.272269][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.280019][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.298272][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.305377][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.313170][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.320262][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.334695][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.341789][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.349645][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.356723][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.364437][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.371475][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.380563][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.387649][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.399525][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.406673][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.414457][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.421504][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.481240][ T297] veth0_vlan: entered promiscuous mode [ 32.497617][ T295] veth0_vlan: entered promiscuous mode [ 32.509026][ T294] veth0_vlan: entered promiscuous mode [ 32.523114][ T296] veth0_vlan: entered promiscuous mode [ 32.533066][ T297] veth1_macvtap: entered promiscuous mode [ 32.546074][ T295] veth1_macvtap: entered promiscuous mode [ 32.555696][ T294] veth1_macvtap: entered promiscuous mode [ 32.575212][ T296] veth1_macvtap: entered promiscuous mode [ 32.607972][ T297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.748844][ T330] veth1_macvtap: left promiscuous mode [ 32.866782][ T346] netlink: 'syz.1.13': attribute type 64 has an invalid length. [ 32.968537][ T361] Zero length message leads to an empty skb [ 33.014595][ T311] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.163656][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 33.170101][ T311] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 33.178576][ T311] usb 4-1: config 0 has no interface number 0 [ 33.184929][ T311] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 33.196640][ T311] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 33.205782][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.213860][ T311] usb 4-1: Product: syz [ 33.218044][ T311] usb 4-1: Manufacturer: syz [ 33.222663][ T311] usb 4-1: SerialNumber: syz [ 33.228684][ T311] usb 4-1: config 0 descriptor?? [ 33.234118][ T326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.254132][ T67] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.413943][ T67] usb 2-1: Using ep0 maxpacket: 32 [ 33.422448][ T67] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 33.431652][ T67] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.439733][ T67] usb 2-1: Product: syz [ 33.443476][ T326] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.444351][ T67] usb 2-1: Manufacturer: syz [ 33.456472][ T67] usb 2-1: SerialNumber: syz [ 33.684310][ T67] usb 2-1: USB disconnect, device number 2 [ 33.785723][ T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.805999][ T375] IPv6: syztnl0: Disabled Multicast RS [ 33.857714][ T311] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 33.868499][ T311] asix 4-1:0.188: probe with driver asix failed with error -71 [ 33.877107][ T311] usb 4-1: USB disconnect, device number 2 [ 33.924876][ T382] IPv6: syztnl0: Disabled Multicast RS [ 34.373701][ T393] netlink: 'syz.3.24': attribute type 64 has an invalid length. [ 34.409221][ T397] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 34.433720][ T312] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.502663][ T402] netlink: 'syz.2.27': attribute type 64 has an invalid length. [ 34.612588][ T312] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 34.624718][ T312] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 34.635494][ T312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 34.653931][ T312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 34.664522][ T312] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 34.673853][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.683023][ T391] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 34.690371][ T391] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 34.699414][ T312] pl2303 2-1:1.0: pl2303 converter detected [ 34.793706][ T311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 34.823787][ T312] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -110 [ 34.831922][ T312] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 34.840325][ T312] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 34.848407][ T312] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 34.856814][ T312] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 34.864981][ T312] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 34.873245][ T312] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 34.881563][ T312] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 34.889614][ T312] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0000]: -32 [ 34.897935][ T312] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0001]: -32 [ 34.912841][ T312] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0002]: -32 [ 34.922484][ T312] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 34.941312][ T311] usb 3-1: device descriptor read/64, error -71 [ 35.203663][ T311] usb 3-1: device descriptor read/64, error -71 [ 35.233709][ T312] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.385016][ T312] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.393420][ T312] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 35, changing to 7 [ 35.405854][ T312] usb 1-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 35.415112][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.423132][ T312] usb 1-1: Product: syz [ 35.427369][ T312] usb 1-1: Manufacturer: syz [ 35.432046][ T312] usb 1-1: SerialNumber: syz [ 35.443699][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.573644][ T311] usb 3-1: device descriptor read/64, error -71 [ 35.647196][ T417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.656305][ T417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.671543][ T417] netlink: 'syz.0.32': attribute type 27 has an invalid length. [ 35.673716][ T36] kauditd_printk_skb: 84 callbacks suppressed [ 35.673762][ T36] audit: type=1400 audit(1790218626.010:158): avc: denied { bind } for pid=416 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.813698][ T311] usb 3-1: device descriptor read/64, error -71 [ 35.828775][ T312] usb 1-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 35.836151][ T312] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 35.847069][ T312] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 35.857106][ T312] usb 1-1: 1:1 : bogus bTerminalLink 5 [ 35.862845][ T312] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 35.874986][ T312] usb 1-1: 1:1 : bogus bTerminalLink 5 [ 35.883287][ T312] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 35.900549][ T312] usb 1-1: USB disconnect, device number 2 [ 35.911847][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.934107][ T311] usb usb3-port1: attempt power cycle [ 36.273832][ T311] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 36.294738][ T311] usb 3-1: device descriptor read/8, error -71 [ 36.359969][ T421] netlink: 'syz.0.33': attribute type 64 has an invalid length. [ 36.382631][ T36] audit: type=1400 audit(1790218626.720:159): avc: denied { create } for pid=422 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.402049][ T36] audit: type=1400 audit(1790218626.720:160): avc: denied { setopt } for pid=422 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.421807][ T36] audit: type=1400 audit(1790218626.720:161): avc: denied { write } for pid=422 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.449950][ T430] netlink: 'syz.0.35': attribute type 64 has an invalid length. [ 36.452310][ T311] usb 3-1: device descriptor read/8, error -71 [ 36.480566][ T432] netlink: 'syz.0.36': attribute type 64 has an invalid length. [ 36.506995][ T36] audit: type=1400 audit(1790218626.850:162): avc: denied { mount } for pid=433 comm="syz.0.37" name="/" dev="ramfs" ino=6979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 36.538660][ T36] audit: type=1400 audit(1790218626.850:163): avc: denied { write } for pid=433 comm="syz.0.37" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 36.623468][ T443] netlink: 'syz.3.41': attribute type 25 has an invalid length. [ 36.676309][ T36] audit: type=1400 audit(1790218627.020:164): avc: denied { mount } for pid=448 comm="syz.0.43" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 36.689645][ T451] incfs: ino conflict with backing FS 2 [ 36.701841][ T36] audit: type=1400 audit(1790218627.030:165): avc: denied { mount } for pid=448 comm="syz.0.43" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.705720][ T311] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 36.737226][ T36] audit: type=1400 audit(1790218627.080:166): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.745306][ T311] usb 3-1: device descriptor read/8, error -71 [ 36.768128][ T36] audit: type=1400 audit(1790218627.110:167): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.794523][ T453] netlink: 'syz.0.44': attribute type 64 has an invalid length. [ 36.815688][ T455] SELinux: Context KNáDd«5è·ÓQ3‘BkÙ”yb˜ÏðÓ­ü£sÐÿ¿„,~úÔ;c3˜poš¹ÍºÐfP×Ò¸62òùAi®]Ý is not valid (left unmapped). [ 36.868058][ T458] netlink: 'syz.0.46': attribute type 64 has an invalid length. [ 36.893656][ T312] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 36.912471][ T311] usb 3-1: device descriptor read/8, error -71 [ 36.949010][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 36.956829][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 36.964630][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 36.971988][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 36.979388][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 36.986901][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 36.994401][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 37.001732][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 37.009104][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 37.016801][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 37.024352][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 37.031737][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 37.034106][ T311] usb usb3-port1: unable to enumerate USB device [ 37.039686][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 37.053112][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 37.060523][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 37.067978][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 37.075369][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 37.082805][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 37.090211][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 37.097745][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 37.105317][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 37.112686][ T312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 37.113829][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 37.121569][ T312] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 35, changing to 7 [ 37.127756][ T462] sock: sock_timestamping_bind_phc: sock not bind to device [ 37.142137][ T312] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 37.159937][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.168451][ T312] usb 4-1: Product: syz [ 37.172885][ T312] usb 4-1: Manufacturer: syz [ 37.178094][ T312] usb 4-1: SerialNumber: syz [ 37.201644][ T418] usb 2-1: USB disconnect, device number 3 [ 37.211963][ T418] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 37.220464][ T418] pl2303 2-1:1.0: device disconnected [ 37.390230][ T445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.398927][ T445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.463655][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.517499][ T312] usb 4-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 37.525231][ T312] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 37.535808][ T312] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 37.545849][ T312] usb 4-1: 1:1 : bogus bTerminalLink 5 [ 37.551588][ T312] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 37.563724][ T418] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.575019][ T312] usb 4-1: 1:1 : bogus bTerminalLink 5 [ 37.582388][ T312] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 37.592713][ T312] usb 4-1: USB disconnect, device number 3 [ 37.601924][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.626216][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 37.637585][ T311] usb 1-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.651050][ T311] usb 1-1: config 0 interface 0 has no altsetting 0 [ 37.658979][ T311] usb 1-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 37.668394][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.688369][ T482] FAULT_INJECTION: forcing a failure. [ 37.688369][ T482] name failslab, interval 1, probability 0, space 0, times 1 [ 37.701127][ T482] CPU: 0 UID: 0 PID: 482 Comm: syz.2.55 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 37.701157][ T482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.701180][ T482] Call Trace: [ 37.701187][ T482] [ 37.701195][ T482] __dump_stack+0x21/0x30 [ 37.701230][ T482] dump_stack_lvl+0x140/0x1c0 [ 37.701258][ T482] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.701290][ T482] dump_stack+0x19/0x20 [ 37.701319][ T482] should_fail_ex+0x3c2/0x510 [ 37.701345][ T482] should_failslab+0xac/0x100 [ 37.701372][ T482] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 37.701397][ T482] ? v9fs_session_init+0xf9/0x18a0 [ 37.701429][ T482] ? kstrdup+0x7b/0x130 [ 37.701451][ T482] kstrdup+0x4d/0x130 [ 37.701464][ T482] v9fs_session_init+0xf9/0x18a0 [ 37.701481][ T482] ? __cfi_v9fs_session_init+0x10/0x10 [ 37.701496][ T482] ? kasan_save_alloc_info+0x3a/0x50 [ 37.701511][ T482] ? __kasan_kmalloc+0x96/0xb0 [ 37.701530][ T482] ? __kmalloc_cache_noprof+0x23c/0x470 [ 37.701547][ T482] ? v9fs_mount+0xc1/0x9d0 [ 37.701567][ T482] v9fs_mount+0xdb/0x9d0 [ 37.701585][ T482] ? __cfi_v9fs_mount+0x10/0x10 [ 37.701604][ T482] ? selinux_capable+0x38/0x50 [ 37.701627][ T482] legacy_get_tree+0x106/0x1b0 [ 37.701649][ T482] ? __cfi_v9fs_mount+0x10/0x10 [ 37.701668][ T482] vfs_get_tree+0x9e/0x290 [ 37.701684][ T482] do_new_mount+0x251/0xb40 [ 37.701705][ T482] ? security_capable+0x44/0x130 [ 37.701724][ T482] path_mount+0x66a/0xff0 [ 37.701739][ T482] ? putname+0x113/0x150 [ 37.701756][ T482] __se_sys_mount+0x2bf/0x480 [ 37.701774][ T482] ? __x64_sys_mount+0xf0/0xf0 [ 37.701790][ T482] ? __kasan_check_write+0x18/0x20 [ 37.701805][ T482] ? fpregs_restore_userregs+0x11c/0x260 [ 37.701825][ T482] __x64_sys_mount+0xc3/0xf0 [ 37.701841][ T482] x64_sys_call+0x2021/0x2ee0 [ 37.701855][ T482] do_syscall_64+0x57/0xf0 [ 37.701870][ T482] ? clear_bhb_loop+0x50/0xa0 [ 37.701889][ T482] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.701908][ T482] RIP: 0033:0x7fe87919e159 [ 37.701923][ T482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.701935][ T482] RSP: 002b:00007fe87a013028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 37.701952][ T482] RAX: ffffffffffffffda RBX: 00007fe879426090 RCX: 00007fe87919e159 [ 37.701964][ T482] RDX: 0000200000002500 RSI: 00002000000024c0 RDI: 0000200000002480 [ 37.701975][ T482] RBP: 00007fe87923506b R08: 0000200000002540 R09: 0000000000000000 [ 37.701985][ T482] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 37.701995][ T482] R13: 00007fe879426128 R14: 00007fe879426090 R15: 00007ffd15aaf028 [ 37.702009][ T482] [ 37.709682][ T311] usb 1-1: config 0 descriptor?? [ 37.716090][ T418] usb 2-1: device descriptor read/64, error -71 [ 38.007201][ T485] validate_nla: 2 callbacks suppressed [ 38.007219][ T485] netlink: 'syz.2.56': attribute type 64 has an invalid length. [ 38.142407][ T311] logitech-djreceiver 0003:046D:C70E.0001: unknown main item tag 0x0 [ 38.161813][ T311] logitech-djreceiver 0003:046D:C70E.0001: ignoring exceeding usage max [ 38.243862][ T418] usb 2-1: device descriptor read/64, error -71 [ 38.252418][ T501] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 38.263494][ T501] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 38.446594][ T511] netlink: 'syz.2.66': attribute type 64 has an invalid length. [ 38.483676][ T418] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.483864][ T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.503208][ T10] usb 1-1: USB disconnect, device number 3 [ 38.623765][ T418] usb 2-1: device descriptor read/64, error -71 [ 38.623933][ T311] usb 4-1: device descriptor read/64, error -71 [ 38.703728][ T67] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 38.856484][ T67] usb 3-1: unable to get BOS descriptor or descriptor too short [ 38.865086][ T67] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 35, changing to 7 [ 38.875801][ T418] usb 2-1: device descriptor read/64, error -71 [ 38.877004][ T311] usb 4-1: device descriptor read/64, error -71 [ 38.890403][ T67] usb 3-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 38.899741][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.908596][ T67] usb 3-1: Product: syz [ 38.912888][ T67] usb 3-1: Manufacturer: syz [ 38.917891][ T67] usb 3-1: SerialNumber: syz [ 38.957064][ T522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 38.981299][ T524] netlink: 'syz.0.71': attribute type 64 has an invalid length. [ 38.993749][ T418] usb usb2-port1: attempt power cycle [ 39.123664][ T311] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.133707][ T513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.142297][ T513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.156151][ T513] netlink: 'syz.2.67': attribute type 27 has an invalid length. [ 39.253655][ T311] usb 4-1: device descriptor read/64, error -71 [ 39.267891][ T67] usb 3-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 39.275244][ T67] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 39.285897][ T67] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 39.295834][ T67] usb 3-1: 1:1 : bogus bTerminalLink 5 [ 39.301558][ T67] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 39.311556][ T67] usb 3-1: 1:1 : bogus bTerminalLink 5 [ 39.319323][ T67] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 39.329284][ T67] usb 3-1: USB disconnect, device number 6 [ 39.340263][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.356511][ T418] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.364047][ T312] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.384828][ T418] usb 2-1: device descriptor read/8, error -71 [ 39.493904][ T311] usb 4-1: device descriptor read/64, error -71 [ 39.514002][ T312] usb 1-1: Using ep0 maxpacket: 8 [ 39.519951][ T418] usb 2-1: device descriptor read/8, error -71 [ 39.526684][ T312] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.537176][ T312] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 39.547578][ T312] usb 1-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 39.557218][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.565444][ T312] usb 1-1: Product: syz [ 39.569699][ T312] usb 1-1: Manufacturer: syz [ 39.574360][ T312] usb 1-1: SerialNumber: syz [ 39.603779][ T311] usb usb4-port1: attempt power cycle [ 39.785432][ T418] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 39.825031][ T418] usb 2-1: device descriptor read/8, error -71 [ 39.877371][ T312] usb 1-1: unit 255 not found! [ 39.887878][ T312] usb 1-1: USB disconnect, device number 4 [ 39.903247][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.943817][ T311] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 39.964755][ T311] usb 4-1: device descriptor read/8, error -71 [ 39.975082][ T418] usb 2-1: device descriptor read/8, error -71 [ 40.043713][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 40.084135][ T418] usb usb2-port1: unable to enumerate USB device [ 40.094838][ T311] usb 4-1: device descriptor read/8, error -71 [ 40.193695][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 40.200283][ T45] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.211406][ T45] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.222606][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 40.231739][ T45] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 40.240120][ T45] usb 3-1: Product: syz [ 40.244404][ T45] usb 3-1: Manufacturer: syz [ 40.251912][ T45] hub 3-1:4.0: USB hub found [ 40.343656][ T311] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 40.364664][ T311] usb 4-1: device descriptor read/8, error -71 [ 40.450643][ T548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 40.471433][ T45] hub 3-1:4.0: 2 ports detected [ 40.494319][ T551] netlink: 'syz.0.81': attribute type 64 has an invalid length. [ 40.502918][ T311] usb 4-1: device descriptor read/8, error -71 [ 40.601327][ T558] ======================================================= [ 40.601327][ T558] WARNING: The mand mount option has been deprecated and [ 40.601327][ T558] and is ignored by this kernel. Remove the mand [ 40.601327][ T558] option from the mount to silence this warning. [ 40.601327][ T558] ======================================================= [ 40.614205][ T311] usb usb4-port1: unable to enumerate USB device [ 40.671839][ T539] netlink: 57 bytes leftover after parsing attributes in process `syz.2.77'. [ 40.923611][ T418] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 41.074343][ T418] usb 1-1: not running at top speed; connect to a high speed hub [ 41.082910][ T418] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.094829][ T539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.103399][ T539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.112228][ T418] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 41.126059][ T418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.136907][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 41.136926][ T36] audit: type=1400 audit(1790218631.480:212): avc: denied { mounton } for pid=538 comm="syz.2.77" path="/14/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 41.148535][ T418] usb 1-1: Found UVC 1.00 device (046d:0825) [ 41.183714][ T418] usb 1-1: No streaming interface found for terminal 2. [ 41.298258][ T36] audit: type=1400 audit(1790218631.640:213): avc: denied { name_bind } for pid=577 comm="syz.3.87" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 41.354405][ T418] usb 1-1: USB disconnect, device number 5 [ 41.533628][ T312] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 41.898971][ T586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 41.957863][ T36] audit: type=1400 audit(7160875553.128:214): avc: denied { setopt } for pid=587 comm="syz.0.90" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.006021][ T36] audit: type=1400 audit(7160875553.178:215): avc: denied { read } for pid=587 comm="syz.0.90" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 42.093633][ T311] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 42.166772][ T36] audit: type=1400 audit(7160875553.338:216): avc: denied { mount } for pid=595 comm="syz.0.91" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 42.189659][ T36] audit: type=1400 audit(7160875553.358:217): avc: denied { map } for pid=595 comm="syz.0.91" path="/42/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 42.229648][ T36] audit: type=1400 audit(7160875553.398:218): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 42.273630][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 42.280088][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.292982][ T311] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 42.304159][ T311] usb 4-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 42.313451][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.321819][ T311] usb 4-1: Product: syz [ 42.326427][ T311] usb 4-1: Manufacturer: syz [ 42.331205][ T311] usb 4-1: SerialNumber: syz [ 42.336301][ T45] hub 3-1:4.0: hub_ext_port_status failed (err = -32) [ 42.547465][ T36] audit: type=1400 audit(7160875553.718:219): avc: denied { wake_alarm } for pid=600 comm="syz.0.93" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.664587][ T311] usb 4-1: unit 255 not found! [ 42.680318][ T311] usb 4-1: USB disconnect, device number 8 [ 43.266611][ T36] audit: type=1400 audit(7160875554.438:220): avc: denied { remount } for pid=610 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 43.318378][ T615] netlink: 'syz.3.98': attribute type 64 has an invalid length. [ 43.350213][ T617] netlink: 'syz.3.99': attribute type 64 has an invalid length. [ 43.405994][ T621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 43.416305][ T621] veth0: entered promiscuous mode [ 43.421421][ T621] veth0: entered allmulticast mode [ 43.466502][ T36] audit: type=1400 audit(7160875554.638:221): avc: denied { bind } for pid=622 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.484160][ T10] usb 3-1: USB disconnect, device number 7 [ 43.488835][ T627] capability: warning: `syz.0.103' uses deprecated v2 capabilities in a way that may be insecure [ 43.824133][ T311] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 43.835010][ T642] netlink: 'syz.2.109': attribute type 64 has an invalid length. [ 43.869988][ T644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 43.879483][ T644] veth0: entered promiscuous mode [ 43.884715][ T644] veth0: entered allmulticast mode [ 43.983631][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 43.995081][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.015362][ T311] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 44.046013][ T311] usb 4-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 44.063183][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.072390][ T311] usb 4-1: Product: syz [ 44.084811][ T311] usb 4-1: Manufacturer: syz [ 44.096149][ T311] usb 4-1: SerialNumber: syz [ 44.174142][ T652] SELinux: security_context_str_to_sid () failed with errno=-22 [ 44.301906][ T312] usb 2-1: unable to get BOS descriptor or descriptor too short [ 44.310946][ T312] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 44.318627][ T312] usb 2-1: can't read configurations, error -71 [ 44.324994][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 44.386719][ T663] netlink: 'syz.1.118': attribute type 64 has an invalid length. [ 44.402270][ T311] usb 4-1: unit 255 not found! [ 44.418286][ T311] usb 4-1: USB disconnect, device number 9 [ 44.431249][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 44.443852][ T665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'. [ 44.459439][ T665] veth0: entered promiscuous mode [ 44.464614][ T665] veth0: entered allmulticast mode [ 44.485070][ T10] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 44.493733][ T10] usb 1-1: config 0 has no interface number 1 [ 44.499854][ T10] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 44.509823][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 44.523927][ T10] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 44.532995][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 44.541702][ T10] usb 1-1: SerialNumber: syz [ 44.550544][ T10] usb 1-1: config 0 descriptor?? [ 44.613628][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 44.753689][ T45] usb 3-1: device descriptor read/64, error -71 [ 44.759497][ T648] random: crng reseeded on system resumption [ 44.795103][ T347] bridge_slave_1: left allmulticast mode [ 44.800840][ T347] bridge_slave_1: left promiscuous mode [ 44.806737][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.811176][ T10] usb 1-1: Found UVC 0.00 device (0002:0000) [ 44.821084][ T347] bridge_slave_0: left allmulticast mode [ 44.823013][ T10] usb 1-1: No valid video chain found. [ 44.830234][ T347] bridge_slave_0: left promiscuous mode [ 44.837994][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.846567][ T10] usb 1-1: USB disconnect, device number 6 [ 44.982899][ T677] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.991590][ T677] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.998922][ T677] bridge_slave_0: entered allmulticast mode [ 45.005306][ T677] bridge_slave_0: entered promiscuous mode [ 45.012290][ T347] veth0_vlan: left promiscuous mode [ 45.018060][ T45] usb 3-1: device descriptor read/64, error -71 [ 45.065253][ T677] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.072409][ T677] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.079648][ T677] bridge_slave_1: entered allmulticast mode [ 45.088666][ T677] bridge_slave_1: entered promiscuous mode [ 45.146795][ T677] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.153885][ T677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.161181][ T677] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.168270][ T677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.190359][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.197875][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.207486][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.214613][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.224093][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.231183][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.238951][ T311] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 45.263876][ T45] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 45.272533][ T677] veth0_vlan: entered promiscuous mode [ 45.285050][ T677] veth1_macvtap: entered promiscuous mode [ 45.331711][ T686] rust_binder: Write failure EFAULT in pid:4 [ 45.333829][ T686] sit0: entered promiscuous mode [ 45.345881][ T686] netlink: 'syz.4.126': attribute type 1 has an invalid length. [ 45.353626][ T686] netlink: 1 bytes leftover after parsing attributes in process `syz.4.126'. [ 45.428788][ T45] usb 3-1: device descriptor read/64, error -71 [ 45.441877][ T311] usb 4-1: config index 0 descriptor too short (expected 65530, got 34) [ 45.450561][ T311] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 45.461326][ T311] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 45.476132][ T311] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 45.485330][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.493348][ T311] usb 4-1: Product: syz [ 45.497649][ T311] usb 4-1: Manufacturer: syz [ 45.502270][ T311] usb 4-1: SerialNumber: syz [ 45.509109][ T311] rtl8150 4-1:1.0: couldn't find required endpoints [ 45.515884][ T311] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 45.544379][ T694] process 'syz.4.129' launched './file1' with NULL argv: empty string added [ 45.683767][ T45] usb 3-1: device descriptor read/64, error -71 [ 45.793811][ T45] usb usb3-port1: attempt power cycle [ 45.799356][ T312] usb 4-1: USB disconnect, device number 10 [ 45.823654][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 45.975593][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 45.983659][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 45.992203][ T10] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 45.999642][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 46.012024][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40 [ 46.021221][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.029286][ T10] usb 5-1: Product: syz [ 46.033483][ T10] usb 5-1: Manufacturer: syz [ 46.038153][ T10] usb 5-1: SerialNumber: syz [ 46.134331][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 46.154809][ T45] usb 3-1: device descriptor read/8, error -71 [ 46.251380][ T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 46.259389][ T10] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 46.267270][ T10] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 46.275877][ T10] usb 5-1: 2:1: All rates were zero [ 46.285362][ T10] usb 5-1: USB disconnect, device number 2 [ 46.285729][ T45] usb 3-1: device descriptor read/8, error -71 [ 46.343667][ T311] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 46.385710][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.493695][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 46.500065][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.510443][ T311] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 46.521107][ T311] usb 1-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 46.530229][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.538345][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 46.545980][ T311] usb 1-1: Product: syz [ 46.550147][ T311] usb 1-1: Manufacturer: syz [ 46.555063][ T311] usb 1-1: SerialNumber: syz [ 46.563694][ T418] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 46.574805][ T45] usb 3-1: device descriptor read/8, error -71 [ 46.704769][ T45] usb 3-1: device descriptor read/8, error -71 [ 46.714813][ T418] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.725824][ T418] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.735780][ T418] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 46.744893][ T418] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.754078][ T418] usb 4-1: config 0 descriptor?? [ 46.813858][ T45] usb usb3-port1: unable to enumerate USB device [ 46.831370][ T311] usb 1-1: unit 255 not found! [ 46.841219][ T311] usb 1-1: USB disconnect, device number 7 [ 46.860190][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.891072][ T711] netlink: 'syz.4.135': attribute type 64 has an invalid length. [ 47.162723][ T418] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 47.169628][ T418] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 47.176972][ T418] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 47.183810][ T418] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 47.190643][ T418] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 47.197479][ T418] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 47.204331][ T418] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 47.211997][ T418] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 47.362096][ T705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.370727][ T705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.414308][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 47.414335][ T36] audit: type=1400 audit(7160875558.588:249): avc: denied { read } for pid=725 comm="syz.0.140" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 47.453439][ T36] audit: type=1400 audit(7160875558.588:250): avc: denied { open } for pid=725 comm="syz.0.140" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 47.580577][ T418] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 47.594237][ T418] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 47.606766][ T418] pyra 0003:1E7D:2CF6.0002: probe with driver pyra failed with error -71 [ 47.621407][ T418] usb 4-1: USB disconnect, device number 11 [ 47.878885][ T36] audit: type=1400 audit(7160875559.048:251): avc: denied { ioctl } for pid=742 comm="syz.4.145" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9392 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 47.905987][ T743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.145'. [ 47.916067][ T743] veth0: entered promiscuous mode [ 47.921222][ T743] veth0: entered allmulticast mode [ 47.934879][ T36] audit: type=1400 audit(7160875559.098:252): avc: denied { ioctl } for pid=742 comm="syz.4.145" path="socket:[9390]" dev="sockfs" ino=9390 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.121080][ T36] audit: type=1400 audit(7160875559.288:253): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 48.170150][ T36] audit: type=1400 audit(7160875559.338:254): avc: denied { read write } for pid=755 comm="syz.3.150" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.203684][ T36] audit: type=1400 audit(7160875559.358:255): avc: denied { open } for pid=755 comm="syz.3.150" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.207002][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 48.256041][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 48.293616][ T418] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 48.311549][ T756] hid-generic 0000:0000:0000.0003: pid 756 passed too short report [ 48.319653][ T312] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 48.423612][ T418] usb 5-1: device descriptor read/64, error -71 [ 48.435747][ T766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 48.466793][ T36] audit: type=1400 audit(7160875559.638:256): avc: denied { mounton } for pid=767 comm="syz.2.155" path="/34/file0" dev="tmpfs" ino=204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.490421][ T36] audit: type=1400 audit(7160875559.658:257): avc: denied { write } for pid=767 comm="syz.2.155" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.495601][ T312] usb 1-1: Using ep0 maxpacket: 8 [ 48.537974][ T312] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.550452][ T312] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 48.561747][ T312] usb 1-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 48.570933][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.579151][ T312] usb 1-1: Product: syz [ 48.583394][ T312] usb 1-1: Manufacturer: syz [ 48.595479][ T312] usb 1-1: SerialNumber: syz [ 48.663634][ T418] usb 5-1: device descriptor read/64, error -71 [ 48.901602][ T312] usb 1-1: unit 255 not found! [ 48.909343][ T418] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 48.921025][ T312] usb 1-1: USB disconnect, device number 8 [ 49.063689][ T418] usb 5-1: device descriptor read/64, error -71 [ 49.113662][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 49.264879][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.275837][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.285657][ T45] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 49.294807][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.303548][ T45] usb 3-1: config 0 descriptor?? [ 49.313684][ T418] usb 5-1: device descriptor read/64, error -71 [ 49.423770][ T418] usb usb5-port1: attempt power cycle [ 49.516497][ T36] audit: type=1400 audit(7160875560.688:258): avc: denied { ioctl } for pid=770 comm="syz.2.156" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.542607][ T784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.574090][ T784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.599618][ T788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.161'. [ 49.783643][ T418] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 49.804708][ T418] usb 5-1: device descriptor read/8, error -71 [ 49.923637][ T536] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 49.934725][ T418] usb 5-1: device descriptor read/8, error -71 [ 50.003641][ T312] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 50.074886][ T536] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 50.085888][ T536] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.097004][ T536] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.106911][ T536] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 50.120177][ T536] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 50.129264][ T536] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.138459][ T536] usb 1-1: config 0 descriptor?? [ 50.153687][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 50.161535][ T312] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.171974][ T312] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 50.181167][ T418] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 50.190374][ T312] usb 4-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 50.199507][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.207638][ T312] usb 4-1: Product: syz [ 50.211881][ T312] usb 4-1: Manufacturer: syz [ 50.216655][ T312] usb 4-1: SerialNumber: syz [ 50.221839][ T418] usb 5-1: device descriptor read/8, error -71 [ 50.354735][ T418] usb 5-1: device descriptor read/8, error -71 [ 50.463744][ T418] usb usb5-port1: unable to enumerate USB device [ 50.523151][ T312] usb 4-1: unit 255 not found! [ 50.536446][ T312] usb 4-1: USB disconnect, device number 12 [ 50.547405][ T536] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0 [ 50.554902][ T536] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0 [ 50.562319][ T536] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0 [ 50.569822][ T536] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0 [ 50.578916][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.595239][ T536] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0 [ 50.602601][ T536] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0 [ 50.611784][ T536] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0 [ 50.620098][ T536] holtek_kbd 0003:04D9:A055.0004: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.0-1/input0 [ 50.748182][ T311] usb 1-1: USB disconnect, device number 9 [ 50.754142][ T798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 50.764036][ T798] veth0: entered promiscuous mode [ 50.769631][ T798] veth0: entered allmulticast mode [ 51.028569][ T807] FAULT_INJECTION: forcing a failure. [ 51.028569][ T807] name failslab, interval 1, probability 0, space 0, times 0 [ 51.043636][ T807] CPU: 1 UID: 0 PID: 807 Comm: syz.4.167 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 51.043670][ T807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.043683][ T807] Call Trace: [ 51.043690][ T807] [ 51.043698][ T807] __dump_stack+0x21/0x30 [ 51.043733][ T807] dump_stack_lvl+0x140/0x1c0 [ 51.043766][ T807] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.043797][ T807] ? __kasan_check_write+0x18/0x20 [ 51.043818][ T807] ? rwsem_read_trylock+0x275/0x5a0 [ 51.043849][ T807] dump_stack+0x19/0x20 [ 51.043876][ T807] should_fail_ex+0x3c2/0x510 [ 51.043902][ T807] should_failslab+0xac/0x100 [ 51.043928][ T807] __kmalloc_cache_noprof+0x41/0x470 [ 51.043956][ T807] ? posix_clock_open+0xc9/0x2e0 [ 51.043975][ T807] ? kobject_get_unless_zero+0x163/0x1f0 [ 51.043998][ T807] posix_clock_open+0xc9/0x2e0 [ 51.044015][ T807] ? selinux_file_open+0x46c/0x630 [ 51.044038][ T807] chrdev_open+0x4eb/0x610 [ 51.044062][ T807] ? __cfi_chrdev_open+0x10/0x10 [ 51.044087][ T807] ? bpf_lsm_file_open+0xd/0x20 [ 51.044115][ T807] ? __cfi_chrdev_open+0x10/0x10 [ 51.044137][ T807] do_dentry_open+0x97c/0x1510 [ 51.044167][ T807] vfs_open+0x86/0x240 [ 51.044194][ T807] ? __cfi_vfs_open+0x10/0x10 [ 51.044222][ T807] ? may_open+0x352/0x430 [ 51.044248][ T807] path_openat+0x2c49/0x35a0 [ 51.044275][ T807] ? schedule+0xc5/0x240 [ 51.044296][ T807] ? kasan_save_alloc_info+0x3a/0x50 [ 51.044315][ T807] ? getname+0x1b/0x30 [ 51.044336][ T807] ? x64_sys_call+0xe69/0x2ee0 [ 51.044360][ T807] ? do_syscall_64+0x57/0xf0 [ 51.044381][ T807] ? do_filp_open+0x440/0x440 [ 51.044411][ T807] do_filp_open+0x1f2/0x440 [ 51.044440][ T807] ? __cfi_do_filp_open+0x10/0x10 [ 51.044472][ T807] ? alloc_fd+0x4c1/0x570 [ 51.044496][ T807] do_sys_openat2+0x134/0x1d0 [ 51.044524][ T807] ? fput+0x1a4/0x230 [ 51.044550][ T807] ? do_sys_open+0x100/0x100 [ 51.044579][ T807] ? __cfi_ksys_write+0x10/0x10 [ 51.044601][ T807] __x64_sys_openat+0x13a/0x170 [ 51.044631][ T807] x64_sys_call+0xe69/0x2ee0 [ 51.044648][ T807] do_syscall_64+0x57/0xf0 [ 51.044666][ T807] ? clear_bhb_loop+0x50/0xa0 [ 51.044691][ T807] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.044715][ T807] RIP: 0033:0x7f6dc339e159 [ 51.044732][ T807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.044748][ T807] RSP: 002b:00007f6dc41eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 51.044780][ T807] RAX: ffffffffffffffda RBX: 00007f6dc3625fa0 RCX: 00007f6dc339e159 [ 51.044794][ T807] RDX: 0000000000002000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 51.044807][ T807] RBP: 00007f6dc343506b R08: 0000000000000000 R09: 0000000000000000 [ 51.044819][ T807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.044830][ T807] R13: 00007f6dc3626038 R14: 00007f6dc3625fa0 R15: 00007ffe047c2d88 [ 51.044846][ T807] [ 51.571001][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 51.577598][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 51.586543][ T45] usb 3-1: USB disconnect, device number 12 [ 51.650315][ T837] netlink: 'syz.4.179': attribute type 64 has an invalid length. [ 51.813651][ T312] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 51.923681][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 51.923681][ T536] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 51.943661][ T312] usb 1-1: device descriptor read/64, error -71 [ 52.073681][ T536] usb 5-1: Using ep0 maxpacket: 16 [ 52.079964][ T536] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 52.083740][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 52.088738][ T536] usb 5-1: config 0 has no interface number 0 [ 52.099320][ T536] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.100580][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.110786][ T536] usb 5-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.121241][ T45] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 52.130804][ T536] usb 5-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.143370][ T45] usb 3-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 52.152212][ T536] usb 5-1: config 0 interface 1 has no altsetting 0 [ 52.161742][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.167855][ T536] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 52.176272][ T45] usb 3-1: Product: syz [ 52.184662][ T312] usb 1-1: device descriptor read/64, error -71 [ 52.189467][ T45] usb 3-1: Manufacturer: syz [ 52.195341][ T536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.200291][ T45] usb 3-1: SerialNumber: syz [ 52.213387][ T536] usb 5-1: config 0 descriptor?? [ 52.222558][ T536] usbhid 5-1:0.1: fixing wrong optional hid class descriptors count [ 52.453786][ T312] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 52.466774][ T848] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.482413][ T45] usb 3-1: unit 255 not found! [ 52.491866][ T45] usb 3-1: USB disconnect, device number 13 [ 52.519157][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.593688][ T312] usb 1-1: device descriptor read/64, error -71 [ 52.634056][ T536] hid-generic 0003:04F3:074D.0005: failed to start in urb: -90 [ 52.643224][ T536] input: HID 04f3:074d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04F3:074D.0005/input/input5 [ 52.656003][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 52.656032][ T36] audit: type=1400 audit(7160875563.828:263): avc: denied { read } for pid=96 comm="acpid" name="event3" dev="devtmpfs" ino=509 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.684762][ T36] audit: type=1400 audit(7160875563.828:264): avc: denied { open } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=509 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.708715][ T536] hid-generic 0003:04F3:074D.0005: input,hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.4-1/input1 [ 52.724540][ T36] audit: type=1400 audit(7160875563.828:265): avc: denied { ioctl } for pid=96 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=509 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.783679][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 52.836471][ T841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.845120][ T841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.853642][ T312] usb 1-1: device descriptor read/64, error -71 [ 52.860416][ T36] audit: type=1400 audit(7160875564.028:266): avc: denied { map } for pid=840 comm="syz.4.181" path="socket:[10069]" dev="sockfs" ino=10069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.862541][ T841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.883719][ T36] audit: type=1400 audit(7160875564.028:267): avc: denied { read } for pid=840 comm="syz.4.181" path="socket:[10069]" dev="sockfs" ino=10069 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.897278][ T841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.925077][ T36] audit: type=1400 audit(7160875564.098:268): avc: denied { ioctl } for pid=840 comm="syz.4.181" path="socket:[10072]" dev="sockfs" ino=10072 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.933748][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 52.956396][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.967813][ T312] usb usb1-port1: attempt power cycle [ 52.973708][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.983611][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 52.992656][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.001444][ T10] usb 4-1: config 0 descriptor?? [ 53.007796][ T10] hub 4-1:0.0: USB hub found [ 53.151488][ T36] audit: type=1400 audit(7160875564.318:269): avc: denied { map } for pid=859 comm="syz.2.187" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.157828][ T860] rust_binder: 859:860 error while translating object: EPERM [ 53.175968][ T36] audit: type=1400 audit(7160875564.318:270): avc: denied { set_context_mgr } for pid=859 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 53.182562][ T860] rust_binder: Failure in copy_transaction_data: EPERM [ 53.202148][ T860] rust_binder: 859:860 transaction async to 859:0 failed EPERM, code 0 size 80-24 [ 53.204656][ T36] audit: type=1400 audit(7160875564.318:271): avc: denied { call } for pid=859 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 53.217193][ T45] rust_binder: 859: undelivered TRANSACTION_ERROR: 29201 [ 53.220933][ T10] hub 4-1:0.0: 1 port detected [ 53.314262][ T312] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 53.334713][ T312] usb 1-1: device descriptor read/8, error -71 [ 53.366181][ T864] netlink: 'syz.2.189': attribute type 64 has an invalid length. [ 53.437730][ T869] netlink: 'syz.2.191': attribute type 64 has an invalid length. [ 53.464627][ T312] usb 1-1: device descriptor read/8, error -71 [ 53.703639][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 53.703655][ T312] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 53.724661][ T312] usb 1-1: device descriptor read/8, error -71 [ 53.854651][ T312] usb 1-1: device descriptor read/8, error -71 [ 53.863727][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 53.870093][ T45] usb 3-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config [ 53.880577][ T45] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 53.890370][ T45] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice=f6.00 [ 53.899466][ T45] usb 3-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 53.907797][ T45] usb 3-1: Manufacturer: syz [ 53.913283][ T45] usb 3-1: config 0 descriptor?? [ 53.963808][ T312] usb usb1-port1: unable to enumerate USB device [ 54.294380][ T10] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 54.300843][ T10] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 54.309602][ T10] usbhid 4-1:0.0: can't add hid device: -32 [ 54.315732][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 54.344425][ T10] usb 4-1: USB disconnect, device number 13 [ 54.489619][ T874] kvm: MONITOR instruction emulated as NOP! [ 54.696666][ T418] usb 5-1: USB disconnect, device number 7 [ 54.835755][ T881] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1989386641 (1989386641 ns) > initial count (970860908 ns). Using initial count to start timer. [ 54.855144][ T881] kvm: kvm [880]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 54.863887][ T881] kvm: kvm [880]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 54.894752][ T881] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 54.918128][ T887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.197'. [ 54.941604][ T889] netlink: 'syz.3.198': attribute type 64 has an invalid length. [ 54.972400][ T892] FAULT_INJECTION: forcing a failure. [ 54.972400][ T892] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.983798][ T36] audit: type=1400 audit(7160875566.138:272): avc: denied { create } for pid=891 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 54.989695][ T892] CPU: 0 UID: 0 PID: 892 Comm: syz.4.199 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 54.989794][ T892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.989838][ T892] Call Trace: [ 54.989862][ T892] [ 54.989882][ T892] __dump_stack+0x21/0x30 [ 54.989976][ T892] dump_stack_lvl+0x140/0x1c0 [ 54.990045][ T892] ? __cfi_dump_stack_lvl+0x10/0x10 [ 54.990118][ T892] dump_stack+0x19/0x20 [ 54.990185][ T892] should_fail_ex+0x3c2/0x510 [ 54.990252][ T892] should_fail+0xf/0x20 [ 54.990305][ T892] should_fail_usercopy+0x1e/0x30 [ 54.990365][ T892] _copy_from_user+0x20/0xa0 [ 54.990443][ T892] inet6_ioctl+0x1a8/0x2d0 [ 54.990492][ T892] ? __cfi_inet6_ioctl+0x10/0x10 [ 54.990559][ T892] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 54.990642][ T892] sock_do_ioctl+0x115/0x330 [ 54.990697][ T892] ? sock_show_fdinfo+0xd0/0xd0 [ 54.990757][ T892] ? __cfi_vfs_write+0x10/0x10 [ 54.990819][ T892] ? __kasan_check_write+0x18/0x20 [ 54.990873][ T892] ? mutex_unlock+0x90/0x240 [ 54.990943][ T892] sock_ioctl+0x568/0x7e0 [ 54.990995][ T892] ? __cfi_sock_ioctl+0x10/0x10 [ 54.991055][ T892] ? __fget_files+0x2bc/0x330 [ 54.991122][ T892] ? bpf_lsm_file_ioctl+0xd/0x20 [ 54.991224][ T892] ? security_file_ioctl+0x3e/0x110 [ 54.991292][ T892] ? __cfi_sock_ioctl+0x10/0x10 [ 54.991360][ T892] __se_sys_ioctl+0x126/0x1b0 [ 54.991432][ T892] __x64_sys_ioctl+0x7f/0xa0 [ 54.991495][ T892] x64_sys_call+0x1878/0x2ee0 [ 54.991546][ T892] do_syscall_64+0x57/0xf0 [ 54.991607][ T892] ? clear_bhb_loop+0x50/0xa0 [ 54.991679][ T892] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.991742][ T892] RIP: 0033:0x7f6dc339e159 [ 54.991792][ T892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.991835][ T892] RSP: 002b:00007f6dc41eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.991896][ T892] RAX: ffffffffffffffda RBX: 00007f6dc3625fa0 RCX: 00007f6dc339e159 [ 54.991931][ T892] RDX: 0000200000000240 RSI: 000000000000890b RDI: 0000000000000003 [ 54.991964][ T892] RBP: 00007f6dc41eb090 R08: 0000000000000000 R09: 0000000000000000 [ 54.992004][ T892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.992036][ T892] R13: 00007f6dc3626038 R14: 00007f6dc3625fa0 R15: 00007ffe047c2d88 [ 54.992073][ T892] [ 55.241997][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 55.273710][ T418] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 55.373646][ T541] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 55.393644][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 55.399834][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.410041][ T45] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 55.413715][ T418] usb 5-1: device descriptor read/64, error -71 [ 55.421465][ T45] usb 1-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 55.434415][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.442424][ T45] usb 1-1: Product: syz [ 55.446738][ T45] usb 1-1: Manufacturer: syz [ 55.451374][ T45] usb 1-1: SerialNumber: syz [ 55.533636][ T541] usb 4-1: Using ep0 maxpacket: 32 [ 55.540073][ T541] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.551073][ T541] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.560983][ T541] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 55.570114][ T541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.578997][ T541] usb 4-1: config 0 descriptor?? [ 55.663751][ T418] usb 5-1: device descriptor read/64, error -71 [ 55.720131][ T45] usb 1-1: unit 255 not found! [ 55.734907][ T45] usb 1-1: USB disconnect, device number 14 [ 55.750478][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.903642][ T418] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 55.986544][ T541] koneplus 0003:1E7D:2D51.0006: item fetching failed at offset 3/5 [ 55.994732][ T541] koneplus 0003:1E7D:2D51.0006: parse failed [ 56.000753][ T541] koneplus 0003:1E7D:2D51.0006: probe with driver koneplus failed with error -22 [ 56.033684][ T418] usb 5-1: device descriptor read/64, error -71 [ 56.273652][ T418] usb 5-1: device descriptor read/64, error -71 [ 56.289026][ T900] af_packet: tpacket_rcv: packet too big, clamped from 65526 to 4. macoff=68 [ 56.383841][ T418] usb usb5-port1: attempt power cycle [ 56.496144][ T541] usb 3-1: USB disconnect, device number 14 [ 56.512758][ T913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 56.536147][ T915] netlink: 'syz.2.208': attribute type 64 has an invalid length. [ 56.564731][ T917] futex_wake_op: syz.2.209 tries to shift op by 144; fix this program [ 56.723796][ T418] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 56.744766][ T418] usb 5-1: device descriptor read/8, error -71 [ 56.874854][ T418] usb 5-1: device descriptor read/8, error -71 [ 56.913677][ T541] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 57.063626][ T541] usb 3-1: Using ep0 maxpacket: 8 [ 57.069784][ T541] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.079965][ T541] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 57.090493][ T541] usb 3-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 57.099662][ T541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.107727][ T541] usb 3-1: Product: syz [ 57.111891][ T541] usb 3-1: Manufacturer: syz [ 57.116530][ T541] usb 3-1: SerialNumber: syz [ 57.123722][ T418] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 57.144701][ T418] usb 5-1: device descriptor read/8, error -71 [ 57.274889][ T418] usb 5-1: device descriptor read/8, error -71 [ 57.383744][ T418] usb usb5-port1: unable to enumerate USB device [ 57.394179][ T541] usb 3-1: unit 255 not found! [ 57.402290][ T541] usb 3-1: USB disconnect, device number 15 [ 57.415165][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.521447][ T932] incfs: Options parsing error. -22 [ 57.526794][ T932] incfs: mount failed -22 [ 57.542901][ T934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 57.617641][ T935] mmap: syz.0.217 (935): VmData 29335552 exceed data ulimit 56. Update limits or use boot option ignore_rlimit_data. [ 57.874494][ T941] EXT4-fs: dax option not supported [ 57.880405][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 57.880422][ T36] audit: type=1400 audit(7160875569.048:281): avc: denied { write } for pid=940 comm="syz.0.219" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.909946][ T36] audit: type=1400 audit(7160875569.048:282): avc: denied { open } for pid=940 comm="syz.0.219" path="/78/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.934336][ T36] audit: type=1400 audit(7160875569.048:283): avc: denied { setattr } for pid=940 comm="syz.0.219" name="/" dev="incremental-fs" ino=436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.957633][ T36] audit: type=1400 audit(7160875569.048:284): avc: denied { ioctl } for pid=940 comm="syz.0.219" path="/78/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.000617][ T67] usb 4-1: USB disconnect, device number 14 [ 58.119785][ T36] audit: type=1400 audit(7160875569.288:285): avc: denied { mounton } for pid=954 comm="syz.3.223" path="/proc/117/task" dev="proc" ino=11930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 58.134518][ T959] capability: warning: `syz.3.223' uses 32-bit capabilities (legacy support in use) [ 58.181339][ T962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 58.211750][ T964] netlink: 'syz.0.226': attribute type 3 has an invalid length. [ 58.222429][ T966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 58.231381][ T964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 58.245591][ T964] netlink: 'syz.0.226': attribute type 3 has an invalid length. [ 58.253324][ T964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 58.263625][ T10] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 58.271387][ T36] audit: type=1400 audit(7160875569.438:286): avc: denied { shutdown } for pid=963 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.293648][ T36] audit: type=1400 audit(7160875569.438:287): avc: denied { create } for pid=963 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 58.339837][ T36] audit: type=1400 audit(7160875569.508:288): avc: denied { append } for pid=969 comm="syz.4.229" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.464792][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.475066][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.485793][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 58.495015][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.503071][ T10] usb 3-1: Product: syz [ 58.507429][ T10] usb 3-1: Manufacturer: syz [ 58.512049][ T10] usb 3-1: SerialNumber: syz [ 58.583666][ T67] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 58.720230][ T10] usb 3-1: 0:2 : does not exist [ 58.725294][ T10] usb 3-1: unit 9 not found! [ 58.732226][ T10] usb 3-1: USB disconnect, device number 16 [ 58.733912][ T67] usb 1-1: Using ep0 maxpacket: 8 [ 58.744747][ T67] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.754047][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.755156][ T67] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 58.782183][ T67] usb 1-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40 [ 58.791439][ T67] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.799518][ T67] usb 1-1: Product: syz [ 58.804064][ T67] usb 1-1: Manufacturer: syz [ 58.808672][ T67] usb 1-1: SerialNumber: syz [ 59.021349][ T67] usb 1-1: unit 255 not found! [ 59.030062][ T67] usb 1-1: USB disconnect, device number 15 [ 59.044480][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.278238][ T981] netlink: 'syz.2.233': attribute type 64 has an invalid length. [ 59.305150][ T983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 59.330658][ T987] netlink: 'syz.2.236': attribute type 64 has an invalid length. [ 59.433234][ T999] netlink: 44 bytes leftover after parsing attributes in process `syz.2.241'. [ 59.480134][ T36] audit: type=1400 audit(7160875570.648:289): avc: denied { getopt } for pid=1002 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.525684][ T1005] netlink: 'syz.2.244': attribute type 64 has an invalid length. [ 59.571462][ T1009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 59.582237][ T36] audit: type=1400 audit(7160875570.738:290): avc: denied { node_bind } for pid=1006 comm="syz.2.245" saddr=127.0.0.1 src=4444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 59.713664][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 59.863637][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 59.886007][ T67] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 59.893912][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.906525][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.929047][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 59.941426][ T10] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 59.949880][ T10] usb 4-1: Product: syz [ 59.954224][ T10] usb 4-1: Manufacturer: syz [ 59.971984][ T1051] netlink: 'syz.4.261': attribute type 64 has an invalid length. [ 59.974011][ T10] hub 4-1:4.0: USB hub found [ 60.045157][ T67] usb 3-1: unable to get BOS descriptor or descriptor too short [ 60.053456][ T67] usb 3-1: not running at top speed; connect to a high speed hub [ 60.063644][ T67] usb 3-1: config 4 has an invalid interface number: 246 but max is 0 [ 60.071861][ T67] usb 3-1: config 4 has no interface number 0 [ 60.084157][ T67] usb 3-1: config 4 interface 246 has no altsetting 0 [ 60.092468][ T67] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=d5.2c [ 60.101894][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.110292][ T67] usb 3-1: Product: syz [ 60.123352][ T1049] fuse: Bad value for 'fd' [ 60.127759][ T67] usb 3-1: Manufacturer: syz [ 60.132493][ T67] usb 3-1: SerialNumber: syz [ 60.165147][ T10] hub 4-1:4.0: 2 ports detected [ 60.350032][ T67] ftdi_sio 3-1:4.246: FTDI USB Serial Device converter detected [ 60.361491][ T67] ftdi_sio ttyUSB0: unknown device type: 0xd52c [ 60.369410][ T67] usb 3-1: USB disconnect, device number 17 [ 60.372536][ T1001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.379170][ T67] ftdi_sio 3-1:4.246: device disconnected [ 60.396830][ T1001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.409827][ T1001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.419417][ T1001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.473719][ T312] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 60.623628][ T312] usb 5-1: Using ep0 maxpacket: 16 [ 60.629970][ T312] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 60.637386][ T10] hub 4-1:4.0: set hub depth failed [ 60.643949][ T312] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 60.654010][ T312] usb 5-1: New USB device found, idVendor=0c16, idProduct=1d08, bcdDevice= 0.00 [ 60.663095][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.672432][ T10] usb 4-1: USB disconnect, device number 15 [ 60.681783][ T312] usb 5-1: config 0 descriptor?? [ 61.069130][ T1084] netlink: 'syz.2.273': attribute type 64 has an invalid length. [ 61.089708][ T1086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 61.363651][ T45] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 61.513640][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 61.520096][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.530454][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.541006][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.550124][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.558175][ T45] usb 3-1: Product: syz [ 61.562366][ T45] usb 3-1: Manufacturer: syz [ 61.566988][ T45] usb 3-1: SerialNumber: syz [ 61.780261][ T45] usb 3-1: 0:2 : does not exist [ 61.791374][ T45] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 61.805425][ T45] usb 3-1: USB disconnect, device number 18 [ 61.818624][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.025021][ T1111] kvm: user requested TSC rate below hardware speed [ 62.056224][ T1111] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3775386245 (7550772490 ns) > initial count (4877730690 ns). Using initial count to start timer. [ 62.075198][ T1111] kvm: kvm [1110]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 62.084210][ T1111] kvm: kvm [1110]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 62.413671][ T312] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 62.491729][ T1127] netlink: 'syz.0.283': attribute type 64 has an invalid length. [ 62.510995][ T1129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.284'. [ 62.543842][ T312] usb 4-1: device descriptor read/64, error -71 [ 62.583786][ T1135] ------------[ cut here ]------------ [ 62.589299][ T1135] skb_assert_len [ 62.593061][ T1135] WARNING: CPU: 0 PID: 1135 at include/linux/skbuff.h:2720 __dev_queue_xmit+0x1e1d/0x3780 [ 62.603041][ T1135] Modules linked in: [ 62.607006][ T1135] CPU: 0 UID: 0 PID: 1135 Comm: syz.2.287 Not tainted syzkaller #0 b27277d6799ceeca3eb852bae8b5683c15874786 [ 62.618583][ T1135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.628864][ T1135] RIP: 0010:__dev_queue_xmit+0x1e1d/0x3780 [ 62.634774][ T1135] Code: 00 00 00 fc ff df e9 ea e6 ff ff e8 4d d0 04 fd c6 05 65 ba 62 03 01 48 c7 c7 a0 28 8b 86 48 c7 c6 2d bc 19 87 e8 e3 9f 81 fc <0f> 0b 80 3d 4a ba 62 03 01 0f 84 af e3 ff ff e8 1f d0 04 fd c6 05 [ 62.645654][ T1137] fuseblk: Bad value for 'source' [ 62.654992][ T1135] RSP: 0018:ffffc9000b7cf500 EFLAGS: 00010246 [ 62.665654][ T1135] RAX: fcb015a642f6d900 RBX: ffff8881223c3a70 RCX: 0000000000080000 [ 62.673885][ T1135] RDX: ffffc90002a56000 RSI: 0000000000001d9d RDI: 0000000000001d9e [ 62.681905][ T1135] RBP: ffffc9000b7cf7e0 R08: ffff8881f6e294d3 R09: 1ffff1103edc529a [ 62.689937][ T1135] R10: dffffc0000000000 R11: ffffed103edc529b R12: 1ffff11024478742 [ 62.698077][ T1135] R13: ffff8881223c3a00 R14: 0000000000000000 R15: dffffc0000000000 [ 62.706130][ T1135] FS: 00007fe87a0346c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 62.715119][ T1135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.721732][ T1135] CR2: 00007fe87a033ff8 CR3: 000000011e0de000 CR4: 00000000003526b0 [ 62.729820][ T1135] Call Trace: [ 62.733140][ T1135] [ 62.736147][ T1135] ? __kasan_check_write+0x18/0x20 [ 62.741304][ T1135] ? alloc_skb_with_frags+0x80b/0x8b0 [ 62.746758][ T1135] ? __cfi___dev_queue_xmit+0x10/0x10 [ 62.752178][ T1135] ? __kasan_check_write+0x18/0x20 [ 62.757357][ T1135] ? skb_set_owner_w+0x280/0x3d0 [ 62.762332][ T1135] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 62.767785][ T1135] ? packet_parse_headers+0x7f0/0xb10 [ 62.773190][ T1135] ? packet_parse_headers+0x883/0xb10 [ 62.778627][ T1135] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 62.784430][ T1135] ? skb_setup_tx_timestamp+0x210/0x210 [ 62.790001][ T1135] packet_xmit+0x76/0x360 [ 62.794404][ T1135] ? is_vmalloc_addr+0x11/0x40 [ 62.799199][ T1135] packet_sendmsg+0x228b/0x56b0 [ 62.804090][ T1135] ? avc_has_perm_noaudit+0x26b/0x360 [ 62.809504][ T1135] ? __cfi_packet_sendmsg+0x10/0x10 [ 62.814767][ T1135] ? avc_has_perm+0x155/0x240 [ 62.819481][ T1135] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 62.824829][ T1135] ? security_socket_sendmsg+0x3d/0x100 [ 62.830424][ T1135] ? __cfi_packet_sendmsg+0x10/0x10 [ 62.835708][ T1135] sock_write_iter+0x445/0x490 [ 62.840507][ T1135] ? __cfi_sock_write_iter+0x10/0x10 [ 62.845844][ T1135] ? __cfi_futex_wait+0x10/0x10 [ 62.850761][ T1135] ? selinux_socket_setsockopt+0x324/0x3d0 [ 62.856678][ T1135] vfs_write+0x762/0xfd0 [ 62.860976][ T1135] ? __cfi_vfs_write+0x10/0x10 [ 62.865818][ T1135] ksys_write+0x145/0x260 [ 62.870184][ T1135] ? __cfi_ksys_write+0x10/0x10 [ 62.875099][ T1135] ? __kasan_check_write+0x18/0x20 [ 62.880261][ T1135] ? fpregs_restore_userregs+0x11c/0x260 [ 62.885975][ T1135] __x64_sys_write+0x7f/0x90 [ 62.890597][ T1135] x64_sys_call+0x271c/0x2ee0 [ 62.895344][ T1135] do_syscall_64+0x57/0xf0 [ 62.899813][ T1135] ? clear_bhb_loop+0x50/0xa0 [ 62.904573][ T1135] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 62.910501][ T1135] RIP: 0033:0x7fe87919e159 [ 62.914959][ T1135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.935065][ T1135] RSP: 002b:00007fe87a034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 62.943522][ T1135] RAX: ffffffffffffffda RBX: 00007fe879425fa0 RCX: 00007fe87919e159 [ 62.951861][ T1135] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 62.959902][ T1135] RBP: 00007fe87923506b R08: 0000000000000000 R09: 0000000000000000 [ 62.967968][ T1135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.976016][ T1135] R13: 00007fe879426038 R14: 00007fe879425fa0 R15: 00007ffd15aaf028 [ 62.984077][ T1135] [ 62.987153][ T1135] ---[ end trace 0000000000000000 ]--- [ 62.992692][ T1135] skb len=0 headroom=128 headlen=0 tailroom=256 [ 62.992692][ T1135] mac=(128,0) mac_len=0 net=(128,-1) trans=-1 [ 62.992692][ T1135] shinfo(txflags=64 nr_frags=0 gso(size=0 type=0 segs=0)) [ 62.992692][ T1135] csum(0x0 start=0 offset=0 ip_summed=0 complete_sw=0 valid=0 level=0) [ 62.992692][ T1135] hash(0x0 sw=0 l4=0) proto=0x0003 pkttype=0 iif=0 [ 62.992692][ T1135] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0 [ 62.992692][ T1135] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0) [ 63.039942][ T1135] dev name=tunl0 feat=0x00000006401d4869 [ 63.045967][ T1135] sk family=17 type=2 proto=0 [ 63.123679][ T312] usb 4-1: device descriptor read/64, error -71 [ 63.250132][ T536] usb 5-1: USB disconnect, device number 12 [ 63.363640][ T312] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 63.493660][ T312] usb 4-1: device descriptor read/64, error -71 [ 63.743677][ T312] usb 4-1: device descriptor read/64, error -71 [ 63.853799][ T312] usb usb4-port1: attempt power cycle [ 64.193678][ T312] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 64.215879][ T312] usb 4-1: device descriptor read/8, error -71 [ 64.344791][ T312] usb 4-1: device descriptor read/8, error -71 [ 64.583640][ T312] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 64.604808][ T312] usb 4-1: device descriptor read/8, error -71 [ 64.734900][ T312] usb 4-1: device descriptor read/8, error -71 [ 64.843730][ T312] usb usb4-port1: unable to enumerate USB device