last executing test programs: 11.363327322s ago: executing program 2 (id=37): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000005380)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @mcast1, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000000000029800400370000006c000000000000001400000000000000290000000b000000000000000000f8ff170000000000000029000000370000008700e500000000001400000000000000290000003400000001aa00"], 0x60}}, {{&(0x7f0000001600)={0xa, 0x4e20, 0xc, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c, 0x0, 0x0, &(0x7f00000054c0)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x2c, 0x0, 0x2, 0xee}}}], 0x18}}], 0x2, 0x24000800) 11.363041882s ago: executing program 2 (id=38): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000140)) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0xd57) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000580)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r5, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000d40c171982c6d3fde308ecb380c7606ce3265ffee83980f0da34883ccadbb54a0756b33fb9a0250df240c13349c6b9ccc06aa0c496b3b18e9c80409701a24fba4aac949b90ce1dcea6c78ad0733ed6bf4888aba471235e281b4967e670ffbf362d095d90099cdb71bc56975f09d95c9b9193810579b0e4ad5b06dff76c8adb0171ae93c3625ad86f7b5886dd21998993f88182fe2611c44d596b8a5089d54e7c35c2ec02c0d483e6765ca55676c105f948ba5bcde5714e537cf2edc45291578e92ec1b3bcdb06268535f8b1bc5289754266cb84e47ab225520743a1c6b3820", @ANYRES16=r4, @ANYBLOB="000827bd7000fcdbdf25040000000c0001800800030001000000"], 0x20}}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r3) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x14044804, &(0x7f0000000140)={0xa, 0x4e21, 0x767, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000100)='9p\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r7, 0x0, 0x20) 11.362763002s ago: executing program 2 (id=39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000200)={0x4, 0x8001ff, 0x2, 0x3, 0x7, "ea710000000000f9000000024200000200", 0x303, 0xf0}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0xa) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323bac0c45b45602067fffffff81004e22030d00ff00289242a8002000eaa57b00090080020e1b05000000000000ff0004f0c70f000800ffffffffffffffffff0300e7ee0000000000000000020000", 0x58}], 0x1) connect$netlink(r6, &(0x7f0000000100)=@unspec, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x401, 0x81) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000080)=0x1000, 0x4) write(r7, &(0x7f0000000600)='dummy_udc.0\n', 0xc) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000fc0)=ANY=[@ANYBLOB="050100008ddfb240490b4f06fdd4010203010902120001f38d00000904"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 10.122937205s ago: executing program 2 (id=43): r0 = syz_usb_connect(0x2, 0x10b, &(0x7f0000000040)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02", @ANYRES32, @ANYRES32], 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/60, 0x3c}], 0x1, 0x101, 0x4, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000400), 0x42, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000200)={0x14, &(0x7f0000000080)={0x20, 0x9, 0x8f, {0x8f, 0x0, "50a82073c3bc2520d02733169c0bd4e0dee36e5a85eb2848861218deb852b1610405f6cb8a2b82d63a1f27cd6f384ec42f99d6867d1023b981cbbcbf0b5a9edc0592229240c1d2394010314939dc5f162cce1054769cd7a412694264b54a8fdd5e7319fb3be6a659b6cfe2ed59796c628d46938634ef6470568b153c049d9423a683b895ece4ab5c2f6b8c3697"}}, &(0x7f0000000140)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "8cfcc4779fb45fa3c2fc02c1c38c5fc1e24783fc5388b28303c08eecf0de1e9cfabe0ee17f3841dd8db150d478f5eb1d22674c80254e09c1a718fe3c67368389302bfc9ab30c5ea85a82e45f9affaddbf755ef8cdf3b01a11a6636e21b3c176e883f808a5151c723b4e491eaf74aba1cfeb4128bfb08765578f0b0d31f"}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000240)={0x0, 0xd, 0x28, "17a7515a96be1292038d8dcf8db85c33c3b78966ea5ecfdee1f724e2c3ad6285a24ff13f23b03408"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0xfffffffc}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "1af2b71c7feb60d7207ff900b0fbd9a367e45d464ad59606c49c068170a103d851e5c697a761b1316590fd04be15c8"}}) 8.934605396s ago: executing program 3 (id=46): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a40)=ANY=[], 0x278) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x78, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@typed={0xff81, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x5c, 0x1b, 0x0, 0x1, [@typed={0x57, 0x0, 0x0, 0x0, @str='}\x00\xc6&\x17\xdd\xe4\xc8\x8f\xa6\x0f\x1aTu\xda\xc6\x13\xfc\xa9\xb5\xf01\x06O\x06-H\xb3\xfb\xd7\xd0\xe7\x10\xa6O\x92\xe3\xdd\xb6X\xcd\xc7\x91R\xe5\x00\xe3\x00\xa3jDJ\xbd)\xd8\xf0&c\xff\xff\xff\xff\xff\xff\xff\xf9\xde\x83\xd2%\xadY\x1e\xfa\xa6v\x87\xdb\xf9w\x01\x01\xe0'}]}]}, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000280)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="010027bd7000fedbdf25460000000e0001"], 0x94}, 0x1, 0x0, 0x0, 0x41}, 0x10) fallocate(r0, 0x0, 0x4, 0x5346) 8.905301697s ago: executing program 3 (id=47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0xc) (async) r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582020002"], 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) syz_usb_control_io$uac3(r5, 0x0, &(0x7f00000018c0)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="201406", @ANYRESOCT=r2, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$sierra_net(r5, 0x0, 0x0) (async, rerun: 64) r6 = socket(0x10, 0x803, 0x0) (rerun: 64) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_channels={0x4a, 0x0, 0x7, 0xfffffffd, 0x4, 0x2, 0x1}}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00d}]}, 0x10) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="220bc326"]) (async) setfsuid(0xee00) (async) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r9 = dup(r8) bind$802154_raw(r9, &(0x7f00000016c0)={0x27, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1b) (async, rerun: 64) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145cf, 0x0) (async, rerun: 64) r10 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r10, &(0x7f0000002780)={0x2020}, 0x5ecfb203) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f00000047c0)={0x0, 0x6}) (async) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) (async) sendmsg$netlink(r11, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1400800000002490000000200000000000000000"], 0x14}], 0x1, 0x0, 0x0, 0x24040015}, 0x20040010) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.587557285s ago: executing program 2 (id=49): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) (async) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xe8842, 0x4) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r4, 0x400455c8, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x57, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) fcntl$setstatus(r2, 0x4, 0x42000) (async) close(r1) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = eventfd2(0xe5c, 0x80000) (async) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000000000)=0xff, 0x4) (async) r9 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000100)={r7, 0x7, 0x2, r9}) (async) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x82, 0x6b, 0xff, 0x2, 0x9, 0xb3, 0x1, 0xe4, 0x7, 0x5, 0x84, 0x8a, 0xfd, 0x85, 0xec}}) (async) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xe, 0x4, 0x1, 0x2, 0xaaa9, 0x400, 0x0, 0x4, 0x1, 0x5, 0x40001, 0x0, 0x72a, 0x1, 0xbde], 0xfff, 0x36529f}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 8.587341725s ago: executing program 2 (id=50): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00006d8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066ba000000000f3036db45ef0c0cb8d09bbc8900efbafc0cedba4300ba210066ed3626f00fc70d", 0x4f}], 0x0, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.553823056s ago: executing program 32 (id=50): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00006d8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066ba000000000f3036db45ef0c0cb8d09bbc8900efbafc0cedba4300ba210066ed3626f00fc70d", 0x4f}], 0x0, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.63060174s ago: executing program 3 (id=57): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x10000880}, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x0, 0x14, 0x4, "07f23d0a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.321883754s ago: executing program 0 (id=62): r0 = socket(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0xb57, 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) dup(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r2, &(0x7f00000000c0)="02", 0x1, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x2, 0x0) write(r3, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) recvmmsg$unix(r5, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012020, 0x0) r6 = dup(r4) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r7 = syz_open_pts(r4, 0x80) r8 = dup3(r7, r4, 0x80000) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f00000001c0)={0x3, 0x1, 0xa, 0xfbdfffd2, 0x3, "65bd219f000062f800", 0xfffff7a4, 0xd}) write$9p(r6, &(0x7f0000000040)="01", 0x1) readv(r8, &(0x7f0000000c00)=[{&(0x7f0000000280)=""/33, 0x21}], 0x1) r9 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'veth0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x4, r11, 0x2}, 0xc) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f00000000c0)) 6.251410826s ago: executing program 1 (id=63): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x410140, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6gre0\x00', r2, 0x2f, 0x7, 0x0, 0x80, 0x11, @local, @remote, 0x20, 0x1, 0x1, 0x10001}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0xffffffff, 0x0, 0x0, 0x1202, 0x80, 0x6}}) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001300192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010009081000418e00000004fcff", 0x58}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'veth1_to_bridge\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async) syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000011}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@empty, @dev, 0x0}, &(0x7f00000000c0)=0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x4, 0x6}, {0x64}, {0x6}]}) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x28}}, 0x4000) (async) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010101, 0x4e21, 0x3, 0x4e21, 0x0, 0xa, 0x80, 0x60, 0x33, r2, r7}, {0xfffffffffffffffc, 0x7, 0x6, 0x5, 0x101, 0x9, 0x2, 0x6}, {0x64, 0x6, 0x9, 0xfffffffffffffff9}, 0x0, 0x6e6bbd, 0x2, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x4d2}, 0xa, @in6=@mcast1, 0x0, 0x1, 0x2, 0x1, 0x5, 0x7, 0x8}}, 0xe8) 6.251077326s ago: executing program 0 (id=64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000001803040300d519c50010"], 0xef) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x5, 0x0, 0x3, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7}, 0x0) (async) open(&(0x7f00000001c0)='./file0\x00', 0x350741, 0x78e22799f4a46eaf) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) uname(&(0x7f0000000000)=""/121) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000005fc0), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x4008af25, &(0x7f0000006000)) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000000)={0x6, 0x1}) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x4) (async) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000000), 0x560c89bb) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x4}]) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x20) splice(r4, 0x0, r7, 0x0, 0x8000, 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r10 = dup(r9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x200094, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB='no=\x00\x00\x00\x00', @ANYRESHEX=r10, @ANYBLOB=',uname=\'*,k']) 5.692563881s ago: executing program 3 (id=65): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000093cca8438981079a0000000109022400010000102c0904000501a61052df1563e76d0901221800090581030004000503"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r0, @ANYBLOB="4b41cc96a2037f3cc9b08891fcbe479d301af6b5e68f367353e0cfcd74a89fae3b16bf4111ce9a451e36fa8f78c1f0f2242a9ca5c9b0a00f46339e9f73ff20d1e0424061db7a620fc9972caf978cf8c7f5d9356bfd669132f9b57ea27386b3fa6b77fca0b8ce5160b6546a7ee521edb18113e4616013b5fcaeb27ce7e47e6764f8e3b01bb3f894c8", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="9fc5e40d545b66b960edc3b05583b4219a70fc"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.405277668s ago: executing program 1 (id=67): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x2}, 0x1c) (async) sendmsg$inet(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="f327000c000200"/17], 0x20}, 0x1, 0x0, 0x0, 0x6}, 0x4020) (async) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x88d5, 0x1, 0x12, "936a75ede56324bb"}) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "dade8136c7342986", "b2abf8934086ca0c1ee5122191bde54050ec480d820f231e3f8caf1d5941baea", "44dfcd0c", "fa5ca62f36f5aada"}, 0x38) 5.405035438s ago: executing program 1 (id=68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x101901, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) read(r1, &(0x7f0000000500)=""/100, 0x7ffe) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000580)={0x5, 0x0, [{0x175, 0x0, 0x4}, {0xb93}, {0xbb0, 0x0, 0x5f}, {0x40000010, 0x0, 0x5}, {0x384}]}) mmap(&(0x7f0000217000/0x2000)=nil, 0x2000, 0xb635773f06ebbee2, 0x1010, r2, 0xfffff000) madvise(&(0x7f00007cf000/0x1000)=nil, 0x1000, 0x17) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000180)={0xb, 0x80, 0xfffd, 0x9dff, 0xe, "96ca676bc0d8a891"}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@redirect_dir_off}, {@redirect_dir_follow}, {@verity_on}, {@nfs_export_off}, {@index_on}, {@uuid_off}, {@volatile}, {@redirect_dir_follow}, {@upperdir={'upperdir', 0x3d, './my_debugfs'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/94, 0x5e) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r5 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff) lseek(r6, 0xffffffffffffffff, 0x4) r7 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r7}, &(0x7f0000000380)=0x0) timer_settime(r8, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) r9 = gettid() tkill(r9, 0x16) 5.31586944s ago: executing program 4 (id=71): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000000)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101260f01c3", 0xfffffffffffffef2}], 0x1, 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresgid(0xee00, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x78, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000b18"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.312926121s ago: executing program 1 (id=72): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="24010000000000407f04ffff00000000000109022d00010000000009040000020300000009210000000122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002218000db1d135150025ff0904a1010901a100758c06dc23a1483276b201a94908950109309102c0c0"], 0x0}, 0x0) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d8ca8d40d10521200009001000010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000e80)={0x2c, &(0x7f0000000d40)={0x40, 0x10, 0x2, "509c"}, 0x0, 0x0, 0x0, 0x0}) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000c00)={0x2c, &(0x7f0000000a40)={0x0, 0x6, 0x2, "249e"}, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x400c4808, &(0x7f0000000400)={0x6, 0x100, 0xa}) 5.292628232s ago: executing program 0 (id=73): r0 = syz_usb_connect$hid(0x2, 0x75, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x246, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x10}}}}}]}}]}}, 0x0) (async) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d0101", 0x2f, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a52000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) (async) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) fcntl$setlease(r1, 0x400, 0x1) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) (async) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) (async) r8 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) (async) r9 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r9, 0x3a, &(0x7f0000000000)={0x22, 0x6c, 0xfffffffe}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async) write$tun(r6, &(0x7f0000000300)={@val={0x0, 0x6002}, @val={0x1, 0x3, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x6, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}, {[@noop]}}, {0x1234, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x401, "a37573c7da14360eb70145d079bf5027cadf419f511eb32a19bbf95abdc7ed51", "074a9d30665f8ea958752bc7afe384c31c23ca9d6b46e8f3d6abf180794e6730f6a3e56fdba82196bd112af8a97278c2", "b0039800dc4c8287150cd7ff252f8692a44c2da12b98e9811e4e62b1", {"c6b810c80a4b320270b660b159d86202", "0e0438e01e4f738763923932086e1c25"}}}}}, 0xc2) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150025ff0904a101090192008c0508950129309102c0"], 0x0}, 0x0) 5.183389204s ago: executing program 0 (id=74): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$inet(0x2, 0x2, 0x1) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) (async) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, 0x0) (rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0xec000000, 0x20000000cd}]}) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setreuid(0xffffffffffffffff, 0xee01) (async, rerun: 64) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000440)={0x2, 'vlan1\x00', {0x7f}, 0x11}) (rerun: 64) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000002400)=[@text32={0x20, 0x0}], 0x1, 0x7a, 0x0, 0x0) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000540)) (async) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 64) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5.152272015s ago: executing program 0 (id=75): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @none, 0x5}, 0xa) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/nf_conntrack\x00') r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0xf, 0x6, "096fe675b413"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x21, 0x4, {0x4, 0x9, "7113"}}, 0x0}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000640)={0x0, 0xe, 0x5, "beeec0dd0d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, &(0x7f0000000400)={0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="0023a2000000a22323397a34c9dffbc5f6699ec75acd4297d05a6eca6719cf3cf84fd76a19ed3a6f819a5e14a392234cb699cec6e1e4812e36e5c3f0b3ef24bf9fe039677389164a52724c08fd598fc558e03f4f992097f0e3a710349516ca000258801e440e3b773bb1621f53d4789c7aceab6950bf34c39fa9bea4074f451c5a208a8b1d6d9cc68ea06250beb038d8eb4644bda73e3f1227b016fca647019f0865170a641d1bbd149b45cea7bc9da343c4c6f1e903e0d480e5610bfbd0ac19feaa79dd1710dbca4b8a12f0e0dcb6137d3dece0272fb715"], &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000540)={0x60, 0x10, 0xd9, "7f0fe63c42479366dc66a69f1fe6fd621f3eac3846ffac767690039c21e04675f528e4d6abd2791e06f0a8fbfc58b2cf0d11777b92cea0344a77112c862ff70c9cb240dec02f39c920b10135444ed338038f45705a5e888b08ac6dbb6daff824eea3f1f0ab51af09f156176f464575243740373a3bf1ecb963efa5a544507852e005a9b18d8be07990d31fd01bf348248bc38ee83442500fa998eb54de0a98cd2baa2e577ec5aca03594b0f58c36436bcc08f95f769771628dfc8f83e5f61c3451dfe446e11066abe898e784152df7c3b4413b31066163e777"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000006c0)=ANY=[@ANYBLOB="c0556f9a0568cbcb3b"], &(0x7f0000000700)=ANY=[@ANYBLOB="40050600000021bcd47f6907"]}) 4.60237223s ago: executing program 1 (id=76): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet(0x2, 0x1, 0x0) shutdown(r3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r4, &(0x7f0000000040)="240000001a005f0014f9f507000909000aff8000000000000000000008001e0000000000", 0x24) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r6, 0x0, 0x7ffff000, 0x3) (async) r7 = syz_ublk_setup_io_uring(0x2268, &(0x7f0000000200)={0x0, 0xa3da, 0x8, 0x3, 0x390, 0x0, r0}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='loginuid\x00') read$FUSE(r8, 0x0, 0x0) (async) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000180)={0x0, 0xc99c, 0x800, 0x2, 0x323, 0x0, r5}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9d7, 0x1, 0x1, 0x174}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca00, 0x80, 0x1, 0x2e3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfbf9, 0x10000, 0x1, 0x3e3, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5fc6, 0x200, 0x1, 0x19f, 0x0, r8}}], 0x4, &(0x7f0000005100)={0x2e, 0x10, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf47}, 0x0, 0x0, '\x00', {0x2, 0xece, 0x0, &(0x7f0000004100)=@buf_max_buf="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"}}, &(0x7f0000005180)) mount$9p_fd(0x0, &(0x7f00000000c0)='./dev/mapper/control\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) read$FUSE(r0, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000140)=ANY=[@ANYRES64=r9], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 3.666402404s ago: executing program 4 (id=77): syz_usb_connect$midi(0x3, 0x3c, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2a, 0x1, 0x1, 0x79, 0x0, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xff, 0x40}], [{{0x9, 0x5, 0x4, 0x3, 0x8, 0x1, 0x8, 0x8, {0x9, 0x25, 0x1, 0x5, "d9d0a607ff"}}}]}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x5, 0xb1, 0x10, 0x20, 0x3}, 0x0, 0x0, 0x5, [{0x47, &(0x7f0000000040)=@string={0x47, 0x3, "addd4c6ea17985e6269366c82d42bb16ad328da11de691e8e693e4aa8d26bc455bc67c05314ccc9bf7ea0d440d422c6b1c566c9315521da8ffbd48edd10923508b0bb2d4b5"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x820}}]}) 2.721647398s ago: executing program 0 (id=78): syz_usb_connect$uac1(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC, @ANYRES64, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="eb662ef6707cac5dc1889833f18b320e9ec0051631", @ANYRES8=0x0], 0x0) 2.681649169s ago: executing program 3 (id=79): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) prctl$PR_GET_SECCOMP(0x15) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0xba87317d461c07c9, 0xfffffffd, 0x4000}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0}) 2.503442724s ago: executing program 4 (id=80): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x30e, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x481}, 0x8000000) syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r1) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000800), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="07052dbd7000fedbdf25020000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4044001) socket$nl_netfilter(0x10, 0x3, 0xc) 2.503242114s ago: executing program 4 (id=81): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, 0xfffffffffffffffe) r1 = socket$netlink(0x10, 0x3, 0x10) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014000c0003007a302564aa58b9a64411f6bbf44dc48f575ad1", 0x3b}, {&(0x7f0000000040)}, {&(0x7f0000000080)="b6b84c2ebb43d5e722d08fa95034cfe628dd71b50b27c3c0cce435f56d01c368fb3c39a39d5499446ad4e760d08bebaff9c4aa966006", 0x36}, {&(0x7f0000000140)="9d48c8c8fb38bb92718ee74465a106aec70f28410fb2958d1d607a27ecfadc017f7b81dbd5fa10cf1b027e12ba95b2e478ee96f65ae8176e6803287dff45b5cebf0ff29fc9a4376f", 0x48}], 0x4) 1.688376235s ago: executing program 4 (id=82): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000280)="673e450f5f7b0866baa00066b86b4266ef66ba420066b8ef66ef0f29902cbb0000f36d3e260fc758b80f786b42d1d107b8010000000f86d9470f21a8", 0x3c}], 0x1, 0x21, 0x0, 0x0) r6 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x1004, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000380)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="40062800000028"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xeeee8000, 0xf000, 0x7, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1, 0x17d004, 0xd, 0x0, 0x0, 0x7, 0x7, 0x0, 0x4, 0x1, 0x4}, {0x118004, 0xffff1000, 0x18, 0xe, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0xa000, 0x2000, 0xa, 0xff, 0x80, 0x5, 0x3, 0x0, 0x0, 0x0, 0x2}, {0x1000, 0x0, 0xd, 0x8, 0x70, 0x80, 0x5c, 0x0, 0xfd, 0x1c, 0x7, 0x88}, {0x100026fff, 0xeeef0000, 0x8, 0x4, 0xcf, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x86, 0x8}, {0xeeee8000, 0x10000, 0xf, 0x0, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x82, 0xfc, 0x10, 0x4, 0xe}, {0x41000, 0x800}, {0x1, 0xfffe}, 0x40000010, 0x0, 0x26000, 0x10, 0xffffffffffffffd, 0x0, 0x900, [0x0, 0x0, 0x2, 0x40000000000004]}) 1.579497349s ago: executing program 1 (id=83): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000000040)=""/115, 0x73, 0x60, &(0x7f0000000340)=@in6={0xa, 0x4e22, 0x5, @loopback, 0x90}, 0x80) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xa2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x845, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @local}, 0x1c) getsockopt$inet6_buf(r7, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000200)={0x0, 0x3a, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x180) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000140)={'veth1_to_bond\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 923.340826ms ago: executing program 3 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r0) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) (async) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x240440d4, &(0x7f0000000080)={0x11, 0x3, r4, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x88, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xcd}]}, 0x88}, 0x1, 0x0, 0x0, 0x44800}, 0x20040005) (async) sendto(r1, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000003d40)=""/4052, 0xfd4}, {&(0x7f0000000880)=""/203, 0xcb}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000002200)=""/4097, 0x1001}, {&(0x7f0000000ac0)=""/246, 0xf6}, {&(0x7f0000000380)=""/286, 0x11e}, {&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f00000001c0)=""/257, 0x101}, {&(0x7f00000007c0)=""/129, 0x81}], 0x9}, 0x72}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x1f74}, {{0x0, 0x0, 0x0}, 0xe91}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x2090d2}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x1}], 0x8, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futimesat(r0, &(0x7f0000000040)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', &(0x7f0000000100)={{}, {0x77359400}}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003300)={0x6, 0x0, [{0xfec00000, 0xb1, &(0x7f0000000980)=""/177}, {0x30000, 0x79, &(0x7f0000000a40)=""/121}, {0x30000, 0x1000, &(0x7f00000011c0)=""/4096}, {0x60000, 0xc, &(0x7f00000021c0)=""/12}, {0x9000, 0x4f, &(0x7f0000003240)=""/79}, {0x10000, 0x3f, &(0x7f00000032c0)=""/63}]}) writev(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) (async) r6 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4c}) syz_usb_control_io$uac1(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) (async) pwrite64(r0, &(0x7f0000000180)='\v', 0x1, 0x5) 0s ago: executing program 4 (id=85): r0 = syz_usb_connect(0x3, 0xc7, &(0x7f0000000000)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c24050301000002000000000705810310000609040100000e0200000e240101470082000200000001001b240401015955593200001000800000aa00389b711001000000001e24050100a000780000c0e00000c0e000009600001516050001"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r1, &(0x7f0000000140)='personality\x00') openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) userfaultfd(0x801) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/140, 0x8c}], 0x1, 0x0, 0x41}, 0x0) sendmsg$tipc(r2, 0x0, 0x20048041) close(r3) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d5, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000400)='!*:', 0x3) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f00000005c0)={0x0, 0x12, 0x1a, "b198601db7e43d2841888aff0daa0e24da848b4ed158493137a4"}, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 21.634401][ T36] audit: type=1400 audit(1787781325.069:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.635484][ T286] cgroup: Unknown subsys name 'net' [ 21.657048][ T36] audit: type=1400 audit(1787781325.069:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.684411][ T36] audit: type=1400 audit(1787781325.099:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.684611][ T286] cgroup: Unknown subsys name 'devices' [ 21.803772][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.809387][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.921386][ T36] audit: type=1400 audit(1787781325.349:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.944560][ T36] audit: type=1400 audit(1787781325.349:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.969268][ T36] audit: type=1400 audit(1787781325.349:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.999259][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.008059][ T36] audit: type=1400 audit(1787781325.439:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.033564][ T36] audit: type=1400 audit(1787781325.439:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.066362][ T36] audit: type=1400 audit(1787781325.499:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.091915][ T36] audit: type=1400 audit(1787781325.499:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.092220][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.869905][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.877064][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.884219][ T293] bridge_slave_0: entered allmulticast mode [ 22.890417][ T293] bridge_slave_0: entered promiscuous mode [ 22.898356][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.905499][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.912585][ T293] bridge_slave_1: entered allmulticast mode [ 22.918814][ T293] bridge_slave_1: entered promiscuous mode [ 22.947507][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.954654][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.961706][ T294] bridge_slave_0: entered allmulticast mode [ 22.968057][ T294] bridge_slave_0: entered promiscuous mode [ 22.975655][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.982734][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.989782][ T294] bridge_slave_1: entered allmulticast mode [ 22.995977][ T294] bridge_slave_1: entered promiscuous mode [ 23.058773][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.065883][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.073003][ T296] bridge_slave_0: entered allmulticast mode [ 23.079165][ T296] bridge_slave_0: entered promiscuous mode [ 23.088178][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.095282][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.102415][ T296] bridge_slave_1: entered allmulticast mode [ 23.108647][ T296] bridge_slave_1: entered promiscuous mode [ 23.131302][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.138442][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.145548][ T295] bridge_slave_0: entered allmulticast mode [ 23.151779][ T295] bridge_slave_0: entered promiscuous mode [ 23.158262][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.165371][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.172505][ T295] bridge_slave_1: entered allmulticast mode [ 23.178667][ T295] bridge_slave_1: entered promiscuous mode [ 23.277428][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.284491][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.291751][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.298786][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.310724][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.317805][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.325086][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.332117][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.372791][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.379839][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.387134][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.394176][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.415286][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.422533][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.429957][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.437858][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.445252][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.452623][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.464614][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.471653][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.479603][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.486658][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.503980][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.511038][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.518648][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.525712][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.545545][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.552603][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.560195][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.567241][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.597549][ T293] veth0_vlan: entered promiscuous mode [ 23.611236][ T293] veth1_macvtap: entered promiscuous mode [ 23.630108][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.637206][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.651349][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.658442][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.668110][ T295] veth0_vlan: entered promiscuous mode [ 23.690077][ T294] veth0_vlan: entered promiscuous mode [ 23.699141][ T295] veth1_macvtap: entered promiscuous mode [ 23.725059][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.745930][ T296] veth0_vlan: entered promiscuous mode [ 23.753109][ T294] veth1_macvtap: entered promiscuous mode [ 23.770215][ T296] veth1_macvtap: entered promiscuous mode [ 24.032494][ T72] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.082357][ T317] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.122605][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.182626][ T72] usb 1-1: Using ep0 maxpacket: 32 [ 24.189196][ T72] usb 1-1: unable to get BOS descriptor or descriptor too short [ 24.197583][ T72] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 24.206014][ T72] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 24.216340][ T317] usb 2-1: device descriptor read/64, error -71 [ 24.222687][ T72] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 24.231728][ T72] usb 1-1: config 128 has no interface number 0 [ 24.238264][ T72] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 24.249832][ T72] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 24.260321][ T72] usb 1-1: config 128 interface 127 has no altsetting 0 [ 24.268759][ T72] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 24.277992][ T72] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.282114][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 24.286323][ T72] usb 1-1: Product: syz [ 24.293024][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.295477][ T72] usb 1-1: Manufacturer: 珮檲徳ꕠ秪쫮ꈂᬌ᭩긱䥼邐彼劗㜥䵛T屮㨼ꨵḔ¤襽㻂令죙핦꣋ⶵퟩ⠥ᑀ⃝䂘琗ꯤ읗椏ჾ [ 24.306593][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 24.321952][ T72] usb 1-1: SerialNumber: syz [ 24.334558][ T45] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 24.348408][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.357220][ T45] usb 4-1: config 0 descriptor?? [ 24.386164][ T335] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=335 comm=syz.2.7 [ 24.472098][ T317] usb 2-1: device descriptor read/64, error -71 [ 24.555358][ T72] usb 1-1: USB disconnect, device number 2 [ 24.567510][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 24.712102][ T317] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 24.842118][ T317] usb 2-1: device descriptor read/64, error -71 [ 25.092102][ T317] usb 2-1: device descriptor read/64, error -71 [ 25.104372][ T341] 9pnet_fd: Insufficient options for proto=fd [ 25.113926][ T341] 9pnet_fd: Insufficient options for proto=fd [ 25.132745][ T347] ======================================================= [ 25.132745][ T347] WARNING: The mand mount option has been deprecated and [ 25.132745][ T347] and is ignored by this kernel. Remove the mand [ 25.132745][ T347] option from the mount to silence this warning. [ 25.132745][ T347] ======================================================= [ 25.202259][ T317] usb usb2-port1: attempt power cycle [ 25.320949][ T351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.329506][ T351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.341801][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 25.347981][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 25.358419][ T45] usb 4-1: USB disconnect, device number 2 [ 25.369677][ T355] capability: warning: `syz.3.12' uses deprecated v2 capabilities in a way that may be insecure [ 25.384055][ T355] Zero length message leads to an empty skb [ 25.399619][ T357] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.502159][ T72] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.521390][ T359] syzkaller1: entered promiscuous mode [ 25.527124][ T359] syzkaller1: entered allmulticast mode [ 25.542137][ T317] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 25.570440][ T362] syzkaller1: left promiscuous mode [ 25.575695][ T362] syzkaller1: left allmulticast mode [ 25.583353][ T317] usb 2-1: device descriptor read/8, error -71 [ 25.663273][ T72] usb 3-1: config 1 has an invalid descriptor of length 219, skipping remainder of the config [ 25.679045][ T72] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.689767][ T72] usb 3-1: New USB device found, idVendor=a835, idProduct=12c4, bcdDevice= 0.7e [ 25.699007][ T72] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.707056][ T72] usb 3-1: Product: syz [ 25.711338][ T72] usb 3-1: Manufacturer: syz [ 25.715985][ T72] usb 3-1: SerialNumber: syz [ 25.721690][ T317] usb 2-1: device descriptor read/8, error -71 [ 25.912125][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.931368][ T72] usb 3-1: cannot find UAC_HEADER [ 25.937816][ T72] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 25.947580][ T72] usb 3-1: USB disconnect, device number 2 [ 25.955461][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.962221][ T317] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 25.993206][ T317] usb 2-1: device descriptor read/8, error -71 [ 26.073240][ T45] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 26.082277][ T45] usb 4-1: config 1 has no interface number 0 [ 26.088471][ T45] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 26.097832][ T45] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 30, changing to 7 [ 26.110173][ T45] usb 4-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 26.119267][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.123153][ T317] usb 2-1: device descriptor read/8, error -71 [ 26.127294][ T45] usb 4-1: Product: syz [ 26.137602][ T45] usb 4-1: Manufacturer: syz [ 26.142213][ T45] usb 4-1: SerialNumber: syz [ 26.242223][ T317] usb usb2-port1: unable to enumerate USB device [ 26.349268][ T45] usb 4-1: 1:0 : does not exist [ 26.354221][ T45] usb 4-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 26.361640][ T45] usb 4-1: incorrect wMaxPacketSize 0x40 for BADD profile [ 26.370252][ T45] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 26.380677][ T45] usb 4-1: USB disconnect, device number 3 [ 26.412723][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.600563][ T12] tipc: Subscription rejected, illegal request [ 26.692137][ T317] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.699069][ T36] kauditd_printk_skb: 542 callbacks suppressed [ 26.699087][ T36] audit: type=1326 audit(1787781330.129:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=377 comm="syz.0.21" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff98b19e0d9 code=0x0 [ 26.750603][ T36] audit: type=1400 audit(1787781330.179:617): avc: denied { rename } for pid=377 comm="syz.0.21" name="file0" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 26.750830][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.772789][ T36] audit: type=1400 audit(1787781330.179:618): avc: denied { unlink } for pid=377 comm="syz.0.21" name="file0" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 26.852375][ T317] usb 3-1: Using ep0 maxpacket: 32 [ 26.853230][ T381] netlink: 64 bytes leftover after parsing attributes in process `syz.1.22'. [ 26.859977][ T317] usb 3-1: unable to get BOS descriptor or descriptor too short [ 26.878288][ T317] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 26.887207][ T317] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 26.900894][ T317] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 26.910093][ T317] usb 3-1: config 128 has no interface number 0 [ 26.916393][ T317] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 26.927651][ T317] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 26.937753][ T317] usb 3-1: config 128 interface 127 has no altsetting 0 [ 26.946077][ T317] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 26.955150][ T317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.963303][ T317] usb 3-1: Product: syz [ 26.967464][ T317] usb 3-1: Manufacturer: 珮檲徳ꕠ秪쫮ꈂᬌ᭩긱䥼邐彼劗㜥䵛T屮㨼ꨵḔ¤襽㻂令죙핦꣋ⶵퟩ⠥ᑀ⃝䂘琗ꯤ읗椏ჾ [ 26.982849][ T317] usb 3-1: SerialNumber: syz [ 27.132118][ T366] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 27.194807][ T317] usb 3-1: USB disconnect, device number 3 [ 27.202772][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.252124][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 27.283144][ T366] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 27.294825][ T366] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 27.305956][ T366] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 27.315808][ T366] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 27.324941][ T366] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.392109][ T45] usb 2-1: device descriptor read/64, error -71 [ 27.535547][ T366] usb 4-1: string descriptor 0 read error: -71 [ 27.541944][ T366] hub 4-1:32.0: USB hub found [ 27.547193][ T366] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 27.582587][ T366] usb 4-1: USB disconnect, device number 4 [ 27.642126][ T45] usb 2-1: device descriptor read/64, error -71 [ 27.842389][ T320] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.892121][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 27.952099][ T72] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 27.992131][ T320] usb 1-1: Using ep0 maxpacket: 16 [ 27.998314][ T320] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 28.006736][ T320] usb 1-1: config 1 has no interface number 0 [ 28.013082][ T320] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 28.023083][ T45] usb 2-1: device descriptor read/64, error -71 [ 28.029341][ T320] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 28.039422][ T320] usb 1-1: config 1 interface 105 has no altsetting 0 [ 28.048854][ T320] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 28.053813][ T36] audit: type=1400 audit(1787781331.479:619): avc: denied { read write } for pid=389 comm="syz.3.27" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.060036][ T320] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 28.085768][ T36] audit: type=1400 audit(1787781331.479:620): avc: denied { open } for pid=389 comm="syz.3.27" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.090760][ T320] usb 1-1: Product: syz [ 28.116033][ T320] usb 1-1: Manufacturer: syz [ 28.120624][ T320] usb 1-1: SerialNumber: syz [ 28.126018][ T386] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 28.133309][ T386] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 28.133858][ T72] usb 3-1: unable to get BOS descriptor or descriptor too short [ 28.149055][ T72] usb 3-1: not running at top speed; connect to a high speed hub [ 28.149769][ T36] audit: type=1400 audit(1787781331.579:621): avc: denied { unmount } for pid=389 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 28.156866][ T390] overlayfs: statfs failed on './file0' [ 28.188924][ T72] usb 3-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 28.198634][ T72] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.206806][ T72] usb 3-1: Product: syz [ 28.210974][ T72] usb 3-1: Manufacturer: syz [ 28.215650][ T72] usb 3-1: SerialNumber: syz [ 28.259547][ T36] audit: type=1400 audit(1787781331.689:622): avc: denied { mount } for pid=392 comm="syz.3.28" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 28.281190][ T45] usb 2-1: device descriptor read/64, error -71 [ 28.392235][ T45] usb usb2-port1: attempt power cycle [ 28.423029][ T36] audit: type=1400 audit(1787781331.859:623): avc: denied { setopt } for pid=387 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.485912][ T72] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 28.493556][ T72] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 28.502615][ T72] usb 3-1: USB disconnect, device number 4 [ 28.512708][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.541797][ T386] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 28.549090][ T386] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 28.732111][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 28.753020][ T45] usb 2-1: device descriptor read/8, error -71 [ 28.883519][ T45] usb 2-1: device descriptor read/8, error -71 [ 28.960004][ T320] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 29.044776][ T36] audit: type=1400 audit(1787781332.479:624): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 29.071732][ T36] audit: type=1400 audit(1787781332.499:625): avc: denied { create } for pid=398 comm="syz.3.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.122739][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 29.143270][ T45] usb 2-1: device descriptor read/8, error -71 [ 29.173352][ T320] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, c2:5d:bd:38:10:70 [ 29.232107][ T72] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 29.273161][ T45] usb 2-1: device descriptor read/8, error -71 [ 29.332116][ T317] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 29.381010][ T149] aqc111 1-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -71 [ 29.391703][ T149] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -71 [ 29.392642][ T45] usb usb2-port1: unable to enumerate USB device [ 29.399944][ T72] usb 3-1: Using ep0 maxpacket: 8 [ 29.406272][ T320] usb 1-1: USB disconnect, device number 3 [ 29.411534][ T149] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 29.417568][ T320] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 29.425421][ T149] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 29.444492][ T149] aqc111 1-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 29.446658][ T72] usb 3-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 29.452632][ T149] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 29.461700][ T72] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.469609][ T149] aqc111 1-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 29.482231][ T72] usb 3-1: Product: syz [ 29.485910][ T149] aqc111 1-1:1.105 eth1: Error submitting the control message: status=-19 [ 29.489773][ T72] usb 3-1: Manufacturer: syz [ 29.498305][ T149] aqc111 1-1:1.105 eth1: Error submitting the control message: status=-19 [ 29.503220][ T72] usb 3-1: SerialNumber: syz [ 29.511688][ T149] aqc111 1-1:1.105 eth1: Error submitting the control message: status=-19 [ 29.522988][ T317] usb 4-1: unable to get BOS descriptor or descriptor too short [ 29.524524][ T149] aqc111 1-1:1.105 eth1: Error submitting the control message: status=-19 [ 29.533050][ T317] usb 4-1: config 7 has an invalid interface number: 13 but max is 0 [ 29.548872][ T320] aqc111 1-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 29.549061][ T317] usb 4-1: config 7 has no interface number 0 [ 29.556867][ T320] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 29.563231][ T317] usb 4-1: config 7 interface 13 has no altsetting 0 [ 29.570943][ T320] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 29.579212][ T317] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=d2.06 [ 29.585649][ T320] aqc111 1-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 29.595017][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.611553][ T317] usb 4-1: Product: syz [ 29.615821][ T317] usb 4-1: Manufacturer: syz [ 29.620448][ T317] usb 4-1: SerialNumber: syz [ 29.662566][ T320] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 29.671927][ T320] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 29.681420][ T320] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 29.722224][ T397] tipc: Enabling of bearer rejected, failed to enable media [ 29.738780][ T72] usb 3-1: USB disconnect, device number 5 [ 29.754097][ T429] udevd[429]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.830138][ T317] net1080 4-1:7.13: probe with driver net1080 failed with error -22 [ 29.841086][ T317] usb 4-1: USB disconnect, device number 5 [ 30.262446][ T320] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 30.334419][ T451] Need at least one configuration in g1. [ 30.340125][ T451] udc dummy_udc.0: failed to start g1: -22 [ 30.346133][ T451] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 30.359325][ T451] UDC core: g1: couldn't find an available UDC or it's busy [ 30.383977][ T459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.392509][ T459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.402146][ T320] usb 2-1: device descriptor read/64, error -71 [ 30.602140][ T72] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 30.612222][ T317] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 30.622135][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 30.642121][ T320] usb 2-1: device descriptor read/64, error -71 [ 30.754375][ T72] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 30.763513][ T72] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.771506][ T72] usb 3-1: Product: syz [ 30.775762][ T72] usb 3-1: Manufacturer: syz [ 30.780378][ T72] usb 3-1: SerialNumber: syz [ 30.782091][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 30.788328][ T317] usb 1-1: unable to get BOS descriptor or descriptor too short [ 30.791165][ T45] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 30.798242][ T317] usb 1-1: not running at top speed; connect to a high speed hub [ 30.805932][ T45] usb 4-1: config 1 has no interface number 0 [ 30.805960][ T45] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 30.814809][ T317] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 30.819771][ T45] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 30.819797][ T45] usb 4-1: config 1 interface 105 has no altsetting 0 [ 30.830326][ T317] usb 1-1: config 0 has no interface number 0 [ 30.839421][ T45] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 30.848005][ T317] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 30.854899][ T45] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 30.860849][ T317] usb 1-1: config 0 interface 88 has no altsetting 0 [ 30.869945][ T45] usb 4-1: Product: syz [ 30.882940][ T317] usb 1-1: language id specifier not provided by device, defaulting to English [ 30.888865][ T45] usb 4-1: Manufacturer: syz [ 30.898502][ T317] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 30.899668][ T45] usb 4-1: SerialNumber: syz [ 30.902096][ T320] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 30.909009][ T317] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 30.913673][ T456] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 30.922512][ T317] usb 1-1: Product: syz [ 30.928330][ T456] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 30.934557][ T317] usb 1-1: SerialNumber: syz [ 30.966301][ T317] usb 1-1: config 0 descriptor?? [ 30.971544][ T458] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 30.992153][ T72] usb 3-1: USB disconnect, device number 6 [ 31.072104][ T320] usb 2-1: device descriptor read/64, error -71 [ 31.181999][ T317] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input5 [ 31.194361][ T317] usb 1-1: USB disconnect, device number 4 [ 31.312121][ T320] usb 2-1: device descriptor read/64, error -71 [ 31.349952][ T456] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 31.357160][ T456] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 31.422194][ T320] usb usb2-port1: attempt power cycle [ 31.692536][ T463] netlink: 'syz.0.44': attribute type 13 has an invalid length. [ 31.710203][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 31.710219][ T36] audit: type=1400 audit(1787781335.139:657): avc: denied { write } for pid=467 comm="syz.0.45" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.737808][ T36] audit: type=1400 audit(1787781335.139:658): avc: denied { remove_name } for pid=467 comm="syz.0.45" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.760423][ T36] audit: type=1400 audit(1787781335.139:659): avc: denied { unlink } for pid=467 comm="syz.0.45" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 31.783164][ T320] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 31.790679][ T45] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 31.813015][ T320] usb 2-1: device descriptor read/8, error -71 [ 31.842111][ T317] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 31.942124][ T337] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.945052][ T320] usb 2-1: device descriptor read/8, error -71 [ 31.993172][ T317] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 32.002253][ T317] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 32.004669][ T45] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 9e:ac:a5:2c:5b:7a [ 32.012085][ T317] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 65535, setting to 64 [ 32.036247][ T36] audit: type=1400 audit(1787781335.469:660): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.057433][ T317] usb 3-1: config 1 interface 0 has no altsetting 0 [ 32.064082][ T317] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 32.066131][ T36] audit: type=1400 audit(1787781335.489:661): avc: denied { read } for pid=471 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.082083][ T317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.096226][ T36] audit: type=1400 audit(1787781335.489:662): avc: denied { open } for pid=471 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.112943][ T317] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 32.135540][ T337] usb 1-1: Using ep0 maxpacket: 16 [ 32.135899][ T36] audit: type=1400 audit(1787781335.489:663): avc: denied { getattr } for pid=471 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.167016][ T337] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 32.179462][ T337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.186027][ T36] audit: type=1400 audit(1787781335.619:664): avc: denied { write } for pid=470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.190619][ T337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.222145][ T320] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 32.222879][ T337] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 32.232633][ T45] usb 4-1: USB disconnect, device number 6 [ 32.243289][ T337] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 32.258438][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.259464][ T45] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 32.267716][ T337] usb 1-1: config 0 descriptor?? [ 32.280805][ T320] usb 2-1: device descriptor read/8, error -71 [ 32.285177][ T36] audit: type=1400 audit(1787781335.619:665): avc: denied { add_name } for pid=470 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.310965][ T36] audit: type=1400 audit(1787781335.739:666): avc: denied { remove_name } for pid=483 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=789 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 32.349886][ T317] scsi host1: usb-storage 3-1:1.0 [ 32.386399][ T45] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 32.395858][ T45] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 32.405250][ T45] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 32.415653][ T320] usb 2-1: device descriptor read/8, error -71 [ 32.522238][ T320] usb usb2-port1: unable to enumerate USB device [ 32.557168][ T317] usb 3-1: USB disconnect, device number 7 [ 32.716156][ T337] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0001/input/input6 [ 32.728732][ T337] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0001/input/input7 [ 32.747212][ T337] kye 0003:0458:5013.0001: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 32.770646][ T502] loop6: detected capacity change from 0 to 1 [ 32.778266][ T502] netlink: 112 bytes leftover after parsing attributes in process `syz.3.46'. [ 32.963129][ T337] usb 1-1: USB disconnect, device number 5 [ 33.042164][ T317] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 33.105897][ T297] bridge_slave_1: left allmulticast mode [ 33.111875][ T297] bridge_slave_1: left promiscuous mode [ 33.117943][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.126904][ T297] bridge_slave_0: left allmulticast mode [ 33.132652][ T297] bridge_slave_0: left promiscuous mode [ 33.138352][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.222118][ T317] usb 4-1: Using ep0 maxpacket: 32 [ 33.228446][ T317] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 33.233205][ T511] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.236692][ T317] usb 4-1: config 0 has no interface number 0 [ 33.244129][ T511] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.249764][ T317] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 33.257289][ T511] bridge_slave_0: entered allmulticast mode [ 33.267390][ T317] usb 4-1: config 0 interface 196 has no altsetting 0 [ 33.276066][ T511] bridge_slave_0: entered promiscuous mode [ 33.280922][ T317] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 33.286944][ T511] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.294388][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.301641][ T511] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.309333][ T317] usb 4-1: Product: syz [ 33.316662][ T511] bridge_slave_1: entered allmulticast mode [ 33.320495][ T317] usb 4-1: Manufacturer: syz [ 33.327094][ T511] bridge_slave_1: entered promiscuous mode [ 33.330991][ T317] usb 4-1: SerialNumber: syz [ 33.336921][ T320] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 33.345495][ T317] usb 4-1: config 0 descriptor?? [ 33.354130][ T504] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 33.361362][ T297] veth1_macvtap: left promiscuous mode [ 33.366908][ T297] veth0_vlan: left promiscuous mode [ 33.446976][ T511] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.454053][ T511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.461322][ T511] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.468350][ T511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.492495][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.493761][ T320] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 33.512743][ T516] device-mapper: ioctl: Unable to rename non-existent device, to [ 33.512966][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.520856][ T320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.532018][ T516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.52'. [ 33.536859][ T320] usb 2-1: config 0 descriptor?? [ 33.553304][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.560349][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.570807][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.577881][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.624135][ T511] veth0_vlan: entered promiscuous mode [ 33.635819][ T511] veth1_macvtap: entered promiscuous mode [ 33.918697][ T317] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 33.953478][ T317] ipheth 4-1:0.196: probe with driver ipheth failed with error -22 [ 33.967788][ T317] usb 4-1: USB disconnect, device number 7 [ 34.062839][ T320] usb 2-1: Cannot set MAC address [ 34.068309][ T320] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 34.093541][ T320] usb 2-1: USB disconnect, device number 14 [ 34.192146][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 34.352109][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 34.358311][ T45] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 34.366696][ T45] usb 5-1: config 1 has no interface number 0 [ 34.372894][ T45] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 34.382828][ T45] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 34.392105][ T317] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 34.392843][ T320] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 34.407834][ T45] usb 5-1: config 1 interface 105 has no altsetting 0 [ 34.416007][ T45] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 34.425089][ T45] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 34.433210][ T45] usb 5-1: Product: syz [ 34.437383][ T45] usb 5-1: Manufacturer: syz [ 34.441960][ T45] usb 5-1: SerialNumber: syz [ 34.450944][ T530] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 34.458242][ T530] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 34.504575][ T542] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 34.552095][ T317] usb 4-1: Using ep0 maxpacket: 32 [ 34.558334][ T317] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 34.566470][ T317] usb 4-1: config 0 has no interface number 0 [ 34.573826][ T320] usb 2-1: unable to get BOS descriptor or descriptor too short [ 34.574176][ T317] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 34.583336][ T320] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 34.590528][ T317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.603185][ T320] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 34.609700][ T317] usb 4-1: Product: syz [ 34.619986][ T320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.622889][ T317] usb 4-1: Manufacturer: syz [ 34.630925][ T320] usb 2-1: Product: syz [ 34.635221][ T317] usb 4-1: SerialNumber: syz [ 34.639573][ T320] usb 2-1: Manufacturer: syz [ 34.644964][ T317] usb 4-1: config 0 descriptor?? [ 34.653048][ T320] usb 2-1: SerialNumber: syz [ 34.654486][ T317] smsc95xx v2.0.0 [ 34.866636][ T530] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 34.874345][ T530] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 34.875617][ T320] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 34.888508][ T320] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 34.896954][ T320] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 34.904726][ T320] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 34.914167][ T320] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 34.922603][ T320] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 34.930333][ T320] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 34.940408][ T320] usb 2-1: failed to enable PITCH for EP 0x82 [ 34.951394][ T320] usb 2-1: USB disconnect, device number 15 [ 34.966405][ T535] udevd[535]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.055894][ T317] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 35.066679][ T317] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 35.288927][ T45] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 35.395829][ T553] veth0: entered allmulticast mode [ 35.476934][ T560] 9pnet_fd: Insufficient options for proto=fd [ 35.484560][ T317] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 35.495637][ T317] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 35.506779][ T317] usb 4-1: USB disconnect, device number 8 [ 35.508941][ T45] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 0e:88:3f:28:bb:a8 [ 35.709294][ T149] aqc111 5-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -71 [ 35.709503][ T45] usb 5-1: USB disconnect, device number 2 [ 35.717665][ T149] aqc111 5-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -19 [ 35.724104][ T45] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 35.731755][ T149] aqc111 5-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 35.750312][ T149] aqc111 5-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 35.758478][ T149] aqc111 5-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 35.766515][ T149] aqc111 5-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 35.774788][ T149] aqc111 5-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 35.782949][ T149] aqc111 5-1:1.105 eth1: Error submitting the control message: status=-19 [ 35.791496][ T149] aqc111 5-1:1.105 eth1: Error submitting the control message: status=-19 [ 35.800387][ T149] aqc111 5-1:1.105 eth1: Error submitting the control message: status=-19 [ 35.808963][ T149] aqc111 5-1:1.105 eth1: Error submitting the control message: status=-19 [ 35.818285][ T45] aqc111 5-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 35.826290][ T45] aqc111 5-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 35.834346][ T45] aqc111 5-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 35.842682][ T45] aqc111 5-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 35.892458][ T45] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 35.901942][ T45] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 35.911364][ T45] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 36.252177][ T317] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 36.288721][ T599] fuse: Unknown parameter 'gd' [ 36.309858][ T602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=602 comm=syz.4.70 [ 36.322858][ T602] capability: warning: `syz.4.70' uses 32-bit capabilities (legacy support in use) [ 36.392098][ T317] usb 4-1: device descriptor read/64, error -71 [ 36.602114][ T320] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 36.622139][ T72] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 36.632119][ T317] usb 4-1: device descriptor read/64, error -71 [ 36.753124][ T320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 36.764152][ T320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 36.775044][ T320] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 36.783132][ T72] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.784100][ T320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.794553][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.803430][ T320] usb 5-1: config 0 descriptor?? [ 36.815795][ T72] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.818436][ T604] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 36.827900][ T72] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 36.847752][ T72] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.856849][ T337] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 36.864354][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.873272][ T72] usb 2-1: config 0 descriptor?? [ 36.902103][ T317] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 37.032095][ T337] usb 1-1: Using ep0 maxpacket: 16 [ 37.037318][ T317] usb 4-1: device descriptor read/64, error -71 [ 37.044637][ T337] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 37.052857][ T337] usb 1-1: config 1 has no interface number 0 [ 37.058936][ T337] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 37.068860][ T337] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 37.078875][ T337] usb 1-1: config 1 interface 105 has no altsetting 0 [ 37.087276][ T337] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 37.096646][ T337] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 37.105309][ T72] usbhid 2-1:0.0: can't add hid device: -71 [ 37.111425][ T337] usb 1-1: Product: syz [ 37.112244][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 37.112258][ T36] audit: type=1400 audit(1787781340.539:705): avc: denied { write } for pid=626 comm="syz.1.76" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 37.115775][ T72] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 37.128691][ T36] audit: type=1400 audit(1787781340.549:706): avc: denied { mounton } for pid=626 comm="syz.1.76" path="/10/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 37.144618][ T337] usb 1-1: Manufacturer: syz [ 37.184031][ T72] usb 2-1: USB disconnect, device number 16 [ 37.190566][ T337] usb 1-1: SerialNumber: syz [ 37.198037][ T621] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 37.205249][ T621] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 37.312155][ T317] usb 4-1: device descriptor read/64, error -71 [ 37.422260][ T317] usb usb4-port1: attempt power cycle [ 37.441705][ T320] usbhid 5-1:0.0: can't add hid device: -71 [ 37.450001][ T320] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 37.459832][ T320] usb 5-1: USB disconnect, device number 3 [ 37.492081][ T72] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 37.614285][ T621] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 37.621475][ T621] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 37.628724][ T72] usb 2-1: device descriptor read/64, error -71 [ 37.772107][ T317] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 37.793008][ T317] usb 4-1: device descriptor read/8, error -71 [ 37.872111][ T72] usb 2-1: device descriptor read/64, error -71 [ 37.924266][ T317] usb 4-1: device descriptor read/8, error -71 [ 38.035875][ T337] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 38.112104][ T72] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 38.162137][ T317] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 38.193095][ T317] usb 4-1: device descriptor read/8, error -71 [ 38.222117][ T320] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 38.248745][ T337] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 5e:41:89:47:55:15 [ 38.262165][ T72] usb 2-1: device descriptor read/64, error -71 [ 38.323103][ T317] usb 4-1: device descriptor read/8, error -71 [ 38.382094][ T320] usb 5-1: Using ep0 maxpacket: 8 [ 38.388393][ T320] usb 5-1: unable to get BOS descriptor or descriptor too short [ 38.398045][ T320] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 38.407185][ T320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.415201][ T320] usb 5-1: Product: с [ 38.419275][ T320] usb 5-1: Manufacturer: ц [ 38.424036][ T320] usb 5-1: SerialNumber: э [ 38.432194][ T317] usb usb4-port1: unable to enumerate USB device [ 38.451990][ T149] aqc111 1-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -71 [ 38.452066][ T317] usb 1-1: USB disconnect, device number 6 [ 38.460252][ T149] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -19 [ 38.467766][ T317] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 38.475909][ T149] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 38.493074][ T149] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 38.501096][ T149] aqc111 1-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 38.509048][ T72] usb 2-1: device descriptor read/64, error -71 [ 38.509301][ T149] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 38.523377][ T149] aqc111 1-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 38.531474][ T149] aqc111 1-1:1.105 eth1: Error submitting the control message: status=-19 [ 38.540041][ T149] aqc111 1-1:1.105 eth1: Error submitting the control message: status=-19 [ 38.548714][ T149] aqc111 1-1:1.105 eth1: Error submitting the control message: status=-19 [ 38.557269][ T149] aqc111 1-1:1.105 eth1: Error submitting the control message: status=-19 [ 38.566607][ T317] aqc111 1-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 38.575514][ T317] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 38.583730][ T317] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 38.591986][ T317] aqc111 1-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 38.625284][ T72] usb usb2-port1: attempt power cycle [ 38.630760][ T317] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 38.643219][ T317] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 38.647030][ T320] usb 5-1: MIDIStreaming interface descriptor not found [ 38.652609][ T317] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 38.670638][ T320] usb 5-1: USB disconnect, device number 4 [ 38.681992][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.982127][ T72] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 39.003121][ T72] usb 2-1: device descriptor read/8, error -71 [ 39.133125][ T72] usb 2-1: device descriptor read/8, error -71 [ 39.154404][ T664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 39.222163][ T317] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 39.352129][ T317] usb 1-1: device descriptor read/64, error -71 [ 39.372136][ T72] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 39.393061][ T72] usb 2-1: device descriptor read/8, error -71 [ 39.422126][ T337] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 39.523184][ T72] usb 2-1: device descriptor read/8, error -71 [ 39.573164][ T337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.584142][ T337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.593913][ T337] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 39.602983][ T317] usb 1-1: device descriptor read/64, error -71 [ 39.609241][ T337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.617842][ T337] usb 4-1: config 0 descriptor?? [ 39.632276][ T72] usb usb2-port1: unable to enumerate USB device [ 39.842280][ T317] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 39.972108][ T317] usb 1-1: device descriptor read/64, error -71 [ 40.212129][ T317] usb 1-1: device descriptor read/64, error -71 [ 40.226409][ T337] usbhid 4-1:0.0: can't add hid device: -71 [ 40.232390][ T337] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 40.240965][ T337] usb 4-1: USB disconnect, device number 13 [ 40.272127][ T72] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 40.322253][ T317] usb usb1-port1: attempt power cycle [ 40.423246][ T72] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 40.434096][ T72] usb 5-1: config 0 interface 0 has no altsetting 0 [ 40.440719][ T72] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 40.449754][ T72] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.458220][ T72] usb 5-1: config 0 descriptor?? [ 40.463507][ T669] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 40.662110][ T317] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 40.683095][ T317] usb 1-1: device descriptor read/8, error -71 [ 40.813120][ T317] usb 1-1: device descriptor read/8, error -71 [ 40.872384][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 40.879571][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 40.886866][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 40.894103][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 40.901222][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 40.908349][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 40.915485][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 40.922692][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 40.929819][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 40.937117][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 40.944266][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 40.951382][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 40.958508][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 40.965640][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 40.972769][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 40.979885][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 40.987023][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 40.994170][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.001379][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.008653][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.015809][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.022934][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.030027][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.037155][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.044326][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.051434][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.058621][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.065768][ T317] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 41.073365][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.080528][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.087944][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.095124][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.102346][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.109529][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.116746][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.124760][ T317] usb 1-1: device descriptor read/8, error -71 [ 41.131002][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.138130][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.145283][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.152454][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.159581][ T72] logitech 0003:046D:C626.0002: unknown main item tag 0x0 [ 41.167691][ T72] logitech 0003:046D:C626.0002: hidraw0: USB HID v10.04 Device [HID 046d:c626] on usb-dummy_hcd.4-1/input0 [ 41.181390][ T72] usb 5-1: USB disconnect, device number 5 [ 41.253146][ T317] usb 1-1: device descriptor read/8, error -71 [ 41.362176][ T317] usb usb1-port1: unable to enumerate USB device [ 164.642217][ T37] INFO: task syz.1.83:670 blocked for more than 122 seconds. [ 164.649637][ T37] Not tainted syzkaller #0 [ 164.654637][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 164.663330][ T37] task:syz.1.83 state:D stack:0 pid:670 tgid:670 ppid:295 flags:0x00000004 [ 164.673542][ T37] Call Trace: [ 164.676814][ T37] [ 164.679731][ T37] __schedule+0x1496/0x20b0 [ 164.684272][ T37] ? asm_exc_page_fault+0x2b/0x30 [ 164.689305][ T37] ? __sched_text_start+0x10/0x10 [ 164.694363][ T37] ? __kasan_check_write+0x18/0x20 [ 164.699478][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 164.704961][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 164.710853][ T37] ? folio_mark_accessed+0x35f/0x620 [ 164.716152][ T37] schedule+0xc5/0x240 [ 164.720224][ T37] io_schedule+0x88/0xe0 [ 164.724505][ T37] bit_wait_io+0x17/0xd0 [ 164.728745][ T37] __wait_on_bit+0xb3/0x2e0 [ 164.733250][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 164.738207][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 164.743690][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 164.748653][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 164.754648][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 164.760103][ T37] do_get_write_access+0x558/0xd70 [ 164.765241][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 164.771220][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 164.777386][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 164.784088][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 164.789101][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 164.794742][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 164.800287][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 164.805818][ T37] ext4_dirty_inode+0xc9/0x110 [ 164.810596][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 164.815980][ T37] __mark_inode_dirty+0x24e/0xc50 [ 164.821023][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 164.826585][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 164.832416][ T37] ? __kasan_check_read+0x15/0x20 [ 164.837449][ T37] file_update_time+0x1d3/0x210 [ 164.842303][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 164.847327][ T37] ? __kasan_check_write+0x18/0x20 [ 164.852445][ T37] ? folio_unlock+0x137/0x1b0 [ 164.857122][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 164.862590][ T37] ? __alloc_pages_noprof+0x35a/0x7e0 [ 164.867983][ T37] do_pte_missing+0x12c4/0x4440 [ 164.872849][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 164.877872][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 164.883787][ T37] ? __cfi___pmd_alloc+0x10/0x10 [ 164.888724][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 164.894988][ T37] handle_mm_fault+0x1189/0x1ba0 [ 164.899925][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 164.905232][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 164.910428][ T37] do_user_addr_fault+0x951/0x1230 [ 164.915572][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 164.921644][ T37] exc_page_fault+0x58/0xc0 [ 164.926179][ T37] asm_exc_page_fault+0x2b/0x30 [ 164.931024][ T37] RIP: 0033:0x7fe8d366ba23 [ 164.935441][ T37] RSP: 002b:00007fff34c58570 EFLAGS: 00010246 [ 164.941504][ T37] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2ee64000 [ 164.949485][ T37] RDX: 0000001b2ee24000 RSI: 0000000000400000 RDI: 00007fe8d39e0708 [ 164.957465][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.965433][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 164.973410][ T37] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff34c58800 [ 164.981362][ T37] [ 164.984410][ T37] INFO: task syz.3.84:671 blocked for more than 123 seconds. [ 164.991768][ T37] Not tainted syzkaller #0 [ 164.996733][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 165.005445][ T37] task:syz.3.84 state:D stack:0 pid:671 tgid:671 ppid:296 flags:0x00000004 [ 165.015627][ T37] Call Trace: [ 165.018899][ T37] [ 165.021810][ T37] __schedule+0x1496/0x20b0 [ 165.026325][ T37] ? __sched_text_start+0x10/0x10 [ 165.031379][ T37] ? __kasan_check_read+0x15/0x20 [ 165.036433][ T37] ? __kasan_check_write+0x18/0x20 [ 165.041543][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 165.047067][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 165.053015][ T37] ? __kasan_check_write+0x18/0x20 [ 165.058137][ T37] ? folio_unlock+0x137/0x1b0 [ 165.062837][ T37] schedule+0xc5/0x240 [ 165.066912][ T37] io_schedule+0x88/0xe0 [ 165.071134][ T37] bit_wait_io+0x17/0xd0 [ 165.075382][ T37] __wait_on_bit+0xb3/0x2e0 [ 165.079920][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 165.084902][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 165.090366][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 165.095328][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 165.101307][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 165.106798][ T37] do_get_write_access+0x558/0xd70 [ 165.111936][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 165.117926][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 165.124102][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 165.130788][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 165.135818][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 165.141445][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 165.147022][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 165.152409][ T37] ext4_dirty_inode+0xc9/0x110 [ 165.157155][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 165.162539][ T37] __mark_inode_dirty+0x24e/0xc50 [ 165.167559][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 165.173113][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 165.178919][ T37] ? __kasan_check_read+0x15/0x20 [ 165.183951][ T37] file_update_time+0x1d3/0x210 [ 165.188817][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 165.193902][ T37] ? __kasan_check_write+0x18/0x20 [ 165.199014][ T37] ? folio_unlock+0x137/0x1b0 [ 165.203723][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 165.209182][ T37] ? __alloc_pages_noprof+0x35a/0x7e0 [ 165.214582][ T37] do_pte_missing+0x12c4/0x4440 [ 165.219443][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 165.224496][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 165.230403][ T37] ? __cfi___pmd_alloc+0x10/0x10 [ 165.235358][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 165.241630][ T37] handle_mm_fault+0x1189/0x1ba0 [ 165.246598][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 165.251886][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 165.257102][ T37] do_user_addr_fault+0x951/0x1230 [ 165.262241][ T37] ? __x64_sys_prctl+0xf0/0xf0 [ 165.266991][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 165.273062][ T37] exc_page_fault+0x58/0xc0 [ 165.277565][ T37] asm_exc_page_fault+0x2b/0x30 [ 165.282500][ T37] RIP: 0033:0x7f3e61a6ba23 [ 165.286913][ T37] RSP: 002b:00007ffedbfefc00 EFLAGS: 00010246 [ 165.293126][ T37] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 165.301205][ T37] RDX: 0000001b2f024000 RSI: 0000000000040000 RDI: 00007f3e61de0708 [ 165.309225][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.317343][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 165.325339][ T37] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffedbfefe90 [ 165.333333][ T37] [ 165.336524][ T37] INFO: task syz.4.85:674 blocked for more than 123 seconds. [ 165.343902][ T37] Not tainted syzkaller #0 [ 165.348825][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 165.357499][ T37] task:syz.4.85 state:D stack:0 pid:674 tgid:674 ppid:511 flags:0x00000004 [ 165.367666][ T37] Call Trace: [ 165.370925][ T37] [ 165.373860][ T37] __schedule+0x1496/0x20b0 [ 165.378370][ T37] ? __sched_text_start+0x10/0x10 [ 165.383402][ T37] ? __kasan_check_read+0x15/0x20 [ 165.388421][ T37] ? __kasan_check_write+0x18/0x20 [ 165.393540][ T37] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 165.398999][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 165.404907][ T37] ? __kasan_check_write+0x18/0x20 [ 165.410011][ T37] ? folio_unlock+0x137/0x1b0 [ 165.414694][ T37] schedule+0xc5/0x240 [ 165.419109][ T37] io_schedule+0x88/0xe0 [ 165.423386][ T37] bit_wait_io+0x17/0xd0 [ 165.427622][ T37] __wait_on_bit+0xb3/0x2e0 [ 165.432137][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 165.437070][ T37] out_of_line_wait_on_bit+0x139/0x190 [ 165.442551][ T37] ? __cfi_bit_wait_io+0x10/0x10 [ 165.447485][ T37] ? __cfi_out_of_line_wait_on_bit+0x10/0x10 [ 165.453475][ T37] ? __cfi_wake_bit_function+0x10/0x10 [ 165.458933][ T37] do_get_write_access+0x558/0xd70 [ 165.464048][ T37] jbd2_journal_get_write_access+0x268/0x3d0 [ 165.470029][ T37] __ext4_journal_get_write_access+0x1b6/0x6a0 [ 165.476189][ T37] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 165.482959][ T37] ? __kasan_slab_alloc+0x73/0x90 [ 165.487982][ T37] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 165.493676][ T37] ext4_reserve_inode_write+0x1f6/0x2e0 [ 165.499224][ T37] __ext4_mark_inode_dirty+0xac/0x5e0 [ 165.504603][ T37] ext4_dirty_inode+0xc9/0x110 [ 165.509368][ T37] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 165.514752][ T37] __mark_inode_dirty+0x24e/0xc50 [ 165.520121][ T37] ? __cfi___mark_inode_dirty+0x10/0x10 [ 165.525670][ T37] ? mnt_get_write_access_file+0x1af/0x3b0 [ 165.531482][ T37] ? __kasan_check_read+0x15/0x20 [ 165.536524][ T37] file_update_time+0x1d3/0x210 [ 165.541387][ T37] ext4_page_mkwrite+0x2bf/0x1120 [ 165.546426][ T37] ? __kasan_check_write+0x18/0x20 [ 165.551539][ T37] ? folio_unlock+0x137/0x1b0 [ 165.556225][ T37] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 165.561681][ T37] ? __alloc_pages_noprof+0x35a/0x7e0 [ 165.567062][ T37] do_pte_missing+0x12c4/0x4440 [ 165.571916][ T37] ? pte_marker_clear+0x1b0/0x1b0 [ 165.576945][ T37] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 165.582856][ T37] ? __cfi___pmd_alloc+0x10/0x10 [ 165.587772][ T37] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 165.594051][ T37] handle_mm_fault+0x1189/0x1ba0 [ 165.598987][ T37] ? __cfi_handle_mm_fault+0x10/0x10 [ 165.604313][ T37] ? lock_vma_under_rcu+0x4cf/0x590 [ 165.609526][ T37] do_user_addr_fault+0x951/0x1230 [ 165.614774][ T37] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 165.620851][ T37] exc_page_fault+0x58/0xc0 [ 165.625356][ T37] asm_exc_page_fault+0x2b/0x30 [ 165.630205][ T37] RIP: 0033:0x7fd5fae6ba23 [ 165.634643][ T37] RSP: 002b:00007ffe0509d1a0 EFLAGS: 00010246 [ 165.640702][ T37] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b34a64000 [ 165.648689][ T37] RDX: 0000001b34a24000 RSI: 0000000000600000 RDI: 00007fd5fb1e0708 [ 165.656679][ T37] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.664678][ T37] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 165.672761][ T37] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe0509d430 [ 165.680714][ T37] [ 165.683761][ T37] NMI backtrace for cpu 1 [ 165.683776][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 b8659436e0263bf3bdd99d8db567fd2a3f6145e5 [ 165.683804][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.683814][ T37] Call Trace: [ 165.683818][ T37] [ 165.683824][ T37] __dump_stack+0x21/0x30 [ 165.683850][ T37] dump_stack_lvl+0x140/0x1c0 [ 165.683873][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 165.683897][ T37] ? rcu_preempt_deferred_qs_irqrestore+0x6d6/0xa50 [ 165.683926][ T37] dump_stack+0x19/0x20 [ 165.683950][ T37] nmi_cpu_backtrace+0x2ba/0x2d0 [ 165.683981][ T37] ? rcu_read_unlock_special+0x150/0x420 [ 165.684005][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 165.684027][ T37] ? sched_show_task+0x371/0x530 [ 165.684051][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 165.684074][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 165.684096][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 165.684116][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 165.684138][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 165.684162][ T37] watchdog+0xe45/0xf90 [ 165.684180][ T37] ? __kasan_check_write+0x18/0x20 [ 165.684202][ T37] ? __cfi_watchdog+0x10/0x10 [ 165.684221][ T37] ? __kasan_check_read+0x15/0x20 [ 165.684238][ T37] ? __kthread_parkme+0x12f/0x180 [ 165.684257][ T37] ? schedule+0xc5/0x240 [ 165.684282][ T37] kthread+0x2c7/0x360 [ 165.684301][ T37] ? __cfi_watchdog+0x10/0x10 [ 165.684320][ T37] ? __cfi_kthread+0x10/0x10 [ 165.684341][ T37] ret_from_fork+0x67/0xa0 [ 165.684366][ T37] ? __cfi_kthread+0x10/0x10 [ 165.684388][ T37] ret_from_fork_asm+0x1a/0x30 [ 165.684407][ T37] [ 165.684414][ T37] Sending NMI from CPU 1 to CPUs 0: [ 165.854157][ C0] NMI backtrace for cpu 0 [ 165.854172][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 b8659436e0263bf3bdd99d8db567fd2a3f6145e5 [ 165.854191][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.854201][ C0] RIP: 0010:_raw_spin_lock_irqsave+0x94/0x160 [ 165.854228][ C0] Code: 25 00 43 c7 44 25 08 f3 f3 f3 f3 43 c6 44 25 06 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 4c 8b 74 24 30 43 c6 44 25 06 f8 65 ff 05 fc 2e 5e 7a 43 c6 44 25 04 04 c7 44 24 20 00 00 00 00 [ 165.854242][ C0] RSP: 0018:ffffffff87407aa0 EFLAGS: 00000802 [ 165.854255][ C0] RAX: f3f8f2f8f1f1f1f1 RBX: ffff8881f6e2cec0 RCX: ffffffff874156c0 [ 165.854267][ C0] RDX: 0000000000000000 RSI: fffffffffffffff8 RDI: ffff8881f6e2cec0 [ 165.854278][ C0] RBP: ffffffff87407b60 R08: 0000000000000003 R09: 0000000000000004 [ 165.854288][ C0] R10: dffffc0000000000 R11: fffffbfff0e80f58 R12: dffffc0000000000 [ 165.854299][ C0] R13: 1ffffffff0e80f54 R14: 0000000000000802 R15: ffffffff87407ac0 [ 165.854310][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 165.854323][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.854333][ C0] CR2: 00007ffb2afd5492 CR3: 000000010cf5c000 CR4: 00000000003526b0 [ 165.854348][ C0] Call Trace: [ 165.854352][ C0] [ 165.854360][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 165.854381][ C0] ? _raw_spin_unlock+0x45/0x60 [ 165.854401][ C0] ? tmigr_cpu_new_timer+0x371/0x5b0 [ 165.854419][ C0] hrtimer_get_next_event+0x3b/0x810 [ 165.854440][ C0] ? lapic_next_event+0x15/0x20 [ 165.854455][ C0] __get_next_timer_interrupt+0x761/0xa60 [ 165.854475][ C0] get_next_timer_interrupt+0x23/0x40 [ 165.854492][ C0] tick_nohz_next_event+0x1d9/0x3e0 [ 165.854513][ C0] tick_nohz_idle_stop_tick+0x114/0x9d0 [ 165.854533][ C0] ? __cfi_tick_nohz_idle_stop_tick+0x10/0x10 [ 165.854553][ C0] ? check_tsc_unstable+0xd/0x20 [ 165.854571][ C0] ? tsc_verify_tsc_adjust+0x20b/0x2d0 [ 165.854592][ C0] ? arch_cpu_idle_enter+0xd/0x20 [ 165.854613][ C0] do_idle+0x1da/0x570 [ 165.854628][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 165.854645][ C0] ? do_idle+0x543/0x570 [ 165.854660][ C0] cpu_startup_entry+0x47/0x60 [ 165.854676][ C0] rest_init+0x10b/0x130 [ 165.854694][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 165.854716][ C0] start_kernel+0x462/0x4bb [ 165.854734][ C0] x86_64_start_reservations+0x2e/0x30 [ 165.854755][ C0] x86_64_start_kernel+0x6a/0x7b [ 165.854774][ C0] common_startup_64+0x13b/0x157 [ 165.854796][ C0]