last executing test programs: 4.53088682s ago: executing program 0 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 4.401155922s ago: executing program 0 (id=107): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x41, 0x1, @tid=r1}, &(0x7f0000000100)) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(r1, 0x0, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r7, 0x6, 0x23, &(0x7f0000000040)=""/48, &(0x7f0000000200)=0x30) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x4052, r3, 0xffffd000) close(r3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 3.550263615s ago: executing program 0 (id=118): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000f00)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x110, 0x110, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@local, @local, 0xffffffff, 0xff, 0x10, 0x8, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x527, 0x6f6, 0x7, 0x5, 0x2, 0x1, 'batadv_slave_0\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x2e8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @local, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x81, 0x5, 0x7, 0x0, 0x0, "7d3bd512c5919dcea6d82998b97246930085feee229b348b7f4226f29294182c659a0ef73a4797edb0aff0ed46ad7b17a85bfce07ee64266c2c40edd8302cce4"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") sendmmsg$inet6(r0, &(0x7f0000004700)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x2b4, @remote, 0xc}, 0x1c, 0x0}}], 0x1, 0x80040c4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) fsync(r3) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @multicast2}, {0x1, @random="3e20d54e118b"}, 0x2, {0x2, 0x4e20, @local}, 'vlan0\x00'}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000001e0100"]) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r8 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mreq(r8, 0x29, 0x24, &(0x7f00000008c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'ip6gretap0\x00', 0x401}) 2.548479001s ago: executing program 1 (id=126): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x43, 0x1c9) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/73, 0x49}], 0x1) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000063000/0x3000)=nil, 0x3000, 0x2, 0x10010, r4, 0x58ed7000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x2, 0x8, 0x4}}, 0x28) 1.705140974s ago: executing program 1 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M']) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 1.693551324s ago: executing program 1 (id=132): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 1.621343965s ago: executing program 1 (id=133): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x27) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) 1.620176485s ago: executing program 1 (id=135): r0 = socket$netlink(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = getpgid(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) sendmsg$netlink(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x790}], 0x1, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, 0xee01}}}], 0x20, 0x40000}, 0x400c810) r7 = getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r9, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x7, r10, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r11, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getpgrp(0xffffffffffffffff) tkill(r13, 0x11) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003840)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) r15 = getpid() r16 = getuid() stat(&(0x7f0000003940)='./file0\x00', &(0x7f0000003980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)={0x14c4, 0x27, 0x200, 0x70bd26, 0x25dfdbfc, "", [@nested={0x32, 0x2d, 0x0, 0x1, [@typed={0x8, 0x116, 0x0, 0x0, @u32=0xfffffffe}, @typed={0x8, 0xc6, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x136, 0x0, 0x0, @ipv4=@remote}, @generic="5dcfc38d8ef979df1100", @nested={0x4, 0x2}, @nested={0x4, 0x4b}, @nested={0x4, 0xdb}]}, @typed={0x4, 0xdb}, @typed={0x8, 0x29, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x100c, 0x77, 0x0, 0x1, [@generic="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", @nested={0x4, 0x104}, @nested={0x4, 0x9b}]}, @nested={0x207, 0x53, 0x0, 0x1, [@generic="60524c56586d535c28e26f51bd4f3caa8d48decb8a4db3bbaf3ec1d3c342f9dac592b3718f2ee40cc693682c297fb25b3be33ddea8ea544a3be232484fe4ad24ff4a51d04e848d697aa90649ce3bb4a0a40a7a4a85ba9bc00f045dfb6866e0e1510c84e44f82d96ba21474", @nested={0x4, 0x10b}, @generic="b9c057ac7a1e8e1bc0d378aacdbd8300b776eca99852120423f5bacad6c469307680e742e6fadfdf663d509580ab9434486c512d9e0f25dc7c3ce0a6", @nested={0x4, 0x130}, @generic="f5559a7f8fe88a86475d385b23d9a0bd85b6579ec38d8cf560d1cd13e245613bdaf89d20ad6bf97992ea7818a7ea881e4969e4514b8c513b82ae982204e030ff6aae7b60b91fd883bb7f9d399ca6c4b4b9617b9b07ea8301", @generic="68baa92fe386eb67552eba349460a4749e738ef24f50de55c4ef3e0baf8a9b730d3123662fb497c3299315566d851b3dd1320b191d1724f0a9081ff568ad2423ef9c5f9a1ea709b232490349ace4d4f194f968b692358890af4ae0ac797650168e84865effb2d8e32b123c7fab80b25ad502d6e3ed6321642c4d4da3aefa09241b6ae07bf5bf48c9e1dccf9d21aa7621372a2f97f53e4da58aad4c3c08e2ab31f0878984d1fd69570569831d5f93d1de4d18053f7477869482b46745288e21f9bd8514a45c3685f2ca3729f90edef6961208223416d11fe4290547adf0fb131ea60e228cd9e8a49da7c525817ff064fc", @typed={0xa, 0x136, 0x0, 0x0, @str='\\\xd9(@*\x00'}]}, @typed={0x4, 0xd3}, @nested={0xce, 0x68, 0x0, 0x1, [@nested={0x4, 0xf6}, @nested={0x4, 0x117}, @generic="586f7685774dd2ea8f4725fd60ce7de43d65a9f5bd6de187c51c7027cecb5a8b1b2822636c9d76dd48d8a2f50372c968c43ca89d2c2e67f46fc7fb65607ed44d28b33be8aecea6f754ec7d36bdc5c0755bc57b79e389f1e12d998a1156038837b47c44c026112dc2c0ac86d3e63e11c85d316e5d4894bf2adbcadab15ffa0eec7dea4234", @generic="2a54efc1e034fee07bcf6e32fbee2340b7113bf5d8d676784673c9977db419717199da8e0a39fa234b02327ea09bb09e7add58f40dd1905511be", @nested={0x4, 0x12c}]}, @typed={0x8, 0x86, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="dbf0874490c24fd27cc6650509a18e8837ed76d909c08bdec2bfb5b62f33885c79ad9aa1f7df6c56edf34ef63912d1f1207f3756ecc18016661b77acc8c451104aec28161b26c0e4c542594cdb6b0677285cdc818dd374160334952f9778d46bc6c044bd62f4e338379289ed6a40d82c92b6ee9c5f0211a0265a245a9302ce2dac2c8d3a8e126e7ba6506c3fc9e904d5", @generic="d93b37fd9d616ac56fc8100a52895bd13fd65c7d348762d0f1d9e10ba66157e2ddd84ef8e5fc9fde5b718fb6fcdccbf2ded9bbb2171000a6103bb1173c086165ae7a7b86bffbc084a71dff9bd5a60534bcda7029d35aea969486358c3193fa9315676d79ada530126d2b8e2ef7ebb420937e5b7ec46b2ec3e1df3764e8bae03834348bd56e788be8f2def1452c2ffc12f759fa2488f5ab26c5fea5fa25432d06abf7a72e46461b8f734403f005fe03075fb278d33f7dcd45e1b7bb7e942b9402577b758adf5f422db1717f50a860b02b195fd27330ea88655f0a7891c8e58f3368aa1aa83ae16917e15de1c5507964a17d"]}, 0x14c4}], 0x1, &(0x7f0000003a00)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0xa0, 0x40002}, 0x41) r18 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2040, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r18, 0x40087705, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e0021655f0000000000000007"], 0x14}}, 0x0) 1.582214666s ago: executing program 1 (id=137): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400), 0x2000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='children\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x40, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 1.456876657s ago: executing program 0 (id=140): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmmsg(r0, &(0x7f0000001300)=[{{&(0x7f00000000c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/198, 0xc6}, {&(0x7f0000000240)=""/73, 0x49}], 0x2, &(0x7f0000000300)=""/50, 0x32}, 0x2}, {{&(0x7f0000000340)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000900)=[{&(0x7f00000003c0)=""/185, 0xb9}, {&(0x7f0000000480)=""/197, 0xc5}, {&(0x7f0000000580)=""/212, 0xd4}, {&(0x7f0000000680)=""/6, 0x6}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/13, 0xd}, {&(0x7f0000000800)=""/222, 0xde}], 0x7}, 0x5}, {{&(0x7f0000001440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/56, 0x38}, {&(0x7f0000000a40)=""/82, 0x52}, {&(0x7f0000000ac0)=""/21, 0x15}, {&(0x7f0000000b00)=""/108, 0x6c}, {&(0x7f0000000b80)=""/36, 0x24}], 0x5, &(0x7f0000000c40)=""/155, 0x9b}, 0x8}, {{&(0x7f0000000d00)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000d80)=""/239, 0xef}, {&(0x7f0000000e80)=""/37, 0x25}], 0x2, &(0x7f0000000f00)=""/97, 0x61}, 0x2}, {{&(0x7f0000000f80)=@caif=@dbg, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001000)=""/65, 0x41}, {&(0x7f0000001080)=""/165, 0xa5}, {&(0x7f0000001140)=""/22, 0x16}, {&(0x7f0000001180)}], 0x4, &(0x7f0000001200)=""/40, 0x28}, 0x1ff}], 0x5, 0x2020, &(0x7f0000001240)={0x77359400}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000300)=ANY=[@ANYBLOB=',msize=0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xff, 0x9}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101200, 0x160) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) syslog(0x4, &(0x7f0000000000)=""/181, 0xb5) syslog(0x3, &(0x7f00000012c0)=""/14, 0xe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000021, 0x0, 0x8}]}) bind$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @none, 0x5}, 0xa) 581.229321ms ago: executing program 0 (id=154): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r3, 0x4010e501, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r7, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0xff, 0x0, 0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000001400)={0xa4, 0x0, &(0x7f0000000340)=[@dead_binder_done, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x6, 0x1, 0xd}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x400}, @increfs, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x5, 0x2, 0x5}, @fda={0x66646185, 0x2, 0x1, 0xd}, @flat=@weak_handle={0x77682a85, 0x10a, 0x3}}, &(0x7f0000000240)={0x0, 0x20, 0x40}}}], 0x1000, 0x0, &(0x7f0000000400)="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"}) close_range(r2, 0xffffffffffffffff, 0x0) 275.316656ms ago: executing program 0 (id=155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x8000000000, 0x1, 0x1, 0x8, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0xe, 0x0, 0x6, 0x0, 0x49], 0xdddd1000, 0x1c6256}) ioctl$KVM_RUN(r2, 0xae80, 0x0) epoll_create(0x3) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000182d9c103009130a447601020309040f3801ffff0000"], 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_DESTROY(r7, 0x5502) getpeername$tipc(r6, 0x0, 0x0) r8 = dup(r5) syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0) r9 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r9) write$FUSE_BMAP(r8, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) write$FUSE_NOTIFY_INVAL_INODE(r8, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x0, 0x6, 0x5}}, 0x28) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2000000, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="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"]) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a"], 0x38}}, 0x2040) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r3) sendmsg$SMC_PNETID_GET(r12, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20600000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="02002dbd7000ffdbdf254000000000000000687372300005000000000000000000001400020076657468315f746f5f626174616476000900010073797a3200000000140002006e657464657673696d30000000000000140002007665746830000000000500040001000000"], 0x78}, 0x1, 0x0, 0x0, 0x45}, 0x32040000) 193.313097ms ago: executing program 2 (id=157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 161.039957ms ago: executing program 2 (id=158): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) 93.212089ms ago: executing program 2 (id=160): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0x6dc11887e1201f73, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7f90c00c0d6cbed698b838143ace10cd879c23cecbe4a6077081d2a6c688f9d012d72db08807ba5a27a358c1775bd402a5c36cce4d2ef87ec88df833ee5620ca0788d8a96a7ef4b605a2cee3a8160ad04d951d5ce5d8f8ec067d36b5b7a1da38fc8b06b566dcca370913adfb2388d95697ce26f11704000000230e87a5c183178561dac6eb6eda7afb162393d325a4e674ce7b5d1d032dca86183ccedefd5f4e23a031", @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020076657468315f746f5f626f6e6400000005000600490000000500070004000000"], 0x3c}}, 0x0) ioctl$TCXONC(r0, 0x80045440, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000001100)=0x96, 0x7) sendto$inet6(r4, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "06f001ca438b17bf", "9cebfc35a7f6c3572ca63ca54d3b59af571e70f8ee6e2d1686609535b170bc47", "fc24bdee", "0bb6b83208e3c2c5"}, 0x38) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r6, 0x0, 0x1a, &(0x7f00000000c0)=0x1, 0x4) 92.996649ms ago: executing program 3 (id=161): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e00011b681093aed6ee972d21003e002f2b26e12fe0"], 0x1c}], 0x1, 0x0, 0x0, 0xa6}, 0x0) 92.651269ms ago: executing program 2 (id=162): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@empty, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100001, 0x6, 0x7c22, 0x100, 0x14003, 0x180107, r4}) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x3) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x80000, @dev={0xfe, 0x80, '\x00', 0x13}, 0x101}, 0x1c) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=@acquire={0x128, 0x17, 0x1, 0xfbfffffe, 0x0, {{@in=@private=0xa0100ff}, @in=@broadcast, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x84}, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x10, 0x4, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x4, 0x8000000, 0x9}, {0x10, 0x0, 0x0, 0xa}, 0x9, 0x6e6bba, 0x2}, 0x400}}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x2040, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) 91.150878ms ago: executing program 3 (id=163): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@remote, 0xffff, 0x4000, 0xff80, 0x7fff, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {}, {}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2}}]}, 0x154}}, 0x0) 82.014859ms ago: executing program 3 (id=164): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffe, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 72.575919ms ago: executing program 2 (id=165): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200001, 0xad) write$selinux_load(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75787e34d556102ddeaad1bc47e9153712f232476897e403b70e21864e8255c64d091081499683222ddb8d2422efd11637a7a498b8d36bbabb6db7d2377032176136f18c8989875997dab873853a67d0ce86a2e2d3c31520c626fddb068138606fbf9b8022f2d97cd5b0d24db516334ab56107fee5b575287d086f0370f2f3a0d1b4148683437fd4659f08ecc1d9a4ec38e8f96480a4be71bd728d06c8555f12a69d0636c590f512063f373dd953ed86bf47becbef7e852cbe1d54946e5ba70937e89c9616baabdd0448c0e3b78673b83619889c01bd0cff84bb07d78e44734cbdcafad22b092fe08a0c77515d7a35e150d0481b4987a0c2552eec71f00ec857616957151292fbf7fce448227647aa6d837f57ff80a078210d4105ac29472a7dd5f903513e13f7a84d6a3361893af4308ec66cf990ce81cbf2461a32150000000000"], 0x98) (async) close(r1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630e}, @release], 0x0, 0x0, 0x0}) 25.3089ms ago: executing program 3 (id=166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 24.76718ms ago: executing program 2 (id=167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r2, 0x3, r1, 0x6}) socket$inet6(0xa, 0x2, 0x0) close(0x3) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f00000002c0)=ANY=[@ANYBLOB='\b\v'], 0x68) 19.60632ms ago: executing program 3 (id=168): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) 0s ago: executing program 3 (id=169): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x484, 0x0, 0x4}]}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@remote, 0xffff, 0x4000, 0x0, 0x7fff, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {}, {}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'pcbc(fcrypt)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in6=@private2}}]}, 0x154}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.166' (ED25519) to the list of known hosts. [ 21.335586][ T36] audit: type=1400 audit(1750481239.080:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.336553][ T281] cgroup: Unknown subsys name 'net' [ 21.358225][ T36] audit: type=1400 audit(1750481239.080:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.385813][ T36] audit: type=1400 audit(1750481239.110:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.385962][ T281] cgroup: Unknown subsys name 'devices' [ 21.572242][ T281] cgroup: Unknown subsys name 'hugetlb' [ 21.577882][ T281] cgroup: Unknown subsys name 'rlimit' [ 21.749098][ T36] audit: type=1400 audit(1750481239.490:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.772357][ T36] audit: type=1400 audit(1750481239.490:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.792266][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.797292][ T36] audit: type=1400 audit(1750481239.490:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.828907][ T36] audit: type=1400 audit(1750481239.550:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.843904][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.854283][ T36] audit: type=1400 audit(1750481239.550:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.888628][ T36] audit: type=1400 audit(1750481239.590:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.914226][ T36] audit: type=1400 audit(1750481239.590:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.124893][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.131996][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.139105][ T288] bridge_slave_0: entered allmulticast mode [ 23.145343][ T288] bridge_slave_0: entered promiscuous mode [ 23.152677][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.159721][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.166818][ T288] bridge_slave_1: entered allmulticast mode [ 23.173029][ T288] bridge_slave_1: entered promiscuous mode [ 23.236051][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.243157][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.250244][ T289] bridge_slave_0: entered allmulticast mode [ 23.256464][ T289] bridge_slave_0: entered promiscuous mode [ 23.262620][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.269620][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.276705][ T289] bridge_slave_1: entered allmulticast mode [ 23.283060][ T289] bridge_slave_1: entered promiscuous mode [ 23.291637][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.298666][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.305822][ T290] bridge_slave_0: entered allmulticast mode [ 23.311991][ T290] bridge_slave_0: entered promiscuous mode [ 23.328112][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.335185][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.342379][ T290] bridge_slave_1: entered allmulticast mode [ 23.348489][ T290] bridge_slave_1: entered promiscuous mode [ 23.406601][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.413715][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.421103][ T291] bridge_slave_0: entered allmulticast mode [ 23.427181][ T291] bridge_slave_0: entered promiscuous mode [ 23.436740][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.443821][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.450886][ T291] bridge_slave_1: entered allmulticast mode [ 23.457160][ T291] bridge_slave_1: entered promiscuous mode [ 23.528102][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.535163][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.556262][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.563348][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.570647][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.577674][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.624729][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.632154][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.639579][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.655879][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.662958][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.671038][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.678070][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.715560][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.722633][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.735407][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.742481][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.761280][ T288] veth0_vlan: entered promiscuous mode [ 23.780211][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.787255][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.802993][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.810047][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.818022][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.825054][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.834307][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.841350][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.849083][ T288] veth1_macvtap: entered promiscuous mode [ 23.886865][ T289] veth0_vlan: entered promiscuous mode [ 23.910187][ T289] veth1_macvtap: entered promiscuous mode [ 23.932531][ T291] veth0_vlan: entered promiscuous mode [ 23.939739][ T290] veth0_vlan: entered promiscuous mode [ 23.946070][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.951786][ T290] veth1_macvtap: entered promiscuous mode [ 23.986114][ T291] veth1_macvtap: entered promiscuous mode [ 24.033001][ T310] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.131801][ T331] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET) [ 24.152389][ T334] netlink: 'syz.1.10': attribute type 12 has an invalid length. [ 24.163678][ T331] kvm: emulating exchange as write [ 24.279916][ T340] FAULT_INJECTION: forcing a failure. [ 24.279916][ T340] name failslab, interval 1, probability 0, space 0, times 1 [ 24.292919][ T340] CPU: 0 UID: 0 PID: 340 Comm: syz.3.13 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 24.292953][ T340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 24.292964][ T340] Call Trace: [ 24.292970][ T340] [ 24.292977][ T340] __dump_stack+0x21/0x30 [ 24.293003][ T340] dump_stack_lvl+0x10c/0x190 [ 24.293024][ T340] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.293045][ T340] ? __asan_memcpy+0x5a/0x80 [ 24.293066][ T340] dump_stack+0x19/0x20 [ 24.293086][ T340] should_fail_ex+0x3d9/0x530 [ 24.293107][ T340] should_failslab+0xac/0x100 [ 24.293131][ T340] kmem_cache_alloc_node_noprof+0x45/0x3b0 [ 24.293152][ T340] ? __alloc_skb+0x10c/0x370 [ 24.293176][ T340] __alloc_skb+0x10c/0x370 [ 24.293198][ T340] alloc_skb_with_frags+0xce/0x8b0 [ 24.293221][ T340] ? __cfi_selinux_file_open+0x10/0x10 [ 24.293250][ T340] sock_alloc_send_pskb+0x858/0x990 [ 24.293277][ T340] ? __kasan_check_write+0x18/0x20 [ 24.293299][ T340] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 24.293327][ T340] ? unwind_get_return_address+0x51/0x90 [ 24.293346][ T340] packet_sendmsg+0x39bf/0x56e0 [ 24.293369][ T340] ? avc_has_perm_noaudit+0x268/0x360 [ 24.293390][ T340] ? security_cred_alloc_blank+0x1d0/0x220 [ 24.293417][ T340] ? kstrtouint_from_user+0xfb/0x150 [ 24.293436][ T340] ? __x64_sys_openat+0x13a/0x170 [ 24.293454][ T340] ? x64_sys_call+0xe69/0x2ee0 [ 24.293477][ T340] ? selinux_socket_sendmsg+0x284/0x380 [ 24.293498][ T340] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 24.293518][ T340] ? __kasan_check_write+0x18/0x20 [ 24.293537][ T340] ? proc_fail_nth_write+0x17e/0x210 [ 24.293556][ T340] ? __cfi_packet_sendmsg+0x10/0x10 [ 24.293579][ T340] ? notify_change+0x650/0xee0 [ 24.293598][ T340] ? check_stack_object+0x107/0x140 [ 24.293620][ T340] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 24.293647][ T340] ? security_socket_sendmsg+0x33/0xd0 [ 24.293668][ T340] __sys_sendto+0x66a/0x6f0 [ 24.293693][ T340] ? __cfi___sys_sendto+0x10/0x10 [ 24.293727][ T340] ? __kasan_check_write+0x18/0x20 [ 24.293749][ T340] ? __cfi_ksys_write+0x10/0x10 [ 24.293771][ T340] __x64_sys_sendto+0xe9/0x100 [ 24.293795][ T340] x64_sys_call+0x2c2c/0x2ee0 [ 24.293818][ T340] do_syscall_64+0x58/0xf0 [ 24.293842][ T340] ? clear_bhb_loop+0x35/0x90 [ 24.293868][ T340] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.293893][ T340] RIP: 0033:0x7f9482d8e929 [ 24.293909][ T340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 24.293924][ T340] RSP: 002b:00007f9483b27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 24.293946][ T340] RAX: ffffffffffffffda RBX: 00007f9482fb5fa0 RCX: 00007f9482d8e929 [ 24.293960][ T340] RDX: 000000000000000e RSI: 00002000000000c0 RDI: 0000000000000003 [ 24.293972][ T340] RBP: 00007f9483b27090 R08: 0000200000000540 R09: 0000000000000014 [ 24.293985][ T340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 24.293997][ T340] R13: 0000000000000000 R14: 00007f9482fb5fa0 R15: 00007ffd7795e418 [ 24.294012][ T340] [ 24.430740][ T305] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.436586][ T321] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.560584][ T45] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 24.565949][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.600589][ T305] usb 2-1: Using ep0 maxpacket: 16 [ 24.645099][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.656029][ T305] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 24.669218][ T305] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 24.678402][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.687149][ T305] usb 2-1: config 0 descriptor?? [ 24.721507][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 24.733034][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 24.744564][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 24.753659][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.760574][ T321] usb 3-1: Using ep0 maxpacket: 32 [ 24.762896][ T45] usb 4-1: config 0 descriptor?? [ 24.771636][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.772212][ T342] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 24.783137][ T10] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 24.791199][ T45] hub 4-1:0.0: USB hub found [ 24.799659][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.811791][ T321] usb 3-1: config 1 interface 0 altsetting 158 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 24.823697][ T321] usb 3-1: config 1 interface 0 has no altsetting 0 [ 24.830700][ T10] usb 1-1: config 0 descriptor?? [ 24.837584][ T321] usb 3-1: New USB device found, idVendor=047f, idProduct=c056, bcdDevice= 0.40 [ 24.846660][ T321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.854713][ T321] usb 3-1: Product: ͦ鞫ｗ爍졥厄䙢쁹ᅋ鰗ญ네ସ븰収㴎ᔯ峎졶㩓쪝躒ꇴᤀౝ뙸뢆䶳컯䐍᮫컁挞䗲ꆺ싒櫱穦醣牟枱ﱒ݉㿀썸觟輰㑠έ࿸톁虺촓᥋ꍆ잰꜈껪 [ 24.874325][ T321] usb 3-1: Manufacturer: ц [ 24.878874][ T321] usb 3-1: SerialNumber: 肋뭴苴跟﭂ꭩ⯌概匈蚭鲢ꔐµ箳뾈텰떫䩩⼷巅뻺송ﱔ୍碡雄呏㐼쇨ﴉ蓧狤䪀찞⑒춼怛ᅍ [ 24.900328][ T338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 24.913747][ T338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 24.995177][ T45] hub 4-1:0.0: 2 ports detected [ 25.102753][ T312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.112818][ T312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.128456][ T305] HID 045e:07da: Invalid code 65791 type 1 [ 25.134371][ T321] usbhid 3-1:1.0: can't add hid device: -71 [ 25.134431][ T321] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 25.145269][ T305] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input4 [ 25.153103][ T321] usb 3-1: USB disconnect, device number 2 [ 25.167434][ T305] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 25.238650][ T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 25.246515][ T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 25.254343][ T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 25.261971][ T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 25.269376][ T10] playstation 0003:054C:0DF2.0002: unknown main item tag 0x0 [ 25.277527][ T10] playstation 0003:054C:0DF2.0002: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 25.838874][ T10] playstation 0003:054C:0DF2.0002: Failed to retrieve feature with reportID 5: -71 [ 25.848241][ T10] playstation 0003:054C:0DF2.0002: Failed to retrieve DualSense calibration info: -71 [ 25.857874][ T10] playstation 0003:054C:0DF2.0002: Failed to get calibration data from DualSense [ 25.867454][ T10] playstation 0003:054C:0DF2.0002: Failed to create dualsense. [ 25.875858][ T10] playstation 0003:054C:0DF2.0002: probe with driver playstation failed with error -71 [ 25.887685][ T10] usb 1-1: USB disconnect, device number 2 [ 25.942130][ T353] fido_id[353]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 25.946792][ T305] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 26.041356][ T321] usb 2-1: USB disconnect, device number 2 [ 26.110593][ T305] usb 3-1: Using ep0 maxpacket: 8 [ 26.116589][ T305] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 26.125037][ T305] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 26.133544][ T305] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 26.142647][ T305] usb 3-1: config 250 has no interface number 0 [ 26.148926][ T305] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 26.160953][ T305] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 26.171452][ T305] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 26.182242][ T305] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 26.192542][ T305] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 26.206092][ T305] usb 3-1: config 250 interface 228 has no altsetting 0 [ 26.214012][ T305] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 26.223084][ T305] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 26.231471][ T305] usb 3-1: Product: syz [ 26.235635][ T305] usb 3-1: SerialNumber: syz [ 26.241721][ T305] hub 3-1:250.228: bad descriptor, ignoring hub [ 26.247982][ T305] hub 3-1:250.228: probe with driver hub failed with error -5 [ 26.429863][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 26.429876][ T36] audit: type=1400 audit(1750481500.171:149): avc: denied { execute } for pid=358 comm="syz.0.18" path="/3/cgroup.stat" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.461398][ T305] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 26.474012][ T366] netlink: 'syz.0.20': attribute type 3 has an invalid length. [ 26.511876][ T36] audit: type=1400 audit(1750481500.261:150): avc: denied { read } for pid=367 comm="syz.0.21" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.532828][ T36] audit: type=1400 audit(1750481500.261:151): avc: denied { open } for pid=367 comm="syz.0.21" path="net:[4026532298]" dev="nsfs" ino=4026532298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 26.556162][ T36] audit: type=1400 audit(1750481500.261:152): avc: denied { setopt } for pid=367 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.576110][ T36] audit: type=1400 audit(1750481500.261:153): avc: denied { bind } for pid=367 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.596153][ T36] audit: type=1400 audit(1750481500.261:154): avc: denied { write } for pid=367 comm="syz.0.21" path="socket:[4264]" dev="sockfs" ino=4264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.619488][ T36] audit: type=1400 audit(1750481500.321:155): avc: denied { read write } for pid=370 comm="syz.1.22" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.642547][ T36] audit: type=1400 audit(1750481500.321:156): avc: denied { open } for pid=370 comm="syz.1.22" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.643141][ T321] usb 4-1: USB disconnect, device number 2 [ 26.665521][ T305] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 26.684875][ T36] audit: type=1400 audit(1750481500.321:157): avc: denied { mounton } for pid=370 comm="syz.1.22" path="/4/file0" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.707215][ T36] audit: type=1400 audit(1750481500.421:158): avc: denied { read write } for pid=351 comm="syz.2.15" name="lp0" dev="devtmpfs" ino=452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 26.752258][ T376] TCP: TCP_TX_DELAY enabled [ 26.790281][ T383] capability: warning: `syz.0.25' uses deprecated v2 capabilities in a way that may be insecure [ 27.050612][ T305] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.203891][ T305] usb 1-1: config 0 has no interfaces? [ 27.210156][ T305] usb 1-1: config 0 has no interfaces? [ 27.216670][ T305] usb 1-1: config 0 has no interfaces? [ 27.224357][ T305] usb 1-1: config 0 has no interfaces? [ 27.231178][ T305] usb 1-1: config 0 has no interfaces? [ 27.237934][ T305] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 27.247872][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.256489][ T305] usb 1-1: config 0 descriptor?? [ 27.339195][ T394] input: syz1 as /devices/virtual/input/input5 [ 27.898703][ T401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:35 [ 27.909266][ T403] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@qkp [ 27.909266][ T403] C<+ [ 28.107038][ T405] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 28.764298][ T414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 28.819421][ T9] usb 3-1: USB disconnect, device number 3 [ 28.835572][ T9] usblp0: removed [ 28.891150][ T424] syzkaller0: entered promiscuous mode [ 28.896753][ T424] syzkaller0: entered allmulticast mode [ 29.072904][ T440] dummy0: entered allmulticast mode [ 29.154582][ T444] syzkaller0: entered promiscuous mode [ 29.162401][ T444] syzkaller0: entered allmulticast mode [ 29.309906][ T458] 9pnet: Could not find request transport: fl [ 29.344792][ T459] tipc: Started in network mode [ 29.358646][ T459] tipc: Node identity d2e4d86b9ea7, cluster identity 4711 [ 29.365964][ T459] tipc: Enabled bearer , priority 0 [ 29.380137][ T459] tipc: Resetting bearer [ 29.394376][ T461] fuse: Unknown parameter 'fd-0x0000000000000004' [ 29.410174][ T459] tipc: Disabling bearer [ 29.540757][ T468] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42519 sclass=netlink_xfrm_socket pid=468 comm=syz.3.62 [ 29.648263][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.751825][ T474] syzkaller0: entered promiscuous mode [ 29.769555][ T474] syzkaller0: entered allmulticast mode [ 29.808070][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 29.813219][ T321] usb 1-1: USB disconnect, device number 3 [ 29.839131][ T45] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 29.857563][ T45] usb 3-1: config 0 has no interface number 0 [ 29.864056][ T45] usb 3-1: config 0 interface 184 has no altsetting 0 [ 29.913591][ T480] incfs: ino conflict with backing FS 1 [ 29.919479][ T45] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 29.934372][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.954429][ T45] usb 3-1: Product: syz [ 29.958876][ T45] usb 3-1: Manufacturer: syz [ 29.963501][ T45] usb 3-1: SerialNumber: syz [ 29.972533][ T45] usb 3-1: config 0 descriptor?? [ 29.978670][ T45] smsc75xx v1.0.0 [ 30.051822][ T501] netlink: 'syz.0.74': attribute type 12 has an invalid length. [ 30.091610][ T506] netlink: 'syz.0.76': attribute type 4 has an invalid length. [ 30.154839][ T512] netlink: 88 bytes leftover after parsing attributes in process `syz.3.79'. [ 30.171625][ T514] ======================================================= [ 30.171625][ T514] WARNING: The mand mount option has been deprecated and [ 30.171625][ T514] and is ignored by this kernel. Remove the mand [ 30.171625][ T514] option from the mount to silence this warning. [ 30.171625][ T514] ======================================================= [ 30.206713][ T514] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 30.257789][ T321] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.302337][ T520] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.357559][ T343] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.387563][ T321] usb 2-1: device descriptor read/64, error -71 [ 30.508421][ T343] usb 1-1: config index 0 descriptor too short (expected 83, got 77) [ 30.516789][ T343] usb 1-1: config 1 interface 0 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 1023 [ 30.527151][ T343] usb 1-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 30.540718][ T343] usb 1-1: config 1 interface 0 has no altsetting 0 [ 30.548268][ T343] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.557660][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 30.565697][ T343] usb 1-1: SerialNumber: syz [ 30.571872][ T506] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 30.627290][ T321] usb 2-1: device descriptor read/64, error -71 [ 30.867049][ T321] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.984543][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 30.995049][ T343] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 31.005066][ T343] usb 1-1: USB disconnect, device number 4 [ 31.006918][ T321] usb 2-1: device descriptor read/64, error -71 [ 31.100820][ T529] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.100852][ T529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 31.191691][ T537] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 144, size: 118) [ 31.200822][ T537] rust_binder: Error while translating object. [ 31.211531][ T537] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.218329][ T537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:60 [ 31.276753][ T321] usb 2-1: device descriptor read/64, error -71 [ 31.287958][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 31.303776][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 31.313517][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 31.323828][ T45] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 31.333371][ T45] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 31.344587][ T45] usb 3-1: USB disconnect, device number 4 [ 31.368884][ T540] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 31.368908][ T540] rust_binder: Read failure Err(EFAULT) in pid:62 [ 31.377543][ T540] rust_binder: Write failure EFAULT in pid:62 [ 31.402773][ T321] usb usb2-port1: attempt power cycle [ 31.453928][ T543] mmap: syz.3.90 (543) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.484597][ T545] Zero length message leads to an empty skb [ 31.598530][ T558] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 31.607701][ T558] overlayfs: missing 'lowerdir' [ 31.635820][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 31.635838][ T36] audit: type=1400 audit(1750481505.375:204): avc: denied { setopt } for pid=561 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 31.661360][ T36] audit: type=1400 audit(1750481505.385:205): avc: denied { append } for pid=561 comm="syz.0.100" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.766245][ T321] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.787289][ T321] usb 2-1: device descriptor read/8, error -71 [ 31.917099][ T321] usb 2-1: device descriptor read/8, error -71 [ 32.045946][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.057707][ T36] audit: type=1400 audit(1750481505.806:206): avc: denied { setattr } for pid=569 comm="syz.3.104" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.165855][ T321] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 32.186844][ T321] usb 2-1: device descriptor read/8, error -71 [ 32.195783][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 32.201900][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.212942][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.222726][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 32.231808][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.241112][ T9] usb 3-1: config 0 descriptor?? [ 32.247680][ T9] hub 3-1:0.0: USB hub found [ 32.273497][ T579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.108'. [ 32.318695][ T321] usb 2-1: device descriptor read/8, error -71 [ 32.369748][ T36] audit: type=1400 audit(1750481506.116:207): avc: denied { create } for pid=585 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 32.477890][ T596] FAULT_INJECTION: forcing a failure. [ 32.477890][ T596] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 32.491473][ T596] CPU: 1 UID: 0 PID: 596 Comm: syz.3.113 Not tainted 6.12.23-syzkaller-gd9fd901baa98 #0 f1acc3ef52b3e732a05c4f7a2560722db90bb473 [ 32.491505][ T596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.491516][ T596] Call Trace: [ 32.491523][ T596] [ 32.491530][ T596] __dump_stack+0x21/0x30 [ 32.491558][ T596] dump_stack_lvl+0x10c/0x190 [ 32.491579][ T596] ? __cfi_dump_stack_lvl+0x10/0x10 [ 32.491602][ T596] dump_stack+0x19/0x20 [ 32.491622][ T596] should_fail_ex+0x3d9/0x530 [ 32.491643][ T596] should_fail_alloc_page+0xeb/0x110 [ 32.491669][ T596] __alloc_pages_noprof+0x19d/0x6c0 [ 32.491698][ T596] ? tls_tx_records+0x3be/0x610 [ 32.491718][ T596] ? tls_push_record+0x1e6b/0x3610 [ 32.491740][ T596] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 32.491758][ T596] ? ____sys_sendmsg+0x5db/0xa70 [ 32.491786][ T596] ? __x64_sys_sendmsg+0x1eb/0x2c0 [ 32.491803][ T596] ? do_syscall_64+0x58/0xf0 [ 32.491826][ T596] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.491856][ T596] __folio_alloc_noprof+0x14/0x80 [ 32.491875][ T596] folio_prealloc+0x46/0x240 [ 32.491901][ T596] do_pte_missing+0x1603/0x3e50 [ 32.491926][ T596] ? _copy_from_iter+0x922/0x14b0 [ 32.491953][ T596] ? pte_marker_clear+0x1b0/0x1b0 [ 32.491979][ T596] ? __pte_offset_map+0x1b0/0x230 [ 32.491999][ T596] ? pte_offset_map_rw_nolock+0xba/0x110 [ 32.492020][ T596] handle_mm_fault+0x1166/0x1b90 [ 32.492043][ T596] ? __kasan_check_write+0x18/0x20 [ 32.492066][ T596] ? __cfi_handle_mm_fault+0x10/0x10 [ 32.492091][ T596] ? follow_page_pte+0x4a3/0xb90 [ 32.492110][ T596] ? gup_must_unshare+0x1e0/0x1e0 [ 32.492127][ T596] ? vma_is_secretmem+0x11/0x50 [ 32.492147][ T596] __get_user_pages+0x1169/0x22d0 [ 32.492173][ T596] ? __kasan_check_write+0x18/0x20 [ 32.492196][ T596] ? populate_vma_page_range+0x230/0x230 [ 32.492222][ T596] ? kernel_text_address+0xa9/0xe0 [ 32.492242][ T596] ? __kernel_text_address+0x11/0x40 [ 32.492261][ T596] __gup_longterm_locked+0xcb1/0x1580 [ 32.492278][ T596] ? arch_stack_walk+0x10b/0x170 [ 32.492303][ T596] ? try_get_folio+0x249/0x2a0 [ 32.492322][ T596] gup_fast_fallback+0x12ae/0x14a0 [ 32.492359][ T596] ? get_user_pages_fast_only+0xc0/0xc0 [ 32.492387][ T596] ? __skb_to_sgvec+0x98a/0xad0 [ 32.492407][ T596] ? skb_copy_bits+0xfc/0x880 [ 32.492430][ T596] ? __asan_memcpy+0x5a/0x80 [ 32.492450][ T596] get_user_pages_fast+0x73/0xb0 [ 32.492476][ T596] __iov_iter_get_pages_alloc+0x38e/0x9f0 [ 32.492502][ T596] ? __skb_to_sgvec+0x9c4/0xad0 [ 32.492524][ T596] iov_iter_get_pages2+0x68/0xb0 [ 32.492549][ T596] tls_decrypt_sg+0x1919/0x34b0 [ 32.492573][ T596] ? decrypt_skb+0x90/0x90 [ 32.492593][ T596] ? tls_strp_msg_load+0x53d/0xa00 [ 32.492621][ T596] ? kasan_save_alloc_info+0x40/0x50 [ 32.492639][ T596] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 32.492660][ T596] ? security_inode_alloc+0x51/0x200 [ 32.492689][ T596] ? tls_rx_rec_wait+0x1f6/0x9c0 [ 32.492710][ T596] ? do_syscall_64+0x58/0xf0 [ 32.492732][ T596] ? tls_rx_reader_acquire+0x423/0x510 [ 32.492753][ T596] tls_decrypt_sw+0xb9/0x980 [ 32.492774][ T596] ? _raw_spin_unlock_bh+0x54/0x60 [ 32.492798][ T596] ? lock_sock_nested+0x1f5/0x290 [ 32.492818][ T596] ? signal_pending+0xc0/0xc0 [ 32.492839][ T596] ? process_rx_list+0x438/0xf20 [ 32.492859][ T596] ? __cfi_woken_wake_function+0x10/0x10 [ 32.492886][ T596] tls_rx_one_record+0x58/0x3f0 [ 32.492907][ T596] tls_sw_recvmsg+0xaa1/0x18e0 [ 32.492931][ T596] ? __cfi_tls_sw_recvmsg+0x10/0x10 [ 32.492951][ T596] ? selinux_socket_recvmsg+0x284/0x380 [ 32.492973][ T596] ? __cfi_selinux_socket_recvmsg+0x10/0x10 [ 32.492995][ T596] ? __cfi_tls_sw_recvmsg+0x10/0x10 [ 32.493014][ T596] inet6_recvmsg+0x248/0x4e0 [ 32.493040][ T596] ? is_bpf_text_address+0x17b/0x1a0 [ 32.493066][ T596] ? __cfi_inet6_recvmsg+0x10/0x10 [ 32.493090][ T596] ? kernel_text_address+0xa9/0xe0 [ 32.493110][ T596] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 32.493137][ T596] ? security_socket_recvmsg+0x3a/0xf0 [ 32.493159][ T596] sock_recvmsg+0x105/0x270 [ 32.493181][ T596] sock_read_iter+0x232/0x2f0 [ 32.493200][ T596] ? __cfi_sock_read_iter+0x10/0x10 [ 32.493221][ T596] ? selinux_file_permission+0x88b/0xb30 [ 32.493247][ T596] do_iter_readv_writev+0x4f2/0x6a0 [ 32.493271][ T596] ? vfs_iter_read+0x5f0/0x5f0 [ 32.493294][ T596] ? bpf_lsm_file_permission+0xd/0x20 [ 32.493314][ T596] vfs_readv+0x2fb/0xa50 [ 32.493340][ T596] ? do_readv+0x2d0/0x2d0 [ 32.493364][ T596] ? vfs_write+0x8ba/0xe80 [ 32.493389][ T596] do_readv+0x14d/0x2d0 [ 32.493414][ T596] ? generic_atomic_write_valid+0x1c0/0x1c0 [ 32.493440][ T596] ? __kasan_check_read+0x15/0x20 [ 32.493461][ T596] __x64_sys_readv+0x81/0x90 [ 32.493483][ T596] x64_sys_call+0x2a64/0x2ee0 [ 32.493507][ T596] do_syscall_64+0x58/0xf0 [ 32.493529][ T596] ? clear_bhb_loop+0x35/0x90 [ 32.493555][ T596] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.493580][ T596] RIP: 0033:0x7f9482d8e929 [ 32.493597][ T596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.493612][ T596] RSP: 002b:00007f9483b27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 32.493635][ T596] RAX: ffffffffffffffda RBX: 00007f9482fb5fa0 RCX: 00007f9482d8e929 [ 32.493649][ T596] RDX: 0000000000000001 RSI: 0000200000000e40 RDI: 0000000000000003 [ 32.493661][ T596] RBP: 00007f9483b27090 R08: 0000000000000000 R09: 0000000000000000 [ 32.493680][ T596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.493693][ T596] R13: 0000000000000000 R14: 00007f9482fb5fa0 R15: 00007ffd7795e418 [ 32.493708][ T596] [ 32.538248][ T321] usb usb2-port1: unable to enumerate USB device [ 32.658568][ T564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.661342][ T9] hub 3-1:0.0: 1 port detected [ 32.669010][ T564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.080550][ T9] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 33.087151][ T9] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 33.104767][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 33.112076][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 33.149748][ T610] netlink: 'syz.3.117': attribute type 12 has an invalid length. [ 33.166570][ T36] audit: type=1400 audit(1750481506.917:208): avc: denied { mount } for pid=611 comm="syz.3.119" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 33.188821][ T36] audit: type=1400 audit(1750481506.937:209): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 33.212049][ T36] audit: type=1400 audit(1750481506.957:210): avc: denied { setopt } for pid=615 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.284877][ T9] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 33.292971][ T9] usb 3-1: device reset changed ep0 maxpacket size! [ 33.300577][ T9] usb 3-1: USB disconnect, device number 5 [ 33.384707][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.535561][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.546516][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 33.555691][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.564224][ T10] usb 1-1: config 0 descriptor?? [ 33.584454][ T343] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.604405][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 33.734268][ T343] usb 4-1: Using ep0 maxpacket: 8 [ 33.740398][ T343] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 33.749779][ T343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.758296][ T343] usb 4-1: config 0 descriptor?? [ 33.764225][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 33.770905][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.781876][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.791777][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.804617][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 33.813939][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.822624][ T9] usb 3-1: config 0 descriptor?? [ 33.969021][ T343] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 33.979529][ T343] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 33.983197][ T10] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 34.001270][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input6 [ 34.012671][ T36] audit: type=1400 audit(1750481507.747:211): avc: denied { write } for pid=629 comm="syz.3.125" name="igmp" dev="proc" ino=4026532494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 34.014039][ T343] asix 4-1:0.0: probe with driver asix failed with error -71 [ 34.044566][ T343] usb 4-1: USB disconnect, device number 3 [ 34.107933][ T36] audit: type=1400 audit(1750481507.858:212): avc: denied { unlink } for pid=631 comm="syz.1.126" name="#1" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 34.130051][ T10] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 34.130107][ T36] audit: type=1400 audit(1750481507.858:213): avc: denied { mount } for pid=631 comm="syz.1.126" name="/" dev="overlay" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.302797][ T640] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.325363][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.325398][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.331698][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.338030][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.344346][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.350849][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.357209][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.363399][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.369748][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.376027][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.382661][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.389030][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.395331][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.401555][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.407827][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.414081][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.420284][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.426572][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.432837][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.439050][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.445332][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.445634][ T606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.451959][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.458325][ T606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.469928][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.481225][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.488586][ T606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.491314][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.504778][ T606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.505538][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.519822][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.526091][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.537694][ T9] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 34.540248][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.551470][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.554292][ T9] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 34.558053][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.572719][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.579005][ T9] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 34.579036][ T9] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 34.579082][ T9] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 34.585949][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.606775][ T9] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 34.607532][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.613800][ T9] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0 [ 34.620506][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.626598][ T9] hid-rmi 0003:06CB:81A7.0004: unbalanced collection at end of report description [ 34.633848][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.639868][ T9] hid-rmi 0003:06CB:81A7.0004: parse failed [ 34.649267][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.655639][ T9] hid-rmi 0003:06CB:81A7.0004: probe with driver hid-rmi failed with error -22 [ 34.662567][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.669458][ T321] usb 1-1: USB disconnect, device number 5 [ 34.676759][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.688669][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.695029][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.701318][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.707559][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.713861][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.720054][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.726355][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.732540][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.738854][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.745079][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.751350][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.757574][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.763813][ T606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 34.763864][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.780236][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.786452][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.792655][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.798998][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.805463][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.811800][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.818180][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.824593][ T640] rust_binder: Write failure EINVAL in pid:153 Stopping sshd: [ 34.831031][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.837536][ T640] rust_binder: Write failure EINVAL in pid:153 [ 34.846830][ T347] usb 3-1: USB disconnect, device number 6 stopped /usr/sbin/sshd (pid 200) OK [ 34.848132][ T640] rust_binder: Write failure EINVAL in pid:153 Stopping crond: [ 34.869543][ T640] rust_binder: Write failure EINVAL in pid:153 stopped /usr/sbin/crond (pid 193) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) Stopping network: [ 34.879548][ T640] rust_binder: Write failure EINVAL in pid:153 OK Stopping iptables: OK Stopping system message bus: [ 35.013133][ T666] rust_binder: Write failure EINVAL in pid:28 done [ 35.251367][ T696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 35.347428][ T707] rust_binder: Write failure EINVAL in pid:177 [ 35.347540][ T707] rust_binder: Read failure Err(EAGAIN) in pid:177 [ 35.354115][ T321] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 35.361680][ T707] rust_binder: Write failure EINVAL in pid:177 Stopping klogd: OK Stopping acpid: [ 35.372588][ T708] rust_binder: Read failure Err(EAGAIN) in pid:177 [ 35.532535][ T321] usb 2-1: Using ep0 maxpacket: 16 [ 35.545165][ T321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.556249][ T321] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.566207][ T321] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 35.579486][ T321] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 35.593968][ T321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.602617][ T321] usb 2-1: config 0 descriptor?? [ 36.014539][ T321] microsoft 0003:045E:07DA.0005: unknown main item tag 0x2 [ 36.026280][ T321] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 36.037481][ T321] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 36.045186][ T321] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 36.052638][ T321] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 36.062304][ T321] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 36.070037][ T321] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 36.079509][ T321] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 36.087690][ T321] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 36.120483][ T321] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input7 [ 36.137960][ T321] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK [ 36.595105][ T767] netlink: 'syz.3.163': attribute type 32 has an invalid length. umount: can't remount debugfs read-only [ 36.681445][ T343] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 36.700313][ T784] netlink: 'syz.3.169': attribute type 32 has an invalid length. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only Connection to 10.128.1.166 closed by remote host. The system is going down NOW! [ 36.735445][ T36] kauditd_printk_skb: 55 callbacks suppressed [ 36.735464][ T36] audit: type=1400 audit(1750481510.490:269): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2892]" dev="pipefs" ino=2892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Sent SIGTERM to all processes [ 36.798014][ T36] audit: type=1326 audit(1750481510.490:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=778 comm="syz.2.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f55f8e929 code=0x7fc00000 [ 36.922423][ T60] bridge_slave_1: left allmulticast mode [ 36.928090][ T60] bridge_slave_1: left promiscuous mode [ 36.933835][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.941232][ T60] bridge_slave_0: left allmulticast mode [ 36.946843][ T60] bridge_slave_0: left promiscuous mode [ 36.952439][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.973053][ T10] usb 2-1: USB disconnect, device number 7 [ 37.073433][ T60] veth1_macvtap: left promiscuous mode [ 37.078956][ T60] veth0_vlan: left promiscuous mode [ 37.314152][ T60] bridge_slave_1: left allmulticast mode [ 37.319797][ T60] bridge_slave_1: left promiscuous mode [ 37.325406][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.332889][ T60] bridge_slave_0: left allmulticast mode [ 37.338511][ T60] bridge_slave_0: left promiscuous mode [ 37.344175][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.351759][ T60] bridge_slave_1: left allmulticast mode [ 37.357384][ T60] bridge_slave_1: left promiscuous mode [ 37.362980][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.370228][ T60] bridge_slave_0: left allmulticast mode [ 37.375899][ T60] bridge_slave_0: left promiscuous mode [ 37.381535][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.389094][ T60] bridge_slave_1: left allmulticast mode [ 37.394760][ T60] bridge_slave_1: left promiscuous mode [ 37.400399][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.407738][ T60] bridge_slave_0: left allmulticast mode [ 37.413573][ T60] bridge_slave_0: left promiscuous mode [ 37.419137][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.692396][ T60] tipc: Left network mode [ 37.698620][ T60] veth1_macvtap: left promiscuous mode [ 37.704116][ T60] veth0_vlan: left promiscuous mode [ 37.709527][ T60] veth1_macvtap: left promiscuous mode [ 37.715017][ T60] veth0_vlan: left promiscuous mode [ 37.720451][ T60] veth1_macvtap: left promiscuous mode [ 37.725902][ T60] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 38.842808][ T785] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 38.849260][ T785] ACPI: PM: Preparing to enter system sleep state S5 [ 38.856092][ T785] kvm: exiting hardware virtualization [ 38.861563][ T785] reboot: Power down serialport: VM disconnected.