last executing test programs: 44.093123723s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1e1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x200091, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000580)={0x50, 0x0, r1, {0x7, 0x28, 0xfffd, 0x40200880, 0xfffc, 0x0, 0x1e0, 0x2, 0x0, 0x0, 0x24522716a989086f, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200, 0x0, {0x20000000000005, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r2, 0x734, 0x20}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) 44.007686416s ago: executing program 0 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001180)={"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"}) fcntl$lock(r1, 0x26, &(0x7f0000001000)={0x0, 0x0, 0x80000001, 0xfffffffffffffff7, 0xffffffffffffffff}) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, &(0x7f00000010c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 43.723065003s ago: executing program 0 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYBLOB="560bd86a939fd2a14ef57a599a422b"], 0xffe) 43.684307464s ago: executing program 32 (id=13): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYBLOB="560bd86a939fd2a14ef57a599a422b"], 0xffe) 37.335499406s ago: executing program 3 (id=83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x2c, 0x3) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setuid(0xee01) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000880)={{0x80e3000, 0x3000, 0x8, 0xd, 0x63, 0x0, 0x45, 0x5, 0x0, 0x2e, 0x19}, {0x5000, 0x2, 0xe, 0x2, 0x42, 0x9, 0x7f, 0x3, 0x2, 0x5, 0x3}, {0x54000, 0x4000, 0xe, 0x3, 0x1, 0x9, 0x7, 0x60, 0x0, 0xa7, 0x8, 0x15}, {0x8000000, 0x10000, 0xa, 0x6, 0x4, 0x3, 0x1, 0xf8, 0x9, 0x9, 0xf, 0x5}, {0x60000, 0x70000, 0xc, 0x2, 0x15, 0x6, 0xab, 0x7c, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0xfec00000, 0x8, 0xa0, 0xb1, 0x8, 0x7, 0x9, 0x9, 0x13, 0x8, 0xf}, {0x6000, 0x1, 0xa, 0x5, 0x0, 0x5, 0x4, 0x3, 0x3, 0x84, 0x3, 0x79}, {0xffffffff, 0x5000, 0xc, 0x5, 0xf, 0x7, 0x1, 0xe1, 0x2, 0x8, 0xf0, 0x7}, {0x40002, 0x2f}, {0x3000, 0xfffd}, 0xc0000031, 0x0, 0x6000, 0x2024, 0x7, 0x0, 0x3000, [0x7, 0x9, 0x20000060, 0xfffffffffffffff7]}) 37.252857608s ago: executing program 3 (id=86): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x1, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x7f798000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdf, 0x1, 0x0}, &(0x7f00000000c0)=0x40) 37.225776849s ago: executing program 3 (id=87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0x4, 0x7f, 0x44233, 0x200000000007, 0x20081, 0x940, 0x1, 0x1205, 0x4, 0x1000000004004, 0x0, 0xfffffdfffffffffd], 0x2, 0x84340}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00'}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 37.160277471s ago: executing program 3 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 37.073434963s ago: executing program 3 (id=89): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) 37.002074414s ago: executing program 3 (id=90): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) syz_open_procfs$namespace(0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 36.941695786s ago: executing program 33 (id=90): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) syz_open_procfs$namespace(0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 3.052773351s ago: executing program 5 (id=503): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x1c, 0x0) creat(0x0, 0x182) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r2, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x0, 0x26}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3a}, @fda={0x66646185, 0x9, 0x1, 0x20}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 2.970092764s ago: executing program 5 (id=504): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x2080) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f00000001c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.344092589s ago: executing program 4 (id=519): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.258912342s ago: executing program 4 (id=520): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.104868166s ago: executing program 4 (id=523): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x101a82, 0x30) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x806, 0x0, 0x4, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x10000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000000000"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130000032cbd7000fbdbdf25fc000000000009000000000000000001e400000200000000000000000040000000000004000000000a0060803b000000", @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000002003c00000000000000fdfff7ffffffffff50000000000000000000000000000000050000000000000000000000000000000500000000000000030000000000000006000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac"], 0xb8}, 0x1, 0x0, 0x0, 0xc1}, 0x20004001) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2.104635076s ago: executing program 4 (id=524): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x7) close(0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x1, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x80, 0x0, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x26d}}], 0x1, 0x0, 0x0) 2.103516536s ago: executing program 4 (id=525): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.000849268s ago: executing program 4 (id=528): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000005c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x3}}, 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x4f834c58, 0x3, 0x101, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) ustat(0x1, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xc4) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d000100006000090400800203000000092106040001220500090581032000090807090502"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='dummy_udc.0', 0xb) 2.000562708s ago: executing program 5 (id=529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, '\x00\x00\x00\x00\x00\x00\x00@', "de51e43bead03c41635dd3145f1f6100", "87d560d1", "24fdb55a99003858"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xa7, 0x4) 1.829146543s ago: executing program 5 (id=532): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = inotify_init() r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x48, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x19, 0x0, 0x0) 1.574323889s ago: executing program 1 (id=541): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f00000004c0)={0x0, 0xfef0, 0x10, 0x0, 0x87b}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x247d, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1.396796964s ago: executing program 1 (id=545): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000100)={0xeb, 0x0, [{0x1, 0x0, 0x5, 0x7, 0x800, 0x7fffffff, 0x2}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x2080) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.292859016s ago: executing program 5 (id=548): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005100), 0x600, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x2080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.247817388s ago: executing program 5 (id=549): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r3, 0xc138fd08, &(0x7f0000003000)="0400000000000000000000003801") ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0002048000000900"], 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x4400}, {r2, 0x40}, {0xffffffffffffffff, 0x8}, {r0, 0x9020}, {0xffffffffffffffff, 0x600}, {r0, 0x8442}], 0x6, 0xfffffe00) 425.828809ms ago: executing program 1 (id=562): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005100), 0x600, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x2080) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f00000001c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 425.612759ms ago: executing program 2 (id=563): r0 = socket(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e20, 0xfffffffe, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x4f1}}}, 0x108) setsockopt$inet6_buf(r0, 0x29, 0x2c, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x100) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 368.82988ms ago: executing program 2 (id=564): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) close(0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x1, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x80, 0x0, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x26d}}], 0x1, 0x0, 0x0) 368.6004ms ago: executing program 2 (id=565): mkdirat(0xffffffffffffff9c, 0x0, 0x1e1) getpgid(0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r6, r7, r8, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) syz_ublk_setup_queues(r5, r9, &(0x7f0000000340)={0x0, 0x1463, 0x2, 0xffffffff, 0x36b}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r5}}], 0x16, &(0x7f0000001540)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x200091, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) 280.529853ms ago: executing program 1 (id=566): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x800, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x67, 0x2, {0x2, 0x4, 0x8}}, 0x14) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x1) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x1000, 0x40, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, &(0x7f0000000100)) 125.119836ms ago: executing program 2 (id=567): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005100), 0x600, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x2080) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 76.866138ms ago: executing program 1 (id=568): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005100), 0x600, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') socket$inet6_udplite(0xa, 0x2, 0x88) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x2080) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x800007, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) r5 = syz_io_uring_setup(0x5b17, &(0x7f0000000000)={0x0, 0xc995, 0x4000, 0x0, 0x2de, 0x0, r4}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0)) syz_ublk_setup_queues(r4, r2, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x23c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x80, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x10, 0x0, 0x8000000}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff, 0x0, r5}}], 0x1, 0x0, 0x0) 76.619948ms ago: executing program 2 (id=569): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x20800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000005100), 0x600, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x2080) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x20}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 63.126508ms ago: executing program 2 (id=570): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc262, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1c}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a8000000030101020000000000000000000000060c001880080001400000800018000d80140005"], 0xa8}, 0x1, 0x0, 0x0, 0x40000001}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00f\x00'], 0x6c}], 0x1}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r5, 0x3) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r6, 0x5) 0s ago: executing program 1 (id=571): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x40, 0x12, 0x3, "0bf682"}, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x20, 0x82, 0x1, "01"}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x109001, 0x0) ioctl$SIOCGSKNS(r1, 0x894c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(&(0x7f0000000040)=@filename='none\x00', 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[], 0x0) kernel console output (not intermixed with test programs): cess permissive=1 [ 13.984287][ T36] audit: type=1400 audit(1785957761.380:63): avc: denied { siginh } for pid=232 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 21.357422][ T36] audit: type=1400 audit(1785957768.760:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.358567][ T286] cgroup: Unknown subsys name 'net' [ 21.380137][ T36] audit: type=1400 audit(1785957768.760:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.407365][ T36] audit: type=1400 audit(1785957768.790:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.407561][ T286] cgroup: Unknown subsys name 'devices' [ 21.534755][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.540385][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.652088][ T36] audit: type=1400 audit(1785957769.050:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.675365][ T36] audit: type=1400 audit(1785957769.050:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.683751][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.700240][ T36] audit: type=1400 audit(1785957769.050:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.731784][ T36] audit: type=1400 audit(1785957769.110:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.757283][ T36] audit: type=1400 audit(1785957769.110:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.790302][ T36] audit: type=1400 audit(1785957769.190:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.815861][ T36] audit: type=1400 audit(1785957769.190:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.816250][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.639405][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.646592][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.653730][ T295] bridge_slave_0: entered allmulticast mode [ 22.659928][ T295] bridge_slave_0: entered promiscuous mode [ 22.666512][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.673576][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.680622][ T294] bridge_slave_0: entered allmulticast mode [ 22.687050][ T294] bridge_slave_0: entered promiscuous mode [ 22.694958][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.701998][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.709104][ T296] bridge_slave_0: entered allmulticast mode [ 22.715294][ T296] bridge_slave_0: entered promiscuous mode [ 22.721460][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.728547][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.735638][ T295] bridge_slave_1: entered allmulticast mode [ 22.741765][ T295] bridge_slave_1: entered promiscuous mode [ 22.750661][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.757724][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.764832][ T294] bridge_slave_1: entered allmulticast mode [ 22.771017][ T294] bridge_slave_1: entered promiscuous mode [ 22.778652][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.785725][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.792795][ T296] bridge_slave_1: entered allmulticast mode [ 22.798922][ T296] bridge_slave_1: entered promiscuous mode [ 22.833371][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.840425][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.847552][ T293] bridge_slave_0: entered allmulticast mode [ 22.853720][ T293] bridge_slave_0: entered promiscuous mode [ 22.862970][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.870019][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.877148][ T293] bridge_slave_1: entered allmulticast mode [ 22.883480][ T293] bridge_slave_1: entered promiscuous mode [ 23.033265][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.040324][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.047627][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.054652][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.064273][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.071319][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.078643][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.085687][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.095752][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.102822][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.110089][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.117130][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.129221][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.136279][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.143553][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.150567][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.204104][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.211380][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.219351][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.226645][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.234193][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.241384][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.248689][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.267402][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.274471][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.282004][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.289056][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.297089][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.304133][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.311643][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.318685][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.332272][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.339332][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.353115][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.360186][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.375331][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.382374][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.410452][ T295] veth0_vlan: entered promiscuous mode [ 23.434997][ T294] veth0_vlan: entered promiscuous mode [ 23.443581][ T293] veth0_vlan: entered promiscuous mode [ 23.454410][ T295] veth1_macvtap: entered promiscuous mode [ 23.467742][ T294] veth1_macvtap: entered promiscuous mode [ 23.492069][ T296] veth0_vlan: entered promiscuous mode [ 23.499986][ T293] veth1_macvtap: entered promiscuous mode [ 23.518922][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.553962][ T296] veth1_macvtap: entered promiscuous mode [ 23.594634][ T316] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.640855][ T322] tipc: Started in network mode [ 23.646104][ T322] tipc: Node identity 4, cluster identity 4711 [ 23.656178][ T322] tipc: Node number set to 4 [ 23.850859][ T13] bridge_slave_1: left allmulticast mode [ 23.865921][ T13] bridge_slave_1: left promiscuous mode [ 23.871576][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.881614][ T13] bridge_slave_0: left allmulticast mode [ 23.889199][ T13] bridge_slave_0: left promiscuous mode [ 23.895241][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.006124][ T346] syzkaller1: entered promiscuous mode [ 24.022525][ T346] syzkaller1: entered allmulticast mode [ 24.067726][ T13] veth1_macvtap: left promiscuous mode [ 24.082822][ T13] veth0_vlan: left promiscuous mode [ 24.240928][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.248185][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.255519][ T348] bridge_slave_0: entered allmulticast mode [ 24.262000][ T348] bridge_slave_0: entered promiscuous mode [ 24.270454][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.277750][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.285019][ T348] bridge_slave_1: entered allmulticast mode [ 24.291652][ T348] bridge_slave_1: entered promiscuous mode [ 24.374567][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.381670][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.389004][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.396060][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.429157][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.437457][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.448829][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.455916][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.465163][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.472240][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.472629][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.513278][ T348] veth0_vlan: entered promiscuous mode [ 24.528460][ T348] veth1_macvtap: entered promiscuous mode [ 24.653692][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.665559][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.682041][ T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 24.726421][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.735675][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.752636][ T10] usb 3-1: Product: syz [ 24.756924][ T10] usb 3-1: Manufacturer: syz [ 24.761529][ T10] usb 3-1: SerialNumber: syz [ 24.962777][ T356] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 24.976384][ T380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 24.987119][ T352] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 25.124410][ T356] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 25.135882][ T356] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 25.146898][ T356] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 25.165800][ T356] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.175899][ T356] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.184099][ T356] usb 5-1: Product: syz [ 25.188331][ T356] usb 5-1: Manufacturer: syz [ 25.193315][ T356] usb 5-1: SerialNumber: syz [ 25.199401][ T362] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 25.408963][ T362] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 25.602198][ T352] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 25.810751][ T10] cdc_ncm 3-1:1.0: bind() failure [ 25.817352][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 25.824687][ T10] cdc_ncm 3-1:1.1: bind() failure [ 26.020380][ T415] syzkaller0: entered promiscuous mode [ 26.024487][ T362] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 26.035991][ T415] syzkaller0: entered allmulticast mode [ 26.052194][ T10] usb 3-1: USB disconnect, device number 2 [ 26.238424][ T356] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 26.245061][ T356] cdc_ncm 5-1:1.0: dwNtbInMaxSize=1024 is too small. Using 2048 [ 26.252996][ T356] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 26.372305][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 26.372322][ T36] audit: type=1400 audit(1785957773.770:139): avc: denied { mounton } for pid=426 comm="syz.1.42" path="/18/file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 26.439036][ T356] cdc_ncm 5-1:1.0: setting tx_max = 16384 [ 26.447617][ T356] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 26.463275][ T356] usb 5-1: USB disconnect, device number 2 [ 26.473076][ T356] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 26.483202][ T36] audit: type=1400 audit(1785957773.880:140): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.524439][ T36] audit: type=1400 audit(1785957773.920:141): avc: denied { getattr } for pid=433 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.579156][ T36] audit: type=1400 audit(1785957773.980:142): avc: denied { read } for pid=438 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.607090][ T36] audit: type=1400 audit(1785957773.980:143): avc: denied { open } for pid=438 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.656855][ T36] audit: type=1400 audit(1785957774.060:144): avc: denied { create } for pid=432 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.679596][ T36] audit: type=1400 audit(1785957774.060:145): avc: denied { write } for pid=432 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=638 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.705926][ T36] audit: type=1400 audit(1785957774.060:146): avc: denied { append } for pid=432 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=638 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.744493][ T36] audit: type=1400 audit(1785957774.080:147): avc: denied { unlink } for pid=453 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=638 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 26.787530][ T36] audit: type=1400 audit(1785957774.190:148): avc: denied { read write } for pid=463 comm="syz.1.47" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 27.022628][ T356] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.172597][ T356] usb 2-1: Using ep0 maxpacket: 16 [ 27.178906][ T356] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.189486][ T356] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.199805][ T356] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 27.222857][ T356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 27.231017][ T356] usb 2-1: SerialNumber: syz [ 27.238289][ T356] usb 2-1: 0:2 : does not exist [ 27.647086][ T356] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 27.664904][ T356] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 27.684938][ T356] usb 2-1: USB disconnect, device number 2 [ 27.692759][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.703653][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.842624][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 27.849166][ T45] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.860582][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 27.867897][ T45] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 27.877317][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.886328][ T45] usb 3-1: config 0 descriptor?? [ 28.026343][ T496] kvm: kvm [495]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 28.035160][ T496] kvm: kvm [495]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 28.042693][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.053211][ T496] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 28.116089][ T499] kvm: emulating exchange as write [ 28.220855][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 28.241917][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 28.248814][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 28.261829][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.290616][ T10] usb 4-1: config 0 descriptor?? [ 28.319098][ T45] hid-generic 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 28.510213][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 28.516237][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 28.525099][ T10] usb 4-1: USB disconnect, device number 2 [ 28.764049][ T45] usb 3-1: USB disconnect, device number 3 [ 29.107533][ T10] smpboot: CPU 1 is now offline [ 29.117693][ T523] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 29.293899][ T531] syz.3.69 uses obsolete (PF_INET,SOCK_PACKET) [ 29.619737][ T556] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (34020837952 ns) > initial count (25771729976 ns). Using initial count to start timer. [ 30.002627][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.152614][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 30.158903][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.169995][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.184693][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 30.203853][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 30.218629][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.232461][ T10] usb 2-1: config 0 descriptor?? [ 30.474081][ T571] kvm: kvm [570]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 30.487044][ T571] kvm: kvm [570]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 30.498290][ T571] kvm: kvm [570]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 30.518711][ T571] kvm: kvm [570]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 30.530671][ T579] ======================================================= [ 30.530671][ T579] WARNING: The mand mount option has been deprecated and [ 30.530671][ T579] and is ignored by this kernel. Remove the mand [ 30.530671][ T579] option from the mount to silence this warning. [ 30.530671][ T579] ======================================================= [ 30.565849][ T571] kvm: kvm [570]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 30.643347][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 30.652001][ T309] bridge_slave_1: left allmulticast mode [ 30.658208][ T309] bridge_slave_1: left promiscuous mode [ 30.663996][ T10] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 30.664212][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.683472][ T309] bridge_slave_0: left allmulticast mode [ 30.689144][ T309] bridge_slave_0: left promiscuous mode [ 30.690000][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input4 [ 30.712748][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.732234][ T10] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 30.764964][ T583] kvm: user requested TSC rate below hardware speed [ 30.777090][ T583] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 30.835388][ T309] tipc: Left network mode [ 30.841540][ T309] veth1_macvtap: left promiscuous mode [ 30.847155][ T309] veth0_vlan: left promiscuous mode [ 30.927328][ T10] usb 2-1: USB disconnect, device number 3 [ 30.950649][ T584] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.957807][ T584] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.965047][ T584] bridge_slave_0: entered allmulticast mode [ 30.971210][ T584] bridge_slave_0: entered promiscuous mode [ 30.977834][ T584] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.984914][ T584] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.992060][ T584] bridge_slave_1: entered allmulticast mode [ 30.998311][ T584] bridge_slave_1: entered promiscuous mode [ 31.055551][ T584] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.062660][ T584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.069903][ T584] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.076940][ T584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.095326][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.102632][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.112250][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.119314][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.129664][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.136728][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.158749][ T584] veth0_vlan: entered promiscuous mode [ 31.169379][ T584] veth1_macvtap: entered promiscuous mode [ 31.262700][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.413900][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.422244][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 31.442705][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 31.451960][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.462279][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 31.462296][ T36] audit: type=1400 audit(1785957778.870:188): avc: denied { create } for pid=609 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.464365][ T9] usb 3-1: Product: syz [ 31.492120][ T9] usb 3-1: Manufacturer: syz [ 31.496917][ T9] usb 3-1: SerialNumber: syz [ 31.612581][ T310] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 31.702683][ T356] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.763672][ T310] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 31.771819][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.782762][ T310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.792651][ T310] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.805670][ T310] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.814808][ T310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.823487][ T310] usb 6-1: config 0 descriptor?? [ 31.852618][ T356] usb 2-1: Using ep0 maxpacket: 16 [ 31.858895][ T356] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.869457][ T356] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.879828][ T356] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.889190][ T356] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.897364][ T356] usb 2-1: Product: syz [ 31.901578][ T356] usb 2-1: Manufacturer: syz [ 31.906316][ T356] usb 2-1: SerialNumber: syz [ 32.115323][ T356] usb 2-1: 0:2 : does not exist [ 32.122214][ T356] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 32.133445][ T356] usb 2-1: USB disconnect, device number 4 [ 32.142053][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.231247][ T310] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.238725][ T310] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.246185][ T310] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.253595][ T310] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.261002][ T310] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.268686][ T310] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.276123][ T310] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.283542][ T310] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.290937][ T310] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.298351][ T310] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.305774][ T310] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.313364][ T310] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.320780][ T310] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.328264][ T310] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.335687][ T310] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 32.343423][ T310] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 32.352673][ T310] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 32.477253][ T36] audit: type=1400 audit(1785957779.880:189): avc: denied { read } for pid=615 comm="syz.4.104" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.481638][ T616] rust_binder: 615:616 release transaction 1 in, still active [ 32.502571][ T36] audit: type=1400 audit(1785957779.880:190): avc: denied { open } for pid=615 comm="syz.4.104" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.533524][ T310] usb 6-1: USB disconnect, device number 2 [ 32.539275][ T36] audit: type=1400 audit(1785957779.880:191): avc: denied { ioctl } for pid=615 comm="syz.4.104" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.570077][ T36] audit: type=1400 audit(1785957779.880:192): avc: denied { set_context_mgr } for pid=615 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 32.590714][ T36] audit: type=1400 audit(1785957779.880:193): avc: denied { map } for pid=615 comm="syz.4.104" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.614369][ T36] audit: type=1400 audit(1785957779.880:194): avc: denied { call } for pid=615 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 32.915958][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 32.934353][ T9] usb 3-1: USB disconnect, device number 4 [ 33.046962][ T647] syzkaller1: entered promiscuous mode [ 33.062829][ T647] syzkaller1: entered allmulticast mode [ 33.076931][ T650] syzkaller1: entered promiscuous mode [ 33.082496][ T650] syzkaller1: entered allmulticast mode [ 33.309094][ T36] audit: type=1400 audit(1785957780.710:195): avc: denied { create } for pid=671 comm="syz.5.127" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 33.337733][ T36] audit: type=1400 audit(1785957780.710:196): avc: denied { mounton } for pid=671 comm="syz.5.127" path="/11/file0" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 33.361570][ T36] audit: type=1400 audit(1785957780.770:197): avc: denied { mounton } for pid=671 comm="syz.5.127" path="/11/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 33.383896][ T674] 9pnet_fd: p9_fd_create_unix (674): problem connecting socket: ./file0: -13 [ 33.480997][ T680] Mass Storage Function, version: 2009/09/11 [ 33.489919][ T682] Source file dentry negative [ 33.498355][ T680] LUN: removable file: (no medium) [ 33.655010][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 33.832653][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 33.839058][ T10] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 33.860195][ T10] usb 6-1: config 0 has no interface number 0 [ 33.879246][ T10] usb 6-1: config 0 interface 184 has no altsetting 0 [ 33.896731][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 33.922592][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.944827][ T10] usb 6-1: Product: syz [ 33.949001][ T10] usb 6-1: Manufacturer: syz [ 33.982597][ T10] usb 6-1: SerialNumber: syz [ 34.004425][ T10] usb 6-1: config 0 descriptor?? [ 34.023841][ T10] smsc75xx v1.0.0 [ 34.362603][ T356] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 34.513545][ T356] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 34.521863][ T356] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.532066][ T356] usb 3-1: config 0 has no interface number 0 [ 34.538218][ T356] usb 3-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 34.552701][ T356] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 34.561829][ T356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.569887][ T356] usb 3-1: Product: syz [ 34.574165][ T356] usb 3-1: Manufacturer: syz [ 34.578773][ T356] usb 3-1: SerialNumber: syz [ 34.584149][ T356] usb 3-1: config 0 descriptor?? [ 34.590060][ T356] asix 3-1:0.251: probe with driver asix failed with error -22 [ 34.625764][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 34.636712][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 34.724001][ T739] tipc: Started in network mode [ 34.728967][ T739] tipc: Node identity de8de24f322d, cluster identity 4711 [ 34.736312][ T739] tipc: Enabled bearer , priority 0 [ 34.744716][ T739] syzkaller0: entered promiscuous mode [ 34.750263][ T739] syzkaller0: entered allmulticast mode [ 34.757956][ T738] tipc: Resetting bearer [ 34.765341][ T738] tipc: Disabling bearer [ 34.843781][ T356] usb 3-1: USB disconnect, device number 5 [ 34.904141][ T745] __vm_enough_memory: pid: 745, comm: syz.1.155, bytes: 2199023259648 not enough memory for the allocation [ 35.257808][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 35.280632][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 35.300064][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 35.319499][ T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 35.337578][ T10] usb 6-1: USB disconnect, device number 3 [ 35.497765][ T770] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.745400][ T786] syzkaller1: entered promiscuous mode [ 35.756341][ T786] syzkaller1: entered allmulticast mode [ 36.113883][ T800] rust_binder: Failure in copy_transaction_data: ENOMEM [ 36.113922][ T800] rust_binder: 799:800 transaction call to 799:0 failed ENOMEM, code 0 size 18446744073709551368-24 [ 36.133043][ T10] rust_binder: 799: undelivered TRANSACTION_ERROR: 29201 [ 36.399229][ T805] kvm: kvm [804]: vcpu1, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 36.668351][ T36] kauditd_printk_skb: 28 callbacks suppressed [ 36.668373][ T36] audit: type=1326 audit(1785957784.070:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=817 comm="syz.2.183" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde7ed9e0d9 code=0x0 [ 36.722582][ T36] audit: type=1400 audit(1785957784.120:227): avc: denied { read write } for pid=823 comm="syz.5.185" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 36.726174][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 36.746014][ T36] audit: type=1400 audit(1785957784.130:228): avc: denied { open } for pid=823 comm="syz.5.185" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 36.782414][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 37.103707][ T36] audit: type=1400 audit(1785957784.510:229): avc: denied { read } for pid=836 comm="syz.5.189" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.143458][ T837] input: syz1 as /devices/virtual/input/input5 [ 37.332981][ T10] rust_binder: 842: undelivered TRANSACTION_COMPLETE [ 37.346897][ T10] rust_binder: 842: undelivered TRANSACTION_COMPLETE [ 37.353933][ T65] rust_binder: 842: undelivered transaction 12, process died [ 37.361338][ T65] rust_binder: 842: undelivered transaction 11, process died [ 37.943900][ T65] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.961606][ T864] kvm: pic: non byte write [ 38.093615][ T65] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 38.104580][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.115666][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.125823][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 38.139576][ T65] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 38.148696][ T65] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 38.156903][ T65] usb 3-1: Manufacturer: syz [ 38.162051][ T65] usb 3-1: config 0 descriptor?? [ 38.252584][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.402578][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 38.408731][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.418919][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 38.428527][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 38.438328][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 38.446371][ T10] usb 2-1: SerialNumber: syz [ 38.452766][ T10] usb 2-1: cannot find UAC_HEADER [ 38.459480][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 38.473463][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.570723][ T65] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 38.586007][ T65] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 38.594632][ T65] appleir 0003:05AC:8243.0005: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 38.692397][ T893] capability: warning: `syz.4.210' uses deprecated v2 capabilities in a way that may be insecure [ 38.703928][ T65] usb 2-1: USB disconnect, device number 5 [ 39.092247][ T36] audit: type=1400 audit(1785957786.490:230): avc: denied { mounton } for pid=899 comm="syz.5.212" path="/23/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 39.566421][ T36] audit: type=1400 audit(1785957786.970:231): avc: denied { relabelfrom } for pid=915 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 39.578420][ T916] syzkaller0: entered promiscuous mode [ 39.586122][ T36] audit: type=1400 audit(1785957786.970:232): avc: denied { relabelto } for pid=915 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 39.591580][ T916] syzkaller0: entered allmulticast mode [ 40.002592][ T65] usb 3-1: reset high-speed USB device number 6 using dummy_hcd [ 40.120407][ T36] audit: type=1400 audit(1785957787.520:233): avc: denied { transfer } for pid=926 comm="syz.4.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 40.120424][ T927] rust_binder: 926:927 error while translating object: EINVAL [ 40.147137][ T927] rust_binder: Failure in copy_transaction_data: EINVAL [ 40.147163][ T927] rust_binder: 926:927 transaction call to 926:0 failed EINVAL, code 0 size 88-24 [ 40.412583][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 40.562578][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 40.568728][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.578951][ T9] usb 5-1: config 0 has no interfaces? [ 40.584520][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 40.605116][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.623423][ T9] usb 5-1: config 0 descriptor?? [ 40.629460][ T937] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.629578][ T937] rust_binder: 936:937 got transaction to invalid handle 1 [ 40.643463][ T937] rust_binder: 936:937 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 40.902605][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 40.915222][ T403] usb 5-1: USB disconnect, device number 3 [ 41.099019][ T36] audit: type=1400 audit(1785957788.500:234): avc: denied { create } for pid=951 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.103584][ T9] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 41.118408][ T36] audit: type=1400 audit(1785957788.500:235): avc: denied { create } for pid=951 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.146886][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.167140][ T9] usb 2-1: config 0 has no interface number 0 [ 41.179921][ T9] usb 2-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 41.202943][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 41.212065][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.225903][ T9] usb 2-1: Product: syz [ 41.230088][ T9] usb 2-1: Manufacturer: syz [ 41.244947][ T9] usb 2-1: SerialNumber: syz [ 41.255226][ T9] usb 2-1: config 0 descriptor?? [ 41.265950][ T9] asix 2-1:0.251: probe with driver asix failed with error -22 [ 41.324240][ T954] kvm: pic: non byte write [ 41.502837][ T10] usb 3-1: USB disconnect, device number 6 [ 41.517507][ T65] usb 2-1: USB disconnect, device number 6 [ 41.844887][ T36] audit: type=1400 audit(1785957789.250:236): avc: denied { unlink } for pid=976 comm="syz.4.241" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 42.003350][ T36] audit: type=1400 audit(1785957789.410:237): avc: denied { read write } for pid=990 comm="syz.2.246" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.027938][ T36] audit: type=1400 audit(1785957789.410:238): avc: denied { open } for pid=990 comm="syz.2.246" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 42.112917][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 42.273793][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 42.280966][ T10] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 42.289285][ T10] usb 5-1: config 1 has no interface number 0 [ 42.295600][ T10] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 42.312579][ T10] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 42.331185][ T10] usb 5-1: config 1 interface 105 has no altsetting 0 [ 42.338243][ T36] audit: type=1400 audit(1785957789.740:239): avc: denied { ioctl } for pid=1010 comm="syz.1.254" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11803 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.346651][ T10] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 42.391926][ T10] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 42.400168][ T10] usb 5-1: Product: syz [ 42.404600][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 42.412190][ T10] usb 5-1: Manufacturer: syz [ 42.416892][ T10] usb 5-1: SerialNumber: syz [ 42.422613][ T984] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 42.430011][ T984] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 42.562574][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 42.574406][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 42.582611][ T9] usb 3-1: config 0 has no interface number 0 [ 42.590216][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 42.599774][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.620065][ T9] usb 3-1: Product: syz [ 42.624334][ T9] usb 3-1: Manufacturer: syz [ 42.629169][ T9] usb 3-1: SerialNumber: syz [ 42.634445][ T9] usb 3-1: config 0 descriptor?? [ 42.640883][ T9] smsc95xx v2.0.0 [ 42.733585][ T1026] rust_binder: 1025:1026 got reply transaction with no transaction stack [ 42.742143][ T1026] rust_binder: 1025:1026 transaction reply to 0:0 failed EINVAL, code 0 size 0-0 [ 42.751785][ T65] rust_binder: 1025: undelivered TRANSACTION_COMPLETE [ 42.766412][ T65] rust_binder: 1025: undelivered TRANSACTION_ERROR: 29201 [ 42.840304][ T984] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 42.860043][ T984] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 43.052596][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 43.063727][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 43.274406][ T10] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 43.487466][ T10] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, b6:bd:e7:7d:f1:ed [ 43.536614][ T36] audit: type=1400 audit(1785957790.940:240): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.564178][ T36] audit: type=1400 audit(1785957790.970:241): avc: denied { read } for pid=1038 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.587216][ T36] audit: type=1400 audit(1785957790.970:242): avc: denied { open } for pid=1038 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.612410][ T36] audit: type=1400 audit(1785957790.970:243): avc: denied { getattr } for pid=1038 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.637945][ T36] audit: type=1400 audit(1785957791.020:244): avc: denied { write } for pid=1037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.660942][ T36] audit: type=1400 audit(1785957791.020:245): avc: denied { add_name } for pid=1037 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.693835][ T149] aqc111 5-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -71 [ 43.694012][ T10] usb 5-1: USB disconnect, device number 4 [ 43.702046][ T149] aqc111 5-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -19 [ 43.715962][ T10] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 43.719816][ T149] aqc111 5-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 43.735146][ T149] aqc111 5-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 43.743835][ T149] aqc111 5-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 43.752198][ T149] aqc111 5-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 43.760434][ T149] aqc111 5-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 43.768628][ T149] aqc111 5-1:1.105 eth1: Error submitting the control message: status=-19 [ 43.777211][ T149] aqc111 5-1:1.105 eth1: Error submitting the control message: status=-19 [ 43.786103][ T149] aqc111 5-1:1.105 eth1: Error submitting the control message: status=-19 [ 43.794674][ T149] aqc111 5-1:1.105 eth1: Error submitting the control message: status=-19 [ 43.804046][ T10] aqc111 5-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 43.822195][ T10] aqc111 5-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 43.838489][ T1053] device-mapper: table: 252:0: zero-length target [ 43.845120][ T10] aqc111 5-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 43.853240][ T1053] device-mapper: ioctl: error adding target to table [ 43.860077][ T10] aqc111 5-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 43.920732][ T10] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 43.931640][ T10] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 43.941122][ T10] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 44.105946][ T1076] syzkaller0: entered promiscuous mode [ 44.111489][ T1076] syzkaller0: entered allmulticast mode [ 44.231613][ T1082] futex_wake_op: syz.4.271 tries to shift op by 144; fix this program [ 44.412612][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 44.567102][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 44.577908][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 44.600997][ T10] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 44.620214][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.636450][ T10] usb 2-1: config 0 descriptor?? [ 44.647499][ T10] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 44.687715][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 44.698983][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 44.712870][ T9] usb 3-1: USB disconnect, device number 7 [ 44.789386][ T1095] mmap: syz.4.275 (1095) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.848651][ T10] usb 2-1: USB disconnect, device number 7 [ 45.292921][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 45.453690][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 45.460317][ T10] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 45.468537][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.480275][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 45.493739][ T10] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 45.503229][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.514793][ T10] usb 2-1: config 0 descriptor?? [ 45.652589][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 45.672586][ T950] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 45.803555][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.814554][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.824319][ T950] usb 5-1: Using ep0 maxpacket: 16 [ 45.829523][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 45.838618][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.847501][ T950] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 45.855784][ T9] usb 3-1: config 0 descriptor?? [ 45.860888][ T950] usb 5-1: config 0 has no interface number 0 [ 45.867116][ T950] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 45.877985][ T950] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 45.889184][ T950] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 45.898300][ T950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.906302][ T950] usb 5-1: Product: syz [ 45.910542][ T950] usb 5-1: Manufacturer: syz [ 45.915163][ T950] usb 5-1: SerialNumber: syz [ 45.920397][ T950] usb 5-1: config 0 descriptor?? [ 45.925813][ T1115] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 45.934104][ T1115] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 45.942194][ T10] nintendo 0003:057E:2019.0006: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 46.012648][ T10] nintendo 0003:057E:2019.0006: Failed to get joycon info; ret=-38 [ 46.020665][ T10] nintendo 0003:057E:2019.0006: Failed to retrieve controller info; ret=-38 [ 46.029423][ T10] nintendo 0003:057E:2019.0006: Failed to initialize controller; ret=-38 [ 46.039151][ T10] nintendo 0003:057E:2019.0006: probe - fail = -38 [ 46.045847][ T10] nintendo 0003:057E:2019.0006: probe with driver nintendo failed with error -38 [ 46.154750][ T1115] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 46.162051][ T1115] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 46.268666][ T1111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.277308][ T1111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.287405][ T9] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 46.294854][ T9] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 46.302305][ T9] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 46.309723][ T9] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 46.317205][ T9] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 46.325331][ T9] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 46.339340][ T10] usb 2-1: USB disconnect, device number 8 [ 46.370048][ T950] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 46.889356][ T9] playstation 0003:054C:0DF2.0007: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 46.909464][ T9] input: HID 054c:0df2 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0007/input/input6 [ 46.926998][ T9] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0007/input/input7 [ 46.963595][ T9] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:0DF2.0007/input/input8 [ 46.990929][ T9] playstation 0003:054C:0DF2.0007: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000 [ 47.003661][ T1130] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 47.033673][ T1130] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 47.041695][ T1130] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 47.049630][ T1130] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 47.057564][ T1130] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 47.065637][ T1130] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 47.073578][ T1130] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 47.081408][ T1130] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 47.092815][ T10] usb 3-1: USB disconnect, device number 8 [ 47.099212][ T1130] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 47.432614][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 47.562590][ T9] usb 2-1: device descriptor read/64, error -71 [ 47.781536][ T950] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 47.792071][ T950] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 47.804436][ T950] asix 5-1:0.34: probe with driver asix failed with error -71 [ 47.812861][ T9] usb 2-1: device descriptor read/64, error -71 [ 47.819279][ T950] usb 5-1: USB disconnect, device number 5 [ 48.062611][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 48.192614][ T9] usb 2-1: device descriptor read/64, error -71 [ 48.385647][ T1152] tipc: Started in network mode [ 48.390575][ T1152] tipc: Node identity ee31b9c4e87c, cluster identity 4711 [ 48.397853][ T1152] tipc: Enabled bearer , priority 0 [ 48.414476][ T1152] syzkaller0: entered promiscuous mode [ 48.420047][ T1152] syzkaller0: entered allmulticast mode [ 48.425980][ T1152] tipc: Resetting bearer [ 48.432595][ T9] usb 2-1: device descriptor read/64, error -71 [ 48.448020][ T1151] tipc: Resetting bearer [ 48.458692][ T1151] tipc: Disabling bearer [ 48.497183][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 48.497202][ T36] audit: type=1400 audit(1785957795.900:257): avc: denied { mount } for pid=1153 comm="syz.4.297" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 48.525538][ T36] audit: type=1400 audit(1785957795.900:258): avc: denied { search } for pid=1153 comm="syz.4.297" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 48.552689][ T9] usb usb2-port1: attempt power cycle [ 48.693030][ T36] audit: type=1400 audit(1785957796.100:259): avc: denied { read append } for pid=1155 comm="syz.2.298" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 48.720776][ T36] audit: type=1400 audit(1785957796.100:260): avc: denied { open } for pid=1155 comm="syz.2.298" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 48.750995][ T36] audit: type=1400 audit(1785957796.100:261): avc: denied { ioctl } for pid=1155 comm="syz.2.298" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 48.775406][ T36] audit: type=1400 audit(1785957796.120:262): avc: denied { create } for pid=1157 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 48.786969][ T1158] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 48.794782][ T36] audit: type=1400 audit(1785957796.120:263): avc: denied { write } for pid=1157 comm="syz.2.299" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 48.829439][ T36] audit: type=1400 audit(1785957796.120:264): avc: denied { open } for pid=1157 comm="syz.2.299" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 48.877136][ T1160] kvm: pic: single mode not supported [ 48.877588][ T1160] kvm: pic: level sensitive irq not supported [ 48.883810][ T1160] kvm: pic: single mode not supported [ 48.889887][ T1160] kvm: pic: level sensitive irq not supported [ 48.901898][ T1160] kvm: pic: single mode not supported [ 48.908035][ T1160] kvm: pic: level sensitive irq not supported [ 48.913377][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 48.963891][ T9] usb 2-1: device descriptor read/8, error -71 [ 48.999525][ T36] audit: type=1326 audit(1785957796.400:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1164 comm="syz.2.302" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde7ed9e0d9 code=0x0 [ 49.104442][ T9] usb 2-1: device descriptor read/8, error -71 [ 49.338983][ T36] audit: type=1400 audit(1785957796.740:266): avc: denied { unmount } for pid=348 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 49.352591][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 49.393598][ T9] usb 2-1: device descriptor read/8, error -71 [ 49.405977][ T1172] rust_binder: Error in use_page_slow: ESRCH [ 49.406001][ T1172] rust_binder: use_range failure ESRCH [ 49.412154][ T1172] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 49.417773][ T1172] rust_binder: Failure in copy_transaction_data: ESRCH [ 49.425752][ T1172] rust_binder: 1171:1172 transaction async to 1171:0 failed ESRCH, code 0 size 0-0 [ 49.443240][ T10] rust_binder: 1171: undelivered TRANSACTION_ERROR: 29201 [ 49.533762][ T9] usb 2-1: device descriptor read/8, error -71 [ 49.642887][ T9] usb usb2-port1: unable to enumerate USB device [ 49.903145][ T1186] tipc: Enabled bearer , priority 0 [ 49.910217][ T1186] syzkaller0: entered promiscuous mode [ 49.915762][ T1186] syzkaller0: entered allmulticast mode [ 49.922631][ T1185] tipc: Resetting bearer [ 49.929206][ T1185] tipc: Disabling bearer [ 50.866317][ T1221] futex_wake_op: syz.5.321 tries to shift op by 144; fix this program [ 51.020236][ T1225] kvm: pic: level sensitive irq not supported [ 51.208932][ T1235] netlink: 'syz.1.326': attribute type 4 has an invalid length. [ 51.250356][ T1235] netlink: 'syz.1.326': attribute type 4 has an invalid length. [ 51.780338][ T1266] syzkaller0: entered promiscuous mode [ 51.792125][ T1266] syzkaller0: entered allmulticast mode [ 52.072669][ T1290] GUP no longer grows the stack in syz.4.345 (1290): 200000005000-200000008000 (200000004000) [ 52.093371][ T1290] CPU: 0 UID: 0 PID: 1290 Comm: syz.4.345 Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 52.093416][ T1290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.093438][ T1290] Call Trace: [ 52.093445][ T1290] [ 52.093454][ T1290] __dump_stack+0x21/0x30 [ 52.093493][ T1290] dump_stack_lvl+0x140/0x1c0 [ 52.093520][ T1290] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.093545][ T1290] ? find_vma+0xd3/0x120 [ 52.093566][ T1290] dump_stack+0x19/0x20 [ 52.093590][ T1290] fixup_user_fault+0x616/0x6a0 [ 52.093614][ T1290] fault_in_user_writeable+0x75/0xe0 [ 52.093639][ T1290] futex_lock_pi+0x2ed/0xa70 [ 52.093665][ T1290] ? futex_unqueue+0x136/0x160 [ 52.093689][ T1290] ? __cfi_futex_lock_pi+0x10/0x10 [ 52.093717][ T1290] ? __cfi_futex_wake_mark+0x10/0x10 [ 52.093745][ T1290] ? futex_setup_timer+0xb4/0xd0 [ 52.093768][ T1290] ? __cfi_futex_wake_mark+0x10/0x10 [ 52.093797][ T1290] do_futex+0x270/0x510 [ 52.093820][ T1290] ? __cfi_do_futex+0x10/0x10 [ 52.093843][ T1290] ? __vm_munmap+0x30d/0x3d0 [ 52.093863][ T1290] __se_sys_futex+0x13c/0x320 [ 52.093884][ T1290] ? __x64_sys_futex+0x110/0x110 [ 52.093912][ T1290] ? __kasan_check_write+0x18/0x20 [ 52.093931][ T1290] __x64_sys_futex+0xe9/0x110 [ 52.093956][ T1290] x64_sys_call+0x227f/0x2ee0 [ 52.093973][ T1290] do_syscall_64+0x57/0xf0 [ 52.093994][ T1290] ? clear_bhb_loop+0x50/0xa0 [ 52.094016][ T1290] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.094038][ T1290] RIP: 0033:0x7fa16079e0d9 [ 52.094055][ T1290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.094070][ T1290] RSP: 002b:00007fa161618028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 52.094097][ T1290] RAX: ffffffffffffffda RBX: 00007fa160a25fa0 RCX: 00007fa16079e0d9 [ 52.094113][ T1290] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 52.094127][ T1290] RBP: 00007fa160835024 R08: 0000000000000000 R09: 0000000000000001 [ 52.094139][ T1290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.094152][ T1290] R13: 00007fa160a26038 R14: 00007fa160a25fa0 R15: 00007ffcae26f8e8 [ 52.094169][ T1290] [ 52.162671][ T1293] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 52.454560][ T1302] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 52.466730][ T1302] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 52.475468][ T1302] kvm: requested 134095 ns i8254 timer period limited to 200000 ns [ 52.483811][ T1302] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 52.491795][ T1302] kvm: requested 145828 ns i8254 timer period limited to 200000 ns [ 52.500342][ T1302] kvm: requested 190247 ns i8254 timer period limited to 200000 ns [ 52.642593][ T950] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 52.772615][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 52.793624][ T950] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 52.801921][ T950] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 52.812343][ T950] usb 2-1: config 220 has no interface number 2 [ 52.819725][ T950] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 52.833036][ T950] usb 2-1: config 220 interface 0 has no altsetting 0 [ 52.852687][ T950] usb 2-1: config 220 interface 76 has no altsetting 0 [ 52.865714][ T950] usb 2-1: config 220 interface 1 has no altsetting 0 [ 52.875152][ T950] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 52.884368][ T950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.892571][ T950] usb 2-1: Product: syz [ 52.897164][ T950] usb 2-1: Manufacturer: syz [ 52.902557][ T950] usb 2-1: SerialNumber: syz [ 52.933563][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.944569][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.954325][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 52.963484][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.972026][ T9] usb 3-1: config 0 descriptor?? [ 53.110444][ T950] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 53.117090][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 53.124628][ T950] usb 2-1: No valid video chain found. [ 53.130115][ T950] usb 2-1: selecting invalid altsetting 0 [ 53.138672][ T950] usb 2-1: USB disconnect, device number 13 [ 53.282595][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 53.288815][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.299795][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.310720][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 53.320430][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.335242][ T10] usb 5-1: config 0 descriptor?? [ 53.343050][ T10] hub 5-1:0.0: USB hub found [ 53.381204][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 53.389268][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 53.396461][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 53.406424][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 53.413564][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 53.420689][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 53.427841][ T9] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 53.442705][ T9] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 53.543744][ T10] hub 5-1:0.0: 1 port detected [ 53.574957][ T1329] tipc: Started in network mode [ 53.580065][ T1329] tipc: Node identity 92b5e81e3333, cluster identity 4711 [ 53.587330][ T9] cp2112 0003:10C4:EA90.0008: Part Number: 0x82 Device Version: 0xFE [ 53.587603][ T1329] tipc: Enabled bearer , priority 0 [ 53.604662][ T1329] tipc: Enabling of bearer rejected, already enabled [ 53.613831][ T1328] tipc: Disabling bearer [ 54.152298][ T10] hub 5-1:0.0: activate --> -90 [ 54.357777][ T1318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.366418][ T1318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.398489][ T9] usb 3-1: USB disconnect, device number 9 [ 54.775300][ T9] usb 5-1: USB disconnect, device number 6 [ 54.781560][ T10] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 54.788490][ T10] usb 5-1-port1: attempt power cycle [ 54.974977][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 54.974994][ T36] audit: type=1400 audit(1785957802.380:275): avc: denied { create } for pid=1349 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 55.000942][ T36] audit: type=1400 audit(1785957802.380:276): avc: denied { sys_admin } for pid=1349 comm="syz.2.366" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 55.022149][ T36] audit: type=1400 audit(1785957802.400:277): avc: denied { unmount } for pid=1349 comm="syz.2.366" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.821757][ T36] audit: type=1400 audit(1785957803.220:278): avc: denied { watch watch_reads } for pid=1379 comm="syz.2.379" path="/90" dev="tmpfs" ino=531 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.844460][ T36] audit: type=1400 audit(1785957803.230:279): avc: denied { associate } for pid=1381 comm="syz.2.379" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 56.959837][ T36] audit: type=1400 audit(1785957804.360:280): avc: denied { write } for pid=1401 comm="syz.5.387" name="dynamic_events" dev="tracefs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 57.342295][ T1416] netlink: 188 bytes leftover after parsing attributes in process `syz.2.393'. [ 57.499385][ T1426] fuse: Bad value for 'fd' [ 57.561809][ T1438] futex_wake_op: syz.2.402 tries to shift op by 144; fix this program [ 57.923703][ T36] audit: type=1400 audit(1785957805.330:281): avc: denied { execute } for pid=1456 comm="syz.1.410" path="/118/file1" dev="tmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.487030][ T36] audit: type=1400 audit(1785957805.890:282): avc: denied { shutdown } for pid=1466 comm="syz.5.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.549690][ T1471] bridge0: entered allmulticast mode [ 58.728293][ T1485] Zero length message leads to an empty skb [ 58.754552][ T36] audit: type=1326 audit(1785957806.160:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1484 comm="syz.4.421" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa16079e0d9 code=0x0 [ 58.838406][ T1490] kvm: pic: single mode not supported [ 58.838423][ T1490] kvm: pic: level sensitive irq not supported [ 58.847674][ T1490] kvm: pic: single mode not supported [ 58.853792][ T1490] kvm: pic: level sensitive irq not supported [ 58.876131][ T1502] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 58.958199][ T36] audit: type=1400 audit(1785957806.360:284): avc: denied { map } for pid=1507 comm="syz.1.429" path="socket:[16461]" dev="sockfs" ino=16461 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.064453][ T1514] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 59.081494][ T1514] kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 59.098251][ T1514] kvm: requested 86323 ns i8254 timer period limited to 200000 ns [ 59.118120][ T1514] kvm: requested 131581 ns i8254 timer period limited to 200000 ns [ 59.134958][ T1514] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 59.150961][ T1514] kvm: requested 14247 ns i8254 timer period limited to 200000 ns [ 59.167084][ T1514] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 59.183787][ T1514] kvm: requested 185219 ns i8254 timer period limited to 200000 ns [ 59.200225][ T1514] kvm: requested 56152 ns i8254 timer period limited to 200000 ns [ 59.712621][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 59.880168][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 59.886461][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.905106][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.925041][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 59.944387][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.963499][ T9] usb 2-1: config 0 descriptor?? [ 59.973420][ T9] hub 2-1:0.0: USB hub found [ 60.173394][ T9] hub 2-1:0.0: 29 ports detected [ 60.178577][ T9] hub 2-1:0.0: insufficient power available to use all downstream ports [ 60.207167][ T1553] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 60.239409][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 60.239426][ T36] audit: type=1400 audit(1785957807.640:287): avc: denied { wake_alarm } for pid=1555 comm="syz.2.448" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.311465][ T36] audit: type=1400 audit(1785957807.710:288): avc: denied { connect } for pid=1557 comm="syz.2.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.312508][ T1558] netlink: 'syz.2.449': attribute type 11 has an invalid length. [ 60.373805][ T1532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.382457][ T1532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.601150][ T9] usb 2-1: USB disconnect, device number 14 [ 60.878653][ T36] audit: type=1400 audit(1785957808.280:289): avc: denied { create } for pid=1568 comm="syz.2.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.879054][ T1569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 61.728697][ T36] audit: type=1400 audit(1785957809.140:290): avc: denied { cmd } for pid=1602 comm="iou-wrk-1603" path="socket:[16950]" dev="sockfs" ino=16950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 62.127310][ T36] audit: type=1400 audit(1785957809.540:291): avc: denied { create } for pid=1614 comm="syz.2.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 62.322595][ T310] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 62.472597][ T310] usb 6-1: Using ep0 maxpacket: 16 [ 62.478908][ T310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.489163][ T310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.499351][ T310] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 62.508499][ T310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.516512][ T310] usb 6-1: Product: syz [ 62.520674][ T310] usb 6-1: Manufacturer: syz [ 62.525278][ T310] usb 6-1: SerialNumber: syz [ 62.602587][ T946] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 62.732501][ T310] usb 6-1: 0:2 : does not exist [ 62.739152][ T310] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 62.749640][ T310] usb 6-1: USB disconnect, device number 4 [ 62.753710][ T946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.766917][ T946] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 62.776054][ T946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.784778][ T946] usb 2-1: config 0 descriptor?? [ 62.822596][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 62.973500][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 62.981912][ T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 62.993731][ T9] usb 5-1: config 220 has no interface number 2 [ 63.000113][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 63.013419][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 63.020290][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 63.027221][ T946] usbhid 2-1:0.0: can't add hid device: -71 [ 63.033259][ T946] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 63.041159][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 63.049088][ T946] usb 2-1: USB disconnect, device number 15 [ 63.056395][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 63.065837][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.074147][ T9] usb 5-1: Product: syz [ 63.078525][ T9] usb 5-1: Manufacturer: syz [ 63.083163][ T9] usb 5-1: SerialNumber: syz [ 63.144597][ T1630] overlayfs: failed to clone upperpath [ 63.171151][ T36] audit: type=1400 audit(1785957810.580:292): avc: denied { bind } for pid=1632 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.190595][ T36] audit: type=1400 audit(1785957810.580:293): avc: denied { listen } for pid=1632 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.291881][ T9] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 63.308742][ T9] usb 5-1: No valid video chain found. [ 63.316386][ T9] usb 5-1: selecting invalid altsetting 0 [ 63.333470][ T9] usb 5-1: USB disconnect, device number 11 [ 63.512577][ T946] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 63.525017][ T36] audit: type=1400 audit(1785957810.940:294): avc: denied { ioctl } for pid=1652 comm="syz.5.485" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 63.660320][ T1659] tipc: Can't bind to reserved service type 0 [ 63.666475][ T36] audit: type=1400 audit(1785957811.070:295): avc: denied { bind } for pid=1658 comm="syz.5.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.673645][ T946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.718446][ T946] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 63.737704][ T946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.753342][ T946] usb 2-1: config 0 descriptor?? [ 64.008948][ T36] audit: type=1400 audit(1785957811.420:296): avc: denied { map } for pid=1682 comm="syz.5.496" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 64.366517][ T1624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.380683][ T1624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.572956][ T946] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 64.585792][ T946] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 64.591725][ T1703] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 64.595220][ T1703] rust_binder: Read failure Err(EFAULT) in pid:209 [ 64.618665][ T1703] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 64.633003][ T1703] rust_binder: Read failure Err(EFAULT) in pid:209 [ 64.643093][ T1703] rust_binder: validate_parent_fixup: new_min_offset=68, sg_entry.length=0 [ 64.649687][ T1703] rust_binder: 1702:1703 error while translating object: EINVAL [ 64.668100][ T1703] rust_binder: Failure in copy_transaction_data: EINVAL [ 64.668134][ T1703] rust_binder: 1702:1703 transaction call to 1702:0 failed EINVAL, code 0 size 112-24 [ 64.685694][ T310] rust_binder: 1702: undelivered TRANSACTION_ERROR: 29201 [ 64.743108][ T1707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.505'. [ 64.957953][ T946] usb 2-1: USB disconnect, device number 16 [ 64.958034][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 65.520229][ T1752] incfs: Can't find or create .index dir in ./cgroup [ 65.532821][ T1752] incfs: mount failed -22 [ 65.641790][ T1764] fuse: Bad value for 'fd' [ 65.723508][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 65.723525][ T36] audit: type=1400 audit(1785957813.140:299): avc: denied { append } for pid=1767 comm="syz.1.530" name="uprobe_events" dev="tracefs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 65.892580][ T946] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 65.912035][ T1783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.535'. [ 66.052584][ T946] usb 5-1: Using ep0 maxpacket: 32 [ 66.063517][ T946] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 66.088639][ T946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 66.110458][ T946] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 66.141285][ T946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.167817][ T946] usb 5-1: config 0 descriptor?? [ 66.384030][ T946] usbhid 5-1:0.0: can't add hid device: -71 [ 66.390095][ T946] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 66.399586][ T946] usb 5-1: USB disconnect, device number 12 [ 66.652625][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 66.803663][ T9] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 66.814627][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.825634][ T946] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 66.833266][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.854637][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 66.882006][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 66.900713][ T9] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 66.916529][ T9] usb 6-1: Manufacturer: syz [ 66.926994][ T9] usb 6-1: config 0 descriptor?? [ 67.002651][ T946] usb 5-1: Using ep0 maxpacket: 32 [ 67.013712][ T946] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 67.025973][ T946] usb 5-1: config 0 interface 0 has no altsetting 0 [ 67.040049][ T946] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 67.059331][ T946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.073284][ T946] usb 5-1: config 0 descriptor?? [ 67.130894][ T36] audit: type=1400 audit(1785957814.540:300): avc: denied { write } for pid=1837 comm="syz.2.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 67.277207][ T36] audit: type=1400 audit(1785957814.690:301): avc: denied { sqpoll } for pid=1855 comm="syz.2.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.402828][ T9] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 67.410145][ T9] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 67.434079][ T1856] cgroup: fork rejected by pids controller in /syz2 [ 67.534888][ T946] usbhid 5-1:0.0: can't add hid device: -71 [ 67.558056][ T9] appleir 0003:05AC:8243.0009: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 67.570499][ T946] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 67.594623][ T946] usb 5-1: USB disconnect, device number 13 [ 67.772582][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.912604][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 67.923566][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.933442][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 67.943567][ T10] usb 1-1: Dual-Role OTG device on HNP port [ 67.949669][ T10] usb 1-1: New USB device found, idVendor=0000, idProduct=0001, bcdDevice= 6.12 [ 67.958816][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.967827][ C0] ------------[ cut here ]------------ [ 67.973291][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 67.980027][ C0] WARNING: CPU: 0 PID: 315 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x210/0x3c0 [ 67.989929][ C0] Modules linked in: [ 67.993833][ C0] CPU: 0 UID: 0 PID: 315 Comm: udevd Not tainted syzkaller #0 24d49bbd58fde8b05052ac524e35fadc70590708 [ 68.004856][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.014903][ C0] RIP: 0010:usb_ep_enable+0x210/0x3c0 [ 68.020286][ C0] Code: 4d 00 48 c7 c0 20 50 6d 86 49 c7 c0 40 50 6d 86 4c 0f 44 c0 48 c7 c7 e0 4f 6d 86 48 c7 c6 ac 04 1d 87 44 89 f2 e8 e0 c5 4b fd <0f> 0b e9 4c ff ff ff e8 a4 ed ce fd 49 bc 00 00 00 00 00 fc ff df [ 68.039894][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010046 [ 68.045956][ C0] RAX: 11f09588275a9a00 RBX: ffff888104fbc0b0 RCX: ffff88810db38000 [ 68.053934][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 68.061894][ C0] RBP: ffffc900000078a0 R08: ffff8881f6e294d3 R09: 1ffff1103edc529a [ 68.069867][ C0] R10: dffffc0000000000 R11: ffffed103edc529b R12: dffffc0000000000 [ 68.077826][ C0] R13: ffff888104fbc0b8 R14: 0000000000000081 R15: ffff88811a05c53a [ 68.085797][ C0] FS: 00007fe9a6dd4880(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 68.094731][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.101310][ C0] CR2: 00007fde7edeb7c0 CR3: 000000010ebe2000 CR4: 00000000003526b0 [ 68.109283][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 68.117246][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 68.125205][ C0] Call Trace: [ 68.128473][ C0] [ 68.131301][ C0] hidg_set_alt+0x138/0xa70 [ 68.135790][ C0] set_config+0x812/0xd10 [ 68.140136][ C0] composite_setup+0x1885/0x32f0 [ 68.145071][ C0] ? __kasan_check_write+0x18/0x20 [ 68.150191][ C0] configfs_composite_setup+0xc6/0x110 [ 68.155643][ C0] dummy_timer+0x2eee/0x4900 [ 68.160218][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 68.165427][ C0] ? __kasan_check_read+0x15/0x20 [ 68.170448][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 68.175384][ C0] ? timerqueue_del+0xd7/0x130 [ 68.180154][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 68.185517][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 68.190455][ C0] __hrtimer_run_queues+0x3ae/0x8e0 [ 68.195671][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 68.200801][ C0] ? read_tsc+0xd/0x20 [ 68.204879][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 68.210938][ C0] hrtimer_run_softirq+0x159/0x560 [ 68.216049][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 68.221255][ C0] handle_softirqs+0x1aa/0x620 [ 68.226009][ C0] __irq_exit_rcu+0x47/0xb0 [ 68.230504][ C0] irq_exit_rcu+0xd/0x30 [ 68.234752][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 68.240380][ C0] [ 68.243305][ C0] [ 68.246218][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 68.252209][ C0] RIP: 0010:memset_orig+0x60/0xb0 [ 68.257241][ C0] Code: 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 <89> d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 48 [ 68.276842][ C0] RSP: 0018:ffffc9000b78f4a0 EFLAGS: 00000246 [ 68.282906][ C0] RAX: 0000000000000000 RBX: 0000000000000cc0 RCX: 0000000000000000 [ 68.290888][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff888121701308 [ 68.298863][ C0] RBP: ffffc9000b78f4b8 R08: ffff888108fc4c37 R09: 0000000000000000 [ 68.306863][ C0] R10: ffff888121701308 R11: ffffed10211f8987 R12: 0000000000000000 [ 68.314826][ C0] R13: ffff888121701040 R14: ffff888121701308 R15: ffff888101a418c0 [ 68.322789][ C0] ? kasan_save_alloc_info+0x30/0x50 [ 68.328090][ C0] __kasan_slab_alloc+0x73/0x90 [ 68.332964][ C0] kmem_cache_alloc_lru_noprof+0x1c2/0x410 [ 68.338806][ C0] ? alloc_inode+0xa9/0x270 [ 68.343317][ C0] alloc_inode+0xa9/0x270 [ 68.347653][ C0] iget_locked+0x198/0x9a0 [ 68.352051][ C0] ? __cfi_iget_locked+0x10/0x10 [ 68.356980][ C0] ? __kasan_check_write+0x18/0x20 [ 68.362074][ C0] ? rwsem_read_trylock+0x275/0x5a0 [ 68.367266][ C0] ? do_sys_openat2+0x134/0x1d0 [ 68.372105][ C0] ? downgrade_write+0x470/0x470 [ 68.377040][ C0] kernfs_get_inode+0x50/0x830 [ 68.381798][ C0] kernfs_iop_lookup+0x213/0x320 [ 68.386766][ C0] __lookup_slow+0x2e2/0x420 [ 68.391359][ C0] ? lookup_one_len+0x300/0x300 [ 68.396195][ C0] ? down_read+0x7f/0xe0 [ 68.400426][ C0] ? __cfi_kernfs_iop_permission+0x10/0x10 [ 68.406229][ C0] lookup_slow+0x57/0x80 [ 68.410499][ C0] link_path_walk+0x991/0xeb0 [ 68.415183][ C0] path_openat+0x298/0x35a0 [ 68.419690][ C0] ? kasan_save_alloc_info+0x3a/0x50 [ 68.424989][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 68.430010][ C0] ? getname+0x1b/0x30 [ 68.434067][ C0] ? x64_sys_call+0xe69/0x2ee0 [ 68.438828][ C0] ? do_syscall_64+0x57/0xf0 [ 68.443402][ C0] ? do_filp_open+0x440/0x440 [ 68.448074][ C0] do_filp_open+0x1f2/0x440 [ 68.452565][ C0] ? __cfi_do_filp_open+0x10/0x10 [ 68.457596][ C0] ? alloc_fd+0x4c1/0x570 [ 68.461913][ C0] do_sys_openat2+0x134/0x1d0 [ 68.466596][ C0] ? do_sys_open+0x100/0x100 [ 68.471196][ C0] __x64_sys_openat+0x13a/0x170 [ 68.476047][ C0] x64_sys_call+0xe69/0x2ee0 [ 68.480622][ C0] do_syscall_64+0x57/0xf0 [ 68.485024][ C0] ? clear_bhb_loop+0x50/0xa0 [ 68.489696][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.495610][ C0] RIP: 0033:0x7fe9a66a7407 [ 68.500020][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 68.519657][ C0] RSP: 002b:00007fff7b2e7fc0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 68.528080][ C0] RAX: ffffffffffffffda RBX: 00007fe9a6dd4880 RCX: 00007fe9a66a7407 [ 68.536038][ C0] RDX: 0000000000080000 RSI: 00007fff7b2e8140 RDI: ffffffffffffff9c [ 68.543996][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 68.551965][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e8cf3987f5 [ 68.559936][ C0] R13: 000055e8cf3987f5 R14: 0000000000000001 R15: 000055e8cf3b3140 [ 68.567916][ C0] [ 68.570925][ C0] ---[ end trace 0000000000000000 ]--- [ 68.576401][ C0] configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED! [ 68.585177][ T10] usb 1-1: can't set config #1, error -32 [ 68.672573][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 68.678744][ T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 68.686895][ T9] usb 2-1: config 0 has no interface number 0 [ 68.693023][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 68.703029][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 68.712566][ T310] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 68.714379][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 68.729639][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.737637][ T9] usb 2-1: Product: syz [ 68.741790][ T9] usb 2-1: Manufacturer: syz [ 68.746388][ T9] usb 2-1: SerialNumber: syz [ 68.751527][ T9] usb 2-1: config 0 descriptor?? [ 68.756749][ T1921] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 68.763922][ T1921] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 68.842580][ T310] usb 6-1: device descriptor read/64, error -32 [ 68.972527][ T1921] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 68.979991][ T1921] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 69.082618][ T310] usb 6-1: device descriptor read/64, error -32 [ 69.188017][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 69.322572][ T310] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 69.452598][ T310] usb 6-1: device descriptor read/64, error -32 [ 70.332827][ T31] usb 6-1: USB disconnect, device number 5 [ 70.990946][ T1921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.999597][ T1921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.008177][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 71.018403][ T9] asix 2-1:0.34: probe with driver asix failed with error -71 [ 71.027188][ T9] usb 2-1: USB disconnect, device number 17