last executing test programs: 53.293413576s ago: executing program 1 (id=287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x30}, 0x4, 0x700000000000000}, 0x0) (async) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x43}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x716e036f329b30b1}, 0x20008880) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1810802, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) r8 = socket(0x11, 0xa, 0x3) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001111204600000a60c6eec00be140006"], 0xfdef) bind$can_raw(r8, &(0x7f0000000000), 0x10) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) (async) r12 = syz_open_dev$evdev(&(0x7f0000000000), 0x9, 0x109001) ioctl$EVIOCGVERSION(r12, 0x80044501, &(0x7f0000000040)=""/48) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) 53.292724156s ago: executing program 1 (id=289): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="dfff2abd7000fbdbdf2501"], 0x5c}, 0x1, 0x0, 0x0, 0x4004002}, 0x20040004) 53.248330767s ago: executing program 1 (id=290): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001a80)={[0x5]}, 0x8, 0x80000) setgid(0xee00) r1 = syz_clone(0x0, 0x0, 0x39, 0x0, 0x0, 0x0) get_robust_list(r1, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0500000015000000feffffff00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001060000000000000261000061bcf34b016813cf"], 0x48}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 53.170934788s ago: executing program 1 (id=291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000000)="b695", 0xfdef, 0x40, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) readv(r1, &(0x7f0000000240)=[{0x0, 0x16}, {&(0x7f0000000700)=""/205, 0xcd}, {&(0x7f0000000180)=""/110, 0x6e}], 0x3) socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r2, &(0x7f00000003c0)={@void, @val={0x1, 0x3, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@tcp={{0x6, 0x4, 0x1, 0x8, 0x2c, 0x68, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@rr={0x7, 0x3, 0x6}]}}, {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}}}}, 0x36) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mprotect(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1000000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 53.10944103s ago: executing program 1 (id=292): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x406, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) io_cancel(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r2) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="dfff2abd7000fbdbdf2501"], 0x5c}, 0x1, 0x0, 0x0, 0x4004002}, 0x20040004) 52.950655664s ago: executing program 1 (id=293): clock_getres(0xfffffffffffffffd, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x1, 0xca9a3b, &(0x7f00000001c0)={0x77359400}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='bRequestType=-', 0xe) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x1, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x1, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r3], 0x15) 37.919326477s ago: executing program 32 (id=293): clock_getres(0xfffffffffffffffd, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x1, 0xca9a3b, &(0x7f00000001c0)={0x77359400}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='bRequestType=-', 0xe) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x1, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x1, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX=r3], 0x15) 23.132553618s ago: executing program 2 (id=637): unshare(0x64050680) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00'}) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 23.05865177s ago: executing program 2 (id=639): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "985300"}, 0x10}}, 0xd209f6d814827b17) read(r0, &(0x7f0000002fc0)=""/52, 0x34) setpriority(0x0, 0x0, 0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000380), 0x0, 0x60040) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x101, 0x8, 0x4, 0x4}, {0x8, 0xdd, 0x0, 0x8ee}, {0x7fff, 0xf8, 0xb, 0xb13}]}) 22.997309722s ago: executing program 2 (id=640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x8000) (async, rerun: 64) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 64) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) 21.723497533s ago: executing program 2 (id=651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16, @ANYRESHEX], 0x15) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) 21.697573383s ago: executing program 2 (id=654): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) waitid(0x2, 0xffffffffffffffff, 0x0, 0x4000000b, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r2, r2, 0x9) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpid() ptrace$setsig(0x4203, r2, 0x1, &(0x7f00000000c0)={0x16, 0x0, 0xb59}) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@noprefix}]}) syz_clone3(&(0x7f0000000680)={0x200000000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, &(0x7f0000000340)=""/222, &(0x7f0000000640)=[r1], 0x1, {r3}}, 0x58) 21.553415106s ago: executing program 2 (id=655): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x6020400) r7 = socket$inet6(0xa, 0x2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) r8 = dup(r6) r9 = getpid() r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r9, r10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0xfffffff3) mmap(&(0x7f000038e000/0x2000)=nil, 0x2000, 0x0, 0x12, r11, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$ASHMEM_SET_NAME(r11, 0x40087708, &(0x7f0000000c80)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D') ioctl$ASHMEM_SET_NAME(r11, 0x40087708, &(0x7f0000001d80)='\x00\x000/\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0x123, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xdf}, 0xffffffffffffffff}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff9, 0x7, 0x0, 0x0}}, 0x0) r18 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r19 = dup2(r18, r18) setsockopt$MRT6_DONE(r19, 0x29, 0xc9, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r19, 0x0, 0x483, &(0x7f0000000000)={0x6c, @rand_addr=0x64010100, 0x4e20, 0xffffffff, 'rr\x00', 0x0, 0x40, 0x30}, 0x2c) syz_ublk_setup_queues(r15, r5, &(0x7f00000003c0)={0x0, 0xf41a, 0x40000, 0x1, 0x17b}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc11c, 0x4, 0x0, 0xc3}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8974, 0x40000, 0x3, 0x156, 0x0, r19}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7437, 0x0, 0x1, 0x118, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fc4, 0x4000, 0x0, 0x208, 0x0, r16}}], 0x4, &(0x7f0000001a80)={0x2e, 0x1, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r17, '\x00', {0x1, 0xcee, 0x0, &(0x7f0000000a80)=@buf_512="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"}}, &(0x7f0000001b00)) r21 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') read(r21, &(0x7f0000000180)=""/199, 0xc7) syz_ublk_setup_queues(r12, r5, &(0x7f0000001b40)={0x0, 0xb718, 0x4000, 0x2, 0x314, 0x0, r20}, &(0x7f0000001bc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8519, 0x2000, 0x0, 0x2f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5400, 0x200, 0x0, 0x34d, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa926, 0x400, 0x2, 0x285, 0x0, r21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfa40, 0x20000, 0x0, 0xed, 0x0, r13}}], 0x4, &(0x7f0000002e40)={0x2e, 0x6, 0x0, r19, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, r17, '\x00', {0x2, 0xb61, 0x0, &(0x7f0000001e40)=@buf_4k="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"}}, &(0x7f0000002ec0)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) 6.536640474s ago: executing program 33 (id=655): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x6020400) r7 = socket$inet6(0xa, 0x2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) r8 = dup(r6) r9 = getpid() r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r9, r10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0xfffffff3) mmap(&(0x7f000038e000/0x2000)=nil, 0x2000, 0x0, 0x12, r11, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$ASHMEM_SET_NAME(r11, 0x40087708, &(0x7f0000000c80)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D') ioctl$ASHMEM_SET_NAME(r11, 0x40087708, &(0x7f0000001d80)='\x00\x000/\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') syz_ublk_setup_queues(r8, r5, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x1, 0x123, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xdf}, 0xffffffffffffffff}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0xfff9, 0x7, 0x0, 0x0}}, 0x0) r18 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r19 = dup2(r18, r18) setsockopt$MRT6_DONE(r19, 0x29, 0xc9, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r19, 0x0, 0x483, &(0x7f0000000000)={0x6c, @rand_addr=0x64010100, 0x4e20, 0xffffffff, 'rr\x00', 0x0, 0x40, 0x30}, 0x2c) syz_ublk_setup_queues(r15, r5, &(0x7f00000003c0)={0x0, 0xf41a, 0x40000, 0x1, 0x17b}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc11c, 0x4, 0x0, 0xc3}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8974, 0x40000, 0x3, 0x156, 0x0, r19}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7437, 0x0, 0x1, 0x118, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fc4, 0x4000, 0x0, 0x208, 0x0, r16}}], 0x4, &(0x7f0000001a80)={0x2e, 0x1, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r17, '\x00', {0x1, 0xcee, 0x0, &(0x7f0000000a80)=@buf_512="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"}}, &(0x7f0000001b00)) r21 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') read(r21, &(0x7f0000000180)=""/199, 0xc7) syz_ublk_setup_queues(r12, r5, &(0x7f0000001b40)={0x0, 0xb718, 0x4000, 0x2, 0x314, 0x0, r20}, &(0x7f0000001bc0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8519, 0x2000, 0x0, 0x2f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5400, 0x200, 0x0, 0x34d, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa926, 0x400, 0x2, 0x285, 0x0, r21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfa40, 0x20000, 0x0, 0xed, 0x0, r13}}], 0x4, &(0x7f0000002e40)={0x2e, 0x6, 0x0, r19, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x5}, 0x0, r17, '\x00', {0x2, 0xb61, 0x0, &(0x7f0000001e40)=@buf_4k="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"}}, &(0x7f0000002ec0)) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) 2.329080714s ago: executing program 3 (id=880): syz_usb_connect$uac3(0x3, 0x92, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x2b73, 0x1b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x7f, 0x0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x0, {0xa, 0x25, 0x25, 0x402, 0x5, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xff, 0x2, 0xff, 0xe}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8101, 0x8c, 0x9, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0x315e}}}}}}}}]}}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x703d28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl(r0, 0x4, &(0x7f0000000100)="16a4011fdf308fd9c8078475028776209e61f132f2e7f5db6dbc398728907e39c14728531e980b19c6fa1ed92e3fa141abef401be08aa5894d592125b3ec984ef495e7caa391ce71dc4e0afb37375dc7532cbc18b6f5e45d98b77c923fdcbdfc088d87e0bb5fa5634e8487e2827a9468d73ec93ec549846f225f943762fdc4625c59ebf929ff79b81484d5c98979f64b746f989bd227338072cf799f9c758d94861900121b13bfb19c9f2678a028a49cb1604bc2a1cd") setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) syz_usb_connect$uac3(0x3, 0x92, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x2b73, 0x1b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x7f, 0x0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0xa, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x0, {0xa, 0x25, 0x25, 0x402, 0x5, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xff, 0x2, 0xff, 0xe}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8101, 0x8c, 0x9, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x74, 0x9, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0x315e}}}}}}}}]}}, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x703d28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) (async) fcntl$dupfd(r0, 0x0, r0) (async) ioctl(r0, 0x4, &(0x7f0000000100)="16a4011fdf308fd9c8078475028776209e61f132f2e7f5db6dbc398728907e39c14728531e980b19c6fa1ed92e3fa141abef401be08aa5894d592125b3ec984ef495e7caa391ce71dc4e0afb37375dc7532cbc18b6f5e45d98b77c923fdcbdfc088d87e0bb5fa5634e8487e2827a9468d73ec93ec549846f225f943762fdc4625c59ebf929ff79b81484d5c98979f64b746f989bd227338072cf799f9c758d94861900121b13bfb19c9f2678a028a49cb1604bc2a1cd") (async) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) (async) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) (async) 1.969439293s ago: executing program 5 (id=889): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r5, 0x0, 0x15) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) 1.472879775s ago: executing program 3 (id=901): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r0, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x8, 0x4, 0x6, 0xd690, 0x1, 0x5, 0x0, 0x91, 0xffffffff, 0x101, 0x3, 0x0, 0x7f, 0x0, 0x2000007, 0x40, 0x0, 0xa, 0x80000001, 0xa000000}}) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x121f01) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r2, 0x80045520, &(0x7f0000002a40)) capset(&(0x7f00000000c0)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000100)={0x3, 0xd1c, 0x8000, 0x0, 0x6, 0x8}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0xfb, 0x7d, 0xa5, 0x20, 0x5fa2, 0xbb1a, 0x829d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x0, 0x90, 0x2, "", [{{0x9, 0x4, 0xe2, 0x1, 0x0, 0x2, 0xc, 0x7, 0x5}}]}}]}}, 0x0) 1.146823223s ago: executing program 5 (id=902): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.125578083s ago: executing program 5 (id=903): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) r5 = dup(r3) syz_ublk_setup_queues(r5, r0, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x655}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) 1.026712435s ago: executing program 0 (id=904): r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x5}) (async) r1 = socket(0x3f, 0x6, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (rerun: 64) r2 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) (rerun: 64) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000001600)='ip6gre0\x00') (async, rerun: 32) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x10001, 0xc}, 0x8) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 988.331727ms ago: executing program 0 (id=905): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) mknodat$null(r0, &(0x7f0000000100)='./file1\x00', 0xc000, 0x103) socket$netlink(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timerfd_gettime(r2, &(0x7f0000000000)) fsopen(&(0x7f0000000680)='sockfs\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') lseek(r3, 0x101, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r5, r6, r7, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r9 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r9, 0x2, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@void, @void, @eth={@multicast, @random, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x30, 0x68, 0x4000, 0x7, 0x1, 0x0, @empty=0x1c, @local}, @redirect={0x5, 0x1, 0x0, @rand_addr=0x64010102, {0x5, 0x4, 0x1, 0x31, 0x8, 0x66, 0xfffe, 0x6, 0x2f, 0xd92, @private=0xa010101, @empty}}}}}}}, 0x42) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',a\a\x00\x00\x00\x00\x00\x00\x00er,\x00']) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="10c785cd9d739da80e7fe308d0fc409678416a2cd122a9c005324ffac0362029a45dfcde4aed357ca1baafaa089f37c556ce70", @ANYRESDEC=r7, @ANYRES32=r4], 0x15) sendto$packet(r1, &(0x7f00000000c0)="37033c00", 0x4, 0x4000800, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r11 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r11, 0x402c542d, &(0x7f0000000200)={0xf8c8, 0x8001ff, 0x4, 0x7fff, 0x7, "ea710000000000f9000000024200000200", 0x4000000, 0x400}) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000000)=0x80) 970.770616ms ago: executing program 0 (id=906): syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001100010000000000ffdbdf25"], 0x3c}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 923.667898ms ago: executing program 3 (id=907): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, 0xffff, 0xffff, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x2b}, @in6=@mcast1, {0x5e, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x3, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 922.582498ms ago: executing program 3 (id=908): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@uexit={0x0, 0x18}], 0x18}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x80000001, 0x0, 0x0, 0x0, 0x0, 0x200}]}) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0xc0010141}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000080), 0x8) sendto$inet(r4, &(0x7f0000000280)="b5e5a822cf6d07b752d71a6222d3047d9f233e10b9aeffb4d8898b068a1730903c81d27b1463bc12244a125290bf8d1edeaf3b845e852c39f86439c3d45cab822f16773cdec534a5ada44302faf75217a1b36b301753d741cf3718015d6816c921c0de2d66eeab99a104cc4c355dec7b2f323af9b6dcde6d9bfcbdb0bde0a9c59594b2570000000000000060070df9a35e2ecef0e91c0c77bc", 0xfb1b6491eaeb1580, 0x45, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000040)={0x2, 0x8}) recvfrom$inet(r4, 0x0, 0x0, 0x40000723, 0x0, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x44100, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f00000001c0)) 918.840628ms ago: executing program 0 (id=909): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000001000/0x400000)=nil) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000403000)={0x0, 0x0, &(0x7f0000404000/0x1000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000000000/0x400000)=nil) (async) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000000000/0x400000)=nil) r4 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) mmap(&(0x7f0000a67000/0x2000)=nil, 0x2000, 0x2000008, 0x13, r4, 0x0) fcntl$addseals(r4, 0x409, 0x8) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000001040)) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4105, 0x1009, 0x0, 0x0}, 0x56) 918.672238ms ago: executing program 5 (id=910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r5, 0x0, 0x15) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r2) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4) 859.98317ms ago: executing program 0 (id=911): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 858.97889ms ago: executing program 0 (id=912): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) clock_settime(0x0, &(0x7f0000000100)={0x0, 0x3938700}) epoll_create1(0x80000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e28, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 785.950531ms ago: executing program 3 (id=913): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x9, 0x6}, @mss={0x2, 0xfffffffa}, @sack_perm, @timestamp], 0x4) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2990c7, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'dvmrp0\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x4d, 0xffffffff, 0xdb, 0xa, 0x2, 0x6, 0x1, 0xc, 0x7, 0x7, [0x28, 0xe, 0xfe0, 0x9, 0xe06, 0x1cecd9f0, 0x9, 0x200], [0xffffffff, 0x7, 0x1, 0x3, 0x7, 0x81]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 733.446842ms ago: executing program 3 (id=914): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x4) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r1 = memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202", @ANYRES16=r1], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = epoll_create1(0x80000) epoll_pwait(r3, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, 0x6, &(0x7f00000000c0)={[0x4]}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000100)=0x3) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000000)="390000001000034700bb5be1c3e4feff06000000012778010000190004000400ad003e34d61c00000000313200"/57, 0x39}], 0x1) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x20031, 0xffffffffffffffff, 0x2000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x9, 0x10000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x1d, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) write$FUSE_IOCTL(r6, &(0x7f0000002180)={0x20, 0x0, r7, {0xbf, 0x4, 0x7, 0x80}}, 0x20) 213.633915ms ago: executing program 4 (id=915): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000001020104000000000000000002000003240002800c0002800c00010021000000140001800800010064"], 0x38}, 0x1, 0x0, 0x0, 0x2840}, 0x20000004) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="8afc4987fe75712fcefb0e88b48e1b072f7e77720a659974e313f2ae785354e45d2663df2c031904fe7689a47ca3267a2472ed60892307c6391ccb640a0b00e9caab17da9ff33d51887e41d2d35cf7c524507daced9c6c631895162575119f7d4fc59e42c58f1a4d1150d6a4a8b1836881207f81ba6c059f224cd2f315dabe608b81d55412387afe7944e93a414aecea921b8f382fef33921e1070647f273a25b64cddf10f07a1522da647864e9f94dd8297a88399245c0c8e5da90ba3066a2d0ef361fa5c2845ac180dce26727e68f9d8c3e39bc8f37bf1326a277110513a073a1a0896"], 0x448}}, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x1, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x8) r4 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3, 0x0, 0x4}, 0x30, 0x3) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x1a) landlock_restrict_self(r4, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x30, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) getdents(r6, &(0x7f0000000080)=""/194, 0xc2) landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) 154.698127ms ago: executing program 4 (id=916): r0 = socket$inet6(0x10, 0x3, 0x5) write(r0, &(0x7f00000001c0)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000a0000000000", 0x24) 85.535548ms ago: executing program 4 (id=917): syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001100010000000000ffdbdf25"], 0x3c}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 84.380588ms ago: executing program 4 (id=918): r0 = socket(0x1e, 0x4, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14072, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14072, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000000) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x11, 0x3, 0x0) getsockopt$packet_int(r1, 0x107, 0x9, 0x0, &(0x7f0000000140)) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="11010000e6776f6dadb1d97e62010a000000a5d4f92200ef9460131aad6de9377c4c31425d7a73011eb1b78644cda4fc4ab684d7a9a95c18dc837b463df76a61bea482ffdee9b6ec485e252362c9c5b661421e3136d0db981f5863fcf3d76a1d325a05d9110ce688a8645ccd5cd1296d1e", @ANYRES16=0x0, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x2}, 0x804) (async) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="11010000e6776f6dadb1d97e62010a000000a5d4f92200ef9460131aad6de9377c4c31425d7a73011eb1b78644cda4fc4ab684d7a9a95c18dc837b463df76a61bea482ffdee9b6ec485e252362c9c5b661421e3136d0db981f5863fcf3d76a1d325a05d9110ce688a8645ccd5cd1296d1e", @ANYRES16=0x0, @ANYBLOB="000127bd7000fbdbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x110}, 0x1, 0x0, 0x0, 0x2}, 0x804) r2 = socket(0x1e, 0x80000, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000102e10400000000000002000a000000300001802c00018014000300fe8000000000140004"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) r5 = syz_ublk_setup_io_uring(0x7212, &(0x7f0000000200)={0x0, 0x818a, 0x40, 0x1, 0x15f}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_MAP_OFF_ZCRX_REGION(0x0, 0x9, 0x1000000, 0x4010, r5, 0x1027) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x15) creat(&(0x7f0000000140)='./file0\x00', 0x0) (async) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r7 = dup(r6) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x8, 0x1, 0x6, 0x7, 0xfac, 0xffff6554, 0xfff}, 0x1c) utimensat(r7, 0x0, &(0x7f0000000100)={{}, {0x0, 0xfffffff9}}, 0x0) (async) utimensat(r7, 0x0, &(0x7f0000000100)={{}, {0x0, 0xfffffff9}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 40.631739ms ago: executing program 5 (id=919): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast1, 0xffff, 0xffff, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x2b}, @in6=@mcast1, {0x5e, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x3, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 40.329629ms ago: executing program 4 (id=920): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000780)={{0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', 0x50000, &(0x7f0000000180)={@_ha_fsid={[0xd, 0x8]}, {0x6, 0x15, 0x0, 0x3}}, 0x5, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x9}, 0x6, &(0x7f00000006c0)=[{0x3, 0x4, &(0x7f0000000240)='*[:^*+&*(.\x00', &(0x7f0000000280)="13391162c78feadbc9c6554848ffaa0bb5305b334228df717246e9e7e24996934c9b965d8c05c9f1eed6d08b1b723646dcbd0ff810ec07092b", 0x39, 0x20}, {0x3, 0x1000, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000340)="079f263b870c3f1f32df6731013d2617342b56002ecc9b6a230ed5785e88a502621571988858066c6bd65f047875eb0674f47da9aa34af1eb45e2186dd96dd75254a0b7ed3c91f882410b1896855a8e061b248fe6fa420c7dbbb16e9eea12a48525ff4f36ffbb4fd07ae4b83f3bcdc", 0x6f, 0x10}, {0x2, 0x8, &(0x7f00000003c0)='%&#+!\x00', &(0x7f0000000400)="d4fd6e4186b5a13bd68a0b90b5889eacd3d9cec8fa02a9eb6ed15b29a31c4865ad", 0x21, 0x2}, {0x2, 0x7, &(0x7f0000000440)='{@\x00', &(0x7f0000000480)="7678d4eb6b52757e42da0e550f0a51117b7a6a9ce53fd051c8fec6ddeacfab6cb862f03150790cb2c7b5c9d360e24f20f7fd950d74a6d29431ee1437bf88e53c238e8a8478be3f02666d5b266487bb6934725373ceda3907f15c0c0604719c2b07f35b", 0x63}, {0x3, 0x8, &(0x7f0000000500)='!!\x00', &(0x7f0000000540)="3f6c2a67cbde2c566e2eb56fff9967742940fb037c2e6aa4963746329f6ea65f00b3af09cef0cb1a73c250067479206e413502bf58ab4233fc7a1fba2d46053eb05b", 0x42}, {0x2, 0x6, &(0x7f00000005c0)=')\x00', &(0x7f0000000600)="84ca8a812d91af9cd7d723d9358d8897408bc5f82cce8abe358f256497e22cbc3cb84d736fa02579c00307aae1310c45a01b7de1e8aaf8567d5ab626427c400be42a9333d9d57208305480ef1be199d043644a8ddc312bcf1a99181e460fdd95da619d1396335930ea7ef9b19dac1df6759cbc8d5b21133d98c16b017a2faaf6cfc2f932879a707fc76b692b52803c2de1fa81ea0bc05c62492b5618aaac22366b0c7626d4", 0xa5, 0x2}]}) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000800)=0xfef158b81a924573, 0x4) getpriority(0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000880)={'\x00', 0x3, 0x0, 0xd94, 0x1, 0x24c6, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x10000a, 0xe4, 0x40000}, 0x20) r2 = fcntl$getown(r0, 0x9) tgkill(r1, r2, 0x5) syz_clone3(&(0x7f00000005c0)={0x11c103200, 0x0, 0x0, &(0x7f00000003c0), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f0000000840)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000000000040001000000000008000200", @ANYRES32=0x0, @ANYBLOB="1000010400000000f8b80cc6e4000033894cc400"], 0x2c, 0x4) getxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', 0x0, 0xed) 355.69µs ago: executing program 4 (id=921): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=922): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdir(&(0x7f0000000000)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)="34343146302c34ca26348385ce08a647bd92671bf58ebf985e2d6c66c40d80e9ed035e909094616cac971c79389253a79efae274fed6a6e86a557165df7b120976540a6374e0bd545154d5e4913a5aab9c7c5e69182f884690b7bef3580cca69336f21df016dbb7b333cbe95a4fb", 0x6e) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003020000082505a1a4400890020904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020200"/99], &(0x7f0000000800)={0x0, 0x0, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="050f3500020a100302000080000700031000"], 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) shutdown(r3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) writev(r7, &(0x7f0000002340)=[{&(0x7f0000002700)='5', 0x1}, {&(0x7f0000001340)="1437cf9367762859ae6e0f02a49ed975356f4c929e20374e0311b53b099d54bf60324883fd9329eadcb6da44a0858454be135a947c36cf0871296596d0120e22ef2adb989953736270297da09f181c417a164c6962ba5c715a89254c2a5c9b9dc40e6975bbe0fbc4bf62554780cddde60fb9726f25da0b56a00d216057f94f156ade603f5518b45b06ecb852361635581de2fc98b006e7bb5f2966a3c00e4f87d7a32d81b47da894b4a1bca4fc874a70407be480c905b77e6fc1589527e43af59cf57f131c1d7456474e6c7f9daf6e5f489f63678ca936e9253b551961f60db3093b4c38dee742d8ff08ee2c840f186af8296ffe04b53e25eda9a97be5f3e185f914568fceacbee55d2e0c57744f1e71adf20e4a416eea89f13070d13025b9a27159bfed59bbef987d2b3b47de529e19b35e5b9f0e6793c1f0639b3f8d148b13c02a26f414995ebbf408233e5b5467017c2d7337995e6ac9bc1c7d10cbe3081b26ca0f2480332bc3e4c8a3a7c5a6b3bbea6ee50777975c8c3216e329ca0857aaf9ad0d2d446aca29abf04242ee8c74ff2720cfb8ce93f8383e8ee10bdc27f65b2fb14c36c53db9114574c3088fa4758a5fb6d90a7cebfe5f91c985d903191dffbf691bf99737dc00f6c15b956435808f8e68ed5d792896af8c14928d0d7760c5fcc3a780d28fb235167da712de1b3d079c296712f76957dd3dc896b0943b4003f2346bc56533c81907335051176762ba99b9a37e8ba70f72c16f86d029a9eed6ee23acba2dafda65afd8885282552f27e515337aee681c8b70f41ed24567df4c942c91705ba7212d1b2ef4c2b0106b78ad2326d58849f82523b5c3518a68d77b394cc0dbaec1b71938cc1f22aea5583d8b735cad44b7822ed49a04ad451a6614ee33f1e39aa08139430d5b84ae4e5c16be54418a6413733b5310861255fcaf632a02b9680b41f66962bc2e8024f86971717b1baef022ae139b6bc1ee642b413a98c82b94eb78b0bec1e71005a6e0002cb832d940d3a28e7d0e1721b38fb44aeb6eeea842762e839c9c4467c9a443cf7da7f95c5887ba4a115f7c2067212ea215aac9ab1b909ffe0b7ffa6c9337deab817fd7b434ca1db138db5fc97735525dffb019cdc09bfffe57c12def237f98083776528a38646498ffa005f1e9488f083862324e116231401b945f20a3e15dd1d775042a96269acc0fd6c4a9d9b59295648c03b2f581472f5654300c37a1a8da856e47970249994aa949a89d50486848ca964a61b6683450ff5a0fe2e3ffe3341a734ad2ff4a2e62729cde4ce8983a621d40e4495623c2cf6743774fe267bcfe2c919d3a52c7760bb285e0ccfa642c13903b81a09ce11be592dc3e13879518e72ca87ecfa22c4705e2d4a511da0efd8bfadac65f1daa9dcb396d50590f4004b3720b3da776d66e66c22a7d5043f09b9fff2ff32f229540cc90862384b00c97b801cb84d428078efe90d505d370ad54de6beb9ad04c6ca61ea8f936f52dacb5e1eb689d7647e832af8a6b53bbfd9be05d05fb1ed25dc8169aaf7c4818d0048697a462c945467bb90e7ee32b0fb5de2261c40ce1c990caefb3d3432715c141184d2f1d30823e9d90baf0c6db0035e0907fc8a81a02c4b224fefa81d2fa20a5778f2ee0c9c4501e85c0c1f378e2274bdf30c94604bb2ea66c5c7da090a0fdf903b20f4167b9d19f1ce8f21c06c8d94b3f3837795179e9137f90437fa5027ba0bd699e04982ee554634aba2de0eb58a1fb2cd55f9a616a42ad8048f02f29bf286b134a4f1b51c3311dd91f4af463ae0cef67dd75c4a6b3b8ccd7c87e59fe753b590c117b4ba22044445367fb4711e9dc4ed150caf618bfa0b74cc077e50b7951ae81979dc4daa3eefa242cbf1ae985e1f7a14fda10dfed756bcf4ccfd21d5f406b5d04fe57775a181327f92c9db039fea69b416e0de4d5e579c58e7950bf47948aa4e09bc01594ad7b278e330c9e4b139f17fd48ebf11d3e9be77b1eb5ff7fcde9c7f51a335266284b239fff73bb43b0aeb0f1612edb27815fa05420131bc4841cb6a5cd719be1c8737b33424a6956908e673f13f35d3b18ce733d22283e6a8225c4a67e1054c2825e29daeb1df54ae3e88700e9654e9719a463a4ca0fc4eb3bd6159f1f3299ac99a5201c273c18c1f98b89542e9871758600851d9699d7cb6b0b1bf97bb0176e29c37f5da84a5462a14fe948921be7843c2ad72fa50ecfa701c37a7acf99994407a699216688bf1977dca85c5efde18541ba33917d192a2a899569ac8d8186b55bdc2efaca20150dfadf6a8df72e790c9ae4a3ad1cb04ebdd0b6a867c54236ec63e4099a934cc06d9b72f58f7b6b0d823bcb2321c529394b01f48a7f9bbe32d94fee2652cfdab39a5f2aeec314ed901b7cc3faa0e81743bfc9475212baa67456e090dd838030c8fae6e6e1c287970165d17b47be5a580bab6eddbd856f9532facbd3bf3918225e1ffa01ee6dc080d506e78158aaace63d9bc2721667c9adb56d1cd966561dac360fca6c9f5ca4db604018f522c0adc83a11c5ac9acabbe86911916ff2a2245f72220aa342954af4992beeb907fe02abc6f41f0beeede0c1003be786e40410916670a22d99da143004dcf287ef89519048e8848b26f777afc113a31ada7e86e0c83719f172df7133343f8233a4ac53c895506707f1e5d89a4ebe51ee4c9ff52e9a2b0ba207725dde02d7a3b0a581809ec6111b1d0a9353560ffc7c5ff8e33cafae1b42a244658f7aaca8451e3af525ec3af306bd2fed1a8b47a92ea3bc263e985142666488c0209f7b5acfa61e56d33f775c848bc67c839d2bafe1f80a7acbf9a31e4a86db057060b37096b34edeef17a22c09c2f708a013e7fe510b21581e6729ed4972647795a4d536cdbc2e876a3871bb2c81116ccd3fbc29b39429640a161ecaa02cebaebe182482df05ac15cb63c9f448cf4ac1a59fb71c891794f31bf8f5a9dca70bd7532f5819df4a2baf13d47ca247b8ccb90daedc9d8113a416c6695242740ddf5590e8244713293870175dab334235eaee8f89a15e0301904df7a82b36a050508301bf1e8be8281ef2adc4d69cee861cd60cf723097d3dd10b0a40b73eeec379689035db50b6b0f175fd66d938b1ac4fd1e616300784731804153afa34d3714a261b9498e28dd251d9d78c5522f80fcc4e03568bdf3fd941b1a394ac13cf7a1a42e8901f667b051acfa40445a513d50576c4a33a035ebc061eb8a2b20257f7850bf6312e63c14bab09706227f2359c851f1e0afbb6c6aa40aeb7323358a10d449803cfa58da5fa5384bd16c28da85db15b43f013ef559f3fc5382982c4f6363c0a427aa59f9ee2c240d95994b71cf30ed585089c75f346a1485c49e4470ee61471946eeef593a4d351df017b17ee0ed79b3efaf9b6b705cb5ccf8a80b6d785cb35e329b48f180a0093f8bd9c4b418e3e304401fa0612cd2c2e83143579ca8860310611d316916cc7229c52293cc915bbf11751487f6b912e7755c59ef329248cc1051b56b23b291f6ccdab8b613cc45723c06a52e9d0d971460871b761c400822a2c052d2e8fe45bc1506aa5c731d90e6e98f78d9bc573e8567e53208847573a95f1704b7f2199b22b0af296b8bf86e4a0963eda5d077d72eaa2c1a48d57be5da5be9965cb5ce50114ed2f8fb7e36889c7352e7e8686af751e7d60340c13836322bbf661aaa3a47d2fdcda568b86ee3fdd1d2978f6aabf3ae0a70247de2a806ba47a5a3f693221cd0b81cd0410c82052e2b05197a289bc09de68fecb1b43dabc95b4627cd9bb631b96bf997fc986214770d49b453ea7acfe1b8cee6679f24d6591609d1bda513d7c3f0300b77c3196416ddfe3ae542936838d8cee959d49a96b4bda3c995ca8a30146d401f9e02913121b4aa67a5ab4cc761614f8e12bb28c4858e2dff53a11eecc1f0ade0ea6e7e1d68e21500fab6c61f0650207a9948bab419ea47448444cb6e8e6bd588bd235972821ac2278d0f33a9dc86605276a290aad00352e20672f58574977f8e49d9d230c60fc4a79a5a49e96a5a89a425f32fdaa72585595f98ca17f1a23c20547e119fa27c5f5f9c066a9c235d18edcae830bfa360e4c8d394255c9ab42cef47c7aafa089af7510051473cf853eb525a61d0cb956b155de3c9ddd40c6f42b8b7379f5350086c852d279fb2953c0425d7500c32c89eb793ae42069ecd77421a6836c0022eb9afc120f20f286d889e847c6624607d5dcced942f8fc88628f080583ab2145a946d4f250627400d1d055b8d166f448f645ff369265b4606fd3b14323baf1bd8c5adde507083d1d4f333f57d82f4713dd9ff466a11833848db72b4472a9479c59f0edf3b4d57a2e3eab5b4bb4f6c1582e3c03d5b3f912a76b73f166632e812d6e6a8717f041a09e60bb2f59a89d1f4d39662a79098aff60e6104e627338406c426ae5f05a6c74f7fe6d434b4d9f1cafeb9811751b5919d5cd2768479c3568ac9174e8a994b7b5406c6de75c4c3ad7555e2314406dea1687bdb4ce6c080ea7d4ef8530dc65ec12fbbe2629379ff7dc17f1f7e772f677f72a052e16cee3643fa04ab36370e4a45b4994d9bbffd004d8a59c45d9664530eefe08a58ef80fe6b528b826737163fe01dbf0605a23495e68b7f90cc2aeaeb47d0ac06a501e3ef3ad641d918b3ddd3f63d0ec5d3a2a367020831d2976b73645847d214feabb896f70b5f3c14e488fd79bc1107b4cc88e1c159376958a499c58d6c10340a53c74c808dda3d4b75d89806f29bc63551d19f076d9104d5fc229de0dbfa93ecad6408a74ad6f8976d6e56b7b6562eeb9e3ee1e7adf10b6b3293d11555bb556f81580e4c83d5c0d10e16856f7e23bd24ed271a7e268e1bf9450d9ed0fffb7655184f970473752a99dbae50b81bc2f57f72d9f05b9192c441a2968066b2d1e812c7019b8f104dde6f0a7d9a0392cfb940bc552ef5e75af96409db33a6d068c62ce38797fa461541155df7bb800743cbdca34151ca00cda0e05af0e403fc7d01cecce9c3e93693dc15f9527a9ddd1ca03c8c61e011f375096cb6f5d472c3a450d03be9637930b1d1a3c85d828cb5c070997b11ecf774691c19a90418c5ffe501881d074af61bfd94a88daab1059a89258f877a36911fe22a20b4ac23ee0defd6da778d70aad0333ed3266ca67fc5df3e896a205889d514d63ef17ee18ef081c8d322c8c35bbd3cffdaa67feb840940710a2ad0c413df67a5fe3c4da7bfd62552d39b201f2d451d269d784927a8b6fbbe6befa2118be819e7c22a644e56b68cc7eba6b66df72fb8412357596ddfe699a62cc790f3568dc9cee5c0c00f275075464dca8faba9cefe99740d555687ada7373bf1b7350d503856852c2ca923fbe290a2ad243bdf090910aeb6b9b213bfdeef9538bc5795684602534550c1ed3e3ffe1d2ac2a5ea269eab307af13b990c014010dd4c26fdc2f50f78182b6c726d4029501a697d3f82f6d0533fe8f4367505fab3ccb2edd675bcb9cf8368f291b1913e277376a50ce2e90addfe989250fcc3c3897dee9f88dcb2daaa569ac4fe41daddea42011753e91129cac7fee8ad900846956c048a2c83169594747c0d57943d4ac4d1776141ee1ca31bd6c444aa5b9c6aa4b52a278cce59f312c0163a03a34ae85bcff8495c62d0b14530811bf4ace578561a88ae1bf82b2373c7287ec38b3c093774c5ed772c4eaadcfc562f8d5b1daa3364d4fdd237eaf7ee81ac26468323fc5f8b88bba8827ac222237ce4c4e6f162038c9d8fcd71dd4", 0x1000}], 0x2) socket$can_bcm(0x1d, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') openat(0xffffffffffffff9c, &(0x7f00000004c0)='bcdUSB\x00', 0x1, 0x0) kernel console output (not intermixed with test programs): T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 347.974653][ T310] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 348.058689][ T531] tipc: Started in network mode [ 348.063616][ T531] tipc: Node identity 7f000001, cluster identity 4711 [ 348.070933][ T531] tipc: Enabled bearer , priority 10 [ 348.074653][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 348.083923][ T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 176, changing to 7 [ 348.097317][ T31] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 348.106792][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.114909][ T31] usb 2-1: Product: syz [ 348.119240][ T31] usb 2-1: Manufacturer: syz [ 348.123867][ T31] usb 2-1: SerialNumber: syz [ 348.154614][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 348.160926][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.171988][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.181959][ T310] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 348.191145][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.200797][ T310] usb 4-1: config 0 descriptor?? [ 348.207866][ T310] usb 4-1: Found UVC 0.00 device (10c4:ea90) [ 348.215060][ T310] usb 4-1: No valid video chain found. [ 348.340560][ T31] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 348.347759][ T31] usb 2-1: unit 6: unexpected type 0x03 [ 348.353366][ T31] usb 2-1: unit 12 not found! [ 348.359350][ T31] usb 2-1: unit 4 not found! [ 348.364253][ T31] usb 2-1: unit 8 not found! [ 348.368980][ T31] usb 2-1: unit 1 not found! [ 348.373705][ T31] usb 2-1: unit 9 not found! [ 348.384617][ T310] tipc: Node number set to 9611946 [ 348.400480][ T31] usb 2-1: USB disconnect, device number 5 [ 348.410925][ T508] netlink: 'syz.3.64': attribute type 29 has an invalid length. [ 348.433583][ T310] usb 4-1: USB disconnect, device number 7 [ 348.553685][ T550] bridge0: port 3(dummy0) entered blocking state [ 348.574620][ T550] bridge0: port 3(dummy0) entered disabled state [ 348.581087][ T550] dummy0: entered allmulticast mode [ 348.595088][ T550] dummy0: entered promiscuous mode [ 348.600366][ T550] bridge0: port 3(dummy0) entered blocking state [ 348.606765][ T550] bridge0: port 3(dummy0) entered listening state [ 348.616125][ T552] dummy0: left allmulticast mode [ 348.621173][ T552] dummy0: left promiscuous mode [ 348.626482][ T552] bridge0: port 3(dummy0) entered disabled state [ 348.930254][ T564] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 348.953746][ T564] tipc: Started in network mode [ 348.960188][ T564] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 348.968272][ T564] tipc: Enabled bearer , priority 10 [ 349.184601][ T310] tipc: Node number set to 2130706433 [ 349.314590][ T594] ======================================================= [ 349.314590][ T594] WARNING: The mand mount option has been deprecated and [ 349.314590][ T594] and is ignored by this kernel. Remove the mand [ 349.314590][ T594] option from the mount to silence this warning. [ 349.314590][ T594] ======================================================= [ 349.352579][ T594] netlink: 40 bytes leftover after parsing attributes in process `syz.1.95'. [ 349.496240][ T596] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 349.506988][ T596] tipc: Enabled bearer , priority 10 [ 349.530358][ T599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=599 comm=syz.0.97 [ 349.543176][ T599] netlink: 'syz.0.97': attribute type 19 has an invalid length. [ 349.565371][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 349.565389][ T36] audit: type=1400 audit(2000000001.220:197): avc: denied { map } for pid=600 comm="syz.0.98" path="socket:[6168]" dev="sockfs" ino=6168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 349.594718][ T36] audit: type=1400 audit(2000000001.220:198): avc: denied { read } for pid=600 comm="syz.0.98" path="socket:[6168]" dev="sockfs" ino=6168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 349.634855][ T36] audit: type=1400 audit(2000000001.290:199): avc: denied { getopt } for pid=602 comm="syz.0.99" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 349.671099][ T36] audit: type=1400 audit(2000000001.320:200): avc: denied { create } for pid=606 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 349.690946][ T36] audit: type=1400 audit(2000000001.320:201): avc: denied { sys_admin } for pid=606 comm="syz.0.100" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 349.712447][ T36] audit: type=1400 audit(2000000001.350:202): avc: denied { associate } for pid=608 comm="syz.0.100" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 349.733805][ T36] audit: type=1400 audit(2000000001.370:203): avc: denied { mounton } for pid=606 comm="syz.0.100" path="/file0" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 349.880380][ T36] audit: type=1400 audit(2000000001.530:204): avc: denied { setopt } for pid=609 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 349.907480][ T620] fuse: Bad value for 'fd' [ 350.014737][ T624] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 350.036943][ T624] tipc: Started in network mode [ 350.041881][ T624] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 350.049137][ T624] tipc: Enabled bearer , priority 10 [ 350.084631][ T310] tipc: Node number set to 9611946 [ 350.130562][ T632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.108'. [ 350.212582][ T36] audit: type=1400 audit(2000000001.860:205): avc: denied { bind } for pid=638 comm="syz.0.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 350.269582][ T36] audit: type=1400 audit(2000000001.920:206): avc: denied { create } for pid=640 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 350.272800][ T641] 9p: Unknown Cache mode or invalid value fscace [ 350.424635][ T310] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 350.562354][ T651] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 350.574591][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 350.581748][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 350.591527][ T651] tipc: Enabling of bearer rejected, already enabled [ 350.593188][ T310] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 350.609784][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.618099][ T310] usb 4-1: Product: 이ᅏ瞛䛚ꑁｿ嶁ݷݬ웬菝膗ᖕ厝鶱⪞왲ഗ뫶鸄䂭賂椯躵ᇩꐭ绾럏㺂格쌯룞忤坬㠻ᩬ窱䝧皯葲鸝應쒢́밡컑빨ㅋ䇲 [ 350.644644][ T310] usb 4-1: Manufacturer: ⮲縞ᓋ׌毖㉓﫛沖醯䙊番먊ꔥ싮劝鞪곛몼⩵Ｘꤥ㨚铥⠎㷾蓮 [ 350.666018][ T310] usb 4-1: SerialNumber: 㐁 [ 350.965430][ T669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=669 comm=syz.2.123 [ 351.164604][ T311] tipc: Node number set to 9611946 [ 351.385877][ T310] usb 4-1: Fast Track Pro switching to config #2 [ 351.398540][ T310] usb 4-1: USB disconnect, device number 8 [ 351.460261][ T688] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 351.468472][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 351.471563][ T689] tipc: Enabling of bearer rejected, already enabled [ 351.647272][ T311] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.656809][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.665773][ T311] usb 3-1: Product: syz [ 351.670244][ T311] usb 3-1: Manufacturer: syz [ 351.675607][ T311] usb 3-1: SerialNumber: syz [ 351.862257][ T695] netlink: 92 bytes leftover after parsing attributes in process `syz.1.133'. [ 352.076437][ T708] netlink: 64 bytes leftover after parsing attributes in process `syz.1.138'. [ 352.085832][ T311] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 352.097349][ T311] cdc_ncm 3-1:1.0: bind() failure [ 352.109800][ T311] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 352.117465][ T311] cdc_ncm 3-1:1.1: bind() failure [ 352.132677][ T311] usb 3-1: USB disconnect, device number 3 [ 352.195322][ T711] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 352.207313][ T711] tipc: Enabling of bearer rejected, already enabled [ 352.490058][ T735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.147'. [ 352.499614][ T731] 9pnet: p9_errstr2errno: server reported unknown error  [ 352.501488][ T734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=734 comm=syz.1.147 [ 352.519171][ T311] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 352.618077][ T740] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 352.629711][ T740] tipc: Enabling of bearer rejected, already enabled [ 352.661503][ T744] fuse: Bad value for 'fd' [ 352.679100][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.689598][ T311] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 352.700538][ T311] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 352.709825][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.718210][ T311] usb 3-1: Product: syz [ 352.729732][ T311] usb 3-1: Manufacturer: syz [ 352.734428][ T311] usb 3-1: SerialNumber: syz [ 352.946756][ T311] usb 3-1: 0:2 : does not exist [ 352.951809][ T311] usb 3-1: unit 4 not found! [ 352.961068][ T311] usb 3-1: USB disconnect, device number 4 [ 352.976793][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 353.471104][ T790] syzkaller1: entered allmulticast mode [ 353.638156][ T792] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 353.647475][ T792] tipc: Enabling of bearer rejected, already enabled [ 353.714649][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 353.866094][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 353.874610][ T31] usb 3-1: config 1 has an invalid interface descriptor of length 5, skipping [ 353.883492][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.893637][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 353.908095][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.917467][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.926011][ T31] usb 3-1: Product: syz [ 353.930301][ T31] usb 3-1: Manufacturer: syz [ 353.935115][ T31] usb 3-1: SerialNumber: syz [ 353.955043][ T806] capability: warning: `syz.1.163' uses 32-bit capabilities (legacy support in use) [ 354.143839][ T31] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 354.151402][ T31] cdc_ncm 3-1:1.0: bind() failure [ 354.158848][ T31] usb 3-1: USB disconnect, device number 5 [ 354.674632][ T419] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 354.779080][ T817] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 354.779495][ T818] tipc: Enabling of bearer rejected, already enabled [ 354.838725][ T419] usb 4-1: not running at top speed; connect to a high speed hub [ 354.847515][ T419] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 354.858769][ T419] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 512, setting to 64 [ 354.871491][ T419] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 354.880902][ T419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.889119][ T419] usb 4-1: Product: 区쪨ë죲⊠砜ሢ誄蘭䊣鮳ീ狗䈥鴔ꘕꌳꠒ㮌꘎⇔㴲仍靆纘덡澘肒啟郱杝ᠨ⦧굗侵ੳᐏ錭쌡ܻ桃ᇦ鷅ጧ婷䝡⌕罘틚원쩰㳗ﶼ쁘繙䐨븉ᛴ紉瀸銢삜夦཰嵬䏊놪쉇塷ᝪ宋锧糽腰旦㸉状ದ鷲鹂ᒛ满㘊モᛣ먐Ⴟꡆ埸鄑눔짊വ㦪䋤ϟ롷棭ﬖ [ 354.922263][ T419] usb 4-1: Manufacturer: ᫄ឡ쑆궕槛梜犂䢙鋈췦煮㭽⶝䫠┧緇䚾잂뼝쨪猹੄荟⛱毹莽䶞罢儷मᶒ墛⍊䈃ⴃ刚䡇硃긥꒦ꃝ飻븙닞ʠ閾㔫걆憚为ᨚ뛯෇椻沋⭃ᛙ瑷엳ܖ鷹葋廀䖻鮔⬟寧酾慚ӫ賚侰厬본螒Ꮩ醶䡈⼄趌ᐆ⬚鞝 [ 354.950908][ T419] usb 4-1: SerialNumber: 㐉 [ 354.957152][ T810] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 354.995642][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 354.995659][ T36] audit: type=1400 audit(2000000006.650:229): avc: denied { listen } for pid=825 comm="syz.2.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 355.250988][ T843] tmpfs: Unknown parameter '' [ 355.288219][ T36] audit: type=1400 audit(2000000006.940:230): avc: denied { read write } for pid=847 comm="syz.2.176" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 355.316441][ T36] audit: type=1400 audit(2000000006.940:231): avc: denied { open } for pid=847 comm="syz.2.176" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 355.339670][ T36] audit: type=1400 audit(2000000006.940:232): avc: denied { ioctl } for pid=847 comm="syz.2.176" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 355.419316][ T36] audit: type=1400 audit(2000000007.070:233): avc: denied { setopt } for pid=842 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 355.448307][ T853] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 355.449587][ T854] tipc: Enabling of bearer rejected, already enabled [ 355.568369][ T419] usb 4-1: MIDIStreaming interface descriptor not found [ 355.578210][ T419] usb 4-1: USB disconnect, device number 9 [ 355.602259][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 355.744816][ T310] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 355.895864][ T310] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 355.907168][ T310] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 355.916317][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.924337][ T310] usb 3-1: Product: syz [ 355.928574][ T310] usb 3-1: Manufacturer: syz [ 355.933207][ T310] usb 3-1: SerialNumber: syz [ 356.143511][ T856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.152203][ T856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.181170][ T310] usb 3-1: MIDIStreaming interface descriptor not found [ 356.182653][ T36] audit: type=1400 audit(2000000007.830:234): avc: denied { write } for pid=864 comm="syz.3.181" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 356.200700][ T310] usb 3-1: too many endpoints [ 356.223609][ T310] usb 3-1: USB disconnect, device number 6 [ 356.584642][ T338] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 356.742978][ T338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.754145][ T338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.764000][ T338] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 356.774292][ T880] tipc: Enabling of bearer rejected, already enabled [ 356.775199][ T879] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 356.790890][ T338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.799923][ T338] usb 4-1: config 0 descriptor?? [ 356.874288][ T36] audit: type=1400 audit(2000000008.520:235): avc: denied { unlink } for pid=886 comm="syz.2.189" name="#1" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 356.879961][ T887] overlay: filesystem on ./file0 not supported as upperdir [ 356.896927][ T36] audit: type=1400 audit(2000000008.530:236): avc: denied { mount } for pid=886 comm="syz.2.189" name="/" dev="overlay" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 357.024835][ T36] audit: type=1400 audit(2000000008.680:237): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 357.139146][ T910] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 357.148410][ T910] tipc: Enabling of bearer rejected, already enabled [ 357.195243][ T36] audit: type=1400 audit(2000000008.850:238): avc: denied { search } for pid=916 comm="syz.2.198" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 357.219442][ T338] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 357.232512][ T913] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 357.241809][ T913] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 357.255939][ T338] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 357.267489][ T338] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 357.275079][ T338] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 357.282212][ T338] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 357.289799][ T338] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 357.296249][ T922] incfs: Error accessing: ./file0. [ 357.299507][ T338] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 357.309435][ T922] incfs: mount failed -20 [ 357.315733][ T338] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 357.420221][ T338] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 357.435732][ T946] tipc: Enabling of bearer rejected, already enabled [ 357.967876][ T954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 358.018778][ T956] overlay: ./file0 is not a directory [ 358.024310][ T338] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 358.040945][ T338] usb 4-1: USB disconnect, device number 10 [ 358.059161][ T958] fuse: Bad value for 'fd' [ 358.494913][ T977] incfs: Error accessing: ./file0. [ 358.500180][ T977] incfs: mount failed -20 [ 358.648415][ T994] kvm: kvm [993]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 358.666681][ T997] tipc: Enabling of bearer rejected, already enabled [ 358.693340][ T1002] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 358.756680][ T1006] netlink: 'syz.3.232': attribute type 16 has an invalid length. [ 358.764514][ T1006] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.232'. [ 358.974764][ T338] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 359.125910][ T338] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.136377][ T338] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.146832][ T338] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 359.155922][ T338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.163964][ T338] usb 3-1: Product: syz [ 359.168159][ T338] usb 3-1: Manufacturer: syz [ 359.172764][ T338] usb 3-1: SerialNumber: syz [ 359.382083][ T338] usb 3-1: 0:1 : does not exist [ 359.387397][ T338] usb 3-1: cannot request logical cluster ID: 0 (err: -71) [ 359.394709][ T338] usb 3-1: unit 80 not found! [ 359.401145][ T338] usb 3-1: USB disconnect, device number 7 [ 359.424459][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 359.480895][ T1028] syz.0.240 uses obsolete (PF_INET,SOCK_PACKET) [ 359.499493][ T1032] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1032 comm=syz.0.241 [ 359.525812][ T1034] netlink: 72 bytes leftover after parsing attributes in process `syz.0.242'. [ 359.560493][ T1041] netlink: 32 bytes leftover after parsing attributes in process `syz.0.244'. [ 359.581342][ T1041] overlayfs: failed to clone upperpath [ 359.922370][ T1071] netlink: 'syz.2.256': attribute type 16 has an invalid length. [ 359.930264][ T1071] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.256'. [ 360.041809][ T36] kauditd_printk_skb: 44 callbacks suppressed [ 360.041827][ T36] audit: type=1326 audit(2000000011.690:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.3.253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25ac59dcab code=0x7ffc0000 [ 360.094672][ T338] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 360.102711][ T36] audit: type=1326 audit(2000000011.750:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.3.253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25ac59dcab code=0x7ffc0000 [ 360.128159][ T36] audit: type=1326 audit(2000000011.750:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.3.253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25ac59dcab code=0x7ffc0000 [ 360.153396][ T36] audit: type=1326 audit(2000000011.750:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.3.253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25ac59dcab code=0x7ffc0000 [ 360.178628][ T36] audit: type=1326 audit(2000000011.820:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.3.253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25ac59dcab code=0x7ffc0000 [ 360.254619][ T311] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 360.264937][ T36] audit: type=1326 audit(2000000011.920:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.3.253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25ac59dcab code=0x7ffc0000 [ 360.282654][ T338] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 360.290672][ T36] audit: type=1326 audit(2000000011.920:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.3.253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25ac59dcab code=0x7ffc0000 [ 360.307662][ T338] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.335224][ T36] audit: type=1326 audit(2000000011.920:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.3.253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25ac59dcab code=0x7ffc0000 [ 360.339078][ T338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 360.362776][ T36] audit: type=1326 audit(2000000011.920:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.3.253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25ac59dcab code=0x7ffc0000 [ 360.371165][ T338] usb 4-1: SerialNumber: syz [ 360.400717][ T36] audit: type=1326 audit(2000000011.920:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.3.253" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25ac59dcab code=0x7ffc0000 [ 360.427504][ T311] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 360.436663][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.444722][ T311] usb 3-1: Product: syz [ 360.448929][ T311] usb 3-1: Manufacturer: syz [ 360.453555][ T311] usb 3-1: SerialNumber: syz [ 360.466996][ T1092] netlink: 'syz.0.264': attribute type 4 has an invalid length. [ 360.483382][ T1092] netlink: 'syz.0.264': attribute type 4 has an invalid length. [ 360.498248][ T1092] netlink: 'syz.0.264': attribute type 4 has an invalid length. [ 360.873890][ T1112] netlink: 'syz.1.271': attribute type 9 has an invalid length. [ 360.907667][ T1116] netlink: 'syz.1.273': attribute type 4 has an invalid length. [ 360.915452][ T1116] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.273'. [ 361.039618][ T338] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 361.050481][ T338] usb 4-1: USB disconnect, device number 11 [ 361.452882][ T1124] netlink: 'syz.1.276': attribute type 5 has an invalid length. [ 361.461528][ T1124] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.276'. [ 361.686768][ T1128] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 361.781844][ T1133] FAULT_INJECTION: forcing a failure. [ 361.781844][ T1133] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 361.795197][ T1133] CPU: 1 UID: 0 PID: 1133 Comm: syz.3.280 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 361.795229][ T1133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 361.795241][ T1133] Call Trace: [ 361.795248][ T1133] [ 361.795255][ T1133] __dump_stack+0x21/0x30 [ 361.795299][ T1133] dump_stack_lvl+0x140/0x1c0 [ 361.795326][ T1133] ? __cfi_dump_stack_lvl+0x10/0x10 [ 361.795353][ T1133] ? _parse_integer+0x2e/0x40 [ 361.795373][ T1133] ? kstrtoull+0x13b/0x1e0 [ 361.795391][ T1133] dump_stack+0x19/0x20 [ 361.795416][ T1133] should_fail_ex+0x3c2/0x510 [ 361.795437][ T1133] should_fail+0xf/0x20 [ 361.795457][ T1133] should_fail_usercopy+0x1e/0x30 [ 361.795479][ T1133] _copy_from_user+0x20/0xa0 [ 361.795504][ T1133] ___sys_sendmsg+0x1c7/0x370 [ 361.795524][ T1133] ? __sys_sendmsg+0x2a0/0x2a0 [ 361.795542][ T1133] ? proc_fail_nth_write+0x184/0x220 [ 361.795570][ T1133] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 361.795601][ T1133] ? __fget_files+0x2bc/0x330 [ 361.795625][ T1133] __x64_sys_sendmsg+0x206/0x2e0 [ 361.795643][ T1133] ? fput+0x1a4/0x230 [ 361.795668][ T1133] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 361.795686][ T1133] ? ksys_write+0x1f3/0x260 [ 361.795706][ T1133] ? __kasan_check_read+0x15/0x20 [ 361.795727][ T1133] x64_sys_call+0x2a4c/0x2ee0 [ 361.795744][ T1133] do_syscall_64+0x57/0xf0 [ 361.795765][ T1133] ? clear_bhb_loop+0x50/0xa0 [ 361.795790][ T1133] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 361.795814][ T1133] RIP: 0033:0x7f25ac59e019 [ 361.795829][ T1133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.795854][ T1133] RSP: 002b:00007f25ad417028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.795875][ T1133] RAX: ffffffffffffffda RBX: 00007f25ac825fa0 RCX: 00007f25ac59e019 [ 361.795889][ T1133] RDX: 0000000020040004 RSI: 0000200000000780 RDI: 0000000000000003 [ 361.795901][ T1133] RBP: 00007f25ad417090 R08: 0000000000000000 R09: 0000000000000000 [ 361.795913][ T1133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.795925][ T1133] R13: 00007f25ac826038 R14: 00007f25ac825fa0 R15: 00007ffc4b2c6e38 [ 361.795941][ T1133] [ 362.127681][ T1154] overlayfs: failed to resolve './file0': -2 [ 362.374624][ T45] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 362.535853][ T45] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x1 is Bulk; changing to Interrupt [ 362.545838][ T45] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 362.555815][ T45] usb 4-1: config 1 interface 0 has no altsetting 0 [ 362.564768][ T45] usb 4-1: string descriptor 0 read error: -22 [ 362.571064][ T45] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 362.580148][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.591510][ T1157] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 362.598753][ T1157] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 362.810158][ T338] usb 4-1: USB disconnect, device number 12 [ 362.903431][ T1177] mmap: syz.0.294 (1177) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 363.099103][ T338] usb 3-1: USB disconnect, device number 8 [ 363.594612][ T45] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 363.664620][ T311] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 363.744602][ T45] usb 4-1: Invalid ep0 maxpacket: 64 [ 363.830374][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 363.839405][ T311] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 363.847320][ T311] usb 3-1: can't read configurations, error -71 [ 363.884674][ T45] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 364.034627][ T45] usb 4-1: Invalid ep0 maxpacket: 64 [ 364.040101][ T45] usb usb4-port1: attempt power cycle [ 364.388961][ T45] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 364.417982][ T45] usb 4-1: Invalid ep0 maxpacket: 64 [ 364.447843][ T1232] random: crng reseeded on system resumption [ 364.544707][ T45] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 364.565036][ T45] usb 4-1: Invalid ep0 maxpacket: 64 [ 364.570449][ T45] usb usb4-port1: unable to enumerate USB device [ 365.387113][ T1244] 9pnet_fd: Insufficient options for proto=fd [ 365.394022][ T1244] tipc: Enabling of bearer rejected, already enabled [ 365.453749][ T1249] netlink: 'syz.0.318': attribute type 64 has an invalid length. [ 365.524147][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 365.524165][ T36] audit: type=1400 audit(2000000017.177:358): avc: denied { relabelfrom } for pid=1257 comm="syz.0.321" name="RAWv6" dev="sockfs" ino=9086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 365.553412][ T1259] SELinux: Context system_u:object_r:gpg_agent_exec_t:s0 is not valid (left unmapped). [ 365.564709][ T36] audit: type=1400 audit(2000000017.227:359): avc: denied { relabelto } for pid=1257 comm="syz.0.321" name="RAWv6" dev="sockfs" ino=9086 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 365.601654][ T36] audit: type=1400 audit(2000000017.257:360): avc: denied { write } for pid=1262 comm="syz.0.322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 365.621338][ T1263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.322'. [ 365.639144][ T36] audit: type=1400 audit(2000000017.297:361): avc: denied { mounton } for pid=1266 comm="syz.2.323" path="/73/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 365.668922][ T36] audit: type=1400 audit(2000000017.317:362): avc: denied { search } for pid=1266 comm="syz.2.323" name="/" dev="configfs" ino=2425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 365.691107][ T36] audit: type=1400 audit(2000000017.327:363): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 365.772456][ T1273] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 365.780645][ T1274] tipc: Enabling of bearer rejected, already enabled [ 366.064642][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 366.202016][ T1285] netlink: 112 bytes leftover after parsing attributes in process `syz.0.329'. [ 366.214628][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 366.220892][ T10] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.232117][ T10] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.242294][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 366.249139][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0320, bcdDevice= 0.00 [ 366.258354][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.267258][ T10] usb 3-1: config 0 descriptor?? [ 366.275673][ T36] audit: type=1400 audit(2000000017.937:364): avc: denied { map } for pid=1288 comm="syz.0.331" path="pipe:[2867]" dev="pipefs" ino=2867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 366.313607][ T36] audit: type=1400 audit(2000000017.967:365): avc: denied { accept } for pid=1291 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 366.372102][ T1297] tipc: Enabling of bearer rejected, already enabled [ 366.380936][ T1299] netlink: 'syz.0.335': attribute type 4 has an invalid length. [ 366.388920][ T1299] netlink: 'syz.0.335': attribute type 4 has an invalid length. [ 366.398988][ T1299] netlink: 'syz.0.335': attribute type 4 has an invalid length. [ 366.414991][ T36] audit: type=1400 audit(2000000018.077:366): avc: denied { getopt } for pid=1300 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 366.478401][ T1307] netlink: 'syz.0.338': attribute type 5 has an invalid length. [ 366.486167][ T1307] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.338'. [ 366.496147][ T36] audit: type=1400 audit(2000000018.157:367): avc: denied { map } for pid=1306 comm="syz.0.338" path="socket:[9148]" dev="sockfs" ino=9148 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 366.725110][ T10] apple 0003:05AC:0320.0003: ignoring exceeding usage max [ 366.733701][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.740636][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.747604][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.754484][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.761439][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.768370][ T419] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 366.776010][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.782892][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.789939][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.796916][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.803993][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.810911][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.817884][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.824793][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.831679][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.838690][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.845599][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.852477][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.859373][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.866419][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.873286][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.880194][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.887118][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.894003][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.900915][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.907818][ T10] apple 0003:05AC:0320.0003: unknown main item tag 0x0 [ 366.915512][ T10] apple 0003:05AC:0320.0003: hidraw0: USB HID v0.81 Device [HID 05ac:0320] on usb-dummy_hcd.2-1/input0 [ 366.929062][ T10] usb 3-1: USB disconnect, device number 11 [ 366.944122][ T1308] fido_id[1308]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 366.944714][ T419] usb 4-1: Using ep0 maxpacket: 32 [ 366.964633][ T419] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.977059][ T419] usb 4-1: New USB device found, idVendor=0e41, idProduct=4242, bcdDevice= 0.40 [ 366.986474][ T419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.994499][ T419] usb 4-1: Product: syz [ 366.998801][ T419] usb 4-1: Manufacturer: syz [ 367.003439][ T419] usb 4-1: SerialNumber: syz [ 367.041965][ T1310] overlayfs: failed to clone upperpath [ 367.213934][ T419] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 367.222901][ T419] usb-storage 4-1:1.2: USB Mass Storage device detected [ 367.249612][ T419] usb 4-1: USB disconnect, device number 17 [ 367.260523][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 367.734657][ T419] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 367.884611][ T419] usb 3-1: Using ep0 maxpacket: 16 [ 367.891129][ T419] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.909484][ T419] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.927842][ T419] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 367.937806][ T419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.946312][ T419] usb 3-1: Product: syz [ 367.950684][ T419] usb 3-1: Manufacturer: syz [ 367.955531][ T419] usb 3-1: SerialNumber: syz [ 368.034629][ T311] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 368.035241][ T1337] overlayfs: failed to resolve './cgroup': -2 [ 368.167974][ T419] usb 3-1: 0:2 : does not exist [ 368.177268][ T419] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 368.192071][ T419] usb 3-1: USB disconnect, device number 12 [ 368.204591][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 368.224320][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 368.232909][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.243199][ T311] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 368.252244][ T311] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 368.264242][ T311] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 368.280419][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.288576][ T311] usb 4-1: Product: syz [ 368.292773][ T311] usb 4-1: Manufacturer: syz [ 368.297438][ T311] usb 4-1: SerialNumber: syz [ 368.760636][ T1344] x_tables: unsorted underflow at hook 2 [ 369.134683][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 369.294670][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 369.301154][ T45] usb 3-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 369.314575][ T45] usb 3-1: config 0 interface 0 has no altsetting 0 [ 369.321292][ T45] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 369.330792][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.340686][ T45] usb 3-1: config 0 descriptor?? [ 369.557164][ T1355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'. [ 369.755702][ T45] ortek 0003:1223:3F07.0004: unknown main item tag 0x4 [ 369.773350][ T45] ortek 0003:1223:3F07.0004: unknown main item tag 0x5 [ 369.788675][ T45] ortek 0003:1223:3F07.0004: unknown main item tag 0x2 [ 369.795966][ T45] ortek 0003:1223:3F07.0004: unexpected long global item [ 369.803663][ T45] ortek 0003:1223:3F07.0004: probe with driver ortek failed with error -22 [ 369.954995][ T1348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.978582][ T1348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.984664][ T1365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.004772][ T1365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.015098][ T45] usb 3-1: USB disconnect, device number 13 [ 370.751723][ T311] usb 4-1: USB disconnect, device number 18 [ 370.762289][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 370.803443][ T1377] netlink: 'syz.3.361': attribute type 4 has an invalid length. [ 370.813393][ T1377] netlink: 'syz.3.361': attribute type 4 has an invalid length. [ 371.164621][ T311] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 371.314628][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 371.320963][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.332078][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 371.345675][ T311] usb 4-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 371.354822][ T311] usb 4-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 371.362903][ T311] usb 4-1: Product: syz [ 371.367783][ T311] usb 4-1: config 0 descriptor?? [ 371.499591][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 371.499625][ T36] audit: type=1400 audit(2000000023.157:372): avc: denied { getopt } for pid=1385 comm="syz.2.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 371.506241][ T1386] overlay: Unknown parameter '/ogon' [ 371.645954][ T36] audit: type=1400 audit(2000000023.307:373): avc: denied { search } for pid=1403 comm="syz.2.367" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 371.667849][ T36] audit: type=1400 audit(2000000023.307:374): avc: denied { write } for pid=1403 comm="syz.2.367" name="inject" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 371.776282][ T311] usbhid 4-1:0.0: can't add hid device: -71 [ 371.782555][ T311] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 371.791551][ T311] usb 4-1: USB disconnect, device number 19 [ 371.944670][ T338] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 372.095163][ T338] usb 3-1: Using ep0 maxpacket: 32 [ 372.101600][ T338] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 372.112898][ T338] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 372.122067][ T338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.130133][ T338] usb 3-1: Product: syz [ 372.134372][ T338] usb 3-1: Manufacturer: syz [ 372.139050][ T338] usb 3-1: SerialNumber: syz [ 372.144699][ T1406] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 372.342728][ T1410] netlink: 'syz.3.370': attribute type 4 has an invalid length. [ 372.352528][ T1410] netlink: 'syz.3.370': attribute type 4 has an invalid length. [ 372.396347][ T1413] 9pnet: Unknown protocol version 9 [ 372.402138][ T36] audit: type=1326 audit(2000000024.057:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1412 comm="syz.3.371" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25ac59e019 code=0x0 [ 372.521450][ T338] usb 3-1: MIDIStreaming interface descriptor not found [ 372.533044][ T338] usb 3-1: USB disconnect, device number 14 [ 372.949465][ T36] audit: type=1400 audit(2000000024.607:376): avc: denied { read } for pid=1425 comm="syz.2.376" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 372.972989][ T36] audit: type=1400 audit(2000000024.607:377): avc: denied { open } for pid=1425 comm="syz.2.376" path="/92/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 372.997555][ T36] audit: type=1400 audit(2000000024.607:378): avc: denied { ioctl } for pid=1425 comm="syz.2.376" path="/92/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 373.023820][ T36] audit: type=1400 audit(2000000024.657:379): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 373.049801][ T36] audit: type=1400 audit(2000000024.707:380): avc: denied { accept } for pid=1427 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 373.144140][ T1431] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 373.244059][ T1433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'. [ 373.609188][ T1451] 9pnet_fd: Insufficient options for proto=fd [ 373.632499][ T1453] netlink: 37 bytes leftover after parsing attributes in process `syz.0.386'. [ 373.718932][ T36] audit: type=1400 audit(2000000025.377:381): avc: denied { nlmsg_read } for pid=1457 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 374.763416][ T1484] netlink: 'syz.3.398': attribute type 4 has an invalid length. [ 374.784106][ T1484] netlink: 'syz.3.398': attribute type 4 has an invalid length. [ 374.854300][ T1492] netlink: 'syz.0.402': attribute type 4 has an invalid length. [ 374.862489][ T1492] netlink: 'syz.0.402': attribute type 4 has an invalid length. [ 375.344627][ T311] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 375.495664][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 375.514588][ T311] usb 3-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 375.523801][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.535389][ T311] usb 3-1: config 0 descriptor?? [ 375.542643][ T1506] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 375.655994][ T1513] netlink: 'syz.0.410': attribute type 4 has an invalid length. [ 375.667229][ T1513] netlink: 'syz.0.410': attribute type 4 has an invalid length. [ 375.751213][ T1506] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 375.751238][ T1506] rust_binder: Read failure Err(EFAULT) in pid:327 [ 375.944566][ T1533] syzkaller1: entered promiscuous mode [ 375.956842][ T1533] syzkaller1: entered allmulticast mode [ 376.266413][ T311] usbhid 3-1:0.0: can't add hid device: -71 [ 376.272947][ T311] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 376.288216][ T1538] validate_nla: 2 callbacks suppressed [ 376.288232][ T1538] netlink: 'syz.2.420': attribute type 4 has an invalid length. [ 376.293196][ T311] usb 3-1: USB disconnect, device number 15 [ 376.309796][ T1538] netlink: 'syz.2.420': attribute type 4 has an invalid length. [ 376.545463][ T1552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=1552 comm=syz.3.425 [ 376.558438][ T1552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.425'. [ 376.684695][ T311] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 376.701617][ T1559] Falling back ldisc for ttyS3. [ 376.775973][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 376.775991][ T36] audit: type=1400 audit(2000000028.437:403): avc: denied { read } for pid=1560 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 376.826955][ T36] audit: type=1400 audit(2000000028.487:404): avc: denied { getopt } for pid=1560 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 376.856258][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 376.866254][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 36, changing to 7 [ 376.877265][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 18095, setting to 1024 [ 376.889995][ T311] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 376.899231][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.907297][ T311] usb 3-1: Product: syz [ 376.911735][ T311] usb 3-1: Manufacturer: syz [ 376.916646][ T311] usb 3-1: SerialNumber: syz [ 376.924725][ T311] usb 3-1: config 0 descriptor?? [ 376.933923][ T311] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 39, bLength 9, bSynchAddress 24 [ 377.139287][ T311] usb 3-1: USB disconnect, device number 16 [ 377.148530][ T367] udevd[367]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 377.534806][ T1580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.434'. [ 377.651716][ T36] audit: type=1400 audit(2000000029.307:405): avc: denied { map } for pid=1588 comm="syz.2.437" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 377.682506][ T1585] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.689971][ T1585] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.697327][ T1585] bridge_slave_0: entered allmulticast mode [ 377.703849][ T1585] bridge_slave_0: entered promiscuous mode [ 377.710743][ T1585] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.718027][ T1585] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.725250][ T1585] bridge_slave_1: entered allmulticast mode [ 377.731787][ T1585] bridge_slave_1: entered promiscuous mode [ 377.748404][ T36] audit: type=1400 audit(2000000029.407:406): avc: denied { mount } for pid=1588 comm="syz.2.437" name="/" dev="ramfs" ino=10886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 377.820937][ T1600] 8021q: VLANs not supported on ip_vti0 [ 377.834595][ T419] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 377.846403][ T1585] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.853504][ T1585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.860847][ T1585] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.867936][ T1585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.892104][ T1625] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.899504][ T1625] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.909982][ T1624] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.917112][ T1624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.926802][ T1625] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.933911][ T1625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.962427][ T1585] veth0_vlan: entered promiscuous mode [ 377.974174][ T1585] veth1_macvtap: entered promiscuous mode [ 377.988222][ T419] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 377.999724][ T419] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 378.012682][ T419] usb 4-1: New USB device found, idVendor=8847, idProduct=070f, bcdDevice= 0.00 [ 378.023040][ T419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.032143][ T36] audit: type=1400 audit(2000000029.687:407): avc: denied { mount } for pid=1585 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 378.055060][ T419] usb 4-1: config 0 descriptor?? [ 378.063276][ T1584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 378.063778][ T36] audit: type=1400 audit(2000000029.687:408): avc: denied { mounton } for pid=1585 comm="syz-executor" path="/root/syzkaller.hFys7z/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 378.100424][ T338] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 378.106163][ T1627] can0: slcan on ptm0. [ 378.127805][ T36] audit: type=1400 audit(2000000029.767:409): avc: denied { watch_reads } for pid=1626 comm="syz.4.435" path="/0/file0" dev="tmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 378.150990][ T36] audit: type=1400 audit(2000000029.777:410): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 378.172547][ T1627] can0 (unregistered): slcan off ptm0. [ 378.184450][ T1632] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 378.292223][ T36] audit: type=1400 audit(2000000029.947:411): avc: denied { bind } for pid=1637 comm="syz.0.442" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 378.314230][ T338] usb 3-1: Using ep0 maxpacket: 32 [ 378.319689][ T36] audit: type=1400 audit(2000000029.947:412): avc: denied { name_bind } for pid=1637 comm="syz.0.442" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 378.343349][ T338] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.357472][ T338] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 378.366640][ T338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.384812][ T338] usb 3-1: Product: syz [ 378.389039][ T338] usb 3-1: Manufacturer: syz [ 378.393652][ T338] usb 3-1: SerialNumber: syz [ 378.400220][ T338] usb 3-1: config 0 descriptor?? [ 378.406932][ T338] smsc75xx v1.0.0 [ 378.410820][ T338] smsc75xx 3-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 378.421337][ T338] smsc75xx 3-1:0.0: probe with driver smsc75xx failed with error -22 [ 378.524673][ T310] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 378.610992][ T31] usb 3-1: USB disconnect, device number 17 [ 378.675614][ T310] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.685901][ T310] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 378.694950][ T310] usb 5-1: config 1 has no interface number 0 [ 378.701148][ T310] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 378.715833][ T310] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.725069][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.733086][ T310] usb 5-1: Product: syz [ 378.737848][ T310] usb 5-1: Manufacturer: syz [ 378.742476][ T310] usb 5-1: SerialNumber: syz [ 378.750033][ T310] cdc_ncm 5-1:1.1: NCM or ECM functional descriptors missing [ 378.757652][ T310] cdc_ncm 5-1:1.1: bind() failure [ 378.839570][ T1584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.848155][ T1584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.859558][ T419] usbhid 4-1:0.0: can't add hid device: -71 [ 378.865633][ T419] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 378.874409][ T419] usb 4-1: USB disconnect, device number 20 [ 379.080862][ T1658] netlink: 44 bytes leftover after parsing attributes in process `syz.0.447'. [ 379.089896][ T1658] netlink: 43 bytes leftover after parsing attributes in process `syz.0.447'. [ 379.098893][ T1658] netlink: 'syz.0.447': attribute type 6 has an invalid length. [ 379.106680][ T1658] netlink: 'syz.0.447': attribute type 5 has an invalid length. [ 379.114511][ T1658] netlink: 43 bytes leftover after parsing attributes in process `syz.0.447'. [ 379.182675][ T1667] SELinux: Context system_u: is not valid (left unmapped). [ 379.305385][ T1679] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 379.305691][ T1680] tipc: Enabling of bearer rejected, already enabled [ 379.414596][ T310] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 379.459352][ T1695] netlink: 'syz.3.461': attribute type 9 has an invalid length. [ 379.567166][ T310] usb 3-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 379.576361][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.584356][ T310] usb 3-1: Product: syz [ 379.588813][ T310] usb 3-1: Manufacturer: syz [ 379.593545][ T310] usb 3-1: SerialNumber: syz [ 379.794688][ T419] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 379.803059][ T1664] netlink: 'syz.2.450': attribute type 4 has an invalid length. [ 379.810780][ T1664] netlink: 17 bytes leftover after parsing attributes in process `syz.2.450'. [ 379.835018][ T310] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 379.841936][ T310] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 379.852118][ T310] usb 3-1: USB disconnect, device number 18 [ 379.869308][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 379.924667][ T419] usb 4-1: device descriptor read/64, error -71 [ 380.164618][ T419] usb 4-1: device descriptor read/64, error -71 [ 380.400150][ T1703] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 380.401130][ T1704] tipc: Enabling of bearer rejected, already enabled [ 380.416889][ T419] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 380.456461][ T1713] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 380.554607][ T419] usb 4-1: device descriptor read/64, error -71 [ 380.794609][ T419] usb 4-1: device descriptor read/64, error -71 [ 380.887096][ T1732] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 380.895785][ T1732] tipc: Enabling of bearer rejected, already enabled [ 380.904829][ T419] usb usb4-port1: attempt power cycle [ 380.954620][ T312] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 381.106200][ T312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 381.114337][ T312] usb 3-1: not running at top speed; connect to a high speed hub [ 381.123008][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.133218][ T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.143605][ T312] usb 3-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 381.153218][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.161292][ T312] usb 3-1: Product: syz [ 381.165524][ T312] usb 3-1: Manufacturer: syz [ 381.170123][ T312] usb 3-1: SerialNumber: syz [ 381.254614][ T419] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 381.275712][ T419] usb 4-1: device descriptor read/8, error -71 [ 381.293079][ T338] usb 5-1: USB disconnect, device number 2 [ 381.377212][ T1727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.386036][ T1727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.405654][ T419] usb 4-1: device descriptor read/8, error -71 [ 381.456080][ T312] usb 3-1: USB disconnect, device number 19 [ 381.624639][ T338] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 381.644654][ T419] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 381.665625][ T419] usb 4-1: device descriptor read/8, error -71 [ 381.754635][ T338] usb 5-1: device descriptor read/64, error -71 [ 381.795667][ T419] usb 4-1: device descriptor read/8, error -71 [ 381.904724][ T419] usb usb4-port1: unable to enumerate USB device [ 381.994642][ T338] usb 5-1: device descriptor read/64, error -71 [ 382.234646][ T338] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 382.364625][ T338] usb 5-1: device descriptor read/64, error -71 [ 382.604678][ T338] usb 5-1: device descriptor read/64, error -71 [ 382.611860][ T1761] 9pnet_fd: Insufficient options for proto=fd [ 382.617745][ T1762] tipc: Enabling of bearer rejected, already enabled [ 382.618208][ T1755] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 382.689581][ T1766] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 382.715094][ T338] usb usb5-port1: attempt power cycle [ 383.014711][ T419] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 383.064746][ T338] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 383.085816][ T338] usb 5-1: device descriptor read/8, error -71 [ 383.165761][ T419] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 383.177631][ T419] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 383.189059][ T419] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 383.200554][ T419] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 383.213576][ T419] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 383.222888][ T419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.231794][ T338] usb 5-1: device descriptor read/8, error -71 [ 383.238266][ T419] usb 4-1: config 0 descriptor?? [ 383.243614][ T1775] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 383.250162][ T1783] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 383.259159][ T1783] tipc: Enabling of bearer rejected, already enabled [ 383.494620][ T338] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 383.525630][ T338] usb 5-1: device descriptor read/8, error -71 [ 383.653457][ T419] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x3 [ 383.661026][ T419] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x5 [ 383.669789][ T419] plantronics 0003:047F:FFFF.0005: item fetching failed at offset 13/15 [ 383.678625][ T419] plantronics 0003:047F:FFFF.0005: parse failed [ 383.685015][ T338] usb 5-1: device descriptor read/8, error -71 [ 383.691236][ T419] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22 [ 383.726651][ T1793] fuse: Bad value for 'rootmode' [ 383.768300][ T1799] x_tables: duplicate entry at hook 2 [ 383.780316][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 383.780355][ T36] audit: type=1400 audit(2000000035.437:431): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 383.806280][ T338] usb usb5-port1: unable to enumerate USB device [ 384.064635][ T338] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 384.140887][ T1809] tipc: Failed to remove unknown binding: 66,0,0/2130706433:218349272/218349273 [ 384.150408][ T1809] tipc: Failed to remove unknown binding: 66,0,0/2130706433:218349272/218349273 [ 384.194787][ T338] usb 3-1: device descriptor read/64, error -71 [ 384.224042][ T1811] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 384.225652][ T1812] tipc: Enabling of bearer rejected, already enabled [ 384.336972][ T1816] netlink: 'syz.4.504': attribute type 2 has an invalid length. [ 384.344799][ T1816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.504'. [ 384.373155][ T310] usb 4-1: USB disconnect, device number 25 [ 384.444602][ T338] usb 3-1: device descriptor read/64, error -71 [ 384.455548][ T36] audit: type=1400 audit(2000000036.117:432): avc: denied { write } for pid=1832 comm="syz.0.509" path="socket:[13400]" dev="sockfs" ino=13400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 384.495351][ T36] audit: type=1400 audit(2000000036.157:433): avc: denied { listen } for pid=1839 comm="syz.4.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 384.514887][ T36] audit: type=1400 audit(2000000036.167:434): avc: denied { setopt } for pid=1839 comm="syz.4.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 384.651241][ T1858] can0: slcan on ptm0. [ 384.662734][ T36] audit: type=1400 audit(2000000036.317:435): avc: denied { read } for pid=150 comm="dhcpcd" name="n16" dev="tmpfs" ino=2011 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 384.685555][ T36] audit: type=1400 audit(2000000036.317:436): avc: denied { open } for pid=150 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=2011 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 384.698956][ T338] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 384.716114][ T310] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 384.718151][ T36] audit: type=1400 audit(2000000036.317:437): avc: denied { getattr } for pid=150 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=2011 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 384.747254][ T36] audit: type=1400 audit(2000000036.367:438): avc: denied { write } for pid=1861 comm="syz.0.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 384.823649][ T36] audit: type=1400 audit(2000000036.477:439): avc: denied { create } for pid=1864 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 384.846130][ T36] audit: type=1400 audit(2000000036.477:440): avc: denied { write } for pid=1864 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=2019 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 384.855377][ T1857] can0 (unregistered): slcan off ptm0. [ 384.896383][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 384.904845][ T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.915052][ T338] usb 3-1: device descriptor read/64, error -71 [ 384.926211][ T310] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 384.938669][ T310] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 384.958396][ T310] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 384.971747][ T310] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 384.983158][ T310] usb 4-1: config 1 interface 1 has no altsetting 0 [ 384.996583][ T310] usb 4-1: string descriptor 0 read error: -22 [ 385.002846][ T310] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 385.018383][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.154675][ T338] usb 3-1: device descriptor read/64, error -71 [ 385.268447][ T1900] netlink: 'syz.0.522': attribute type 27 has an invalid length. [ 385.276602][ T338] usb usb3-port1: attempt power cycle [ 385.293739][ T1900] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.301062][ T1900] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.346016][ T1900] tipc: Resetting bearer [ 385.465379][ T1912] netlink: 'syz.0.525': attribute type 27 has an invalid length. [ 385.503197][ T1912] veth0_vlan: left promiscuous mode [ 385.509453][ T1912] veth0_vlan: entered promiscuous mode [ 385.517161][ T1912] veth1_macvtap: left promiscuous mode [ 385.525055][ T1912] tipc: Resetting bearer [ 385.531344][ T1912] tipc: Resetting bearer [ 385.537875][ T1912] veth1_macvtap: entered promiscuous mode [ 385.548700][ T1624] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.555871][ T1624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.564192][ T1624] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.571296][ T1624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.644593][ T338] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 385.654241][ T1918] netlink: 'syz.0.527': attribute type 13 has an invalid length. [ 385.665624][ T338] usb 3-1: device descriptor read/8, error -71 [ 385.688112][ T1920] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 385.696153][ T1920] rust_binder: Write failure EINVAL in pid:41 [ 385.731641][ T1929] netlink: 'syz.4.530': attribute type 46 has an invalid length. [ 385.752633][ T1929] SELinux: Context system_u:object_r:usbmon_device_t:s0 is not valid (left unmapped). [ 385.801024][ T338] usb 3-1: device descriptor read/8, error -71 [ 385.823238][ T1938] netlink: 'syz.0.533': attribute type 4 has an invalid length. [ 385.831768][ T1822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.841370][ T1822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.871722][ T1940] sit0: entered promiscuous mode [ 385.878412][ T1940] netlink: 'syz.0.534': attribute type 1 has an invalid length. [ 385.886631][ T1940] netlink: 1 bytes leftover after parsing attributes in process `syz.0.534'. [ 385.923362][ T1942] netlink: 1291 bytes leftover after parsing attributes in process `syz.0.535'. [ 386.025561][ T31] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 386.044656][ T338] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 386.076983][ T338] usb 3-1: device descriptor read/8, error -71 [ 386.184618][ T31] usb 5-1: Invalid ep0 maxpacket: 32 [ 386.205635][ T338] usb 3-1: device descriptor read/8, error -71 [ 386.314594][ T31] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 386.326781][ T338] usb usb3-port1: unable to enumerate USB device [ 386.461901][ T310] usb 4-1: Warning! Unlikely big volume range (=14949), cval->res is probably wrong. [ 386.474773][ T31] usb 5-1: Invalid ep0 maxpacket: 32 [ 386.480450][ T310] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = -14949/0/1 [ 386.488761][ T31] usb usb5-port1: attempt power cycle [ 386.499854][ T310] usb 4-1: USB disconnect, device number 26 [ 386.561848][ T1989] netlink: 'syz.3.542': attribute type 4 has an invalid length. [ 386.834738][ T31] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 386.865321][ T31] usb 5-1: Invalid ep0 maxpacket: 32 [ 386.893353][ T2014] netlink: 'syz.2.551': attribute type 4 has an invalid length. [ 386.914801][ T310] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 386.941511][ T2018] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 386.942855][ T2019] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 386.969823][ T2019] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 387.014651][ T31] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 387.035356][ T31] usb 5-1: Invalid ep0 maxpacket: 32 [ 387.040790][ T31] usb usb5-port1: unable to enumerate USB device [ 387.075264][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 387.081441][ T310] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.091979][ T310] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 387.101243][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.110094][ T310] usb 4-1: config 0 descriptor?? [ 387.116352][ T310] usb 4-1: bad CDC descriptors [ 387.316999][ T31] usb 4-1: USB disconnect, device number 27 [ 387.424723][ T310] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 387.508104][ T2037] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 387.595351][ T310] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 387.608523][ T310] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 387.617758][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.628156][ T310] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 387.635453][ T310] usb 3-1: No valid video chain found. [ 387.829388][ T2029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.838295][ T2029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.847044][ T310] usb 3-1: USB disconnect, device number 24 [ 388.060755][ T2048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.564'. [ 388.069817][ T2048] tipc: Resetting bearer [ 388.077961][ T2048] tipc: Disabling bearer [ 388.536117][ T2066] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 388.624629][ T310] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 388.754630][ T310] usb 3-1: device descriptor read/64, error -71 [ 388.995959][ T310] usb 3-1: device descriptor read/64, error -71 [ 389.044601][ T338] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 389.096574][ T2098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.581'. [ 389.113662][ T1614] Bluetooth: hci0: Frame reassembly failed (-84) [ 389.195727][ T338] usb 4-1: config 0 has no interfaces? [ 389.202723][ T338] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 389.212082][ T338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 389.220142][ T338] usb 4-1: SerialNumber: syz [ 389.230022][ T338] usb 4-1: config 0 descriptor?? [ 389.244637][ T310] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 389.375163][ T310] usb 3-1: device descriptor read/64, error -71 [ 389.436375][ T338] usb 4-1: USB disconnect, device number 28 [ 389.614824][ T310] usb 3-1: device descriptor read/64, error -71 [ 389.724757][ T310] usb usb3-port1: attempt power cycle [ 390.066426][ T310] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 390.099575][ T310] usb 3-1: device descriptor read/8, error -71 [ 390.168127][ T2137] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 390.206102][ T2142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.590'. [ 390.215720][ T2142] tipc: Resetting bearer [ 390.224403][ T2142] tipc: Disabling bearer [ 390.245696][ T310] usb 3-1: device descriptor read/8, error -71 [ 390.360606][ T2155] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 390.390236][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 390.390255][ T36] audit: type=1400 audit(2000000042.047:455): avc: denied { create } for pid=2162 comm="syz.3.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 390.494911][ T310] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 390.536781][ T310] usb 3-1: device descriptor read/8, error -71 [ 390.612299][ T36] audit: type=1400 audit(2000000042.267:456): avc: denied { mounton } for pid=2185 comm="syz.3.604" path="/110/file1" dev="tmpfs" ino=594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 390.658247][ T36] audit: type=1400 audit(2000000042.317:457): avc: denied { name_bind } for pid=2181 comm="syz.0.603" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 390.664798][ T2188] tipc: Enabling of bearer rejected, failed to enable media [ 390.689037][ T310] usb 3-1: device descriptor read/8, error -71 [ 390.758064][ T2196] netlink: 'syz.3.607': attribute type 6 has an invalid length. [ 390.770484][ T36] audit: type=1400 audit(2000000042.427:458): avc: denied { write } for pid=2195 comm="syz.3.607" name="protocols" dev="proc" ino=4026532551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 390.814881][ T310] usb usb3-port1: unable to enumerate USB device [ 390.823821][ T36] audit: type=1400 audit(2000000042.477:459): avc: denied { execute } for pid=2202 comm="syz.3.608" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 390.909377][ T2204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 390.952476][ T36] audit: type=1400 audit(2000000042.607:460): avc: denied { create } for pid=2207 comm="syz.3.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 391.134625][ T2102] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 391.161191][ T2224] netlink: 'syz.3.614': attribute type 12 has an invalid length. [ 391.172047][ T36] audit: type=1400 audit(2000000042.827:461): avc: denied { execute } for pid=2222 comm="syz.3.614" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=13228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 391.268719][ T2229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2229 comm=syz.3.617 [ 391.393567][ T2238] netlink: 124 bytes leftover after parsing attributes in process `syz.0.622'. [ 391.425949][ T2247] 9pnet_fd: Insufficient options for proto=fd [ 391.427837][ T36] audit: type=1400 audit(2000000043.087:462): avc: denied { bind } for pid=2244 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 391.565401][ T2261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.573982][ T2261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.583557][ T2261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.592657][ T36] audit: type=1400 audit(2000000043.247:463): avc: denied { shutdown } for pid=2260 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 391.593008][ T2261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.614105][ T311] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 391.764798][ T311] usb 5-1: device descriptor read/64, error -71 [ 392.014673][ T311] usb 5-1: device descriptor read/64, error -71 [ 392.212217][ T2272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.632'. [ 392.235435][ T2275] 9pnet_fd: Insufficient options for proto=fd [ 392.255430][ T2277] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 392.274621][ T311] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 392.285572][ T2279] IPv6: NLM_F_CREATE should be specified when creating new route [ 392.318227][ T36] audit: type=1400 audit(2000000043.977:464): avc: denied { execute } for pid=2283 comm="syz.3.636" name="file0" dev="tmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 392.339450][ T2286] netlink: 'syz.2.637': attribute type 27 has an invalid length. [ 392.414853][ T311] usb 5-1: device descriptor read/64, error -71 [ 392.665001][ T311] usb 5-1: device descriptor read/64, error -71 [ 392.704613][ T310] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 392.774823][ T311] usb usb5-port1: attempt power cycle [ 392.855975][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 392.864283][ T310] usb 4-1: config 1 has an invalid interface number: 182 but max is 0 [ 392.872642][ T310] usb 4-1: config 1 has no interface number 0 [ 392.879002][ T310] usb 4-1: config 1 interface 182 has no altsetting 0 [ 392.895231][ T310] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=8a.38 [ 392.904280][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.912715][ T310] usb 4-1: Product: syz [ 392.916959][ T310] usb 4-1: Manufacturer: syz [ 392.921582][ T310] usb 4-1: SerialNumber: syz [ 393.007985][ T2297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.641'. [ 393.031611][ T2299] 9pnet_fd: Insufficient options for proto=fd [ 393.052928][ T2301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.643'. [ 393.124645][ T311] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 393.145775][ T311] usb 5-1: device descriptor read/8, error -71 [ 393.227110][ T310] usb 4-1: MBOX3: Invalid descriptor size=18. [ 393.233979][ T310] usb 4-1: USB disconnect, device number 29 [ 393.285627][ T311] usb 5-1: device descriptor read/8, error -71 [ 393.535517][ T311] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 393.555859][ T311] usb 5-1: device descriptor read/8, error -71 [ 393.590109][ T2306] batadv_slave_1: entered promiscuous mode [ 393.596414][ T2305] batadv_slave_1: left promiscuous mode [ 393.635626][ T2313] netlink: 'syz.0.647': attribute type 27 has an invalid length. [ 393.645003][ T2313] sit0: left promiscuous mode [ 393.685935][ T311] usb 5-1: device descriptor read/8, error -71 [ 393.707076][ T2323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.650'. [ 393.738572][ T2326] 9pnet_fd: Insufficient options for proto=fd [ 393.783920][ T2331] cgroup: noprefix used incorrectly [ 393.809509][ T311] usb usb5-port1: unable to enumerate USB device [ 394.264608][ T310] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 394.417251][ T2342] netlink: 'syz.4.657': attribute type 12 has an invalid length. [ 394.425606][ T2342] netlink: 'syz.4.657': attribute type 32 has an invalid length. [ 394.434609][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 394.445388][ T310] usb 4-1: config index 0 descriptor too short (expected 38905, got 45) [ 394.454264][ T310] usb 4-1: config 210 has too many interfaces: 244, using maximum allowed: 32 [ 394.474662][ T310] usb 4-1: config 210 has an invalid descriptor of length 0, skipping remainder of the config [ 394.494671][ T310] usb 4-1: config 210 has 1 interface, different from the descriptor's value: 244 [ 394.503948][ T310] usb 4-1: config 210 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.534632][ T310] usb 4-1: config 210 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.554583][ T310] usb 4-1: config 210 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.580290][ T310] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 394.594586][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.655461][ T2344] rust_binder: Write failure EINVAL in pid:73 [ 395.017599][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.030764][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.037886][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.045005][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.051997][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.059125][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.066442][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.073466][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.080495][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.087608][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.094626][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.101676][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.108735][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.115806][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.122793][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.129803][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.137259][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.144278][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.151315][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.158445][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.165473][ T310] lg-g15 0003:046D:C227.0006: unknown main item tag 0x0 [ 395.173437][ T310] lg-g15 0003:046D:C227.0006: hidraw0: USB HID v5.40 Device [HID 046d:c227] on usb-dummy_hcd.3-1/input0 [ 395.236203][ T311] usb 4-1: USB disconnect, device number 30 [ 395.336226][ T2357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.662'. [ 395.392183][ T2361] netlink: 'syz.0.664': attribute type 27 has an invalid length. [ 395.604635][ T310] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 395.759275][ T310] usb 5-1: Using ep0 maxpacket: 16 [ 395.771500][ T310] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 395.782889][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.791926][ T310] usb 5-1: Product: syz [ 395.796864][ T310] usb 5-1: Manufacturer: syz [ 395.801501][ T310] usb 5-1: SerialNumber: syz [ 395.813426][ T310] r8152-cfgselector 5-1: Unknown version 0x0000 [ 395.822215][ T310] r8152-cfgselector 5-1: config 0 descriptor?? [ 396.033980][ T310] r8152-cfgselector 5-1: Unknown version 0x0000 [ 396.049244][ T310] r8152-cfgselector 5-1: bad CDC descriptors [ 396.065839][ T310] r8152-cfgselector 5-1: USB disconnect, device number 15 [ 396.589241][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 396.589270][ T36] audit: type=1400 audit(2000000048.247:472): avc: denied { create } for pid=2385 comm="syz.4.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 396.662097][ T36] audit: type=1400 audit(2000000048.317:473): avc: denied { read write } for pid=1585 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.711105][ T36] audit: type=1400 audit(2000000048.317:474): avc: denied { open } for pid=1585 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.761459][ T36] audit: type=1400 audit(2000000048.317:475): avc: denied { ioctl } for pid=1585 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 396.801388][ T2390] netlink: 180 bytes leftover after parsing attributes in process `syz.4.674'. [ 396.834651][ T2389] netlink: 180 bytes leftover after parsing attributes in process `syz.4.674'. [ 396.854298][ T36] audit: type=1400 audit(2000000048.457:476): avc: denied { write } for pid=2378 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 396.905329][ T36] audit: type=1400 audit(2000000048.457:477): avc: denied { create } for pid=2391 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 396.919161][ T2401] netlink: 'syz.0.678': attribute type 12 has an invalid length. [ 396.944582][ T36] audit: type=1400 audit(2000000048.457:478): avc: denied { setopt } for pid=2391 comm="syz.3.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 396.965250][ T2401] netlink: 140 bytes leftover after parsing attributes in process `syz.0.678'. [ 396.984670][ T36] audit: type=1400 audit(2000000048.487:479): avc: denied { create } for pid=2393 comm="syz.0.675" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 397.014046][ T36] audit: type=1400 audit(2000000048.507:480): avc: denied { read write } for pid=2393 comm="syz.0.675" name="file0" dev="tmpfs" ino=1570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 397.037069][ T36] audit: type=1400 audit(2000000048.507:481): avc: denied { open } for pid=2393 comm="syz.0.675" path="/292/file0" dev="tmpfs" ino=1570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 397.103900][ T2410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'. [ 397.384591][ T310] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 397.544626][ T310] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 397.574589][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 397.596040][ T310] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 397.614585][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.622622][ T310] usb 5-1: Product: syz [ 397.626858][ T310] usb 5-1: Manufacturer: syz [ 397.631570][ T310] usb 5-1: SerialNumber: syz [ 397.637580][ T310] usb 5-1: config 0 descriptor?? [ 397.642852][ T2413] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 397.656440][ T310] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 397.842350][ T2424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.853584][ T2424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.854410][ T311] usb 5-1: USB disconnect, device number 16 [ 397.873813][ T2424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.895460][ T2424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.914765][ T2424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.926945][ T2424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.936141][ T2424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.945421][ T2424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.084638][ T310] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 398.234592][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 398.246194][ T310] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 398.274582][ T310] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 398.294578][ T310] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 398.305325][ T310] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 398.317465][ T310] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 398.326646][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.336645][ T310] usb 4-1: Product: ⥐ꄧהּ趵浪蜉槁ꈖ䳭ꝷ쵛ᶌ뾂ἃ徼纱ঝ밉笘ὺ窉伨㲷祮뜺츨✓疩쬾묫땡䒙跭쬳⿝쬿畀䊴鿸ﯗ懅뭰枚⃒鮺끢眤斟䅌쾆┏뀈묻⚕남ຽ猴鮷⽝铴瀧ⶶၩֽᠩ蹛옙 [ 398.361017][ T310] usb 4-1: Manufacturer: ఁ [ 398.365754][ T310] usb 4-1: SerialNumber: 羃槨㺪廰썕旄蠖朢ꊙ簛댦衁뉄ꫩ庪㮈ᡝｖ閮䆔혧恋ꐎ␎푢곮룁빕⬠⭉๛ᡨ絼뮓웗寘∲傋ꥱꙗ痂⥰뗝鐍쉸ꮋ良莱뺥弱ꋣᄌ醐䎁싁늶 [ 398.577148][ T2444] netlink: 'syz.0.690': attribute type 4 has an invalid length. [ 398.635817][ T2446] netlink: 92 bytes leftover after parsing attributes in process `syz.0.691'. [ 398.645064][ T2446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=2446 comm=syz.0.691 [ 399.347272][ T2459] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1543 sclass=netlink_tcpdiag_socket pid=2459 comm=syz.4.695 [ 399.876285][ T2488] netlink: 'syz.4.702': attribute type 27 has an invalid length. [ 400.024885][ T2495] syzkaller1: entered promiscuous mode [ 400.030551][ T2495] syzkaller1: entered allmulticast mode [ 400.357561][ T2508] netlink: 'syz.4.710': attribute type 15 has an invalid length. [ 400.365917][ T2506] netlink: 'syz.4.710': attribute type 15 has an invalid length. [ 400.523244][ T2517] netlink: 'syz.4.712': attribute type 5 has an invalid length. [ 400.544822][ T2517] x_tables: duplicate underflow at hook 2 [ 400.726372][ T310] usb 4-1: MIDIStreaming interface descriptor not found [ 400.754044][ T310] usb 4-1: USB disconnect, device number 31 [ 400.777335][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 400.791249][ T2527] netlink: 'syz.3.715': attribute type 27 has an invalid length. [ 400.824867][ T45] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 400.985788][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.996932][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.017176][ T45] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 401.032648][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.055127][ T45] usb 5-1: config 0 descriptor?? [ 401.310935][ T2103] Bluetooth: hci0: sending frame failed (-49) [ 401.317475][ T2102] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 401.456111][ T2551] netlink: 'syz.0.723': attribute type 27 has an invalid length. [ 401.546850][ T45] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 401.571468][ T45] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 401.585629][ T45] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 401.603389][ T45] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 401.614804][ T45] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 401.633439][ T45] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 401.745051][ T45] playstation 0003:054C:0DF2.0007: Failed to retrieve feature with reportID 9: -71 [ 401.764595][ T45] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -71 [ 401.773867][ T45] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 401.789188][ T45] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 401.798598][ T45] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -71 [ 401.813245][ T45] usb 5-1: USB disconnect, device number 17 [ 402.118460][ T36] kauditd_printk_skb: 92 callbacks suppressed [ 402.118480][ T36] audit: type=1400 audit(2000000053.777:574): avc: denied { create } for pid=2562 comm="syz.0.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 402.184843][ T36] audit: type=1400 audit(2000000053.847:575): avc: denied { getopt } for pid=2569 comm="syz.0.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 402.207033][ T311] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 402.214977][ T36] audit: type=1400 audit(2000000053.867:576): avc: denied { shutdown } for pid=2569 comm="syz.0.730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 402.284613][ T36] audit: type=1400 audit(2000000053.937:577): avc: denied { create } for pid=2571 comm="syz.4.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 402.384589][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 402.390056][ T2574] netlink: 'syz.4.732': attribute type 27 has an invalid length. [ 402.399091][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 402.407678][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.424603][ T311] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 402.441116][ T311] usb 4-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 402.451188][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.467931][ T311] usb 4-1: Product: syz [ 402.472130][ T311] usb 4-1: Manufacturer: syz [ 402.483788][ T311] usb 4-1: SerialNumber: syz [ 402.502548][ T36] audit: type=1400 audit(2000000054.157:578): avc: denied { write } for pid=2575 comm="syz.4.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 402.536038][ T36] audit: type=1400 audit(2000000054.187:579): avc: denied { accept } for pid=2575 comm="syz.4.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 402.637647][ T36] audit: type=1400 audit(2000000054.297:580): avc: denied { mounton } for pid=2577 comm="syz.4.734" path="/55/file0" dev="tmpfs" ino=313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 402.695476][ T311] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 402.703840][ T311] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 402.718789][ T311] usb 4-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 402.731883][ T311] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 402.745201][ T2581] tipc: Enabling of bearer rejected, already enabled [ 402.745460][ T311] usb 4-1: unit 3 not found! [ 402.754189][ T36] audit: type=1400 audit(2000000054.407:581): avc: denied { ioctl } for pid=2580 comm="syz.0.735" path="socket:[17498]" dev="sockfs" ino=17498 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 402.798480][ T36] audit: type=1400 audit(2000000054.437:582): avc: denied { setopt } for pid=2580 comm="syz.0.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 402.804264][ T311] usb 4-1: USB disconnect, device number 32 [ 403.291025][ T36] audit: type=1400 audit(2000000054.947:583): avc: denied { name_bind } for pid=2587 comm="syz.3.738" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 403.369747][ T2594] netlink: 'syz.0.741': attribute type 27 has an invalid length. [ 403.564766][ T312] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 403.734622][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 403.734692][ T311] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 403.750791][ T312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 403.761423][ T312] usb 4-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 403.770849][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.779058][ T312] usb 4-1: Product: syz [ 403.783333][ T312] usb 4-1: Manufacturer: syz [ 403.788456][ T312] usb 4-1: SerialNumber: syz [ 403.894848][ T311] usb 5-1: device descriptor read/64, error -71 [ 403.998670][ T312] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 404.009745][ T312] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 404.023100][ T312] usb 4-1: USB disconnect, device number 33 [ 404.056944][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 404.084789][ T2604] overlayfs: failed to resolve './cgroup': -2 [ 404.144631][ T311] usb 5-1: device descriptor read/64, error -71 [ 404.384637][ T311] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 404.523638][ T311] usb 5-1: device descriptor read/64, error -71 [ 404.658850][ T2617] netlink: 'syz.0.750': attribute type 27 has an invalid length. [ 404.774614][ T311] usb 5-1: device descriptor read/64, error -71 [ 404.894694][ T311] usb usb5-port1: attempt power cycle [ 405.184615][ T312] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 405.244649][ T311] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 405.274034][ T311] usb 5-1: device descriptor read/8, error -71 [ 405.314607][ T312] usb 4-1: device descriptor read/64, error -71 [ 405.406962][ T311] usb 5-1: device descriptor read/8, error -71 [ 405.556793][ T312] usb 4-1: device descriptor read/64, error -71 [ 405.644670][ T311] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 405.665706][ T311] usb 5-1: device descriptor read/8, error -71 [ 405.804641][ T312] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 405.818806][ T311] usb 5-1: device descriptor read/8, error -71 [ 405.880030][ T2647] netlink: 'syz.0.761': attribute type 27 has an invalid length. [ 405.935210][ T311] usb usb5-port1: unable to enumerate USB device [ 405.964683][ T312] usb 4-1: device descriptor read/64, error -71 [ 406.204606][ T312] usb 4-1: device descriptor read/64, error -71 [ 406.324656][ T312] usb usb4-port1: attempt power cycle [ 406.664654][ T312] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 406.691344][ T312] usb 4-1: device descriptor read/8, error -71 [ 406.827083][ T312] usb 4-1: device descriptor read/8, error -71 [ 406.914638][ T310] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 407.010598][ T2666] netlink: 'syz.0.770': attribute type 27 has an invalid length. [ 407.046012][ T2668] syz.0.771(2668): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 407.063053][ T2668] raw_sendmsg: syz.0.771 forgot to set AF_INET. Fix it! [ 407.074612][ T310] usb 5-1: Using ep0 maxpacket: 8 [ 407.074614][ T312] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 407.092183][ T310] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 407.096197][ T312] usb 4-1: device descriptor read/8, error -71 [ 407.100978][ T310] usb 5-1: config 179 has no interface number 0 [ 407.114887][ T310] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 407.126123][ T310] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 407.137801][ T310] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 407.149132][ T310] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 407.165116][ T310] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 407.178538][ T310] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 407.187754][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.196996][ T2662] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 407.235664][ T312] usb 4-1: device descriptor read/8, error -71 [ 407.344759][ T312] usb usb4-port1: unable to enumerate USB device [ 407.412434][ T310] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input8 [ 407.618422][ T2670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'. [ 407.629251][ T2670] netlink: 'syz.0.772': attribute type 15 has an invalid length. [ 407.638409][ T2670] netlink: 'syz.0.772': attribute type 15 has an invalid length. [ 407.987458][ T310] usb 5-1: USB disconnect, device number 22 [ 407.993465][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 407.993507][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 408.030296][ T310] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 408.042239][ T2677] fuse: blksize only supported for fuseblk [ 408.089522][ T2684] netlink: 'syz.3.777': attribute type 4 has an invalid length. [ 408.099197][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 408.099214][ T36] audit: type=1400 audit(2000000059.757:591): avc: denied { ioctl } for pid=2681 comm="syz.4.776" path="socket:[18537]" dev="sockfs" ino=18537 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 408.171315][ T2686] netlink: 'syz.3.779': attribute type 27 has an invalid length. [ 408.181483][ T2690] netlink: 72 bytes leftover after parsing attributes in process `syz.0.780'. [ 408.227071][ T36] audit: type=1400 audit(2000000059.887:592): avc: denied { shutdown } for pid=2689 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.277780][ T36] audit: type=1400 audit(2000000059.887:593): avc: denied { nlmsg_read } for pid=2689 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 408.317608][ T36] audit: type=1400 audit(2000000059.907:594): avc: denied { connect } for pid=2691 comm="syz.4.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 408.338892][ T36] audit: type=1400 audit(2000000059.957:595): avc: denied { mount } for pid=2698 comm="syz.0.784" name="/" dev="ramfs" ino=17657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 408.416987][ T36] audit: type=1400 audit(2000000060.077:596): avc: denied { getopt } for pid=2704 comm="syz.4.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 408.467544][ T2707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 408.604175][ T2716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 408.614573][ T36] audit: type=1400 audit(2000000060.267:597): avc: denied { create } for pid=2715 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 408.636711][ T2716] erspan0: default FDB implementation only supports local addresses [ 408.645962][ T2716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 408.656276][ T36] audit: type=1400 audit(2000000060.297:598): avc: denied { write } for pid=2715 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 408.664737][ T2716] erspan0: default FDB implementation only supports local addresses [ 408.733298][ T36] audit: type=1400 audit(2000000060.387:599): avc: denied { create } for pid=2723 comm="syz.3.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 408.753385][ T2724] netlink: 96 bytes leftover after parsing attributes in process `syz.3.789'. [ 408.763000][ T36] audit: type=1400 audit(2000000060.417:600): avc: denied { execute } for pid=2723 comm="syz.3.789" name="file0" dev="tmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 408.763412][ T2724] Invalid argument reading file caps for ./file0 [ 409.140684][ T2737] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.147919][ T2737] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.157779][ T2737] bridge_slave_0: entered allmulticast mode [ 409.164113][ T2737] bridge_slave_0: entered promiscuous mode [ 409.170796][ T2737] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.177898][ T2737] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.185034][ T2737] bridge_slave_1: entered allmulticast mode [ 409.191872][ T2737] bridge_slave_1: entered promiscuous mode [ 409.243544][ T2737] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.250709][ T2737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.258175][ T2737] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.266411][ T2737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.286741][ T1965] bridge_slave_1: left allmulticast mode [ 409.292480][ T1965] bridge_slave_1: left promiscuous mode [ 409.299362][ T1965] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.307305][ T1965] bridge_slave_0: left allmulticast mode [ 409.312947][ T1965] bridge_slave_0: left promiscuous mode [ 409.318654][ T1965] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.391937][ T1611] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.399406][ T1611] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.412703][ T1956] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.419791][ T1956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.430143][ T1611] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.437236][ T1611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.444617][ T312] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 409.452378][ T2761] netlink: 'syz.0.801': attribute type 7 has an invalid length. [ 409.461333][ T2761] netlink: 'syz.0.801': attribute type 5 has an invalid length. [ 409.470401][ T2761] netlink: 17 bytes leftover after parsing attributes in process `syz.0.801'. [ 409.479734][ T1965] tipc: Disabling bearer [ 409.486548][ T1965] tipc: Left network mode [ 409.493201][ T1965] veth1_macvtap: left promiscuous mode [ 409.499208][ T1965] veth0_vlan: left promiscuous mode [ 409.566957][ T2771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 409.602001][ T2737] veth0_vlan: entered promiscuous mode [ 409.618772][ T2737] veth1_macvtap: entered promiscuous mode [ 409.626616][ T312] usb 5-1: unable to get BOS descriptor or descriptor too short [ 409.635505][ T312] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.646327][ T312] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.659917][ T312] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 409.669104][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.677385][ T312] usb 5-1: Product: syz [ 409.681647][ T312] usb 5-1: Manufacturer: syz [ 409.686419][ T312] usb 5-1: SerialNumber: syz [ 409.761825][ T2783] netlink: 'syz.0.807': attribute type 25 has an invalid length. [ 409.894069][ T2748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.903697][ T2748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.914107][ T312] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 409.923113][ T312] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 409.931435][ T312] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 409.950251][ T312] usb 5-1: USB disconnect, device number 23 [ 409.954835][ T338] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 409.972396][ T367] udevd[367]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 410.116150][ T338] usb 6-1: unable to get BOS descriptor or descriptor too short [ 410.124424][ T338] usb 6-1: not running at top speed; connect to a high speed hub [ 410.133091][ T338] usb 6-1: config 1 interface 0 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.146530][ T338] usb 6-1: config 1 interface 0 has no altsetting 0 [ 410.155407][ T338] usb 6-1: string descriptor 0 read error: -22 [ 410.161615][ T338] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 410.171954][ T338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.388316][ T2777] netlink: 20 bytes leftover after parsing attributes in process `syz.5.792'. [ 410.401310][ T2777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.792'. [ 410.468293][ T338] usb 6-1: USB disconnect, device number 2 [ 410.468563][ T2834] overlayfs: lower data-only dirs require metacopy support. [ 410.646190][ T2849] overlayfs: failed to resolve './cgroup': -2 [ 410.784632][ T310] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 410.934642][ T310] usb 5-1: Using ep0 maxpacket: 16 [ 410.941164][ T310] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.951605][ T310] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 410.962357][ T310] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 410.971616][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.979895][ T310] usb 5-1: Product: syz [ 410.984232][ T310] usb 5-1: Manufacturer: syz [ 410.989201][ T310] usb 5-1: SerialNumber: syz [ 411.156736][ T2868] rust_binder: Write failure EFAULT in pid:11 [ 411.157018][ T2868] netlink: 'syz.5.833': attribute type 33 has an invalid length. [ 411.171301][ T2869] netlink: 'syz.5.833': attribute type 33 has an invalid length. [ 411.223062][ T310] usb 5-1: 0:2 : does not exist [ 411.233953][ T310] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 411.251868][ T310] usb 5-1: USB disconnect, device number 24 [ 411.270758][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 411.299490][ T2882] overlayfs: failed to clone upperpath [ 411.775463][ T2911] netlink: 'syz.4.847': attribute type 4 has an invalid length. [ 412.013764][ T338] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 412.086803][ T2938] tipc: Enabling of bearer rejected, failed to enable media [ 412.097268][ T2938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=2938 comm=syz.5.857 [ 412.111997][ T2941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=2941 comm=syz.5.857 [ 412.169102][ T338] usb 4-1: Using ep0 maxpacket: 32 [ 412.188577][ T338] usb 4-1: unable to get BOS descriptor or descriptor too short [ 412.198527][ T338] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 412.206887][ T338] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 412.218137][ T338] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 412.227222][ T338] usb 4-1: config 128 has no interface number 0 [ 412.233540][ T338] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 111, changing to 10 [ 412.245138][ T338] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 26148, setting to 1024 [ 412.256760][ T338] usb 4-1: config 128 interface 127 has no altsetting 0 [ 412.266920][ T338] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 412.280651][ T338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.290639][ T338] usb 4-1: Product: syz [ 412.294863][ T338] usb 4-1: Manufacturer: syz [ 412.299596][ T338] usb 4-1: SerialNumber: syz [ 412.307563][ T2902] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 412.336178][ T2954] tipc: Started in network mode [ 412.341131][ T2954] tipc: Node identity 7f000001, cluster identity 4711 [ 412.348635][ T2954] tipc: Enabling of bearer rejected, failed to enable media [ 412.635051][ T311] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 412.781836][ T311] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.792035][ T311] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 412.801146][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.810021][ T311] usb 5-1: config 0 descriptor?? [ 412.815927][ T311] usb 5-1: bad CDC descriptors [ 412.953961][ T2980] fuseblk: Bad value for 'rootmode' [ 412.973643][ T2982] validate_nla: 3 callbacks suppressed [ 412.973660][ T2982] netlink: 'syz.0.875': attribute type 4 has an invalid length. [ 413.017827][ T338] usb 4-1: USB disconnect, device number 38 [ 413.024253][ T2963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.034453][ T2986] netlink: 'syz.3.877': attribute type 4 has an invalid length. [ 413.042367][ T2963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.048445][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 413.062982][ T312] usb 5-1: USB disconnect, device number 25 [ 413.098556][ T2991] __nla_validate_parse: 1 callbacks suppressed [ 413.098571][ T2991] netlink: 28 bytes leftover after parsing attributes in process `syz.3.879'. [ 413.274002][ T3000] tipc: Started in network mode [ 413.279128][ T3000] tipc: Node identity 01000001, cluster identity 4369 [ 413.298819][ T3005] netlink: 'syz.5.884': attribute type 4 has an invalid length. [ 413.323634][ T3007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.885'. [ 413.379229][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 413.379249][ T36] audit: type=1400 audit(2000000065.093:641): avc: denied { sqpoll } for pid=3008 comm="syz.5.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 413.404621][ T36] audit: type=1400 audit(2000000065.093:642): avc: denied { append } for pid=3008 comm="syz.5.886" name="001" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 413.435557][ T3012] netlink: 'syz.5.887': attribute type 4 has an invalid length. [ 413.451387][ T338] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 413.464293][ T3014] netlink: 28 bytes leftover after parsing attributes in process `syz.5.888'. [ 413.572364][ T3028] netlink: 'syz.4.893': attribute type 4 has an invalid length. [ 413.628701][ T3037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.897'. [ 413.628809][ T338] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 413.638154][ T338] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 413.662948][ T338] usb 4-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 413.676785][ T338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.684868][ T338] usb 4-1: Product: syz [ 413.689111][ T338] usb 4-1: Manufacturer: syz [ 413.693731][ T338] usb 4-1: SerialNumber: syz [ 413.707564][ T3042] netlink: 'syz.4.899': attribute type 4 has an invalid length. [ 413.734765][ T3045] serio: Serial port ptm0 [ 413.784068][ T36] audit: type=1400 audit(2000000065.514:643): avc: denied { wake_alarm } for pid=3044 comm="syz.4.900" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 413.900699][ T36] audit: type=1400 audit(2000000065.637:644): avc: denied { ioctl } for pid=2992 comm="syz.3.880" path="socket:[19902]" dev="sockfs" ino=19902 ioctlcmd=0x4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 413.904851][ T2993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.928926][ T36] audit: type=1400 audit(2000000065.637:645): avc: denied { setopt } for pid=2992 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 413.941190][ T2993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.968686][ T338] usb 4-1: Can't get UAC3 power state for id 10 [ 413.981457][ T338] usb 4-1: BAAD MICROPHONE c_chmask mismatch [ 413.995847][ T338] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 414.011458][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 414.027828][ T338] usb 4-1: USB disconnect, device number 39 [ 414.220205][ T311] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 414.309397][ T3053] netlink: 'syz.5.902': attribute type 4 has an invalid length. [ 414.331524][ T3055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.903'. [ 414.368271][ T311] usb 5-1: config index 0 descriptor too short (expected 45, got 28) [ 414.376763][ T311] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 414.385751][ T311] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 414.400787][ T311] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 414.410253][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.418367][ T311] usb 5-1: Product: syz [ 414.423580][ T311] usb 5-1: Manufacturer: syz [ 414.428624][ T311] usb 5-1: SerialNumber: syz [ 414.440478][ T311] rtl8150 5-1:1.0: couldn't find required endpoints [ 414.448776][ T311] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 414.502201][ T3068] netlink: 28 bytes leftover after parsing attributes in process `syz.0.906'. [ 414.571445][ T3079] netlink: 'syz.0.911': attribute type 4 has an invalid length. [ 414.645411][ T311] usb 5-1: USB disconnect, device number 26 [ 414.674752][ T36] audit: type=1400 audit(2000000066.425:646): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 414.940066][ T338] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 415.090083][ T338] usb 4-1: Using ep0 maxpacket: 8 [ 415.096760][ T338] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 415.105317][ T338] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 415.113932][ T338] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 415.123083][ T338] usb 4-1: config 250 has no interface number 0 [ 415.129373][ T338] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 415.141665][ T338] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 415.152265][ T338] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 5 [ 415.162598][ T338] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 415.176601][ T338] usb 4-1: config 250 interface 228 has no altsetting 0 [ 415.184760][ T338] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 415.193899][ T338] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 415.202737][ T338] usb 4-1: Product: syz [ 415.206918][ T338] usb 4-1: SerialNumber: syz [ 415.214257][ T338] hub 4-1:250.228: bad descriptor, ignoring hub [ 415.220646][ T338] hub 4-1:250.228: probe with driver hub failed with error -5 [ 415.243139][ T3090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'. [ 415.252549][ T36] audit: type=1400 audit(2000000067.005:647): avc: denied { write } for pid=3089 comm="syz.4.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 415.272277][ T36] audit: type=1400 audit(2000000067.005:648): avc: denied { bind } for pid=3089 comm="syz.4.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 415.300714][ T36] audit: type=1400 audit(2000000067.055:649): avc: denied { create } for pid=3091 comm="syz.4.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 415.321083][ T36] audit: type=1400 audit(2000000067.065:650): avc: denied { write } for pid=3091 comm="syz.4.916" path="socket:[20612]" dev="sockfs" ino=20612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 415.348607][ T3094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.917'. [ 415.371157][ T3096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=3096 comm=syz.4.918 [ 415.389735][ T3096] netlink: 32 bytes leftover after parsing attributes in process `syz.4.918'. [ 415.419747][ T338] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 40 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 415.456508][ T3104] netlink: 'syz.4.921': attribute type 4 has an invalid length. [ 415.485767][ T3106] ================================================================== [ 415.493972][ T3106] BUG: KASAN: invalid-free in f_uac2_opts_c_srate_store+0x224/0x2b0 [ 415.502006][ T3106] Free of addr ffff888121ac5a06 by task syz.5.922/3106 [ 415.508893][ T3106] [ 415.511255][ T3106] CPU: 1 UID: 0 PID: 3106 Comm: syz.5.922 Not tainted syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 415.511289][ T3106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 415.511310][ T3106] Call Trace: [ 415.511318][ T3106] [ 415.511327][ T3106] __dump_stack+0x21/0x30 [ 415.511366][ T3106] dump_stack_lvl+0x140/0x1c0 [ 415.511398][ T3106] ? __cfi_dump_stack_lvl+0x10/0x10 [ 415.511431][ T3106] print_address_description+0x71/0x210 [ 415.511465][ T3106] print_report+0x4a/0x70 [ 415.511497][ T3106] ? f_uac2_opts_c_srate_store+0x224/0x2b0 [ 415.511527][ T3106] kasan_report_invalid_free+0x11e/0x160 [ 415.511561][ T3106] ? f_uac2_opts_c_srate_store+0x224/0x2b0 [ 415.511593][ T3106] ? f_uac2_opts_c_srate_store+0x224/0x2b0 [ 415.511625][ T3106] check_slab_allocation+0xdf/0xf0 [ 415.511655][ T3106] __kasan_slab_pre_free+0x36/0x50 [ 415.511682][ T3106] kfree+0xf8/0x440 [ 415.511703][ T3106] ? f_uac2_opts_c_srate_store+0x224/0x2b0 [ 415.511734][ T3106] f_uac2_opts_c_srate_store+0x224/0x2b0 [ 415.511777][ T3106] ? sysvec_reschedule_ipi+0x72/0x80 [ 415.511813][ T3106] ? __cfi_f_uac2_opts_c_srate_store+0x10/0x10 [ 415.511846][ T3106] ? __cfi_f_uac2_opts_c_srate_store+0x10/0x10 [ 415.511878][ T3106] configfs_write_iter+0x32f/0x490 [ 415.511908][ T3106] ? __cfi_f_uac2_opts_c_srate_store+0x10/0x10 [ 415.511940][ T3106] vfs_write+0x762/0xfd0 [ 415.511966][ T3106] ? __cfi_vfs_write+0x10/0x10 [ 415.511990][ T3106] ? __cfi_mutex_lock+0x10/0x10 [ 415.512024][ T3106] ksys_write+0x145/0x260 [ 415.512048][ T3106] ? xfd_validate_state+0x68/0x140 [ 415.512081][ T3106] ? __cfi_ksys_write+0x10/0x10 [ 415.512106][ T3106] ? __kasan_check_write+0x18/0x20 [ 415.512129][ T3106] ? fpregs_restore_userregs+0x11c/0x260 [ 415.512168][ T3106] __x64_sys_write+0x7f/0x90 [ 415.512191][ T3106] x64_sys_call+0x271c/0x2ee0 [ 415.512210][ T3106] do_syscall_64+0x57/0xf0 [ 415.512234][ T3106] ? clear_bhb_loop+0x50/0xa0 [ 415.512263][ T3106] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 415.512299][ T3106] RIP: 0033:0x7fa664d9e019 [ 415.512319][ T3106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.512338][ T3106] RSP: 002b:00007fa665c1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 415.512362][ T3106] RAX: ffffffffffffffda RBX: 00007fa665025fa0 RCX: 00007fa664d9e019 [ 415.512379][ T3106] RDX: 000000000000006e RSI: 0000200000000280 RDI: 0000000000000008 [ 415.512395][ T3106] RBP: 00007fa664e3500c R08: 0000000000000000 R09: 0000000000000000 [ 415.512410][ T3106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.512425][ T3106] R13: 00007fa665026038 R14: 00007fa665025fa0 R15: 00007ffdce2799b8 [ 415.512445][ T3106] [ 415.512453][ T3106] [ 415.783538][ T3106] Allocated by task 3106: [ 415.787940][ T3106] kasan_save_track+0x3e/0x80 [ 415.792634][ T3106] kasan_save_alloc_info+0x3a/0x50 [ 415.797771][ T3106] __kasan_kmalloc+0x96/0xb0 [ 415.802368][ T3106] __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 415.808790][ T3106] kstrdup+0x4d/0x130 [ 415.812825][ T3106] f_uac2_opts_c_srate_store+0x11e/0x2b0 [ 415.818512][ T3106] configfs_write_iter+0x32f/0x490 [ 415.823671][ T3106] vfs_write+0x762/0xfd0 [ 415.827960][ T3106] ksys_write+0x145/0x260 [ 415.832354][ T3106] __x64_sys_write+0x7f/0x90 [ 415.836991][ T3106] x64_sys_call+0x271c/0x2ee0 [ 415.841722][ T3106] do_syscall_64+0x57/0xf0 [ 415.846179][ T3106] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 415.852125][ T3106] [ 415.854480][ T3106] The buggy address belongs to the object at ffff888121ac5a00 [ 415.854480][ T3106] which belongs to the cache kmalloc-128 of size 128 [ 415.855601][ T3124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.928'. [ 415.868565][ T3106] The buggy address is located 6 bytes inside of [ 415.868565][ T3106] 111-byte region [ffff888121ac5a00, ffff888121ac5a6f) [ 415.868597][ T3106] [ 415.868604][ T3106] The buggy address belongs to the physical page: [ 415.868709][ T3106] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x121ac5 [ 415.908249][ T3106] anon flags: 0x4000000000000000(zone=1) [ 415.914018][ T3106] page_type: f5(slab) [ 415.918039][ T3106] raw: 4000000000000000 ffff888100041a00 0000000000000000 0000000000000001 [ 415.926665][ T3106] raw: 0000000000000000 0000000080100010 00000001f5000000 0000000000000000 [ 415.935282][ T3106] page dumped because: kasan: bad access detected [ 415.941804][ T3106] page_owner tracks the page as allocated [ 415.947548][ T3106] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 0, tgid 0 (swapper/0), ts 407664374295, free_ts 407646562322 [ 415.967659][ T3106] post_alloc_hook+0x37d/0x3b0 [ 415.972487][ T3106] prep_new_page+0x2d/0x180 [ 415.977043][ T3106] get_page_from_freelist+0x4aea/0x4ba0 [ 415.982648][ T3106] __alloc_pages_noprof+0x35a/0x7e0 [ 415.987894][ T3106] alloc_slab_page+0x6b/0x1e0 [ 415.992619][ T3106] allocate_slab+0x69/0x430 [ 415.997175][ T3106] ___slab_alloc+0x591/0x8c0 [ 416.001809][ T3106] __kmalloc_cache_noprof+0x2cd/0x470 [ 416.007216][ T3106] dummy_urb_enqueue+0x87/0x890 [ 416.012103][ T3106] usb_hcd_submit_urb+0x35e/0x19d0 [ 416.017262][ T3106] usb_submit_urb+0xfa1/0x1610 [ 416.022109][ T3106] xpad_irq_out+0x174/0x2a0 [ 416.026644][ T3106] __usb_hcd_giveback_urb+0x36e/0x530 [ 416.032028][ T3106] usb_hcd_giveback_urb+0x12b/0x400 [ 416.037240][ T3106] dummy_timer+0xa3f/0x4900 [ 416.040257][ T338] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 416.041742][ T3106] __hrtimer_run_queues+0x3ae/0x8e0 [ 416.054525][ T3106] page last free pid 20 tgid 20 stack trace: [ 416.060508][ T3106] free_unref_page+0xbb8/0xf70 [ 416.065289][ T3106] __free_pages+0x6b/0x3b0 [ 416.069723][ T3106] tlb_remove_table_rcu+0x2b2/0x3d0 [ 416.074954][ T3106] rcu_do_batch+0x56a/0xcb0 [ 416.079466][ T3106] rcu_nocb_cb_kthread+0x533/0xb60 [ 416.084636][ T3106] kthread+0x2c7/0x360 [ 416.088745][ T3106] ret_from_fork+0x67/0xa0 [ 416.093240][ T3106] ret_from_fork_asm+0x1a/0x30 [ 416.098057][ T3106] [ 416.100403][ T3106] Memory state around the buggy address: [ 416.106077][ T3106] ffff888121ac5900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 416.114167][ T3106] ffff888121ac5980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 416.122242][ T3106] >ffff888121ac5a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 07 fc fc [ 416.130333][ T3106] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 416.134432][ T3106] ffff888121ac5a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 416.142540][ T3106] ffff888121ac5b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 416.150642][ T3106] ================================================================== [ 416.164634][ T3106] Disabling lock debugging due to kernel taint [ 416.226724][ T3136] program syz.3.914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 416.237294][ T338] usb 5-1: unable to get BOS descriptor or descriptor too short [ 416.245397][ T338] usb 5-1: not running at top speed; connect to a high speed hub [ 416.265244][ C1] usblp0: nonzero read bulk status received: -71 [ 416.277508][ T338] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 416.290029][ T338] usb 5-1: can't read configurations, error -71 [ 416.430093][ T310] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 416.452381][ T1957] bridge_slave_1: left allmulticast mode [ 416.458109][ T1957] bridge_slave_1: left promiscuous mode [ 416.464020][ T1957] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.472195][ T1957] bridge_slave_0: left allmulticast mode [ 416.477871][ T1957] bridge_slave_0: left promiscuous mode [ 416.484622][ T419] usb 4-1: USB disconnect, device number 40 [ 416.491955][ T419] usblp0: removed [ 416.496257][ T1957] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.601364][ T1957] tipc: Left network mode [ 416.606691][ T1957] veth1_macvtap: left promiscuous mode [ 416.612258][ T1957] veth0_vlan: left promiscuous mode [ 416.811014][ T1957] bridge_slave_1: left allmulticast mode [ 416.816690][ T1957] bridge_slave_1: left promiscuous mode [ 416.822359][ T1957] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.829811][ T1957] bridge_slave_0: left allmulticast mode [ 416.835623][ T1957] bridge_slave_0: left promiscuous mode [ 416.841247][ T1957] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.952667][ T1957] tipc: Left network mode [ 416.957740][ T1957] veth0_vlan: left promiscuous mode [ 417.121996][ T1957] ------------[ cut here ]------------ [ 417.127583][ T1957] WARNING: CPU: 0 PID: 1957 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 417.137744][ T1957] Modules linked in: [ 417.141725][ T1957] CPU: 0 UID: 0 PID: 1957 Comm: kworker/u8:52 Tainted: G B syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 417.155083][ T1957] Tainted: [B]=BAD_PAGE [ 417.159251][ T1957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 417.169371][ T1957] Workqueue: netns cleanup_net [ 417.174233][ T1957] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 417.180314][ T1957] Code: e8 a1 e6 d6 fc 4b 83 3c 3e 00 75 19 e8 a5 23 7e fc 49 81 ff f8 07 00 00 74 1b e8 97 23 7e fc 49 83 c7 08 eb c9 e8 8c 23 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 417.200007][ T1957] RSP: 0018:ffffc900010dfb90 EFLAGS: 00010293 [ 417.206107][ T1957] RAX: ffffffff85094e34 RBX: ffff888124a4d8c0 RCX: ffff88814abfa600 [ 417.214149][ T1957] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888104bf85b8 [ 417.222253][ T1957] RBP: ffffc900010dfbb0 R08: 0000000000000003 R09: 0000000000000004 [ 417.230301][ T1957] R10: dffffc0000000000 R11: fffff5200021bf04 R12: dffffc0000000000 [ 417.238476][ T1957] R13: dffffc0000000000 R14: ffff888104bf8000 R15: 00000000000005b8 [ 417.246623][ T1957] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 417.255631][ T1957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.262395][ T1957] CR2: 0000200000000308 CR3: 000000010cf1a000 CR4: 00000000003526b0 [ 417.270490][ T1957] DR0: 0000000000000004 DR1: 0000000000000002 DR2: 0000000000000006 [ 417.278487][ T1957] DR3: 0000000000009a47 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 417.286520][ T1957] Call Trace: [ 417.289836][ T1957] [ 417.292818][ T1957] cleanup_net+0x6bd/0xc90 [ 417.297274][ T1957] ? __cfi_cleanup_net+0x10/0x10 [ 417.302261][ T1957] ? kick_pool+0xb9/0x540 [ 417.306660][ T1957] process_scheduled_works+0x7f7/0x1060 [ 417.312264][ T1957] worker_thread+0xc99/0x13f0 [ 417.316976][ T1957] kthread+0x2c7/0x360 [ 417.321091][ T1957] ? __cfi_worker_thread+0x10/0x10 [ 417.326228][ T1957] ? __cfi_kthread+0x10/0x10 [ 417.330859][ T1957] ret_from_fork+0x67/0xa0 [ 417.335310][ T1957] ? __cfi_kthread+0x10/0x10 [ 417.339902][ T1957] ret_from_fork_asm+0x1a/0x30 [ 417.344721][ T1957] [ 417.347772][ T1957] ---[ end trace 0000000000000000 ]--- [ 417.353757][ T1957] ------------[ cut here ]------------ [ 417.359252][ T1957] WARNING: CPU: 1 PID: 1957 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 417.369503][ T1957] Modules linked in: [ 417.373479][ T1957] CPU: 1 UID: 0 PID: 1957 Comm: kworker/u8:52 Tainted: G B W syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 417.386830][ T1957] Tainted: [B]=BAD_PAGE, [W]=WARN [ 417.391903][ T1957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 417.402021][ T1957] Workqueue: netns cleanup_net [ 417.406823][ T1957] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 417.412959][ T1957] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 50 23 7e fc 49 81 ff f8 07 00 00 74 1b e8 42 23 7e fc 49 83 c7 08 eb c5 e8 37 23 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 27 23 7e fc 5b 41 5c 41 5e 41 [ 417.432659][ T1957] RSP: 0018:ffffc900010dfb90 EFLAGS: 00010293 [ 417.438772][ T1957] RAX: ffffffff85094e89 RBX: ffff888104bf8800 RCX: ffff88814abfa600 [ 417.447120][ T1957] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff888104bf8808 [ 417.455338][ T1957] RBP: ffffc900010dfbb0 R08: 0000000000000003 R09: 0000000000000004 [ 417.463381][ T1957] R10: dffffc0000000000 R11: fffff5200021bf04 R12: dffffc0000000000 [ 417.471442][ T1957] R13: dffffc0000000000 R14: ffff888104bf8000 R15: 0000000000000008 [ 417.479435][ T1957] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 417.488463][ T1957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.495124][ T1957] CR2: 00007f25ad3f6d58 CR3: 000000010cbe8000 CR4: 00000000003526b0 [ 417.503177][ T1957] Call Trace: [ 417.506483][ T1957] [ 417.509418][ T1957] cleanup_net+0x6bd/0xc90 [ 417.513916][ T1957] ? __cfi_cleanup_net+0x10/0x10 [ 417.518880][ T1957] ? kick_pool+0xb9/0x540 [ 417.523294][ T1957] process_scheduled_works+0x7f7/0x1060 [ 417.528880][ T1957] worker_thread+0xc99/0x13f0 [ 417.533706][ T1957] kthread+0x2c7/0x360 [ 417.537844][ T1957] ? __cfi_worker_thread+0x10/0x10 [ 417.543756][ T1957] ? __cfi_kthread+0x10/0x10 [ 417.548394][ T1957] ret_from_fork+0x67/0xa0 [ 417.552880][ T1957] ? __cfi_kthread+0x10/0x10 [ 417.557520][ T1957] ret_from_fork_asm+0x1a/0x30 [ 417.562340][ T1957] [ 417.565390][ T1957] ---[ end trace 0000000000000000 ]--- [ 417.574541][ T1957] ------------[ cut here ]------------ [ 417.580078][ T1957] WARNING: CPU: 1 PID: 1957 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 417.589659][ T1957] Modules linked in: [ 417.593649][ T1957] CPU: 1 UID: 0 PID: 1957 Comm: kworker/u8:52 Tainted: G B W syzkaller #0 91781886e4a1baa38ce9d8cd537274748dd3a26f [ 417.607134][ T1957] Tainted: [B]=BAD_PAGE, [W]=WARN [ 417.612209][ T1957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 417.622343][ T1957] Workqueue: netns cleanup_net [ 417.627674][ T1957] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 417.633272][ T1957] Code: 3c 20 00 74 08 48 89 df e8 df a4 f1 fc 48 8b 3b e8 f7 97 dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 e1 98 fc <0f> 0b e9 b0 fd ff ff e8 c6 e1 98 fc 0f 0b e9 18 fe ff ff e8 ba e1 [ 417.652982][ T1957] RSP: 0018:ffffc900010dfb70 EFLAGS: 00010293 [ 417.659086][ T1957] RAX: ffffffff84ee8fee RBX: ffff888124a4d8c0 RCX: ffff88814abfa600 [ 417.667162][ T1957] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88814abfa600 [ 417.675203][ T1957] RBP: ffffc900010dfb98 R08: ffffffff87d420e7 R09: 1ffffffff0fa841c [ 417.683269][ T1957] R10: dffffc0000000000 R11: fffffbfff0fa841d R12: 1ffffffff0fa8170 [ 417.691349][ T1957] R13: dffffc0000000000 R14: ffff888124a4e4c0 R15: dffffc0000000000 [ 417.699346][ T1957] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 417.708332][ T1957] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.714980][ T1957] CR2: 00007f25ad3f6d58 CR3: 000000010cbe8000 CR4: 00000000003526b0 [ 417.723032][ T1957] Call Trace: [ 417.726348][ T1957] [ 417.729283][ T1957] xfrm_net_exit+0x31/0x80 [ 417.733762][ T1957] cleanup_net+0x6bd/0xc90 [ 417.738223][ T1957] ? __cfi_cleanup_net+0x10/0x10 [ 417.743231][ T1957] ? kick_pool+0xb9/0x540 [ 417.747593][ T1957] process_scheduled_works+0x7f7/0x1060 [ 417.753210][ T1957] worker_thread+0xc99/0x13f0 [ 417.757914][ T1957] kthread+0x2c7/0x360 [ 417.762024][ T1957] ? __cfi_worker_thread+0x10/0x10 [ 417.767154][ T1957] ? __cfi_kthread+0x10/0x10 [ 417.771795][ T1957] ret_from_fork+0x67/0xa0 [ 417.776238][ T1957] ? __cfi_kthread+0x10/0x10 [ 417.780882][ T1957] ret_from_fork_asm+0x1a/0x30 [ 417.785898][ T1957] [ 417.788932][ T1957] ---[ end trace 0000000000000000 ]--- [ 418.241528][ T1957] bridge_slave_1: left allmulticast mode [ 418.247242][ T1957] bridge_slave_1: left promiscuous mode [ 418.252937][ T1957] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.260594][ T1957] bridge_slave_0: left allmulticast mode [ 418.266274][ T1957] bridge_slave_0: left promiscuous mode [ 418.271987][ T1957] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.402374][ T1957] tipc: Disabling bearer [ 418.407751][ T1957] tipc: Left network mode [ 418.412932][ T1957] veth0_vlan: left promiscuous mode