last executing test programs: 1m26.070963958s ago: executing program 3 (id=85): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000200)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r2 = openat$kvm(0xffffff9c, &(0x7f0000000240), 0x800, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x1, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x32) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000300)={0x1fe, 0x2, 0x5000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r6 = syz_clone(0xa08100, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r6}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040)=0x4c78, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfa, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0x3fad7e17a27f2d2d, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) recvfrom$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x2004c011) 1m25.65955219s ago: executing program 3 (id=86): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2, 0x7}) close_range(r0, r0, 0x2) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, 0x0, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x331}, @NFACCT_PKTS={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x416}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="5500000020007fafb72d13b2a4a2719302fe7f00030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001580)={0x1, &(0x7f00000015c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000001600)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001640)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000001680)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r5) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf2502000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x8c0) write(0xffffffffffffffff, &(0x7f00000001c0)='3', 0x4e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m25.65899413s ago: executing program 3 (id=87): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x10c062) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x42002, 0x11) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000340)={r2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6010004000001001, 0x0, 0x0, 0x5, 0xc, "faf98317e5a1149989fc8dbe43ee6acc9634464c516bddc70f35000000000000000000000000000000000000000000000000000000e0ff00", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffff7fffce5, 0xfd]}}) sendfile(r1, r1, 0x0, 0x2000000000409) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e", @ANYRESDEC], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 1m24.315813148s ago: executing program 3 (id=94): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) (async) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000080)='.\x00', 0xac080, 0x0) mkdirat(r2, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10) (async) renameat2(r2, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000001c0)='./file1\x00', 0x4) (async) renameat2(r1, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000018030403000700c5000522021b006100670000ff850d78ffffff0664f331004e214e232a3549de18c146d220c70c20a5421eb02b1692aa28e9686028d66281a5f6e4", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5040024b9078fffb7cd64759bb9c4d049321d9c251eec0e0fc84fd6d9e28b40855d76eb1e94ae2b8d4d46e5530c142abaf00aa8960fa5ab6cd82393cab39a8b8753c257cc92ec02308a2518be24a1e357aa57182ec05252ccf3522fb264837a1efce1aafa1a0bd281bbd81630b3e3b7aa8ab5c1cacef25aeb7096a55f2c24c27e240c47d8e8ac11965fbb60298fae9206c577200755e1ff726a92f2c7478979d3539d16664bfb4f80e1978c54054c37e1dbaf2638776f4dbe2"], 0xe7) 1m24.315334758s ago: executing program 3 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x20102, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = userfaultfd(0x80001) write$selinux_load(r1, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "fd6815650a456ac23552ebca629e214bed006eaa0b8d820a5a40f524fb0738fc77233b2ac98f186b0948b5"}, 0x3b) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a96000/0x1000)=nil, 0x3000, 0x3}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4012011, r1, 0x0) 1m24.276161502s ago: executing program 3 (id=96): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) (async) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x100000, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x8c00, 0x0) (async) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x8c00, 0x0) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x178, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, [@striped={0x0, 0x2400, 0x0, 0x40, 'striped\x00', {0x0, 0x20, '7'}}]}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x25, 0x0, 0x0) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='R\x10rust\xe3c*sgrVix@De', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r6, @ANYBLOB="010000000000fedbdf250c000000"], 0x14}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r6, @ANYBLOB="010000000000fedbdf250c000000"], 0x14}}, 0x0) 1m8.891362033s ago: executing program 32 (id=96): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) (async) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x100000, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}}}) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x8c00, 0x0) (async) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x8c00, 0x0) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x178, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r1}, [@striped={0x0, 0x2400, 0x0, 0x40, 'striped\x00', {0x0, 0x20, '7'}}]}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x25, 0x0, 0x0) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='R\x10rust\xe3c*sgrVix@De', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r6, @ANYBLOB="010000000000fedbdf250c000000"], 0x14}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r6, @ANYBLOB="010000000000fedbdf250c000000"], 0x14}}, 0x0) 4.930788443s ago: executing program 1 (id=619): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) symlink(&(0x7f00000000c0)='./dev\x00', &(0x7f00000001c0)='./file1\x00') symlink(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000240)={{0x6, 0x3}, 0x100, './dev\x00'}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001400090003000000ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0xca1de99cf558760b}, 0x20004000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x12400, 0x15) openat$zero(0xffffffffffffff9c, 0x0, 0x40, 0x0) pwrite64(r2, &(0x7f0000000000)="ff", 0x58200, 0xfb2200) 4.930282013s ago: executing program 1 (id=620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x850) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x2, &(0x7f0000000500)=[{0xac, 0x0, 0x0, 0x7ffc1ffb}, {0x6, 0xc0, 0x4, 0x1}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x6a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000001040500000000001300"/28], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/netfilter/nfnetlink_log\x00', 0x8000, 0x8) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r6 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x1ba) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000740), 0x82, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0xc2c02e4d8eabe456, 0xd) r8 = openat$incfs(r7, &(0x7f0000000680)='.pending_reads\x00', 0x20001, 0x130) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r6, 0x0, 0x0, &(0x7f00000006c0)) ioctl$TIOCL_GETKMSGREDIRECT(r8, 0xc058671e, 0x0) preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/174, 0xae}], 0x1, 0x8, 0x101) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) 3.319680359s ago: executing program 0 (id=623): unshare(0x22020600) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000100)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000140)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000280)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000002c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x92}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x10003a7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x0, 0x0, 0x8ffff) 3.287517632s ago: executing program 0 (id=624): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001240)=@newtaction={0x18, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) 3.215195279s ago: executing program 0 (id=627): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40e41, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x2102, 0x14) unlinkat(r1, &(0x7f00000003c0)='./mnt\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x0) mount(&(0x7f0000000200)=@filename='./dev/sda1\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="000000004c90020020000000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108"]) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe80000000000000000000000000006fff02000000000000000000000000000111c1c9"], 0xffe) (async) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe80000000000000000000000000006fff02000000000000000000000000000111c1c9"], 0xffe) 3.20614259s ago: executing program 2 (id=628): pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fallocate(r0, 0x0, 0x4, 0x3) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f00000002c0)=0x7, 0x4) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='sysfs\x00', 0x1214040, 0x0) (async) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) chdir(&(0x7f00000005c0)='./file0\x00') (async) recvfrom$inet_nvme(r0, &(0x7f0000000600)=""/254, 0xfe, 0x10003, &(0x7f0000000700)=@ax25={{0x3, @default, 0x8}, [@default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000580), &(0x7f0000000780)=0x4) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d3, 0x0) (async, rerun: 64) getsockopt$inet_tcp_buf(r2, 0x6, 0x33, 0x0, &(0x7f00000000c0)) (async, rerun: 64) unshare(0x60000600) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x5001}) (async, rerun: 32) r6 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000500)={'syzkaller1\x00', 0x1}) (async) write$tun(r5, &(0x7f0000000540)={@void, @val={0x1, 0x5, 0x1e, 0x10, 0x14, 0x6}, @ipv4=@esp={{0x5, 0x4, 0x1, 0x18, 0x22, 0x66, 0x0, 0xe, 0x32, 0x0, @empty, @empty}, {0x4d4, 0x7ff, @basic={0x0, 0x0, 0xa}}}}, 0x2c) (async) r7 = signalfd(r2, &(0x7f0000000000)={[0x8]}, 0x8) memfd_secret(0x80000) (async, rerun: 32) r8 = memfd_create(&(0x7f0000000040)='-\x00', 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f0000000300)={0x4, 0x400000000, 0x4, 0xd82a, 0x40, 0x0, 0x7, 0x7}, &(0x7f0000000140)={0x1000, 0xfd, 0x8, 0x4f, 0x25, 0x3, 0x0, 0x7360}, &(0x7f0000000180)={0x9f7b, 0x3, 0x6, 0xfffffffffffffffa, 0x9, 0x7, 0x5, 0x3}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x8]}, 0x8}) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000080)={r8, 0x0, 0xfffffffffffff000, 0x4000}) mount$incfs(&(0x7f0000001740)='\x00', &(0x7f0000001780)='./bus\x00', &(0x7f00000017c0), 0xc002, 0x0) 3.20532799s ago: executing program 0 (id=629): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2000, 0x103) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/61, 0x3d) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/acpi/parameters/ec_event_clearing\x00', 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000300)={0x2, {{0x2, 0x4e20, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @private=0xa010101}}}, 0x108) write$selinux_load(r0, &(0x7f0000000440)=ANY=[], 0x1b000) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500), 0x1000410, &(0x7f0000000540)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_fuse_handle_req(r3, &(0x7f00000005c0)="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", 0x2000, &(0x7f00000025c0)={&(0x7f0000002680)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871989b0dd67, 0xdcf, 0x9, 0xb, 0x8000000, 0x0, 0x0, 0x2, 0x3ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.156498985s ago: executing program 2 (id=630): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x8000, 0x7, 0x3, 0x1, {{0x38, 0x4, 0x2, 0x2, 0xe0, 0x68, 0x0, 0x8, 0x4, 0x0, @local, @local, {[@timestamp_addr={0x44, 0x44, 0x20, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast2, 0xddb}, {@local, 0x1}, {@remote, 0x7}, {@private=0xa010102, 0x6}, {@remote, 0x3}, {@rand_addr=0x64010100, 0x7}, {@multicast2, 0xf7}]}, @timestamp_prespec={0x44, 0x14, 0x9d, 0x3, 0x2, [{@private=0xa010102, 0x8001}, {@empty}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xa9, [@local, @local]}, @timestamp={0x44, 0x8, 0xf5, 0x0, 0x4, [0x8]}, @timestamp_addr={0x44, 0x4c, 0xd4, 0x1, 0x1, [{@multicast2, 0xe7fd}, {@multicast2, 0x10}, {@multicast1, 0x8}, {@rand_addr=0x64010101}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x6}, {@loopback, 0x3}, {@remote, 0x81}, {@loopback, 0xfffffffc}]}, @timestamp={0x44, 0x10, 0x5f, 0x0, 0x3, [0xb, 0x3, 0x401]}, @end]}}}}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x42, 0x1b6) pwrite64(r6, &(0x7f00000003c0)="000001", 0x3, 0x1bb) pwrite64(r6, &(0x7f0000000400)="55aa", 0x2, 0x1fe) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x0, 0x7, 0x4f, 0x7, 0x14, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x8, 0x10, 0xfff, 0x7118}}) getsockname$packet(r6, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000600), 0xc, &(0x7f0000000640)={&(0x7f0000000680)={0x40c, 0x0, 0x210, 0x70bd27, 0x5abb, {}, [{{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffeffff}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x56, 0x4, 0x2a96}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x380000}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}]}}]}, 0x40c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x2, 0xd, 0x6, 0x5b, 0x20, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20, 0x1, 0x8, 0x1ff}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000f40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000bc0)={0x314, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2b1b, 0x2, 0x1, 0x3}, {0x4, 0x6, 0x2}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r10}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xef63, 0x5, 0xf8, 0x6}, {0x3ff, 0xfd, 0x2, 0xfffffffa}, {0x8001, 0xe2, 0x3}, {0x3, 0xc, 0x95}, {0x9, 0x1, 0x1, 0x8}, {0x8, 0x4, 0x7, 0xf}, {0x8, 0x5, 0x3, 0x45f}, {0x9, 0x1, 0xaf, 0x7}, {0x100, 0x4, 0x2, 0x902f}]}}}]}}]}, 0x314}, 0x1, 0x0, 0x0, 0x44086}, 0x4000044) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) 3.148983216s ago: executing program 0 (id=631): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000400)={0x0, &(0x7f0000000440)=[@wrmsr={0x65, 0x20, {0x40000098, 0x3}}], 0xfffffffffffffe33}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000480)={0x1, 0x0, [{0x40000001, 0x7f7f, 0x4, 0x31237648, 0x6, 0x3, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000004c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f0000000140)=0x6, 0x4) r8 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r8, &(0x7f0000000180)={&(0x7f00000001c0)={0x1d, r6}, 0x10, &(0x7f0000000200)={&(0x7f0000000240)=@canfd={{0x0, 0x1, 0x1}, 0x40, 0x2, 0x0, 0x0, "d31a5c0c8a99b3ad23cceec63f99a8bebbbd5df127286761c993309a2a3fb1da9aab2d90e6ec91b3b85ae5a95a0d89354663dc24d0eafd2289ea528293cefd50"}, 0x48}, 0x1, 0x0, 0x0, 0x2408408c}, 0xc008004) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000002c0)={0x3, &(0x7f0000000300)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x30, r4, 0xcadc1000) r10 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae03, 0x38) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20842, 0x0) writev(r11, &(0x7f0000000080)=[{&(0x7f00000000c0)="e1", 0x5603d}], 0x1) syz_usb_connect(0x2, 0x36, &(0x7f00000005c0)=ANY=[@ANYRES8=r11], 0x0) 1.335632132s ago: executing program 1 (id=637): pipe2$9p(&(0x7f0000000840)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000880)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000900)='./mnt\x00', &(0x7f0000000940), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c10"]) write$P9_RVERSION(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="1500000065ffff002000000800395032303030"], 0x15) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) write$P9_RATTACH(r1, &(0x7f0000000a40)={0x14, 0x69, 0x0, {0x80}}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8030}, 0x50) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000a80)={0xa0, 0x19, 0x0, {0x249c, {0x8}, 0x41dd, 0x0, 0x0, 0x1, 0x0, 0x5, 0x7, 0x6, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x3}}, 0xa0) 1.219532054s ago: executing program 1 (id=638): capset(&(0x7f0000000d80)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0x0, 0x0, 0x5989, 0x2}) syz_clone(0x1100400, 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x1100400, 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000006c0)='task\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac14140000000064c1000000030006000000000002"], 0x50}}, 0x20008004) socket$key(0xf, 0x3, 0x2) fchdir(r1) (async) fchdir(r1) mount(0x0, &(0x7f0000000700)='.\x00', &(0x7f0000000740)='proc\x00', 0x800000, 0x0) (async) mount(0x0, &(0x7f0000000700)='.\x00', &(0x7f0000000740)='proc\x00', 0x800000, 0x0) getpid() (async) getpid() syz_usb_connect(0x5, 0x6f, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0xdc, 0x86, 0xb1, 0x8, 0x97b, 0x61f6, 0xd49a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x1, 0xa, 0xff, 0xb0, 0x1, "", [{{0x9, 0x4, 0x5b, 0x1, 0x0, 0xe, 0x1, 0x1, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x40, 0x1f}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x6, 0x9, 0x3, 0xf, 0x41}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x1, 0x6, 0xa}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9, 0x5, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x1}]}]}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x8, &(0x7f0000000b40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x6) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000140)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000240)={0x0, 0x6, 0x0, [0xb0d, 0xa, 0x9, 0xd2, 0xe], [0x5, 0x2, 0x58, 0x5, 0x0, 0x9, 0x8, 0x4, 0x0, 0x5, 0x6, 0x8, 0x4, 0xffffffffffffffff, 0xe, 0x40, 0xa9, 0x6, 0x7, 0x40, 0x3, 0x8, 0x5, 0x6, 0x80000000, 0x3, 0x7, 0xac, 0xd, 0xa, 0x80, 0x7, 0x9, 0xd, 0x0, 0x400, 0x8, 0x200000, 0x2, 0x4, 0x0, 0x1, 0x6, 0x9, 0x7, 0x5, 0x7, 0xe00, 0x200, 0x9, 0x2, 0x4, 0x7, 0x600, 0x63, 0xa, 0xfffffffffffffff9, 0x6, 0xc, 0x9, 0xd7e, 0x3ff, 0x100, 0x7, 0x0, 0x96d, 0xffffffffffffe644, 0x6, 0x10001, 0x4, 0x3, 0xffffffffffff2172, 0x7, 0x3, 0x7, 0x6, 0x9, 0xf32c, 0x1, 0x5, 0x4, 0xfffffffffffffffb, 0x7, 0x0, 0x80000000, 0x2b8000000, 0x91, 0xffffffffffffffff, 0x5, 0x2, 0xbf3c, 0x8, 0x4000, 0xfffffffffffffffd, 0x7f, 0x3, 0x7, 0x4, 0x5, 0xb, 0x3, 0xd4f4, 0xfffffffffffffff0, 0x9, 0x0, 0x5, 0x9, 0x7, 0x3, 0x0, 0x8000000000000000, 0x0, 0x3, 0x3, 0x8001, 0x7, 0x2, 0xffffffff, 0x1be6, 0x1, 0x3]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000240)={0x0, 0x6, 0x0, [0xb0d, 0xa, 0x9, 0xd2, 0xe], [0x5, 0x2, 0x58, 0x5, 0x0, 0x9, 0x8, 0x4, 0x0, 0x5, 0x6, 0x8, 0x4, 0xffffffffffffffff, 0xe, 0x40, 0xa9, 0x6, 0x7, 0x40, 0x3, 0x8, 0x5, 0x6, 0x80000000, 0x3, 0x7, 0xac, 0xd, 0xa, 0x80, 0x7, 0x9, 0xd, 0x0, 0x400, 0x8, 0x200000, 0x2, 0x4, 0x0, 0x1, 0x6, 0x9, 0x7, 0x5, 0x7, 0xe00, 0x200, 0x9, 0x2, 0x4, 0x7, 0x600, 0x63, 0xa, 0xfffffffffffffff9, 0x6, 0xc, 0x9, 0xd7e, 0x3ff, 0x100, 0x7, 0x0, 0x96d, 0xffffffffffffe644, 0x6, 0x10001, 0x4, 0x3, 0xffffffffffff2172, 0x7, 0x3, 0x7, 0x6, 0x9, 0xf32c, 0x1, 0x5, 0x4, 0xfffffffffffffffb, 0x7, 0x0, 0x80000000, 0x2b8000000, 0x91, 0xffffffffffffffff, 0x5, 0x2, 0xbf3c, 0x8, 0x4000, 0xfffffffffffffffd, 0x7f, 0x3, 0x7, 0x4, 0x5, 0xb, 0x3, 0xd4f4, 0xfffffffffffffff0, 0x9, 0x0, 0x5, 0x9, 0x7, 0x3, 0x0, 0x8000000000000000, 0x0, 0x3, 0x3, 0x8001, 0x7, 0x2, 0xffffffff, 0x1be6, 0x1, 0x3]}) llistxattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=""/190, 0xbe) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b80)='./binderfs/custom1\x00', 0x0, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b80)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xeed7e89f6334d838}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000840)={0x8, 0x0, &(0x7f0000000880)=[@acquire]}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000008c0)={0x20, 0x0, &(0x7f0000000900)=[@request_death={0x400c630e, 0x0, 0x2}, @request_death={0x400c630e, 0x0, 0x3}]}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000008c0)={0x20, 0x0, &(0x7f0000000900)=[@request_death={0x400c630e, 0x0, 0x2}, @request_death={0x400c630e, 0x0, 0x3}]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000dc0)={{r2}, 0x0, 0x1c, @inherit={0x68, &(0x7f00000007c0)=ANY=[@ANYBLOB="01450c00000000000400000000000000faffffffffffffff020000000000000014000000000000000000040000000000ffffff7f000000000800000000000000030000000000000005000000000000000000000000000000ffff00000000000005000000000000151eefc899eab11400"]}, @devid=r5}) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000dc0)={{r2}, 0x0, 0x1c, @inherit={0x68, &(0x7f00000007c0)=ANY=[@ANYBLOB="01450c00000000000400000000000000faffffffffffffff020000000000000014000000000000000000040000000000ffffff7f000000000800000000000000030000000000000005000000000000000000000000000000ffff00000000000005000000000000151eefc899eab11400"]}, @devid=r5}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a40), 0x2000, 0x0) syz_open_procfs(r0, &(0x7f0000000780)='fdinfo/4\x00') 724.799055ms ago: executing program 1 (id=639): memfd_create(&(0x7f0000000340)='y\x105\xfc\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xa4\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01L\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x06\xb3\xf0wVq\xe9d\xac\xe9\xaa\x9dR\x00\x9b\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2G\x1b+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2v\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x1e\x11X\f\x0f\xf0\xe2\xb5\xf8', 0xb) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x10, 0x10, 0x0, 0xd, {{0x2f, 0x4, 0x1, 0x5, 0xbc, 0x67, 0x0, 0xbb, 0x4, 0x0, @empty, @rand_addr=0x64010100, {[@generic={0x89, 0x10, "144c611569712b9a2e9863ba949e"}, @timestamp={0x44, 0x10, 0x77, 0x0, 0x6, [0x6, 0x3, 0x1]}, @timestamp_prespec={0x44, 0x24, 0xfc, 0x3, 0x3, [{@multicast2, 0xccb0}, {@rand_addr=0x64010100, 0x8000}, {@multicast2, 0x7fff}, {@loopback, 0x80}]}, @timestamp_prespec={0x44, 0x34, 0x64, 0x3, 0x8, [{@rand_addr=0x64010102, 0xfff}, {@loopback, 0x4e61}, {@rand_addr=0x64010101, 0x3}, {@multicast2, 0xfffffffc}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x4}, {@multicast2, 0x2b}]}, @timestamp={0x44, 0x1c, 0xd9, 0x0, 0x6, [0x4, 0x5, 0x4, 0x3, 0xac, 0x7]}, @timestamp_addr={0x44, 0x14, 0xf6, 0x1, 0x0, [{@broadcast, 0x2}, {@empty, 0x4}]}]}}}}}) (async, rerun: 64) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000007c0)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) (async) sendmsg$nl_generic(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c0000001600011c00000000fbdbdf250a000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x40) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x24) open$dir(&(0x7f0000000680)='./mnt\x00', 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) (async) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) (async) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 64) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (rerun: 64) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x4000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) (async, rerun: 32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) dup(r5) 524.545506ms ago: executing program 4 (id=640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000021c0), 0x200, 0x0) sync_file_range(r0, 0x6, 0xf05e, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002400)=[@text64={0x40, &(0x7f0000002440)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000024c0)={[0x5836, 0x10, 0x7, 0x4000000000000e50, 0x1, 0x5479, 0x1041, 0x200000000006, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffe, 0x100000000, 0x7, 0x40000000009, 0x8000000000005, 0x10000800040068], 0xd000, 0x80}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000080)=""/117, 0x75}], 0x1, 0x8, 0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 439.758084ms ago: executing program 4 (id=641): keyctl$set_reqkey_keyring(0xe, 0x1) keyctl$set_reqkey_keyring(0xe, 0x1) r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) request_key(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setreuid(0x0, 0xee00) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, 0x0) r5 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1e, {0x0, "66ba3412eef4"}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4000, 0x8}}, @nested_vmlaunch={0x12f, 0x18}], 0x9e}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x2, 0x0) write$binfmt_register(r6, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 439.207075ms ago: executing program 4 (id=642): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2cfd) socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mount$cgroup(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x800006, &(0x7f0000000180)={[{@subsystem='net_prio'}, {@none}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x1, 0x1, 0x0, {{0x23, 0x4, 0x0, 0x6, 0x8c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x64010100, {[@rr={0x7, 0x1f, 0x99, [@multicast1, @private=0xa010102, @multicast1, @remote, @multicast2, @local, @local]}, @rr={0x7, 0x23, 0xcf, [@multicast2, @multicast2, @broadcast, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1, @private=0xa010102, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x34, 0xa9, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@empty, 0x9}, {@empty, 0x2}, {@remote, 0x3}, {@private=0xa010100}]}]}}}}}) 404.348828ms ago: executing program 4 (id=643): r0 = fsmount(0xffffffffffffffff, 0x1, 0xf8) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x206, 0x20982) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) 239.795935ms ago: executing program 4 (id=644): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000001c00)='./bus\x00', 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfff8, @empty}}, 0x1e) mount$overlay(0x0, &(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40), 0x8, &(0x7f0000001d80)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'security.', '\x00'}, &(0x7f0000000080)='\x00', 0x1, 0x0) setxattr$incfs_metadata(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='user.incfs.metadata\x00') 167.640022ms ago: executing program 4 (id=645): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, 0x0) (async) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000200)={0x79, 0x0, 0x971}) (async) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x1ff, 0x2, 0xff0f0000, 0x0, @msi={0xcf, 0x40, 0xfffffffd, 0x20001}}]}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r7) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, r8, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r7) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000480), r7) sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x1c, r9, 0x1, 0x0, 0x0, {0x7}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000b00)='./dm0\x00', 0x6180, 0x0) (async) ioctl$DM_DEV_WAIT(r0, 0xc138fd08, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x150, 0x138, 0x0, 0x0, 0x401, 0x237, 0x0, @by_dev, "9cbdb3e2ef11205035a055682994e92e94da5b3b7c780866"}) 134.678206ms ago: executing program 2 (id=646): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2f01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001200)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000001240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001280)='./sys\x00', &(0x7f00000012c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./sys/class/net/syzkaller0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) write(r2, &(0x7f0000001340)='1', 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') pread64(r3, &(0x7f0000000140)=""/4080, 0xff0, 0x7f) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000001140)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) write$tun(r0, &(0x7f0000002280)={@void, @void, @eth={@random="71ea53d8ebfc", @remote, @val={@val={0x88a8, 0x2, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x5c, 0x65, 0x0, 0x82, 0x11, 0x0, @empty, @multicast1}, {0x4e22, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "c3ae30168a079efd95561b55ef7ad35fdaeb8f3b1c9c511a", "f195a3934e413c148362085fed92dd28fadc854a79dd1bbd563662e552d15ecb"}}}}}}}, 0x72) 112.629558ms ago: executing program 0 (id=647): memfd_create(&(0x7f0000000340)='y\x105\xfc\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xa4\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01L\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x06\xb3\xf0wVq\xe9d\xac\xe9\xaa\x9dR\x00\x9b\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2G\x1b+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2v\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x1e\x11X\f\x0f\xf0\xe2\xb5\xf8', 0xb) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x24) open$dir(&(0x7f0000000680)='./mnt\x00', 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}, 0x80) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='ns\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000700)='blkio.bfq.sectors\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="b028", 0x2}], 0x1, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x841}}], 0x1, 0x11) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) capset(&(0x7f0000000000)={0x19980330, r3}, &(0x7f0000000080)={0xffff6b89, 0x4, 0x200, 0x4, 0x4, 0xda9}) r8 = syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r7, &(0x7f00000004c0)={0x0, 0xd17, 0x10, 0x1, 0x80, 0x0, r8}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe702, 0x1000, 0x3, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x542b, 0x2, 0x4, 0x1bf, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bffc, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 110.722928ms ago: executing program 2 (id=648): r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) clock_gettime(0x0, &(0x7f0000001cc0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=""/193, 0xc1}, {&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000340)=""/129, 0x81}, {&(0x7f0000000400)=""/21, 0x15}, {&(0x7f0000000440)=""/171, 0xab}, {&(0x7f0000000500)=""/242, 0xf2}, {&(0x7f0000000600)=""/91, 0x5b}, {&(0x7f0000000680)=""/184, 0xb8}], 0xa}, 0x6}, {{&(0x7f0000000800)=@isdn, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000980)=""/75, 0x4b}, {&(0x7f0000000a00)=""/202, 0xca}, {&(0x7f0000000b00)=""/248, 0xf8}, {&(0x7f0000000c00)=""/162, 0xa2}, {&(0x7f0000000cc0)=""/77, 0x4d}, {&(0x7f0000000d40)=""/98, 0x62}, {&(0x7f0000000dc0)=""/229, 0xe5}, {&(0x7f0000000ec0)=""/43, 0x2b}, {&(0x7f0000000f00)=""/189, 0xbd}], 0xa, &(0x7f0000001080)=""/203, 0xcb}, 0x2b8}, {{&(0x7f0000001180)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001200)=""/188, 0xbc}, {&(0x7f00000012c0)=""/211, 0xd3}], 0x2, &(0x7f0000001400)=""/218, 0xda}, 0x2}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/119, 0x77}, {&(0x7f0000001580)=""/125, 0x7d}, {&(0x7f0000001600)=""/246, 0xf6}, {&(0x7f0000001700)=""/171, 0xab}], 0x4}, 0x8}, {{&(0x7f0000001800)=@x25, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001880)=""/108, 0x6c}, {&(0x7f0000001900)=""/97, 0x61}, {&(0x7f0000001980)=""/226, 0xe2}, {&(0x7f0000001a80)=""/117, 0x75}], 0x4, &(0x7f0000001b40)=""/61, 0x3d}, 0x7fff}], 0x5, 0x80000002, &(0x7f0000001d00)={r1, r2+10000000}) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000001d40), &(0x7f0000001d80)=0x10, 0x80000) sendmsg$tipc(r3, &(0x7f0000001e80)={&(0x7f0000001dc0)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x10, &(0x7f0000001e00), 0x0, &(0x7f0000001e40)="b04bd92928f8869e70f5a7afa6df16b65d7bb6f976ad1adcac754d3b0033297a5c51ee", 0x23, 0x10}, 0x0) r4 = accept4$tipc(r3, &(0x7f0000001ec0)=@name, &(0x7f0000001f00)=0x10, 0x800) r5 = accept4$tipc(r4, 0x0, &(0x7f0000001f40), 0x81800) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close(r6) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000003340)={{r0, &(0x7f0000001f80)='.%%\x00', 0x100, &(0x7f0000001fc0)={@align=0x1d3fc064, {0x9, 0xd290, 0x2}}, 0x80000000, &(0x7f0000002000)={@_ha_fsid}, &(0x7f0000002040)=0x3ff}, 0x4, &(0x7f00000032c0)=[{0x1, 0xb, &(0x7f0000002080)='-\x00', &(0x7f00000020c0)="9af06584b5d6b7d1b34c47f731dfd63affdb0f4118a74413a285b6aee01be17f72b1241e4845d0c65e1a9d0b4197ea00105994dc67dc0452ba9ea5f5182fad60d33003e74709bcbd422fba7d5c826357a538b9eef7b9f60657af5e9c8c862b5b9469f7501a7835ca3d2406e2913c5d6aed541d39adfe71515901f878f628632d34f367e9c34e4b971aab3def1b85739906ab4935412435ce1d071dcce5a4ff650bb44495eef954b4052236c132a16405169d0b217e", 0xb5, 0x8}, {0x2, 0x6, &(0x7f0000002180)='{\x00', &(0x7f00000021c0)="02484466471a4a3ae460cbfaddfa636f7c51a7da4bd0050b4c", 0x19, 0x30}, {0x2, 0xb642, &(0x7f0000002200)='\x00', &(0x7f0000002240)="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", 0x1000, 0x2}, {0x1, 0x5, &(0x7f0000003240)='}--+{-\x7f%@/\'\x9d+;/\x00', &(0x7f0000003280)="2eaeabebedfa31d84ae542adad865d18d10fb3311823d7a564bd5fb0e1dbc3ab450ab0f9ba1a781e76b3625a350c1c1cfd99c1a815ed4d595ccad9976b0ab945", 0x40, 0x8}]}) write$P9_RMKDIR(r7, &(0x7f00000033c0)={0x14, 0x49, 0x1, {0x20, 0x0, 0x1}}, 0x14) ioctl$NILFS_IOCTL_SET_SUINFO(r4, 0x40186e8d, &(0x7f0000003440)={&(0x7f0000003400)=[{0x7, 0x2, 0x0, {0xfff, 0x4, 0x2}}], 0x1, 0x20, 0x4, 0xffffffff}) ioctl$VHOST_VDPA_SET_CONFIG(r7, 0x4008af74, &(0x7f0000003480)={0x3, 0xbf, "3e9c0aa30deecacd8b49a6fd75ffc08e236701fe6a597748a71329da5d527f5bb41cddd99a54c27b4f06aee85c9b11a4b16543733e3e3b12b42eaa8ef9cd652d0ea71cd5deb463117f4a6142b362677d1e6f2884debb12b585ba7d4922edc09684c9da7375e57eb9db6cae77ba90f9e267dce8149ab1670913b4100cbeb2fbf1182ddbd6a5f124dfb6a0f0e7057f4fa71ad88992d84152c2c9fe4870ce12e2a9d03ad31eaf703186209fe9a8412a3b18647ec4ce55cd77487b915d9f062b7d"}) getsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000003580)=0x7fffffff, &(0x7f00000035c0)=0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003640), r7) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000003840)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003800)={&(0x7f0000003680)={0x164, r8, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x400}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1b}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x800}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xf9}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x90}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x50fd}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe0d}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7a}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x34}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x40}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb63}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff9}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd20}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x55fa35b0}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x164}, 0x1, 0x0, 0x0, 0x20048044}, 0x4000) mount_setattr(0xffffffffffffff9c, &(0x7f0000003880)='./file0\x00', 0x9900, &(0x7f00000038c0)={0x6, 0x1, 0x80000, {r7}}, 0x20) r9 = syz_clone3(&(0x7f0000004b00)={0x40980, &(0x7f0000003900), &(0x7f0000003940), &(0x7f0000003980)=0x0, {0x25}, &(0x7f00000039c0)=""/4096, 0x1000, &(0x7f00000049c0)=""/254, &(0x7f0000004ac0)=[0x0, 0xffffffffffffffff, 0x0], 0x3, {r7}}, 0x58) ptrace$getregset(0x4204, r10, 0x1, &(0x7f0000004c40)={&(0x7f0000004b80)=""/191, 0xbf}) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004cc0), r7) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000004d80)={&(0x7f0000004c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004d40)={&(0x7f0000004d00)={0x38, r11, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000006280)={&(0x7f0000004dc0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x4}}, 0x10, &(0x7f0000006140)=[{&(0x7f0000004e00)="1fd7facf6a69eb2429d70c0b237d8a2c780ef2d09bf7d74bfc4a022a2f4cb4dc230b07b48e270edd4e1e84e99611e43955049ada1dcf317ea45c12f93b2867ad962e459216b1ae401ce4d17edbd3d51370f360c6b4a91111901d9cc7f225acc4873fd4003cecca6d224356e5fefd012c5688eb80797457db45cf63a53775086830efcd6da0f1339beaea5f0c65c83ef4023db71007794a11f3b5d63d1763d423c25d186aa3afb96fa1e07a1b0dcc2eef4a4d6d6403", 0xb5}, {&(0x7f0000004ec0)="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", 0x1000}, {&(0x7f0000005ec0)="c126344444c58e058f350079e1e892bc3e7dc857477157e09baa8b125ef9d41c80636985efdac64f021aaabd3e55a1ba27427b10a44a36910d9b9109aa1e8eb843613debab7adc67cb1781daa8183228c6225211f0f019bb5a53b378a325fbafd1cb09b49252b2cb5e837f7a46390f33b39efeef64ac9383d2", 0x79}, {&(0x7f0000005f40)="39846e4dbafdd4246981501adf4bf857f3b1cfa8cea69f5d1256f4c3a41da23e993f68a41d7cf8b36dad2ecc46d6e2a2d690afa9ed2df558758af50b9323728e183b47f138a8af5f2706f98670391cfa23df856ffc6f249b21291feb47f2d43ad10c931abe2a4e5a2523b326b464df312eeeefe3eb67dcbc29a219fe", 0x7c}, {&(0x7f0000005fc0)="25190cd83c461da4e8e2e16c4436c107927ac07affd1da3e13cd5938e1f1cda86165ec03a4d100cbe37d6fc2899a03eb4db8dcd8136a4657ff76df17272d654e8b5b494d69157d3792554ac0393f39666ed4314f96ba3f49cc9310d0d41b5e1a79025ad7500e3e27f087fcf5f3", 0x6d}, {&(0x7f0000006040)="91736579568b13f71a9462aa5e737eca060aa66e1a8a91f4589daf0fa05903ae069491a278bd6380144052810121d76cd59f123e8279afb08d0dbac2959f50d74d77c9336b2ccea0b9d28b937e5cdd1ab7ca67628735a67ea0131abaa33cef0e4c40314ea0a67622bad2d4fa8fc724df49b40b6a6a6606b355cae46ffd724b7dcbade73fe11fa0f8181b587b178928ff6e5d5e5b99104e093e432850866a39ff949f1794cd29f2051d7eaec53927bf42cb35bfceb8bf6fba3572208eb484fad991de8331e4b6a84e2dc80978a13f44060298abad8d40f5df7b864ccded296ee7833bd9be6784a8951c33f9b47b19422b", 0xf0}], 0x6, &(0x7f00000061c0)="10bcef848d922215600a1cd7fc62951715cdd7966f61dedd919ed50a4f8a4782fab9f599e7f55bb1ac791e3c085cac61965c06a198a3d3411d3ceb0d58242249e6dafa4f2c8e1db94d19a2b115eed23b05a5ccc1a07d27751ce852c87b72737804363682320c8556f102dc5761f1da9b15263395e24da69e8da7d56b47d1ae7f089d7a9a8c3c22efdadbc07bd2fb83b439100564c5acbfa7141a158a160a158c5d5d185466c64a24c1ee6b", 0xab, 0x448c0}, 0x4000804) ptrace$getregset(0x4204, r9, 0x7, &(0x7f0000006380)={&(0x7f00000062c0)=""/142, 0x8e}) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000006400), r7) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f00000064c0)={&(0x7f00000063c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006480)={&(0x7f0000006440)={0x24, r12, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x200488d1) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000006500)=@req={0x6, 0x4, 0x9, 0x5}, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000006540), &(0x7f0000006580)={'L+', 0x5}, 0x16, 0x3) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x80047210, &(0x7f00000065c0)) setgroups(0x6, &(0x7f00000067c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]) 19.859018ms ago: executing program 2 (id=649): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) write(r0, &(0x7f0000000080)="83edbea43691865a9b886cbd6757fc0000004800071fab092504090007000aab60000a0000000008e29321000129c1167ae1758c366904", 0x37) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 11.075878ms ago: executing program 1 (id=650): syz_usb_connect(0x0, 0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202020040dd04058000000102030109024900010100c0320904000003020a000015241200"], 0x0) r0 = syz_io_uring_setup(0x3158, &(0x7f0000000040)={0x0, 0x39af, 0x10, 0x1, 0xff}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) readv(r0, 0xfffffffffffffffc, 0x0) 0s ago: executing program 2 (id=651): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000015c0)={[0x200000000000d46, 0xfffffffffffffffc, 0xa0, 0x8003, 0xfff8, 0x0, 0x1000000400008007, 0x1000000000000009, 0x0, 0x8, 0xffffffffffffffff, 0x10000000000000a2, 0x1000000000000401, 0xc, 0x9, 0xffffffffffffffff], 0xb000, 0x21547}) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000001580)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578bc361a5fa2b538d8f051bf77dbe5cdc8"], 0x20) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, "0100", "64bba236dce94f1287a4f40700000076", "11007746", "baca0db7f6cb1ef0"}, 0x28) (async) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0xfffffffffffffd34}, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) write$tun(r3, &(0x7f00000003c0)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000400)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, 0xffffffffffffffff, 0x0) (async, rerun: 32) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)='?', 0x1}], 0x1) (async, rerun: 32) recvfrom(r2, &(0x7f00000004c0)=""/4059, 0xfdb, 0x17, 0x0, 0x0) (async) writev(r2, &(0x7f00000014c0)=[{&(0x7f0000001500)='X', 0x1}], 0x1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000001540)=0xffff1884, 0x4) (async) syz_usb_connect$uac2(0x6, 0xd5, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) keyctl$chown(0x4, 0x0, r6, r7) (async, rerun: 32) sendmsg$netlink(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001740)=ANY=[], 0xa0}], 0x1, 0x0, 0x0, 0x4050}, 0x40) (async, rerun: 32) ptrace(0x11, r0) wait4(r0, 0x0, 0x8, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x7ffffffe, &(0x7f0000000180)) 0s ago: executing program 4 (id=652): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000001400)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000002b40)={0x4, 0x0, 0x0, 0x188, 0x138, 0x1, 0x0, 0xa601, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@snapshot={0x0, 0xc88, 0x0, 0x50, 'snapshot-merge\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram_num={'1:', 0x1}, 0x20, 'p', 0x20, '128'}}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f00000016c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x5800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) kernel console output (not intermixed with test programs): max is 0 [ 33.654537][ T430] usb 2-1: config 0 has no interface number 0 [ 33.660716][ T430] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 33.670799][ T430] usb 2-1: config 0 interface 196 has no altsetting 0 [ 33.677079][ T9] usb 1-1: USB disconnect, device number 4 [ 33.679011][ T430] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 33.692522][ T430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.700654][ T430] usb 2-1: Product: syz [ 33.704847][ T430] usb 2-1: Manufacturer: syz [ 33.709434][ T430] usb 2-1: SerialNumber: syz [ 33.714752][ T430] usb 2-1: config 0 descriptor?? [ 33.720105][ T695] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 34.205457][ T697] tipc: Trying to set illegal importance in message [ 34.220997][ T697] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 34.252371][ T702] overlayfs: missing 'workdir' [ 34.336134][ T430] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 34.350804][ T430] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 34.464335][ T726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.85'. [ 34.533496][ C0] ipheth 2-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 34.669995][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.734290][ T394] usb 2-1: USB disconnect, device number 10 [ 34.765497][ T746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 34.775310][ T394] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 34.803293][ T754] loop7: detected capacity change from 0 to 8 [ 34.823095][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 61, changing to 7 [ 34.854280][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 34.877764][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 34.887037][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.895150][ T9] usb 1-1: Product: syz [ 34.903698][ T9] usb 1-1: Manufacturer: syz [ 34.908420][ T9] usb 1-1: SerialNumber: syz [ 34.959167][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 34.969038][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 35.120408][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 35.127381][ T9] usb 1-1: unit 2 not found! [ 35.132161][ T9] usb 1-1: unit 80 not found! [ 35.136969][ T9] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 35.152013][ T9] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 35.160021][ T430] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 35.161693][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 35.181794][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.197879][ T9] usb 1-1: USB disconnect, device number 5 [ 35.277800][ T769] netlink: 5 bytes leftover after parsing attributes in process `syz.1.91'. [ 35.310880][ T430] usb 4-1: not running at top speed; connect to a high speed hub [ 35.319499][ T430] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.330144][ T430] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 35.339247][ T430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.351537][ T430] usb 4-1: Found UVC 1.00 device (046d:0825) [ 35.358449][ T430] usb 4-1: No streaming interface found for terminal 2. [ 35.520028][ T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 35.552173][ T430] usb 4-1: USB disconnect, device number 5 [ 35.645353][ T771] FAULT_INJECTION: forcing a failure. [ 35.645353][ T771] name failslab, interval 1, probability 0, space 0, times 0 [ 35.658108][ T771] CPU: 0 UID: 0 PID: 771 Comm: syz.0.92 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 35.658141][ T771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 35.658154][ T771] Call Trace: [ 35.658159][ T771] [ 35.658167][ T771] __dump_stack+0x21/0x30 [ 35.658190][ T771] dump_stack_lvl+0x140/0x1c0 [ 35.658209][ T771] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.658229][ T771] dump_stack+0x19/0x20 [ 35.658246][ T771] should_fail_ex+0x3c2/0x510 [ 35.658273][ T771] ? sock_kmalloc+0xde/0x1e0 [ 35.658298][ T771] should_failslab+0xac/0x100 [ 35.658318][ T771] __kmalloc_noprof+0x69/0x510 [ 35.658344][ T771] ? sock_kmalloc+0xde/0x1e0 [ 35.658368][ T771] sock_kmalloc+0xde/0x1e0 [ 35.658393][ T771] ip_mc_msfilter+0x505/0xbd0 [ 35.658418][ T771] ? __cfi_ip_mc_msfilter+0x10/0x10 [ 35.658442][ T771] ? __kasan_check_write+0x18/0x20 [ 35.658467][ T771] do_ip_setsockopt+0x2a89/0x2af0 [ 35.658505][ T771] ? __cfi_do_ip_setsockopt+0x10/0x10 [ 35.658533][ T771] ? selinux_socket_setsockopt+0x324/0x3d0 [ 35.658558][ T771] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 35.658583][ T771] ? vfs_write+0xbd2/0xfd0 [ 35.658610][ T771] ip_setsockopt+0x63/0x100 [ 35.658628][ T771] udp_setsockopt+0xa3/0xc0 [ 35.658654][ T771] sock_common_setsockopt+0xb8/0xd0 [ 35.658673][ T771] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 35.658691][ T771] do_sock_setsockopt+0x27c/0x410 [ 35.658715][ T771] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 35.658738][ T771] ? __fget_files+0x2bc/0x330 [ 35.658759][ T771] __x64_sys_setsockopt+0x18c/0x220 [ 35.658783][ T771] x64_sys_call+0x2adc/0x2ee0 [ 35.658803][ T771] do_syscall_64+0x57/0xf0 [ 35.658822][ T771] ? clear_bhb_loop+0x50/0xa0 [ 35.658847][ T771] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.658871][ T771] RIP: 0033:0x7f4263f9fb19 [ 35.658887][ T771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.658903][ T771] RSP: 002b:00007f4264d9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 35.658924][ T771] RAX: ffffffffffffffda RBX: 00007f4264225fa0 RCX: 00007f4263f9fb19 [ 35.658939][ T771] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000007 [ 35.658951][ T771] RBP: 00007f4264037b70 R08: 0000000000000057 R09: 0000000000000000 [ 35.658963][ T771] R10: 0000200000000e80 R11: 0000000000000246 R12: 0000000000000000 [ 35.658975][ T771] R13: 00007f4264226038 R14: 00007f4264225fa0 R15: 00007fff2df262a8 [ 35.658991][ T771] [ 35.920684][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 35.920704][ T36] audit: type=1400 audit(1793756653.220:894): avc: denied { ioctl } for pid=770 comm="syz.0.92" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.941188][ T10] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 35.963095][ T10] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 35.974277][ T10] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 35.988425][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.999138][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 36.007290][ T10] usb 2-1: SerialNumber: syz [ 36.140559][ T36] audit: type=1400 audit(1793756653.450:895): avc: denied { create } for pid=779 comm="syz.3.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 36.160660][ T36] audit: type=1400 audit(1793756653.470:896): avc: denied { sys_admin } for pid=779 comm="syz.3.95" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 36.222845][ T10] rndis_host 2-1:253.0: RNDIS init failed, -71 [ 36.229104][ T10] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71 [ 36.251781][ T10] usb 2-1: USB disconnect, device number 11 [ 36.742711][ T791] netlink: 'syz.1.100': attribute type 19 has an invalid length. [ 36.751134][ T791] netlink: 'syz.1.100': attribute type 28 has an invalid length. [ 36.759253][ T791] netlink: 51 bytes leftover after parsing attributes in process `syz.1.100'. [ 36.782735][ T794] rust_binder: Write failure EFAULT in pid:70 [ 36.870046][ T325] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.029150][ T430] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 37.036995][ T325] usb 1-1: Using ep0 maxpacket: 32 [ 37.050549][ T325] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 37.060515][ T325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.068747][ T325] usb 1-1: Product: syz [ 37.073254][ T325] usb 1-1: Manufacturer: syz [ 37.077880][ T325] usb 1-1: SerialNumber: syz [ 37.095862][ T36] audit: type=1400 audit(1793756654.400:897): avc: denied { write } for pid=800 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.115432][ T36] audit: type=1400 audit(1793756654.430:898): avc: denied { setopt } for pid=800 comm="syz.2.103" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.137179][ T36] audit: type=1400 audit(1793756654.450:899): avc: denied { write } for pid=800 comm="syz.2.103" path="socket:[7260]" dev="sockfs" ino=7260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.160854][ T36] audit: type=1400 audit(1793756654.450:900): avc: denied { read } for pid=800 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.180457][ T36] audit: type=1400 audit(1793756654.450:901): avc: denied { read } for pid=800 comm="syz.2.103" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.206459][ T36] audit: type=1400 audit(1793756654.510:902): avc: denied { ioctl } for pid=805 comm="syz.2.104" path="socket:[7267]" dev="sockfs" ino=7267 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.219992][ T430] usb 2-1: Using ep0 maxpacket: 16 [ 37.238505][ T430] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 37.252139][ T430] usb 2-1: config 0 has no interface number 0 [ 37.258287][ T430] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 37.268881][ T430] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 37.279235][ T808] capability: warning: `syz.2.105' uses 32-bit capabilities (legacy support in use) [ 37.290664][ T430] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 37.291101][ T808] capability: warning: `syz.2.105' uses deprecated v2 capabilities in a way that may be insecure [ 37.302927][ T430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.310258][ T36] audit: type=1400 audit(1793756654.600:903): avc: denied { ioctl } for pid=807 comm="syz.2.105" path="socket:[7273]" dev="sockfs" ino=7273 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 37.349770][ T430] usb 2-1: Product: syz [ 37.355656][ T430] usb 2-1: Manufacturer: syz [ 37.360156][ T812] fuse: Bad value for 'fd' [ 37.383055][ T430] usb 2-1: SerialNumber: syz [ 37.388148][ T325] usb 1-1: USB disconnect, device number 6 [ 37.401917][ T430] usb 2-1: config 0 descriptor?? [ 37.408583][ T794] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.415980][ T794] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.470929][ T827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'. [ 37.481370][ T827] overlayfs: failed to clone upperpath [ 37.630074][ T794] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.637268][ T794] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 37.848229][ T430] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 37.881067][ T430] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 37.894999][ T430] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 37.906111][ T430] asix 2-1:0.34: probe with driver asix failed with error -32 [ 38.170255][ T9] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 38.211139][ T853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.120'. [ 38.320021][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 38.459992][ T9] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 38.619991][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 38.625413][ T9] usb usb1-port1: attempt power cycle [ 38.980001][ T9] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 39.020304][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 39.159989][ T9] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 39.180359][ T9] usb 1-1: Invalid ep0 maxpacket: 16 [ 39.185871][ T9] usb usb1-port1: unable to enumerate USB device [ 39.284889][ T863] tipc: Started in network mode [ 39.289879][ T863] tipc: Node identity e0004, cluster identity 4711 [ 39.296659][ T863] tipc: Enabling of bearer rejected, failed to enable media [ 39.815896][ T325] usb 2-1: USB disconnect, device number 12 [ 39.842754][ T867] tipc: Enabled bearer , priority 10 [ 40.181535][ T325] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 40.320023][ T325] usb 2-1: device descriptor read/64, error -71 [ 40.559975][ T325] usb 2-1: device descriptor read/64, error -71 [ 40.799998][ T325] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 40.932223][ T325] usb 2-1: device descriptor read/64, error -71 [ 40.954012][ T900] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=900 comm=syz.0.137 [ 40.966406][ T10] tipc: Node number set to 3758112768 [ 41.133297][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 41.133314][ T36] audit: type=1400 audit(1793756658.440:912): avc: denied { lock } for pid=911 comm="syz.0.142" path="socket:[7056]" dev="sockfs" ino=7056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 41.170230][ T325] usb 2-1: device descriptor read/64, error -71 [ 41.177474][ T912] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.189371][ T36] audit: type=1400 audit(1793756658.480:913): avc: denied { ioctl } for pid=911 comm="syz.0.142" path="socket:[7056]" dev="sockfs" ino=7056 ioctlcmd=0x582d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 41.216498][ T912] 8021q: VLANs not supported on ip6_vti0 [ 41.229996][ T36] audit: type=1400 audit(1793756658.520:914): avc: denied { getopt } for pid=911 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.280124][ T325] usb usb2-port1: attempt power cycle [ 41.539990][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 41.620024][ T325] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 41.670244][ T325] usb 2-1: device descriptor read/8, error -71 [ 41.700008][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 41.711007][ T10] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 41.719990][ T10] usb 1-1: config 0 has no interface number 0 [ 41.726099][ T10] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 41.759984][ T10] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 41.779968][ T10] usb 1-1: config 0 interface 196 has no altsetting 0 [ 41.788097][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 41.797221][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.805263][ T10] usb 1-1: Product: syz [ 41.809453][ T10] usb 1-1: Manufacturer: syz [ 41.814161][ T10] usb 1-1: SerialNumber: syz [ 41.819258][ T325] usb 2-1: device descriptor read/8, error -71 [ 41.820367][ T10] usb 1-1: config 0 descriptor?? [ 42.052769][ T10] ipheth 1-1:0.196: Unable to find endpoints [ 42.060423][ T10] usb 1-1: USB disconnect, device number 11 [ 42.069983][ T325] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 42.091064][ T325] usb 2-1: device descriptor read/8, error -71 [ 42.221231][ T325] usb 2-1: device descriptor read/8, error -71 [ 42.330174][ T325] usb usb2-port1: unable to enumerate USB device [ 42.565478][ T36] audit: type=1400 audit(1793756659.870:915): avc: denied { create } for pid=925 comm="syz.0.148" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.684066][ T36] audit: type=1400 audit(1793756659.990:916): avc: denied { unlink } for pid=294 comm="syz-executor" name="file5" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 42.722372][ T36] audit: type=1400 audit(1793756660.030:917): avc: denied { create } for pid=929 comm="syz.0.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 42.899869][ T36] audit: type=1400 audit(1793756660.200:918): avc: denied { name_bind } for pid=941 comm="syz.0.154" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 43.232554][ T954] overlayfs: failed to clone upperpath [ 43.238863][ T955] overlayfs: failed to clone upperpath [ 43.251831][ T36] audit: type=1400 audit(1793756660.560:919): avc: denied { accept } for pid=953 comm="syz.2.159" lport=41962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 43.260038][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 43.289995][ T430] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 43.378928][ T36] audit: type=1400 audit(1793756660.680:920): avc: denied { associate } for pid=960 comm="syz.2.161" name="kvm" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 43.429999][ T430] usb 1-1: device descriptor read/64, error -71 [ 43.441322][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 43.460659][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.471120][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 43.480439][ T9] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 43.511350][ T9] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 43.525076][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 43.542357][ T9] usb 2-1: config 1 interface 1 has no altsetting 0 [ 43.551250][ T9] usb 2-1: string descriptor 0 read error: -22 [ 43.557569][ T9] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 43.566889][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.670022][ T430] usb 1-1: device descriptor read/64, error -71 [ 43.910011][ T430] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 44.040031][ T430] usb 1-1: device descriptor read/64, error -71 [ 44.280045][ T430] usb 1-1: device descriptor read/64, error -71 [ 44.390100][ T430] usb usb1-port1: attempt power cycle [ 44.692177][ T9] usb 2-1: 2:0: failed to get current value for ch 1 (-71) [ 44.711766][ T9] usb 2-1: Warning! Unlikely big volume range (=29598), cval->res is probably wrong. [ 44.729989][ T9] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = -29598/0/1 [ 44.730963][ T430] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 44.756277][ T9] usb 2-1: USB disconnect, device number 17 [ 44.770985][ T430] usb 1-1: device descriptor read/8, error -71 [ 44.911099][ T430] usb 1-1: device descriptor read/8, error -71 [ 44.945290][ T983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.168'. [ 44.996257][ T985] netlink: 'syz.2.169': attribute type 4 has an invalid length. [ 45.059984][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 45.160033][ T430] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 45.191077][ T430] usb 1-1: device descriptor read/8, error -71 [ 45.242359][ T9] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 45.251540][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.259857][ T9] usb 2-1: Product: syz [ 45.264115][ T9] usb 2-1: Manufacturer: syz [ 45.268851][ T9] usb 2-1: SerialNumber: syz [ 45.321073][ T430] usb 1-1: device descriptor read/8, error -71 [ 45.358932][ T36] audit: type=1400 audit(1793756662.660:921): avc: denied { bind } for pid=990 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.378737][ T991] process 'syz.2.171' launched '/dev/fd/6/./file1' with NULL argv: empty string added [ 45.430124][ T430] usb usb1-port1: unable to enumerate USB device [ 45.477196][ T9] ums-jumpshot 2-1:1.0: USB Mass Storage device detected [ 45.485759][ T9] ums-jumpshot 2-1:1.0: Quirks match for vid 05dc pid 0001: 2 [ 45.530067][ T9] usb 2-1: USB disconnect, device number 18 [ 46.221871][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 46.221888][ T36] audit: type=1400 audit(1793756663.530:926): avc: denied { search } for pid=1006 comm="syz.0.176" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 46.291804][ T430] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 46.320665][ T36] audit: type=1400 audit(1793756663.560:927): avc: denied { read } for pid=1006 comm="syz.0.176" name="trace_pipe_raw" dev="tracefs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 46.360062][ T36] audit: type=1400 audit(1793756663.580:928): avc: denied { map } for pid=1006 comm="syz.0.176" path="/45/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 46.362425][ T1011] bridge0: port 3(syz_tun) entered blocking state [ 46.410007][ T1011] bridge0: port 3(syz_tun) entered disabled state [ 46.430106][ T1011] syz_tun: entered allmulticast mode [ 46.437185][ T1011] syz_tun: entered promiscuous mode [ 46.450093][ T1011] bridge0: port 3(syz_tun) entered blocking state [ 46.456773][ T1011] bridge0: port 3(syz_tun) entered forwarding state [ 46.487394][ T36] audit: type=1400 audit(1793756663.790:929): avc: denied { mounton } for pid=1006 comm="syz.0.176" path="/45/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 46.519982][ T430] usb 2-1: Using ep0 maxpacket: 32 [ 46.541662][ T430] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 46.554360][ T430] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 46.563977][ T430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.575014][ T430] usb 2-1: Product: syz [ 46.590200][ T430] usb 2-1: Manufacturer: syz [ 46.594850][ T430] usb 2-1: SerialNumber: syz [ 46.822193][ T430] usb 2-1: MIDIStreaming interface descriptor not found [ 46.838583][ T430] usb 2-1: USB disconnect, device number 19 [ 46.858939][ T359] udevd[359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.998950][ T36] audit: type=1400 audit(1793756664.300:930): avc: denied { bind } for pid=1021 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.018837][ T1022] netlink: 'syz.0.179': attribute type 12 has an invalid length. [ 47.093652][ T1024] netlink: 164 bytes leftover after parsing attributes in process `syz.0.180'. [ 47.093763][ T36] audit: type=1400 audit(1793756664.400:931): avc: denied { nlmsg_read } for pid=1023 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.369997][ T430] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 47.530185][ T430] usb 1-1: Using ep0 maxpacket: 16 [ 47.537267][ T430] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 47.549244][ T430] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.558591][ T430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.566874][ T430] usb 1-1: Product: 둯ダ欼䓳鬘즘黉垶ళ刴㙽藽鎦쵚魶쮴҃⵽㑿盛憔䡑⊢긳侞溥빭쭗쎌Ẏ┯⑧县暷爎膫ᢑꦟᛎ㈛촚䃉ⱞۖ艾뎧⺃뒱隈遟鐣旋檳珤윐儞㋸⎆䘥㌛趿葜ﶙ惞 [ 47.589673][ T430] usb 1-1: Manufacturer: ⣙⮢䐅ᢟ넸祩륩䇅᧊뤗뼿ॺ뚜ᖭሒ놭瀯洑酂⾥⒡ἔ믝藷ᣆᯒ啳䘸᷀酦ㅋ혾洄姣팂籪⫔綇￞䷼樹拁袳禗၅걨튌༑㧚壉޻容⑅⢷졓उ倍鍵 [ 47.610215][ T407] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 47.620617][ T430] usb 1-1: SerialNumber: 첸㳥喣訃睱푿뿄ᓳዂﾊᅯ鵀叮걃さ羥肐㋅೚痔䒊纊Ꮭ컵ਘ䊲㉫ᗘ࿌㱚ᑶ不쐿ᰶ䂭谱๸ݻₑ氜핟䈫焞갳碽ꮮⴉ⫟᳥兓쪧ᙺ贓襆㧜쮺鷥셭毮颞鲍畅豄㸻뻝참臕⼡നꅱ礥贠▸伦僪䢈蚶츔㈶쏐글ᓷ⎙하䂥Ἠ谐ፅꎮ慠喣휐룉ｪ閪삝ꀘ䓆ರࣱ쿐㺃盿Ỵ뤯㟜棂 [ 47.781123][ T407] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 47.793787][ T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.805070][ T407] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.815132][ T407] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 47.829189][ T407] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 47.838569][ T407] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 47.848662][ T407] usb 2-1: Manufacturer: syz [ 47.858029][ T407] usb 2-1: config 0 descriptor?? [ 48.066165][ T36] audit: type=1400 audit(1793756665.370:932): avc: denied { ioctl } for pid=1026 comm="syz.0.181" path="socket:[8379]" dev="sockfs" ino=8379 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.094276][ T430] cdc_ncm 1-1:1.0: bind() failure [ 48.102282][ T430] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 48.109117][ T430] cdc_ncm 1-1:1.1: bind() failure [ 48.118591][ T430] usb 1-1: USB disconnect, device number 16 [ 48.268616][ T407] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 48.276070][ T407] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 48.290097][ T407] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 48.557062][ T1058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.190'. [ 48.594953][ T360] usb 2-1: USB disconnect, device number 20 [ 48.653580][ T1062] netlink: 'syz.0.192': attribute type 1 has an invalid length. [ 48.664046][ T1062] netlink: 1 bytes leftover after parsing attributes in process `syz.0.192'. [ 48.673397][ T1065] FAULT_INJECTION: forcing a failure. [ 48.673397][ T1065] name failslab, interval 1, probability 0, space 0, times 0 [ 48.690691][ T1065] CPU: 1 UID: 0 PID: 1065 Comm: syz.0.192 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 48.690724][ T1065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 48.690737][ T1065] Call Trace: [ 48.690743][ T1065] [ 48.690750][ T1065] __dump_stack+0x21/0x30 [ 48.690772][ T1065] dump_stack_lvl+0x140/0x1c0 [ 48.690790][ T1065] ? __cfi_dump_stack_lvl+0x10/0x10 [ 48.690810][ T1065] dump_stack+0x19/0x20 [ 48.690826][ T1065] should_fail_ex+0x3c2/0x510 [ 48.690853][ T1065] ? copy_splice_read+0x18f/0xca0 [ 48.690874][ T1065] should_failslab+0xac/0x100 [ 48.690893][ T1065] __kmalloc_noprof+0x69/0x510 [ 48.690919][ T1065] ? copy_splice_read+0x18f/0xca0 [ 48.690939][ T1065] copy_splice_read+0x18f/0xca0 [ 48.690958][ T1065] ? __cfi_pipe_to_null+0x10/0x10 [ 48.690979][ T1065] ? __cfi_splice_from_pipe+0x10/0x10 [ 48.691009][ T1065] ? __cfi_copy_splice_read+0x10/0x10 [ 48.691030][ T1065] ? __kmalloc_noprof+0x261/0x510 [ 48.691055][ T1065] ? __cfi_splice_write_null+0x10/0x10 [ 48.691076][ T1065] ? direct_splice_actor+0x384/0x4b0 [ 48.691097][ T1065] ? __cfi_copy_splice_read+0x10/0x10 [ 48.691117][ T1065] splice_direct_to_actor+0x40e/0xbf0 [ 48.691141][ T1065] ? __cfi_direct_splice_actor+0x10/0x10 [ 48.691161][ T1065] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 48.691183][ T1065] do_splice_direct+0x196/0x290 [ 48.691204][ T1065] ? __cfi_do_splice_direct+0x10/0x10 [ 48.691225][ T1065] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 48.691248][ T1065] ? security_file_permission+0x38/0xf0 [ 48.691271][ T1065] ? rw_verify_area+0xac/0x230 [ 48.691297][ T1065] do_sendfile+0x511/0xed0 [ 48.691318][ T1065] ? vfs_writev+0xe90/0xe90 [ 48.691338][ T1065] ? __se_sys_futex+0x13c/0x320 [ 48.691359][ T1065] ? __x64_sys_capset+0x80/0x80 [ 48.691379][ T1065] __x64_sys_sendfile64+0x19d/0x200 [ 48.691399][ T1065] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 48.691420][ T1065] ? switch_fpu_return+0x12/0x20 [ 48.691445][ T1065] x64_sys_call+0xa26/0x2ee0 [ 48.691465][ T1065] do_syscall_64+0x57/0xf0 [ 48.691484][ T1065] ? clear_bhb_loop+0x50/0xa0 [ 48.691508][ T1065] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 48.691531][ T1065] RIP: 0033:0x7f4263f9fb19 [ 48.691547][ T1065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.691562][ T1065] RSP: 002b:00007f42629b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 48.691583][ T1065] RAX: ffffffffffffffda RBX: 00007f4264226270 RCX: 00007f4263f9fb19 [ 48.691598][ T1065] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 48.691609][ T1065] RBP: 00007f4264037b70 R08: 0000000000000000 R09: 0000000000000000 [ 48.691621][ T1065] R10: 0000000002000009 R11: 0000000000000246 R12: 0000000000000000 [ 48.691633][ T1065] R13: 00007f4264226308 R14: 00007f4264226270 R15: 00007fff2df262a8 [ 48.691649][ T1065] [ 49.280050][ T360] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 49.309970][ T36] audit: type=1400 audit(1793756666.610:933): avc: denied { create } for pid=1084 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 49.452781][ T360] usb 1-1: config 0 has no interfaces? [ 49.459399][ T360] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 49.470025][ T360] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 49.478040][ T360] usb 1-1: Product: syz [ 49.482264][ T360] usb 1-1: Manufacturer: syz [ 49.490076][ T360] usb 1-1: config 0 descriptor?? [ 49.900071][ T1075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.913211][ T1075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.913234][ T36] audit: type=1400 audit(1793756667.220:934): avc: denied { mounton } for pid=1098 comm="syz.2.203" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 49.969972][ T36] audit: type=1400 audit(1793756667.270:935): avc: denied { name_bind } for pid=1100 comm="syz.2.204" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 50.056593][ T430] usb 1-1: USB disconnect, device number 17 [ 50.320120][ T1120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.328603][ T1120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.549980][ T394] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 50.716229][ T394] usb 2-1: Using ep0 maxpacket: 16 [ 50.722788][ T394] usb 2-1: unable to get BOS descriptor or descriptor too short [ 50.732841][ T394] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 193, changing to 7 [ 50.756549][ T394] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 50.771103][ T394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.786728][ T394] usb 2-1: Product: syz [ 50.799980][ T394] usb 2-1: Manufacturer: syz [ 50.810044][ T394] usb 2-1: SerialNumber: syz [ 51.023546][ T394] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 51.034952][ T394] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 51.055054][ T394] usb 2-1: USB disconnect, device number 21 [ 51.073186][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.139990][ T430] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 51.302732][ T430] usb 1-1: config 0 has no interfaces? [ 51.309549][ T430] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 51.318779][ T430] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 51.326890][ T430] usb 1-1: Product: syz [ 51.331232][ T430] usb 1-1: Manufacturer: syz [ 51.340614][ T430] usb 1-1: config 0 descriptor?? [ 51.625519][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 51.625536][ T36] audit: type=1400 audit(1793756668.930:937): avc: denied { create } for pid=1142 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 51.662579][ T36] audit: type=1400 audit(1793756668.970:938): avc: denied { create } for pid=1148 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.711637][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.718804][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.726299][ T1148] bridge_slave_0: entered allmulticast mode [ 51.732835][ T1148] bridge_slave_0: entered promiscuous mode [ 51.740297][ T297] bridge_slave_1: left allmulticast mode [ 51.750967][ T297] bridge_slave_1: left promiscuous mode [ 51.762509][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.770307][ T1134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.780814][ T297] bridge_slave_0: left allmulticast mode [ 51.782896][ T1134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.792355][ T297] bridge_slave_0: left promiscuous mode [ 51.802303][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.872181][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.879235][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.886398][ T1148] bridge_slave_1: entered allmulticast mode [ 51.892815][ T1148] bridge_slave_1: entered promiscuous mode [ 51.916545][ T297] veth1_macvtap: left promiscuous mode [ 51.922176][ T297] veth0_vlan: left promiscuous mode [ 51.995569][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.002658][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.013318][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.020401][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.040033][ T407] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 52.043680][ T1148] veth0_vlan: entered promiscuous mode [ 52.053600][ T430] usb 1-1: USB disconnect, device number 18 [ 52.059230][ T1148] veth1_macvtap: entered promiscuous mode [ 52.079959][ T36] audit: type=1400 audit(1793756669.380:939): avc: denied { mount } for pid=1148 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.103458][ T36] audit: type=1400 audit(1793756669.400:940): avc: denied { mounton } for pid=1148 comm="syz-executor" path="/root/syzkaller.Z4SWLB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 52.192664][ T36] audit: type=1400 audit(1793756669.500:941): avc: denied { connect } for pid=1155 comm="syz.4.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.212309][ T407] usb 2-1: Using ep0 maxpacket: 32 [ 52.222996][ T407] usb 2-1: config 0 has an invalid interface number: 189 but max is 0 [ 52.234140][ T407] usb 2-1: config 0 has no interface number 0 [ 52.240344][ T407] usb 2-1: config 0 interface 189 altsetting 128 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 52.251545][ T407] usb 2-1: config 0 interface 189 altsetting 128 endpoint 0xD has an invalid bInterval 144, changing to 11 [ 52.262984][ T407] usb 2-1: config 0 interface 189 altsetting 128 endpoint 0xD has invalid maxpacket 1853, setting to 1024 [ 52.274340][ T407] usb 2-1: config 0 interface 189 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 52.287623][ T407] usb 2-1: config 0 interface 189 has no altsetting 0 [ 52.296127][ T407] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0134, bcdDevice=aa.35 [ 52.305697][ T407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.314223][ T407] usb 2-1: Product: syz [ 52.314334][ T1160] FAULT_INJECTION: forcing a failure. [ 52.314334][ T1160] name failslab, interval 1, probability 0, space 0, times 0 [ 52.318410][ T407] usb 2-1: Manufacturer: syz [ 52.318431][ T407] usb 2-1: SerialNumber: syz [ 52.322528][ T407] usb 2-1: config 0 descriptor?? [ 52.339744][ T1160] CPU: 0 UID: 0 PID: 1160 Comm: syz.4.216 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 52.339788][ T1160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 52.339802][ T1160] Call Trace: [ 52.339808][ T1160] [ 52.339816][ T1160] __dump_stack+0x21/0x30 [ 52.339844][ T1160] dump_stack_lvl+0x140/0x1c0 [ 52.339864][ T1160] ? __cfi_dump_stack_lvl+0x10/0x10 [ 52.339884][ T1160] dump_stack+0x19/0x20 [ 52.339901][ T1160] should_fail_ex+0x3c2/0x510 [ 52.339933][ T1160] should_failslab+0xac/0x100 [ 52.339954][ T1160] __kmalloc_cache_noprof+0x41/0x470 [ 52.339981][ T1160] ? security_capable+0x44/0x130 [ 52.340001][ T1160] ? ipv6_flowlabel_opt+0x1914/0x25e0 [ 52.340031][ T1160] ipv6_flowlabel_opt+0x1914/0x25e0 [ 52.340059][ T1160] ? __cfi_ipv6_flowlabel_opt+0x10/0x10 [ 52.340086][ T1160] ? __kasan_check_write+0x18/0x20 [ 52.340111][ T1160] ? _raw_spin_lock_bh+0x96/0x130 [ 52.340131][ T1160] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 52.340150][ T1160] ? __schedule+0x16e8/0x2380 [ 52.340170][ T1160] ? _raw_spin_unlock_bh+0x54/0x60 [ 52.340189][ T1160] ? lock_sock_nested+0x216/0x2a0 [ 52.340208][ T1160] ? __cfi_lock_sock_nested+0x10/0x10 [ 52.340226][ T1160] ? __sched_text_start+0x10/0x10 [ 52.340245][ T1160] do_ipv6_setsockopt+0xea0/0x3350 [ 52.340271][ T1160] ? __cfi___futex_queue+0x10/0x10 [ 52.340295][ T1160] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 52.340321][ T1160] ? avc_has_perm_noaudit+0x26b/0x360 [ 52.340342][ T1160] ? __asan_memcpy+0x5a/0x80 [ 52.340368][ T1160] ? avc_has_perm_noaudit+0x289/0x360 [ 52.340389][ T1160] ? avc_has_perm+0x155/0x240 [ 52.340409][ T1160] ? __cfi_avc_has_perm+0x10/0x10 [ 52.340429][ T1160] ? futex_wake+0x627/0x950 [ 52.340452][ T1160] ? selinux_socket_setsockopt+0x324/0x3d0 [ 52.340476][ T1160] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 52.340499][ T1160] ? __sched_text_start+0x10/0x10 [ 52.340520][ T1160] ipv6_setsockopt+0x5d/0x170 [ 52.340545][ T1160] tcp_setsockopt+0xf2/0x110 [ 52.340564][ T1160] sock_common_setsockopt+0xb8/0xd0 [ 52.340582][ T1160] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 52.340601][ T1160] do_sock_setsockopt+0x27c/0x410 [ 52.340627][ T1160] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 52.340650][ T1160] ? __fget_files+0x2bc/0x330 [ 52.340671][ T1160] __x64_sys_setsockopt+0x18c/0x220 [ 52.340695][ T1160] x64_sys_call+0x2adc/0x2ee0 [ 52.340735][ T1160] do_syscall_64+0x57/0xf0 [ 52.340755][ T1160] ? clear_bhb_loop+0x50/0xa0 [ 52.340783][ T1160] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.340806][ T1160] RIP: 0033:0x7fc90e59fb19 [ 52.340824][ T1160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.340839][ T1160] RSP: 002b:00007fc90f3b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 52.340861][ T1160] RAX: ffffffffffffffda RBX: 00007fc90e825fa0 RCX: 00007fc90e59fb19 [ 52.340875][ T1160] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000009 [ 52.340887][ T1160] RBP: 00007fc90e637b70 R08: 0000000000000020 R09: 0000000000000000 [ 52.340900][ T1160] R10: 0000200000003680 R11: 0000000000000246 R12: 0000000000000000 [ 52.340913][ T1160] R13: 00007fc90e826038 R14: 00007fc90e825fa0 R15: 00007ffc9ce2eea8 [ 52.340931][ T1160] [ 52.659977][ T360] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 52.666472][ T1153] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 52.686379][ T1148] cgroup: fork rejected by pids controller in /syz4 [ 52.740049][ T310] bridge_slave_1: left allmulticast mode [ 52.745766][ T310] bridge_slave_1: left promiscuous mode [ 52.751657][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.759358][ T310] bridge_slave_0: left allmulticast mode [ 52.765273][ T310] bridge_slave_0: left promiscuous mode [ 52.771080][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.820533][ T360] usb 1-1: not running at top speed; connect to a high speed hub [ 52.829046][ T360] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.840814][ T360] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 52.849903][ T360] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 52.858949][ T360] usb 1-1: Product: syz [ 52.870144][ T360] usb 1-1: Manufacturer: syz [ 52.880970][ T360] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 52.885967][ T1153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.887357][ T360] usb 1-1: No streaming interface found for terminal 2. [ 52.904031][ T1153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.920058][ T407] ftdi_sio 2-1:0.189: FTDI USB Serial Device converter detected [ 52.931116][ T310] veth1_macvtap: left promiscuous mode [ 52.936760][ T310] veth0_vlan: left promiscuous mode [ 52.943730][ T407] ftdi_sio ttyUSB0: unknown device type: 0xaa35 [ 52.956933][ T407] usb 2-1: USB disconnect, device number 22 [ 52.964792][ T407] ftdi_sio 2-1:0.189: device disconnected [ 53.006984][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.014140][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.023798][ T1171] bridge_slave_0: entered allmulticast mode [ 53.032492][ T1171] bridge_slave_0: entered promiscuous mode [ 53.038803][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.046856][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.053942][ T1171] bridge_slave_1: entered allmulticast mode [ 53.060407][ T1171] bridge_slave_1: entered promiscuous mode [ 53.081849][ T360] usb 1-1: USB disconnect, device number 19 [ 53.112214][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.119268][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.126558][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.133604][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.152047][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.159333][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.169160][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.176245][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.185284][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.192354][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.216663][ T1171] veth0_vlan: entered promiscuous mode [ 53.226937][ T1171] veth1_macvtap: entered promiscuous mode [ 53.490018][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 53.641657][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 53.653081][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.663937][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 53.673074][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.682639][ T9] hub 5-1:4.0: USB hub found [ 53.869999][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 53.882732][ T9] hub 5-1:4.0: config failed, can't read hub descriptor (err -90) [ 54.021133][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.031438][ T10] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 54.040564][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.050028][ T10] uvcvideo 2-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 54.058915][ T10] usb 2-1: Found UVC 1.00 device (0000:0000) [ 54.065911][ T10] uvcvideo 2-1:1.1: No supported video formats found. [ 54.072943][ T10] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 54.091329][ T36] audit: type=1400 audit(1793756671.400:942): avc: denied { bind } for pid=1175 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.110712][ T36] audit: type=1400 audit(1793756671.400:943): avc: denied { listen } for pid=1175 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.130272][ T36] audit: type=1400 audit(1793756671.400:944): avc: denied { read } for pid=1175 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.252047][ T407] usb 2-1: USB disconnect, device number 23 [ 54.350027][ T1336] netlink: 60 bytes leftover after parsing attributes in process `syz.2.229'. [ 54.378576][ T1336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 54.676944][ T36] audit: type=1400 audit(1793756671.980:945): avc: denied { setopt } for pid=1337 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.700194][ T36] audit: type=1400 audit(1793756672.010:946): avc: denied { map } for pid=1337 comm="syz.4.230" path="socket:[9080]" dev="sockfs" ino=9080 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.730201][ T10] usb 5-1: USB disconnect, device number 2 [ 54.980069][ T45] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 55.010011][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 55.131429][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.141614][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 65535, setting to 64 [ 55.153937][ T45] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 55.163109][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.171154][ T45] usb 5-1: Product: syz [ 55.171350][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.175330][ T45] usb 5-1: Manufacturer: syz [ 55.175351][ T45] usb 5-1: SerialNumber: syz [ 55.190274][ T1343] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 55.191913][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.212519][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 55.221606][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.230393][ T10] usb 2-1: config 0 descriptor?? [ 55.399296][ T45] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 55.409234][ T45] usb 5-1: USB disconnect, device number 3 [ 55.641443][ T1345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.650567][ T1345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.662392][ T10] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 55.670354][ T10] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 55.677810][ T10] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 55.685227][ T10] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 55.692676][ T10] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 55.700788][ T10] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 55.863243][ T10] playstation 0003:054C:0DF2.0003: Invalid reportID received, expected 9 got 0 [ 55.872324][ T10] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense pairing info: -22 [ 55.881570][ T10] playstation 0003:054C:0DF2.0003: Failed to get MAC address from DualSense [ 55.890361][ T10] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 55.898400][ T10] playstation 0003:054C:0DF2.0003: probe with driver playstation failed with error -22 [ 56.149986][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 56.300008][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 56.306269][ T10] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 56.314579][ T10] usb 5-1: config 0 has no interface number 0 [ 56.320856][ T10] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 56.330874][ T10] usb 5-1: config 0 interface 196 has no altsetting 0 [ 56.339009][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 56.348095][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.356118][ T10] usb 5-1: Product: syz [ 56.360303][ T10] usb 5-1: Manufacturer: syz [ 56.364894][ T10] usb 5-1: SerialNumber: syz [ 56.370054][ T10] usb 5-1: config 0 descriptor?? [ 56.375520][ T1352] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 56.692994][ T1354] EXT4-fs (sda1): shut down requested (2) [ 56.698796][ T1354] Aborting journal on device sda1-8. [ 56.704548][ T36] audit: type=1400 audit(1793756674.010:947): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 56.726441][ T36] audit: type=1400 audit(1793756674.010:948): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.727336][ T1354] usb usb1: usbfs: process 1354 (syz.0.234) did not claim interface 1 before use [ 56.748023][ T36] audit: type=1400 audit(1793756674.010:949): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.778360][ T36] audit: type=1400 audit(1793756674.010:950): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.799715][ T36] audit: type=1400 audit(1793756674.010:951): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.820537][ T36] audit: type=1400 audit(1793756674.010:952): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.843704][ T36] audit: type=1400 audit(1793756674.010:953): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.866293][ T36] audit: type=1400 audit(1793756674.030:954): avc: denied { append } for pid=1353 comm="syz.0.234" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.984781][ T10] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 56.993676][ T10] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 57.059990][ T360] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 57.200107][ T360] usb 1-1: device descriptor read/64, error -71 [ 57.249304][ T36] audit: type=1400 audit(1793756674.550:955): avc: denied { read } for pid=1351 comm="syz.4.233" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 57.290166][ T36] audit: type=1400 audit(1793756674.550:956): avc: denied { open } for pid=1351 comm="syz.4.233" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 57.314120][ C1] ipheth 5-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 57.409836][ T1369] ./dev/sda1: Can't lookup blockdev [ 57.440011][ T360] usb 1-1: device descriptor read/64, error -71 [ 57.552341][ T1375] overlayfs: missing 'workdir' [ 57.679985][ T360] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 57.780754][ T45] usb 2-1: USB disconnect, device number 24 [ 57.808218][ T9] usb 5-1: USB disconnect, device number 4 [ 57.819981][ T360] usb 1-1: device descriptor read/64, error -71 [ 57.862979][ T9] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 58.080642][ T360] usb 1-1: device descriptor read/64, error -71 [ 58.199422][ T360] usb usb1-port1: attempt power cycle [ 58.224541][ T1409] netlink: 140 bytes leftover after parsing attributes in process `syz.2.251'. [ 58.540010][ T360] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 58.561084][ T360] usb 1-1: device descriptor read/8, error -71 [ 58.691117][ T360] usb 1-1: device descriptor read/8, error -71 [ 58.836343][ T1431] ./dev/sda1: Can't lookup blockdev [ 58.900292][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 58.909372][ T1437] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=274 [ 58.918418][ T1437] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=274 [ 58.930011][ T360] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 58.951299][ T360] usb 1-1: device descriptor read/8, error -71 [ 58.990646][ T1437] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=274 [ 58.999477][ T1437] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=274 [ 59.008435][ T1437] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=274 [ 59.017370][ T1437] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=448 [ 59.026182][ T1437] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=448 [ 59.035280][ T1437] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=448 [ 59.044118][ T1437] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -5 [ 59.053456][ T1437] platform regulatory.0: Direct firmware load for regulatory.db failed with error -5 [ 59.080035][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 59.086335][ T360] usb 1-1: device descriptor read/8, error -71 [ 59.092576][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 59.100695][ T9] usb 2-1: config 0 has no interface number 0 [ 59.108154][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 59.117428][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.125455][ T9] usb 2-1: Product: syz [ 59.129610][ T9] usb 2-1: Manufacturer: syz [ 59.134221][ T9] usb 2-1: SerialNumber: syz [ 59.139327][ T9] usb 2-1: config 0 descriptor?? [ 59.145172][ T9] smsc95xx v2.0.0 [ 59.210106][ T360] usb usb1-port1: unable to enumerate USB device [ 59.512812][ T1461] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 59.520889][ T325] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 59.543730][ T1461] SELinux: security_context_str_to_sid (^) failed with errno=-22 [ 59.570316][ T1463] TCP: TCP_TX_DELAY enabled [ 59.579000][ T1463] overlayfs: failed to clone lowerpath [ 59.681160][ T325] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 59.690390][ T325] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 59.699449][ T325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.910473][ T325] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 59.951056][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 59.961827][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 60.146795][ T1475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1475 comm=syz.2.272 [ 60.163154][ T394] usb 5-1: USB disconnect, device number 5 [ 60.219995][ T45] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 60.371007][ T45] usb 1-1: config 0 has no interfaces? [ 60.378079][ T45] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 60.387331][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 60.395708][ T45] usb 1-1: SerialNumber: syz [ 60.400990][ T45] usb 1-1: config 0 descriptor?? [ 60.979564][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 60.992120][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 61.002171][ T9] usb 2-1: USB disconnect, device number 25 [ 61.573971][ T1504] ======================================================= [ 61.573971][ T1504] WARNING: The mand mount option has been deprecated and [ 61.573971][ T1504] and is ignored by this kernel. Remove the mand [ 61.573971][ T1504] option from the mount to silence this warning. [ 61.573971][ T1504] ======================================================= [ 62.153534][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 62.153552][ T36] audit: type=1401 audit(2000000001.370:965): op=fscreate invalid_context=CF [ 62.153895][ T1513] netlink: 'syz.2.285': attribute type 27 has an invalid length. [ 62.190248][ T36] audit: type=1400 audit(2000000001.410:966): avc: denied { shutdown } for pid=1515 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.217226][ T36] audit: type=1400 audit(2000000001.430:967): avc: denied { setopt } for pid=1515 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.236837][ T36] audit: type=1400 audit(2000000001.440:968): avc: denied { getopt } for pid=1515 comm="syz.2.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.303071][ T36] audit: type=1400 audit(2000000001.520:969): avc: denied { setopt } for pid=1531 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.326761][ T36] audit: type=1400 audit(2000000001.520:970): avc: denied { ioctl } for pid=1531 comm="syz.4.291" path="socket:[10861]" dev="sockfs" ino=10861 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.330268][ T1533] ./dev/sda1: Can't lookup blockdev [ 62.352226][ T36] audit: type=1400 audit(2000000001.520:971): avc: denied { read } for pid=1531 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.392641][ T36] audit: type=1400 audit(2000000001.590:972): avc: denied { write } for pid=1531 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.429493][ T9] smpboot: CPU 1 is now offline [ 62.456395][ T1540] netlink: 'syz.2.294': attribute type 32 has an invalid length. [ 62.466671][ T1538] netlink: 'syz.1.293': attribute type 16 has an invalid length. [ 62.474517][ T36] audit: type=1400 audit(2000000001.670:973): avc: denied { getopt } for pid=1537 comm="syz.1.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.494101][ T1538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.293'. [ 62.518718][ T36] audit: type=1400 audit(2000000001.670:974): avc: denied { bind } for pid=1539 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.604260][ T1550] netlink: 'syz.1.296': attribute type 4 has an invalid length. [ 63.150583][ T1562] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 63.251796][ T9] usb 1-1: USB disconnect, device number 24 [ 63.260836][ T1570] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 63.305905][ T1573] netlink: 92 bytes leftover after parsing attributes in process `syz.0.304'. [ 63.366867][ T1581] x_tables: duplicate underflow at hook 2 [ 63.373656][ T1581] batadv_slave_0: entered promiscuous mode [ 63.382993][ T1580] batadv_slave_0: left promiscuous mode [ 63.396516][ T1583] fuse: Unknown parameter 'euid' [ 63.560262][ T394] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 63.690083][ T65] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 63.712619][ T1590] netlink: 140 bytes leftover after parsing attributes in process `syz.2.311'. [ 63.722060][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 63.731527][ T394] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 63.749608][ T394] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 63.760780][ T1592] ./dev/sda1: Can't lookup blockdev [ 63.770798][ T394] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.779828][ T394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.789213][ T394] usb 5-1: Product: syz [ 63.793630][ T394] usb 5-1: Manufacturer: syz [ 63.798348][ T394] usb 5-1: SerialNumber: syz [ 63.830018][ T65] usb 2-1: device descriptor read/64, error -71 [ 63.889975][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 63.897311][ T9] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 63.906558][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.914762][ T9] usb 1-1: Product: syz [ 63.918916][ T9] usb 1-1: Manufacturer: syz [ 63.923653][ T9] usb 1-1: SerialNumber: syz [ 64.005125][ T1577] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 64.070012][ T65] usb 2-1: device descriptor read/64, error -71 [ 64.155649][ T9] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 64.168094][ T9] usb 1-1: clock source 0 is not valid, cannot use [ 64.175131][ T9] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 64.184089][ T9] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 64.193323][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 64.203664][ T9] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 64.216472][ T9] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 64.232486][ T447] udevd[447]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.249426][ T9] usb 1-1: USB disconnect, device number 25 [ 64.291130][ T1595] 9pnet_fd: Insufficient options for proto=fd [ 64.309991][ T65] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 64.439971][ T65] usb 2-1: device descriptor read/64, error -71 [ 64.614096][ T1577] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 64.692195][ T65] usb 2-1: device descriptor read/64, error -71 [ 64.810144][ T65] usb usb2-port1: attempt power cycle [ 64.825458][ T394] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 64.832096][ T394] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 64.839462][ T394] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 64.886568][ T1623] batadv_slave_0: entered promiscuous mode [ 64.893033][ T1623] ip6gretap0: entered promiscuous mode [ 64.898836][ T1622] ip6gretap0: left promiscuous mode [ 64.904239][ T1622] batadv_slave_0: left promiscuous mode [ 65.032577][ T394] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 65.040324][ T360] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 65.049737][ T394] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 65.063710][ T394] usb 5-1: USB disconnect, device number 6 [ 65.069735][ T394] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 65.150126][ T65] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 65.171055][ T65] usb 2-1: device descriptor read/8, error -71 [ 65.191056][ T360] usb 1-1: config 127 has an invalid interface number: 87 but max is 0 [ 65.199435][ T360] usb 1-1: config 127 has no interface number 0 [ 65.207178][ T360] usb 1-1: New USB device found, idVendor=0421, idProduct=0070, bcdDevice=3a.00 [ 65.216372][ T360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.224550][ T360] usb 1-1: Product: syz [ 65.228773][ T360] usb 1-1: Manufacturer: syz [ 65.233489][ T360] usb 1-1: SerialNumber: syz [ 65.300926][ T65] usb 2-1: device descriptor read/8, error -71 [ 65.445875][ T360] usb 1-1: bad CDC descriptors [ 65.452279][ T360] cdc_acm 1-1:127.87: Zero length descriptor references [ 65.459528][ T360] cdc_acm 1-1:127.87: probe with driver cdc_acm failed with error -22 [ 65.470471][ T360] usb 1-1: USB disconnect, device number 26 [ 65.498438][ T1637] netlink: 'syz.2.325': attribute type 25 has an invalid length. [ 65.540009][ T65] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 65.571078][ T65] usb 2-1: device descriptor read/8, error -71 [ 65.701015][ T65] usb 2-1: device descriptor read/8, error -71 [ 65.790019][ T394] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 65.810086][ T65] usb usb2-port1: unable to enumerate USB device [ 65.941160][ T394] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.956928][ T394] usb 5-1: config 0 interface 0 has no altsetting 0 [ 65.971010][ T394] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 65.982656][ T394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.992644][ T394] usb 5-1: config 0 descriptor?? [ 66.219970][ T65] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 66.349960][ T65] usb 1-1: device descriptor read/64, error -71 [ 66.399777][ T1639] netlink: 'syz.4.326': attribute type 1 has an invalid length. [ 66.407943][ T394] logitech 0003:046D:C20E.0004: rdesc size test failed for formula gp [ 66.421668][ T394] logitech 0003:046D:C20E.0004: hidraw0: USB HID vf.fe Device [HID 046d:c20e] on usb-dummy_hcd.4-1/input0 [ 66.434260][ T1653] udevd[1653]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 66.506281][ T1656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 66.589985][ T65] usb 1-1: device descriptor read/64, error -71 [ 66.601037][ T394] usb 5-1: USB disconnect, device number 7 [ 66.830030][ T65] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 66.850018][ T360] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 66.959976][ T65] usb 1-1: device descriptor read/64, error -71 [ 67.000030][ T360] usb 2-1: Using ep0 maxpacket: 32 [ 67.006198][ T360] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 67.016685][ T360] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 67.027150][ T360] usb 2-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 67.036386][ T360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.044588][ T360] usb 2-1: Product: syz [ 67.048732][ T360] usb 2-1: Manufacturer: syz [ 67.053472][ T360] usb 2-1: SerialNumber: syz [ 67.199968][ T65] usb 1-1: device descriptor read/64, error -71 [ 67.310096][ T65] usb usb1-port1: attempt power cycle [ 67.316219][ T1672] netlink: 'syz.1.331': attribute type 16 has an invalid length. [ 67.324286][ T1672] netlink: 'syz.1.331': attribute type 2 has an invalid length. [ 67.332106][ T1672] netlink: 64110 bytes leftover after parsing attributes in process `syz.1.331'. [ 67.369969][ T394] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 67.499996][ T394] usb 5-1: device descriptor read/64, error -71 [ 67.576968][ T1674] netlink: 72 bytes leftover after parsing attributes in process `syz.2.336'. [ 67.586568][ T36] kauditd_printk_skb: 99 callbacks suppressed [ 67.586580][ T36] audit: type=1400 audit(2000000006.800:1074): avc: denied { ioctl } for pid=1673 comm="syz.2.336" path="socket:[13813]" dev="sockfs" ino=13813 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.679983][ T65] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 67.700913][ T65] usb 1-1: device descriptor read/8, error -71 [ 67.749968][ T394] usb 5-1: device descriptor read/64, error -71 [ 67.831099][ T65] usb 1-1: device descriptor read/8, error -71 [ 67.990743][ T394] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 68.070026][ T65] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 68.090889][ T65] usb 1-1: device descriptor read/8, error -71 [ 68.119966][ T394] usb 5-1: device descriptor read/64, error -71 [ 68.220957][ T65] usb 1-1: device descriptor read/8, error -71 [ 68.330044][ T65] usb usb1-port1: unable to enumerate USB device [ 68.359972][ T394] usb 5-1: device descriptor read/64, error -71 [ 68.470056][ T394] usb usb5-port1: attempt power cycle [ 68.809977][ T394] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 68.830916][ T394] usb 5-1: device descriptor read/8, error -71 [ 68.960933][ T394] usb 5-1: device descriptor read/8, error -71 [ 69.172565][ T1691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'. [ 69.183081][ T1691] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.193684][ T1691] bridge_slave_0 (unregistering): left allmulticast mode [ 69.201024][ T394] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 69.208825][ T1691] bridge_slave_0 (unregistering): left promiscuous mode [ 69.216688][ T1691] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.232807][ T394] usb 5-1: device descriptor read/8, error -71 [ 69.360931][ T394] usb 5-1: device descriptor read/8, error -71 [ 69.369978][ T65] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 69.470085][ T394] usb usb5-port1: unable to enumerate USB device [ 69.519961][ T65] usb 1-1: Using ep0 maxpacket: 16 [ 69.526131][ T65] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.542649][ T360] usb 2-1: unit 8 not found! [ 69.549760][ T65] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.567423][ T360] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 69.580618][ T65] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.594538][ T360] usb 2-1: USB disconnect, device number 30 [ 69.603676][ T36] audit: type=1400 audit(2000000008.810:1075): avc: denied { shutdown } for pid=1700 comm="syz.1.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.633846][ T65] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 69.656705][ T65] usb 1-1: config 0 interface 0 has no altsetting 0 [ 69.663536][ T65] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 69.672731][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.683539][ T65] usb 1-1: config 0 descriptor?? [ 69.979980][ T360] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 70.135224][ T360] usb 2-1: config index 0 descriptor too short (expected 4257, got 161) [ 70.173617][ T65] logitech-djreceiver 0003:046D:C53A.0005: hiddev96,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.0-1/input0 [ 70.190898][ T360] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.201418][ T1714] FAULT_INJECTION: forcing a failure. [ 70.201418][ T1714] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.215178][ T1713] udevd[1713]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 70.234814][ T360] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 70.252444][ T1714] CPU: 0 UID: 0 PID: 1714 Comm: syz.4.349 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 70.252465][ T1714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 70.252473][ T1714] Call Trace: [ 70.252477][ T1714] [ 70.252481][ T1714] __dump_stack+0x21/0x30 [ 70.252496][ T1714] dump_stack_lvl+0x140/0x1c0 [ 70.252506][ T1714] ? __cfi_dump_stack_lvl+0x10/0x10 [ 70.252516][ T1714] ? _raw_spin_unlock+0x45/0x60 [ 70.252527][ T1714] ? find_vmap_area+0x1ae/0x1c0 [ 70.252540][ T1714] dump_stack+0x19/0x20 [ 70.252556][ T1714] should_fail_ex+0x3c2/0x510 [ 70.252572][ T1714] should_fail+0xf/0x20 [ 70.252585][ T1714] should_fail_usercopy+0x1e/0x30 [ 70.252596][ T1714] _copy_from_user+0x20/0xa0 [ 70.252608][ T1714] __get_filter+0x174/0x2f0 [ 70.252622][ T1714] sk_attach_filter+0x27/0x160 [ 70.252634][ T1714] sk_setsockopt+0x241e/0x2c20 [ 70.252646][ T1714] ? __cfi_sk_setsockopt+0x10/0x10 [ 70.252658][ T1714] ? selinux_socket_setsockopt+0x324/0x3d0 [ 70.252672][ T1714] ? do_futex+0x32a/0x510 [ 70.252683][ T1714] ? errseq_sample+0x48/0x70 [ 70.252694][ T1714] ? file_init_path+0x434/0x590 [ 70.252708][ T1714] sock_setsockopt+0x5e/0x70 [ 70.252719][ T1714] do_sock_setsockopt+0x211/0x410 [ 70.252733][ T1714] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 70.252746][ T1714] ? __fget_files+0x2bc/0x330 [ 70.252757][ T1714] __x64_sys_setsockopt+0x18c/0x220 [ 70.252770][ T1714] x64_sys_call+0x2adc/0x2ee0 [ 70.252780][ T1714] do_syscall_64+0x57/0xf0 [ 70.252790][ T1714] ? clear_bhb_loop+0x50/0xa0 [ 70.252804][ T1714] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 70.252817][ T1714] RIP: 0033:0x7f7f0b19fb19 [ 70.252828][ T1714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.252837][ T1714] RSP: 002b:00007f7f0c028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.252853][ T1714] RAX: ffffffffffffffda RBX: 00007f7f0b425fa0 RCX: 00007f7f0b19fb19 [ 70.252861][ T1714] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 70.252867][ T1714] RBP: 00007f7f0b237b70 R08: 0000000000000010 R09: 0000000000000000 [ 70.252874][ T1714] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 70.252881][ T1714] R13: 00007f7f0b426038 R14: 00007f7f0b425fa0 R15: 00007fffeba1d928 [ 70.252889][ T1714] [ 70.495126][ T360] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.563474][ T36] audit: type=1400 audit(2000000009.780:1076): avc: denied { create } for pid=1686 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 70.681447][ T36] audit: type=1400 audit(2000000009.900:1077): avc: denied { unlink } for pid=1725 comm="syz.4.352" name="file1" dev="tmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 70.736208][ T36] audit: type=1400 audit(2000000009.950:1078): avc: denied { mounton } for pid=1737 comm="syz.4.355" path="/23/dev/sda" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.785085][ T360] usb 2-1: string descriptor 0 read error: -71 [ 70.792302][ T360] uvcvideo 2-1:1.1: Unknown video format 32595559-0008-0010-8000-00aa00389b71 [ 70.803260][ T360] usb 2-1: Found UVC 1.00 device (046d:0825) [ 70.810375][ T360] uvcvideo 2-1:1.1: No supported video formats found. [ 70.817215][ T360] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 70.836580][ T360] usb 2-1: USB disconnect, device number 31 [ 70.938934][ T36] audit: type=1400 audit(2000000010.150:1079): avc: denied { module_load } for pid=1741 comm="syz.2.357" path=2F6D656D66643A2D42D54E49C56A9A0872580E202864656C6574656429 dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 70.966220][ T1742] Invalid ELF header len 16 [ 71.019967][ T394] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 71.171096][ T394] usb 5-1: config 0 interface 0 altsetting 24 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 71.182336][ T394] usb 5-1: config 0 interface 0 altsetting 24 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.192427][ T394] usb 5-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.205581][ T394] usb 5-1: config 0 interface 0 has no altsetting 0 [ 71.212327][ T394] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 71.221590][ T394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.232464][ T394] usb 5-1: config 0 descriptor?? [ 71.451687][ T360] usb 1-1: reset high-speed USB device number 31 using dummy_hcd [ 71.532215][ T36] audit: type=1400 audit(2000000010.750:1080): avc: denied { write } for pid=1754 comm="syz.2.362" path="socket:[14158]" dev="sockfs" ino=14158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.619975][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 71.639913][ T1740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.649342][ T1740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.660388][ T394] lenovo 0003:17EF:6009.0006: ignoring exceeding usage max [ 71.671639][ T394] lenovo 0003:17EF:6009.0006: No inputs registered, leaving [ 71.682695][ T1760] udevd[1760]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 71.692242][ T394] lenovo 0003:17EF:6009.0006: hidraw1: USB HID v0.11 Joystick [HID 17ef:6009] on usb-dummy_hcd.4-1/input0 [ 71.782980][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 71.792978][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 71.802932][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 71.814150][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 71.824594][ T9] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 71.834040][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.842990][ T1747] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 71.851881][ T1747] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 71.862559][ T372] usb 5-1: USB disconnect, device number 12 [ 71.876595][ T9] pl2303 2-1:1.0: pl2303 converter detected [ 71.990163][ T9] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -110 [ 71.998426][ T9] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 72.006813][ T9] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 72.015070][ T9] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 72.023226][ T9] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 72.031783][ T9] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0404]: -32 [ 72.040111][ T9] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8484]: -32 [ 72.048296][ T9] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [8383]: -32 [ 72.056500][ T9] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0000]: -32 [ 72.064893][ T9] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0001]: -32 [ 72.073664][ T9] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0002]: -32 [ 72.082492][ T1746] can: request_module (can-proto-6) failed. [ 72.093942][ T9] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 72.108900][ T9] usb 2-1: USB disconnect, device number 32 [ 72.116867][ T9] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 72.126351][ T9] pl2303 2-1:1.0: device disconnected [ 72.337188][ T36] audit: type=1400 audit(2000000011.550:1081): avc: denied { append } for pid=1762 comm="syz.0.365" name="cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 72.400007][ T36] audit: type=1400 audit(2000000011.550:1082): avc: denied { open } for pid=1762 comm="syz.0.365" path="/73/dev/cpu_dma_latency" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 72.432290][ T1767] SELinux: Context system_u:object_r:devicekit_exec_t:s0 is not valid (left unmapped). [ 72.459553][ T36] audit: type=1400 audit(2000000011.580:1083): avc: denied { mounton } for pid=1762 comm="syz.0.365" path="/73/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 72.781078][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 72.781091][ T36] audit: type=1400 audit(2000000012.000:1091): avc: denied { accept } for pid=1784 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.820991][ T36] audit: type=1400 audit(2000000012.030:1092): avc: denied { write } for pid=1784 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.120280][ T65] usb 1-1: USB disconnect, device number 31 [ 73.308955][ T36] audit: type=1400 audit(2000000012.520:1093): avc: denied { remount } for pid=1791 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.358756][ T1798] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 73.369963][ T36] audit: type=1400 audit(2000000012.560:1094): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:setrans_initrc_exec_t:s0" [ 73.448898][ T36] audit: type=1400 audit(2000000012.570:1095): avc: denied { mounton } for pid=1797 comm="syz.0.373" path="/file0" dev="ramfs" ino=14526 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 73.529533][ T36] audit: type=1400 audit(2000000012.640:1096): avc: denied { search } for pid=1801 comm="syz.0.375" name="/" dev="configfs" ino=2546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.554611][ T1813] netlink: 188 bytes leftover after parsing attributes in process `syz.0.379'. [ 73.619015][ T36] audit: type=1400 audit(2000000012.640:1097): avc: denied { write } for pid=1801 comm="syz.0.375" name="usb_gadget" dev="configfs" ino=2547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.641920][ T65] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 73.715921][ T36] audit: type=1400 audit(2000000012.640:1098): avc: denied { add_name } for pid=1801 comm="syz.0.375" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.779603][ T36] audit: type=1400 audit(2000000012.640:1099): avc: denied { create } for pid=1801 comm="syz.0.375" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 73.830247][ T65] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 73.853690][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 73.864923][ T36] audit: type=1400 audit(2000000012.660:1100): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 73.910286][ T65] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 73.939976][ T372] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 73.951930][ T65] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 73.978611][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.999245][ T65] usb 5-1: config 0 descriptor?? [ 74.091511][ T372] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 198, changing to 11 [ 74.102669][ T372] usb 2-1: config 1 interface 0 has no altsetting 0 [ 74.116895][ T372] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.40 [ 74.126157][ T372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.138162][ T372] usb 2-1: Product: Я [ 74.147568][ T372] usb 2-1: Manufacturer: ᠁ [ 74.156468][ T372] usb 2-1: SerialNumber: ܟ뽣쁇壑⃔㥱鯢䑆᪭輋㼣籧蒀谟떌︔清܀蚂꨺砹貂윛煏＆ⴭ۩瓿胜ힴ밠蛛㵱疙ᙸꤸ铱ꀎ䯎䢃뜀ඒ盷ゴ죖⑺뢰欒Ⓐ褒ꐷ颓荲斋휶ᚆﰈ⿗w颹₻䉫깍৑炏䲞诳኿婈❴뫇᭄✁칞䲓ዸ [ 74.411762][ T65] wacom 0003:056A:00D0.0007: unknown main item tag 0x1 [ 74.421183][ T65] wacom 0003:056A:00D0.0007: unknown main item tag 0x0 [ 74.428397][ T65] wacom 0003:056A:00D0.0007: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 74.441587][ T65] wacom 0003:056A:00D0.0007: hidraw0: USB HID v0.02 Device [HID 056a:00d0] on usb-dummy_hcd.4-1/input0 [ 74.452860][ T1834] udevd[1834]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 74.466647][ T65] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D0.0007/input/input6 [ 74.489965][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 74.588561][ T1836] tipc: New replicast peer: 127.0.0.1 [ 74.594606][ T1836] tipc: Enabled bearer , priority 10 [ 74.601398][ T1836] tipc: Disabling bearer [ 74.623409][ T1825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.634761][ T360] usb 5-1: USB disconnect, device number 13 [ 74.647533][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 74.665352][ T1825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.680353][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.692429][ T1825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.710509][ T1825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.720160][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.734719][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 74.749837][ T1825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.759298][ T1825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.767760][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 74.777138][ T9] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 74.790032][ T9] usb 1-1: Manufacturer: syz [ 74.795062][ T372] usbhid 2-1:1.0: can't add hid device: -71 [ 74.801442][ T372] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 74.811996][ T9] usb 1-1: config 0 descriptor?? [ 74.819213][ T372] usb 2-1: USB disconnect, device number 33 [ 75.220352][ T9] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 75.227553][ T9] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 75.243308][ T9] appleir 0003:05AC:8243.0008: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 75.260421][ T1853] udevd[1853]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 75.291570][ T1859] overlayfs: failed to clone upperpath [ 75.304554][ T1860] overlayfs: failed to clone upperpath [ 75.480601][ T1833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.509751][ T1833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.533776][ T1833] netlink: 100 bytes leftover after parsing attributes in process `syz.0.387'. [ 75.562646][ T372] usb 1-1: USB disconnect, device number 32 [ 75.657730][ T1888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1888 comm=syz.2.405 [ 76.039447][ T1910] overlayfs: failed to clone upperpath [ 76.057472][ T1910] overlayfs: failed to clone upperpath [ 76.118008][ T1932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 76.151244][ T1935] kvm: emulating exchange as write [ 76.188836][ T1941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.416'. [ 76.197854][ T1941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 76.215457][ T1941] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 76.224708][ T1941] overlayfs: missing 'lowerdir' [ 76.469989][ T372] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 76.620029][ T372] usb 1-1: Using ep0 maxpacket: 16 [ 76.626397][ T372] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.637693][ T372] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.650778][ T372] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 76.669468][ T1950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50706 sclass=netlink_route_socket pid=1950 comm=syz.1.419 [ 76.682268][ T372] usb 1-1: config 0 interface 0 has no altsetting 0 [ 76.689671][ T372] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 76.699043][ T372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.709060][ T372] usb 1-1: config 0 descriptor?? [ 77.118479][ T372] hid (null): invalid report_size 27759 [ 77.133670][ T372] hid (null): invalid report_size 29797 [ 77.149488][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 77.158159][ T372] hid (null): bogus close delimiter [ 77.310137][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 77.317263][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 77.329139][ T372] usb 1-1: USB disconnect, device number 33 [ 77.335650][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 77.356580][ T9] usb 5-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 77.371346][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.387342][ T9] usb 5-1: Product: syz [ 77.397441][ T9] usb 5-1: Manufacturer: syz [ 77.407686][ T9] usb 5-1: SerialNumber: syz [ 77.664778][ T9] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 77.671867][ T9] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 77.679113][ T9] usb 5-1: unable to issue vendor read request (ret = -71) [ 77.687267][ T9] usb 5-1: unable to issue vendor read request (ret = -71) [ 77.695060][ T9] usb 5-1: unable to issue vendor read request (ret = -71) [ 77.702662][ T9] usb 5-1: unable to issue vendor read request (ret = -71) [ 77.714571][ T9] usb 5-1: USB disconnect, device number 14 [ 77.845278][ T1975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.429'. [ 77.854933][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 77.854943][ T36] audit: type=1326 audit(2000000017.070:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1974 comm="syz.0.429" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4263f9fb19 code=0x0 [ 78.031280][ T1978] overlayfs: failed to clone lowerpath [ 78.188613][ T36] audit: type=1326 audit(2000000017.400:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1979 comm="syz.2.431" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653519fb19 code=0x7ffc0000 [ 78.216905][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 78.236817][ T36] audit: type=1326 audit(2000000017.430:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1979 comm="syz.2.431" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f653519fb19 code=0x7ffc0000 [ 78.265020][ T36] audit: type=1326 audit(2000000017.430:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1979 comm="syz.2.431" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653519fb19 code=0x7ffc0000 [ 78.290614][ T36] audit: type=1326 audit(2000000017.430:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1979 comm="syz.2.431" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653519fb19 code=0x7ffc0000 [ 78.316539][ T36] audit: type=1326 audit(2000000017.430:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1979 comm="syz.2.431" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f653519fb19 code=0x7ffc0000 [ 78.342022][ T36] audit: type=1326 audit(2000000017.430:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1979 comm="syz.2.431" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653519fb19 code=0x7ffc0000 [ 78.367431][ T36] audit: type=1326 audit(2000000017.430:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1979 comm="syz.2.431" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653519fb19 code=0x7ffc0000 [ 78.410109][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 78.416250][ T9] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 78.424556][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 78.435767][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 78.445981][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 78.457397][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 78.467776][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.480763][ T372] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 78.488675][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.497975][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.594236][ T36] audit: type=1400 audit(2000000017.809:1136): avc: denied { write } for pid=1993 comm="syz.1.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.621260][ T1996] overlayfs: disabling nfs_export due to verity=on [ 78.627836][ T1996] overlayfs: failed to clone upperpath [ 78.633394][ T372] usb 5-1: device descriptor read/64, error -71 [ 78.870486][ T372] usb 5-1: device descriptor read/64, error -71 [ 79.029722][ T36] audit: type=1400 audit(2000000018.239:1137): avc: denied { mounton } for pid=2002 comm="syz.2.439" path="/208/file0" dev="tmpfs" ino=1203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.119983][ T372] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 79.249983][ T372] usb 5-1: device descriptor read/64, error -71 [ 79.489986][ T372] usb 5-1: device descriptor read/64, error -71 [ 79.600891][ T372] usb usb5-port1: attempt power cycle [ 79.939998][ T372] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 79.961026][ T372] usb 5-1: device descriptor read/8, error -71 [ 80.090980][ T372] usb 5-1: device descriptor read/8, error -71 [ 80.340465][ T2038] syz.2.445 uses obsolete (PF_INET,SOCK_PACKET) [ 80.348147][ T372] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 80.370984][ T372] usb 5-1: device descriptor read/8, error -71 [ 80.500952][ T372] usb 5-1: device descriptor read/8, error -71 [ 80.610056][ T372] usb usb5-port1: unable to enumerate USB device [ 80.859956][ T372] usb 1-1: USB disconnect, device number 34 [ 81.639991][ T372] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 81.725483][ T2064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.453'. [ 81.792367][ T372] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.813750][ T372] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 81.835091][ T372] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 81.855747][ T372] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.871726][ T372] usb 5-1: Product: syz [ 81.875974][ T372] usb 5-1: Manufacturer: syz [ 81.880746][ T372] usb 5-1: SerialNumber: syz [ 81.889709][ T372] usb-storage 5-1:1.0: USB Mass Storage device detected [ 81.897866][ T372] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 81.906289][ T372] scsi host1: usb-storage 5-1:1.0 [ 82.751368][ T2109] netlink: 'syz.1.463': attribute type 1 has an invalid length. [ 83.009955][ T372] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 83.160917][ T372] usb 1-1: too many endpoints for config 0 interface 0 altsetting 12: 254, using maximum allowed: 30 [ 83.172030][ T372] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 83.183285][ T372] usb 1-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 83.197080][ T372] usb 1-1: config 0 interface 0 has no altsetting 0 [ 83.203826][ T372] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 83.213044][ T372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.222291][ T372] usb 1-1: config 0 descriptor?? [ 83.229030][ T2112] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 83.380901][ T2119] fuse: Bad value for 'fd' [ 83.385714][ T2120] fuse: Bad value for 'fd' [ 84.279615][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 84.279642][ T36] audit: type=1400 audit(2000000023.489:1146): avc: denied { getopt } for pid=2138 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.326881][ T2141] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 84.352456][ T2141] overlayfs: failed to clone lowerpath [ 84.443288][ T394] usb 5-1: USB disconnect, device number 19 [ 84.702388][ T36] audit: type=1400 audit(2000000023.919:1147): avc: denied { lock } for pid=2159 comm="syz.1.482" path="socket:[16171]" dev="sockfs" ino=16171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.869962][ T394] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 84.918528][ T2170] overlayfs: failed to clone upperpath [ 85.017930][ T36] audit: type=1400 audit(2000000024.229:1148): avc: denied { bind } for pid=2175 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.062171][ T394] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 135 [ 85.080616][ T394] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.107602][ T394] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 85.119141][ T394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.132635][ T394] usb 5-1: Product: syz [ 85.142729][ T394] usb 5-1: Manufacturer: syz [ 85.152661][ T394] usb 5-1: SerialNumber: syz [ 85.165568][ T2158] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.174765][ T394] ums-onetouch 5-1:1.0: USB Mass Storage device detected [ 85.722811][ T372] usbhid 1-1:0.0: can't add hid device: -71 [ 85.731793][ T372] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 85.761264][ T372] usb 1-1: USB disconnect, device number 35 [ 85.800926][ T2219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.812656][ T2220] tipc: Started in network mode [ 85.817600][ T2220] tipc: Node identity ac14140f, cluster identity 4711 [ 85.824736][ T2219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.835021][ T2220] tipc: New replicast peer: 255.255.255.255 [ 85.841308][ T2220] tipc: Enabled bearer , priority 10 [ 86.059449][ T36] audit: type=1400 audit(2000000025.269:1149): avc: denied { nlmsg_read } for pid=2224 comm="syz.1.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.359299][ T36] audit: type=1400 audit(2000000025.569:1150): avc: denied { map } for pid=2235 comm="syz.0.504" path="pipe:[16512]" dev="pipefs" ino=16512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 86.620853][ T394] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 86.781115][ T394] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 86.788494][ T394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 86.798373][ T394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 86.810655][ T394] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 86.819816][ T394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.828134][ T394] usb 1-1: Product: syz [ 86.832709][ T394] usb 1-1: Manufacturer: syz [ 86.837324][ T394] usb 1-1: SerialNumber: syz [ 86.844811][ T394] usb 1-1: config 0 descriptor?? [ 86.850593][ T394] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8 [ 86.960002][ T372] tipc: Node number set to 2886997007 [ 87.062125][ T394] usb 1-1: USB disconnect, device number 36 [ 87.498798][ T394] usb 5-1: USB disconnect, device number 20 [ 87.505330][ T2253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.511'. [ 87.534034][ T2253] netlink: 1 bytes leftover after parsing attributes in process `syz.2.511'. [ 87.819993][ T372] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 87.852110][ T394] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 87.969982][ T372] usb 1-1: Using ep0 maxpacket: 8 [ 87.977532][ T372] usb 1-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 87.986856][ T372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.995007][ T372] usb 1-1: Product: syz [ 87.999279][ T372] usb 1-1: Manufacturer: syz [ 88.004147][ T372] usb 1-1: SerialNumber: syz [ 88.030913][ T394] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 88.039230][ T394] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 88.047576][ T394] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 88.056574][ T394] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 88.067623][ T394] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.079400][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 88.090587][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 88.101671][ T394] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 88.116653][ T394] usb 5-1: string descriptor 0 read error: -22 [ 88.123007][ T394] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 88.132440][ T394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.142669][ T394] usb 5-1: config 0 descriptor?? [ 88.149422][ T2256] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 88.158956][ T394] hub 5-1:0.0: bad descriptor, ignoring hub [ 88.165402][ T394] hub 5-1:0.0: probe with driver hub failed with error -5 [ 88.176856][ T394] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 88.188863][ T36] audit: type=1400 audit(2000000027.409:1151): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=646 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.222090][ T372] usb 1-1: unit 0 not found! [ 88.226780][ T372] usb 1-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 88.247157][ T372] usb 1-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 88.256363][ T372] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 88.268131][ T372] usb 1-1: USB disconnect, device number 37 [ 88.279684][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.362130][ T36] audit: type=1400 audit(2000000027.579:1152): avc: denied { setattr } for pid=2255 comm="syz.4.512" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 88.388839][ T36] audit: type=1400 audit(2000000027.599:1153): avc: denied { ioctl } for pid=2255 comm="syz.4.512" path="pid:[4026532674]" dev="nsfs" ino=4026532674 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 88.499748][ T2289] netlink: 'syz.2.521': attribute type 4 has an invalid length. [ 88.507969][ T2289] netlink: 'syz.2.521': attribute type 5 has an invalid length. [ 88.516021][ T2289] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.521'. [ 88.577248][ T36] audit: type=1400 audit(2000000027.789:1154): avc: denied { create } for pid=2299 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 88.749427][ T36] audit: type=1400 audit(2000000027.959:1155): avc: denied { read } for pid=2309 comm="syz.0.529" name="userfaultfd" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 88.915404][ T2311] udevd[2311]: failed to execute '/lib/udev/scsi_id' 'scsi_id --export --whitelisted -d /dev/sda': Input/output error [ 88.937279][ T65] usb 5-1: USB disconnect, device number 21 [ 89.010169][ T394] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 89.105295][ T2322] /dev/loop0: Can't lookup blockdev [ 89.159969][ T394] usb 1-1: Invalid ep0 maxpacket: 64 [ 89.270007][ T65] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 89.289977][ T394] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 89.399974][ T65] usb 5-1: device descriptor read/64, error -71 [ 89.440871][ T394] usb 1-1: Invalid ep0 maxpacket: 64 [ 89.446323][ T394] usb usb1-port1: attempt power cycle [ 89.640053][ T65] usb 5-1: device descriptor read/64, error -71 [ 89.789986][ T394] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 89.810381][ T394] usb 1-1: Invalid ep0 maxpacket: 64 [ 89.879983][ T65] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 89.939999][ T394] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 89.960318][ T394] usb 1-1: Invalid ep0 maxpacket: 64 [ 89.972196][ T394] usb usb1-port1: unable to enumerate USB device [ 89.990997][ T2344] netlink: 124 bytes leftover after parsing attributes in process `syz.2.538'. [ 90.002568][ T2344] netlink: 124 bytes leftover after parsing attributes in process `syz.2.538'. [ 90.011783][ T65] usb 5-1: device descriptor read/64, error -71 [ 90.018165][ T2344] netlink: 124 bytes leftover after parsing attributes in process `syz.2.538'. [ 90.027356][ T2344] netlink: 124 bytes leftover after parsing attributes in process `syz.2.538'. [ 90.036732][ T2344] netlink: 124 bytes leftover after parsing attributes in process `syz.2.538'. [ 90.046009][ T2344] netlink: 124 bytes leftover after parsing attributes in process `syz.2.538'. [ 90.055139][ T2344] netlink: 124 bytes leftover after parsing attributes in process `syz.2.538'. [ 90.260003][ T65] usb 5-1: device descriptor read/64, error -71 [ 90.370056][ T65] usb usb5-port1: attempt power cycle [ 90.710001][ T65] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 90.730947][ T65] usb 5-1: device descriptor read/8, error -71 [ 90.861014][ T65] usb 5-1: device descriptor read/8, error -71 [ 91.099971][ T65] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 91.130884][ T65] usb 5-1: device descriptor read/8, error -71 [ 91.198246][ T2411] netlink: 'syz.2.541': attribute type 4 has an invalid length. [ 91.260986][ T65] usb 5-1: device descriptor read/8, error -71 [ 91.370074][ T65] usb usb5-port1: unable to enumerate USB device [ 91.785512][ T2430] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(9) [ 91.876228][ T2434] ./dev/sda1: Can't lookup blockdev [ 91.904509][ T2438] /dev/md2: Can't lookup blockdev [ 91.973890][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 91.973902][ T36] audit: type=1400 audit(2000000031.189:1160): avc: denied { accept } for pid=2440 comm="syz.2.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.320087][ T36] audit: type=1400 audit(2000000031.539:1161): avc: denied { bind } for pid=2454 comm="syz.0.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 92.523728][ T36] audit: type=1400 audit(2000000031.739:1162): avc: denied { nlmsg_read } for pid=2462 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 92.574860][ T2470] fuse: Unknown parameter 'f&'ߋ46$㬒x*d' [ 92.693680][ T2478] netlink: 'syz.2.564': attribute type 3 has an invalid length. [ 92.706912][ T2478] netlink: 'syz.2.564': attribute type 3 has an invalid length. [ 111.303790][ T36] audit: type=1400 audit(2000000050.519:1163): avc: denied { getopt } for pid=2485 comm="syz.2.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.327902][ T2488] tipc: Enabled bearer , priority 10 [ 111.342270][ T2488] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 111.363568][ T36] audit: type=1400 audit(2000000050.549:1164): avc: denied { remount } for pid=2481 comm="syz.0.565" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.417114][ T36] audit: type=1400 audit(2000000050.559:1165): avc: denied { lock } for pid=2490 comm="syz.4.569" path="socket:[17616]" dev="sockfs" ino=17616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 111.481172][ T36] audit: type=1400 audit(2000000050.679:1166): avc: denied { ioctl } for pid=2498 comm="syz.4.570" path="socket:[17691]" dev="sockfs" ino=17691 ioctlcmd=0x5826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.820740][ T36] audit: type=1400 audit(2000000051.039:1167): avc: denied { create } for pid=2522 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 111.929977][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 112.091901][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8768, setting to 1024 [ 112.114081][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice=24.00 [ 112.132148][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 112.150493][ T9] usb 5-1: Product: syz [ 112.157836][ T9] usb 5-1: Manufacturer: syz [ 112.208120][ T36] audit: type=1400 audit(2000000051.419:1168): avc: denied { block_suspend } for pid=2528 comm="syz.2.578" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.196393][ T36] audit: type=1326 audit(2000000052.409:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2557 comm="syz.2.587" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f653519fb19 code=0x0 [ 113.279796][ T2565] raw_sendmsg: syz.1.590 forgot to set AF_INET. Fix it! [ 113.294246][ T36] audit: type=1400 audit(2000000052.489:1170): avc: denied { accept } for pid=2564 comm="syz.1.590" lport=102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 113.545860][ T2591] rust_binder: 2590:2591 got transaction to invalid handle 3 [ 113.561038][ T2591] rust_binder: 2590:2591 transaction call to 0:0 failed ENOENT, code 2 size 0-0 line process.rs:958 [ 113.640506][ T2595] loop6: detected capacity change from 0 to 1 [ 113.657452][ C0] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x20000800 phys_seg 0 prio class 2 [ 113.678455][ T36] audit: type=1400 audit(2000000052.889:1171): avc: denied { create } for pid=2594 comm="syz.0.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 113.911656][ T2601] ./dev/sda1: Can't lookup blockdev [ 113.930089][ T2602] ./dev/sda1: Can't lookup blockdev [ 114.307903][ T36] audit: type=1400 audit(2000000053.519:1172): avc: denied { name_bind } for pid=2623 comm="syz.1.605" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 114.332399][ T2625] __nla_validate_parse: 59 callbacks suppressed [ 114.332412][ T2625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.605'. [ 114.617598][ T9] usbhid 5-1:1.0: can't add hid device: -71 [ 114.634520][ T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 114.664101][ T9] usb 5-1: USB disconnect, device number 26 [ 115.440757][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 115.495730][ T2674] ./dev/sda1: Can't lookup blockdev [ 115.560455][ T2677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 115.609967][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 115.616408][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 115.624919][ T9] usb 5-1: config 0 has no interface number 0 [ 115.631180][ T9] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 65024, setting to 1024 [ 115.642717][ T9] usb 5-1: config 0 interface 184 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 1024 [ 115.653194][ T9] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 115.664501][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 115.672822][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 115.682207][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.690463][ T9] usb 5-1: Product: syz [ 115.694752][ T9] usb 5-1: Manufacturer: syz [ 115.699375][ T9] usb 5-1: SerialNumber: syz [ 115.704651][ T9] usb 5-1: config 0 descriptor?? [ 115.711262][ T2663] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.719019][ T9] smsc75xx v1.0.0 [ 115.722979][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 115.733339][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 116.159989][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 116.309968][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 116.316094][ T9] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 116.324566][ T9] usb 1-1: config 0 has no interface number 0 [ 116.330777][ T9] usb 1-1: config 0 interface 120 has no altsetting 0 [ 116.338948][ T9] usb 1-1: New USB device found, idVendor=12ef, idProduct=0100, bcdDevice=e8.89 [ 116.348235][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.356331][ T9] usb 1-1: Product: syz [ 116.360666][ T9] usb 1-1: Manufacturer: syz [ 116.365289][ T9] usb 1-1: SerialNumber: syz [ 116.372129][ T9] usb 1-1: config 0 descriptor?? [ 116.583425][ T9] usb 1-1: USB disconnect, device number 42 [ 117.178444][ T2694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'. [ 117.198069][ T2694] tc_dump_action: action bad kind [ 117.218580][ T2704] overlayfs: failed to clone lowerpath [ 117.241499][ T2711] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 117.251155][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 117.251165][ T36] audit: type=1400 audit(2000000056.459:1177): avc: denied { load_policy } for pid=2707 comm="syz.0.629" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 117.286808][ T2711] SELinux: failed to load policy [ 117.579995][ T65] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 117.709979][ T65] usb 1-1: device descriptor read/64, error -71 [ 117.949986][ T65] usb 1-1: device descriptor read/64, error -71 [ 118.189989][ T65] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 118.319982][ T65] usb 1-1: device descriptor read/64, error -71 [ 118.351360][ T9] usb 5-1: USB disconnect, device number 27 [ 118.367428][ T2722] FAULT_INJECTION: forcing a failure. [ 118.367428][ T2722] name failslab, interval 1, probability 0, space 0, times 0 [ 118.380337][ T2722] CPU: 0 UID: 0 PID: 2722 Comm: syz.4.632 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 118.380356][ T2722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 118.380377][ T2722] Call Trace: [ 118.380380][ T2722] [ 118.380385][ T2722] __dump_stack+0x21/0x30 [ 118.380401][ T2722] dump_stack_lvl+0x140/0x1c0 [ 118.380411][ T2722] ? __cfi_dump_stack_lvl+0x10/0x10 [ 118.380422][ T2722] dump_stack+0x19/0x20 [ 118.380432][ T2722] should_fail_ex+0x3c2/0x510 [ 118.380449][ T2722] should_failslab+0xac/0x100 [ 118.380460][ T2722] kmem_cache_alloc_noprof+0x42/0x410 [ 118.380475][ T2722] ? security_file_alloc+0x49/0x220 [ 118.380490][ T2722] ? kasan_save_alloc_info+0x3a/0x50 [ 118.380503][ T2722] security_file_alloc+0x49/0x220 [ 118.380516][ T2722] init_file+0x9e/0x210 [ 118.380528][ T2722] alloc_empty_file+0xd9/0x270 [ 118.380538][ T2722] ? _raw_spin_unlock+0x45/0x60 [ 118.380549][ T2722] alloc_file_pseudo+0x142/0x1f0 [ 118.380561][ T2722] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 118.380572][ T2722] ? bpf_lsm_socket_post_create+0xd/0x20 [ 118.380587][ T2722] ? __kasan_check_write+0x18/0x20 [ 118.380600][ T2722] sock_alloc_file+0xbe/0x2b0 [ 118.380610][ T2722] __sys_socketpair+0x3b8/0x5c0 [ 118.380621][ T2722] __x64_sys_socketpair+0x9f/0xc0 [ 118.380633][ T2722] x64_sys_call+0x2081/0x2ee0 [ 118.380643][ T2722] do_syscall_64+0x57/0xf0 [ 118.380653][ T2722] ? clear_bhb_loop+0x50/0xa0 [ 118.380667][ T2722] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 118.380680][ T2722] RIP: 0033:0x7f7f0b19fb19 [ 118.380690][ T2722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.380699][ T2722] RSP: 002b:00007f7f0c028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 118.380711][ T2722] RAX: ffffffffffffffda RBX: 00007f7f0b425fa0 RCX: 00007f7f0b19fb19 [ 118.380719][ T2722] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 118.380726][ T2722] RBP: 00007f7f0b237b70 R08: 0000000000000000 R09: 0000000000000000 [ 118.380732][ T2722] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 118.380739][ T2722] R13: 00007f7f0b426038 R14: 00007f7f0b425fa0 R15: 00007fffeba1d928 [ 118.380747][ T2722] [ 118.728537][ T36] audit: type=1400 audit(2000000057.939:1178): avc: denied { shutdown } for pid=2737 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.749963][ T65] usb 1-1: device descriptor read/64, error -71 [ 118.860132][ T65] usb usb1-port1: attempt power cycle [ 118.989983][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 119.141419][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 119.149849][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 119.161129][ T9] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 119.170273][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.179759][ T9] usb 5-1: Product: syz [ 119.184476][ T9] usb 5-1: Manufacturer: syz [ 119.195685][ T9] usb 5-1: SerialNumber: syz [ 119.200672][ T65] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 119.214213][ T2738] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 119.230895][ T65] usb 1-1: device descriptor read/8, error -71 [ 119.360912][ T65] usb 1-1: device descriptor read/8, error -71 [ 119.429995][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 119.446684][ T9] usb 5-1: USB disconnect, device number 28 [ 119.599971][ T65] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 119.630946][ T65] usb 1-1: device descriptor read/8, error -71 [ 119.760865][ T65] usb 1-1: device descriptor read/8, error -71 [ 119.800542][ T2749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.639'. [ 119.870246][ T65] usb usb1-port1: unable to enumerate USB device [ 120.011972][ T2761] syzkaller1: entered promiscuous mode [ 120.019363][ T2761] syzkaller1: entered allmulticast mode [ 120.060282][ T36] audit: type=1400 audit(2000000059.279:1179): avc: denied { write } for pid=2762 comm="syz.4.643" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 120.221481][ T36] audit: type=1400 audit(2000000059.439:1180): avc: denied { bind } for pid=2765 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.364371][ T36] audit: type=1326 audit(2000000059.569:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2773 comm="syz.0.647" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4263f9fb19 code=0x0 [ 120.401137][ T2778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2778 comm=syz.2.649 [ 120.504284][ T2793] ================================================================== [ 120.512382][ T2793] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x586/0x1350 [ 120.519924][ T2793] Read of size 8 at addr ffff88811ef0af98 by task syz.4.652/2793 [ 120.527623][ T2793] [ 120.529961][ T2793] CPU: 0 UID: 0 PID: 2793 Comm: syz.4.652 Not tainted syzkaller #0 696230b0126414627535663eb488b8b4d474df7d [ 120.529981][ T2793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 120.529992][ T2793] Call Trace: [ 120.529998][ T2793] [ 120.530006][ T2793] __dump_stack+0x21/0x30 [ 120.530024][ T2793] dump_stack_lvl+0x140/0x1c0 [ 120.530035][ T2793] ? __cfi_dump_stack_lvl+0x10/0x10 [ 120.530045][ T2793] ? __cfi__printk+0x10/0x10 [ 120.530062][ T2793] print_address_description+0x71/0x210 [ 120.530074][ T2793] print_report+0x4a/0x70 [ 120.530084][ T2793] kasan_report+0x162/0x1a0 [ 120.530096][ T2793] ? snapshot_ctr+0x586/0x1350 [ 120.530110][ T2793] ? snapshot_ctr+0x586/0x1350 [ 120.530120][ T2793] __asan_report_load8_noabort+0x18/0x20 [ 120.530134][ T2793] snapshot_ctr+0x586/0x1350 [ 120.530145][ T2793] ? dm_split_args+0xa1/0x740 [ 120.530155][ T2793] ? __cfi_snapshot_ctr+0x10/0x10 [ 120.530166][ T2793] ? dm_split_args+0x5d0/0x740 [ 120.530177][ T2793] dm_table_add_target+0x59f/0xcb0 [ 120.530187][ T2793] table_load+0x2eb/0x7d0 [ 120.530201][ T2793] ? __check_object_size+0x99/0x870 [ 120.530217][ T2793] ? __cfi_table_load+0x10/0x10 [ 120.530231][ T2793] ? __kasan_check_write+0x18/0x20 [ 120.530244][ T2793] ? __cfi_table_load+0x10/0x10 [ 120.530258][ T2793] dm_ctl_ioctl+0x8f0/0xde0 [ 120.530272][ T2793] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 120.530287][ T2793] ? __fget_files+0x2bc/0x330 [ 120.530300][ T2793] ? bpf_lsm_file_ioctl+0xd/0x20 [ 120.530313][ T2793] ? security_file_ioctl+0x3e/0x110 [ 120.530328][ T2793] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 120.530341][ T2793] __se_sys_ioctl+0x123/0x1b0 [ 120.530353][ T2793] __x64_sys_ioctl+0x7f/0xa0 [ 120.530366][ T2793] x64_sys_call+0x1878/0x2ee0 [ 120.530381][ T2793] do_syscall_64+0x57/0xf0 [ 120.530393][ T2793] ? clear_bhb_loop+0x50/0xa0 [ 120.530407][ T2793] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.530421][ T2793] RIP: 0033:0x7f7f0b19fb19 [ 120.530433][ T2793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.530443][ T2793] RSP: 002b:00007f7f0c028028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.530457][ T2793] RAX: ffffffffffffffda RBX: 00007f7f0b425fa0 RCX: 00007f7f0b19fb19 [ 120.530465][ T2793] RDX: 0000200000002b40 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 120.530473][ T2793] RBP: 00007f7f0b237b70 R08: 0000000000000000 R09: 0000000000000000 [ 120.530480][ T2793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.530487][ T2793] R13: 00007f7f0b426038 R14: 00007f7f0b425fa0 R15: 00007fffeba1d928 [ 120.530495][ T2793] [ 120.530499][ T2793] [ 120.789969][ T2793] Allocated by task 2793: [ 120.794273][ T2793] kasan_save_track+0x3e/0x80 [ 120.798945][ T2793] kasan_save_alloc_info+0x3a/0x50 [ 120.804035][ T2793] __kasan_kmalloc+0x96/0xb0 [ 120.808598][ T2793] __kmalloc_cache_node_noprof+0x225/0x430 [ 120.814383][ T2793] dm_get_table_device+0x1e3/0x6c0 [ 120.819468][ T2793] dm_get_device+0x32b/0x7f0 [ 120.824032][ T2793] snapshot_ctr+0x292/0x1350 [ 120.828615][ T2793] dm_table_add_target+0x59f/0xcb0 [ 120.833699][ T2793] table_load+0x2eb/0x7d0 [ 120.838004][ T2793] dm_ctl_ioctl+0x8f0/0xde0 [ 120.842481][ T2793] __se_sys_ioctl+0x123/0x1b0 [ 120.847133][ T2793] __x64_sys_ioctl+0x7f/0xa0 [ 120.851704][ T2793] x64_sys_call+0x1878/0x2ee0 [ 120.856376][ T2793] do_syscall_64+0x57/0xf0 [ 120.860768][ T2793] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.866658][ T2793] [ 120.868961][ T2793] Freed by task 2793: [ 120.872911][ T2793] kasan_save_track+0x3e/0x80 [ 120.877566][ T2793] kasan_save_free_info+0x44/0x50 [ 120.882568][ T2793] __kasan_slab_free+0x5f/0x80 [ 120.887305][ T2793] kfree+0x158/0x440 [ 120.891194][ T2793] dm_put_table_device+0x298/0x2e0 [ 120.896296][ T2793] dm_get_device+0x571/0x7f0 [ 120.900874][ T2793] snapshot_ctr+0x435/0x1350 [ 120.905461][ T2793] dm_table_add_target+0x59f/0xcb0 [ 120.910561][ T2793] table_load+0x2eb/0x7d0 [ 120.914869][ T2793] dm_ctl_ioctl+0x8f0/0xde0 [ 120.919348][ T2793] __se_sys_ioctl+0x123/0x1b0 [ 120.923999][ T2793] __x64_sys_ioctl+0x7f/0xa0 [ 120.928561][ T2793] x64_sys_call+0x1878/0x2ee0 [ 120.933213][ T2793] do_syscall_64+0x57/0xf0 [ 120.937617][ T2793] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 120.943507][ T2793] [ 120.945830][ T2793] The buggy address belongs to the object at ffff88811ef0af80 [ 120.945830][ T2793] which belongs to the cache kmalloc-96 of size 96 [ 120.959686][ T2793] The buggy address is located 24 bytes inside of [ 120.959686][ T2793] freed 96-byte region [ffff88811ef0af80, ffff88811ef0afe0) [ 120.973284][ T2793] [ 120.975586][ T2793] The buggy address belongs to the physical page: [ 120.981982][ T2793] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11ef0a [ 120.990812][ T2793] flags: 0x4000000000000000(zone=1) [ 120.996005][ T2793] page_type: f5(slab) [ 120.999967][ T2793] raw: 4000000000000000 ffff888100041280 ffffea00040eebc0 dead000000000002 [ 121.008523][ T2793] raw: 0000000000000000 0000000000200020 00000001f5000000 0000000000000000 [ 121.017075][ T2793] page dumped because: kasan: bad access detected [ 121.023555][ T2793] page_owner tracks the page as allocated [ 121.029242][ T2793] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 296, tgid 296 (syz-executor), ts 43963534251, free_ts 42529687503 [ 121.048238][ T2793] post_alloc_hook+0x37d/0x3b0 [ 121.052982][ T2793] prep_new_page+0x2d/0x180 [ 121.057465][ T2793] get_page_from_freelist+0x4aea/0x4ba0 [ 121.062985][ T2793] __alloc_pages_noprof+0x35a/0x7e0 [ 121.068159][ T2793] alloc_slab_page+0x6b/0x1e0 [ 121.073262][ T2793] allocate_slab+0x69/0x430 [ 121.077758][ T2793] ___slab_alloc+0x591/0x8c0 [ 121.082328][ T2793] __kmalloc_cache_noprof+0x2cd/0x470 [ 121.087693][ T2793] kernfs_fop_open+0x716/0xd50 [ 121.092440][ T2793] do_dentry_open+0x97f/0x1510 [ 121.097186][ T2793] vfs_open+0x86/0x240 [ 121.101232][ T2793] path_openat+0x2c49/0x35a0 [ 121.105889][ T2793] do_filp_open+0x1f2/0x440 [ 121.110366][ T2793] do_sys_openat2+0x134/0x1d0 [ 121.115025][ T2793] __x64_sys_openat+0x13a/0x170 [ 121.119863][ T2793] x64_sys_call+0xe69/0x2ee0 [ 121.124466][ T2793] page last free pid 20 tgid 20 stack trace: [ 121.130430][ T2793] free_unref_page+0xb99/0xf50 [ 121.135202][ T2793] __free_pages+0x6b/0x3b0 [ 121.139616][ T2793] __free_slab+0xb2/0x110 [ 121.143929][ T2793] rcu_free_slab+0x18/0x30 [ 121.148331][ T2793] rcu_do_batch+0x56a/0xcb0 [ 121.152853][ T2793] rcu_nocb_cb_kthread+0x533/0xb60 [ 121.157964][ T2793] kthread+0x2c7/0x360 [ 121.162022][ T2793] ret_from_fork+0x64/0xa0 [ 121.166423][ T2793] ret_from_fork_asm+0x1a/0x30 [ 121.171529][ T2793] [ 121.173829][ T2793] Memory state around the buggy address: [ 121.179432][ T2793] ffff88811ef0ae80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 121.187466][ T2793] ffff88811ef0af00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 121.195500][ T2793] >ffff88811ef0af80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 121.203550][ T2793] ^ [ 121.208386][ T2793] ffff88811ef0b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 121.216434][ T2793] ffff88811ef0b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 121.224498][ T2793] ================================================================== [ 121.236564][ T2793] Disabling lock debugging due to kernel taint [ 121.247439][ T36] audit: type=1400 audit(2000000060.459:1182): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.271773][ T2793] device-mapper: table: 252:3: device 1:9 not in table devices list [ 121.279890][ T2793] device-mapper: table: 252:3: snapshot-merge: COW device cannot be the same as origin device (-EINVAL) [ 121.292300][ T2793] device-mapper: ioctl: error adding target to table [ 121.299081][ T2793] device-mapper: table: 252:3: dm_table_destroy: dm_put_device call missing for 1:9