last executing test programs: 5.569215496s ago: executing program 1 (id=110): r0 = socket(0x1e, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) r3 = openat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f00000000c0), 0x2, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000100)) rmdir(&(0x7f00000196c0)='./cgroup/../file0\x00') write$tun(r1, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) 5.500582018s ago: executing program 1 (id=111): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x2) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@void, @val={0x0, 0x4, 0x9, 0x2, 0x6736, 0x4}, @arp=@generic={0x300, 0x9300, 0x6, 0x6, 0x1, @random="a923cf41b530", "63aa719ab442", @broadcast, "5f910b"}}, 0x27) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x17) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@flat=@handle={0x73682a85, 0x100a}, @ptr={0x70742a85, 0x80002, 0x0, 0x0, 0x1, 0x34}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000080)={0x4c, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x30, 0x0, &(0x7f0000000100)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) personality(0x5400004) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth1_to_hsr\x00', &(0x7f0000000240)=@ethtool_link_settings={0x20, 0x4, 0x1, 0x6, 0x2, 0x6, 0x4a, 0x28, 0xab, 0x97, [0xc, 0x5, 0x0, 0x10000, 0x3, 0x6, 0x10, 0xe]}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0x9, 0x7fff0000}]}) ioctl$KVM_GET_STATS_FD_cpu(r0, 0x2103) 5.080842262s ago: executing program 1 (id=114): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'unlock', ' ', 'mem'}, 0x3f) 5.080281032s ago: executing program 1 (id=116): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(r2, 0x6, 0x0, 0x0) ioctl$TCSETSW(r1, 0x800455c9, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x11, 0x0, &(0x7f0000000000)) syz_usb_control_io(r0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r4, &(0x7f0000006d80)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/172, 0xac}, {&(0x7f0000001bc0)=""/185, 0xb9}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/91, 0x5b}, {&(0x7f0000002d00)=""/186, 0xba}, {&(0x7f0000002e00)=""/202, 0xca}], 0x7}, 0xfffffffe}], 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.836193252s ago: executing program 3 (id=123): sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x40010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) close(r0) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0x0]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000040)="822a0affbd8c002b0304000e0480a79c070d63e286a5cefec3b8aa8ea9", 0x1d) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="080008000600000000001400000045220028006700000b069078ac1414bbac1414194e1d4e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500800057478efff"], 0x36) 2.754753635s ago: executing program 3 (id=124): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/wake_lock', 0x82002, 0x105) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100acef000108000200ac1e00010c000280050001000000000008000740ffff"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_buf(r3, 0x1, 0x28, &(0x7f0000000180)=""/120, &(0x7f0000000240)=0x78) 2.692602806s ago: executing program 3 (id=125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') fchdir(r2) exit(0xffff) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000240)=""/111, 0x6f}], 0x8}, 0x1209}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)={0x14, 0x2, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x60004) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000640)=@ethtool_rxnfc={0x2e, 0xe, 0x1, {0x0, @ah_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x1}, {0x0, @remote, 0x4, 0xffff, [0x1]}, @tcp_ip6_spec={@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e23, 0x4e1e, 0x2}, {0x0, @local, 0xa7f, 0x3, [0x1, 0x4]}, 0x9a}}}) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{0xa, 0x0, 0x0, 0x6, 0x760}]}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xe, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0xfd, 0x0, 0x0, 0x1, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0xffffffffffffffff}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6d, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x9, 0x80000004400080, 0x1c00000, 0x6, 0x0, 0x4, 0x0, 0x8000], 0x1, 0x3c4210}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) fcntl$lock(r7, 0x24, &(0x7f0000000180)={0x2, 0x0, 0x4000000089}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000000)={0x34, r1, 0x1, 0x803, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x86}, 0x40840) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000340), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000001b192c83d89d07d9722991b9312e023d2bc11a426cd9f8cbddd31148dea269ec6a1bfe18503ec2c5b37e4e9b882e8ea0f8b030dc801cc754ee09b97a2d21f9b94bb6edeb947febf11a4a0acb8da8dd45fc325106624729e2d8327d11ea9c36ad329525703de64248538a3cc6753691c9e17eabae5b02fe356195217e5efe4c5dc172337e22468e7e06f", @ANYRES16=r8, @ANYBLOB="000229bd7000fbdbdf250b00000008000200040000000800040009000000240006800600010002000000060005004e2000000800060020000000060005004e22000008000400070000000800030000000000"], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x6048090) 1.875100442s ago: executing program 3 (id=129): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="1201100100000008bd28780000000000000109022d000100004000090401100703000900092104000c0122280009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x8, 0xe, 0x4, 0x4}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) r2 = socket(0x10, 0xa, 0x6) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x35) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r5, 0x0) setregid(0x0, r4) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, &(0x7f0000000000)=@chain) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RGETATTR(r7, &(0x7f0000000300)={0xa0, 0x19, 0x2, {0x4401, {0x80, 0x3, 0x7}, 0x8, r3, r4, 0xfff, 0xa, 0x2, 0xcf, 0x8000000000000001, 0x9, 0xc04b, 0x1, 0x7, 0x3, 0xfffffffffffffff8, 0x256, 0x2, 0x8000, 0x7fffffffffffffff}}, 0xa0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00072800890a3b3f00008531f70ba381030000000000000000cb4fdca0560f920d54f365c5b1d43ee44fbf6fc93f4892436fca8c27e1821a149779a3c91c216597275d3b836a523d022d455d619c7b39cb7f990acb897f97770356a5b6fa4f081906adffb67cc8e7d656978467da4ce32699e7a9bdb38924451d96c0280d057109f8da8137eb51c002131f75cd43020d9911aa9a54a4d2dbb4262c3f5a12b4d3146e6216f8aa1eb0306f1d7b516d16dfbae4305824dea87db14584ed0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.838707833s ago: executing program 1 (id=130): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7, @none, 0x3, 0x2}, 0xe) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1}, 0x40015) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000100c0)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x700, 0x0}, 0x61) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) ppoll(&(0x7f0000000280)=[{r4, 0x40}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="c54240762f8c3b110c0a9476fc8dd13d0268a35b2866d3e6af6dbebbf15825815c7c93b7a70fa9869f78e91cbbf909a25855d6410b10db3067090483b7eb158b045fc75e70cd967040034e210cfedb42c26a5ec57c46558b64b55f29adde1c5725548a5c086dd14b74817c53fd9c76cb3ffcc7f0"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000500)={0x103, {{0x2, 0xfffc, @local}}}, 0xfffffffffffffda8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x12, 0x0, 0x1, [@typed={0x5, 0x5, 0x0, 0x0, @str='\x00'}]}]}, 0x2c}], 0x1}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xf0, r9, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x91}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x220}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) fsmount(0xffffffffffffffff, 0x0, 0x0) 1.660405279s ago: executing program 2 (id=131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0xd40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', r5, 0x2f, 0xf, 0x0, 0x40, 0x28, @mcast1, @loopback, 0x10, 0x700, 0x401, 0x4}}) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, 0x0, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) setsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, r10}, 0xc) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r11 = fsopen(&(0x7f0000000100)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r11, 0x2, &(0x7f0000000040)='utf8', &(0x7f0000000080)="a6", 0x1) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, &(0x7f00000004c0)="c74424000b800000c7442402fdef0000f26d0f011c24b8c7f700000f23d80f21f80723f80f30660fc7b062ab0000c744240094000000c744240200600000c7442406000000000f011424c744240077000000c744240200000000c7442406000000000f011c2480d1560f202566ba200066b8050066ef", 0x76}], 0x1, 0x8, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.633083709s ago: executing program 0 (id=132): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) unshare(0x20000600) dup3(r0, r2, 0x0) 1.61314311s ago: executing program 0 (id=133): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x10000, 0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.556638772s ago: executing program 0 (id=134): r0 = getpgrp(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x200000, @empty}, 0x1c) write(r1, &(0x7f0000000600)="2c13cf6400dd9fe527744bf04b65eff889f2abf59b7a3e4d7fcd621c5297e027d6882019dc19e8398e4d7b24bd51a37cefa39c6adca3a7b6e0b205d09250ba458aca7864651010ff0cfadcb9b1298f5b412d25f1e3cf81342880b4fd405c9c7b1d50ec9e574a75b040bafcd1e52dc279133eb6428bf71d45bc76bef988d9974a63e8f04b6ed728ae0dd4476da4", 0x8d) ptrace$setregset(0x4205, r0, 0x6, &(0x7f00000000c0)={&(0x7f0000000000)="8e54fd3ff7ed05f54c43b3685ce500479760252d8f79cf173bfc04ded88ace801f62052d96332ac652d7d5dfcd3bfdde181beeca6334a5ba568dbf103028909f3bcabcaa8bc761446a6bf65df6ab3f12c68a6985779c0bd2c4a59e7b23d298301bacb7f4c9cb23f0d223176a19ca5e7496d05f8b81016accc00371c3981c565946f0c9d436185495cdcc181deed8d78225512c575e17921de00eed86dfd9", 0x9e}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) listen(r1, 0x2) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001002428c167abd2a50fa6b5b98a907772300b9578f1f5000000100000000020010000000000000000000001000000ac1414aa00000000000000000000000000000000000000000a000000330000009ad61892bc54d3bf34fd423ac9597955aac2e8e11fa94e6a99746cf25bbbd11563051a3ec4ba0f832951c25d83e188f904fe5d998201343594cc63eada04cebda0b50000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000018f4ffffffffffff00000000000000000600000000000000ffffffffffffffff2c5e00000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800"/112], 0xb8}, 0x1, 0x0, 0x0, 0x8000004}, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xb0, 0xa5, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x2, 0x4a, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x3, 0x7, 0xfb}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2a, 0x75, 0x40}}]}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0xaa, &(0x7f00000006c0)={0x5, 0xf, 0xaa, 0x4, [@ptm_cap={0x3}, @generic={0x7c, 0x10, 0xa, "0239bda3c86fdd11d1b192968539d4c04b87db01daf1fef24e4dd9b5e2d1b9ab7c24f053744028772c23c98609ac3fec69c44919b76d7f6685c4318e2781fff3da722b527419a5cfbbf4c5281d20803f0aa96209a58978299b2a2d4a70c2fe6f093adae1a704dda5721df64368e39452307444a4c7506a78c2"}, @generic={0x12, 0x10, 0xb4dcedeb6fde2a0b, "8d5b48966ceb1ff39e5247ba301676"}, @ss_container_id={0x14, 0x10, 0x4, 0x80, "509412435963f97fc1e868ad49e110f2"}]}, 0x4, [{0x0, 0x0}, {0x73, &(0x7f0000000340)=@string={0x73, 0x3, "0b6da427c96bbc3cac63d7cd73fb14bec21c98ce232148984b6b81576c04433f1048ac555991c35e4c9635dbfe3abe7dbb4950efac33f01bc82cb8e4ce65ca10e983633322ff212155f9c351fd1c8f8f2b4a7b88ec81902d11abdeb870354a89b2d8cb0fe7f0d0dad16a4e490388a1e57a"}}, {0x0, 0x0}, {0x0, 0x0}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x14, 0x0, 0x602, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x20000) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c400000019000100ffffffff00000000e00000020000000000000000000000002001000000000000000000000000000100000000000000030a00002087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000900000000000000000000000000000000000100000000000000000000000000ffffffffffffffff0000000000000000fbffffffffffffff000000000000008a0400000000000000000000000000000200000000e4ffffff000000000000000000010302000000000c0015005cfb8b5c5e"], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, @in=@local, @in6=@local, 0x3c, 0x0, 0x0, 0x11, 0xa, 0x2}]}]}, 0xa0}}, 0x0) 1.555161342s ago: executing program 2 (id=135): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/user\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) unshare(0x60000600) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) (async, rerun: 64) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_async', 0x200, 0x14) (rerun: 64) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="66b8000000000f23d00f21f866352000000c0f23f8660f0f0eba001c093365f30f05def166b9800000c00f326635001000000f3066b9800000c00f326635004000000f30660f6e7c00660ff549d1ba410066ed", 0x53}], 0x1, 0x4c, &(0x7f0000000180)=[@efer, @dstype0={0x6, 0x4}], 0x2) (async) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000300)={0x2, 0x4c, "84cfdf78df9f2e961d1504836a601b80256df8a4bd2e228fceddb540c433c0a6b34866ec72f61947a5b24ca17d4d650d421b5dacd9c69a8ef524b635180707ff2d17818a925d0d5ec570b9a9"}) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, 0x0, 0x0) (async, rerun: 64) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) r6 = inotify_init1(0x80000) inotify_add_watch(r6, &(0x7f0000000200)='.\x00', 0x1000401) (async) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001240)=@newtaction={0x18, 0x32, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x60004004}, 0x9080) 1.507277083s ago: executing program 2 (id=136): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x50000000}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) timer_gettime(0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000500)={0x103, {{0x2, 0xfffc, @local}}}, 0xfffffffffffffda8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_clone(0x6040000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5}) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x4000000) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000104010100006835f2185260c1153b04"], 0x14}, 0x1, 0x0, 0x0, 0x20008014}, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1.471926574s ago: executing program 2 (id=137): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup/file0\x00', &(0x7f00000000c0)='msdos\x00', 0x185040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f0000000000), 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x100, 0x7, 0xa15, 0x0, 0x0, 0x4}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x64) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b0, 0x0, 0x7fff}]}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fsetxattr$trusted_overlay_nlink(r7, &(0x7f0000000280), &(0x7f00000002c0)={'U-', 0x25d}, 0x16, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) setsockopt$bt_BT_POWER(r8, 0x112, 0x9, 0x0, 0x0) fsopen(&(0x7f0000000040)='hostfs\x00', 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) 1.268608451s ago: executing program 2 (id=138): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) r1 = syz_open_procfs(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x80000) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000005c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "38d8b85a", {0x3, 0x107, 0x0, 0x9, 0x8000, 0x3b, 0x2}}) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r4, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000140)=""/121, 0x79}], 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x10000014}) syz_usb_connect$uac2(0x0, 0xc6, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x499, 0x102e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x1, 0x60, 0x6, {0x8, 0xb, 0x2, 0x1, 0x1, 0x1, 0x20, 0x59}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x80b, 0xb, 0x14, 0x4}, [@feature_unit={0xb, 0x24, 0x6, 0x3, 0x1, [0x1, 0x7b2aff808f0d56e1, 0xa]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0xe, 0xd, 0x3}, @as_header={0x10, 0x24, 0x1, 0x0, 0xf8, 0x0, 0x1001, 0x2, 0x24a, 0x9}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x64c9, 0x10, 0xcb, "ebfabae9c4"}, @as_header={0x10, 0x24, 0x1, 0x8, 0x8, 0x0, 0x5, 0x7, 0x4, 0xcd}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2d, 0x1, 0xd, {0x8, 0x25, 0x1, 0x100, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x5, 0x0, 0x52, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0xd, 0x8, {0x8, 0x25, 0x1, 0x1, 0x3, 0x0, 0x6}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x5d, 0x8, 0xf, 0x50, 0x1}, 0x13, &(0x7f0000000140)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0xe, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xb, 0xe, 0x3}]}, 0x5, [{0x11, &(0x7f0000000180)=@string={0x11, 0x3, "31ad4abaadd7650967b4bd792b0bfa"}}, {0x82, &(0x7f00000001c0)=@string={0x82, 0x3, "0df13c63aa7b091fbf4544872a58e72f96359b6569c3b98d39268124168a094d425ca3a02d6bb1dac7dff0f67b6b4639996de7c966f1cc607632c69dcaae49892ca9223882d061f0101fc90096784fad49fb1a3bcf26d7aa6d03c5e02c5db09cf3d40f04441ddcd37748318e100c295bb1956b342948aa602d10384553979451"}}, {0x45, &(0x7f00000002c0)=@string={0x45, 0x3, "2fa00a5aade40e9ddd52ef8bc51094f61bf89b4b9480204c5286b15817558c08b2c9718b49ba448d67de51ab05b808caeafe23af33e80bf068eb41c598951fadf34e87"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc39}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000680)={0x20, 0x1c, 0x68, "a1ea010a8ae77d0195c08937cea3457f506dcc20aa28d0f7d2820c2e744727601677eac59a012c140926eca4015c8c81e407bc2e8133c8345600b5f18835ce91c8a77ed7605cc544fd61474926158054b181e673679b2660e1aa7772f5dbcced3731759e8f6c7712"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xcb}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1000}}, 0x0, 0x0, &(0x7f0000000700)={0x40, 0xb, 0x2, "5411"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x12}, &(0x7f0000000780)={0x40, 0x13, 0x6}, &(0x7f0000000540)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000800)={0x40, 0x19, 0x2, "a771"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0xd6}, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x3}}) syz_clone3(&(0x7f0000000c00)={0x100000000, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0, {0x11}, &(0x7f0000000a00)=""/196, 0xc4, &(0x7f0000000b00)=""/174, &(0x7f0000000bc0)=[0xffffffffffffffff, 0x0], 0x2, {r1}}, 0x58) sched_setscheduler(r5, 0x3, &(0x7f0000000c80)=0x4) 1.237188322s ago: executing program 1 (id=139): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x50, 0x0, 0x0) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r4 = gettid() r5 = getpgrp(r4) kcmp(r4, r5, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r6 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010801000000086e050c010000000000010902240001000080200904000006030001000921080200012211000905810340"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000140)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="00062b"], 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$setstatus(r3, 0x4, 0x42800) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r7, 0x6d) sendfile(r3, r7, 0x0, 0x7ffff004) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x1}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000000)={0xa0000001}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a2a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f010500000001000000000624fdee7c1b0905810308000300000904010000020d00000904010102020d00000905"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}, 0x8001) ioctl$SIOCSIFHWADDR(r9, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) 377.599149ms ago: executing program 0 (id=140): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x10000000, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}, @empty, 0x10, 0x0, 0x100009, 0x45}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/142, 0x8e}], 0x1, 0x1, 0xbbf5) read$msr(r0, &(0x7f0000002340)=""/4120, 0x1018) 353.65733ms ago: executing program 0 (id=141): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) dup3(r0, r2, 0x0) 352.795839ms ago: executing program 0 (id=142): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x44802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x6000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)="00210000000000721d5874f72cf86d73d32f46380f00", 0x16}], 0x1, 0x7, 0x1) (async) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)="00210000000000721d5874f72cf86d73d32f46380f00", 0x16}], 0x1, 0x7, 0x1) unshare(0x64000600) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x404001, 0x0) clock_gettime(0xa, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000006c0)={'mangle\x00', 0x0, [0x95e, 0x2, 0x5, 0x400, 0x306a]}, &(0x7f0000000180)=0x54) (async) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000006c0)={'mangle\x00', 0x0, [0x95e, 0x2, 0x5, 0x400, 0x306a]}, &(0x7f0000000180)=0x54) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f0000000080)={[{@metacopy_on}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f0000000080)={[{@metacopy_on}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0x2, 0x0, 0x0, 0x4}, 0x10}, 0x1, 0x7}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x3, 0xa6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040cc171110400001020301090294000301091007090400000001"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x4e) r5 = openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0xc058671e, &(0x7f00000000c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_usb_connect$uac3(0x5, 0xe4, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0xf, 0x10, 0xfa, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x22, 0x1b}, [@processing_unit={0x5, 0x24, 0x9, 0x1, 0x1}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x300, 0x2, 0x1, 0x5, 0x2, 0x3, 0x7fff, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x80, 0x1, {0xa, 0x25, 0x25, 0x2, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x4, 0x9, {0xa, 0x25, 0x25, 0x2, 0x3, 0x4}}}}}}}}]}}, 0x0) (async) syz_usb_connect$uac3(0x5, 0xe4, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0xf, 0x10, 0xfa, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x22, 0x1b}, [@processing_unit={0x5, 0x24, 0x9, 0x1, 0x1}, @output_terminal={0x13, 0x24, 0x3, 0x2, 0x300, 0x2, 0x1, 0x5, 0x2, 0x3, 0x7fff, 0x10}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x80, 0x1, {0xa, 0x25, 0x25, 0x2, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x4, 0x9, {0xa, 0x25, 0x25, 0x2, 0x3, 0x4}}}}}}}}]}}, 0x0) 123.536457ms ago: executing program 3 (id=143): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x687, 0x6, 0xfffa}, 0x1d, [0x108e8fd7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x20002, 0x20003, 0x84, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5b2, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x10007, 0x4, 0x3c5b, 0x1, 0xb, 0x40000009, 0xfffffffd, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x11, 0x0, 0xffffffff, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1001, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x0, 0x0, 0xfffffffe, 0x8, 0x4, 0x8002, 0x9, 0x3fe, 0x401, 0x400006, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x5, 0x9, 0x6, 0xb, 0xa, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x7, 0x1, 0x3, 0x9, 0x425, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0x2, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x2, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x8c, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x1, 0x1ff, 0x3, 0x7, 0xfd, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2002, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x800, 0x8, 0x5, 0xb1c, 0x1, 0x1fd, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000180)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xfffffffffffffeab, &(0x7f0000000500)=@new_dev={0x2, 0x347, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc}}}, &(0x7f0000000300)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) syz_ublk_setup_queues(r10, r9, &(0x7f0000000700)={0x0, 0x1, 0x0, 0x0, 0x323, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0xfffffffc}}], 0x1, &(0x7f0000000900)={0x2e, 0x4, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4, 0x0, 0x0, 0x0}}, 0x0) 109.368167ms ago: executing program 2 (id=144): getgroups(0x3, &(0x7f00000037c0)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x61, 0x37, 0x61, 0x35, 0x66, 0x30, 0x2b, 0x62, 0x39, 0x35, 0x63, 0x35, 0x36, 0x66, 0x33, 0x56]}, &(0x7f0000000080)={0x0, "7dc54def06ffa37f2649a3c441758da75e3584e5a0cfe554e939425513468d345d49e85a562fb1bbdb768667917b4df075aff0d829ffaee051c924c9800668c6", 0x40}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, r1) setgroups(0x1, &(0x7f0000000100)=[r0]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f00000000c0)=0xce7, 0x4) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020900102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f0100000000000000000009e6ed71c02ca9086e0905820220000000000905030208"], 0x0) 0s ago: executing program 3 (id=145): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = userfaultfd(0x801) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) read(r1, &(0x7f0000002480)=""/202, 0xca) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x8000003fc, 0x4002004c4, 0x4000000001000, 0x1, 0x97, 0x10, 0x0, 0x3, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xe000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000000500), 0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) get_robust_list(r5, &(0x7f0000002280)=&(0x7f0000002240)={&(0x7f0000002140), 0x0, &(0x7f0000002200)={&(0x7f00000021c0)={&(0x7f0000002180)}}}, &(0x7f00000022c0)=0x18) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=ANY=[], 0x30}], 0x1}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x80, r7, 0x400, 0x70bd2a, 0x7fff, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x88cf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000000c0)={&(0x7f0000000000)='#-\x12+\\.\x00', &(0x7f0000000080)='[.(-!-#\x00', 0x6}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.188' (ED25519) to the list of known hosts. [ 22.887715][ T36] audit: type=1400 audit(1781243341.330:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.890853][ T287] cgroup: Unknown subsys name 'net' [ 22.910453][ T36] audit: type=1400 audit(1781243341.330:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.937729][ T36] audit: type=1400 audit(1781243341.360:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.938139][ T287] cgroup: Unknown subsys name 'devices' [ 23.062241][ T287] cgroup: Unknown subsys name 'hugetlb' [ 23.067873][ T287] cgroup: Unknown subsys name 'rlimit' [ 23.183030][ T36] audit: type=1400 audit(1781243341.630:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.206234][ T36] audit: type=1400 audit(1781243341.630:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.231110][ T36] audit: type=1400 audit(1781243341.630:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.247690][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.263005][ T36] audit: type=1400 audit(1781243341.710:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.288408][ T36] audit: type=1400 audit(1781243341.710:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.320725][ T36] audit: type=1400 audit(1781243341.770:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.321842][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.346296][ T36] audit: type=1400 audit(1781243341.770:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.619039][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.626170][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.633346][ T295] bridge_slave_0: entered allmulticast mode [ 24.639649][ T295] bridge_slave_0: entered promiscuous mode [ 24.650379][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.657519][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.664667][ T295] bridge_slave_1: entered allmulticast mode [ 24.671128][ T295] bridge_slave_1: entered promiscuous mode [ 24.694688][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.701849][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.708910][ T297] bridge_slave_0: entered allmulticast mode [ 24.715151][ T297] bridge_slave_0: entered promiscuous mode [ 24.721559][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.728587][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.735659][ T297] bridge_slave_1: entered allmulticast mode [ 24.741887][ T297] bridge_slave_1: entered promiscuous mode [ 24.772580][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.779645][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.786780][ T296] bridge_slave_0: entered allmulticast mode [ 24.792980][ T296] bridge_slave_0: entered promiscuous mode [ 24.799137][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.806302][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.813449][ T294] bridge_slave_0: entered allmulticast mode [ 24.819667][ T294] bridge_slave_0: entered promiscuous mode [ 24.826119][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.833179][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.840431][ T294] bridge_slave_1: entered allmulticast mode [ 24.846622][ T294] bridge_slave_1: entered promiscuous mode [ 24.854773][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.861825][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.868876][ T296] bridge_slave_1: entered allmulticast mode [ 24.875251][ T296] bridge_slave_1: entered promiscuous mode [ 25.012393][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.019565][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.026881][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.033919][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.048904][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.055974][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.063252][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.070318][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.080466][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.087520][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.094841][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.101896][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.115131][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.122196][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.129445][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.136476][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.183714][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.191101][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.198461][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.206184][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.213511][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.220933][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.228155][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.235465][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.248875][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.255959][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.263543][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.270598][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.283203][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.290362][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.298724][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.305792][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.332223][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.339245][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.347106][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.354137][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.361948][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.368970][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.377302][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.384365][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.423123][ T297] veth0_vlan: entered promiscuous mode [ 25.439463][ T294] veth0_vlan: entered promiscuous mode [ 25.449140][ T295] veth0_vlan: entered promiscuous mode [ 25.468880][ T295] veth1_macvtap: entered promiscuous mode [ 25.475260][ T297] veth1_macvtap: entered promiscuous mode [ 25.486060][ T294] veth1_macvtap: entered promiscuous mode [ 25.504398][ T296] veth0_vlan: entered promiscuous mode [ 25.535799][ T296] veth1_macvtap: entered promiscuous mode [ 25.537388][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.615942][ T318] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.746334][ T332] overlayfs: conflicting lowerdir path [ 25.753201][ T332] overlayfs: overlapping lowerdir path [ 25.789842][ T335] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8'. [ 25.799297][ T335] netlink: 'syz.3.8': attribute type 63 has an invalid length. [ 25.807241][ T335] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8'. [ 25.900230][ T45] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 25.920332][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.030232][ T45] usb 3-1: device descriptor read/64, error -71 [ 26.072448][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.084087][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.094670][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 26.103855][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.112164][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.121665][ T10] usb 1-1: config 0 descriptor?? [ 26.162181][ T344] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1610450249 (1610450249 ns) > initial count (751459529 ns). Using initial count to start timer. [ 26.181809][ T344] kvm: kvm [343]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 26.190851][ T344] kvm: kvm [343]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 26.270198][ T45] usb 3-1: device descriptor read/64, error -71 [ 26.270222][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 26.282759][ T65] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 26.291002][ T65] usb 4-1: config 0 has no interface number 0 [ 26.303087][ T65] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 26.316441][ T65] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 26.325726][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.338264][ T65] usb 4-1: Product: syz [ 26.342600][ T65] usb 4-1: Manufacturer: syz [ 26.347252][ T65] usb 4-1: SerialNumber: syz [ 26.358268][ T65] usb 4-1: config 0 descriptor?? [ 26.365153][ T335] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 26.530171][ T45] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 26.539319][ T10] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 26.548838][ T10] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 26.557430][ T10] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 26.567134][ T10] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 26.574318][ T10] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 26.581988][ T335] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 26.589204][ T10] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 26.597054][ T10] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 26.608952][ T10] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 26.660419][ T45] usb 3-1: device descriptor read/64, error -71 [ 26.680227][ T311] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.738820][ T10] cp2112 0003:10C4:EA90.0001: error requesting version [ 26.761133][ T10] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71 [ 26.772088][ T10] usb 1-1: USB disconnect, device number 2 [ 26.830183][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 26.836833][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 26.847995][ T311] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 26.859036][ T311] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 26.872754][ T311] usb 2-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 26.882897][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.891061][ T311] usb 2-1: Product: syz [ 26.895454][ T311] usb 2-1: Manufacturer: syz [ 26.900070][ T311] usb 2-1: SerialNumber: syz [ 26.904939][ T45] usb 3-1: device descriptor read/64, error -71 [ 26.997765][ T65] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 27.010395][ T65] asix 4-1:0.188: probe with driver asix failed with error -71 [ 27.020339][ T45] usb usb3-port1: attempt power cycle [ 27.021350][ T65] usb 4-1: USB disconnect, device number 2 [ 27.123423][ T352] EXT4-fs: Conflicting test_dummy_encryption options [ 27.138583][ T352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.148051][ T352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.273750][ T311] usb 2-1: MIDIStreaming interface descriptor not found [ 27.284579][ T311] usb 2-1: USB disconnect, device number 2 [ 27.304150][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.390192][ T45] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 27.411327][ T45] usb 3-1: device descriptor read/8, error -71 [ 27.541315][ T45] usb 3-1: device descriptor read/8, error -71 [ 27.560188][ T65] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 27.674417][ T362] netlink: 'syz.3.18': attribute type 4 has an invalid length. [ 27.682105][ T362] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.18'. [ 27.693395][ T10] hid-generic 0003:0006:0002.0002: collection stack underflow [ 27.700933][ T10] hid-generic 0003:0006:0002.0002: item 0 1 0 12 parsing failed [ 27.708811][ T10] hid-generic 0003:0006:0002.0002: probe with driver hid-generic failed with error -22 [ 27.719617][ T65] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 27.730523][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 27.741592][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 27.755155][ T65] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 27.764340][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.773451][ T65] usb 1-1: config 0 descriptor?? [ 27.778666][ T360] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 27.800166][ T45] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 27.821228][ T45] usb 3-1: device descriptor read/8, error -71 [ 27.902938][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 27.902948][ T36] audit: type=1400 audit(1781243346.350:130): avc: denied { map } for pid=368 comm="syz.3.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.933166][ T36] audit: type=1400 audit(1781243346.360:131): avc: denied { read write } for pid=368 comm="syz.3.20" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.981290][ T45] usb 3-1: device descriptor read/8, error -71 [ 28.090279][ T45] usb usb3-port1: unable to enumerate USB device [ 28.188414][ T360] netlink: 'syz.0.17': attribute type 4 has an invalid length. [ 28.196214][ T360] netlink: 17 bytes leftover after parsing attributes in process `syz.0.17'. [ 28.205177][ T310] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.216932][ T65] dragonrise 0003:0079:0011.0003: unknown main item tag 0x0 [ 28.240215][ T65] dragonrise 0003:0079:0011.0003: unknown main item tag 0x0 [ 28.247526][ T65] dragonrise 0003:0079:0011.0003: unknown main item tag 0x0 [ 28.260240][ T65] dragonrise 0003:0079:0011.0003: unknown main item tag 0x0 [ 28.267591][ T65] dragonrise 0003:0079:0011.0003: item fetching failed at offset 26/40 [ 28.276084][ T65] dragonrise 0003:0079:0011.0003: parse failed [ 28.282392][ T65] dragonrise 0003:0079:0011.0003: probe with driver dragonrise failed with error -22 [ 28.380177][ T310] usb 2-1: Using ep0 maxpacket: 32 [ 28.387956][ T310] usb 2-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 28.397231][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.405605][ T310] usb 2-1: Product: syz [ 28.409876][ T310] usb 2-1: Manufacturer: à°š [ 28.414647][ T310] usb 2-1: SerialNumber: syz [ 28.422379][ T45] usb 1-1: USB disconnect, device number 3 [ 28.643196][ T36] audit: type=1400 audit(1781243347.090:132): avc: denied { read write } for pid=370 comm="syz.1.21" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.683569][ T310] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 28.697852][ T36] audit: type=1400 audit(1781243347.090:133): avc: denied { open } for pid=370 comm="syz.1.21" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.721790][ T310] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 28.728749][ T36] audit: type=1400 audit(1781243347.110:134): avc: denied { ioctl } for pid=370 comm="syz.1.21" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x552d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.753610][ T379] fuse: Bad value for 'fd' [ 28.767266][ T310] usb 2-1: USB disconnect, device number 3 [ 28.776181][ T36] audit: type=1400 audit(1781243347.120:135): avc: denied { create } for pid=370 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.796957][ T36] audit: type=1400 audit(1781243347.210:136): avc: denied { read write } for pid=378 comm="syz.2.22" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 28.823261][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.839505][ T36] audit: type=1400 audit(1781243347.210:137): avc: denied { open } for pid=378 comm="syz.2.22" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.100226][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 29.126296][ T36] audit: type=1400 audit(1781243347.570:138): avc: denied { create } for pid=385 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.146031][ T36] audit: type=1400 audit(1781243347.580:139): avc: denied { bind } for pid=385 comm="syz.3.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 29.260194][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 29.266572][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.278166][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.288249][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.301698][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.333807][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.348090][ T45] usb 3-1: config 0 descriptor?? [ 29.410211][ T411] input: syz0 as /devices/virtual/input/input5 [ 29.460234][ T310] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.556843][ T45] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 29.565563][ T45] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 29.574489][ T45] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 29.586045][ T45] microsoft 0003:045E:07DA.0004: no inputs found [ 29.593167][ T45] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 29.621684][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 29.630123][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.640331][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.650700][ T310] usb 1-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 29.659768][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.667903][ T310] usb 1-1: Product: syz [ 29.672469][ T310] usb 1-1: Manufacturer: syz [ 29.677086][ T310] usb 1-1: SerialNumber: syz [ 29.681749][ T311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.756364][ T65] usb 3-1: USB disconnect, device number 6 [ 29.840187][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 29.846334][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.857287][ T426] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 29.865629][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.875420][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.888255][ T311] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.895504][ T402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.897336][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.910830][ T402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.920567][ T311] usb 4-1: config 0 descriptor?? [ 29.927157][ T402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.936279][ T402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.947940][ T310] usb 1-1: cannot find UAC_HEADER [ 29.954583][ T310] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 29.964348][ T310] usb 1-1: USB disconnect, device number 4 [ 29.972923][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.331903][ T430] 9pnet_fd: Insufficient options for proto=fd [ 30.336635][ T311] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 30.348141][ T311] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 30.387135][ T437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.396541][ T437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.405522][ T437] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.535040][ T311] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 30.543863][ T311] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 30.560547][ T311] microsoft 0003:045E:07DA.0005: no inputs found [ 30.570275][ T311] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 30.620194][ T310] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 30.735241][ T31] usb 4-1: USB disconnect, device number 3 [ 30.750305][ T310] usb 3-1: device descriptor read/64, error -71 [ 30.840197][ T311] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 30.890210][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 30.990218][ T310] usb 3-1: device descriptor read/64, error -71 [ 30.997462][ T311] usb 2-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2 [ 31.009023][ T311] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 31.020033][ T311] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 31.031416][ T311] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 31.040480][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.049216][ T444] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 31.061667][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 31.070225][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.080473][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.091626][ T10] usb 1-1: string descriptor 0 read error: -22 [ 31.097849][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 31.106957][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.117774][ T10] usb 1-1: selecting invalid altsetting 1 [ 31.123767][ T10] usb 1-1: unit 3 not found! [ 31.230200][ T310] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 31.257370][ T311] usb 2-1: string descriptor 0 read error: -71 [ 31.264281][ T311] hub 2-1:32.0: bad descriptor, ignoring hub [ 31.270755][ T311] hub 2-1:32.0: probe with driver hub failed with error -5 [ 31.317133][ T10] usb 1-1: unit 0 not found! [ 31.327447][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.341220][ T311] usb 2-1: USB disconnect, device number 4 [ 31.357765][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.360261][ T310] usb 3-1: device descriptor read/64, error -71 [ 31.518583][ T65] usb 1-1: USB disconnect, device number 5 [ 31.610237][ T310] usb 3-1: device descriptor read/64, error -71 [ 31.700206][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.720285][ T310] usb usb3-port1: attempt power cycle [ 31.842332][ T467] tipc: Started in network mode [ 31.847325][ T467] tipc: Node identity 7f000001, cluster identity 4711 [ 31.854270][ T467] tipc: Enabling of bearer rejected, failed to enable media [ 31.860250][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 31.873938][ T10] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 31.890334][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 31.899402][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 31.921642][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.935182][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.943801][ T10] usb 4-1: Product: syz [ 31.948060][ T10] usb 4-1: Manufacturer: syz [ 31.952746][ T10] usb 4-1: SerialNumber: syz [ 32.065974][ T310] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 32.108241][ T310] usb 3-1: device descriptor read/8, error -71 [ 32.164444][ T10] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 32.174692][ T10] cdc_ncm 4-1:1.0: bind() failure [ 32.239593][ T477] 8021q: VLANs not supported on wg0 [ 32.246251][ T310] usb 3-1: device descriptor read/8, error -71 [ 32.340186][ T65] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 32.366120][ T31] usb 4-1: USB disconnect, device number 4 [ 32.491242][ T65] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 32.502109][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 32.510294][ T310] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 32.513168][ T65] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 32.521583][ T449] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.531544][ T65] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 32.552757][ T65] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.561597][ T310] usb 3-1: device descriptor read/8, error -71 [ 32.561870][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 32.576026][ T65] usb 1-1: SerialNumber: syz [ 32.581633][ T473] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 32.680173][ T449] usb 2-1: Using ep0 maxpacket: 16 [ 32.686377][ T449] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.697314][ T449] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32869, setting to 1024 [ 32.708499][ T449] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.721586][ T449] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 32.730700][ T449] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.739083][ T310] usb 3-1: device descriptor read/8, error -71 [ 32.745731][ T449] usb 2-1: config 0 descriptor?? [ 32.795481][ T65] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 32.803378][ T65] usb 1-1: USB disconnect, device number 6 [ 32.860266][ T310] usb usb3-port1: unable to enumerate USB device [ 32.887017][ T482] capability: warning: `syz.3.56' uses 32-bit capabilities (legacy support in use) [ 32.917477][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 32.917490][ T36] audit: type=1400 audit(1781243351.360:179): avc: denied { shutdown } for pid=484 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.155245][ T449] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 33.163514][ T449] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 33.172045][ T449] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 33.183497][ T449] microsoft 0003:045E:07DA.0006: no inputs found [ 33.189843][ T449] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 33.190241][ T339] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.355163][ T479] loop9: detected capacity change from 0 to 7 [ 33.370163][ T339] usb 4-1: Using ep0 maxpacket: 16 [ 33.377415][ T339] usb 4-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 33.410905][ T493] binder: Unknown parameter 'defcontext01777777777777777777777' [ 33.420020][ T36] audit: type=1400 audit(1781243351.860:180): avc: denied { remount } for pid=478 comm="syz.1.55" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 33.451641][ T339] usb 4-1: config 0 interface 0 has no altsetting 0 [ 33.462816][ T339] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 33.480199][ T339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.501333][ T339] usb 4-1: config 0 descriptor?? [ 33.514476][ T491] netlink: 'syz.0.59': attribute type 1 has an invalid length. [ 33.522310][ T495] Invalid logical block size (1050184017) [ 33.618497][ T65] usb 2-1: USB disconnect, device number 5 [ 33.717814][ T339] uclogic 0003:5543:0003.0007: unknown main item tag 0x0 [ 33.725197][ T339] uclogic 0003:5543:0003.0007: unknown main item tag 0x0 [ 33.732316][ T339] uclogic 0003:5543:0003.0007: unknown main item tag 0x0 [ 33.740040][ T339] uclogic 0003:5543:0003.0007: unknown main item tag 0x0 [ 33.747136][ T339] uclogic 0003:5543:0003.0007: unknown main item tag 0x0 [ 33.754348][ T339] uclogic 0003:5543:0003.0007: unknown main item tag 0x0 [ 33.764271][ T339] uclogic 0003:5543:0003.0007: unknown main item tag 0x0 [ 33.771585][ T339] uclogic 0003:5543:0003.0007: unknown main item tag 0x0 [ 33.778639][ T339] uclogic 0003:5543:0003.0007: unknown main item tag 0x0 [ 33.786334][ T339] uclogic 0003:5543:0003.0007: unknown main item tag 0x0 [ 33.793436][ T339] uclogic 0003:5543:0003.0007: unknown main item tag 0x0 [ 33.800933][ T339] uclogic 0003:5543:0003.0007: unknown main item tag 0x0 [ 33.807999][ T339] uclogic 0003:5543:0003.0007: unknown main item tag 0x0 [ 33.815436][ T339] uclogic 0003:5543:0003.0007: unknown main item tag 0x0 [ 33.830173][ T505] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 33.852011][ T36] audit: type=1400 audit(1781243352.300:181): avc: denied { mounton } for pid=509 comm="syz.2.65" path="/8/file0" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.859630][ T339] uclogic 0003:5543:0003.0007: unknown main item tag 0x0 [ 33.887390][ T339] uclogic 0003:5543:0003.0007: unknown main item tag 0x0 [ 33.894581][ T339] uclogic 0003:5543:0003.0007: unknown main item tag 0x0 [ 33.910642][ T339] uclogic 0003:5543:0003.0007: No inputs registered, leaving [ 33.930039][ T487] syzkaller1: entered promiscuous mode [ 33.936852][ T487] syzkaller1: entered allmulticast mode [ 33.943094][ T339] uclogic 0003:5543:0003.0007: hidraw0: USB HID vff.ff Device [HID 5543:0003] on usb-dummy_hcd.3-1/input0 [ 33.959660][ T36] audit: type=1400 audit(1781243352.410:182): avc: denied { setopt } for pid=486 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 34.000179][ T505] usb 1-1: Using ep0 maxpacket: 16 [ 34.011205][ T36] audit: type=1400 audit(1781243352.410:183): avc: denied { write } for pid=514 comm="syz.1.66" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.032547][ T36] audit: type=1400 audit(1781243352.410:184): avc: denied { map } for pid=486 comm="syz.3.58" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 34.042122][ T505] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 34.070174][ T505] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.078211][ T505] usb 1-1: Product: syz [ 34.087610][ T505] usb 1-1: Manufacturer: syz [ 34.094136][ T505] usb 1-1: SerialNumber: syz [ 34.122332][ T36] audit: type=1400 audit(1781243352.570:185): avc: denied { create } for pid=523 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.153159][ T36] audit: type=1400 audit(1781243352.600:186): avc: denied { setopt } for pid=523 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.173014][ T36] audit: type=1400 audit(1781243352.620:187): avc: denied { write } for pid=523 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.200570][ T524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 34.219263][ T36] audit: type=1400 audit(1781243352.660:188): avc: denied { watch watch_reads } for pid=523 comm="syz.1.67" path="/24/file0" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.312588][ T505] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 34.323672][ T505] usb 1-1: USB disconnect, device number 7 [ 34.351126][ T339] usb 4-1: USB disconnect, device number 5 [ 34.650219][ T449] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 34.801250][ T449] usb 3-1: config 16 has an invalid interface number: 19 but max is 0 [ 34.809484][ T449] usb 3-1: config 16 has no interface number 0 [ 34.815946][ T449] usb 3-1: config 16 interface 19 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 34.827206][ T449] usb 3-1: config 16 interface 19 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 34.838604][ T449] usb 3-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 34.849695][ T449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.857833][ T449] usb 3-1: Product: syz [ 34.862231][ T449] usb 3-1: Manufacturer: syz [ 34.867289][ T449] usb 3-1: SerialNumber: syz [ 34.940351][ T634] kvm: user requested TSC rate below hardware speed [ 35.082466][ T449] usb 3-1: USB disconnect, device number 11 [ 35.086010][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.170204][ T339] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 35.190209][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 35.232691][ T644] devtmpfs: Unknown parameter '/dev/uinput' [ 35.300199][ T339] usb 4-1: device descriptor read/64, error -71 [ 35.340204][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 35.346733][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.355194][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.365293][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.380908][ T31] usb 1-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 35.390235][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.398247][ T31] usb 1-1: Product: syz [ 35.402597][ T31] usb 1-1: Manufacturer: syz [ 35.407211][ T31] usb 1-1: SerialNumber: syz [ 35.550194][ T339] usb 4-1: device descriptor read/64, error -71 [ 35.619498][ T31] usb 1-1: 0:1 : does not exist [ 35.624515][ T31] usb 1-1: unit 5 not found! [ 35.629721][ T31] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 35.637860][ T31] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 35.646864][ T31] usb 1-1: USB disconnect, device number 8 [ 35.657760][ T323] udevd[323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.700398][ T65] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 35.800224][ T339] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 35.830227][ T505] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 35.850196][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 35.856470][ T65] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 35.865659][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.874478][ T65] usb 2-1: config 0 descriptor?? [ 35.930205][ T339] usb 4-1: device descriptor read/64, error -71 [ 35.980191][ T505] usb 3-1: Using ep0 maxpacket: 8 [ 35.986373][ T505] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 35.994576][ T505] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.004828][ T505] usb 3-1: config 0 has no interface number 0 [ 36.010968][ T505] usb 3-1: config 0 interface 1 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.021958][ T505] usb 3-1: config 0 interface 1 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.031822][ T505] usb 3-1: config 0 interface 1 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 36.044724][ T505] usb 3-1: config 0 interface 1 has no altsetting 0 [ 36.051454][ T505] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 36.060601][ T505] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.069730][ T505] usb 3-1: config 0 descriptor?? [ 36.090263][ T65] usbhid 2-1:0.0: can't add hid device: -71 [ 36.102973][ T65] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 36.120181][ T65] usb 2-1: USB disconnect, device number 6 [ 36.200210][ T339] usb 4-1: device descriptor read/64, error -71 [ 36.310284][ T339] usb usb4-port1: attempt power cycle [ 36.540432][ T505] hid (null): unknown global tag 0xa3 [ 36.650219][ T339] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 36.691252][ T339] usb 4-1: device descriptor read/8, error -71 [ 36.785248][ T505] uclogic 0003:28BD:0078.0008: failed retrieving string descriptor #100: -71 [ 36.794431][ T505] uclogic 0003:28BD:0078.0008: failed retrieving pen parameters: -71 [ 36.802694][ T505] uclogic 0003:28BD:0078.0008: pen probing failed: -71 [ 36.809581][ T505] uclogic 0003:28BD:0078.0008: failed probing parameters: -71 [ 36.817142][ T505] uclogic 0003:28BD:0078.0008: probe with driver uclogic failed with error -71 [ 36.827863][ T339] usb 4-1: device descriptor read/8, error -71 [ 36.837680][ T505] usb 3-1: USB disconnect, device number 12 [ 37.070186][ T339] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 37.091281][ T339] usb 4-1: device descriptor read/8, error -71 [ 37.133922][ T694] ======================================================= [ 37.133922][ T694] WARNING: The mand mount option has been deprecated and [ 37.133922][ T694] and is ignored by this kernel. Remove the mand [ 37.133922][ T694] option from the mount to silence this warning. [ 37.133922][ T694] ======================================================= [ 37.168891][ T694] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 37.221551][ T339] usb 4-1: device descriptor read/8, error -71 [ 37.324016][ T704] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 37.325811][ T703] overlayfs: conflicting lowerdir path [ 37.338155][ T704] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 37.357944][ T339] usb usb4-port1: unable to enumerate USB device [ 37.365184][ T704] overlayfs: conflicting lowerdir path [ 37.372999][ T703] overlayfs: workdir and upperdir must be separate subtrees [ 37.440299][ T449] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 37.490276][ T505] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 37.590246][ T449] usb 2-1: Using ep0 maxpacket: 8 [ 37.596647][ T449] usb 2-1: unable to get BOS descriptor or descriptor too short [ 37.605141][ T449] usb 2-1: config 165 has an invalid descriptor of length 176, skipping remainder of the config [ 37.615636][ T449] usb 2-1: config 165 has 0 interfaces, different from the descriptor's value: 1 [ 37.626407][ T449] usb 2-1: New USB device found, idVendor=734f, idProduct=8a34, bcdDevice=d9.68 [ 37.635555][ T449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.643563][ T449] usb 2-1: Product: syz [ 37.647710][ T449] usb 2-1: Manufacturer: syz [ 37.650231][ T505] usb 1-1: Using ep0 maxpacket: 32 [ 37.652310][ T449] usb 2-1: SerialNumber: syz [ 37.659731][ T505] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 37.670510][ T505] usb 1-1: config 0 has no interface number 0 [ 37.676960][ T505] usb 1-1: config 0 interface 184 has no altsetting 0 [ 37.685558][ T505] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 37.694785][ T505] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.702935][ T505] usb 1-1: Product: syz [ 37.707210][ T505] usb 1-1: Manufacturer: syz [ 37.711828][ T505] usb 1-1: SerialNumber: syz [ 37.716940][ T505] usb 1-1: config 0 descriptor?? [ 37.722803][ T505] smsc75xx v1.0.0 [ 37.750205][ T31] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 37.874935][ T449] usb 2-1: USB disconnect, device number 7 [ 37.900272][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 37.906911][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 37.915309][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.925530][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 37.939892][ T31] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 37.948998][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.957026][ T31] usb 3-1: Product: syz [ 37.961283][ T31] usb 3-1: Manufacturer: syz [ 37.965921][ T31] usb 3-1: SerialNumber: syz [ 37.982573][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 37.982585][ T36] audit: type=1400 audit(1781243356.430:203): avc: denied { create } for pid=710 comm="syz.3.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 38.009580][ T36] audit: type=1400 audit(1781243356.430:204): avc: denied { ioctl } for pid=710 comm="syz.3.102" path="socket:[8256]" dev="sockfs" ino=8256 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 38.053706][ T36] audit: type=1400 audit(1781243356.500:205): avc: denied { write } for pid=712 comm="syz.3.103" path="socket:[8142]" dev="sockfs" ino=8142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 38.324358][ T505] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 38.335376][ T505] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 38.360203][ T508] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 38.416844][ T718] FAULT_INJECTION: forcing a failure. [ 38.416844][ T718] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.430027][ T718] CPU: 0 UID: 0 PID: 718 Comm: syz.1.105 Not tainted syzkaller #0 f49fde4b0c45121d7a445e7def5dbe315378ec14 [ 38.430058][ T718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 38.430079][ T718] Call Trace: [ 38.430086][ T718] [ 38.430094][ T718] __dump_stack+0x21/0x30 [ 38.430147][ T718] dump_stack_lvl+0x140/0x1c0 [ 38.430181][ T718] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.430214][ T718] ? check_stack_object+0x106/0x150 [ 38.430237][ T718] dump_stack+0x19/0x20 [ 38.430282][ T718] should_fail_ex+0x3d7/0x530 [ 38.430302][ T718] should_fail+0xf/0x20 [ 38.430339][ T718] should_fail_usercopy+0x1e/0x30 [ 38.430368][ T718] _copy_from_user+0x20/0xa0 [ 38.430387][ T718] __sys_bind+0x1f4/0x430 [ 38.430413][ T718] ? __cfi___sys_bind+0x10/0x10 [ 38.430431][ T718] ? __kasan_check_read+0x15/0x20 [ 38.430446][ T718] __x64_sys_bind+0x7e/0x90 [ 38.430475][ T718] x64_sys_call+0x1ffd/0x2ee0 [ 38.430498][ T718] do_syscall_64+0x57/0xf0 [ 38.430527][ T718] ? clear_bhb_loop+0x50/0xa0 [ 38.430549][ T718] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.430584][ T718] RIP: 0033:0x7f4593b9ce59 [ 38.430604][ T718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.430633][ T718] RSP: 002b:00007f4594b00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 38.430666][ T718] RAX: ffffffffffffffda RBX: 00007f4593e15fa0 RCX: 00007f4593b9ce59 [ 38.430682][ T718] RDX: 0000000000000006 RSI: 0000200000000040 RDI: 0000000000000004 [ 38.430695][ T718] RBP: 00007f4594b00090 R08: 0000000000000000 R09: 0000000000000000 [ 38.430708][ T718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.430720][ T718] R13: 00007f4593e16038 R14: 00007f4593e15fa0 R15: 00007ffd12b98eb8 [ 38.430742][ T718] [ 38.615233][ T505] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 38.626198][ T505] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 38.638140][ T505] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 38.649191][ T505] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 38.662417][ T505] usb 1-1: USB disconnect, device number 9 [ 38.673628][ T508] usb 4-1: device descriptor read/64, error -71 [ 38.708940][ T36] audit: type=1400 audit(1781243357.150:206): avc: denied { bind } for pid=719 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.728058][ T36] audit: type=1400 audit(1781243357.150:207): avc: denied { setopt } for pid=719 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.747310][ T36] audit: type=1400 audit(1781243357.160:208): avc: denied { write } for pid=719 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.788644][ T65] hid-generic 0908:7FFFFFFF:086E.0009: unknown main item tag 0x4 [ 38.796474][ T65] hid-generic 0908:7FFFFFFF:086E.0009: item fetching failed at offset 9/50 [ 38.805286][ T65] hid-generic 0908:7FFFFFFF:086E.0009: probe with driver hid-generic failed with error -22 [ 38.845815][ T36] audit: type=1400 audit(1781243357.290:209): avc: denied { map } for pid=722 comm="syz.1.107" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.869077][ T36] audit: type=1400 audit(1781243357.290:210): avc: denied { getopt } for pid=722 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.889163][ T36] audit: type=1400 audit(1781243357.290:211): avc: denied { setopt } for pid=722 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.940195][ T508] usb 4-1: device descriptor read/64, error -71 [ 39.190217][ T508] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 39.330450][ T508] usb 4-1: device descriptor read/64, error -71 [ 39.342055][ T727] syzkaller1: entered promiscuous mode [ 39.347688][ T727] syzkaller1: entered allmulticast mode [ 39.354600][ T727] syzkaller1: left promiscuous mode [ 39.412989][ T36] audit: type=1400 audit(1781243357.860:212): avc: denied { read } for pid=725 comm="syz.0.108" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 39.590224][ T508] usb 4-1: device descriptor read/64, error -71 [ 39.700723][ T508] usb usb4-port1: attempt power cycle [ 39.707251][ T734] rust_binder: Failure in copy_transaction_data: EINVAL [ 39.707298][ T734] rust_binder: 733:734 transaction to 733 failed: EINVAL [ 40.060208][ T508] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 40.101765][ T508] usb 4-1: device descriptor read/8, error -71 [ 40.241233][ T508] usb 4-1: device descriptor read/8, error -71 [ 40.380182][ T449] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 40.469064][ T31] usb 3-1: MIDIStreaming interface descriptor not found [ 40.483080][ T31] usb 3-1: USB disconnect, device number 13 [ 40.490310][ T508] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 40.503421][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.521205][ T508] usb 4-1: device descriptor read/8, error -71 [ 40.531571][ T449] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 40.541399][ T449] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 40.553258][ T449] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 40.562342][ T449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.572109][ T449] usb 2-1: Product: syz [ 40.576294][ T449] usb 2-1: Manufacturer: syz [ 40.580932][ T449] usb 2-1: SerialNumber: syz [ 40.586175][ T449] usb 2-1: config 0 descriptor?? [ 40.593107][ T748] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 40.600393][ T748] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 40.651312][ T508] usb 4-1: device descriptor read/8, error -71 [ 40.760260][ T508] usb usb4-port1: unable to enumerate USB device [ 40.811104][ T611] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.812191][ T748] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 40.818713][ T611] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.828125][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 40.831645][ T748] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 40.982725][ T31] usb 3-1: config 1 has an invalid descriptor of length 89, skipping remainder of the config [ 40.993038][ T31] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 41.003358][ T31] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 41.012458][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.020515][ T31] usb 3-1: Product: syz [ 41.024764][ T31] usb 3-1: Manufacturer: syz [ 41.029376][ T31] usb 3-1: SerialNumber: syz [ 41.034792][ T31] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 41.043537][ T31] usb 3-1: no configuration chosen from 1 choice [ 41.220202][ T508] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 41.371264][ T508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.382201][ T508] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.392704][ T508] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 41.401833][ T508] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 41.409838][ T508] usb 1-1: Manufacturer: syz [ 41.415214][ T508] usb 1-1: config 0 descriptor?? [ 41.460181][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 41.610170][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 41.616432][ T31] usb 4-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 41.626661][ T31] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 41.628781][ T757] process 'syz.0.119' launched '/dev/fd/5' with NULL argv: empty string added [ 41.641659][ T31] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 41.657498][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.665578][ T31] usb 4-1: Product: syz [ 41.669758][ T31] usb 4-1: Manufacturer: syz [ 41.674403][ T31] usb 4-1: SerialNumber: syz [ 42.056164][ T508] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71 [ 42.065075][ T508] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 42.072597][ T508] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 42.084169][ T508] usb 1-1: USB disconnect, device number 10 [ 42.385174][ T31] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 42.395887][ T31] usb 4-1: USB disconnect, device number 14 [ 42.415074][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.743843][ T31] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 42.751813][ T31] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.870181][ T752] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.870195][ T753] Bluetooth: hci0: command 0x1003 tx timeout [ 42.883407][ T449] Error reading MAC address [ 42.889546][ T449] usb 2-1: USB disconnect, device number 8 [ 43.441863][ T785] Zero length message leads to an empty skb [ 43.490317][ T449] usb 3-1: USB disconnect, device number 14 [ 43.542086][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 43.542101][ T36] audit: type=1400 audit(1781243361.990:237): avc: denied { ioctl } for pid=786 comm="syz.2.131" path="socket:[8773]" dev="sockfs" ino=8773 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.610234][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 43.638606][ T796] SELinux: security_context_str_to_sid () failed with errno=-22 [ 43.646477][ T36] audit: type=1400 audit(1781243362.080:238): avc: denied { mounton } for pid=795 comm="syz.0.134" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.682340][ T36] audit: type=1400 audit(1781243362.130:239): avc: denied { ioctl } for pid=797 comm="syz.2.135" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 43.740651][ T803] capability: warning: `syz.2.136' uses deprecated v2 capabilities in a way that may be insecure [ 43.762984][ T36] audit: type=1400 audit(1781243362.210:240): avc: denied { setopt } for pid=805 comm="syz.2.137" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.783772][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 43.794178][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 43.802247][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.812814][ T10] usb 4-1: config 0 has no interface number 0 [ 43.818918][ T10] usb 4-1: config 0 interface 1 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.830001][ T10] usb 4-1: config 0 interface 1 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.840017][ T10] usb 4-1: config 0 interface 1 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 43.853510][ T10] usb 4-1: config 0 interface 1 has no altsetting 0 [ 43.860166][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 43.869242][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.877832][ T10] usb 4-1: config 0 descriptor?? [ 43.910183][ T31] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 44.061329][ T31] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 44.071297][ T31] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 44.081234][ T31] usb 1-1: config 1 interface 0 has no altsetting 0 [ 44.089868][ T31] usb 1-1: string descriptor 0 read error: -22 [ 44.096124][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 44.105255][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.114261][ T796] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 44.121460][ T796] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 44.170183][ T449] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 44.250230][ T508] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 44.320173][ T449] usb 3-1: Using ep0 maxpacket: 16 [ 44.327918][ T449] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 44.337209][ T449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.348606][ T31] usb 1-1: USB disconnect, device number 11 [ 44.354703][ T449] usb 3-1: Product: syz [ 44.358886][ T449] usb 3-1: Manufacturer: syz [ 44.365161][ T449] usb 3-1: SerialNumber: syz [ 44.370530][ T449] usb 3-1: config 0 descriptor?? [ 44.376703][ T449] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 44.384914][ T449] usb 3-1: Detected FT-X [ 44.411281][ T508] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59200, setting to 8 [ 44.422225][ T508] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 44.435065][ T508] usb 2-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 44.444154][ T508] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.452846][ T508] usb 2-1: config 0 descriptor?? [ 44.458173][ T813] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 44.547984][ T10] usbhid 4-1:0.1: can't add hid device: -71 [ 44.553999][ T10] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 44.562770][ T10] usb 4-1: USB disconnect, device number 15 [ 44.581694][ T811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.590361][ T811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.599693][ T449] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 44.763615][ T449] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 44.770731][ T449] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 44.777921][ T449] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 44.786922][ T449] usb 3-1: USB disconnect, device number 15 [ 44.793663][ T449] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 44.803521][ T449] ftdi_sio 3-1:0.0: device disconnected [ 45.055577][ T36] audit: type=1400 audit(1781243363.500:241): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 45.073153][ T813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.086971][ T36] audit: type=1400 audit(1781243363.500:242): avc: denied { block_suspend } for pid=812 comm="syz.1.139" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.094426][ T813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.138973][ T508] usbhid 2-1:0.0: can't add hid device: -71 [ 45.145976][ T36] audit: type=1400 audit(1781243363.600:243): avc: denied { bind } for pid=824 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.150253][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 45.165879][ T508] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 45.181322][ T36] audit: type=1400 audit(1781243363.630:244): avc: denied { cmd } for pid=824 comm="syz.3.143" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 45.185032][ T508] usb 2-1: USB disconnect, device number 9 [ 45.226843][ T598] ------------[ cut here ]------------ [ 45.232367][ T598] WARNING: CPU: 1 PID: 598 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 45.242971][ T598] Modules linked in: [ 45.246886][ T598] CPU: 1 UID: 0 PID: 598 Comm: kworker/u8:37 Not tainted syzkaller #0 f49fde4b0c45121d7a445e7def5dbe315378ec14 [ 45.258643][ T598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 45.268735][ T598] Workqueue: iou_exit io_ring_exit_work [ 45.274651][ T598] RIP: 0010:ublk_uring_cmd_cancel_fn+0x34f/0x410 [ 45.281141][ T598] Code: 5d e9 c5 46 55 02 cc e8 0f 14 32 fe 0f 0b eb e3 e8 06 14 32 fe 0f 0b eb da e8 fd 13 32 fe 0f 0b e9 4d fe ff ff e8 f1 13 32 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0c fd ff ff 4c 89 [ 45.300815][ T598] RSP: 0018:ffffc9000e56f990 EFLAGS: 00010293 [ 45.307209][ T598] RAX: ffffffff8355adbf RBX: 1ffff11026692c7d RCX: ffff88811ce3a600 [ 45.315227][ T598] RDX: 0000000000000000 RSI: 00000000000001b5 RDI: 0000000000000347 [ 45.323321][ T598] RBP: ffffc9000e56f9e0 R08: 0000000000000003 R09: 0000000000000004 [ 45.331340][ T598] R10: 0000000000000000 R11: ffffffff83559da0 R12: ffff888113132600 [ 45.339343][ T598] R13: ffff8881334963c0 R14: ffff888114dd0000 R15: ffff888114dd0010 [ 45.347353][ T598] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 45.356452][ T598] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.363101][ T598] CR2: 000055a9ae839628 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 45.371165][ T598] Call Trace: [ 45.374631][ T598] [ 45.377590][ T598] ? _raw_spin_unlock+0x45/0x60 [ 45.382800][ T598] ublk_ch_uring_cmd+0x6f/0xa0 [ 45.387767][ T598] io_uring_try_cancel_uring_cmd+0x19e/0x280 [ 45.393984][ T598] io_uring_try_cancel_requests+0x4ce/0x5a5 [ 45.399937][ T598] ? io_uring_cancel_generic+0x6eb/0x6eb [ 45.405784][ T598] ? __cfi___switch_to+0x10/0x10 [ 45.410827][ T598] ? kthread_data+0x54/0xc0 [ 45.415404][ T598] io_ring_exit_work+0x23c/0x83b [ 45.420405][ T598] ? _raw_spin_unlock+0x45/0x60 [ 45.425340][ T598] ? __cfi_io_ring_exit_work+0x10/0x10 [ 45.430858][ T598] process_scheduled_works+0x7d4/0x1020 [ 45.436440][ T598] worker_thread+0xc51/0x1370 [ 45.441171][ T598] kthread+0x2c9/0x370 [ 45.445283][ T598] ? __cfi_worker_thread+0x10/0x10 [ 45.450440][ T598] ? __cfi_kthread+0x10/0x10 [ 45.455059][ T598] ret_from_fork+0x67/0xa0 [ 45.459485][ T598] ? __cfi_kthread+0x10/0x10 [ 45.464114][ T598] ret_from_fork_asm+0x1a/0x30 [ 45.468896][ T598] [ 45.471998][ T598] ---[ end trace 0000000000000000 ]--- [ 45.551357][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.561639][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.572084][ T31] usb 1-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 45.581290][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.589406][ T31] usb 1-1: Product: syz [ 45.593685][ T31] usb 1-1: Manufacturer: syz [ 45.598421][ T31] usb 1-1: SerialNumber: syz [ 45.603098][ T449] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 45.785191][ T449] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 45.796331][ T449] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 25352, setting to 64 [ 45.807746][ T449] usb 3-1: config 253 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 45.821576][ T36] audit: type=1400 audit(1781243364.270:245): avc: denied { read } for pid=820 comm="syz.0.142" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.823589][ T822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.847085][ T449] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.862723][ T449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 45.870977][ T36] audit: type=1400 audit(1781243364.270:246): avc: denied { open } for pid=820 comm="syz.0.142" path="/39/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.881503][ T821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.896321][ T449] usb 3-1: SerialNumber: syz [ 45.909751][ T827] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 45.920624][ T822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.928956][ T821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.118882][ T449] rndis_host 3-1:253.0: skipping garbage [ 46.127531][ T449] usb 3-1: USB disconnect, device number 16 [ 46.450068][ T31] usb 1-1: USB disconnect, device number 12