last executing test programs: 26.1546706s ago: executing program 2 (id=3): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000000010101000000000000000002000002240001801400018008000100e000000108000200e00000010c000280050001000000000014000f80"], 0x4c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)="703a732f5f202e2f66696c65303a30f598a24f5aa26e5fae28eb", 0x1a) r3 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000400)={0x3, 0x0, 0x98, &(0x7f0000000340)={0x9, 0xffffffffffffffff, 0x10}}) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @local}, 0x1, 0x4, 0x3}}, 0x2e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x80000000000fffe, 0x40000001}) fcntl$lock(r4, 0x24, &(0x7f00000000c0)={0x2, 0x2, 0x401, 0x401}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f00000002c0), &(0x7f0000000300)=0x30) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="ff010400007d89a408ffffff7f44", @ANYRES16=0x0, @ANYBLOB="010326bd7000fbdbdf051c000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000006) timer_settime(0x0, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r7, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34000000000000000000000007000000441d0d"], 0x38}}], 0x1, 0x46000) socket(0x2c, 0x3, 0xbe76) memfd_secret(0x80000) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x3f4, 0x0) ioctl$BLKSECTGET(r8, 0x1267, &(0x7f00000000c0)) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000480), &(0x7f0000000500)=0x80) 26.034319805s ago: executing program 2 (id=5): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101180, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x1, 0x80000, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x7, 0x4) readv(r2, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1) 26.002046897s ago: executing program 2 (id=6): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000300)={0xc0, 0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/fail_page_alloc/min-order\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000003640)={0x2020}, 0x2020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x24000055}, 0x6000805) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000100)=0x6, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="8000379bfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x4e21, 0xfffffffe, @loopback, 0x4}, 0x1c) 10.969996828s ago: executing program 32 (id=6): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000300)={0xc0, 0x0, 0x4000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/fail_page_alloc/min-order\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000003640)={0x2020}, 0x2020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x24000055}, 0x6000805) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000100)=0x6, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="8000379bfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x4e21, 0xfffffffe, @loopback, 0x4}, 0x1c) 6.582878342s ago: executing program 1 (id=123): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x22020600) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x70}, 0x80) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) 5.655079706s ago: executing program 1 (id=129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x5, 0x0, 0x2080, {0x0, 0x8000000, {}, 0x0, 0x5}, {'\x00', '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}}) 5.640448626s ago: executing program 1 (id=130): r0 = open(&(0x7f0000000080)='./file1\x00', 0xc8141, 0x5) fcntl$setlease(r0, 0x400, 0x0) fcntl$getflags(r0, 0x401) syz_usb_connect(0x0, 0x64, &(0x7f0000000040)=ANY=[], 0x0) 5.175857308s ago: executing program 3 (id=135): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x0) ftruncate(r0, 0x800799c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x44, 0xfffffffe}]}, 0x10) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendfile(r1, r0, 0x0, 0xfeff) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0x1a, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000300)=0x1a, 0x4) 5.114917421s ago: executing program 3 (id=136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001900150000000000ffffffff0a0000000202000000000000240009801c00000000000000080005"], 0x40}], 0x1}, 0x0) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b6a57e4086805b0bc5e101020301090290010200000000090400f3020e0100000a2401002200020102092100000001220000090500000000000000a7008d566539461c701919d99a91c3af134dfaf61ea66b8f08812f47d90c55c91f11c4a6d847caf7b449c6c760e60f6b890d99ed23074bf2538ca7bba727dfe7c00b90d0bc7f2da56768ed5ce8df38c07183564831596fd52da49a92adafa6277df5a120c898fc51ca04089f110dfbe1b258e9b9a83bf95fb0a4a24ca6acae78e1c291f671fcdca77c7128d319f7a4b51bbc2ed4bab8aac95498fb6033f760602c1a8b1eac215c072501000000000905000000000000000725010000000007250100000000090400000eb03748000a2401000000020102052405", @ANYRESHEX=0x0], 0x0) r1 = syz_clone(0x10124000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000280)=0x0) r3 = eventfd2(0x200, 0x1) io_submit(r2, 0x2, &(0x7f00000004c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x7, r0, &(0x7f00000002c0)="819731cffb2ca114e3476c41516330004c8348c5c9ddcd69c7af3d4b17b4778a3e1391beab776b13ba69cddfa8b17dcd31a749a4c9407acbf1f5653db65262e924c839f712c0a560b23a09af74b120d158864d57d372c158b37906532c1a0787ec8f8eacc8e5e66225fa02e72119826eb512b04930a4c922c6d3a0583f5b47ecc63c5626e0b4f295751b96c686e842e59b4e619292e9f193adb2f5b13c0e3c3ac3ac16", 0xa3, 0x9, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x3, r0, &(0x7f00000003c0)="6b4d0ba065800fec070e5912cd71c6d527e403d040ff61f42954b963024f6d01854088dd466d74cf340420629b12894c7cb40d0ad39f58000a2d00c17f8365ed1a2a49dfc6f99b6c7b2ec4dd53e4d6301fc4fd207dbd829575368f7eb964064fc0f797b9dca805a28165147a03add2173d716c517586dd084f0e03a82cc6db3e275633d4c22958fc4365", 0x8a, 0xfffffffffffffe01, 0x0, 0x3, r3}]) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x363, 0x200003706) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) ioctl$XFS_IOC_FSGEOMETRY_V4(r4, 0x8070587c, &(0x7f0000000040)) sendmmsg(r5, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa0, 0x0) ptrace$pokeuser(0x6, r1, 0x388, 0x4f0) 3.84428249s ago: executing program 3 (id=140): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='!i', 0x2) recvfrom$inet_nvme(r2, &(0x7f00000000c0)=""/89, 0x59, 0x2001, &(0x7f0000000280)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x8}, 0x80) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f0000003b40)) write(r3, &(0x7f0000000000)='3', 0x4e) io_setup(0x7fff, &(0x7f0000000200)) 3.750945565s ago: executing program 3 (id=142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x82}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 3.542022004s ago: executing program 3 (id=149): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d12a0000000109022200010000000009040000000e010000082403"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000026c0)=0x40) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)=0x8000) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) (async) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d12a0000000109022200010000000009040000000e010000082403"], 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) (async) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000026c0)=0x40) (async) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)=0x8000) (async) write(r0, 0x0, 0x0) (async) 2.624367467s ago: executing program 1 (id=157): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x60) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x40, 0x80, 0x9, 0x10, @empty, @private1, 0x7, 0x700, 0x4, 0xd867}}) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="f9d6daf3afe4a4b9c5a3f613a2bc39608804056e1b764462b9cf9abbd70aa981449e893fe40a8807fad140bbd8ec68e221cffb2c858bc7b66c072f4a6d1474f678c6a0abce5eecc2a243ab407122c9c711b2c0a7b08cb95c28bfc59948ae858ad064ea6983b7ab1a73824008cd68e015c4215802efbea94a055c24b9b5cc21bb494e7a6f", 0x84}, {&(0x7f0000000140)}], 0x2, &(0x7f0000000280)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x33, 0x3, 0xa, [{@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x7}, {@broadcast, 0x4}]}, @generic={0x94, 0x10, "db0be72dc25fa80616cdc8d05915"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0xd0}}, {{&(0x7f0000000380)={0x2, 0xb, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)="4530bc1432b4cfbb9d2482209d6fc36e024b9cba923778", 0x17}], 0x1, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}}, {{&(0x7f0000000480)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000700)=[{&(0x7f00000004c0)="a86114bbc0705967e295fd16fff31a978f10485840e427c922ca71334cc69ee4769624dab4b807561760dcd2d18a663595461ddc71070b9225b634dcfa8717404d552da98a12c297178fbe860046aeb513fed5744e09aadb271e27459e17d40c8439ae5586d31c00437373600e18f010234e25b5c9599b53be7f8dad75cd232457174ec530593442d32ed68a494e", 0x8e}, {&(0x7f0000000580)="5e9b3a62a0e2ca51d9c2547eff141f90f436559ff8ebfce9448f0556991206f4778644313fa5e1a9b910a9534fba5f0a09e4cb58aa77724c5dee06a5e393b09f1ace486ac280e0cb6c1ea049352b30a9f832746cbf3ef7a71944b2a1d5dc9e9cbf7f8135d4ec53b1abf7a92ddb5d141c2faf3e49287232b13856d8fe56351eed9524b6fe6cb1ca8aab5c0fc9c09aca24486d7117057d7078a75441983730219c", 0xa0}, {&(0x7f0000000640)="5df5c0d5bef776a0f4298d56f33e91233996c1c05e47727e2b75f6f307d5f873286a0828fbd2cd23faa75e2f874c39577c5443405e168de33ea73fbfd2392425cfe485faa0162d0cbf507d54624ce805605893a9d74723710232b7f88a73a10d1868920b454263985fad54b223a816e8b2b6f6283af7502275a904815b3cfe79613eeaad4a42a780d08fa9f46ad3f39461e8baba4a9042", 0x97}], 0x3, &(0x7f0000000740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x88, 0x10, "7e6e4d4c2108bb9b7342785f5f20"}]}}}, @ip_retopts={{0x94, 0x0, 0x7, {[@rr={0x7, 0x7, 0x1d, [@empty]}, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0x1f, 0x95, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}, @remote, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2]}, @cipso={0x86, 0x43, 0x0, [{0x0, 0xf, "679a238645c9d7ba03ea475556"}, {0x1, 0xb, "8a4bfe328421be7f27"}, {0x5, 0xd, "b8e482d2eabdf8e8cd1614"}, {0x6, 0x6, "a41e660a"}, {0x7, 0x4, "56f7"}, {0x1, 0x6, "7ce8fe97"}, {0x5, 0x6, "0d6ceab9"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x3, "c8"}, @generic={0x94, 0xd, "65f15c911d46613dee3949"}]}}}, @ip_retopts={{0x98, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0xcc, 0x1, 0x2, [{@multicast1, 0x4000}, {@broadcast, 0xffffff81}, {@private=0xa010101, 0x65843fea}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x6}, {@multicast2, 0x1}, {@rand_addr=0x64010100, 0x69ab}, {@multicast1, 0xef87}, {@loopback, 0x81}]}, @timestamp={0x44, 0xc, 0x4d, 0x0, 0x0, [0xfffffff7, 0x5]}, @cipso={0x86, 0x2b, 0x1, [{0x0, 0xb, "77994b76baf1662619"}, {0x2, 0x7, "e2f083312f"}, {0x1, 0xf, "bd30e4bd78967e7d3d9af13579"}, {0x1, 0x4, "1a08"}]}, @end, @ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x10}}], 0x190}}, {{&(0x7f0000000900)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000940)="79502ca361f0ce2d4900d18b4f93ef0d7ada462b45962902fb7b6926c30b3d3deab4ea5099b9359cf034d3447b96780988c2e02f6168d179df444eca6205161503182b95e91681a613c05d4940ebe1fe4d0a1e64072701861e6d35640ac07275645626f23f970658516a32a0659b460eda2c12f84c24ea82ec0d33fe", 0x7c}], 0x1, &(0x7f0000000a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14}}], 0x30}}], 0x4, 0x11) copy_file_range(r0, 0x0, r0, &(0x7f0000000b40)=0x2, 0xfffffffffffffff7, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000b80)=0x5) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x70, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000d80)={0x6, 0x2}) (async) sched_setscheduler(0x0, 0x6, &(0x7f0000000dc0)=0xf) (async) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x8000) (async, rerun: 32) sendmsg$can_raw(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x1d, r1}, 0x10, &(0x7f0000000f80)={&(0x7f0000000f40)=@can={{0x4}, 0x1, 0x3, 0x0, 0x0, "cc7c40c16acb9d1f"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 32) r4 = getpgrp(0xffffffffffffffff) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000001000)=0x0) (async, rerun: 64) statx(r0, &(0x7f0000001040)='./file0\x00', 0x4000, 0x8, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001180)={r4, r5, r6}, 0xc) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000011c0)={0x7, 0x7, 0x0, 0xb, 0x2, 0x0, [{0x0, 0x5, 0x1000000000, '\x00', 0x282}, {0x8, 0x1000, 0xfffffffffffffff7, '\x00', 0x1012}]}) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x20, 0x3fa, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDADDIO(r7, 0x4b34, 0x4) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r8, &(0x7f0000001380)="419522c515d32b125ebd26e1f2163cdeb5745359e1ec2e7bffc51f453c7d62405ea8d49eac7c04b834eb564461c4c220ebc33281d0a446ed31f27f68310906ee98ed6206c498990af09764b36794114d7cddebcd676c5aa0d1444894160299c5d152bbcf3dfea5c0c9702a90413548c2a4168bc285d1f0acd3c6e6753b491eb6e0dbd821e67cda81175869642057a384189e8c3fd69a7ad63a7af860bbd0ed0c65202bcfd0d01875ef5d56c5a2b0d28465c64baef57cf3c7f328c780006de5ac2e305ae1d0e5a3411fd7fdd61134f9d83830b9242f357e9c8fcf7f7bb44d2719b8d0", 0xe2, 0x8000, &(0x7f0000001480)={0xa, 0x4e23, 0x34185e59, @empty, 0x10}, 0x1c) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) (async, rerun: 32) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000001500)={0x7}) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000001540)={0xffff, 0xdec, 0x8, 0xe, 0x11, "5804677d6fbfd972"}) (async) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000001580)={0x0, 0x4, 0x8000, 0x2, 0x13, "a00efec2fb59829b"}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000015c0)={'tunl0\x00', {0x2, 0x0, @multicast2}}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x44, r2, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x41}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) (async) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000001740)={r1, 0x1, 0x6, @multicast}, 0x10) 2.56709502s ago: executing program 1 (id=158): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x0, 0x48, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x1, 0x1, 0xc, 0x7}) 2.56630506s ago: executing program 1 (id=159): madvise(&(0x7f00003ca000/0x1000)=nil, 0x1000, 0x66) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file5\x00', 0x0, 0x56159817211d7953, 0x0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000b00)=[0xee00]) setregid(0x0, r0) syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2d, 0xfffffffd, 0x20000, 0x2, 0x0, 0x9, 0x7, 0x0, 0x0, 0x8, 0x10001}}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000cc0), 0x60242, 0x0) ioctl$RTC_ALM_READ(r5, 0x40187013, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000080)=r6) read$FUSE(r6, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$FUSE(r2, 0x0, 0xffffffffffffff78) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 2.372136789s ago: executing program 3 (id=160): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="12162d0000000010d804df0000000000000109022d00010000a0020904000902036784000921ac0a4001221800090581034000801587090502030004d1090d"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001100)={'bridge_slave_0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000600)="21dbf1eb1c", 0x5, 0x24048041, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), &(0x7f0000000280)=0x4) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x9, 0x200000) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000140)=""/87) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x509000, 0x0) ioctl$RTC_VL_READ(r7, 0x80047013, &(0x7f0000000300)) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f00000000c0)) 2.195070097s ago: executing program 0 (id=162): fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00', &(0x7f0000000080)='\x00', 0x1, 0x5) (async) fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00', &(0x7f0000000080)='\x00', 0x1, 0x5) syz_usb_connect$midi(0x2, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000020e809620040000102030109022c0001011810010904000002010330060905070b"], 0x0) 1.115262187s ago: executing program 4 (id=163): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) lseek(r1, 0x1, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x8cff, 0x0) 1.098365758s ago: executing program 4 (id=164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000140)='./bus\x00', &(0x7f0000000300)='tracefs\x00', 0x1000000, &(0x7f0000000340)='\x00') fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x3, 0x0, 0x9000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8000000, 0x3000, 0x8, 0x9, 0xfb, 0x8, 0x3e, 0x17, 0x0, 0xc8, 0x19}, {0xb000, 0x50000, 0xa, 0x0, 0x22, 0x5, 0x0, 0x6, 0x5, 0xb4, 0x3}, {0x0, 0xa000, 0x0, 0x5, 0x3, 0x3, 0x0, 0x19, 0x1, 0x5, 0x3, 0x81}, {0x3000, 0x1, 0x44e41e77284b2876, 0x1, 0x0, 0x42, 0xb, 0x0, 0x6, 0x7, 0xc}, {0x11f6593269eab9dc, 0x126000, 0xb, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x54000, 0x0, 0x1, 0x4, 0xad, 0x8, 0x1, 0xf7, 0x8, 0x5, 0xff}, {0x3000, 0x2000, 0xc, 0x8, 0x8, 0x5, 0x9, 0xc, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0xe000, 0xe, 0x5, 0xb, 0x7, 0x0, 0x34, 0x2, 0xb, 0x3, 0x9}, {0xa000, 0x30}, {0x70000, 0x87}, 0x80000031, 0x0, 0xeeef0000, 0x252248, 0x3, 0x8000, 0x54000, [0x6800000000000000, 0x4, 0x5d, 0xf]}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.011061213s ago: executing program 4 (id=165): sigaltstack(&(0x7f0000000000)={0x0, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000040)) 973.504464ms ago: executing program 0 (id=166): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) fcntl$setlease(r0, 0x400, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) (async) syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0xe962, 0x8, 0xfffffffd, 0x136}, 0x0, 0x0, 0x0) (async) close(0x3) (async) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) (async, rerun: 64) sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4005815) (async, rerun: 64) tkill(0x0, 0x17) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x4b, 0x0, 0x0, 0x8, 0x4, 0xa, 0xd2d0, 0x1, 0x5, 0x0, 0x91, 0xffffffff, 0x101, 0x3, 0x0, 0x7f, 0x0, 0x7, 0x40, 0x0, 0x200008, 0xa, 0xa000000}}) 560.998943ms ago: executing program 4 (id=165): sigaltstack(&(0x7f0000000000)={0x0, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000040)) 547.587514ms ago: executing program 4 (id=167): prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x79) (async) prctl$PR_GET_KEEPCAPS(0x7) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) (async) prctl$PR_GET_KEEPCAPS(0x7) 530.112315ms ago: executing program 4 (id=168): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x18, 0x0, &(0x7f0000000240)=[@acquire, @increfs={0x40046304, 0x3}, @increfs], 0x64, 0x0, &(0x7f0000000540)="bfd9cdee06749cc6d4c85318dc1d580222d66f7ef8cb1ce6638220a5568a018bf013a230cd74619432517b29b63d46a249d7d22484481eb1fdd24132c9377b4ed0ca88e1c8cef4c7c6f1cc0b2409e0d30a14c180b1e4a3fbd6e90eb7d1cf476bbf2495ed"}) io_setup(0x3ff, &(0x7f0000000500)=0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000a40)=[{0x0}, {&(0x7f00000003c0)=""/129, 0x81}, {&(0x7f0000000840)=""/240, 0xf0}], 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) pwritev2(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="a76054", 0x3}], 0x1, 0x0, 0x0, 0x17) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x2, r0, 0x0, 0x0, 0x4}]) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(0xffffffffffffffff, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x14, 0x18, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) fcntl$getflags(0xffffffffffffffff, 0x406) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r4, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x21}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2102, 0x1) exit(0xe0a1) listxattr(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) readv(r5, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/185, 0xb9}], 0x1) 83.034816ms ago: executing program 0 (id=169): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000000010101000000000000000002000002240001801400018008000100e000000108000200e00000010c000280050001000000000014000f80"], 0x4c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) socket$netlink(0x10, 0x3, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000400)={0x3, 0x0, 0x98, &(0x7f0000000340)={0x9, 0xffffffffffffffff, 0x10}}) 81.429076ms ago: executing program 0 (id=170): syz_io_uring_setup(0x3409, &(0x7f0000000080)={0x0, 0xe962, 0x8, 0xfffffffd, 0x136}, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r0, &(0x7f0000000140), 0x0, 0x0) close(0x3) r1 = socket(0xa, 0x3, 0x3a) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000004f39d14812"], 0x1c}}, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, 0x0, 0x0) 57.460187ms ago: executing program 0 (id=171): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800006, &(0x7f0000000300)=ANY=[@ANYBLOB="66b16b6b5bdd643d", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000400,\x00']) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r4, 0x400, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000100)={0x7, 0x2, 0x2, 0xffffffffffffffff, 0x4}) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x0) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r2, 0x1, 0x7e) r9 = openat$cgroup(r8, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000001200)='pids.events\x00', 0x5000000, 0x0) readv(r10, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/4077, 0xfed}], 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000001300)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001080)={0x80040, 0x0, 0x9}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000200)=0x80000002, 0x12) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r13, 0xffffffffffffffff, 0x0) accept4$unix(r0, &(0x7f0000000280)=@abs, 0xfffffffffffffffe, 0x80000) 0s ago: executing program 0 (id=172): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async, rerun: 64) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x18c) (async) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20100, 0x4) r3 = openat$incfs(r2, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x40106726, &(0x7f00000000c0)) (async) poll(&(0x7f00000001c0)=[{r0}, {r0, 0x6}, {r3, 0xa399}, {r0, 0x1000}, {r2, 0x810}, {0xffffffffffffffff, 0x20}], 0x6, 0xffffffff) (async) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c00018014000300ff0100000000000000000000e3ffff0014000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff0800074001000001240006801400040000000000000000000000000000000001"], 0xb8}}, 0x0) r4 = open(0x0, 0x30602, 0x158) setsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, 0x0) (async) recvfrom$inet_nvme(r4, &(0x7f0000000480)=""/4096, 0x1000, 0x40, &(0x7f0000001480)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x20004, &(0x7f00000000c0)={[{@uuid_on}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, 'overlay\x00'}}, {@pcr={'pcr', 0x3d, 0x2b}}]}) (async, rerun: 32) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x7fffffffffffffff) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) ioprio_set$uid(0x0, r7, 0x4004) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) kernel console output (not intermixed with test programs): cess permissive=1 [ 21.771375][ T36] audit: type=1400 audit(1789824496.960:63): avc: denied { siginh } for pid=274 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 29.950481][ T36] audit: type=1400 audit(1789824505.140:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.953057][ T286] cgroup: Unknown subsys name 'net' [ 29.973170][ T36] audit: type=1400 audit(1789824505.140:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.000460][ T36] audit: type=1400 audit(1789824505.170:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.000838][ T286] cgroup: Unknown subsys name 'devices' [ 30.145481][ T286] cgroup: Unknown subsys name 'hugetlb' [ 30.151137][ T286] cgroup: Unknown subsys name 'rlimit' [ 30.271006][ T36] audit: type=1400 audit(1789824505.460:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.294247][ T36] audit: type=1400 audit(1789824505.460:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.319018][ T36] audit: type=1400 audit(1789824505.460:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.335728][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.350989][ T36] audit: type=1400 audit(1789824505.550:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.376487][ T36] audit: type=1400 audit(1789824505.550:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.402201][ T36] audit: type=1400 audit(1789824505.590:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.402679][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.427695][ T36] audit: type=1400 audit(1789824505.590:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.305858][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.312949][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.320219][ T293] bridge_slave_0: entered allmulticast mode [ 31.326718][ T293] bridge_slave_0: entered promiscuous mode [ 31.336236][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.343308][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.350361][ T293] bridge_slave_1: entered allmulticast mode [ 31.356921][ T293] bridge_slave_1: entered promiscuous mode [ 31.383464][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.390525][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.397645][ T294] bridge_slave_0: entered allmulticast mode [ 31.404018][ T294] bridge_slave_0: entered promiscuous mode [ 31.411998][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.419283][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.426592][ T294] bridge_slave_1: entered allmulticast mode [ 31.432808][ T294] bridge_slave_1: entered promiscuous mode [ 31.507439][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.514728][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.521773][ T295] bridge_slave_0: entered allmulticast mode [ 31.528202][ T295] bridge_slave_0: entered promiscuous mode [ 31.537765][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.544879][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.551984][ T295] bridge_slave_1: entered allmulticast mode [ 31.558404][ T295] bridge_slave_1: entered promiscuous mode [ 31.573327][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.580400][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.587540][ T296] bridge_slave_0: entered allmulticast mode [ 31.593866][ T296] bridge_slave_0: entered promiscuous mode [ 31.600280][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.607382][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.614492][ T296] bridge_slave_1: entered allmulticast mode [ 31.620694][ T296] bridge_slave_1: entered promiscuous mode [ 31.718337][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.725541][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.732836][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.739922][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.766975][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.774070][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.781352][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.788440][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.809363][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.816455][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.823759][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.830798][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.850759][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.857858][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.865173][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.872231][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.904120][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.911476][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.919312][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.926892][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.934489][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.942074][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.949406][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.956901][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.974616][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.981694][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.989384][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.996442][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.026461][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.033587][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.041254][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.048312][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.056981][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.064052][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.071592][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.078676][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.090695][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.097752][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.105490][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.112516][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.175889][ T294] veth0_vlan: entered promiscuous mode [ 32.182582][ T293] veth0_vlan: entered promiscuous mode [ 32.189516][ T295] veth0_vlan: entered promiscuous mode [ 32.212272][ T294] veth1_macvtap: entered promiscuous mode [ 32.224105][ T296] veth0_vlan: entered promiscuous mode [ 32.231730][ T293] veth1_macvtap: entered promiscuous mode [ 32.255139][ T295] veth1_macvtap: entered promiscuous mode [ 32.266538][ T296] veth1_macvtap: entered promiscuous mode [ 32.298986][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.370000][ T316] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.404637][ T316] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.615241][ T329] rtc_cmos 00:00: Alarms can be up to one day in the future [ 32.670555][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.796657][ T338] rtc_cmos 00:00: Alarms can be up to one day in the future [ 32.812328][ T338] rtc_cmos 00:00: Alarms can be up to one day in the future [ 32.829884][ T338] rtc_cmos 00:00: Alarms can be up to one day in the future [ 32.844162][ T338] rtc_cmos 00:00: Alarms can be up to one day in the future [ 32.851601][ T338] rtc rtc0: __rtc_set_alarm: err=-22 [ 32.863454][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.883158][ T45] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 32.904550][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.913965][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.922033][ T45] usb 4-1: Product: syz [ 32.933190][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.943164][ T45] usb 4-1: Manufacturer: syz [ 32.953934][ T45] usb 4-1: SerialNumber: syz [ 32.967551][ T45] cdc_mbim 4-1:1.0: skipping garbage [ 33.094367][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.112675][ T9] usb 1-1: config 0 has no interfaces? [ 33.126782][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 33.141617][ T9] usb 1-1: New USB device strings: Mfr=8, Product=229, SerialNumber=0 [ 33.159077][ T9] usb 1-1: Product: syz [ 33.168060][ T317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.173306][ T9] usb 1-1: Manufacturer: syz [ 33.182407][ T9] usb 1-1: config 0 descriptor?? [ 33.392427][ T336] process 'syz.0.9' launched './file1' with NULL argv: empty string added [ 33.417095][ T338] usb 1-1: USB disconnect, device number 2 [ 33.793623][ T317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 33.801335][ T45] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 34.010605][ T45] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 34.023331][ T45] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 34.046029][ T45] wwan wwan0: port wwan0mbim0 attached [ 34.061978][ T45] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 32:6f:c0:5d:4b:8f [ 34.089741][ T45] usb 4-1: USB disconnect, device number 2 [ 34.103517][ T45] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 34.186172][ T45] wwan wwan0: port wwan0mbim0 disconnected [ 34.593276][ T343] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 34.753214][ T343] usb 2-1: Using ep0 maxpacket: 8 [ 34.759499][ T343] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 34.767926][ T343] usb 2-1: config 0 has no interface number 0 [ 34.775700][ T343] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 34.784941][ T343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.792961][ T343] usb 2-1: Product: syz [ 34.797271][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.805030][ T343] usb 2-1: Manufacturer: syz [ 34.809651][ T343] usb 2-1: SerialNumber: syz [ 34.815933][ T343] usb 2-1: config 0 descriptor?? [ 34.963214][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 34.972570][ T31] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 34.973274][ T405] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 34.981872][ T31] usb 4-1: config 1 has no interface number 0 [ 34.994461][ T31] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 35.004566][ T31] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 35.014772][ T31] usb 4-1: config 1 interface 105 has no altsetting 0 [ 35.023043][ T31] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 35.033443][ T31] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 35.041583][ T31] usb 4-1: Product: syz [ 35.048959][ T36] kauditd_printk_skb: 91 callbacks suppressed [ 35.049008][ T36] audit: type=1400 audit(1789824510.250:165): avc: denied { name_bind } for pid=403 comm="syz.1.18" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 35.077190][ T343] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 35.083654][ T343] uvcvideo 2-1:0.31: Entity type for entity Output 6 was not initialized! [ 35.092258][ T343] usb 2-1: Failed to create links for entity 5 [ 35.098708][ T31] usb 4-1: Manufacturer: syz [ 35.103201][ T36] audit: type=1400 audit(1789824510.250:166): avc: denied { node_bind } for pid=403 comm="syz.1.18" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 35.104009][ T31] usb 4-1: SerialNumber: syz [ 35.128317][ T343] usb 2-1: Failed to register entities (-22). [ 35.136008][ T343] usb 2-1: USB disconnect, device number 2 [ 35.143305][ T418] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 35.150580][ T418] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 35.164532][ T405] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.173061][ T405] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 is Bulk; changing to Interrupt [ 35.193168][ T405] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 35.203052][ T405] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 35.212992][ T405] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 35.561202][ T418] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 35.568633][ T418] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 35.605338][ T36] audit: type=1400 audit(1789824510.800:167): avc: denied { setopt } for pid=421 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.653156][ T36] audit: type=1400 audit(1789824510.800:168): avc: denied { write } for pid=421 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.673089][ T36] audit: type=1400 audit(1789824510.820:169): avc: denied { read } for pid=421 comm="syz.1.26" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.780481][ T31] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 35.800354][ T31] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 35.809781][ T31] usb 4-1: USB disconnect, device number 3 [ 35.893201][ T343] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.053169][ T343] usb 2-1: Using ep0 maxpacket: 16 [ 36.059990][ T343] usb 2-1: unable to get BOS descriptor or descriptor too short [ 36.068983][ T343] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.079316][ T343] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.089962][ T343] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 36.099197][ T343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.107452][ T343] usb 2-1: Product: syz [ 36.111644][ T343] usb 2-1: Manufacturer: syz [ 36.116476][ T343] usb 2-1: SerialNumber: syz [ 36.467397][ T36] audit: type=1400 audit(1789824511.660:170): avc: denied { watch } for pid=423 comm="syz.3.27" path="/2" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.491624][ T36] audit: type=1400 audit(1789824511.670:171): avc: denied { read } for pid=423 comm="syz.3.27" dev="nsfs" ino=4026532480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.517577][ T36] audit: type=1400 audit(1789824511.670:172): avc: denied { open } for pid=423 comm="syz.3.27" path="net:[4026532480]" dev="nsfs" ino=4026532480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.561903][ T36] audit: type=1400 audit(1789824511.750:173): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.601831][ T36] audit: type=1400 audit(1789824511.790:174): avc: denied { setopt } for pid=427 comm="syz.3.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.873895][ T343] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 36.899166][ T343] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 36.928032][ T343] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 36.955860][ T343] usb 2-1: USB disconnect, device number 3 [ 36.986452][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.163512][ T456] 9pnet_fd: Insufficient options for proto=fd [ 37.383199][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.423470][ T343] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.534287][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.546049][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.556036][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.569193][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.578423][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.587856][ T343] usb 2-1: config 1 interface 0 altsetting 12 bulk endpoint 0x1 has invalid maxpacket 8 [ 37.594268][ T9] usb 4-1: config 0 descriptor?? [ 37.603155][ T343] usb 2-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 37.618026][ T343] usb 2-1: config 1 interface 0 has no altsetting 0 [ 37.626303][ T343] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 37.635547][ T343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.643766][ T343] usb 2-1: Product: syz [ 37.647952][ T343] usb 2-1: Manufacturer: 깲玃龟ⲍሌ咟맃ꢎ亂橄ς겗즞綡⃬貰堄㫫ꇗ鬞닷凬Ꝙ퉨蛅레㛚⢌퓐甽뿬䶀㜤㙒↤䡦呑ꗰ舌⇺煘︮砖㾜펦笙⼇ㄵᲔ䝹໠ᇦꏂ䉇쏁陛莋椪뱠ǃ㯧꿇곣畜ꢯ髪淕和뗬䞵뛞㙚碁᫈ᩰ㰟걪뀇ᘆ␰瀤 [ 37.675809][ T343] usb 2-1: SerialNumber: syz [ 37.684936][ T461] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.692114][ T461] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.723862][ T405] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 37.732968][ T405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.754821][ T405] usb 1-1: can't set config #1, error -71 [ 37.773913][ T405] usb 1-1: USB disconnect, device number 3 [ 38.005390][ T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 38.034925][ T9] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 38.100519][ T458] overlay: Unknown parameter 'uid<00000000000000000000' [ 38.120051][ T343] usb 2-1: USB disconnect, device number 4 [ 38.263588][ T454] capability: warning: `syz.3.34' uses deprecated v2 capabilities in a way that may be insecure [ 38.290213][ T481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.308784][ T454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.311236][ T481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.332034][ T454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.323364][ C1] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 39.382672][ T31] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 39.405189][ T31] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 39.873267][ T507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=507 comm=syz.3.45 [ 40.183197][ T66] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 40.197550][ T66] usb 4-1: device reset changed ep0 maxpacket size! [ 40.204762][ T343] usb 4-1: USB disconnect, device number 4 [ 40.343178][ T343] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 40.493141][ T343] usb 4-1: Using ep0 maxpacket: 8 [ 40.505154][ T343] usb 4-1: config 1 has an invalid interface number: 239 but max is 2 [ 40.524744][ T343] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 40.546060][ T343] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 40.563162][ T343] usb 4-1: config 1 has no interface number 0 [ 40.575951][ T343] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 99, using maximum allowed: 30 [ 40.590059][ T528] netlink: 80 bytes leftover after parsing attributes in process `syz.1.49'. [ 40.607904][ T343] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 99 [ 40.621178][ T343] usb 4-1: config 1 interface 239 has no altsetting 0 [ 40.622425][ T517] rtc_cmos 00:00: Alarms can be up to one day in the future [ 40.644614][ T343] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 40.654862][ T343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.662917][ T343] usb 4-1: Product: syz [ 40.667180][ T343] usb 4-1: Manufacturer: syz [ 40.671820][ T343] usb 4-1: SerialNumber: syz [ 40.695094][ T528] kvm: emulating exchange as write [ 40.701127][ T528] netlink: 80 bytes leftover after parsing attributes in process `syz.1.49'. [ 40.795883][ T338] rtc_cmos 00:00: Alarms can be up to one day in the future [ 40.803571][ T338] rtc_cmos 00:00: Alarms can be up to one day in the future [ 40.811221][ T338] rtc_cmos 00:00: Alarms can be up to one day in the future [ 40.833467][ T338] rtc_cmos 00:00: Alarms can be up to one day in the future [ 40.840855][ T338] rtc rtc0: __rtc_set_alarm: err=-22 [ 40.899114][ T343] usb 4-1: USB disconnect, device number 5 [ 40.917667][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.063236][ T66] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 41.214664][ T66] usb 2-1: unable to get BOS descriptor or descriptor too short [ 41.223301][ T66] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.235861][ T66] usb 2-1: string descriptor 0 read error: -22 [ 41.242158][ T66] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 41.251458][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.413377][ T343] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 41.475649][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 41.475664][ T36] audit: type=1400 audit(1789824516.670:201): avc: denied { create } for pid=541 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 41.504854][ T36] audit: type=1400 audit(1789824516.700:202): avc: denied { create } for pid=537 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 41.593195][ T343] usb 1-1: Using ep0 maxpacket: 32 [ 41.600646][ T343] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.621813][ T343] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.634285][ T343] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 41.643451][ T343] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 41.651943][ T343] usb 1-1: Product: syz [ 41.656558][ T343] usb 1-1: Manufacturer: syz [ 41.667095][ T343] hub 1-1:4.0: USB hub found [ 41.783188][ T500] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 41.835729][ T66] usb 2-1: 1:1: cannot get freq at ep 0x1 [ 41.857641][ T66] usb 2-1: USB disconnect, device number 5 [ 41.866712][ T343] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 41.868205][ T36] audit: type=1400 audit(1789824517.060:203): avc: denied { append } for pid=539 comm="syz.0.51" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.898542][ T553] tipc: Enabling of bearer rejected, media not registered [ 41.944610][ T552] netlink: 5 bytes leftover after parsing attributes in process `syz.3.53'. [ 41.953926][ T552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 42.003147][ T36] audit: type=1400 audit(1789824517.180:204): avc: denied { create } for pid=551 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 42.035112][ T36] audit: type=1400 audit(1789824517.230:205): avc: denied { read write } for pid=551 comm="syz.3.53" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 42.083143][ T36] audit: type=1400 audit(1789824517.230:206): avc: denied { open } for pid=551 comm="syz.3.53" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 42.113426][ T343] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 42.133152][ T36] audit: type=1400 audit(1789824517.260:207): avc: denied { ioctl } for pid=551 comm="syz.3.53" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 42.253181][ T343] usb 1-1: device descriptor read/64, error -71 [ 42.493188][ T343] usb 1-1: device descriptor read/64, error -71 [ 42.636088][ T36] audit: type=1400 audit(1789824517.830:208): avc: denied { write } for pid=570 comm="syz.1.56" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 42.687377][ T36] audit: type=1400 audit(1789824517.860:209): avc: denied { unlink } for pid=570 comm="syz.1.56" name="#1" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.710363][ T36] audit: type=1400 audit(1789824517.870:210): avc: denied { mount } for pid=570 comm="syz.1.56" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.753147][ T343] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 42.777366][ T577] overlayfs: failed to resolve './file2': -2 [ 42.913169][ T343] usb 1-1: device descriptor read/64, error -71 [ 43.083153][ T66] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 43.183173][ T343] usb 1-1: device descriptor read/64, error -71 [ 43.254248][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.265359][ T66] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.275499][ T66] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 43.288741][ T66] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.298275][ T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.307424][ T66] usb 2-1: config 0 descriptor?? [ 43.443188][ T343] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 43.464273][ T343] usb 1-1: device descriptor read/8, error -71 [ 43.604269][ T343] usb 1-1: device descriptor read/8, error -71 [ 43.720924][ T582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.730586][ T582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.741047][ T582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.751983][ T582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.853194][ T343] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 43.884353][ T343] usb 1-1: device descriptor read/8, error -71 [ 43.962990][ T66] usbhid 2-1:0.0: can't add hid device: -71 [ 43.970778][ T66] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 43.983163][ T66] usb 2-1: USB disconnect, device number 6 [ 44.024335][ T343] usb 1-1: device descriptor read/8, error -71 [ 44.144812][ T343] usb 1-1: USB disconnect, device number 4 [ 44.554369][ T500] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 44.573465][ T500] usb 4-1: can't read configurations, error -71 [ 44.717156][ T600] ======================================================= [ 44.717156][ T600] WARNING: The mand mount option has been deprecated and [ 44.717156][ T600] and is ignored by this kernel. Remove the mand [ 44.717156][ T600] option from the mount to silence this warning. [ 44.717156][ T600] ======================================================= [ 44.723212][ T405] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 44.752846][ T600] /dev/sg0: Can't lookup blockdev [ 44.945744][ T405] usb 2-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40 [ 44.963153][ T405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.971166][ T405] usb 2-1: Product: syz [ 44.993157][ T405] usb 2-1: Manufacturer: syz [ 44.997787][ T405] usb 2-1: SerialNumber: syz [ 45.217934][ T405] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 45.229510][ T405] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 45.243180][ T405] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 45.243193][ T500] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 45.264332][ T405] usb 2-1: USB disconnect, device number 7 [ 45.414346][ T500] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.425428][ T500] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 45.437632][ T500] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.446944][ T500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.455149][ T500] usb 4-1: Product: syz [ 45.459420][ T500] usb 4-1: Manufacturer: syz [ 45.464290][ T500] usb 4-1: SerialNumber: syz [ 45.472535][ T500] cdc_mbim 4-1:1.0: skipping garbage [ 45.671920][ T602] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 45.835590][ T611] rust_binder: Failure in copy_transaction_data: EFAULT [ 45.835668][ T611] rust_binder: 610:611 transaction call to 610:0 failed EFAULT, code 0 size 768-240 [ 45.864371][ T31] rust_binder: 610: undelivered TRANSACTION_ERROR: 29201 [ 46.281578][ T500] cdc_mbim 4-1:1.0: bind() failure [ 46.297866][ T500] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 46.306722][ T405] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 46.318898][ T500] cdc_ncm 4-1:1.1: bind() failure [ 46.334339][ T500] usb 4-1: USB disconnect, device number 7 [ 46.474216][ T405] usb 1-1: config 1 has an invalid descriptor of length 137, skipping remainder of the config [ 46.493155][ T405] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 46.513014][ T405] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.522316][ T405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 46.541261][ T405] usb 1-1: SerialNumber: syz [ 46.759631][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 46.759648][ T36] audit: type=1400 audit(1789824521.950:228): avc: denied { read write } for pid=619 comm="syz.0.73" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 46.792524][ T620] MTRR 1 not used [ 46.800736][ T624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.821530][ T624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.842508][ T36] audit: type=1400 audit(1789824521.990:229): avc: denied { open } for pid=619 comm="syz.0.73" path="/22/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 46.885739][ T646] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.891911][ T36] audit: type=1400 audit(1789824521.990:230): avc: denied { ioctl } for pid=619 comm="syz.0.73" path="/22/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 46.959984][ T36] audit: type=1400 audit(1789824522.010:231): avc: denied { create } for pid=643 comm="syz.3.80" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 46.997909][ T36] audit: type=1400 audit(1789824522.030:232): avc: denied { mounton } for pid=643 comm="syz.3.80" path="/13/file0" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 47.042180][ T36] audit: type=1400 audit(1789824522.030:233): avc: denied { connect } for pid=643 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.080694][ T36] audit: type=1400 audit(1789824522.030:234): avc: denied { setopt } for pid=643 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.149983][ T36] audit: type=1400 audit(1789824522.030:235): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 47.185146][ T36] audit: type=1400 audit(1789824522.100:236): avc: denied { getopt } for pid=645 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.376187][ T36] audit: type=1400 audit(1789824522.570:237): avc: denied { mount } for pid=652 comm="syz.1.83" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 47.402132][ T54] Bluetooth: hci0: sending frame failed (-49) [ 47.408408][ T425] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 47.527994][ T656] veth1_to_hsr: entered promiscuous mode [ 47.543480][ T656] veth1_to_hsr: entered allmulticast mode [ 47.685022][ T297] bridge_slave_1: left allmulticast mode [ 47.692541][ T297] bridge_slave_1: left promiscuous mode [ 47.702705][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.719373][ T297] bridge_slave_0: left allmulticast mode [ 47.730595][ T297] bridge_slave_0: left promiscuous mode [ 47.739544][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.874404][ T297] veth1_macvtap: left promiscuous mode [ 47.881966][ T297] veth0_vlan: left promiscuous mode [ 47.993146][ T405] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 48.047026][ T681] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.054201][ T681] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.061274][ T681] bridge_slave_0: entered allmulticast mode [ 48.067914][ T681] bridge_slave_0: entered promiscuous mode [ 48.076247][ T681] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.083353][ T681] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.090420][ T681] bridge_slave_1: entered allmulticast mode [ 48.096870][ T681] bridge_slave_1: entered promiscuous mode [ 48.123243][ T405] usb 4-1: device descriptor read/64, error -71 [ 48.207227][ T681] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.214353][ T681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.221652][ T681] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.228711][ T681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.255552][ T401] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.262914][ T401] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.273986][ T402] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.281033][ T402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.305044][ T402] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.312106][ T402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.356831][ T681] veth0_vlan: entered promiscuous mode [ 48.363161][ T405] usb 4-1: device descriptor read/64, error -71 [ 48.375654][ T681] veth1_macvtap: entered promiscuous mode [ 48.423196][ T66] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 48.543965][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.553500][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.559747][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.566366][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.575965][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.585791][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.595657][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.603181][ T405] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 48.604041][ T66] usb 2-1: Using ep0 maxpacket: 16 [ 48.617979][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.624703][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.631137][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.637799][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.645477][ T66] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 48.654684][ T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.666159][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.672308][ T66] usb 2-1: Product: syz [ 48.678215][ T66] usb 2-1: Manufacturer: syz [ 48.684703][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.690899][ T66] usb 2-1: SerialNumber: syz [ 48.695708][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.702939][ T66] usb 2-1: config 0 descriptor?? [ 48.708711][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.715870][ T66] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 48.724204][ T66] usb 2-1: Detected FT-X [ 48.728710][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.735082][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.741599][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.747919][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.753250][ T405] usb 4-1: device descriptor read/64, error -71 [ 48.754787][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.767440][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.773742][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.780126][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.786956][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.793415][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.799692][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.806023][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.812296][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.818744][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.825062][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.831783][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.838386][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.844756][ T719] 9pnet_fd: Insufficient options for proto=fd [ 48.916129][ T701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.938554][ T701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.951772][ T726] FAULT_INJECTION: forcing a failure. [ 48.951772][ T726] name failslab, interval 1, probability 0, space 0, times 0 [ 48.952033][ T701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.973519][ T701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.983182][ T726] CPU: 0 UID: 0 PID: 726 Comm: syz.4.93 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 48.983212][ T726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 48.983229][ T726] Call Trace: [ 48.983235][ T726] [ 48.983242][ T726] __dump_stack+0x21/0x30 [ 48.983293][ T726] dump_stack_lvl+0x140/0x1c0 [ 48.983329][ T726] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.983358][ T726] ? __cfi_do_futex+0x10/0x10 [ 48.983388][ T726] ? mutex_unlock+0x90/0x240 [ 48.983415][ T726] dump_stack+0x19/0x20 [ 48.983444][ T726] should_fail_ex+0x3c2/0x510 [ 48.983470][ T726] should_failslab+0xac/0x100 [ 48.983499][ T726] __kmalloc_cache_noprof+0x41/0x470 [ 48.983523][ T726] ? do_epoll_create+0x85/0x3f0 [ 48.983553][ T726] do_epoll_create+0x85/0x3f0 [ 48.983582][ T726] __x64_sys_epoll_create1+0x3b/0x50 [ 48.983610][ T726] x64_sys_call+0x1761/0x2ee0 [ 48.983631][ T726] do_syscall_64+0x57/0xf0 [ 48.983653][ T726] ? clear_bhb_loop+0x50/0xa0 [ 48.983682][ T726] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.983708][ T726] RIP: 0033:0x7f02e139e159 [ 48.983734][ T726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.983752][ T726] RSP: 002b:00007f02e223e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 48.983784][ T726] RAX: ffffffffffffffda RBX: 00007f02e1625fa0 RCX: 00007f02e139e159 [ 48.983801][ T726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 48.983815][ T726] RBP: 00007f02e143506b R08: 0000000000000000 R09: 0000000000000000 [ 48.983828][ T726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.983842][ T726] R13: 00007f02e1626038 R14: 00007f02e1625fa0 R15: 00007ffd474498d8 [ 48.983861][ T726] [ 49.180033][ T405] usb 4-1: device descriptor read/64, error -71 [ 49.188325][ T338] usb 1-1: USB disconnect, device number 5 [ 49.206022][ T66] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 49.215825][ T66] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 49.224630][ T66] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 49.231944][ T66] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 49.242101][ T66] usb 2-1: USB disconnect, device number 8 [ 49.257685][ T66] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 49.274084][ T66] ftdi_sio 2-1:0.0: device disconnected [ 49.293210][ T405] usb usb4-port1: attempt power cycle [ 49.633242][ T405] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 49.659207][ T405] usb 4-1: device descriptor read/8, error -71 [ 49.794201][ T405] usb 4-1: device descriptor read/8, error -71 [ 49.831776][ T766] kernel profiling enabled (shift: 9) [ 50.033432][ T405] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 50.064200][ T405] usb 4-1: device descriptor read/8, error -71 [ 50.073148][ T338] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.204220][ T405] usb 4-1: device descriptor read/8, error -71 [ 50.224508][ T338] usb 5-1: unable to get BOS descriptor or descriptor too short [ 50.243525][ T338] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.253698][ T338] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.264673][ T338] usb 5-1: string descriptor 0 read error: -22 [ 50.270904][ T338] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 50.280008][ T338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.290410][ T338] usb 5-1: selecting invalid altsetting 1 [ 50.302045][ T338] usb 5-1: unit 3 not found! [ 50.314074][ T405] usb usb4-port1: unable to enumerate USB device [ 50.490971][ T338] usb 5-1: unit 0 not found! [ 50.505887][ T338] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 50.513368][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.683194][ T405] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 50.695421][ T10] usb 5-1: USB disconnect, device number 2 [ 50.788366][ T789] Zero length message leads to an empty skb [ 50.835428][ T405] usb 1-1: Using ep0 maxpacket: 8 [ 50.847500][ T405] usb 1-1: unable to get BOS descriptor or descriptor too short [ 50.863691][ T405] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 50.871318][ T405] usb 1-1: can't read configurations, error -71 [ 50.903154][ T338] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 51.069476][ T338] usb 2-1: unable to get BOS descriptor or descriptor too short [ 51.078028][ T338] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1536, setting to 1024 [ 51.094612][ T338] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 51.103856][ T338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.111943][ T338] usb 2-1: Product: syz [ 51.116242][ T338] usb 2-1: Manufacturer: syz [ 51.120864][ T338] usb 2-1: SerialNumber: syz [ 51.233276][ T405] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 51.273162][ T500] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 51.330927][ T338] usb 2-1: unit 3 not found! [ 51.346370][ T338] usb 2-1: USB disconnect, device number 9 [ 51.374388][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.404377][ T405] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 51.421169][ T405] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 51.443658][ T405] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 51.453136][ T500] usb 4-1: Using ep0 maxpacket: 32 [ 51.454952][ T405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.463899][ T500] usb 4-1: unable to get BOS descriptor or descriptor too short [ 51.466559][ T405] usb 1-1: Product: syz [ 51.478151][ T405] usb 1-1: Manufacturer: syz [ 51.482762][ T405] usb 1-1: SerialNumber: syz [ 51.488285][ T500] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.511642][ T810] capability: warning: `syz.4.121' uses 32-bit capabilities (legacy support in use) [ 51.517593][ T500] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 51.540197][ T500] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 51.553057][ T500] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 51.562310][ T500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.570457][ T500] usb 4-1: Product: syz [ 51.574805][ T500] usb 4-1: Manufacturer: syz [ 51.579453][ T500] usb 4-1: SerialNumber: syz [ 51.702814][ T66] usb 1-1: USB disconnect, device number 7 [ 51.753157][ T405] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 51.787972][ T801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.797634][ T801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.814586][ T500] usb 4-1: USB disconnect, device number 12 [ 51.903135][ T405] usb 5-1: Using ep0 maxpacket: 8 [ 51.914104][ T405] usb 5-1: config 49 has an invalid interface number: 137 but max is 1 [ 51.922418][ T405] usb 5-1: config 49 has no interface number 0 [ 51.937552][ T405] usb 5-1: config 49 interface 1 altsetting 73 bulk endpoint 0xB has invalid maxpacket 64 [ 51.949183][ T405] usb 5-1: config 49 interface 1 altsetting 73 has a duplicate endpoint with address 0xB, skipping [ 51.959965][ T405] usb 5-1: config 49 interface 1 altsetting 73 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 51.971105][ T405] usb 5-1: config 49 interface 1 altsetting 73 endpoint 0xA has invalid wMaxPacketSize 0 [ 51.981031][ T405] usb 5-1: config 49 interface 1 altsetting 73 has a duplicate endpoint with address 0xB, skipping [ 51.991814][ T405] usb 5-1: config 49 interface 137 altsetting 24 has a duplicate endpoint with address 0xC, skipping [ 52.003068][ T405] usb 5-1: config 49 interface 137 altsetting 24 has a duplicate endpoint with address 0xB, skipping [ 52.014364][ T405] usb 5-1: config 49 interface 137 altsetting 24 has a duplicate endpoint with address 0x9, skipping [ 52.025310][ T405] usb 5-1: config 49 interface 137 altsetting 24 bulk endpoint 0x6 has invalid maxpacket 64 [ 52.035472][ T405] usb 5-1: config 49 interface 137 altsetting 24 has a duplicate endpoint with address 0xB, skipping [ 52.046427][ T405] usb 5-1: config 49 interface 137 altsetting 24 has a duplicate endpoint with address 0x6, skipping [ 52.057636][ T405] usb 5-1: config 49 interface 1 has no altsetting 0 [ 52.065342][ T405] usb 5-1: config 49 interface 137 has no altsetting 0 [ 52.083177][ T405] usb 5-1: Dual-Role OTG device on HNP port [ 52.089261][ T405] usb 5-1: New USB device found, idVendor=058b, idProduct=0043, bcdDevice=8f.15 [ 52.113140][ T405] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.121161][ T405] usb 5-1: Product: ใ믘묃럞ዔ䲷搏軹➦ꮥम꥘鄓㭹刳鎉䈁瘣ѫ甬휃⠫두擳젬乵㴎೪圙ѵ잗첵☫갎ꍗ鬋抃杠砂䐳ꏠ᲼ک뭓꧲퀟ꇒ正섋⊆妍益첡쀏練좆ⵊ [ 52.140759][ T405] usb 5-1: Manufacturer: ࡠ [ 52.145626][ T405] usb 5-1: SerialNumber: Ц [ 52.155335][ T809] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 52.377461][ T833] netlink: 'syz.0.127': attribute type 46 has an invalid length. [ 52.385551][ T833] netlink: 'syz.0.127': attribute type 28 has an invalid length. [ 52.403813][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 52.403828][ T36] audit: type=1400 audit(1789824527.600:271): avc: denied { sqpoll } for pid=830 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 52.431756][ T36] audit: type=1400 audit(1789824527.620:272): avc: denied { mount } for pid=836 comm="syz.0.128" name="/" dev="ramfs" ino=10011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 52.457833][ T36] audit: type=1400 audit(1789824527.630:273): avc: denied { mount } for pid=830 comm="syz.3.126" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 52.997863][ T36] audit: type=1400 audit(1789824528.190:274): avc: denied { ioctl } for pid=846 comm="syz.0.131" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.000336][ T847] : renamed from bridge0 (while UP) [ 53.093177][ T66] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 53.199946][ T36] audit: type=1400 audit(1789824528.390:275): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 53.227610][ T66] usb 2-1: device descriptor read/64, error -71 [ 53.248554][ T862] mmap: syz.3.133 (862): VmData 29208576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 53.473158][ T66] usb 2-1: device descriptor read/64, error -71 [ 53.483320][ T500] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 53.563161][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 53.633240][ T500] usb 1-1: Using ep0 maxpacket: 32 [ 53.639674][ T500] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.649946][ T500] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.664624][ T500] usb 1-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 53.673740][ T500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.681745][ T500] usb 1-1: Product: syz [ 53.685955][ T500] usb 1-1: Manufacturer: syz [ 53.690598][ T500] usb 1-1: SerialNumber: syz [ 53.723211][ T66] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 53.731887][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 53.742055][ T31] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 53.751135][ T31] usb 4-1: config 0 interface 0 altsetting 243 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 53.764314][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 53.772562][ T31] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 53.781714][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.789746][ T31] usb 4-1: Product: syz [ 53.793958][ T31] usb 4-1: Manufacturer: syz [ 53.798592][ T31] usb 4-1: SerialNumber: syz [ 53.804539][ T31] usb 4-1: config 0 descriptor?? [ 53.873164][ T66] usb 2-1: device descriptor read/64, error -71 [ 53.898502][ T864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.907488][ T864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.919301][ T500] usb 1-1: MIDIStreaming interface descriptor not found [ 53.928980][ T500] usb 1-1: USB disconnect, device number 8 [ 53.955300][ T339] udevd[339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.014824][ T31] usb 4-1: USB disconnect, device number 13 [ 54.113170][ T66] usb 2-1: device descriptor read/64, error -71 [ 54.223227][ T66] usb usb2-port1: attempt power cycle [ 54.437507][ T36] audit: type=1400 audit(1789824529.630:276): avc: denied { accept } for pid=871 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 54.547636][ T36] audit: type=1400 audit(1789824529.740:277): avc: denied { bind } for pid=876 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.549436][ T877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'. [ 54.566796][ T36] audit: type=1400 audit(1789824529.740:278): avc: denied { connect } for pid=876 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.594927][ T66] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 54.598139][ T36] audit: type=1400 audit(1789824529.740:279): avc: denied { write } for pid=876 comm="syz.0.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.624851][ T66] usb 2-1: device descriptor read/8, error -71 [ 54.639633][ T405] ftdi_sio 5-1:49.1: FTDI USB Serial Device converter detected [ 54.656113][ T405] ftdi_sio ttyUSB0: unknown device type: 0x8f15 [ 54.676093][ T405] usb 5-1: USB disconnect, device number 3 [ 54.699781][ T405] ftdi_sio 5-1:49.1: device disconnected [ 54.757042][ T36] audit: type=1400 audit(1789824529.950:280): avc: denied { search } for pid=891 comm="syz.4.144" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 54.764659][ T66] usb 2-1: device descriptor read/8, error -71 [ 54.868072][ T898] overlayfs: failed to resolve 'work': -2 [ 54.874875][ T898] overlayfs: failed to resolve 'work': -2 [ 55.023180][ T66] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 55.044320][ T66] usb 2-1: device descriptor read/8, error -71 [ 55.173194][ T500] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 55.181804][ T66] usb 2-1: device descriptor read/8, error -71 [ 55.293554][ T66] usb usb2-port1: unable to enumerate USB device [ 55.323159][ T500] usb 4-1: Using ep0 maxpacket: 8 [ 55.329406][ T500] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.339596][ T500] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d1 [ 55.348675][ T500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.357337][ T500] usb 4-1: config 0 descriptor?? [ 55.474677][ T942] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 55.538739][ T947] netlink: 'syz.0.154': attribute type 30 has an invalid length. [ 55.571350][ T908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.580129][ T908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.589601][ T405] usb 4-1: USB disconnect, device number 14 [ 56.033166][ T405] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 56.184379][ T405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.194280][ T405] usb 5-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 56.203370][ T405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.213894][ T405] usb 5-1: config 0 descriptor?? [ 56.263172][ T500] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 56.353159][ T66] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 56.393179][ T500] usb 2-1: device descriptor read/64, error -71 [ 56.420837][ T955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.429467][ T955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.483174][ T338] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 56.493163][ T66] usb 4-1: device descriptor read/64, error -71 [ 56.633163][ T500] usb 2-1: device descriptor read/64, error -71 [ 56.635060][ T338] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.649959][ T405] hid (null): invalid report_size -292171435 [ 56.656014][ T338] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 56.668230][ T405] wacom 0003:056A:0318.0003: invalid report_size -292171435 [ 56.675622][ T338] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 56.685343][ T405] wacom 0003:056A:0318.0003: item 0 4 1 7 parsing failed [ 56.692508][ T405] wacom 0003:056A:0318.0003: parse failed [ 56.698332][ T338] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 56.711222][ T405] wacom 0003:056A:0318.0003: probe with driver wacom failed with error -22 [ 56.723677][ T338] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 56.732835][ T338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.740868][ T338] usb 1-1: Product: syz [ 56.743228][ T66] usb 4-1: device descriptor read/64, error -71 [ 56.745063][ T338] usb 1-1: Manufacturer: syz [ 56.755942][ T338] usb 1-1: SerialNumber: syz [ 56.851390][ T405] usb 5-1: USB disconnect, device number 4 [ 56.873156][ T500] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 56.966667][ T338] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 56.977402][ T338] usb 1-1: USB disconnect, device number 9 [ 56.986878][ T558] udevd[558]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.002602][ T66] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 57.010209][ T500] usb 2-1: device descriptor read/64, error -71 [ 57.143207][ T66] usb 4-1: device descriptor read/64, error -71 [ 57.253255][ T500] usb 2-1: device descriptor read/64, error -71 [ 57.373248][ T500] usb usb2-port1: attempt power cycle [ 57.383211][ T66] usb 4-1: device descriptor read/64, error -71 [ 57.426626][ T372] bridge_slave_1: left allmulticast mode [ 57.432370][ T372] bridge_slave_1: left promiscuous mode [ 57.438147][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.446210][ T372] bridge_slave_0: left allmulticast mode [ 57.451948][ T372] bridge_slave_0: left promiscuous mode [ 57.457756][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.495865][ T66] usb usb4-port1: attempt power cycle [ 57.566195][ T372] veth1_macvtap: left promiscuous mode [ 57.571815][ T372] veth0_vlan: left promiscuous mode [ 57.650086][ T979] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.657818][ T979] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.666304][ T979] bridge_slave_0: entered allmulticast mode [ 57.672565][ T979] bridge_slave_0: entered promiscuous mode [ 57.679523][ T979] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.686587][ T979] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.693899][ T979] bridge_slave_1: entered allmulticast mode [ 57.700129][ T979] bridge_slave_1: entered promiscuous mode [ 57.713174][ T500] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 57.734288][ T500] usb 2-1: device descriptor read/8, error -71 [ 57.759141][ T979] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.766252][ T979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.773544][ T979] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.780573][ T979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.802379][ T912] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.810012][ T912] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.819364][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.826442][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.834917][ T66] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 57.844201][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.851271][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.854940][ T66] usb 4-1: device descriptor read/8, error -71 [ 57.865816][ T500] usb 2-1: device descriptor read/8, error -71 [ 57.885027][ T979] veth0_vlan: entered promiscuous mode [ 57.896037][ T979] veth1_macvtap: entered promiscuous mode [ 57.954227][ T991] rust_binder: 990:991 no such ref 0 [ 57.959603][ T991] rust_binder: 990:991 no such ref 3 [ 57.966018][ T991] rust_binder: 990:991 no such ref 0 [ 57.971390][ T991] rust_binder: Read failure Err(EAGAIN) in pid:9 [ 57.994149][ T66] usb 4-1: device descriptor read/8, error -71 [ 58.113168][ T500] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 58.134207][ T500] usb 2-1: device descriptor read/8, error -71 [ 58.243253][ T66] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 58.264397][ T500] usb 2-1: device descriptor read/8, error -71 [ 58.270603][ T66] usb 4-1: device descriptor read/8, error -71 [ 58.373442][ T500] usb usb2-port1: unable to enumerate USB device [ 58.402450][ T1012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 58.412691][ T66] usb 4-1: device descriptor read/8, error -71 [ 58.429770][ T1014] fuseblk: Unknown parameter 'fkk[d' [ 58.490618][ T1016] ------------[ cut here ]------------ [ 58.496204][ T1016] WARNING: CPU: 1 PID: 1016 at mm/page_alloc.c:5285 __alloc_pages_noprof+0x109/0x7e0 [ 58.496464][ T1017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.172'. [ 58.505740][ T1016] Modules linked in: [ 58.518517][ T1016] CPU: 1 UID: 0 PID: 1016 Comm: syz.0.172 Not tainted syzkaller #0 e67cc5743245539115c479145c763e2a95730d6f [ 58.530110][ T1016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.540283][ T1016] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 58.546384][ T1016] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d e5 c8 0b 06 00 0f 85 c2 00 00 00 c6 05 d8 c8 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 58.566258][ T1016] RSP: 0018:ffffc9000b62f980 EFLAGS: 00010246 [ 58.572376][ T1016] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000 [ 58.580387][ T1016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000b62fa38 [ 58.588411][ T1016] RBP: ffffc9000b62faa8 R08: ffffc9000b62fa37 R09: 0000000000000000 [ 58.596429][ T1016] R10: ffffc9000b62fa20 R11: fffff520016c5f47 R12: ffffc9000b62f9c0 [ 58.604450][ T1016] R13: dffffc0000000000 R14: 1ffff920016c5f34 R15: 0000000000000000 [ 58.612443][ T1016] FS: 00007f219fc826c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.621493][ T1016] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.628258][ T1016] CR2: 00007f219fbfdff8 CR3: 000000010cb34000 CR4: 00000000003526b0 [ 58.636293][ T1016] Call Trace: [ 58.639607][ T1016] [ 58.642545][ T1016] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 58.648348][ T1016] ? schedule+0xc5/0x240 [ 58.652649][ T1016] ? futex_unqueue+0x136/0x160 [ 58.657477][ T1016] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 58.663724][ T1016] ___kmalloc_large_node+0x81/0x220 [ 58.668938][ T1016] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 58.675153][ T1016] __kmalloc_large_node_noprof+0x1e/0xd0 [ 58.680843][ T1016] ? pending_reads_dispatch_ioctl+0xc86/0x2080 [ 58.687135][ T1016] __kmalloc_noprof+0x326/0x510 [ 58.692015][ T1016] pending_reads_dispatch_ioctl+0xc86/0x2080 [ 58.698051][ T1016] ? futex_wait+0x2b8/0x7c0 [ 58.702569][ T1016] ? __cfi_futex_wait+0x10/0x10 [ 58.707503][ T1016] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 58.713975][ T1016] ? selinux_file_ioctl+0x732/0x1480 [ 58.719273][ T1016] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 58.724858][ T1016] ? do_futex+0x32a/0x510 [ 58.729220][ T1016] ? __cfi_do_futex+0x10/0x10 [ 58.734037][ T1016] ? __fget_files+0x2bc/0x330 [ 58.738737][ T1016] ? bpf_lsm_file_ioctl+0xd/0x20 [ 58.743737][ T1016] ? security_file_ioctl+0x3e/0x110 [ 58.748958][ T1016] ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10 [ 58.755438][ T1016] __se_sys_ioctl+0x123/0x1b0 [ 58.760158][ T1016] __x64_sys_ioctl+0x7f/0xa0 [ 58.764787][ T1016] x64_sys_call+0x1878/0x2ee0 [ 58.769491][ T1016] do_syscall_64+0x57/0xf0 [ 58.773960][ T1016] ? clear_bhb_loop+0x50/0xa0 [ 58.778657][ T1016] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 58.784659][ T1016] RIP: 0033:0x7f219ed9e159 [ 58.789098][ T1016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.808744][ T1016] RSP: 002b:00007f219fc82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.817185][ T1016] RAX: ffffffffffffffda RBX: 00007f219f025fa0 RCX: 00007f219ed9e159 [ 58.825201][ T1016] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 0000000000000046 [ 58.833228][ T1016] RBP: 00007f219ee3506b R08: 0000000000000000 R09: 0000000000000000 [ 58.841205][ T1016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.849230][ T1016] R13: 00007f219f026038 R14: 00007f219f025fa0 R15: 00007fffa5143528 [ 58.857241][ T1016] [ 58.860271][ T1016] ---[ end trace 0000000000000000 ]--- [ 58.866213][ T66] usb usb4-port1: unable to enumerate USB device