last executing test programs: 6.744098999s ago: executing program 2 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000800)=ANY=[@ANYBLOB="28000400", @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf2502000000140001800d0001007564703a73797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) 6.743762429s ago: executing program 2 (id=67): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$vga_arbiter(r2, &(0x7f0000000900)=@target={'target ', {'PCI:', '0', ':', '0', ':', '4', '.', '8'}}, 0x13) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x50000) read$eventfd(r1, &(0x7f0000000080), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) dup(r3) (async) r6 = dup(r3) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xf4}, 0x1c) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a009100ffffffffffffaaaaaaaaaaaa86dd694fd2cd00803afffe8000000000000000000000000000bbff02000000000000000000000000000186009078ff07aaa501000000bd7fd98ec8140c9dff900c2c45f4e8baae0aa6d27cba52798a01fe00c0af067b975c275eadab9236742ca93e0e721f1665bc01e990c45107d4ee3040b9e39adc35723cc9bf5f326c84170fd5aa26bbc75ad836a6852b53afbe3c58ea7e415809b07d7678e27b080693756519010108a13e53b001"], 0xba) (async) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a009100ffffffffffffaaaaaaaaaaaa86dd694fd2cd00803afffe8000000000000000000000000000bbff02000000000000000000000000000186009078ff07aaa501000000bd7fd98ec8140c9dff900c2c45f4e8baae0aa6d27cba52798a01fe00c0af067b975c275eadab9236742ca93e0e721f1665bc01e990c45107d4ee3040b9e39adc35723cc9bf5f326c84170fd5aa26bbc75ad836a6852b53afbe3c58ea7e415809b07d7678e27b080693756519010108a13e53b001"], 0xba) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x1ff) 6.658114462s ago: executing program 2 (id=68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001dc0)={0x20, 0x1, 0x34, "712bab"}, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="401403"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005700)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.503347637s ago: executing program 0 (id=69): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r0]) (async) ioctl$KIOCSOUND(r0, 0x4b2f, 0x40e7f248) (async, rerun: 32) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e700008000040905", @ANYBLOB="b707"], 0x0) (async, rerun: 32) syz_usb_connect$midi(0x4, 0x119, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0xccd, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x107, 0x1, 0x1, 0x8, 0x50, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x20, 0x4, [@midi_out_jack={0x19, 0x24, 0x3, 0x1, 0x5, 0x9, [{0x4, 0xc}, {0xf, 0x3}, {0x4, 0x7}, {0xd, 0x2}, {0x85, 0x5}, {0x1, 0x3}, {0x9, 0x35}, {0xd, 0x1}, {0x76, 0xb}], 0x1}, @ms_header={0x7, 0x24, 0x1, 0x628, 0x7}, @midi_out_jack={0x19, 0x24, 0x3, 0x3, 0x7, 0x9, [{0x0, 0xb}, {0x6, 0x22}, {0x6, 0x1}, {}, {0x7, 0x4}, {0x0, 0xb}, {0xff, 0x8}, {0xa0, 0x90}, {0x15}], 0xf9}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x0, 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x8, 0x9}], [{{0x9, 0x5, 0x8, 0x1, 0xa0c, 0x8, 0xf5, 0x0, {0xb, 0x25, 0x1, 0x7, "a4e36d39522fb2"}}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x4, 0x6, 0x5, {0xa, 0x25, 0x1, 0x6, "fa0444f379e4"}}}, {{0x9, 0x5, 0xb, 0x10, 0x0, 0x2, 0x70, 0x77, {0xe, 0x25, 0x1, 0xa, "beb3d9aa2ba6f453883e"}}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0x0, 0x81, 0x90, {0x12, 0x25, 0x1, 0xe, "f16e7053755d1238a6f173242828"}}}, {{0x9, 0x5, 0xd, 0x4, 0x8, 0x34, 0x8, 0x7, {0x14, 0x25, 0x1, 0x10, "8a536806f3bd25e27363d2a5c85f9377"}}}, {{0x9, 0x5, 0xe, 0x0, 0x410, 0xff, 0xf, 0xf, {0x7, 0x25, 0x1, 0x3, "171482"}}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x2, 0x52, 0x8, {0x10, 0x25, 0x1, 0xc, "b0aaf2aa3d90d7a5273ec8eb"}}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x7, 0x9, 0x9, {0x8, 0x25, 0x1, 0x4, "17e85368"}}}]}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x6, 0x91, 0x64, 0x20, 0x46}, 0x23, &(0x7f0000000300)={0x5, 0xf, 0x23, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x9, 0xfffc}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xc, 0x3, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x0, 0x8, 0x8000}]}, 0x1, [{0x87, &(0x7f0000000340)=@string={0x87, 0x3, "270c59d14aaff818e5e3f8ff97f40c7bc33e9fc186d730b5758ce1b65531c2a43511aeccce5aeb13a0797266aaf44951c967f8faf93f36116b71333c73ecb978d9dce36470f8b4ca2fb3afd0026be97edb71a115938cd8bd234cea50e28443a24a78a648f3da9ea59ae208979906806c835ac1b78f2848a27387bffabec5602c51a1329c02"}}]}) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (rerun: 32) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c03, r2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.427838429s ago: executing program 0 (id=70): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="e71a0d"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x20, 0x5, 0x3, "28f873"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) symlink(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000100)='.\x00') syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ftruncate(r1, 0x5) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) munmap(&(0x7f0000ff0000/0xf000)=nil, 0xf000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/warn_count', 0x1878c3, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xa, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setuid(0x0) 2.991619902s ago: executing program 3 (id=87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f00000001c0)={&(0x7f0000000140)=""/88, 0x58}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, 0x0, 0x70}}], 0x1, 0x24008084) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000408205820540002102030109026e0003017f0006080b0002012030230904000000010130000a2401100a000900000009040100000102300009040101"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000038000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x3, 0x0, 0x2, 0x0, 0x2, 0x0, 0x9}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.957561816s ago: executing program 0 (id=89): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x60c42, 0x5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x1400) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./bus\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) 1.877459878s ago: executing program 0 (id=90): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x10a}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.851949079s ago: executing program 0 (id=91): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setresuid(0xee01, 0xee01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r2, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) pivot_root(0x0, 0x0) writev(r0, &(0x7f0000001580)=[{&(0x7f0000000200)="64bc8b44cac0cc01299d61215e052b4141800dbad7cf90973ac0a1c7f4b5c859fb1db1f89ae3c921cc8f91b94efab9e4371b37d9fb980a826d3057a5fca579ef7105f6aaa11f72c8e97872742ea5732baa5b90463abb6005611449e17398ac5468c1d3bad33ee75bb80a31be913b1245ff6979fc493b38face617725f5af36dbb726291e4fe68437d97d2baf8af58b272d389609e523a66bef1df794531196492f5b91598f109ff1756838ead6a16226b3c1053d77d615d9f68e94455b9c02e89a311948565ae9822eabd9e3480cd3", 0xcf}, {&(0x7f0000000440)="bca50c18c8f84509af41a5ea84ab614f7bcc41d036f424ddbf90b307ef2575c0025ecb60241f5c37ce2acbd3ffefa1f2952580de6ec806725a8a39c1f828d0af633d907f8c78f1f0397a7dc0856febe6084659251e56dfaf9143ad38eeaed1d40b28eb20a4944ec0e0f5c137f008c96f1e29b4800e04ae2bb07091ecc01fc32f13b3073aa576be064921fa529d97830ed50f77d4e40f5a1296f87305ac868d2ed9192f2bf951726a406ac4ee4e95e67c684d444655ae0ad1a5de517a51ef2bdab96ab2e9d5e0464a883ac9e5de1fbb83cfcde8694dedb167b3c1aaabcce3d8886e976fda2f184a29adc871171da365ec287a86d09f70989e95a265b89bad10eb213acb3fb364c152aa7b1962866aabfc8b1075aea9be95e46df7567288305222f8e893cf2396d24c885bd310f3eb852b2bd1d0fb60a509f08e3b89818cbfefcaf3570f931a1d00880fa94e2f962047bada4175e51a9301fae9d4f9760ddbc792baa48d0f61152f40c77c7a5b0526dd2a576d6b8f0a2d8cf3352746e79c572177394f24ac59c54f2f1a0df5debc24db4f74dd73d33bcf131f28a8272693de1790c8adde076c1ecffbd98bae3c5ea8a33e2674fcf84cc6e004248f647dd386b11e5664e64ec9c2de6276a183cb69c2f422855b8a25b2be59b9bfb6df3c11887a4bc90989486eae02fb48265956ff35a4ac4341d65635e7227be83e03845c1d0cdfe871b5beca6ed10fc38b519c9353d3390971214f778ce1ec023570a489b3a3420571331b1a98db8c79c108edbcb78be37b87f932c199fe0b375efd3537a7ac8b68a2a7e5d557349d35ead88b6a27f008124ab1f91648c9d96c57b5216ff40c045fe7593edd5f9cb13c8ebe7e226f2a435ffc75c40386f2eed17a836a807ae7df8922cd90af66655b1d01fa46d63d4ab69dba2e93746038a9ba54cfee068dd33e8c045cff4b2cbf4c9aa568ad957fc520d621d2fc5e4bce613f87c49cea307daf671295a18d9b86c0fae5c655869cf5d0470ae5f45277ee8ed3078d43ea2df208d58c95309b70c5a3dbb9087dd39496505a40de6d58c9c098f4bb2b06dc8d637ec5726cd0a7a85163e5ac2d521a439a752c2cb80b6dd54076ed1506a38bbf2e8da4bc5af630bdd76927cc1b4ec34436720feeda8009ccff8f4d236cd4d09440fa7bea62284b0bc3acd3a9751bd89d93d405ee7247556df5ca3f9aa274397a121243de89645dd89b745486b93b8c1af09814d59603fc734309a8930146ae7591222cf2cc995ad6d37a4aa48b775505a512b05a1e2e35b856f396a7838606c5073d0ead4e48b075e947530883650e4d47ae8002ea77924d27a920931c76885d127fc5643134128d8c96debae2c9c3c85bd41cd3a19fce1a8ebbe841cc62ada7142f206cb73ebaa2a7089cc8e64a68c67c67e54960d1ffae90ed4b02df9c5beb245efd39474a8c28c59a24a2f88aae80cc8af2c26bb99688ad76f24a2a01d8cc61f0da137b81ce4c38b61870e06f6680e1b4e92ee10db58977962007082cd63e90007c9937492e0bc748b5a7796c0a7541833c5241980f6d87abebd72dd238e57c7c45bbad3db6277cb955913636c80db31c84642d00f13ec59da9c52a42ef2f5cf60948f1b09cd8ffbccab181bdfe3a590daa25258d3258e20ad948dac31e01910eb55840f3856a568cde6f32edaef6ce1a87bfa664907a4e559e082af35a1b51a796da40c8d62fff6437df113ee5b2a1717b3a2834bb047c5d1162246343aaa8e4f6ea6350063475acbde287a2a0f75eb1e94eff2c9ff34c615c6bb6ecd73b05086c4248abfebffa2a92b4af751b200cfb7fd036a5965b890421e83ee2ba2b2f349c8863f9541c49a75bb99fb09ece9ca9fabf08cef8bcda0bbea5b4cb9c5989b7407f5e7d7d7a2d524f2984dcc16c8eea405a078f12efa4bb04e1ad56f96df306f5a922e94161d16d5819294716d25ba9a8fdc61b13f69d6ace5c35c2f5f69a58d9de5b5dbec8a8ec69c414ee8726a16ce5e4c9fa7c9b674ddf378552523e35d4f70d4d7098f605b5b44e64b360b2d596fd27a095607b34962681e46c67c00912f81124033c2ceea3db5744b60d4bb4667c2cdd3d3b1a38a7f73926c0b377d5ce6447d3820b8e7fc7029cd97a69e9bc593f151899095d280c5340698d68a8346c5e3797b0a1883a9f6ae0d1c53a1ee9850b57b9dbf925681bbdae2b37d32da0d15fb004483323f167bf04b102ab16ff4c073e283213e2d831e8281c4c58b3fdbc15b2fec3709fc577d4a4ef1c9119c06e00a0505e2c0d6779542fc6e0c8e5cb8b2488a593b7d789c85efc6c5bd6c6f8e6c96162b871eed7c4b7831a021477c236bc247e94674badb5dbafcb9b43d6aa8486bbec10e7355ec8f372f1eb2c17261e051c2df80644e41df559a390c793c2712739a55dde20a2f08ce2219c98dc2e1b51ab6556bddd348a285db7ac791bdd8d772611154202c99869069a33e56a41bdae6ddc7a153bd7035978f624fb0c8480f389d506dbee995810dc5ff87bfaf771b27f089e0360e9067c862d188437c2bc2b059c272bf0ded9a794d42ce08bc680604b1f900af889a0facfed10ea749f1c0b88e5bf4daf8102cae367f5ac53fbf6366a8f2f66898f951470cbbc43b664e60b15de9db6bc0122e38b91c75796212db1484c4f1d2737fa2d03a4e201d4e14b5b5a2e3cee41dcabb19cde278706fa956e2d5ab7d5ba95327d5634b9d0b020bdf5c4f2775141566b5b8f7a68f4cc8deb03e538698b1587aef2784fb258bb0266780cac40e7ab00e8ffa2af9dfdba9ab71b4922e6beaf8dfb09b62a386ff485d71918c6784d5a4803e65d20aca21373b66cd284d0deeaee335d7df5225987d626a1776859157d88b73bdfca496330e17b8d41fa6efce0a34da7748fc0aa5190f4995215691a37f6108760f295d88d49bbcd5008d9531993ba31eb4ae17794f243ac3e895aab43a081d9208fa087bf430464de0bf14ecc76839fa35dd0df69ac3a0b4f03988c8e95e2d57efd33647823c31ea2c67f26f15b6c02b550cbe5411b2d846b2445748542f5a9583b780fa1a541fb60a2615fe0a99baf639e8a3d865301d3965f6e9aadeb7e5a9aa38c6ccd6d366ff487631716b92b104bab0b82b43b8e8c54446476f28edcdeb8581798234727ef1ea0641871745ee46cfe8663f6a063197d0293d49574447e24b83eb0312a42fb98ac2dc4fa1023b2b2f864834d98fa7158e36c063db3e2a64e6922397fa5dc43cf706f9dfa9b7d11de6f92dc25a208b4339ed98e9ed0302fc910289cd86ce29fffa9d2474ec21f6e3e0c6bb0b61ac1e2df664bdb1db2fdc0cb1f304bb952a0b089b89f968347f9fad0458bad0b3f378d39e4e7dfe724875fff9cd9cad7da5eb914ed06f9769511680396826b27344ec8bacaf16f04ca0300d7e13157acc17c78a3fb2f3dfe263dc4966925edafbeb0c9e120ef11e0e2737f17594bdd387d8a6b62c5c6f7294300ee2556e643d1b3794b4d923e2019389cb6a21203a1a3e2ecd6d8a3618baeedbce0839a59eb7a6ea3811d5a8fa5f41c25fbc394858d5e8b0f907435d74d6ac8f29bb2dd88eed0ef2006ee0ffe6f1b666cb22d1bec3011389be0aac16e828eeca65af501c1dd3ce61ee9f00f571a9de29b20c17c6d4c76ddbd52d71a5d891b99dae759017f1d22af85fa6678f72c8f52a87c8eeaaf7f246c869367b04436ca510f7bb5ed79b722dff41819e3ce1d1e3a82d8c519a9bb8f87cd7888a7e1c78335ccfbefbf472a5bcc74b1ce7e083eef861c725a986f0fb5e3029fd1941e0b03befbef4ab859c649ef6eba02fea772dd80ff5e5437f1e530b3228fd5d36ebc88648217dde738b48a7389d96ffb52548d0b197eec59bb5e6694d21b12cdb82f7c853b51066df845bdd16657fb1e18e7cea396151cfbaafb90bb6a04247eb96f4f8fcb889a4dd10ce15f5ea6f0e3cf8539e8238c3e3f49555c075e158e512714284676b85e389da16c9fc4f0240e3861106aca5fb20d9ae52563d53c895527c88ffcc6081f47e063eddaf73a556aeff3fd6018fe9f98b1b14864ab1da7933cf13db2055b74f26efc171edede77d3b682eaadf85ee4d827f85dfe23c4888980c8b89c4c614757f5cf5d983c001761368098b464950c175c1f973e6c735ba0c657000ef45b7ec549252a76c6e1051c6f3cbd007ec70e7b041219eaa0f873a1942ab9d77acfa4dfe4fc2467415c74bcb356e00fc481b3b6b20f8fe92c9dc775f4c8e99e731c146ec5e393b55d8ce5033dbcfa7f85123338c5a407394a09532a5c160d0b682d7f41e85ab941844c24138f9a52c20fe2e1e52b0a8a6bcbc16cb6daf9c839d749e325831b09d553aca7cd72404cc5fc18cb61da418359769d93859ae64ecd4b4df90cf81453c8e5f29618fa1ce5b4f7899ca4d53eeefc6b6c702db859bbeffccbdb288782a0696b992da5025757aa65327661237f35b3fe88a0e555456e9007ee5fa5b664df7be714d4e0a41eaa54bd0dddb4a46cad1aea131a75ea511a729bbe978c357ecf1d39d2eb52cd55a9a98b83452d446d91b00a2d9249533a8dcd7b34b5883227f20d03b9db41beb3653baf40e84d9b7384f2e0ca035683368bad0ab340fae10edb039bfa1ccfb4e44f0610ceb5837e7ac795552f20040f407af66fd0ca8cfe0e9375f44c08fa9c3a970d69bc647027180ddcd15a1f93cf17fed4daecca199ab57d13443abcbe0b6804e1b7c3a39e83eab0dbf1657960fdeec587170386c3a79712eab171bcac6d6889e5e36748a40789cfbecd097150884aacb13c91d66db1b69e4da35b4f3fb2f242df7b3a0b257ee389ff7ef9eb54ba2b9ece62c36b13038f1ef9a32297d84666b038efbafbfa8adbc8b4b87169fba9331b705cdc55bd179147a455407e0968e7b232713b56483d7de37a3be06527430a08af04ff76b32a5c8c708f810149cb3de7862b600ddd81902615d18b435c0a7750b19cf798de1df80bc1f2f82b39d61cebf04216cb9d1a784c4776f69be226b5f343618f94ffa8a8f18d775a4b9040cd41f9be7e4bcf9e18f8336e67ed9c25561112dc0d9c486d4c804f384616d3e9b026c2558ea37d29299faab10cb0b087f50778fecc32688217a00d68d769b61df76e4b994a3b4b68aed15cf3049b18c37b74f11262a930fec0cb540af11d00ebda0cbb941e7702783b21690e0f122a397b2c19285e5f8e4188b9ddab26c75d9506f09ae72d25455587e8949737a831be9534fb85e9c7f40edea4ada74f8a64188ee712faf8812afc068eb210c56d376324d7aefe4d63decadee64e146886687f9bb56de17b6199335f0f8af82f67568e3aceef748b05c341600c0e2aa66ce77ab4cb0dbf7aab3c4bca13f6d40c6d168bf08f86afd9a2001cea95851961496838d05f7ec7a7bdd96c3a59fcbb09a49fcbce9abd2e73067ef79025fbed49a9ab508a92c052c55b37bcf23e60193c9c9a0a745e31769689858b042c3aa4cddc6595d6fb1847b44fb0e349acf53c89db79f797eedd1c64d73a5afc24c6a8fcff38525a88deae77d3d0490c9c9dae2a85ec18e9afe7a85e3811b7f64e66a4cace1d923e5de4ddcbfde379f164aa432586c44c5b8d089e6ef1ccdd6771990653e3169a487b1763ce8ece7ede9d71b718a012aec43f24a4d16633e19a53320e60052029a50352e90972e2c154dd6448ffbd40941d6a17314c8f64295159b2ad8f08aebd3e72beaa7085909e0a15c47f93a2151a952528ea1438c3ce926f69375316d6fe3e2300c20622e07dff64d066", 0x1000}, {&(0x7f0000000300)="73407f647e3d5be835f8aae87ebc5270dcb254c51d3b50870e1da6f78730a5b322a03c2eb8eaa37830c8b33059457572b6f565a1484133a3fed84ba2303faf031a881a5da7dbb3f859d5d7244f881a1c463991ac5b683476525330922e9598248e646c64eb4bc0401cca5cd4e3c4fd6e9d3fac05754bdc613a56a0ff73557b561299b65bb00f347ffa19fecc81", 0x8d}, {&(0x7f0000001440)="bbbaa72752d9ba597bafc3659ea16ca6910e3a8e7a0cfe8d8f4a32a863d4198bedbb7fd3431bd3df6e03046141218a3f9b55bf2bb14898b46a7b32888a0f5d524685b851445792e4ec11e6f0ea56c1c644f13af8a87165936f42b8bc1409f8baa302a81f216b3f34c95d45802ea48a79fad5ed214d25e4edbe634e7939ede7082828ae61dfdfd68e474483a318e513e1aaaba2c95023ff92e71a2bd09ef4172068eeae", 0xa3}, {&(0x7f0000001500)="27ee4343be883dc75b0163457c147bea424f8d935e650479a8e7d37906e10465b42033b2d1922ef327e5eae0f6c01f61e72b07784f1ddbd741e9af2125be2947837c325a2b76107f5e07e3fc70229bfed16766669145cd4fba102c0eb1fe0f00bf18c9", 0x63}, {&(0x7f0000000000)="565d26d33baa97c38c2a1414559f756c619edabf0019ece9054ddc48992be7e1d2e8c131759ca228327b2d8ad5bd6aa92b103e1c7df8399cf7ae2c", 0x3b}], 0x6) 1.744466473s ago: executing program 2 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}}, 0x4000894) process_madvise(0xffffffffffffffff, 0x0, 0x33, 0x17, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000000401042abd7000ffdbdf25070000060400630008005700", @ANYRES32=r1, @ANYBLOB="be3b7c7f5a6b93935049a0bd578d039e83ca409824973b31378fae676b3f6ea18babc081360eb446919a2d2a998e6b32ac37305a21d64289329462458486200cc14c351dd4"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4020) 1.743967713s ago: executing program 2 (id=93): setresuid(0x0, 0xee00, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0xa}) syz_open_procfs$userns(0x0, &(0x7f0000008c00)) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) 1.743620183s ago: executing program 2 (id=94): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x65b, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x802, 0x0) r2 = dup(r1) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) shutdown(r4, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@initdev, @in=@private}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) sendmmsg$inet(r2, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001280)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001500)=[{0x0}, {&(0x7f0000001380)}, {&(0x7f00000013c0)="ad037cc27860b358e459b74b3c41337a5999821d0158718325c3bdd3eebd190e26d24bddb4d950371d805c168a4e885e3119ad4b74364d7d4a77cfde1bc5b1dec07dc4b8e4c5a0bf27293f7c4929a06ff8833b5c60a1da2af80cb3c0db7c5880072f5b1d3729948ddbe2df51f3cb75c2a6", 0x71}, {&(0x7f0000001440)="a7c760fca9fd0c36f98ec23a95e353c877c5a06f347ba63a62991f03ff25a6f67b", 0x21}, {&(0x7f0000001480)="699ac99db060925a658e4079ab9ef752326a814de200d237444ec15a95233232d7fb6f7d72", 0x25}, {&(0x7f00000014c0)="3b4c1304fdf276d03a5aeea25b9abf6ee340fa8b510e8d49", 0x18}], 0x6}}], 0x2, 0x6044041) 1.743383963s ago: executing program 0 (id=95): syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b000101000000090400"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x2, 0xb004}, 0x4) (async) close(0x3) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18, 0x0, r2, {0x173}}, 0x18) syz_usb_connect$uac1(0x0, 0xb0, &(0x7f0000000040)=ANY=[], 0x0) 1.586473148s ago: executing program 1 (id=99): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10c, 0x14, 0x20, 0x70bd25, 0x25dfdbfe, {0x6a, 0x40}, [@INET_DIAG_REQ_BYTECODE={0xe0, 0x1, "6d7317dbb5338b0ff18dd4ad0a8aaa7eb1e9e893e596c5b3320b0ddd1df1b27b0049ba1d90d381c601b2caa38ef7a6ee67af99ca0c99d5abbf6618428d85aef0fef0c3efff9d9956d937bafbbf7af6602e8dd1f608ec71c6cafeb03ee6584d6c79f76f6598258de21cc21d61c8fedb718a05adea7de9366b472e912b2764817d47c669d57d92ad043d1e97278e597f9832cc2b90c376b62b680492ef342c273921a090b3e7bc9f9fe1dbd1d37b20fb8d2cf847b03a843dee9961d68075df2d40489c43c0791e8f7798bc3d105c31db5bccbd710c205c71dcf2b58b07"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "8741df7660876ae09adb06082a194b756c3dc84c"}]}, 0x10c}, 0x1, 0x0, 0x0, 0x24046080}, 0x4008041) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2001000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000815}, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000380)="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") pipe2$9p(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000004c0)=0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r3, &(0x7f00000005c0)={0xa0, 0x19, 0x1, {0x841, {0x10}, 0x9, r4, r6, 0x10, 0x6, 0xfffffffffffffffb, 0x4, 0x6, 0x3ff, 0x8, 0x476, 0x3, 0x9, 0x9c, 0x0, 0x7, 0x80, 0xeb400}}, 0xa0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f0000000800)={&(0x7f0000000680), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r8, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x34}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x80) setxattr$security_capability(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880), &(0x7f00000008c0)=@v2={0x2000000, [{0x9, 0xc52}, {0x0, 0x10001}]}, 0x14, 0x1) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r1) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, r10, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @local}}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8180) r11 = fsmount(r1, 0x1, 0x78) chroot(&(0x7f0000000a80)='./file1\x00') ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, &(0x7f0000000ac0)={0x2d763dec, 0x1}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r12, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r13, 0x300, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40050) fstat(r11, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000d00), &(0x7f0000000d40)=0x0, &(0x7f0000000d80)) fsetxattr$system_posix_acl(r1, &(0x7f0000000c40)='system.posix_acl_access\x00', &(0x7f0000000dc0)={{}, {0x1, 0x3}, [{0x2, 0x0, r14}, {0x2, 0x0, r4}, {0x2, 0x0, r4}, {0x2, 0x5, r4}, {0x2, 0x2, r5}, {0x2, 0x0, r5}, {0x2, 0x1, r15}], {0x4, 0x2}, [{0x8, 0x1, r6}, {0x8, 0x5, r6}, {0x8, 0x3, r6}, {0x8, 0x0, r6}, {0x8, 0x2, r6}], {0x10, 0x4}, {0x20, 0x1}}, 0x84, 0x0) read$FUSE(r0, &(0x7f0000000e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r11, &(0x7f0000002ec0)={0x150, 0x0, r16, [{0x3, 0x43f, 0x0, 0x5}, {0x2, 0x0, 0x1, 0x2, '\x00'}, {0x5, 0x0, 0x6, 0x400, 'wlan0\x00'}, {0x1, 0x5, 0x14, 0x4, 'security.capability\x00'}, {0x0, 0x2, 0xb, 0x3, '-[--]]&\\,/*'}, {0x2, 0x100, 0x4, 0x1ff, 'gtp\x00'}, {0x4, 0x1, 0x6, 0x2, 'wlan0\x00'}, {0x6, 0x1, 0x4, 0x4, '//-.'}, {0x3, 0x8, 0x18, 0x40, 'source_mac_is_multicast\x00'}]}, 0x150) pwrite64(r2, &(0x7f0000003040)="5e8d82467328a610", 0x8, 0x3) copy_file_range(r3, &(0x7f0000003080)=0x8d, r7, 0x0, 0x9, 0x0) 1.53231798s ago: executing program 3 (id=100): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000002000)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x4, 0x12) 1.52966861s ago: executing program 3 (id=101): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) 1.52900908s ago: executing program 1 (id=102): setresuid(0x0, 0xee00, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0xa}) syz_open_procfs$userns(0x0, &(0x7f0000008c00)) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) 1.52809893s ago: executing program 3 (id=103): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000003a80)=0xb, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) 1.52220256s ago: executing program 1 (id=104): link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200000, 0x4) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x2, 0x3) unlink(&(0x7f0000000100)='./file0\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x10200, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040044}, 0x20008085) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcf25af337f3b51) fchownat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0xee01, r4, 0x0) (async) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0xa10085, 0x0) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000004c0)) (rerun: 64) close_range(r0, r1, 0x2) (async, rerun: 64) r5 = open(&(0x7f0000000540)='./file0\x00', 0x98080, 0xaa) (async, rerun: 64) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000580), 0xc0a02, 0x0) r7 = dup3(r0, r6, 0x80000) r8 = signalfd(r7, &(0x7f00000005c0)={[0x7fff]}, 0x8) recvmsg$inet_nvme(r8, &(0x7f0000001d40)={&(0x7f0000000600)=@nl=@unspec, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000680)=""/183, 0xb7}, {&(0x7f0000000740)=""/234, 0xea}, {&(0x7f0000000840)=""/202, 0xca}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/241, 0xf1}, {&(0x7f0000001a40)=""/67, 0x43}, {&(0x7f0000001ac0)=""/63, 0x3f}, {&(0x7f0000001b00)=""/20, 0x14}, {&(0x7f0000001b40)=""/103, 0x67}], 0x9, &(0x7f0000001c80)=""/143, 0x8f}, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(r5, 0xc02054a5, &(0x7f0000001d80)={0x119c, r5, 'id1\x00'}) r10 = openat(r9, &(0x7f0000001e00)='./file0\x00', 0x22e82, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONERANGE(r11, 0x4020940d, &(0x7f0000001e40)={{r10}, 0x3, 0x5, 0x8000000000000000}) ioctl$BLKSECDISCARD(r7, 0x127d, &(0x7f0000001e80)=0x8) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000001ec0)=@sg0, r3, &(0x7f0000001f00)) mount$tmpfs(0x0, &(0x7f0000001f80)='./file0/file0\x00', &(0x7f0000001fc0), 0x200000, &(0x7f0000002000)={[{@huge_advise}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x65, 0x2d]}}, {@huge_within_size}, {@huge_always}, {@huge_never}], [{@dont_hash}, {@euid_gt={'euid>', r3}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '#*'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) (async) r12 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDDELIO(r12, 0x4b35, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000020c0)={0x10000, 0x1, 0x30000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async, rerun: 32) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000002200)={r10, &(0x7f0000002100)=')\x00', 0x42800, &(0x7f0000002140)={@_ha_fsid={[0x9, 0x1]}, {0x7, 0x7, 0x7, 0x1}}, 0x97, &(0x7f0000002180)={@_ha_fsid}, &(0x7f00000021c0)=0x3}) (rerun: 32) open_tree(r13, &(0x7f0000002240)='./file0\x00', 0x8901) (async) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r12) 1.502318281s ago: executing program 1 (id=105): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) syz_clone3(&(0x7f0000000240)={0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0), {}, &(0x7f0000000300)=""/192, 0xfffffffffffffe2a, &(0x7f00000001c0)=""/23, &(0x7f0000000200), 0x7}, 0x58) sendto$inet6(r0, &(0x7f0000000300), 0xfdef, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.444143943s ago: executing program 1 (id=106): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000100)=@generic={0x0, 0x101, 0x8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r6 = dup(r3) ioctl$KVM_TDX_CAPABILITIES(r6, 0xc008aeba, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r7, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x632}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0) 1.441905953s ago: executing program 3 (id=107): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0xbf05ffd823010f75, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x1, 0x200, 0x0, 0xfffffffc, 0x80000, 0xfffffffe}) 1.425884544s ago: executing program 1 (id=108): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001040)={0x17c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x4, 0x0, 0xa}, [@CTA_EXPECT_MASK={0x14, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x14, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASK={0xcc, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x71}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x20, 0xffffffff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffe, 0x0, 0x4, 0x0, 0x0, @empty, @empty}}}}) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x221, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4d6, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x2000c040) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) (async) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000dc0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000e00)=0x40) (async) syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x40, 0xc, 0xae, {0xae, 0xb, "656c3f7eb9ab2855c20858336fc09b20b25b679e31dc9da1a924e7de21bcbb60a39736733c4c95f6cb4f25e3f3d35e34614212bbfbff0be4a46d143858d29812f506c2966bc51d3e84a2ab96c5c29186acb75477207c93a011371c92f42a557e90c23bcbcbe1e4b39a51205ddc038b692b7082e7993a3679e47d42cd51568193eb95e83dcf585edc1cbee877e1dd811ceb7655b773e8461d2702bc8a08db7fb7689015050e5c8a3012581eca"}}, &(0x7f0000000840)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x68, 0x3, 0x4, 0x46, "0b12c1ce", "b9bf42aa"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0x4, 0xb, 0x5e, 0x9, 0x2005}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0xe, 0xa7, "7f91ca7d8794b1c501c1c89a4046c22ff843a058a7e532db13b0a01e8a4bf667e461747df24312a6dc5c9efec3871dcedfc09a4cb7a5bc04d28d108b1a4e1465d4d9136dea1ccc092d2490e2020923e2853b40a99861619ae491b8fd04496de489f275f2e18863af15d0912f21ea209ca8ab3059dc518465c44a9b3e213fa90a57aac329cce30aa9640fa4d80192177a118fcf6f7178a1f7dad115b74c61f7a7354ba12b0bfa86"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x120, 0x10}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0xf7}, &(0x7f0000000540)={0x40, 0xb, 0x2, "5dda"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x66}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "bc65"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x8}}) 0s ago: executing program 3 (id=109): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e26, 0x9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x6}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x23, @local, 0x23}, 0x1c) (async) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8811}, 0x4) (async) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0xff0a, 0x0) (async) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x6000) (async) syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xfa, 0x80, 0x1, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x5776}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x1d, 0x4, {0xa, 0x25, 0x25, 0xe, 0x4, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xe7, 0x80, 0xe, {0xa, 0x25, 0x25, 0x8, 0x2, 0x7}}}}}}}}]}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. [ 23.325870][ T36] audit: type=1400 audit(1774892344.050:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.327023][ T282] cgroup: Unknown subsys name 'net' [ 23.350972][ T36] audit: type=1400 audit(1774892344.050:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.380814][ T36] audit: type=1400 audit(1774892344.080:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.381054][ T282] cgroup: Unknown subsys name 'devices' [ 23.563472][ T282] cgroup: Unknown subsys name 'hugetlb' [ 23.569835][ T282] cgroup: Unknown subsys name 'rlimit' [ 23.722166][ T36] audit: type=1400 audit(1774892344.450:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.746260][ T36] audit: type=1400 audit(1774892344.450:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.761113][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.772832][ T36] audit: type=1400 audit(1774892344.450:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.806238][ T36] audit: type=1400 audit(1774892344.510:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.835077][ T36] audit: type=1400 audit(1774892344.510:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.839317][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.863186][ T36] audit: type=1400 audit(1774892344.560:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.900646][ T36] audit: type=1400 audit(1774892344.560:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.181328][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.188804][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.198385][ T289] bridge_slave_0: entered allmulticast mode [ 25.205346][ T289] bridge_slave_0: entered promiscuous mode [ 25.212288][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.220301][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.227970][ T289] bridge_slave_1: entered allmulticast mode [ 25.234973][ T289] bridge_slave_1: entered promiscuous mode [ 25.365726][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.373511][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.381277][ T295] bridge_slave_0: entered allmulticast mode [ 25.388211][ T295] bridge_slave_0: entered promiscuous mode [ 25.396387][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.403658][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.411447][ T295] bridge_slave_1: entered allmulticast mode [ 25.418622][ T295] bridge_slave_1: entered promiscuous mode [ 25.435549][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.443187][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.451787][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.459617][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.488180][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.495716][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.503279][ T294] bridge_slave_0: entered allmulticast mode [ 25.509943][ T294] bridge_slave_0: entered promiscuous mode [ 25.523153][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.531298][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.539829][ T294] bridge_slave_1: entered allmulticast mode [ 25.546767][ T294] bridge_slave_1: entered promiscuous mode [ 25.592353][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.601782][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.612072][ T293] bridge_slave_0: entered allmulticast mode [ 25.619442][ T293] bridge_slave_0: entered promiscuous mode [ 25.641339][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.648591][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.657155][ T293] bridge_slave_1: entered allmulticast mode [ 25.665169][ T293] bridge_slave_1: entered promiscuous mode [ 25.738172][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.746486][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.770470][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.778367][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.802405][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.811187][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.868827][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.877237][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.890659][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.898268][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.908719][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.916850][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.939513][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.947234][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.956844][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.964238][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.972531][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.980488][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.996897][ T289] veth0_vlan: entered promiscuous mode [ 26.017023][ T289] veth1_macvtap: entered promiscuous mode [ 26.054004][ T295] veth0_vlan: entered promiscuous mode [ 26.061871][ T294] veth0_vlan: entered promiscuous mode [ 26.089103][ T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.109915][ T294] veth1_macvtap: entered promiscuous mode [ 26.119217][ T293] veth0_vlan: entered promiscuous mode [ 26.133461][ T295] veth1_macvtap: entered promiscuous mode [ 26.162118][ T293] veth1_macvtap: entered promiscuous mode [ 26.228107][ T316] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.401282][ T306] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.461684][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.552554][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.565151][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.575845][ T306] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 26.590250][ T306] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.601942][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.616516][ T306] usb 2-1: config 0 descriptor?? [ 26.652485][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 26.666269][ T65] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 26.681077][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.689739][ T65] usb 3-1: Product: syz [ 26.694372][ T65] usb 3-1: Manufacturer: syz [ 26.699168][ T65] usb 3-1: SerialNumber: syz [ 26.712460][ T65] usb 3-1: selecting invalid altsetting 1 [ 26.718593][ T65] usb 3-1: unit 6 not found! [ 26.791291][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.952068][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.962953][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.973572][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 27.001114][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 27.009779][ T10] usb 4-1: SerialNumber: syz [ 27.036466][ T306] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 27.048258][ T306] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 27.074845][ T332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7'. [ 27.391152][ T306] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.511206][ T65] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 27.519866][ T10] usb 4-1: 0:2 : does not exist [ 27.525565][ T65] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 27.538312][ T10] usb 4-1: USB disconnect, device number 2 [ 27.544973][ T65] usb 3-1: selecting invalid altsetting 1 [ 27.552322][ T65] usb 3-1: unit 6 not found! [ 27.554416][ T306] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 27.558431][ T65] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 27.577223][ T313] usb 2-1: USB disconnect, device number 2 [ 27.580183][ T65] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 27.596627][ T306] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 27.607245][ T65] usb 3-1: selecting invalid altsetting 1 [ 27.615478][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.616102][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.624434][ T306] usb 1-1: Product: syz [ 27.643173][ T65] usb 3-1: unit 6 not found! [ 27.649774][ T306] usb 1-1: Manufacturer: syz [ 27.653272][ T65] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 27.657671][ T306] usb 1-1: SerialNumber: syz [ 27.672925][ T65] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 27.686816][ T65] usb 3-1: USB disconnect, device number 2 [ 27.709095][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.877120][ T306] usb 1-1: MIDIStreaming interface descriptor not found [ 27.894033][ T306] usb 1-1: USB disconnect, device number 2 [ 27.905571][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 28.100548][ T363] netlink: 'syz.1.14': attribute type 4 has an invalid length. [ 28.108794][ T363] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.14'. [ 28.221143][ T313] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.371158][ T313] usb 4-1: Using ep0 maxpacket: 8 [ 28.378155][ T313] usb 4-1: unable to get BOS descriptor or descriptor too short [ 28.390578][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 28.390594][ T36] audit: type=1400 audit(1774892349.110:122): avc: denied { read } for pid=372 comm="syz.0.18" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.393265][ T373] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 28.397330][ T313] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 221, changing to 11 [ 28.424782][ T36] audit: type=1400 audit(1774892349.110:123): avc: denied { open } for pid=372 comm="syz.0.18" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.431568][ T313] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 28.448097][ T36] audit: type=1400 audit(1774892349.120:124): avc: denied { ioctl } for pid=372 comm="syz.0.18" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.475501][ T313] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 28.483273][ T375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 28.506688][ T306] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.517715][ T36] audit: type=1400 audit(1774892349.120:125): avc: denied { set_context_mgr } for pid=372 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 28.550333][ T313] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.558360][ T375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18 [ 28.562788][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.570395][ T36] audit: type=1400 audit(1774892349.120:126): avc: denied { call } for pid=372 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 28.577993][ T313] usb 4-1: Product: syz [ 28.604603][ T313] usb 4-1: Manufacturer: syz [ 28.609598][ T36] audit: type=1400 audit(1774892349.210:127): avc: denied { create } for pid=374 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 28.611907][ T313] usb 4-1: SerialNumber: syz [ 28.639143][ T36] audit: type=1400 audit(1774892349.210:128): avc: denied { write } for pid=374 comm="syz.0.19" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.663951][ T36] audit: type=1400 audit(1774892349.210:129): avc: denied { map } for pid=374 comm="syz.0.19" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 28.689215][ T36] audit: type=1400 audit(1774892349.360:130): avc: denied { listen } for pid=376 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.708790][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 28.715216][ T306] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.725952][ T306] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.736791][ T306] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.747167][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.755453][ T306] usb 3-1: Product: syz [ 28.759685][ T306] usb 3-1: Manufacturer: syz [ 28.764318][ T306] usb 3-1: SerialNumber: syz [ 28.828643][ T36] audit: type=1400 audit(1774892349.550:131): avc: denied { create } for pid=379 comm="syz.0.21" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 28.841664][ T380] ======================================================= [ 28.841664][ T380] WARNING: The mand mount option has been deprecated and [ 28.841664][ T380] and is ignored by this kernel. Remove the mand [ 28.841664][ T380] option from the mount to silence this warning. [ 28.841664][ T380] ======================================================= [ 28.890588][ T380] fuse: Unknown parameter 'blksi~e' [ 28.979108][ T393] overlayfs: missing 'lowerdir' [ 28.987141][ T306] usb 3-1: 0:2 : does not exist [ 29.006342][ T306] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 29.028458][ T306] usb 3-1: USB disconnect, device number 3 [ 29.057689][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.084780][ T404] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 29.141161][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.292257][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.304114][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.315148][ T10] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 29.324907][ T10] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 29.333643][ T10] usb 2-1: Manufacturer: syz [ 29.339427][ T10] usb 2-1: config 0 descriptor?? [ 29.431106][ T329] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.561156][ T329] usb 1-1: device descriptor read/64, error -71 [ 29.801100][ T329] usb 1-1: device descriptor read/64, error -71 [ 30.041203][ T329] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.181116][ T329] usb 1-1: device descriptor read/64, error -71 [ 30.232371][ T10] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input4 [ 30.246490][ T10] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input5 [ 30.260571][ T10] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input6 [ 30.276329][ T10] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0002/input/input7 [ 30.296158][ T10] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 30.423819][ T329] usb 1-1: device descriptor read/64, error -71 [ 30.445103][ T10] usb 2-1: USB disconnect, device number 3 [ 30.551152][ T329] usb usb1-port1: attempt power cycle [ 30.801375][ T65] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.901240][ T329] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 30.922407][ T329] usb 1-1: device descriptor read/8, error -71 [ 30.952090][ T65] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 30.960986][ T65] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 30.972962][ T65] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 30.982716][ T65] usb 3-1: config 220 has no interface number 1 [ 30.991252][ T65] usb 3-1: config 220 interface 0 has no altsetting 0 [ 30.998820][ T65] usb 3-1: config 220 interface 76 has no altsetting 0 [ 31.015557][ T65] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 31.028048][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.037119][ T65] usb 3-1: Product: syz [ 31.041902][ T65] usb 3-1: Manufacturer: syz [ 31.048046][ T313] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 31.056671][ T65] usb 3-1: SerialNumber: syz [ 31.070674][ T313] cdc_ncm 4-1:1.0: bind() failure [ 31.071295][ T329] usb 1-1: device descriptor read/8, error -71 [ 31.080139][ T313] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 31.091959][ T313] cdc_ncm 4-1:1.1: bind() failure [ 31.116838][ T313] usb 4-1: USB disconnect, device number 3 [ 31.299487][ T65] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 31.306936][ T65] usb 3-1: No valid video chain found. [ 31.314659][ T65] usb 3-1: USB disconnect, device number 4 [ 31.321491][ T329] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 31.331237][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.343513][ T329] usb 1-1: device descriptor read/8, error -71 [ 31.472595][ T329] usb 1-1: device descriptor read/8, error -71 [ 31.491177][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 31.498336][ T10] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 31.510701][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 31.520489][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.529236][ T10] usb 2-1: Product: syz [ 31.533582][ T10] usb 2-1: Manufacturer: syz [ 31.538645][ T10] usb 2-1: SerialNumber: syz [ 31.546485][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 31.553341][ T10] r8152-cfgselector 2-1: config 0 descriptor?? [ 31.591513][ T329] usb usb1-port1: unable to enumerate USB device [ 31.888235][ T474] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.221594][ T413] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 32.372404][ T413] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 32.381770][ T413] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 32.391543][ T413] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 32.401359][ T413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 32.411486][ T413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 32.422790][ T413] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 32.436437][ T413] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 32.446315][ T413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.455315][ T413] usb 3-1: config 0 descriptor?? [ 32.461109][ T482] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 32.601091][ T329] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 32.671753][ T413] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 32.731116][ T329] usb 1-1: device descriptor read/64, error -71 [ 32.821141][ T313] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.873715][ C0] usblp0: nonzero read bulk status received: -71 [ 32.883458][ T482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.894497][ T482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.904452][ T413] usb 3-1: USB disconnect, device number 5 [ 32.982675][ T313] usb 4-1: unable to get BOS descriptor or descriptor too short [ 32.994148][ T313] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 33.001116][ T329] usb 1-1: device descriptor read/64, error -71 [ 33.004824][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.020561][ T313] usb 4-1: Product: syz [ 33.025203][ T313] usb 4-1: Manufacturer: syz [ 33.030428][ T313] usb 4-1: SerialNumber: syz [ 33.038505][ T313] usb 4-1: selecting invalid altsetting 1 [ 33.045137][ T313] usb 4-1: unit 6 not found! [ 33.105355][ T481] usblp0: removed [ 33.251194][ T329] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 33.391150][ T329] usb 1-1: device descriptor read/64, error -71 [ 33.631151][ T329] usb 1-1: device descriptor read/64, error -71 [ 33.641952][ T486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.652151][ T486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.672887][ T313] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 33.680670][ T313] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 33.691323][ T313] usb 4-1: selecting invalid altsetting 1 [ 33.697748][ T313] usb 4-1: unit 6 not found! [ 33.702931][ T313] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 33.711736][ T313] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 33.722293][ T313] usb 4-1: selecting invalid altsetting 1 [ 33.728757][ T313] usb 4-1: unit 6 not found! [ 33.734168][ T313] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 33.745768][ T313] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 33.746353][ T329] usb usb1-port1: attempt power cycle [ 33.757055][ T313] usb 4-1: USB disconnect, device number 4 [ 33.771465][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.895410][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 34.056578][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.067889][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 34.079153][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 34.088504][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 34.097454][ T9] usb 3-1: SerialNumber: syz [ 34.104663][ T9] usb 3-1: bad CDC descriptors [ 34.110064][ T9] usb-storage 3-1:1.0: USB Mass Storage device detected [ 34.118333][ T9] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 34.127317][ T329] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 34.135335][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 34.142362][ T10] r8152-cfgselector 2-1: bad CDC descriptors [ 34.149609][ T9] scsi host1: usb-storage 3-1:1.0 [ 34.157005][ T10] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 34.184550][ T329] usb 1-1: device descriptor read/8, error -71 [ 34.233037][ T497] netlink: 68 bytes leftover after parsing attributes in process `syz.3.59'. [ 34.233619][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 34.233634][ T36] audit: type=1400 audit(1774892354.915:179): avc: denied { write } for pid=494 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.301977][ T497] 9pnet: p9_errstr2errno: server reported unknown error ÿ [ 34.327275][ T36] audit: type=1400 audit(1774892355.009:180): avc: denied { relabelfrom } for pid=505 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 34.329550][ T329] usb 1-1: device descriptor read/8, error -71 [ 34.357952][ T9] usb 3-1: USB disconnect, device number 6 [ 34.363841][ T36] audit: type=1400 audit(1774892355.009:181): avc: denied { relabelto } for pid=505 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 34.387194][ T36] audit: type=1400 audit(1774892355.028:182): avc: denied { create } for pid=505 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.410762][ T36] audit: type=1400 audit(1774892355.028:183): avc: denied { ioctl } for pid=505 comm="syz.3.60" path="socket:[4526]" dev="sockfs" ino=4526 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.545526][ T36] audit: type=1400 audit(1774892355.187:184): avc: denied { connect } for pid=516 comm="syz.3.63" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.576735][ T515] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 34.630827][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 34.641474][ T329] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 34.650268][ T36] audit: type=1400 audit(1774892355.309:185): avc: denied { write } for pid=516 comm="syz.3.63" path="socket:[5574]" dev="sockfs" ino=5574 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.685784][ T36] audit: type=1400 audit(1774892355.309:186): avc: denied { read } for pid=516 comm="syz.3.63" laddr=::1 lport=58 faddr=::1 fport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.710998][ T329] usb 1-1: device descriptor read/8, error -71 [ 34.768426][ T36] audit: type=1400 audit(1774892355.412:187): avc: denied { unlink } for pid=519 comm="syz.2.64" name="#3" dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.829134][ T36] audit: type=1400 audit(1774892355.412:188): avc: denied { mount } for pid=519 comm="syz.2.64" name="/" dev="overlay" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.853532][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 34.867335][ T329] usb 1-1: device descriptor read/8, error -71 [ 34.881824][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.895408][ T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.907364][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 34.917267][ T10] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 34.926385][ T10] usb 2-1: Product: syz [ 34.926482][ T524] kvm: user requested TSC rate below hardware speed [ 34.940034][ T10] usb 2-1: Manufacturer: syz [ 34.948940][ T10] hub 2-1:4.0: USB hub found [ 34.982601][ T329] usb usb1-port1: unable to enumerate USB device [ 35.163702][ T10] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 35.206757][ T10] usb 2-1: USB disconnect, device number 5 [ 35.472888][ T329] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 35.644628][ T329] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 35.657766][ T329] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 35.669888][ T329] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 35.681821][ T329] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 35.691390][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.700961][ T531] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 35.730421][ T313] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 35.899041][ T313] usb 1-1: Using ep0 maxpacket: 32 [ 35.905868][ T313] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 35.914953][ T313] usb 1-1: config 0 has no interface number 0 [ 35.921720][ T313] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 35.935064][ T313] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 35.946029][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.954436][ T313] usb 1-1: Product: syz [ 35.959294][ T313] usb 1-1: Manufacturer: syz [ 35.964532][ T313] usb 1-1: SerialNumber: syz [ 35.972457][ T313] usb 1-1: config 0 descriptor?? [ 35.981359][ T538] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 36.218509][ T538] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 36.389315][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.550435][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.561240][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.571924][ T10] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 36.581432][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 36.589978][ T10] usb 2-1: SerialNumber: syz [ 36.812344][ T10] usb 2-1: 0:2 : does not exist [ 36.822249][ T10] usb 2-1: USB disconnect, device number 6 [ 36.830977][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.080746][ T313] asix 1-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 248 [ 37.545473][ T578] rust_binder: Error in use_page_slow: ESRCH [ 37.545506][ T578] rust_binder: use_range failure ESRCH [ 37.552602][ T578] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 37.559180][ T578] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 37.567999][ T578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:59 [ 37.881386][ T313] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 38.064053][ T313] usb 2-1: unable to get BOS descriptor or descriptor too short [ 38.075836][ T313] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 38.085826][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.095014][ T313] usb 2-1: Product: syz [ 38.099531][ T313] usb 2-1: Manufacturer: syz [ 38.104963][ T313] usb 2-1: SerialNumber: syz [ 38.112443][ T313] usb 2-1: selecting invalid altsetting 1 [ 38.119677][ T313] usb 2-1: unit 6 not found! [ 38.325908][ T313] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 38.334917][ T313] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 38.345351][ T313] usb 2-1: selecting invalid altsetting 1 [ 38.352893][ T313] usb 2-1: unit 6 not found! [ 38.358013][ T313] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 38.366427][ T313] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 38.377055][ T313] usb 2-1: selecting invalid altsetting 1 [ 38.383693][ T313] usb 2-1: unit 6 not found! [ 38.388863][ T313] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 38.399301][ T313] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 38.410059][ T313] usb 2-1: USB disconnect, device number 7 [ 38.418880][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.138866][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.138866][ T313] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 39.310756][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 39.320181][ T313] usb 2-1: Using ep0 maxpacket: 16 [ 39.326877][ T313] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 39.338242][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.338388][ T313] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.351996][ T10] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 39.361924][ T313] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.379351][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.387713][ T313] usb 2-1: Product: syz [ 39.392299][ T313] usb 2-1: Manufacturer: syz [ 39.394651][ T10] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 118, using maximum allowed: 30 [ 39.397274][ T313] usb 2-1: SerialNumber: syz [ 39.408657][ T10] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 118 [ 39.431621][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 39.447910][ T10] usb 4-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 39.456632][ T10] usb 4-1: Product: syz [ 39.469243][ T10] usb 4-1: Manufacturer: syz [ 39.474608][ T10] usb 4-1: SerialNumber: syz [ 39.504038][ T329] aiptek 3-1:17.0: Aiptek tried all speeds, no sane response [ 39.512157][ T329] aiptek 3-1:17.0: probe with driver aiptek failed with error -22 [ 39.522035][ T329] usb 3-1: USB disconnect, device number 7 [ 39.646997][ T313] usb 2-1: 0:2 : does not exist [ 39.652396][ T313] usb 2-1: unit 78 not found! [ 39.658200][ T313] usb 2-1: unit 35 not found! [ 39.663445][ T313] usb 2-1: unit 0 not found! [ 39.674139][ T313] usb 2-1: USB disconnect, device number 8 [ 39.674192][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.716821][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 39.729845][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.748009][ T10] usb 4-1: USB disconnect, device number 5 [ 39.896815][ T313] usb 1-1: USB disconnect, device number 11 [ 39.899392][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 39.899418][ T36] audit: type=1400 audit(1774892360.235:198): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.015690][ T36] audit: type=1400 audit(1774892360.348:199): avc: denied { load_policy } for pid=603 comm="syz.0.91" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 40.015713][ T604] SELinux: policydb magic number 0x448bbc64 does not match expected magic number 0xf97cff8c [ 40.047352][ T604] SELinux: failed to load policy [ 40.091746][ T36] audit: type=1400 audit(1774892360.414:200): avc: denied { read write } for pid=610 comm="syz.2.94" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 40.116063][ T36] audit: type=1400 audit(1774892360.414:201): avc: denied { open } for pid=610 comm="syz.2.94" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 40.142210][ T36] audit: type=1400 audit(1774892360.414:202): avc: denied { read write } for pid=610 comm="syz.2.94" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 40.167431][ T36] audit: type=1400 audit(1774892360.414:203): avc: denied { open } for pid=610 comm="syz.2.94" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 40.192681][ T36] audit: type=1400 audit(1774892360.414:204): avc: denied { ioctl } for pid=610 comm="syz.2.94" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 40.219822][ T36] audit: type=1400 audit(1774892360.414:205): avc: denied { connect } for pid=610 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.245985][ T36] audit: type=1400 audit(1774892360.489:206): avc: denied { shutdown } for pid=610 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.279194][ T36] audit: type=1400 audit(1774892360.489:207): avc: denied { write } for pid=610 comm="syz.2.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.312698][ T629] mmap: syz.3.101 (629) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.364436][ T313] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 40.546913][ T313] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.559326][ T313] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 40.569520][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.578380][ T313] usb 1-1: Product: syz [ 40.582717][ T313] usb 1-1: Manufacturer: syz [ 40.587483][ T313] usb 1-1: SerialNumber: syz [ 40.594802][ T313] hub 1-1:1.0: bad descriptor, ignoring hub [ 40.601246][ T313] hub 1-1:1.0: probe with driver hub failed with error -5 [ 40.652240][ T306] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 40.694823][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 40.813587][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.825607][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.835434][ T306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.849549][ T306] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.859132][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.869403][ T306] usb 4-1: config 0 descriptor?? [ 40.877637][ T45] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 40.887696][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.896294][ T45] usb 2-1: Product: syz [ 40.900653][ T45] usb 2-1: Manufacturer: syz [ 40.905406][ T45] usb 2-1: SerialNumber: syz [ 41.079688][ T313] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 41.227705][ T313] usb 1-1: device descriptor read/64, error -71 [ 41.321677][ T306] usbhid 4-1:0.0: can't add hid device: -71 [ 41.328285][ T306] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 41.338068][ T306] usb 4-1: USB disconnect, device number 6 [ 41.483463][ T313] usb 1-1: device descriptor read/64, error -71 [ 41.739262][ T313] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 41.874955][ T650] ------------[ cut here ]------------ [ 41.881070][ T650] WARNING: CPU: 1 PID: 650 at mm/page_alloc.c:5268 __alloc_pages_noprof+0x109/0x7e0 [ 41.891450][ T650] Modules linked in: [ 41.895811][ T650] CPU: 1 UID: 0 PID: 650 Comm: syz.3.109 Not tainted syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c [ 41.908598][ T650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 41.920607][ T650] RIP: 0010:__alloc_pages_noprof+0x109/0x7e0 [ 41.927771][ T650] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 0a 7f 0b 06 00 0f 85 c2 00 00 00 c6 05 fd 7e 0b 06 01 <0f> 0b 31 c0 e9 b4 00 00 00 83 fb 0a 0f 87 a9 00 00 00 44 8b 64 24 [ 41.948914][ T650] RSP: 0018:ffffc9000e147560 EFLAGS: 00010246 [ 41.955453][ T650] RAX: 0000000000000000 RBX: 0000000000000011 RCX: 0000000000000000 [ 41.964262][ T650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e147618 [ 41.972788][ T650] RBP: ffffc9000e1476a0 R08: ffffc9000e147617 R09: 0000000000000000 [ 41.981831][ T650] R10: ffffc9000e147600 R11: fffff52001c28ec3 R12: ffffc9000e1475a0 [ 41.991001][ T650] R13: dffffc0000000000 R14: 1ffff92001c28eb0 R15: 0000000000000000 [ 41.999591][ T650] FS: 00007f2598d8a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 42.009089][ T650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.016405][ T650] CR2: 0000200000005000 CR3: 000000012129c000 CR4: 00000000003526b0 [ 42.024468][ T650] Call Trace: [ 42.028063][ T650] [ 42.031209][ T650] ? vfs_write+0x3c5/0xf90 [ 42.035721][ T650] ? ksys_write+0x145/0x260 [ 42.040730][ T650] ? x64_sys_call+0x271c/0x2ee0 [ 42.046053][ T650] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 42.052399][ T650] ? hashtab_init+0xdb/0x1f0 [ 42.057880][ T650] ___kmalloc_large_node+0x81/0x210 [ 42.063838][ T650] ? hashtab_init+0xdb/0x1f0 [ 42.068528][ T650] __kmalloc_large_node_noprof+0x1e/0xd0 [ 42.074753][ T650] ? hashtab_init+0xdb/0x1f0 [ 42.079528][ T650] __kmalloc_noprof+0x326/0x500 [ 42.084596][ T650] ? kasan_save_alloc_info+0x40/0x50 [ 42.090305][ T650] hashtab_init+0xdb/0x1f0 [ 42.095034][ T650] ? common_read+0x175/0x490 [ 42.099849][ T650] symtab_init+0x44/0x70 [ 42.104390][ T650] common_read+0x1e6/0x490 [ 42.109527][ T650] ? hashtab_init+0xdb/0x1f0 [ 42.114498][ T650] ? __cfi_common_read+0x10/0x10 [ 42.119751][ T650] ? hashtab_init+0x105/0x1f0 [ 42.125040][ T650] policydb_read+0xab8/0x28b0 [ 42.130180][ T650] ? __kasan_kmalloc+0x96/0xb0 [ 42.133568][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 42.135056][ T650] ? __cfi_policydb_read+0x10/0x10 [ 42.150058][ T650] ? security_load_policy+0x130/0x12d0 [ 42.156171][ T650] security_load_policy+0x16a/0x12d0 [ 42.161662][ T650] ? irqentry_exit+0x4a/0x60 [ 42.166796][ T650] ? asm_exc_page_fault+0x2b/0x30 [ 42.172545][ T650] ? __cfi_security_load_policy+0x10/0x10 [ 42.178648][ T650] ? rep_movs_alternative+0x4a/0xa0 [ 42.184418][ T650] sel_write_load+0x2a7/0x5f0 [ 42.189482][ T650] ? handle_mm_fault+0x171c/0x1bf0 [ 42.194611][ T650] ? __cfi_sel_write_load+0x10/0x10 [ 42.199974][ T650] ? bpf_lsm_file_permission+0xd/0x20 [ 42.205550][ T650] ? __cfi_sel_write_load+0x10/0x10 [ 42.212084][ T650] vfs_write+0x3c5/0xf90 [ 42.216606][ T650] ? __cfi_vfs_write+0x10/0x10 [ 42.221934][ T650] ? __kasan_check_write+0x18/0x20 [ 42.227443][ T650] ? mutex_lock+0x97/0x1d0 [ 42.232129][ T650] ? __cfi_mutex_lock+0x10/0x10 [ 42.237521][ T650] ? __fget_files+0x2c5/0x340 [ 42.243097][ T650] ksys_write+0x145/0x260 [ 42.247969][ T650] ? __cfi_ksys_write+0x10/0x10 [ 42.253474][ T650] ? __kasan_check_read+0x15/0x20 [ 42.259062][ T650] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.265700][ T650] __x64_sys_write+0x7f/0x90 [ 42.270687][ T650] x64_sys_call+0x271c/0x2ee0 [ 42.275671][ T650] do_syscall_64+0x57/0xf0 [ 42.280271][ T650] ? clear_bhb_loop+0x50/0xa0 [ 42.285156][ T650] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.291407][ T650] RIP: 0033:0x7f2597f9c819 [ 42.295898][ T650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.316500][ T650] RSP: 002b:00007f2598d8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 42.325292][ T650] RAX: ffffffffffffffda RBX: 00007f2598216090 RCX: 00007f2597f9c819 [ 42.325370][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 42.334022][ T650] RDX: 0000000000006000 RSI: 0000200000000000 RDI: 0000000000000003 [ 42.340711][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7 [ 42.347740][ T650] RBP: 00007f2598032c91 R08: 0000000000000000 R09: 0000000000000000 [ 42.347761][ T650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.361712][ T9] usb 4-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 42.368458][ T650] R13: 00007f2598216128 R14: 00007f2598216090 R15: 00007fff7dc7c198 [ 42.368485][ T650] [ 42.377949][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.388044][ T650] ---[ end trace 0000000000000000 ]--- [ 42.388177][ T313] usb 1-1: device descriptor read/64, error -71 [ 42.397441][ T650] SELinux: failed to load policy [ 42.427590][ T9] usb 4-1: Product: syz [ 42.432488][ T9] usb 4-1: Manufacturer: syz [ 42.438493][ T9] usb 4-1: SerialNumber: syz [ 42.655842][ T313] usb 1-1: device descriptor read/64, error -71 [ 42.675753][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 42.687739][ T9] usb 4-1: USB disconnect, device number 7 [ 42.741926][ T319] udevd[319]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.911558][ T313] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 42.934153][ T313] usb 1-1: device descriptor read/8, error -71 [ 43.072595][ T313] usb 1-1: device descriptor read/8, error -71 [ 43.327212][ T313] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 43.640842][ T306] usb 2-1: USB disconnect, device number 9 [ 43.774906][ T313] usb 1-1: device not accepting address 12, error -71 [ 43.782635][ T313] usb 1-1: USB disconnect, device number 12