last executing test programs: 55.97209618s ago: executing program 3 (id=90): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x80000004}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x1ff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x4, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x42, 0xc, "e96789bb16ce47604a8537ab1290a37836a054cd71b35fd9f18a20f198489deae43cc41a47e7b3792c1a155f36042e7d008ef805c1bdc15b5c4cf77e5f4e"}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 55.809149076s ago: executing program 3 (id=91): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000540)={{}, {0x77359400}}, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x100000000005, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x8, 0x10009c2, 0x5, 0x1006, 0xc, 0x8, 0x8000, 0xffffffffffffffff], 0x1000, 0xc2302}) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f0000000080)={0x0, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4004550d, &(0x7f00000000c0)) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000340)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x5, 0xfffffff8, 0x0, 0xff, 0xff}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 55.481674919s ago: executing program 3 (id=92): setuid(0xee01) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000480)='.\x00', 0xa4000921) (async) read(r0, 0x0, 0x0) (async) close(r0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x6004, 0x1) r1 = getuid() (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000500)=0x1, 0x4) (async) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) getpeername$inet6(r2, 0x0, &(0x7f0000000580)) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x84aebfbd634936f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1a3081, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4) close(r4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @link_local}) (async) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[], 0x66) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="db", 0xffffff5e}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="04", 0x1}], 0x1}, 0x41) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000280)={'macsec0\x00', 0x400}) (async) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, r1, &(0x7f0000000000)) syz_clone(0x41842000, 0x0, 0x0, 0x0, 0x0, 0x0) 54.6782869s ago: executing program 3 (id=97): prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) mknod(&(0x7f0000000580)='./file0\x00', 0x1000, 0x1) execve(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r1 = syz_clone(0x840000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x1000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x9000000) prlimit64(r1, 0xa, &(0x7f0000000040)={0x9, 0x180}, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x2}, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2) brk(0x8000000000000008) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/synthetic_events\x00', 0x1, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000240)={0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x24080014}, 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f0000000340)=""/220, 0xdc}], 0x1) read(r0, 0x0, 0x0) r5 = getpid() r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x204, &(0x7f00000002c0)={0x0}) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 54.327494736s ago: executing program 3 (id=98): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) (async) r1 = socket$netlink(0x10, 0x3, 0x13) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) 54.19369555s ago: executing program 3 (id=99): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f00000003c0)=[@nested_amd_set_intercept={0x181, 0x30, {0x2, 0x6, 0x5}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_vmresume={0x130, 0x18}, @rdmsr={0x66, 0x18, {0xbca}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x4db, 0xffffffffffffff84, 0xffffffffffffffff, 0x67b}}], 0xb0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/sys/kernel/watchdog_thresh\x00', 0x802, 0x134) write(r1, &(0x7f0000000580)='2', 0x1) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) (async) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000180)=0x200000000) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000001c0)=0x1) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0xdd50, 0xfffffffffffffffe, 0x2e, 0xa50, 0xffff, 0xffff, 0x5, 0x7, 0xffffffffffffffd0, 0x100, 0x6, 0x5, 0x7, 0x40000000001, 0x6, 0x1], 0x1, 0x360200}) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x6890b616) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000300)=@x86={0xc, 0x2, 0xfe, 0x0, 0x80, 0x7f, 0x1d, 0x8, 0x1, 0xa0, 0x4, 0x16, 0x0, 0x0, 0x10000, 0xf0, 0x7f, 0x0, 0x6, '\x00', 0x6, 0x1}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000000)=""/249) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 54.174898122s ago: executing program 32 (id=99): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f00000003c0)=[@nested_amd_set_intercept={0x181, 0x30, {0x2, 0x6, 0x5}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_vmresume={0x130, 0x18}, @rdmsr={0x66, 0x18, {0xbca}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x4db, 0xffffffffffffff84, 0xffffffffffffffff, 0x67b}}], 0xb0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/sys/kernel/watchdog_thresh\x00', 0x802, 0x134) write(r1, &(0x7f0000000580)='2', 0x1) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)) (async) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000180)=0x200000000) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000001c0)=0x1) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0xdd50, 0xfffffffffffffffe, 0x2e, 0xa50, 0xffff, 0xffff, 0x5, 0x7, 0xffffffffffffffd0, 0x100, 0x6, 0x5, 0x7, 0x40000000001, 0x6, 0x1], 0x1, 0x360200}) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x6890b616) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000300)=@x86={0xc, 0x2, 0xfe, 0x0, 0x80, 0x7f, 0x1d, 0x8, 0x1, 0xa0, 0x4, 0x16, 0x0, 0x0, 0x10000, 0xf0, 0x7f, 0x0, 0x6, '\x00', 0x6, 0x1}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000000)=""/249) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 32.289577435s ago: executing program 4 (id=227): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="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", 0x585}], 0x1}}], 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x450002, 0x181) 32.289380735s ago: executing program 4 (id=228): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000280)={{0xeeee8000, 0x2000, 0xb, 0xad, 0x3, 0x4, 0x7c, 0x7, 0x0, 0x2b, 0x9}, {0x2, 0x30000, 0xf, 0x2c, 0x8, 0x0, 0x7f, 0x1, 0x4, 0xf0, 0x9, 0x80}, {0x2, 0xa000, 0x8, 0x5, 0x1, 0x22, 0x0, 0xa, 0x0, 0x2, 0xb, 0xbb}, {0xdddd0000, 0x100000, 0x9, 0xe7, 0x4, 0x2, 0x1, 0x3c, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0xd000, 0xd, 0x3, 0x5, 0x86, 0x0, 0x81, 0xa, 0x0, 0xf2, 0x43}, {0xc000, 0x6000, 0xb, 0x7c, 0x2, 0x24, 0x7f, 0xaf, 0x80, 0xc, 0x8, 0x3d}, {0xd000, 0x100002, 0x3, 0x3, 0x8, 0x5, 0x1, 0x3, 0x5, 0x82, 0x3}, {0x5000, 0x41000, 0x3, 0x5, 0x9, 0xf, 0x3, 0x37, 0x0, 0x9, 0xf0, 0xb}, {0xeeee8000, 0x2070}, {0xd000, 0x7}, 0x8004002b, 0x0, 0xdddd0000, 0x2104, 0x4, 0x0, 0x80a0c00, [0x5, 0x7, 0x7, 0x80000000000d53]}) close_range(r0, 0xffffffffffffffff, 0x0) 32.188511075s ago: executing program 4 (id=229): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc1) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000040)='-\'\x17\xfb\x00', 0x400000, &(0x7f0000000080)={@_ha_fsid={[0x6bf, 0x80]}, {0x0, 0xfffc, 0x4d}}, 0x44a54161, &(0x7f00000000c0), &(0x7f0000000100)=0xac}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000180)={0x1, 0x0, 0x4, 0x0, 0x5}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x140, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe68}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff0}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4080}, 0x40800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x0, 0x0, 0xcc50, 0x0, 0x6}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20008001}, 0x1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r1) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x188, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6aa}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa8}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x75, 0x3, "ad21e6a78f4efdaa3962f8c170baece5ac852fb16ccd807b316da140847a7696921340ced5a6bb6a38116fbad827f32befe8c2d485f825dddaca4155e1b8365a631f15fa357d2207bc1ad9a81ff285b67015c06d94b0dc51df6cec6982e1e1fad4fa60f615dc51460efbbc7bd07f5a9543"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "07b750dcb6ec034b44afb6fed6c80d437d9f09cc830897b0c3a9a0b8f8dc23b8"}}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xeced}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4}, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800)={0x0}, &(0x7f0000000840)=0xc) write$P9_RGETLOCK(r1, &(0x7f0000000880)={0x26, 0x37, 0x2, {0x1, 0x7, 0x9, r5, 0x8, 'devlink\x00'}}, 0x26) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1a) ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f00000008c0)={0xd5, 0x0, 0x24}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000940)={{0x3, 0x3, 0x8000, 0x3, 0x5c9}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000009c0), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000a00)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x80, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000005}, 0x8c0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$TIOCSCTTY(r1, 0x540e, 0xc) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000c40)={&(0x7f0000000b40)=[{0x7, 0x4, 0x7, 0x6}, {0x8, 0x0, 0x9, 0xa8e}, {0x10000, 0x7, 0x6, 0x1}, {0x9, 0x100000000, 0x8, 0x5}, {0x4, 0x7ff, 0x6, 0x2}, {0x4, 0x4, 0x4, 0x6}, {0x80, 0x5, 0x0, 0x3}], 0x7, 0x20, 0x6, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x64, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0xf}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x80) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e00), 0x80000) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r11, 0x80585414, &(0x7f0000000e40)) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r12, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x38, r13, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x54}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048801}, 0x4000) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) 32.081625436s ago: executing program 4 (id=231): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000180)="340000001a000100000000000000000002202000000000000000000008000100e000000108000200ac1414bb0800050001000000", 0x34) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000200)={0x1000, "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"}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x42}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) 32.080789196s ago: executing program 4 (id=232): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000340)=0xfffffffe, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1a8) r1 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) setpgid(r1, r2) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f00000001c0)=0x6, 0x4) sendto$inet6(r3, &(0x7f0000000200)="8000379bfa9ba1ce", 0x8, 0x20000000, &(0x7f0000000240)={0xa, 0x4e24, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x43}, 0x4}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x181) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380), 0x8, &(0x7f00000003c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}}) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r5, &(0x7f0000000180)='7', 0x1) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) connect$unix(r0, &(0x7f00000011c0)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) (async) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000340)=0xfffffffe, 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1a8) (async) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async) getpgrp(0xffffffffffffffff) (async) setpgid(r1, r2) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket$inet6(0xa, 0x2, 0x3a) (async) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f00000001c0)=0x6, 0x4) (async) sendto$inet6(r3, &(0x7f0000000200)="8000379bfa9ba1ce", 0x8, 0x20000000, &(0x7f0000000240)={0xa, 0x4e24, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x43}, 0x4}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x181) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380), 0x8, &(0x7f00000003c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}}) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) (async) write(r5, &(0x7f0000000180)='7', 0x1) (async) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) (async) connect$unix(r0, &(0x7f00000011c0)=@file={0x1, './file0\x00'}, 0x6e) (async) 32.006006133s ago: executing program 4 (id=233): r0 = syz_open_dev$loop(0x0, 0xd10e, 0x80) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x9, 0x2b6f}) 15.758399326s ago: executing program 33 (id=233): r0 = syz_open_dev$loop(0x0, 0xd10e, 0x80) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x9, 0x2b6f}) 4.570018738s ago: executing program 0 (id=393): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x1, 0x0) (async) r2 = eventfd2(0x1, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x7, 0x100000, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x6000, 0x0, r2}) fsetxattr$trusted_overlay_redirect(r0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8, 0x2) close(0x4) 4.385650257s ago: executing program 0 (id=395): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0xffffffffffffffff, 0x0, 0x8, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x0, 0x4, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.286790416s ago: executing program 0 (id=398): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="3900000013000318680907070000000f0000ff3f040000ff170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x7, 0x0, &(0x7f0000000180)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xff7fffbffffffff7) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe2000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4b, &(0x7f0000000100)=[@vmwrite={0x8, 0x0, 0x11, 0x0, 0x2, 0x0, 0x2, 0x0, 0x1}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.182925777s ago: executing program 0 (id=399): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffff3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) mmap(&(0x7f000038e000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x1000) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000006c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd3\'\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13@`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95w\x02\x00,\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfau\xfd\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0\x92\x04\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7z\x84\xb9\x0fB\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^1\xbc\x89\xe1\xeb\xf0tg\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xd9H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xbav\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&\xfb|\x01\x03\xfcr\x80N\x9f\xc7}\xd7\xf9=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xae\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0\xf3\x91\x0fS\f|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E8\xe4\x10\x06\x0eB\xf9\xc3\x83.\xc1\xf2D\xcb\xb4\xcb\x7f\\\x8f\xac\xaa\xc088G\x06\xb5\x82\xbe\b\x89l\xc2P:\xa1\xa8\x8f\xa3\xd6\x02$k\x11\x1f\xf8}\xde\x9b\xc4s\x9e\xe4#\f\x9fx\xf3\x01\xda\x8c\x13x\xac\x10\x04\xe0w\xbd\xba2pH\xb7I\xef\r6Ml\xb4v\xdb<\xae$\x8d\xcf\xefg0\xb2\xc2)vE8\x0er\xb5\x83\x1f$<\xac@s\xe7\x85\x06B\xf3\xbe`\xa5_\"j.RSK\x89\xc2P\x10\xa8:J\x8d\x1a\x80\xb4Jy\xaa\x7f\'G\xdb\xab\x94\xe3\xc0\xa7$\xc5\xe4\f\xd3\xb9\xcd\b\xa2T\x1cL\xf2aK\x02\f\x84#_\x0f\x8eo\xc14\xdcL\xf2\xc24\xf3\xa6\xae\'W\xe1\xa2\xdeC}\b\xc6\x98\x01\x92\xd9\xadon3k\xdc\rMrJ\xd8|E|U\xa1\x89\xfd\x95\xe9\x03\v\x05\xa9\xdacl\x10*\x8a\xef\xd2\xd4^-\xa4\xeb\xfeGq\x819d\xb6\xb5\xb5B&\x00%\xb5\x12\xbe\x9a\xe47\xe1\xafF\x9eQAle,\xb5L\x00\x00\x00\x00\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000000f00)='\x00\x000\x10\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000140)) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000280)=0xe8) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x14, 0x9, 0x3, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xca1de99cf558760b}, 0x20000000) 3.604961865s ago: executing program 1 (id=406): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6a}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10080900}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc91}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x2c048004) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x2f) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000380)=r4) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000400)={0x400, 0x38, [0x7, 0x7, 0x3], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000440)={0x1, 'erspan0\x00', {}, 0x1}) write(r0, &(0x7f0000000480)="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", 0x1000) r5 = syz_open_dev$evdev(&(0x7f0000001480), 0x9, 0x800) write(r5, &(0x7f00000014c0)="1738cd65a98bbc57cdcf9f9fe5fbe19f", 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001700)={0x24, &(0x7f0000001540)={0x40, 0x4, 0x33, {0x33, 0x1d, "6d1e67bf89853146076d597eb6f0ef183aafa0e5ee97c82f7168709daeb7bfd97f0beba8610eb938189d0356dadfd2d1c1"}}, &(0x7f0000001580)={0x0, 0x3, 0xf1, @string={0xf1, 0x3, "c8921d4f10c4f703fc472cae0f22fd65f33f5f7c9cf22d2cf93d0f6cf7e33506a42d16ca1ec4196ea7f6b65da16784af18e8d0cebdfe90c43089cb8307d8273a10fc7488ae180216fb3730a49ec274bee59f8802e54cd3e6d708c433bc0fdc5a33045e4511bb2063f9ff60264f43fb4fe0965212f37b8f2280a66779f789b01d3225110b71ac985d1bd4b7f87f74bdeac6bd427282a6cea70d3021e53fae28afb25d6983a4a807e72839c0adcf6c477de8545db70d3fcc10ff691aea0ded455197d3fe40328430dd4c5de6e275d1853cd8c3d9b905780ff6c5ae2f20cf1ff532280b74bfb7777e445c6ff7513e7916"}}, &(0x7f0000001680)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x4, "8ba8"}, @local=@item_012={0x1, 0x2, 0x0, '^'}]}}, &(0x7f00000016c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x3c}}}}, &(0x7f0000001900)={0x2c, &(0x7f0000001740)={0x40, 0xd, 0x74, "552daacd02dc8edb8d2db15ec17408d30cd50a259a9fa0c4d0f73757883a284e2c0fa5da071c840032a110654b5e5bfadbd19db89da865f1db8fd30b4ebd43edc6122c4ba7646afbe47793c702b5caacadce4eedffa0c5ad42af4a9780cc98394fdcb487d2ba6809e3624714e01825d05c5c53c9"}, &(0x7f00000017c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001800)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001840)={0x20, 0x1, 0x72, "3fdb5a99076c4f287f67e7b9f1c5705e6c50f7e91a45aa50ac6f4de412b3a3949eddc11676940bf72293b224fcb87141f4852b4c8b008edd0aa763799e015aae7d342fbb89e80487e8c5a4d1a56f488fab4d1e9edb859f673c480491b3c5a6a8ba82b3dbc81d371f647dc1c3bef319969dca"}, &(0x7f00000018c0)={0x20, 0x3, 0x1, 0x1}}) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000001940)={0x1f, 0x0, @none}, &(0x7f0000001980)=0xe, 0x400) write(r7, &(0x7f00000019c0)="33dc7871ba8cc9fe1aaa8b6c3206f18fa0d72ca406ee78abc9fde1b4f72bd9f868ad6bbfd3d59900c9577514d8f4c64bae39e0e0f43f2588b6d062de197d38f41880e971c63df6e4b6fe6715c65e6380519a5538dfa0e5109d3e6fe10a9c581054a0d3e85e724e01e1cb4610bf44b2bcbaa96c9f02203ab2030e17a9e4c6822ddeadf8741129695dcc77462c1594", 0x8e) r8 = accept4$tipc(r3, 0x0, &(0x7f0000001a80), 0x80000) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r8, 0x10f, 0x84, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) r9 = openat$md_node(0xffffffffffffff9c, &(0x7f0000001b40)='./md0\x00', 0x0, 0x0) ioctl$GET_BITMAP_FILE(r9, 0x90000915, &(0x7f0000001b80)) getpeername$unix(r6, &(0x7f0000002b80), &(0x7f0000002c00)=0x6e) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc005) recvmsg$unix(r6, &(0x7f0000004440)={&(0x7f0000002d40), 0x6e, &(0x7f0000004340)=[{&(0x7f0000002dc0)=""/222, 0xde}, {&(0x7f0000002ec0)=""/1, 0x1}, {&(0x7f0000002f00)=""/112, 0x70}, {&(0x7f0000002f80)=""/112, 0x70}, {&(0x7f0000003000)=""/107, 0x6b}, {&(0x7f0000003080)=""/165, 0xa5}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000004140)=""/211, 0xd3}, {&(0x7f0000004240)=""/227, 0xe3}], 0x9, &(0x7f0000004400)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x120) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000004640)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004600)={&(0x7f00000044c0)={0x13c, r1, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4b}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10c, 0x3, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xbd, 0x1, "30c5ea1fd038bfaa67bee40fc4ecd8c03c682d5d57ccb1299d14161a1eac1db1a2fcc9287b684f473f1f18baad6b207b3b573574658a0dffe8f35f3b610dc4a380ee545fcee0e70bf44c7e70d6a5b8507fb9ac6ea44ac142b7447d44d5589b2c25a77d8e4554d95409077289755e464a45ebf24010e601643eae8776d444cd53566572ff7653673ccb685064d70e4f7b2017da4fdce77fc9aa1641a9e18864bdf1d67e6f7fdd0c0c75a0e1b8e0fc2104b9e3df088a8f8054da"}}, {0x44, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x3d, 0x2, "461b12f045b83f4ae7f617ec5af3725fa87e030989753f23d7a58d404a41bec9ec5150e006a13b07f6cbc4804c385468903907812ac84059af"}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20400d1}, 0x840) openat$kvm(0xffffffffffffff9c, &(0x7f0000004680), 0x840000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000046c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4, 0x2, 0x2, 0x6, 0x6, 0x8}, 0x20) dup(r10) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004840)={&(0x7f0000004780)={0xac, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x4800) 3.219222184s ago: executing program 0 (id=408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6848}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000600)='3', 0x4e) futex_waitv(&(0x7f0000000640)=[{0x9, 0x0, 0x2}, {0x7ff, 0x0, 0x82}, {0x6e338208, 0x0, 0x2}, {0xa, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x7f, 0x0, 0x82}, {0xffffffffffffffc0, 0x0, 0x2}, {0x7ff, 0x0, 0x82}, {0x100000001, 0x0, 0x2}, {0xfff, 0x0, 0x2}, {0xffff, 0x0, 0x82}, {0x2, 0x0, 0x2}], 0xc, 0x0, 0x0, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000c000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000380)="0fc75c6566b9800000c00f326635000800000f300f16e60f1e890e000fc718baf80c66b80af8ef8e66efbafc0cb80080efbaf80c66b846d6ee8266efbafc0ced2e3e0fc76b0066b9030800000f32c12095", 0x51}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000000)="6464f30f1a2c362e0ff44534260f01c4ba420066b8c595000066ef650f412865f30fc7b000002ee000b82b018ee8f20f3066b91104000066b80900000066ba000000000f30", 0x45}], 0x1, 0x19, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xe7) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/forwarding\x00', 0x2, 0xe0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='fd/3\x00') preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000340)=""/24, 0x18}], 0x1, 0xffffff00, 0x9) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.527806104s ago: executing program 0 (id=411): syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000086307012040000102030109026f0003010600020904000000010100000a2401d5000a00020102090401000001020000090401010101020000072401f5fb0000082402010602b1020905010910"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) listen(r0, 0x8) sendmsg$netlink(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)={0x20, 0x11, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x20}], 0x1}, 0x0) unshare(0x64000600) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001400010004000000000000000a0000ef03000000140001"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) syz_usb_connect$cdc_ecm(0x4, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x1, 0x1, 0x1, 0x10, 0xe5, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0xf, {{0x8, 0x24, 0x6, 0x0, 0x0, "2920eb"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9bf0, 0x4, 0xc, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x6, 0xf}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x7, 0x34, 0x81, 0x1, 0x1}, @obex={0x5, 0x24, 0x15, 0x3}, @acm={0x4, 0x24, 0x2, 0x5}, @country_functional={0x6, 0x24, 0x7, 0x9, 0xff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x74, 0x1, 0xd}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x4, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x80, 0x60}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x2, 0xe, 0x1, 0x40, 0x68}, 0x48, &(0x7f0000000100)={0x5, 0xf, 0x48, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x83cd, 0x0, 0x3ff, [0xff000f, 0xf0, 0xcf, 0x30, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x2, 0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc1, 0x9, 0xfe, 0x6, 0xc}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x0, 0x18, 0x15, 0xfa, 0x5, 0x5}]}, 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1407}}, {0xd5, &(0x7f0000000240)=@string={0xd5, 0x3, "d0039dc53c9ba1cded37001db4d6ca71cc38a398a7a0633f941f21c80962050546a2e80fae93c925bdb11b2450293d8ad8b3714b69fa46de9659bd4650170e64b8e2ddacf240b6d56eec7de5bf6e6f3e48e860c21b4822a814edf60836b85a863bd440bc8b6ede0858cb600d259cbff61fd5449db005d141379bd24414f8717c063c9cccb4c3ca80493c7634b0b22d48bef2a7adde5cd784a878ce39fe830f48bfee67ff2c82668df76d4e783e4325bd2c8a009e49d62ebbf35508a84694f0e946f7c80a177103ed9ce74fcc0b717b2327dea6"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x100a}}, {0xd5, &(0x7f0000000380)=@string={0xd5, 0x3, "3528a96abfbbf0baaa958e471365631a90447c59d42bc08dbc1cd6c975734f85b39701c7032ffba0da939e07e985885b796d1fc5651e146ae79f0ee25fe1074300fa5c9013952dd46259b778f421fb493596c0cfa29cb2918643ab675942eba1940b52c8448614ab95a0f9c44e19e9af70ff627ed9ce3f13671c03b2fff91c75cad1f5e5712ccb4dd5610bd56e9fbbe48500ba40bf19501b9f53b098f9ebfad386f821b2a421b7070a9d03aeafb394b416fe5c5137f7391d469c1d7d9bdd2866b695eaae46c62783cf5c058c6978391cd72724"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41f}}, {0x84, &(0x7f00000004c0)=@string={0x84, 0x3, "12ccc2c17e13f49bcca8c0f29457426228901a60703725b692d587cb138c3b559a9735333c03385f66f4d265684fdf4f3c6e3d1e03bb5cce6179c228890877aac42dca27bd097a33de416f02a6bb3a87a7c484630b0fe598fb35ba3eca6d7a21e9dfb8f1262233ba561bc9cefb544c67bbba57d5b60b6a74ad7b6fa6a2ec3c2179e0"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x406}}]}) 2.089633049s ago: executing program 1 (id=412): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x755, 0x2626, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x22, 0x77, 0x1, {0x22, 0x4be}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0xff}}}}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xffffffdb, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x1218, &(0x7f00000003c0)={[{0x1d, 0x4e00, "dde813fca3aef264d2abac7fd0e96162939e52f667bf64edbadbc6da8c"}, {0x1000, 0x4e00, "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"}, {0x70, 0x4e00, "b1cb6e55be49f7f097c26d3412731860e18efa10ad99482893fc9ac2d2d23d51cca3fb104f1f4456cc002487eaac13bcdf9dc0735d1e7dd5c56fc45c25f3202d681ca2305a5f3cf72bd10a80f7d1e61dcac860627b92febbfc7757ad0927d7c044d1418ed346b9fbb79b9b0f1a8fca87"}, {0x23, 0x4e00, "56c8d9a85e3ef8c3784cf7bbc7177ccd736e61f0fa28247a6bdd51722a85b9d560b113"}, {0xa0, 0x4e00, "52790fd4168ec42ef8fe9608c32e407d60cfbbbc6e79bd198211079057ceffdf93b5f4baa202d49ae4f587046f136ba50b22886cbf7936748296ec2ad7c6f72488cf4dd09f5c42be48cd503665d512acb635178d5fe6ff04e5d0b34ea5f3ea4fb5717bd66246fcbb3c63cb3e5574cb4d8d015f2de75bd9a16e6bedac06115db4934ad5f47f73f39c319b7943f89b8227839c1a1b8b93577507365e335731cec1"}, {0x44, 0x4e00, "50b2134486a025f76dc090e797559351d3cdd56bd89b2fe5233ad5b06f47c62a88222ffcf12f21b230b4314bf4d90735e18f9dc9b45561843959e0eb5744c14b44e7aca0"}, {0x61, 0x4e00, "4b30d31cb9512744d72e94e3b32b2efba15d5dc125c3e6a9fb6bad61017b81d0f1d371020f38de39c43f80506bc98f0bf4b033d17259140ba9c865aa3aa25fe425fe759f2b862466fff6e802eaa57ea5ec6b5e71a9fb517d496b98e975d17f8f09"}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000240)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="200d350000003500801c95bb17341d191be31b7f92c99d951a045bfd463aa93b2a212a8441e5361a1b2399740393f9c4b758900c32a5fab736f26c99e43a525c07c2748e05c21baa3c7b49fdc7bdd3f5c844debb3fb5eb054480b378924dced9f1212f14175d9f464b7962c14ebaa19ec82d82fd72dc687a4698b4bfed30c0d3f13983f65f8b61bddbf9f632d1f7beaef712e7f36a9ca022be21fe5d54fb86f1f18ef20024a6845d3e973dd0c312de73ea12f1a623"], 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x121400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0x42794000) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/syzkaller0/queues/tx-1/xps_cpus\x00', 0x2, 0x52) write(r3, &(0x7f0000001640)='1', 0x1) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000001680)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x9) timer_create(0x1, &(0x7f0000000040)={0x0, 0x21, 0x4}, &(0x7f00000016c0)) r4 = dup(r2) ioctl$KVM_GET_DEVICE_ATTR_vm(r4, 0x4018aee2, 0x0) 793.570539ms ago: executing program 5 (id=420): r0 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000340)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 657.847273ms ago: executing program 5 (id=421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)=0x0) syz_pidfd_open(r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x511001, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3f) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000980)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000009c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000a00)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000a40)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_create_resource$futex(&(0x7f0000000a80)=0x1) futex(r5, 0x9, 0x1, 0x0, r5, 0x2) r6 = syz_create_resource$futex(&(0x7f0000000ac0)) r7 = socket(0x10, 0x803, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYRES64=r2], 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) futex(r5, 0x5, 0x0, 0x0, r6, 0x1) futex(0x0, 0x1, 0x0, 0x0, r6, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000600), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r10, 0x0) preadv(r10, &(0x7f0000000640)=[{&(0x7f0000000680)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 641.943175ms ago: executing program 2 (id=422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) r1 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000001c0)={0x0, &(0x7f0000000400)=[@nested_amd_set_intercept={0x181, 0x30, {0x2, 0x7fffffffffffffff, 0x0, 0x1}}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1b, {0x0, "f40f08"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xc, 0x0, 0x1}}, @nested_vmresume={0x130, 0x18}], 0xcb}) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r6 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r4, r6, 0xe2e20001) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_assert_syzos_kvm_exit$x86(r6, 0x5) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r4, r6, 0xe2e20002) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r4, r6, 0xffffffffffffffff) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000100)=[{0x25, 0x0, 0x3, 0x1800000}, {}, {0x28}, {0xb1, 0x0, 0x0, 0x1ff}, {0x6}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0x0, 0xfe, 0xffeffffe}, {0x16}]}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x5b, 0x4000010, 0x0, 0x0) 554.950254ms ago: executing program 2 (id=423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000022c0)={'wg2\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002300)={0xcc, r1, 0x321, 0x8070bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24044094}, 0x40000) 554.268824ms ago: executing program 2 (id=424): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1d4e, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1000000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d0464653d30303030303030303030303030303030303130303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r0, &(0x7f0000005c40)="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", 0x2000, &(0x7f0000005a80)={&(0x7f0000005b40)={0xa2, 0x0, 0x2d, {0x7, 0x29, 0x1000, 0x24ff871999b55d64, 0xe87, 0x4, 0x1, 0x7, 0x0, 0x0, 0xdd2f3219af23a644, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000005bc0)='./file0\x00', &(0x7f0000005c00)='system.posix_acl_access\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="02000000010002000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="0400030000000000200000000000000000000000000000006060300200000000000000b78cb9dcd6e1ec49e4735e72b3a5a5859aafa2cac59b8a4f4144b084ef918028015de39fac66d0f162626781"], 0x34, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) r5 = fsopen(&(0x7f0000000340)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000380)='name', &(0x7f00000003c0)='ccnA\xf6gro_p\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = dup3(r1, r1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000400)={0x0, 0x3f, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="796100000000000000c07e0000000c009900fdff1d19fde80000"], 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000004c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80041000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020028bd7000fddbdf251a00000008000100050000000400cc000800010051000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000881) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"/298, @ANYRES16=0x0, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setattr(0x0, &(0x7f00000007c0)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x14, r8, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000080)=[{&(0x7f0000002a80)=""/4091, 0xffb}], 0x1, 0x29, 0x6) vmsplice(r0, &(0x7f0000000180), 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000100)={@private=0xe1010203, @multicast2, 0x1}, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r11, 0x8004f50e, &(0x7f00000001c0)) 485.536831ms ago: executing program 2 (id=425): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x4) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x20000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x1fff}, 0x13, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000003, 0x0, 0x1}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f00000002c0)={0x18}, 0xfffffffffffffce9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) sendto(r7, &(0x7f00000001c0)="340000001a000100010000000000000002202000000000000000000008001b0001000000080002000001010108001100e1010203", 0x34, 0x10, 0x0, 0x0) write(r6, &(0x7f0000000280)='8', 0x1) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r3) 316.431708ms ago: executing program 1 (id=426): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newpolicy={0xb8, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback={0x400000000000000}, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 259.171034ms ago: executing program 5 (id=427): mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./mnt_trace\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) fsconfig$FSCONFIG_SET_PATH(r0, 0x9c, 0x0, 0x0, r0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000400)=""/32) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x0, 0x6, 0x3}, 0x30, 0x0) (async) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2832, 0x9, 0x3, 0x4008}, 0x30, 0x3) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000068001f"], 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)="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", 0x157) (async, rerun: 64) mount(0x0, 0x0, &(0x7f0000000380)='nfs4\x00', 0x0, 0x0) (async, rerun: 64) r4 = syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x40044591, 0x0) (async) read(r4, 0x0, 0x0) (async) ioctl$EVIOCGREP(r4, 0x80084503, 0x0) (async, rerun: 64) landlock_restrict_self(r2, 0x0) (async, rerun: 64) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) (async, rerun: 64) landlock_restrict_self(r1, 0x0) (rerun: 64) landlock_restrict_self(r1, 0x0) (async) r5 = landlock_create_ruleset(&(0x7f0000000200)={0x1000, 0x3, 0x1, 0x0, 0x0, 0x3}, 0x30, 0x1) landlock_restrict_self(r5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x20000010) (async) r6 = socket$netlink(0x10, 0x3, 0x15) sendmsg$sock(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="6400000010000106000000000000000000000000000000000000000000080000100003008f62d92630000000000000002400120008000100766574681800020014000100000000007ba0cc40b7be62480000000000000000000000001000030076657468", 0x64}], 0x1}, 0x400400c) 171.878723ms ago: executing program 1 (id=428): r0 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x8, 0xc, 0x7fffffffffffffff) r1 = open$dir(&(0x7f0000000100)='./file1\x00', 0x40, 0x110) mkdirat(r1, &(0x7f0000000180)='./file0/file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) r2 = socket$inet(0x2, 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$system_posix_acl(&(0x7f0000000840)='./file0/file1\x00', &(0x7f0000000880)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0200000001000000000000000400862d5fb4d4ccb58a6b01000000000010000200000000002000030000000000"], 0x24, 0x3) recvmsg(r2, &(0x7f0000001f80)={&(0x7f0000000000)=@in6, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000240)=""/221, 0xdd}, {&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/39, 0x27}, {&(0x7f0000001c00)=""/15, 0xf}, {&(0x7f0000001c40)=""/67, 0x43}, {&(0x7f0000001cc0)=""/248, 0xf8}, {&(0x7f0000001dc0)=""/25, 0x19}], 0x8, &(0x7f0000001e80)=""/245, 0xf5}, 0x1) 171.695412ms ago: executing program 1 (id=429): r0 = openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000340)={0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 151.905114ms ago: executing program 5 (id=430): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) 124.579647ms ago: executing program 5 (id=431): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000015c0), 0x80, 0x0) writev(r0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 68.749003ms ago: executing program 2 (id=432): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000022c0)={'wg2\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002300)={0xcc, r1, 0x321, 0x8070bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24044094}, 0x40000) 47.915285ms ago: executing program 5 (id=433): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000040)={{r0}, "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"}) ioctl$DM_DEV_REMOVE(0xffffffffffffffff, 0xc138fd04, &(0x7f0000001040)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0xa8801, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000001180), 0x50400, 0x0) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f00000011c0)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x1, 0x0, 0x181200, 0x0, 0x0, @by_dev={r1}, [@clone={0x0, 0x0, 0x0, 0x90, 'clone\x00', {@ram_num={'1:', 0x0}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, '256', ' 1 no_hydration 2 hydration_batch_size 2'}}]}) ioctl$DM_TABLE_CLEAR(r2, 0xc138fd0a, &(0x7f00000013c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '0\x00'}}}) ioctl$NILFS_IOCTL_GET_CPSTAT(r2, 0x80186e83, &(0x7f0000001500)) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001540)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000001580)=0x1c, 0x80000) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f00000015c0)={'nr0\x00', 0x81}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001600), 0x4400, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x5) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000001640), &(0x7f0000001680)='./file0\x00', 0x8, 0x1) r6 = syz_open_dev$usbfs(&(0x7f00000016c0), 0x9, 0x404000) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000017c0)={0x80, 0xb, 0x8, 0xfffc, 0xac, 0x3, &(0x7f0000001700)="0c5b3bd37f80ead3826875bfe8ef027c6f1707f4feb434ccc6b34a67bfd7cbe36245c6286cb6943d7e7c72a834935b9ee6f0ddd72ffceb6696ab4adad9bccd630c240393d63a05616ed8d7ae6f2d8ad9dac854cd1ffb254f7320a9beff46a0a1ae7eaaad1f72bc90c1f5b43c2ffe8ddb659c44f766aaa870a8664a11242d7999ee2b59cf37d8d9d5c3e0e29beea9b25bcb08faeaaaa4de8f2cdf77ae1143659585ea5798e8b0550ff98b364c"}) ioctl$DM_TABLE_LOAD(r5, 0xc138fd09, &(0x7f0000001800)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x81211, 0x0, 0x0, @by_dev={r3}, [@clone={0x0, 0x0, 0x0, 0x80, 'clone\x00', {@rnull={'/dev/syzrnull', 0x0}, 0x20, @rnull={'/dev/syzrnull', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, '16', ' 0 2 hydration_threshold 4'}}]}) r7 = openat2(0xffffffffffffffff, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x80c00, 0x21, 0x4}, 0x18) openat$cgroup_procs(r7, &(0x7f0000001a40)='cgroup.procs\x00', 0x2, 0x0) ioctl$TUNSETPERSIST(r7, 0x400454cb, 0x1) openat$cgroup(r7, &(0x7f0000001a80)='syz0\x00', 0x200002, 0x0) ftruncate(r5, 0x7fffffff) ioctl$TUNSETLINK(r7, 0x400454cd, 0x309) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001ac0), 0x20000, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000001b00)=0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000001b40), 0x101, 0x0) ioctl$DM_TARGET_MSG(r7, 0xc138fd0e, &(0x7f0000001b80)={0x4, 0x0, 0x0, 0x168, 0x138, 0x0, 0x0, 0x24011, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, {0x400, @thin_create={'create_thin ', 0x3}}}) ioctl$BLKCRYPTOGENERATEKEY(r7, 0xc030128a, &(0x7f0000001d40)={&(0x7f0000001d00)=""/64, 0x40}) r9 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001dc0), r7) sendmsg$NL80211_CMD_PROBE_CLIENT(r9, &(0x7f0000001f00)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x40a6420}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x94, r10, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x78}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) pread64(r8, &(0x7f0000001f40)=""/25, 0x19, 0x5) 14.476348ms ago: executing program 1 (id=434): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1d4e, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1000000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d0464653d30303030303030303030303030303030303130303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_fuse_handle_req(r0, &(0x7f0000005c40)="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", 0x2000, &(0x7f0000005a80)={&(0x7f0000005b40)={0xa2, 0x0, 0x2d, {0x7, 0x29, 0x1000, 0x24ff871999b55d64, 0xe87, 0x4, 0x1, 0x7, 0x0, 0x0, 0xdd2f3219af23a644, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000005bc0)='./file0\x00', &(0x7f0000005c00)='system.posix_acl_access\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="02000000010002000000000002000700", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="0400030000000000200000000000000000000000000000006060300200000000000000b78cb9dcd6e1ec49e4735e72b3a5a5859aafa2cac59b8a4f4144b084ef918028015de39fac66d0f162626781"], 0x34, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) r5 = fsopen(&(0x7f0000000340)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000380)='name', &(0x7f00000003c0)='ccnA\xf6gro_p\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = dup3(r1, r1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000400)={0x0, 0x3f, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="796100000000000000c07e0000000c009900fdff1d19fde80000"], 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000004c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80041000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020028bd7000fddbdf251a00000008000100050000000400cc000800010051000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000881) r7 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"/298, @ANYRES16=0x0, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sched_setattr(0x0, &(0x7f00000007c0)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x14, r8, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000080)=[{&(0x7f0000002a80)=""/4091, 0xffb}], 0x1, 0x29, 0x6) vmsplice(r0, &(0x7f0000000180), 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000100)={@private=0xe1010203, @multicast2, 0x1}, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r11, 0x8004f50e, &(0x7f00000001c0)) 0s ago: executing program 2 (id=435): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20280, 0x1) openat(r0, &(0x7f0000000040)='./file0\x00', 0xac80, 0x100) (async) socket$netlink(0x10, 0x3, 0xb) kernel console output (not intermixed with test programs): 63247][ T36] audit: type=1400 audit(1793106698.060:140): avc: denied { open } for pid=374 comm="syz.3.18" path="/dev/input/event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.207572][ T36] audit: type=1400 audit(1793106698.060:141): avc: denied { ioctl } for pid=374 comm="syz.3.18" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.355825][ T10] usb 1-1: device descriptor read/64, error -71 [ 29.465954][ T10] usb usb1-port1: attempt power cycle [ 29.805839][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.826913][ T10] usb 1-1: device descriptor read/8, error -71 [ 29.847700][ T36] audit: type=1400 audit(1793106698.790:142): avc: denied { mount } for pid=386 comm="syz.3.21" name="/" dev="sockfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.890908][ T36] audit: type=1400 audit(1793106698.830:143): avc: denied { mount } for pid=389 comm="syz.3.22" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 29.914268][ T36] audit: type=1400 audit(1793106698.850:144): avc: denied { create } for pid=389 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.934466][ T36] audit: type=1400 audit(1793106698.870:145): avc: denied { getopt } for pid=389 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.966870][ T10] usb 1-1: device descriptor read/8, error -71 [ 30.107675][ T36] audit: type=1400 audit(1793106699.050:146): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 30.151175][ T36] audit: type=1400 audit(1793106699.090:147): avc: denied { read } for pid=391 comm="syz.3.23" name="oneway_spam_detection" dev="binder" ino=1048623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.175695][ T36] audit: type=1400 audit(1793106699.090:148): avc: denied { open } for pid=391 comm="syz.3.23" path="/dev/binderfs/features/oneway_spam_detection" dev="binder" ino=1048623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.205889][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 30.226318][ T394] tipc: Started in network mode [ 30.231433][ T394] tipc: Node identity 1000001, cluster identity 4711 [ 30.237491][ T10] usb 1-1: device descriptor read/8, error -71 [ 30.239402][ T394] tipc: Node number set to 16777217 [ 30.346922][ T311] usb 3-1: USB disconnect, device number 2 [ 30.366853][ T10] usb 1-1: device descriptor read/8, error -71 [ 30.475929][ T10] usb usb1-port1: unable to enumerate USB device [ 30.734841][ T10] usb 2-1: USB disconnect, device number 2 [ 30.865884][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.016971][ T9] usb 3-1: config 0 interface 0 altsetting 40 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.028175][ T9] usb 3-1: config 0 interface 0 altsetting 40 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.038043][ T9] usb 3-1: config 0 interface 0 altsetting 40 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.050981][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 31.057649][ T9] usb 3-1: New USB device found, idVendor=0584, idProduct=033c, bcdDevice= 0.00 [ 31.066747][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.075430][ T9] usb 3-1: config 0 descriptor?? [ 31.145832][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.296137][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 31.304729][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 31.318016][ T10] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 31.336013][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.344082][ T10] usb 2-1: Product: syz [ 31.348418][ T10] usb 2-1: Manufacturer: syz [ 31.353161][ T10] usb 2-1: SerialNumber: syz [ 31.486821][ T9] hid-generic 0003:0584:033C.0003: No inputs registered, leaving [ 31.495393][ T9] hid-generic 0003:0584:033C.0003: hidraw0: USB HID v0.00 Joystick [HID 0584:033c] on usb-dummy_hcd.2-1/input0 [ 31.563379][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 31.573775][ T10] usb 2-1: USB disconnect, device number 3 [ 31.586912][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.636648][ T373] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.693356][ T417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.702508][ T417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.711156][ T417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.719863][ T417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.756885][ T10] usb 3-1: USB disconnect, device number 3 [ 31.785861][ T373] usb 4-1: Using ep0 maxpacket: 8 [ 31.792295][ T373] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 31.803795][ T373] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.816793][ T373] usb 4-1: config 0 interface 0 has no altsetting 0 [ 31.823409][ T373] usb 4-1: New USB device found, idVendor=0c16, idProduct=0003, bcdDevice= 0.00 [ 31.832494][ T373] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.841211][ T373] usb 4-1: config 0 descriptor?? [ 32.052881][ T476] SELinux: Context system_u:object_r:semanage_read_lock_t:s0 is not valid (left unmapped). [ 32.149243][ T484] fuse: Bad value for 'fd' [ 32.249706][ T373] input: HID 0c16:0003 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0C16:0003.0004/input/input5 [ 32.291781][ T373] gyration 0003:0C16:0003.0004: input,hiddev96,hidraw0: USB HID v0.03 Device [HID 0c16:0003] on usb-dummy_hcd.3-1/input0 [ 32.345810][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.465592][ T31] usb 4-1: USB disconnect, device number 4 [ 32.507651][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 32.516327][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.526586][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.537711][ T10] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 32.546902][ T10] usb 2-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 32.555290][ T10] usb 2-1: Product: syz [ 32.559671][ T10] usb 2-1: Manufacturer: syz [ 32.564306][ T10] usb 2-1: SerialNumber: syz [ 32.569018][ T373] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.579604][ T462] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.586223][ T502] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 32.735833][ T373] usb 3-1: Using ep0 maxpacket: 32 [ 32.742296][ T373] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 32.750478][ T373] usb 3-1: config 0 has no interface number 0 [ 32.758119][ T373] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 32.767266][ T373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.775339][ T373] usb 3-1: Product: syz [ 32.779575][ T373] usb 3-1: Manufacturer: syz [ 32.784301][ T373] usb 3-1: SerialNumber: syz [ 32.793719][ T373] usb 3-1: config 0 descriptor?? [ 32.793733][ T507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.794136][ T507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.810927][ T373] smsc95xx v2.0.0 [ 32.823912][ T10] usb 2-1: USB disconnect, device number 4 [ 32.835649][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.007640][ T511] FAULT_INJECTION: forcing a failure. [ 33.007640][ T511] name failslab, interval 1, probability 0, space 0, times 1 [ 33.020394][ T511] CPU: 0 UID: 0 PID: 511 Comm: syz.3.49 Not tainted syzkaller #0 b337f5a91fe3fd607f319abe4015f181b3f4c6c0 [ 33.020432][ T511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.020448][ T511] Call Trace: [ 33.020459][ T511] [ 33.020466][ T511] __dump_stack+0x21/0x30 [ 33.020495][ T511] dump_stack_lvl+0x140/0x1c0 [ 33.020518][ T511] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.020543][ T511] dump_stack+0x19/0x20 [ 33.020565][ T511] should_fail_ex+0x3c2/0x510 [ 33.020582][ T511] should_failslab+0xac/0x100 [ 33.020597][ T511] kmem_cache_alloc_noprof+0x42/0x410 [ 33.020619][ T511] ? security_inode_alloc+0x51/0x230 [ 33.020636][ T511] ? kasan_save_alloc_info+0x3a/0x50 [ 33.020657][ T511] security_inode_alloc+0x51/0x230 [ 33.020674][ T511] inode_init_always_gfp+0x756/0x9e0 [ 33.020689][ T511] alloc_inode+0xc5/0x270 [ 33.020705][ T511] iget_locked+0x198/0x9a0 [ 33.020723][ T511] ? __cfi_iget_locked+0x10/0x10 [ 33.020739][ T511] ? __kasan_check_write+0x18/0x20 [ 33.020760][ T511] ? rwsem_read_trylock+0x275/0x5a0 [ 33.020778][ T511] ? __kasan_check_write+0x18/0x20 [ 33.020799][ T511] ? downgrade_write+0x470/0x470 [ 33.020816][ T511] ? __kasan_check_write+0x18/0x20 [ 33.020837][ T511] ? _raw_spin_lock+0x92/0x120 [ 33.020854][ T511] ? down_read+0x7f/0xe0 [ 33.020875][ T511] kernfs_get_inode+0x50/0x830 [ 33.020889][ T511] ? __cfi_kernfs_set_super+0x10/0x10 [ 33.020913][ T511] kernfs_get_tree+0x567/0x9a0 [ 33.020936][ T511] ? __cfi_kernfs_get_tree+0x10/0x10 [ 33.020965][ T511] ? selinux_capable+0x38/0x50 [ 33.020982][ T511] ? bpf_lsm_capable+0xd/0x20 [ 33.021001][ T511] ? security_capable+0x44/0x130 [ 33.021024][ T511] sysfs_get_tree+0x44/0x110 [ 33.021047][ T511] vfs_get_tree+0x9e/0x290 [ 33.021069][ T511] do_new_mount+0x251/0xb40 [ 33.021090][ T511] ? security_capable+0x44/0x130 [ 33.021114][ T511] path_mount+0x66a/0xff0 [ 33.021134][ T511] ? putname+0x113/0x150 [ 33.021157][ T511] __se_sys_mount+0x2bf/0x480 [ 33.021180][ T511] ? __x64_sys_mount+0xf0/0xf0 [ 33.021202][ T511] ? __kasan_check_write+0x18/0x20 [ 33.021222][ T511] ? fpregs_restore_userregs+0x11c/0x260 [ 33.021244][ T511] __x64_sys_mount+0xc3/0xf0 [ 33.021266][ T511] x64_sys_call+0x2021/0x2ee0 [ 33.021282][ T511] do_syscall_64+0x57/0xf0 [ 33.021298][ T511] ? clear_bhb_loop+0x50/0xa0 [ 33.021320][ T511] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.021341][ T511] RIP: 0033:0x7f7a4679f559 [ 33.021354][ T511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.021366][ T511] RSP: 002b:00007f7a475dc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 33.021383][ T511] RAX: ffffffffffffffda RBX: 00007f7a46a26090 RCX: 00007f7a4679f559 [ 33.021395][ T511] RDX: 00002000000005c0 RSI: 0000200000000580 RDI: 0000000000000000 [ 33.021405][ T511] RBP: 00007f7a46836b20 R08: 0000000000000000 R09: 0000000000000000 [ 33.021415][ T511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.021424][ T511] R13: 00007f7a46a26128 R14: 00007f7a46a26090 R15: 00007ffcf8590808 [ 33.021438][ T511] [ 33.441316][ T526] ======================================================= [ 33.441316][ T526] WARNING: The mand mount option has been deprecated and [ 33.441316][ T526] and is ignored by this kernel. Remove the mand [ 33.441316][ T526] option from the mount to silence this warning. [ 33.441316][ T526] ======================================================= [ 33.476419][ T526] SELinux: security_context_str_to_sid (syt|v\{‹) failed with errno=-22 [ 33.504329][ T526] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.517615][ T526] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 33.738804][ T373] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 33.749659][ T373] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 33.758979][ T373] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 33.765941][ T311] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.770095][ T373] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 33.786645][ T373] usb 3-1: USB disconnect, device number 4 [ 33.905870][ T311] usb 2-1: device descriptor read/64, error -71 [ 34.145856][ T311] usb 2-1: device descriptor read/64, error -71 [ 34.254336][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 34.254353][ T36] audit: type=1400 audit(1809884146.217:212): avc: denied { write } for pid=527 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.309163][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 34.337229][ T529] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 34.395893][ T311] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 34.535915][ T311] usb 2-1: device descriptor read/64, error -71 [ 34.585297][ T529] syz.2.55 (529): drop_caches: 2 [ 34.655893][ T504] Bluetooth: hci0: command 0x1003 tx timeout [ 34.656333][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.779262][ T36] audit: type=1400 audit(1809884146.747:213): avc: denied { mount } for pid=530 comm="syz.0.56" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 34.796157][ T311] usb 2-1: device descriptor read/64, error -71 [ 34.891531][ T36] audit: type=1400 audit(1809884146.857:214): avc: denied { write } for pid=535 comm="syz.2.57" name="udp6" dev="proc" ino=4026532519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 34.918307][ T311] usb usb2-port1: attempt power cycle [ 34.930212][ T36] audit: type=1400 audit(1809884146.897:215): avc: denied { remount } for pid=535 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.953532][ T36] audit: type=1400 audit(1809884146.917:216): avc: denied { unmount } for pid=535 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.005225][ T36] audit: type=1400 audit(1809884146.967:217): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 35.030710][ T36] audit: type=1400 audit(1809884146.997:218): avc: denied { append } for pid=540 comm="syz.0.59" name="001" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.275941][ T311] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 35.312604][ T542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 35.316005][ T311] usb 2-1: device descriptor read/8, error -71 [ 35.477209][ T311] usb 2-1: device descriptor read/8, error -71 [ 35.565873][ T36] audit: type=1400 audit(1809884147.527:219): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 35.715967][ T311] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 35.748006][ T311] usb 2-1: device descriptor read/8, error -71 [ 35.885946][ T312] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.895296][ T311] usb 2-1: device descriptor read/8, error -71 [ 36.006285][ T311] usb usb2-port1: unable to enumerate USB device [ 36.006738][ T36] audit: type=1326 audit(1809884147.977:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=509 comm="syz.3.49" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a4679f559 code=0x7fc00000 [ 36.037701][ T312] usb 3-1: too many configurations: 231, using maximum allowed: 8 [ 36.046080][ T312] usb 3-1: config index 0 descriptor too short (expected 4257, got 161) [ 36.063771][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.074226][ T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 36.084199][ T312] usb 3-1: config index 1 descriptor too short (expected 4257, got 161) [ 36.092729][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.103191][ T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 36.113419][ T312] usb 3-1: config index 2 descriptor too short (expected 4257, got 161) [ 36.122339][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.132931][ T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 36.146579][ T312] usb 3-1: config index 3 descriptor too short (expected 4257, got 161) [ 36.154969][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.166684][ T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 36.176526][ T312] usb 3-1: config index 4 descriptor too short (expected 4257, got 161) [ 36.184900][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.195075][ T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 36.196107][ T373] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 36.206307][ T312] usb 3-1: config index 5 descriptor too short (expected 4257, got 161) [ 36.220057][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.230275][ T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 36.240431][ T312] usb 3-1: config index 6 descriptor too short (expected 4257, got 161) [ 36.248909][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.264430][ T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 36.274473][ T312] usb 3-1: config index 7 descriptor too short (expected 4257, got 161) [ 36.283031][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.293222][ T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 36.302515][ T312] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 36.312051][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.324266][ T36] audit: type=1400 audit(1809884148.287:221): avc: denied { append } for pid=555 comm="syz.3.63" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 36.347795][ T556] sit0: entered promiscuous mode [ 36.354700][ T556] netlink: 'syz.3.63': attribute type 1 has an invalid length. [ 36.362508][ T556] netlink: 1 bytes leftover after parsing attributes in process `syz.3.63'. [ 36.362809][ T373] usb 2-1: device descriptor read/64, error -71 [ 36.378391][ T556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=556 comm=syz.3.63 [ 36.425654][ T558] FAULT_INJECTION: forcing a failure. [ 36.425654][ T558] name failslab, interval 1, probability 0, space 0, times 0 [ 36.438538][ T558] CPU: 0 UID: 0 PID: 558 Comm: syz.3.64 Not tainted syzkaller #0 b337f5a91fe3fd607f319abe4015f181b3f4c6c0 [ 36.438578][ T558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.438597][ T558] Call Trace: [ 36.438608][ T558] [ 36.438620][ T558] __dump_stack+0x21/0x30 [ 36.438663][ T558] dump_stack_lvl+0x140/0x1c0 [ 36.438703][ T558] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.438729][ T558] ? avc_compute_av+0x442/0x760 [ 36.438782][ T558] dump_stack+0x19/0x20 [ 36.438817][ T558] should_fail_ex+0x3c2/0x510 [ 36.438843][ T558] should_failslab+0xac/0x100 [ 36.438871][ T558] __kmalloc_cache_noprof+0x41/0x470 [ 36.438897][ T558] ? syslog_print_all+0x123/0x520 [ 36.438934][ T558] syslog_print_all+0x123/0x520 [ 36.438958][ T558] ? syslog_print+0x6f0/0x6f0 [ 36.438982][ T558] ? selinux_capable+0x38/0x50 [ 36.439007][ T558] ? selinux_syslog+0x10d/0x140 [ 36.439037][ T558] ? bpf_lsm_syslog+0xd/0x20 [ 36.439059][ T558] do_syslog+0x3c4/0x7f0 [ 36.439089][ T558] ? __cfi_do_syslog+0x10/0x10 [ 36.439112][ T558] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 36.439150][ T558] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 36.439182][ T558] __x64_sys_syslog+0x80/0x90 [ 36.439203][ T558] x64_sys_call+0x19e6/0x2ee0 [ 36.439221][ T558] do_syscall_64+0x57/0xf0 [ 36.439255][ T558] ? clear_bhb_loop+0x50/0xa0 [ 36.439291][ T558] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.439324][ T558] RIP: 0033:0x7f7a4679f559 [ 36.439345][ T558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.439369][ T558] RSP: 002b:00007f7a475fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 36.439390][ T558] RAX: ffffffffffffffda RBX: 00007f7a46a25fa0 RCX: 00007f7a4679f559 [ 36.439422][ T558] RDX: 00000000000000d0 RSI: 00002000000004c0 RDI: 0000000000000004 [ 36.439440][ T558] RBP: 00007f7a46836b20 R08: 0000000000000000 R09: 0000000000000000 [ 36.439458][ T558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.439474][ T558] R13: 00007f7a46a26038 R14: 00007f7a46a25fa0 R15: 00007ffcf8590808 [ 36.439495][ T558] [ 36.561945][ T561] netlink: 'syz.3.64': attribute type 30 has an invalid length. [ 36.671919][ T312] usb 3-1: string descriptor 0 read error: -71 [ 36.679250][ T312] usb 3-1: Found UVC 0.00 device (046d:0825) [ 36.689124][ T312] usb 3-1: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 36.699191][ T312] usb 3-1: No streaming interface found for terminal 2. [ 36.710741][ T312] usb 3-1: USB disconnect, device number 5 [ 37.045922][ T311] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.197401][ T311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.200722][ T572] Zero length message leads to an empty skb [ 37.208416][ T311] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 37.224726][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.226492][ T373] usb 2-1: device descriptor read/64, error -71 [ 37.244454][ T311] usb 4-1: config 0 descriptor?? [ 37.252848][ T311] usb 4-1: unsupported MDLM descriptors [ 37.485963][ T373] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 37.521142][ T567] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3589920902 (7179841804 ns) > initial count (617750926 ns). Using initial count to start timer. [ 37.539747][ T567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.549089][ T567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.611333][ T574] kvm: kvm [566]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 37.620616][ T574] kvm: kvm [566]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 37.636039][ T373] usb 2-1: Using ep0 maxpacket: 16 [ 37.643107][ T373] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.653866][ T373] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.658202][ T574] kvm: vcpu 0: requested 14336 ns lapic timer period limited to 200000 ns [ 37.666353][ T373] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.690880][ T373] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 37.704332][ T373] usb 2-1: config 0 interface 0 has no altsetting 0 [ 37.711636][ T373] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 37.721137][ T373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.730303][ T373] usb 2-1: config 0 descriptor?? [ 38.025900][ T312] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 38.141614][ T373] logitech-djreceiver 0003:046D:C53A.0005: unknown main item tag 0x0 [ 38.149915][ T373] logitech-djreceiver 0003:046D:C53A.0005: unknown main item tag 0x0 [ 38.158366][ T373] logitech-djreceiver 0003:046D:C53A.0005: unknown main item tag 0x0 [ 38.166804][ T373] logitech-djreceiver 0003:046D:C53A.0005: unknown main item tag 0x0 [ 38.174948][ T373] logitech-djreceiver 0003:046D:C53A.0005: unknown main item tag 0x0 [ 38.176169][ T312] usb 3-1: Using ep0 maxpacket: 8 [ 38.184228][ T373] logitech-djreceiver 0003:046D:C53A.0005: unknown main item tag 0x0 [ 38.192975][ T312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 38.196999][ T373] logitech-djreceiver 0003:046D:C53A.0005: unknown main item tag 0x0 [ 38.208912][ T312] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 38.216342][ T373] logitech-djreceiver 0003:046D:C53A.0005: unknown main item tag 0x0 [ 38.229788][ T312] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 38.237236][ T373] logitech-djreceiver 0003:046D:C53A.0005: unknown main item tag 0x0 [ 38.246979][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.254483][ T373] logitech-djreceiver 0003:046D:C53A.0005: unknown main item tag 0x0 [ 38.265694][ T312] usb 3-1: config 0 descriptor?? [ 38.270893][ T373] logitech-djreceiver 0003:046D:C53A.0005: unknown main item tag 0x0 [ 38.283438][ T373] logitech-djreceiver 0003:046D:C53A.0005: unknown main item tag 0x0 [ 38.291901][ T373] logitech-djreceiver 0003:046D:C53A.0005: unknown main item tag 0x0 [ 38.300306][ T373] logitech-djreceiver 0003:046D:C53A.0005: unknown main item tag 0x0 [ 38.308690][ T373] logitech-djreceiver 0003:046D:C53A.0005: unbalanced collection at end of report description [ 38.319503][ T373] logitech-djreceiver 0003:046D:C53A.0005: logi_dj_probe: parse failed [ 38.328078][ T373] logitech-djreceiver 0003:046D:C53A.0005: probe with driver logitech-djreceiver failed with error -22 [ 38.343608][ T563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.363638][ T563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.382949][ T563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.392466][ T563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.402397][ T373] usb 2-1: USB disconnect, device number 10 [ 38.712725][ T312] lenovo 0003:17EF:6047.0006: unknown main item tag 0x2 [ 38.720539][ T312] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 38.727678][ T312] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 38.734817][ T312] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 38.742079][ T312] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 38.749754][ T312] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 38.756841][ T312] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 38.763819][ T312] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0 [ 38.770906][ T312] lenovo 0003:17EF:6047.0006: unknown main item tag 0x1 [ 38.778892][ T312] lenovo 0003:17EF:6047.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 38.918025][ T578] process 'syz.2.69' launched './file0' with NULL argv: empty string added [ 38.926973][ T372] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 39.101974][ T372] usb 1-1: config 0 has an invalid descriptor of length 142, skipping remainder of the config [ 39.112764][ T590] syzkaller0: entered promiscuous mode [ 39.118415][ T372] usb 1-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 39.131447][ T590] syzkaller0: entered allmulticast mode [ 39.142244][ T372] usb 1-1: config 0 interface 0 has no altsetting 0 [ 39.149085][ T372] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 39.163494][ T372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.173541][ T372] usb 1-1: config 0 descriptor?? [ 39.191660][ T372] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 39.423691][ T45] usb 1-1: USB disconnect, device number 6 [ 39.495894][ T372] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 39.648948][ T372] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 39.658573][ T372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 39.666727][ T372] usb 2-1: Product: syz [ 39.671296][ T372] usb 2-1: Manufacturer: syz [ 39.841262][ T373] usb 4-1: USB disconnect, device number 5 [ 39.881456][ T595] TCP: TCP_TX_DELAY enabled [ 39.888378][ T595] /dev/nullb0: Can't lookup blockdev [ 39.951242][ T600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.964304][ T600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.988306][ T372] scsi host1: uas [ 40.128578][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 40.128599][ T36] audit: type=1400 audit(1809884152.097:233): avc: denied { read } for pid=610 comm="syz.3.80" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.176564][ T36] audit: type=1400 audit(1809884152.127:234): avc: denied { open } for pid=610 comm="syz.3.80" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.210272][ T36] audit: type=1400 audit(1809884152.127:235): avc: denied { ioctl } for pid=610 comm="syz.3.80" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.236902][ T36] audit: type=1400 audit(1809884152.127:236): avc: denied { mount } for pid=610 comm="syz.3.80" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 40.259305][ T36] audit: type=1400 audit(1809884152.127:237): avc: denied { mounton } for pid=610 comm="syz.3.80" path="/21/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 40.722503][ T36] audit: type=1400 audit(1809884152.687:238): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 40.769022][ T462] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.814960][ T312] lenovo 0003:17EF:6047.0006: Failed to switch F7/9/11 mode: -71 [ 40.824188][ T312] lenovo 0003:17EF:6047.0006: Failed to switch middle button: -71 [ 40.833657][ T312] lenovo 0003:17EF:6047.0006: Fn-lock setting failed: -71 [ 40.843847][ T312] lenovo 0003:17EF:6047.0006: Sensitivity setting failed: -71 [ 40.857457][ T312] usb 3-1: USB disconnect, device number 6 [ 41.275890][ T312] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 41.425968][ T312] usb 3-1: Using ep0 maxpacket: 8 [ 41.432860][ T312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 41.441720][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.452034][ T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.463141][ T312] usb 3-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 41.472317][ T312] usb 3-1: New USB device strings: Mfr=244, Product=1, SerialNumber=3 [ 41.480585][ T312] usb 3-1: Product: syz [ 41.484814][ T312] usb 3-1: Manufacturer: syz [ 41.489501][ T312] usb 3-1: SerialNumber: syz [ 41.701144][ T312] usb 3-1: 0:1 : does not exist [ 41.706592][ T312] usb 3-1: 6:0: failed to get current value for ch 0 (-71) [ 41.714470][ T312] usb 3-1: 6:0: cannot get min/max values for control 2 (id 6) [ 41.722626][ T312] usb 3-1: 6:0: failed to get current value for ch 1 (-71) [ 41.730411][ T312] usb 3-1: 6:0: failed to get current value for ch 0 (-71) [ 41.740929][ T312] usb 3-1: 6:0: failed to get current value for ch 1 (-71) [ 41.748385][ T312] usb 3-1: unit 0 not found! [ 41.757133][ T312] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 41.768138][ T312] usb 3-1: USB disconnect, device number 7 [ 41.783692][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.235633][ T36] audit: type=1400 audit(1809884154.197:239): avc: denied { remount } for pid=625 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.279205][ C0] usb 2-1: stat urb: status -71 [ 42.280406][ T31] usb 2-1: USB disconnect, device number 11 [ 42.284334][ C0] usb 2-1: cmd cmplt err -71 [ 42.305137][ T31] scsi 1:0:0:0: tag#28 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 42.313078][ T31] scsi 1:0:0:0: tag#28 CDB: opcode=0x12 12 00 00 00 24 00 [ 42.379273][ T630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 42.388396][ T630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 42.566047][ T312] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 42.695988][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 42.715910][ T312] usb 3-1: Using ep0 maxpacket: 8 [ 42.722967][ T312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 42.730937][ T312] usb 3-1: too many configurations: 175, using maximum allowed: 8 [ 42.740962][ T312] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 42.748649][ T312] usb 3-1: can't read configurations, error -61 [ 42.815930][ T504] Bluetooth: hci0: command 0x1003 tx timeout [ 42.815930][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.865932][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 42.872788][ T31] usb 2-1: config 0 interface 0 altsetting 246 endpoint 0x81 has an invalid bInterval 0, changing to 1 [ 42.884014][ T31] usb 2-1: config 0 interface 0 altsetting 246 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.894091][ T312] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 42.902246][ T31] usb 2-1: config 0 interface 0 altsetting 246 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.915697][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 42.922925][ T31] usb 2-1: New USB device found, idVendor=1532, idProduct=0116, bcdDevice= 0.00 [ 42.932101][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.941456][ T31] usb 2-1: config 0 descriptor?? [ 42.962016][ T36] audit: type=1400 audit(1809884154.927:240): avc: denied { write } for pid=633 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.047833][ T639] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 43.055721][ T639] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 43.065934][ T312] usb 3-1: Using ep0 maxpacket: 8 [ 43.073344][ T312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 43.081971][ T312] usb 3-1: too many configurations: 175, using maximum allowed: 8 [ 43.092389][ T312] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 43.100778][ T312] usb 3-1: can't read configurations, error -61 [ 43.108331][ T312] usb usb3-port1: attempt power cycle [ 43.150877][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 43.163294][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 43.174490][ T31] usb 2-1: USB disconnect, device number 12 [ 43.445938][ T312] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 43.466392][ T312] usb 3-1: Using ep0 maxpacket: 8 [ 43.473370][ T312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 43.481606][ T312] usb 3-1: too many configurations: 175, using maximum allowed: 8 [ 43.490642][ T312] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 43.498347][ T312] usb 3-1: can't read configurations, error -61 [ 43.625936][ T312] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 43.646407][ T312] usb 3-1: Using ep0 maxpacket: 8 [ 43.653315][ T312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 43.661187][ T312] usb 3-1: too many configurations: 175, using maximum allowed: 8 [ 43.670550][ T312] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 43.678252][ T312] usb 3-1: can't read configurations, error -61 [ 43.684883][ T312] usb usb3-port1: unable to enumerate USB device [ 43.770705][ T36] audit: type=1400 audit(1809884155.737:241): avc: denied { setopt } for pid=657 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.035892][ T312] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 44.187383][ T312] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 44.198886][ T312] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.210708][ T312] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 44.225856][ T312] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.235441][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 44.243877][ T312] usb 2-1: SerialNumber: syz [ 44.455334][ T36] audit: type=1400 audit(1809884156.417:242): avc: denied { set_context_mgr } for pid=660 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 44.456754][ T661] rust_binder: Write failure EINVAL in pid:73 [ 44.489489][ T312] rndis_host 2-1:253.0: RNDIS init failed, -71 [ 44.496121][ T312] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71 [ 44.521658][ T312] usb 2-1: USB disconnect, device number 13 [ 44.802883][ T667] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.810344][ T667] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.818594][ T667] bridge_slave_0: entered allmulticast mode [ 44.825088][ T667] bridge_slave_0: entered promiscuous mode [ 44.833801][ T667] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.841049][ T667] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.848720][ T667] bridge_slave_1: entered allmulticast mode [ 44.855224][ T667] bridge_slave_1: entered promiscuous mode [ 44.861661][ T46] bridge_slave_1: left allmulticast mode [ 44.867389][ T46] bridge_slave_1: left promiscuous mode [ 44.873229][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.881355][ T46] bridge_slave_0: left allmulticast mode [ 44.887186][ T46] bridge_slave_0: left promiscuous mode [ 44.892891][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.005282][ T46] tipc: Left network mode [ 45.028455][ T46] veth1_macvtap: left promiscuous mode [ 45.034187][ T46] veth0_vlan: left promiscuous mode [ 45.099832][ T672] tipc: Started in network mode [ 45.104771][ T672] tipc: Node identity ac1414aa, cluster identity 4711 [ 45.112186][ T672] tipc: Enabling of bearer rejected, failed to enable media [ 45.148652][ T667] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.155832][ T667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.163220][ T667] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.170369][ T667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.218499][ T462] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.226438][ T462] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.241276][ T459] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.248592][ T459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.268805][ T459] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.276095][ T459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.326715][ T667] veth0_vlan: entered promiscuous mode [ 45.371814][ T667] veth1_macvtap: entered promiscuous mode [ 45.382627][ T677] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.390031][ T677] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.398197][ T677] bridge0: entered allmulticast mode [ 45.445174][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 45.445203][ T36] audit: type=1400 audit(1809884157.407:249): avc: denied { read } for pid=678 comm="syz.2.103" name="idProduct" dev="configfs" ino=6764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 45.481649][ T672] tipc: Enabling of bearer rejected, failed to enable media [ 45.482567][ T36] audit: type=1400 audit(1809884157.407:250): avc: denied { mounton } for pid=667 comm="syz-executor" path="/root/syzkaller.EYYtvm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 45.537769][ T36] audit: type=1400 audit(1809884157.447:251): avc: denied { read write } for pid=678 comm="syz.2.103" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.539086][ T679] netlink: 'syz.2.103': attribute type 27 has an invalid length. [ 45.561705][ T36] audit: type=1400 audit(1809884157.447:252): avc: denied { open } for pid=678 comm="syz.2.103" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.611768][ T679] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.618591][ T36] audit: type=1400 audit(1809884157.447:253): avc: denied { ioctl } for pid=678 comm="syz.2.103" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 45.619127][ T679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.650614][ T679] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.657803][ T679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.669550][ T679] bridge0: left allmulticast mode [ 45.773742][ T36] audit: type=1400 audit(1809884157.737:254): avc: denied { mounton } for pid=689 comm="syz.4.105" path="/1/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 45.976063][ T372] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 46.158029][ T372] usb 2-1: unable to get BOS descriptor or descriptor too short [ 46.178241][ T372] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.196198][ T372] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 46.218054][ T372] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 46.227502][ T372] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.235538][ T372] usb 2-1: Product: syz [ 46.240264][ T372] usb 2-1: Manufacturer: syz [ 46.244915][ T372] usb 2-1: SerialNumber: syz [ 46.677743][ T686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.729822][ T686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.592906][ T720] loop5: detected capacity change from 0 to 7 [ 47.601402][ T718] netlink: 'syz.2.111': attribute type 27 has an invalid length. [ 47.654529][ T718] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 47.681814][ T723] netlink: 'syz.1.112': attribute type 4 has an invalid length. [ 47.730131][ T724] netlink: 'syz.1.112': attribute type 4 has an invalid length. [ 47.946014][ T373] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 48.025239][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 48.035198][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 48.046256][ T36] audit: type=1400 audit(1809884160.017:255): avc: denied { create } for pid=728 comm="syz.4.113" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.066842][ T36] audit: type=1400 audit(1809884160.017:256): avc: denied { write } for pid=728 comm="syz.4.113" name="file2" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.089338][ T36] audit: type=1400 audit(1809884160.017:257): avc: denied { open } for pid=728 comm="syz.4.113" path="/4/file2" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.111909][ T731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2329 sclass=netlink_route_socket pid=731 comm=syz.4.113 [ 48.125378][ T36] audit: type=1400 audit(1809884160.017:258): avc: denied { ioctl } for pid=728 comm="syz.4.113" path="/4/file2" dev="tmpfs" ino=41 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.164853][ T373] usb 3-1: unable to get BOS descriptor or descriptor too short [ 48.174078][ T373] usb 3-1: config 1 has an invalid interface number: 156 but max is 2 [ 48.186903][ T733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.196746][ T373] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.208973][ T373] usb 3-1: config 1 has no interface number 2 [ 48.215209][ T373] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 48.227332][ T733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.235297][ T373] usb 3-1: config 1 interface 1 has no altsetting 0 [ 48.244915][ T373] usb 3-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 48.263948][ T373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.274635][ T373] usb 3-1: Product: syz [ 48.279640][ T373] usb 3-1: Manufacturer: syz [ 48.284610][ T373] usb 3-1: SerialNumber: syz [ 48.287835][ T733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.302702][ T733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.515973][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.564316][ T717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.573596][ T717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.605099][ T372] usb 2-1: 0:1 : UAC_AS_GENERAL descriptor not found [ 48.623106][ T372] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 48.638431][ T372] usb 2-1: 0:1 : UAC_AS_GENERAL descriptor not found [ 48.646720][ T372] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 48.662089][ T372] usb 2-1: 0:1 : UAC_AS_GENERAL descriptor not found [ 48.685916][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 48.703988][ T372] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 48.721578][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.735121][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.735743][ T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.762190][ T372] usb 2-1: USB disconnect, device number 14 [ 48.782470][ T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.793470][ T9] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 48.806991][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 48.813732][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 48.831351][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.849939][ T9] usb 5-1: config 0 descriptor?? [ 49.127009][ T373] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 49.147909][ T373] usb 3-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 49.157638][ T373] usb 3-1: 1:1 : unsupported format bits 0x7b6c0006 [ 49.164461][ T373] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 49.176138][ T373] usb 3-1: selecting invalid altsetting 0 [ 49.182339][ T373] usb 3-1: selecting invalid altsetting 0 [ 49.188629][ T373] usb 3-1: unit 2 not found! [ 49.193439][ T373] usb 3-1: unit 236 not found! [ 49.210891][ T373] usb 3-1: USB disconnect, device number 12 [ 49.248088][ T348] udevd[348]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.475515][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 49.486891][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 49.497927][ T9] usb 5-1: USB disconnect, device number 2 [ 49.616284][ T373] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 49.778536][ T373] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 49.789002][ T373] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 49.800647][ T373] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.815868][ T373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.824014][ T373] usb 3-1: Product: syz [ 49.833747][ T373] usb 3-1: Manufacturer: syz [ 49.838744][ T373] usb 3-1: SerialNumber: syz [ 50.047796][ T760] capability: warning: `syz.4.123' uses deprecated v2 capabilities in a way that may be insecure [ 50.059864][ T373] cdc_ncm 3-1:1.0: bind() failure [ 50.074778][ T373] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 50.089151][ T373] cdc_ncm 3-1:1.1: bind() failure [ 50.104907][ T373] usb 3-1: USB disconnect, device number 13 [ 50.405603][ T770] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 50.845908][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 51.018264][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 51.028961][ T31] usb 3-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 51.041409][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.054436][ T31] usb 3-1: config 0 descriptor?? [ 51.070019][ T31] usb 3-1: unsupported MDLM descriptors [ 51.158277][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 51.158300][ T36] audit: type=1400 audit(1809884163.127:266): avc: denied { unmount } for pid=667 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.355010][ T772] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3589920902 (7179841804 ns) > initial count (617750926 ns). Using initial count to start timer. [ 51.389993][ T772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.400888][ T772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.467364][ T789] kvm: kvm [771]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 51.478250][ T789] kvm: kvm [771]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 51.502308][ T36] audit: type=1400 audit(1809884163.467:267): avc: denied { create } for pid=791 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.531025][ T36] audit: type=1400 audit(1809884163.497:268): avc: denied { getopt } for pid=791 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.551647][ T36] audit: type=1400 audit(1809884163.517:269): avc: denied { map } for pid=791 comm="syz.4.133" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 51.576604][ T36] audit: type=1400 audit(1809884163.547:270): avc: denied { call } for pid=791 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 51.642304][ T796] overlayfs: missing 'lowerdir' [ 51.825630][ T36] audit: type=1400 audit(1809884163.787:271): avc: denied { ioctl } for pid=802 comm="syz.1.137" path="socket:[7467]" dev="sockfs" ino=7467 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.864394][ T36] audit: type=1400 audit(1809884163.827:272): avc: denied { write } for pid=805 comm="syz.1.138" path="socket:[7469]" dev="sockfs" ino=7469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.887914][ T36] audit: type=1400 audit(1809884163.827:273): avc: denied { ioctl } for pid=805 comm="syz.1.138" path="socket:[7469]" dev="sockfs" ino=7469 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.984976][ T808] netlink: 32 bytes leftover after parsing attributes in process `syz.4.139'. [ 52.423013][ T36] audit: type=1400 audit(1809884164.387:274): avc: denied { getopt } for pid=815 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 52.858007][ T825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=825 comm=syz.4.145 [ 53.016536][ T36] audit: type=1400 audit(1809884164.987:275): avc: denied { write } for pid=827 comm="syz.1.146" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 53.125899][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 53.287686][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.299905][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.310616][ T31] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 53.320429][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.330606][ T31] usb 5-1: config 0 descriptor?? [ 53.675686][ T312] usb 3-1: USB disconnect, device number 14 [ 53.758648][ T31] hid-led 0003:27B8:01ED.0007: unknown main item tag 0x0 [ 53.780110][ T31] hid-led 0003:27B8:01ED.0007: unknown main item tag 0x0 [ 53.788725][ T31] hid-led 0003:27B8:01ED.0007: unknown main item tag 0x0 [ 53.796206][ T31] hid-led 0003:27B8:01ED.0007: unknown main item tag 0x0 [ 53.803400][ T31] hid-led 0003:27B8:01ED.0007: unknown main item tag 0x0 [ 54.125883][ T372] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 54.141099][ T31] hid-led 0003:27B8:01ED.0007: probe with driver hid-led failed with error -71 [ 54.152029][ T31] usb 5-1: USB disconnect, device number 3 [ 54.285922][ T372] usb 3-1: Using ep0 maxpacket: 16 [ 54.293379][ T372] usb 3-1: unable to get BOS descriptor or descriptor too short [ 54.302386][ T372] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.312665][ T372] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 237, changing to 7 [ 54.324296][ T372] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 54.337553][ T372] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 54.346736][ T372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.355438][ T372] usb 3-1: Product: syz [ 54.359824][ T372] usb 3-1: Manufacturer: syz [ 54.364508][ T372] usb 3-1: SerialNumber: syz [ 54.576073][ T372] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 54.584485][ T372] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 54.775632][ T372] usb 3-1: 2:1 : can't get High Capability descriptor [ 54.781978][ T865] syz.4.155 uses obsolete (PF_INET,SOCK_PACKET) [ 54.880920][ T876] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 55.001536][ T372] usb 3-1: USB disconnect, device number 15 [ 55.115885][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 55.146745][ T887] netlink: 'syz.1.162': attribute type 4 has an invalid length. [ 55.287757][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.307866][ T31] usb 5-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 55.317620][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.337232][ T31] usb 5-1: config 0 descriptor?? [ 55.352059][ T31] usb 5-1: unsupported MDLM descriptors [ 55.415886][ T373] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 55.577954][ T373] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 55.600758][ T373] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 55.624069][ T892] ` [ 55.636394][ T373] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 55.662027][ T867] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3589920902 (7179841804 ns) > initial count (617750926 ns). Using initial count to start timer. [ 55.679788][ T373] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.695209][ T373] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 55.712019][ T867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.715276][ T373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.733370][ T867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.750383][ T373] usb 2-1: Product: syz [ 55.754616][ T373] usb 2-1: Manufacturer: syz [ 55.765953][ T373] usb 2-1: SerialNumber: syz [ 55.782134][ T887] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 55.795000][ T373] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 55.809153][ T896] kvm: kvm [866]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 55.818020][ T373] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 55.829280][ T896] kvm: kvm [866]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 55.838421][ T373] usbserial_generic 2-1:1.0: generic converter detected [ 55.858522][ T373] usb 2-1: generic converter now attached to ttyUSB0 [ 56.035002][ T9] usb 2-1: USB disconnect, device number 15 [ 56.044082][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 56.063806][ T9] usbserial_generic 2-1:1.0: device disconnected [ 56.257003][ T312] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 56.395947][ T312] usb 3-1: device descriptor read/64, error -71 [ 56.619160][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 56.619182][ T36] audit: type=1400 audit(1809884168.587:294): avc: denied { write } for pid=904 comm="syz.1.167" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.632834][ T906] input: syz1 as /devices/virtual/input/input6 [ 56.654777][ T312] usb 3-1: device descriptor read/64, error -71 [ 56.743948][ T36] audit: type=1400 audit(1809884168.707:295): avc: denied { write } for pid=916 comm="syz.1.169" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 56.746676][ T918] rust_binder: 916:918 got transaction to invalid handle 1 [ 56.774455][ T918] rust_binder: 916:918 transaction call to 0:0 failed ENOENT, code 0 size 0-0 line process.rs:958 [ 56.915889][ T312] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 57.065999][ T312] usb 3-1: device descriptor read/64, error -71 [ 57.137505][ T45] rust_binder: 916: undelivered TRANSACTION_ERROR: 29201 [ 57.305931][ T312] usb 3-1: device descriptor read/64, error -71 [ 57.416311][ T312] usb usb3-port1: attempt power cycle [ 57.585921][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 57.739176][ T9] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 57.748419][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.756557][ T9] usb 2-1: Product: syz [ 57.760774][ T9] usb 2-1: Manufacturer: syz [ 57.765491][ T9] usb 2-1: SerialNumber: syz [ 57.766130][ T312] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 57.778446][ T9] ums-jumpshot 2-1:1.0: USB Mass Storage device detected [ 57.787892][ T9] ums-jumpshot 2-1:1.0: Quirks match for vid 05dc pid 0001: 2 [ 57.807383][ T312] usb 3-1: device descriptor read/8, error -71 [ 57.899431][ T311] usb 5-1: USB disconnect, device number 4 [ 57.937195][ T312] usb 3-1: device descriptor read/8, error -71 [ 58.027169][ T937] netlink: 'syz.4.175': attribute type 4 has an invalid length. [ 58.046409][ T373] usb 2-1: USB disconnect, device number 16 [ 58.129955][ T939] rust_binder: 938:939 got transaction to invalid handle 1 [ 58.137297][ T939] rust_binder: 938:939 transaction call to 0:0 failed ENOENT, code 0 size 0-0 line process.rs:958 [ 58.151791][ T36] audit: type=1400 audit(1809884170.117:296): avc: denied { getopt } for pid=938 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.158048][ T45] rust_binder: 938: undelivered TRANSACTION_ERROR: 29201 [ 58.185953][ T312] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 58.207290][ T312] usb 3-1: device descriptor read/8, error -71 [ 58.223553][ T943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.178'. [ 58.338054][ T312] usb 3-1: device descriptor read/8, error -71 [ 58.395941][ T311] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 58.446166][ T312] usb usb3-port1: unable to enumerate USB device [ 58.547357][ T311] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 58.557936][ T311] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 58.569624][ T311] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 58.580288][ T311] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.602751][ T36] audit: type=1400 audit(1809884170.567:297): avc: denied { create } for pid=946 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 58.605426][ T311] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 58.638432][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.646853][ T311] usb 5-1: Product: syz [ 58.651551][ T311] usb 5-1: Manufacturer: syz [ 58.656390][ T311] usb 5-1: SerialNumber: syz [ 58.666194][ T937] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 58.674683][ T311] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 58.686788][ T311] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 58.698074][ T311] usbserial_generic 5-1:1.0: generic converter detected [ 58.708233][ T311] usb 5-1: generic converter now attached to ttyUSB0 [ 58.723848][ T36] audit: type=1400 audit(1809884170.687:298): avc: denied { read } for pid=949 comm="syz.1.181" path="socket:[9481]" dev="sockfs" ino=9481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.774741][ T36] audit: type=1400 audit(1809884170.737:299): avc: denied { ioctl } for pid=949 comm="syz.1.181" path="socket:[9481]" dev="sockfs" ino=9481 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.879447][ T373] usb 5-1: USB disconnect, device number 5 [ 58.888552][ T373] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 58.903627][ T373] usbserial_generic 5-1:1.0: device disconnected [ 59.016648][ T311] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 59.053279][ T36] audit: type=1400 audit(1809884171.017:300): avc: granted { setsecparam } for pid=955 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 59.149982][ T961] rust_binder: 960:961 got transaction to invalid handle 1 [ 59.157489][ T961] rust_binder: 960:961 transaction call to 0:0 failed ENOENT, code 1 size 120-24 line process.rs:958 [ 59.172416][ T311] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 59.181720][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.189930][ T311] usb 2-1: Product: syz [ 59.194241][ T311] usb 2-1: Manufacturer: syz [ 59.205856][ T311] usb 2-1: SerialNumber: syz [ 59.278083][ T312] rust_binder: 960: undelivered TRANSACTION_ERROR: 29201 [ 59.329034][ T36] audit: type=1400 audit(1809884171.297:301): avc: denied { lock } for pid=963 comm="syz.2.186" path="socket:[9528]" dev="sockfs" ino=9528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 59.336356][ T964] 9p: Unknown access argument 18446744073709551615: -34 [ 59.441039][ T311] usb 2-1: USB disconnect, device number 17 [ 59.457160][ T418] udevd[418]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.625950][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 59.777052][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 59.783886][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.794227][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.810556][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.819754][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.827934][ T9] usb 3-1: Product: syz [ 59.832122][ T9] usb 3-1: Manufacturer: syz [ 59.836840][ T9] usb 3-1: SerialNumber: syz [ 60.215910][ T373] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 60.375945][ T373] usb 2-1: Using ep0 maxpacket: 16 [ 60.382934][ T373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.394076][ T373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 60.405080][ T373] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 60.418190][ T373] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 60.428349][ T373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.438298][ T373] usb 2-1: config 0 descriptor?? [ 60.851731][ T36] audit: type=1400 audit(1809884172.817:302): avc: denied { mounton } for pid=975 comm="syz.1.190" path="/54/file0" dev="tmpfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 60.888340][ T976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.897655][ T976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.913094][ T373] nintendo 0003:057E:2019.0008: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.1-1/input0 [ 61.208696][ T36] audit: type=1400 audit(1809884173.177:303): avc: denied { mount } for pid=983 comm="syz.4.192" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 61.320124][ T986] ./dev/sda1: Can't lookup blockdev [ 61.330917][ T986] 9pnet: Could not find request transport: fd [ 61.361659][ T373] nintendo 0003:057E:2019.0008: Failed to get joycon info; ret=-71 [ 61.377163][ T373] nintendo 0003:057E:2019.0008: Failed to retrieve controller info; ret=-71 [ 61.386542][ T373] nintendo 0003:057E:2019.0008: Failed to initialize controller; ret=-71 [ 61.397598][ T373] nintendo 0003:057E:2019.0008: probe - fail = -71 [ 61.404550][ T373] nintendo 0003:057E:2019.0008: probe with driver nintendo failed with error -71 [ 61.417879][ T373] usb 2-1: USB disconnect, device number 18 [ 61.445872][ T312] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 61.607609][ T312] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.621506][ T312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 61.628878][ T312] usb 5-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 61.638694][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.653818][ T312] usb 5-1: config 0 descriptor?? [ 62.063180][ T312] hid (null): report_id 10367 is invalid [ 62.070631][ T36] audit: type=1400 audit(1809884174.037:304): avc: denied { read } for pid=999 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.084897][ T312] wacom 0003:056A:0016.0009: report_id 10367 is invalid [ 62.099019][ T312] wacom 0003:056A:0016.0009: item 0 2 1 8 parsing failed [ 62.106919][ T312] wacom 0003:056A:0016.0009: parse failed [ 62.113269][ T312] wacom 0003:056A:0016.0009: probe with driver wacom failed with error -22 [ 62.183370][ T36] audit: type=1400 audit(1809884174.147:305): avc: denied { create } for pid=1007 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 62.219353][ T36] audit: type=1400 audit(1809884174.177:306): avc: denied { sys_admin } for pid=1007 comm="syz.1.199" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 62.244588][ T36] audit: type=1400 audit(1809884174.207:307): avc: denied { remount } for pid=1007 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.271886][ T1008] overlayfs: failed to clone lowerpath [ 62.278328][ T312] usb 5-1: USB disconnect, device number 6 [ 62.336052][ T9] cdc_ncm 3-1:1.0: bind() failure [ 62.350127][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 62.365845][ T9] cdc_ncm 3-1:1.1: bind() failure [ 62.387015][ T9] usb 3-1: USB disconnect, device number 20 [ 62.440278][ T1013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.459259][ T1013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.470746][ T1015] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.494340][ T1015] 9p: Unknown access argument 18446744073709551615: -34 [ 62.675865][ T373] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 62.790358][ T36] audit: type=1400 audit(1809884174.757:308): avc: denied { unmount } for pid=667 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 62.847172][ T373] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.865923][ T312] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 62.866541][ T373] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 62.947495][ T373] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.967744][ T373] usb 2-1: New USB device found, idVendor=0499, idProduct=1003, bcdDevice= 0.40 [ 62.987036][ T373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.995902][ T373] usb 2-1: Product: syz [ 63.006031][ T373] usb 2-1: Manufacturer: syz [ 63.011683][ T373] usb 2-1: SerialNumber: syz [ 63.097258][ T312] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 12423, setting to 1024 [ 63.115809][ T312] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 63.135808][ T312] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.157567][ T312] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 63.175843][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.184096][ T312] usb 3-1: Product: syz [ 63.194255][ T312] usb 3-1: Manufacturer: syz [ 63.204423][ T312] usb 3-1: SerialNumber: syz [ 63.218108][ T1017] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 63.237047][ T312] ums-onetouch 3-1:1.0: USB Mass Storage device detected [ 63.246574][ T373] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 63.275923][ T373] usb 2-1: USB disconnect, device number 19 [ 63.309573][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.440996][ T9] usb 3-1: USB disconnect, device number 21 [ 63.955869][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 64.026132][ T1047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 64.042278][ T1047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 64.060305][ T1046] FAULT_INJECTION: forcing a failure. [ 64.060305][ T1046] name failslab, interval 1, probability 0, space 0, times 0 [ 64.073922][ T1046] CPU: 0 UID: 0 PID: 1046 Comm: syz.1.208 Not tainted syzkaller #0 b337f5a91fe3fd607f319abe4015f181b3f4c6c0 [ 64.073961][ T1046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 64.073979][ T1046] Call Trace: [ 64.073988][ T1046] [ 64.073999][ T1046] __dump_stack+0x21/0x30 [ 64.074042][ T1046] dump_stack_lvl+0x140/0x1c0 [ 64.074078][ T1046] ? __cfi_dump_stack_lvl+0x10/0x10 [ 64.074117][ T1046] ? kstrdup_const+0x45/0x60 [ 64.074145][ T1046] ? trace_event_raw_event_kmalloc+0xac/0xf0 [ 64.074177][ T1046] dump_stack+0x19/0x20 [ 64.074210][ T1046] should_fail_ex+0x3c2/0x510 [ 64.074236][ T1046] should_failslab+0xac/0x100 [ 64.074261][ T1046] kmem_cache_alloc_noprof+0x42/0x410 [ 64.074297][ T1046] ? __kernfs_new_node+0xf1/0x740 [ 64.074327][ T1046] __kernfs_new_node+0xf1/0x740 [ 64.074352][ T1046] ? down_write+0xee/0x2b0 [ 64.074387][ T1046] ? kernfs_new_node+0x280/0x280 [ 64.074412][ T1046] ? __kasan_check_write+0x18/0x20 [ 64.074446][ T1046] ? down_write+0xee/0x2b0 [ 64.074480][ T1046] ? __cfi_down_write+0x10/0x10 [ 64.074514][ T1046] ? __kasan_check_write+0x18/0x20 [ 64.074548][ T1046] kernfs_new_node+0x154/0x280 [ 64.074574][ T1046] __kernfs_create_file+0x52/0x280 [ 64.074604][ T1046] cgroup_addrm_files+0x775/0xac0 [ 64.074632][ T1046] ? compute_effective_progs+0x7e8/0x860 [ 64.074665][ T1046] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 64.074693][ T1046] ? bpf_prog_array_free+0x36/0x40 [ 64.074724][ T1046] ? cgroup_bpf_inherit+0x472/0x4c0 [ 64.074759][ T1046] ? __kasan_check_write+0x18/0x20 [ 64.074791][ T1046] ? _raw_spin_lock_irq+0x93/0x120 [ 64.074817][ T1046] css_populate_dir+0x2be/0x3d0 [ 64.074862][ T1046] cgroup_mkdir+0x11da/0x1590 [ 64.074887][ T1046] ? __cfi_cgroup_mkdir+0x10/0x10 [ 64.074911][ T1046] kernfs_iop_mkdir+0x1be/0x2d0 [ 64.074938][ T1046] vfs_mkdir+0x58e/0x810 [ 64.074968][ T1046] do_mkdirat+0x240/0x530 [ 64.074997][ T1046] ? __cfi_do_mkdirat+0x10/0x10 [ 64.075025][ T1046] ? __kasan_check_write+0x18/0x20 [ 64.075057][ T1046] ? getname_flags+0x203/0x6b0 [ 64.075093][ T1046] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 64.075124][ T1046] __x64_sys_mkdirat+0x8b/0xa0 [ 64.075152][ T1046] x64_sys_call+0x2ba8/0x2ee0 [ 64.075178][ T1046] do_syscall_64+0x57/0xf0 [ 64.075203][ T1046] ? clear_bhb_loop+0x50/0xa0 [ 64.075238][ T1046] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 64.075270][ T1046] RIP: 0033:0x7fba36d9f559 [ 64.075293][ T1046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.075316][ T1046] RSP: 002b:00007fba37c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 64.075347][ T1046] RAX: ffffffffffffffda RBX: 00007fba37025fa0 RCX: 00007fba36d9f559 [ 64.075368][ T1046] RDX: 00000000000001ff RSI: 0000200000000340 RDI: ffffffffffffff9c [ 64.075386][ T1046] RBP: 00007fba36e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 64.075403][ T1046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.075418][ T1046] R13: 00007fba37026038 R14: 00007fba37025fa0 R15: 00007fffa5d33488 [ 64.075439][ T1046] [ 64.245958][ T1046] cgroup: cgroup_addrm_files: failed to add cgroup.subtree_control, err=-12 [ 64.272583][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 64.407381][ T9] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 64.416649][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.424687][ T9] usb 5-1: Product: syz [ 64.428961][ T9] usb 5-1: Manufacturer: syz [ 64.433599][ T9] usb 5-1: SerialNumber: syz [ 64.512811][ T1052] netlink: 'syz.1.211': attribute type 1 has an invalid length. [ 64.656511][ T9] usb 5-1: unit 4 not found! [ 64.662444][ T9] usb 5-1: unit 14 not found! [ 64.693576][ T9] usb 5-1: USB disconnect, device number 7 [ 64.707023][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.785641][ T1065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.215'. [ 64.796611][ T36] audit: type=1400 audit(1809884176.767:309): avc: denied { getopt } for pid=1064 comm="syz.4.215" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.915892][ T312] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 65.067037][ T312] usb 2-1: not running at top speed; connect to a high speed hub [ 65.075933][ T312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.086385][ T312] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 65.095433][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.106649][ T312] usb 2-1: Found UVC 1.00 device (046d:0825) [ 65.114193][ T312] usb 2-1: No streaming interface found for terminal 2. [ 65.308921][ T36] audit: type=1400 audit(1809884177.277:310): avc: denied { ioctl } for pid=1059 comm="syz.1.213" path="socket:[10002]" dev="sockfs" ino=10002 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.311657][ T1060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.343466][ T1060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.353455][ T36] audit: type=1326 audit(1809884177.317:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1068 comm="syz.2.216" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f830239f559 code=0x0 [ 65.360100][ T372] usb 2-1: USB disconnect, device number 20 [ 65.405507][ T36] audit: type=1400 audit(1809884177.367:312): avc: denied { read write } for pid=1068 comm="syz.2.216" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 65.430157][ T36] audit: type=1400 audit(1809884177.377:313): avc: denied { open } for pid=1068 comm="syz.2.216" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 66.029824][ T1084] device-mapper: table: 252:0: crypt: Bad cipher specification (-EINVAL) [ 66.038709][ T1084] device-mapper: ioctl: error adding target to table [ 66.076870][ T1088] netlink: 'syz.1.221': attribute type 1 has an invalid length. [ 66.390945][ T1106] syz.1.226 (1106) used obsolete PPPIOCDETACH ioctl [ 66.953719][ T1134] netlink: 'syz.1.234': attribute type 1 has an invalid length. [ 66.969638][ T1135] netlink: 'syz.1.234': attribute type 1 has an invalid length. [ 67.377623][ T1141] tc_dump_action: action bad kind [ 67.611098][ T1148] FAULT_INJECTION: forcing a failure. [ 67.611098][ T1148] name failslab, interval 1, probability 0, space 0, times 0 [ 67.632499][ T1148] CPU: 1 UID: 0 PID: 1148 Comm: syz.0.238 Not tainted syzkaller #0 b337f5a91fe3fd607f319abe4015f181b3f4c6c0 [ 67.632542][ T1148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 67.632562][ T1148] Call Trace: [ 67.632573][ T1148] [ 67.632585][ T1148] __dump_stack+0x21/0x30 [ 67.632629][ T1148] dump_stack_lvl+0x140/0x1c0 [ 67.632667][ T1148] ? __cfi_dump_stack_lvl+0x10/0x10 [ 67.632707][ T1148] dump_stack+0x19/0x20 [ 67.632743][ T1148] should_fail_ex+0x3c2/0x510 [ 67.632769][ T1148] should_failslab+0xac/0x100 [ 67.632795][ T1148] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 67.632832][ T1148] ? kstrdup_const+0x45/0x60 [ 67.632863][ T1148] ? __kasan_check_write+0x18/0x20 [ 67.632897][ T1148] ? _raw_spin_lock+0x92/0x120 [ 67.632923][ T1148] kstrdup+0x4d/0x130 [ 67.632959][ T1148] ? kstrdup_const+0x3a/0x60 [ 67.632989][ T1148] kstrdup_const+0x45/0x60 [ 67.633029][ T1148] __kernfs_new_node+0xaa/0x740 [ 67.633058][ T1148] ? down_write+0xee/0x2b0 [ 67.633094][ T1148] ? kernfs_new_node+0x280/0x280 [ 67.633120][ T1148] ? __kasan_check_write+0x18/0x20 [ 67.633154][ T1148] ? down_write+0xee/0x2b0 [ 67.633189][ T1148] ? __cfi_down_write+0x10/0x10 [ 67.633224][ T1148] ? __kasan_check_write+0x18/0x20 [ 67.633258][ T1148] kernfs_new_node+0x154/0x280 [ 67.633285][ T1148] __kernfs_create_file+0x52/0x280 [ 67.633315][ T1148] cgroup_addrm_files+0x775/0xac0 [ 67.633343][ T1148] ? compute_effective_progs+0x7e8/0x860 [ 67.633377][ T1148] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 67.633406][ T1148] ? bpf_prog_array_free+0x36/0x40 [ 67.633437][ T1148] ? cgroup_bpf_inherit+0x472/0x4c0 [ 67.633472][ T1148] ? __kasan_check_write+0x18/0x20 [ 67.633506][ T1148] ? _raw_spin_lock_irq+0x93/0x120 [ 67.633532][ T1148] css_populate_dir+0x2be/0x3d0 [ 67.633567][ T1148] cgroup_mkdir+0x11da/0x1590 [ 67.633593][ T1148] ? __cfi_cgroup_mkdir+0x10/0x10 [ 67.633616][ T1148] kernfs_iop_mkdir+0x1be/0x2d0 [ 67.633644][ T1148] vfs_mkdir+0x58e/0x810 [ 67.633673][ T1148] do_mkdirat+0x240/0x530 [ 67.633701][ T1148] ? __cfi_do_mkdirat+0x10/0x10 [ 67.633730][ T1148] ? __kasan_check_write+0x18/0x20 [ 67.633762][ T1148] ? getname_flags+0x203/0x6b0 [ 67.633797][ T1148] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 67.633829][ T1148] __x64_sys_mkdirat+0x8b/0xa0 [ 67.633857][ T1148] x64_sys_call+0x2ba8/0x2ee0 [ 67.633884][ T1148] do_syscall_64+0x57/0xf0 [ 67.633910][ T1148] ? clear_bhb_loop+0x50/0xa0 [ 67.633943][ T1148] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 67.633976][ T1148] RIP: 0033:0x7fd6f7b9f559 [ 67.633998][ T1148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.634033][ T1148] RSP: 002b:00007fd6f8987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 67.634065][ T1148] RAX: ffffffffffffffda RBX: 00007fd6f7e25fa0 RCX: 00007fd6f7b9f559 [ 67.634086][ T1148] RDX: 00000000000001ff RSI: 0000200000000340 RDI: ffffffffffffff9c [ 67.634105][ T1148] RBP: 00007fd6f7c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 67.634123][ T1148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.634140][ T1148] R13: 00007fd6f7e26038 R14: 00007fd6f7e25fa0 R15: 00007ffebd6669d8 [ 67.634164][ T1148] [ 67.634180][ T1148] cgroup: cgroup_addrm_files: failed to add cgroup.events, err=-12 [ 67.964923][ T312] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 68.107138][ T311] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 68.135583][ T312] usb 3-1: Using ep0 maxpacket: 32 [ 68.142871][ T312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 68.155852][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.166590][ T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.185628][ T312] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 68.194868][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.212057][ T312] usb 3-1: Product: syz [ 68.216282][ T312] usb 3-1: Manufacturer: syz [ 68.220911][ T312] usb 3-1: SerialNumber: syz [ 68.249875][ T311] usb 2-1: device descriptor read/64, error -71 [ 68.443484][ T312] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 68.452348][ T312] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 68.470516][ T312] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3) [ 68.479196][ T312] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3) [ 68.487620][ T312] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3) [ 68.496385][ T312] usb 3-1: 3:0: failed to get current value for ch 1 (-71) [ 68.503977][ T311] usb 2-1: device descriptor read/64, error -71 [ 68.513330][ T312] usb 3-1: 3:0: failed to get current value for ch 2 (-71) [ 68.530605][ T312] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 68.541864][ T312] usb 3-1: 3:0: failed to get current value for ch 1 (-71) [ 68.565893][ T312] usb 3-1: 3:0: failed to get current value for ch 0 (-71) [ 68.574050][ T312] usb 3-1: 3:0: cannot get min/max values for control 11 (id 3) [ 68.582963][ T312] usb 3-1: 3:0: cannot get min/max values for control 11 (id 3) [ 68.605717][ T312] usb 3-1: USB disconnect, device number 22 [ 68.626764][ T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.756045][ T311] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 68.889710][ T311] usb 2-1: device descriptor read/64, error -71 [ 69.120572][ T1159] rust_binder: 1157:1159 no such ref 3 [ 69.129934][ T1159] rust_binder: 1157:1159 no such ref 0 [ 69.135619][ T311] usb 2-1: device descriptor read/64, error -71 [ 69.142685][ T1159] rust_binder: 1157:1159 got reply transaction with no transaction stack [ 69.160315][ T1159] rust_binder: 1157:1159 transaction reply to 0:0 failed EINVAL, code 2 size 96-24 line thread.rs:1560 [ 69.268679][ T311] usb usb2-port1: attempt power cycle [ 69.573195][ T312] rust_binder: 1157: undelivered TRANSACTION_COMPLETE [ 69.587972][ T312] rust_binder: 1157: undelivered TRANSACTION_ERROR: 29201 [ 69.603051][ T312] rust_binder: 1157: undelivered transaction 9, process died [ 69.622744][ T311] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 69.635350][ T1161] capability: warning: `syz.2.244' uses 32-bit capabilities (legacy support in use) [ 69.664308][ T311] usb 2-1: device descriptor read/8, error -71 [ 69.810959][ T311] usb 2-1: device descriptor read/8, error -71 [ 70.056120][ T311] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 70.077565][ T311] usb 2-1: device descriptor read/8, error -71 [ 70.166998][ T372] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 70.208473][ T311] usb 2-1: device descriptor read/8, error -71 [ 70.328036][ T311] usb usb2-port1: unable to enumerate USB device [ 70.328053][ T372] usb 3-1: Using ep0 maxpacket: 16 [ 70.349220][ T372] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 70.361559][ T372] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 70.370971][ T372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.379314][ T372] usb 3-1: Product: syz [ 70.384214][ T372] usb 3-1: Manufacturer: syz [ 70.389188][ T372] usb 3-1: SerialNumber: syz [ 70.399067][ T372] r8152-cfgselector 3-1: Unknown version 0x0000 [ 70.405664][ T372] r8152-cfgselector 3-1: config 0 descriptor?? [ 70.822532][ T9] r8152-cfgselector 3-1: USB disconnect, device number 23 [ 71.054885][ T552] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 71.229503][ T552] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 71.240777][ T552] usb 2-1: config 0 interface 0 has no altsetting 0 [ 71.247535][ T552] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 71.257199][ T552] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.268244][ T552] usb 2-1: config 0 descriptor?? [ 71.278204][ T1175] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 71.377442][ T1183] hub 1-0:1.0: USB hub found [ 71.384287][ T1183] hub 1-0:1.0: 1 port detected [ 71.509787][ T552] usbhid 2-1:0.0: can't add hid device: -71 [ 71.525166][ T552] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 71.541405][ T552] usb 2-1: USB disconnect, device number 25 [ 71.659035][ T1191] netlink: 'syz.2.253': attribute type 1 has an invalid length. [ 72.137583][ T1200] FAULT_INJECTION: forcing a failure. [ 72.137583][ T1200] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 72.162037][ T1200] CPU: 1 UID: 0 PID: 1200 Comm: syz.1.255 Not tainted syzkaller #0 b337f5a91fe3fd607f319abe4015f181b3f4c6c0 [ 72.162080][ T1200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.162097][ T1200] Call Trace: [ 72.162107][ T1200] [ 72.162118][ T1200] __dump_stack+0x21/0x30 [ 72.162159][ T1200] dump_stack_lvl+0x140/0x1c0 [ 72.162193][ T1200] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.162230][ T1200] ? _parse_integer+0x2e/0x40 [ 72.162264][ T1200] ? kstrtoull+0x13b/0x1e0 [ 72.162298][ T1200] dump_stack+0x19/0x20 [ 72.162331][ T1200] should_fail_ex+0x3c2/0x510 [ 72.162356][ T1200] should_fail+0xf/0x20 [ 72.162379][ T1200] should_fail_usercopy+0x1e/0x30 [ 72.162404][ T1200] _copy_from_user+0x20/0xa0 [ 72.162433][ T1200] ___sys_sendmsg+0x1c7/0x370 [ 72.162467][ T1200] ? __sys_sendmsg+0x260/0x260 [ 72.162505][ T1200] ? rb_commit+0x753/0x7b0 [ 72.162539][ T1200] ? __fget_files+0x2bc/0x330 [ 72.162565][ T1200] __x64_sys_sendmsg+0x1be/0x2a0 [ 72.162598][ T1200] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 72.162642][ T1200] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 72.162675][ T1200] x64_sys_call+0x2a4c/0x2ee0 [ 72.162701][ T1200] do_syscall_64+0x57/0xf0 [ 72.162727][ T1200] ? clear_bhb_loop+0x50/0xa0 [ 72.162761][ T1200] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.162794][ T1200] RIP: 0033:0x7fba36d9f559 [ 72.162815][ T1200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.162837][ T1200] RSP: 002b:00007fba37c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.162867][ T1200] RAX: ffffffffffffffda RBX: 00007fba37025fa0 RCX: 00007fba36d9f559 [ 72.162886][ T1200] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 72.162903][ T1200] RBP: 00007fba37c86090 R08: 0000000000000000 R09: 0000000000000000 [ 72.162920][ T1200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.162937][ T1200] R13: 00007fba37026038 R14: 00007fba37025fa0 R15: 00007fffa5d33488 [ 72.162959][ T1200] [ 72.706064][ T1207] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 72.741198][ T1210] FAULT_INJECTION: forcing a failure. [ 72.741198][ T1210] name failslab, interval 1, probability 0, space 0, times 0 [ 72.754106][ T1210] CPU: 0 UID: 0 PID: 1210 Comm: syz.2.259 Not tainted syzkaller #0 b337f5a91fe3fd607f319abe4015f181b3f4c6c0 [ 72.754149][ T1210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.754178][ T1210] Call Trace: [ 72.754189][ T1210] [ 72.754200][ T1210] __dump_stack+0x21/0x30 [ 72.754248][ T1210] dump_stack_lvl+0x140/0x1c0 [ 72.754287][ T1210] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.754325][ T1210] ? __cfi_trace_clock_local+0x10/0x10 [ 72.754356][ T1210] ? kvm_sched_clock_read+0x15/0x30 [ 72.754392][ T1210] dump_stack+0x19/0x20 [ 72.754426][ T1210] should_fail_ex+0x3c2/0x510 [ 72.754454][ T1210] should_failslab+0xac/0x100 [ 72.754480][ T1210] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 72.754516][ T1210] ? __d_alloc+0x42/0x8c0 [ 72.754549][ T1210] __d_alloc+0x42/0x8c0 [ 72.754582][ T1210] ? kernel_text_address+0xa9/0xe0 [ 72.754620][ T1210] d_alloc_parallel+0xe4/0x1370 [ 72.754654][ T1210] ? avc_has_perm_noaudit+0x26b/0x360 [ 72.754682][ T1210] ? __asan_memcpy+0x5a/0x80 [ 72.754717][ T1210] ? selinux_inode_permission+0x3f2/0x5d0 [ 72.754750][ T1210] ? __cfi_d_alloc_parallel+0x10/0x10 [ 72.754785][ T1210] ? __cfi_selinux_inode_permission+0x10/0x10 [ 72.754817][ T1210] ? number+0xc9d/0xf00 [ 72.754841][ T1210] ? make_vfsuid+0x4d/0xa0 [ 72.754873][ T1210] ? generic_permission+0x1ec/0x590 [ 72.754911][ T1210] __lookup_slow+0x150/0x420 [ 72.754935][ T1210] ? __d_lookup+0x4e8/0x550 [ 72.754970][ T1210] ? lookup_one_len+0x300/0x300 [ 72.754995][ T1210] ? lookup_one_common+0x320/0x470 [ 72.755022][ T1210] lookup_one_len+0x1a1/0x300 [ 72.755047][ T1210] ? __cfi_lookup_one_len+0x10/0x10 [ 72.755073][ T1210] ? down_write+0xee/0x2b0 [ 72.755106][ T1210] ? __cfi_down_write+0x10/0x10 [ 72.755137][ T1210] binderfs_create_dentry+0x27/0x90 [ 72.755177][ T1210] rust_binderfs_create_file+0x65/0x360 [ 72.755214][ T1210] rust_binderfs_create_proc_file+0x12a/0x1a0 [ 72.755246][ T1210] ? __cfi_rust_binderfs_create_proc_file+0x10/0x10 [ 72.755276][ T1210] ? mutex_unlock+0x90/0x240 [ 72.755307][ T1210] ? _RNvMs0_NtNtCsbuTvttuFvbr_6kernel5alloc4kvecINtB5_3VecINtNtNtB9_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7context7ContextENtNtB7_9allocator8KVmallocE7reserveB1g_+0x130/0x3f0 [ 72.755368][ T1210] _RNvCswPamI0U300_11rust_binder16rust_binder_open+0x12ae/0x1d00 [ 72.755410][ T1210] ? __cfi__RNvCswPamI0U300_11rust_binder16rust_binder_open+0x10/0x10 [ 72.755452][ T1210] ? bpf_lsm_file_open+0xd/0x20 [ 72.755477][ T1210] ? __cfi__RNvCswPamI0U300_11rust_binder16rust_binder_open+0x10/0x10 [ 72.755517][ T1210] do_dentry_open+0x97c/0x1510 [ 72.755546][ T1210] vfs_open+0x86/0x240 [ 72.755572][ T1210] ? __cfi_vfs_open+0x10/0x10 [ 72.755599][ T1210] ? may_open+0x352/0x430 [ 72.755625][ T1210] path_openat+0x2c49/0x35a0 [ 72.755656][ T1210] ? rb_commit+0x753/0x7b0 [ 72.755690][ T1210] ? do_filp_open+0x440/0x440 [ 72.755717][ T1210] do_filp_open+0x1f2/0x440 [ 72.755743][ T1210] ? __cfi_do_filp_open+0x10/0x10 [ 72.755774][ T1210] ? alloc_fd+0x4c1/0x570 [ 72.755812][ T1210] do_sys_openat2+0x134/0x1d0 [ 72.755844][ T1210] ? do_sys_open+0x100/0x100 [ 72.755876][ T1210] __x64_sys_openat+0x13a/0x170 [ 72.755907][ T1210] x64_sys_call+0xe69/0x2ee0 [ 72.755933][ T1210] do_syscall_64+0x57/0xf0 [ 72.755960][ T1210] ? clear_bhb_loop+0x50/0xa0 [ 72.755995][ T1210] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.756028][ T1210] RIP: 0033:0x7f830239f559 [ 72.756051][ T1210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.756074][ T1210] RSP: 002b:00007f8303330028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 72.756106][ T1210] RAX: ffffffffffffffda RBX: 00007f8302625fa0 RCX: 00007f830239f559 [ 72.756127][ T1210] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 72.756146][ T1210] RBP: 00007f8302436b20 R08: 0000000000000000 R09: 0000000000000000 [ 72.756175][ T1210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.756194][ T1210] R13: 00007f8302626038 R14: 00007f8302625fa0 R15: 00007ffd1037fe18 [ 72.756218][ T1210] [ 73.381489][ T1216] netlink: 'syz.1.262': attribute type 1 has an invalid length. [ 73.443565][ T312] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 73.580038][ T312] usb 3-1: device descriptor read/64, error -71 [ 73.842542][ T312] usb 3-1: device descriptor read/64, error -71 [ 74.042040][ T311] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 74.094569][ T312] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 74.201696][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.213053][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.224367][ T311] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 74.233616][ T311] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 74.244594][ T312] usb 3-1: device descriptor read/64, error -71 [ 74.254467][ T311] usb 2-1: Manufacturer: syz [ 74.268616][ T311] usb 2-1: config 0 descriptor?? [ 74.517474][ T312] usb 3-1: device descriptor read/64, error -71 [ 74.650822][ T312] usb usb3-port1: attempt power cycle [ 75.025418][ T312] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 75.048104][ T312] usb 3-1: device descriptor read/8, error -71 [ 75.137762][ T311] input: syz Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input7 [ 75.150877][ T311] input: syz Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input8 [ 75.174443][ T311] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input9 [ 75.188145][ T312] usb 3-1: device descriptor read/8, error -71 [ 75.199109][ T311] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input10 [ 75.217570][ T311] uclogic 0003:256C:006D.000A: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 75.360633][ T311] usb 2-1: USB disconnect, device number 26 [ 75.450141][ T312] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 75.472822][ T312] usb 3-1: device descriptor read/8, error -71 [ 75.621803][ T312] usb 3-1: device descriptor read/8, error -71 [ 75.737821][ T312] usb usb3-port1: unable to enumerate USB device [ 76.429122][ T1231] netlink: 'syz.2.267': attribute type 28 has an invalid length. [ 76.717737][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 76.717759][ T36] audit: type=1400 audit(1809884188.415:323): avc: denied { ioctl } for pid=1236 comm="syz.2.269" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 77.008124][ T36] audit: type=1400 audit(1809884188.696:324): avc: denied { unmount } for pid=1242 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1                                                              [ 78.458876][ T36] audit: type=1400 audit(1809884190.020:330): avc: denied { open } for pid=1278 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 78.519451][ T36] audit: type=1400 audit(1809884190.020:331): avc: denied { lock } for pid=1278 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 syzkaller syzkaller login: [ 78.564567][ T36] audit: type=1400 audit(1809884190.141:332): avc: denied { setopt } for pid=1284 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 78.689521][ T1288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.285'. [ 79.283444][ T1304] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 81.827914][ T373] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 81.930202][ T1371] overlayfs: failed to resolve './bus': -2 [ 82.000831][ T373] usb 2-1: Using ep0 maxpacket: 8 [ 82.009446][ T373] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 82.019312][ T373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.032868][ T373] usb 2-1: Product: syz [ 82.040784][ T373] usb 2-1: Manufacturer: syz [ 82.051721][ T373] usb 2-1: SerialNumber: syz [ 82.284900][ T1385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.308925][ T1385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.377152][ T373] usb 2-1: unit 0 not found! [ 82.395951][ T373] usb 2-1: USB disconnect, device number 27 [ 82.472630][ T418] udevd[418]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.400399][ T1400] overlayfs: failed to clone lowerpath [ 83.417439][ T46] bridge_slave_1: left allmulticast mode [ 83.428730][ T46] bridge_slave_1: left promiscuous mode [ 83.434436][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.482252][ T46] bridge_slave_0: left allmulticast mode [ 83.487971][ T46] bridge_slave_0: left promiscuous mode [ 83.502449][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.713033][ T46] veth1_macvtap: left promiscuous mode [ 83.718733][ T46] veth0_vlan: left promiscuous mode [ 83.849490][ T1414] rust_binder: validate_parent_fixup: fixup_min_offset=16, parent_offset=8 [ 83.858155][ T1414] rust_binder: 1413:1414 error while translating object: EINVAL [ 83.901836][ T1414] rust_binder: 1413:1414 transaction call to 1413:0 failed EINVAL, code 0 size 112-24 line thread.rs:955 [ 83.942725][ T373] rust_binder: 1413: undelivered TRANSACTION_ERROR: 29201 [ 84.060383][ T1407] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.078850][ T1407] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.086086][ T1407] bridge_slave_0: entered allmulticast mode [ 84.120174][ T1407] bridge_slave_0: entered promiscuous mode [ 84.140129][ T1407] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.162733][ T1407] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.179532][ T1407] bridge_slave_1: entered allmulticast mode [ 84.186450][ T1407] bridge_slave_1: entered promiscuous mode [ 84.259590][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 84.259611][ T36] audit: type=1400 audit(1809884195.414:346): avc: denied { mounton } for pid=1425 comm="syz.2.331" path="/92/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 84.310680][ T1407] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.317869][ T1407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.325295][ T1407] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.332368][ T1407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.394497][ T1426] netlink: 256 bytes leftover after parsing attributes in process `syz.2.331'. [ 84.436702][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.449069][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.481026][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.488181][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.507216][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.514381][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.584433][ T1407] veth0_vlan: entered promiscuous mode [ 84.634176][ T1407] veth1_macvtap: entered promiscuous mode [ 84.671166][ T372] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 84.707879][ T36] audit: type=1400 audit(1809884195.830:347): avc: denied { mount } for pid=1407 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.849728][ T372] usb 2-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 84.887542][ T372] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 84.909145][ T372] usb 2-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 84.964040][ T372] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.973149][ T372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 84.995276][ T372] usb 2-1: SerialNumber: syz [ 85.061139][ T312] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 85.233931][ T312] usb 6-1: device descriptor read/64, error -71 [ 85.344878][ T372] usb 2-1: bad CDC descriptors [ 85.351207][ T372] usb 2-1: USB disconnect, device number 28 [ 85.504578][ T312] usb 6-1: device descriptor read/64, error -71 [ 85.787478][ T312] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 85.808084][ T1462] overlayfs: failed to resolve './bus': -2 [ 85.949027][ T312] usb 6-1: device descriptor read/64, error -71 [ 86.132557][ T1476] netlink: 68 bytes leftover after parsing attributes in process `syz.1.348'. [ 86.218854][ T312] usb 6-1: device descriptor read/64, error -71 [ 86.352502][ T312] usb usb6-port1: attempt power cycle [ 86.471433][ T1506] netlink: 'syz.2.350': attribute type 4 has an invalid length. [ 86.491890][ T1506] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.350'. [ 86.524569][ T1506] netlink: 'syz.2.350': attribute type 4 has an invalid length. [ 86.543682][ T372] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 86.546289][ T1506] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.350'. [ 86.572696][ T1506] netlink: 'syz.2.350': attribute type 4 has an invalid length. [ 86.590197][ T1506] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.350'. [ 86.611811][ T1506] netlink: 'syz.2.350': attribute type 4 has an invalid length. [ 86.628588][ T1506] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.350'. [ 86.647942][ T1506] netlink: 'syz.2.350': attribute type 4 has an invalid length. [ 86.666112][ T1506] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.350'. [ 86.685988][ T1506] netlink: 'syz.2.350': attribute type 4 has an invalid length. [ 86.703494][ T1506] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.350'. [ 86.718507][ T372] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 86.724995][ T1506] netlink: 'syz.2.350': attribute type 4 has an invalid length. [ 86.729454][ T372] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 86.738744][ T312] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 86.757511][ T372] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 86.767807][ T1506] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.350'. [ 86.769289][ T372] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 86.782447][ T312] usb 6-1: device descriptor read/8, error -71 [ 86.798881][ T372] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 86.806094][ T1506] netlink: 'syz.2.350': attribute type 4 has an invalid length. [ 86.814354][ T372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.826139][ T1506] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.350'. [ 86.837028][ T1504] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 86.844274][ T1504] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 86.847495][ T1506] netlink: 'syz.2.350': attribute type 4 has an invalid length. [ 86.857103][ T372] pl2303 2-1:1.0: pl2303 converter detected [ 86.870696][ T372] usb 2-1: pl2303 converter now attached to ttyUSB0 [ 86.899173][ T1506] netlink: 'syz.2.350': attribute type 4 has an invalid length. [ 86.945870][ T312] usb 6-1: device descriptor read/8, error -71 [ 86.987263][ T36] audit: type=1400 audit(1809884197.937:348): avc: denied { sqpoll } for pid=1512 comm="syz.2.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 87.204165][ T312] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 87.215172][ T1504] pl2303 2-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 87.227027][ T1504] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 87.237939][ T312] usb 6-1: device descriptor read/8, error -71 [ 87.244793][ T1504] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 87.249285][ T1504] pl2303 2-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 87.272311][ T1504] pl2303 ttyUSB0: failed to submit interrupt urb: -90 [ 87.400440][ T312] usb 6-1: device descriptor read/8, error -71 [ 87.529267][ T312] usb usb6-port1: unable to enumerate USB device [ 87.655692][ T1525] overlayfs: failed to resolve './bus': -2 [ 88.592486][ T736] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 88.649423][ T36] audit: type=1400 audit(1809884199.469:349): avc: denied { write } for pid=1540 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.669392][ T1542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=1542 comm=syz.2.357 [ 88.670814][ T45] usb 2-1: USB disconnect, device number 29 [ 88.714934][ T45] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 88.732447][ T45] pl2303 2-1:1.0: device disconnected [ 88.775965][ T736] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.789614][ T736] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.814130][ T736] usb 6-1: config 0 interface 0 has no altsetting 0 [ 88.821886][ T736] usb 6-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 88.846222][ T736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.864006][ T736] usb 6-1: config 0 descriptor?? [ 89.314862][ T736] usbhid 6-1:0.0: can't add hid device: -71 [ 89.332177][ T736] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 89.356073][ T736] usb 6-1: USB disconnect, device number 6 [ 89.499607][ T36] audit: type=1400 audit(1809884200.254:350): avc: denied { bind } for pid=1548 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.562575][ T36] audit: type=1400 audit(1809884200.310:351): avc: denied { listen } for pid=1548 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.139469][ T736] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 90.312747][ T736] usb 6-1: Using ep0 maxpacket: 16 [ 90.319280][ T736] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.331068][ T736] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.341033][ T736] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 90.354231][ T736] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 90.363375][ T736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.372440][ T736] usb 6-1: config 0 descriptor?? [ 90.817586][ T736] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 90.827396][ T736] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 90.834747][ T736] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 90.842103][ T736] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 90.849488][ T736] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 90.856858][ T736] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 90.864123][ T736] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 90.871608][ T736] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 90.878966][ T736] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 90.886192][ T736] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 90.893613][ T736] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 90.900899][ T736] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 90.908157][ T736] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 90.915520][ T736] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 90.922797][ T736] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 90.930024][ T736] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 90.948510][ T736] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000B/input/input12 [ 90.962963][ T736] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 91.036590][ T1560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.047269][ T1560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.602072][ T736] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 91.766147][ T736] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.777259][ T736] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.787150][ T736] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 91.796286][ T736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.909276][ T1579] __nla_validate_parse: 58 callbacks suppressed [ 91.909319][ T1579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.370'. [ 91.926155][ T36] audit: type=1400 audit(1809884202.497:352): avc: denied { map } for pid=1578 comm="syz.0.370" path="/71/dev/sda" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 92.038163][ T1584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1584 comm=syz.2.371 [ 92.245553][ T1575] netlink: 68 bytes leftover after parsing attributes in process `syz.1.368'. [ 92.267034][ T36] audit: type=1400 audit(1809884202.811:353): avc: denied { create } for pid=1574 comm="syz.1.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 92.297051][ T736] hid-picolcd 0003:04D8:C002.000C: unknown main item tag 0x0 [ 92.304631][ T372] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 92.323530][ T736] hid-picolcd 0003:04D8:C002.000C: unknown main item tag 0x0 [ 92.344888][ T736] hid-picolcd 0003:04D8:C002.000C: unknown main item tag 0x0 [ 92.359141][ T736] hid-picolcd 0003:04D8:C002.000C: unknown main item tag 0x0 [ 92.445159][ T736] input: HID 04d8:c002 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:04D8:C002.000C/input/input13 [ 92.483079][ T736] hid-picolcd 0003:04D8:C002.000C: No report with id 0x94 found [ 92.498299][ T736] hid-picolcd 0003:04D8:C002.000C: failed to configure display [ 92.508888][ T1575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.533933][ T1575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.185116][ T373] usb 6-1: USB disconnect, device number 7 [ 94.049799][ T36] audit: type=1400 audit(1809884204.454:354): avc: denied { setopt } for pid=1653 comm="syz.0.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.158614][ T36] audit: type=1400 audit(1809884204.555:355): avc: denied { map } for pid=1658 comm="syz.0.392" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 94.222801][ T1660] overlayfs: failed to resolve './bus': -2 [ 94.533723][ T1682] netlink: 5 bytes leftover after parsing attributes in process `syz.0.398'. [ 94.618392][ T736] usb 2-1: USB disconnect, device number 30 [ 94.653657][ T36] audit: type=1400 audit(1809884205.016:356): avc: denied { map } for pid=1683 comm="syz.0.399" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.703226][ T1687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'. [ 94.755395][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 94.899396][ T1693] overlayfs: failed to clone lowerpath [ 94.920010][ T9] usb 6-1: device descriptor read/64, error -71 [ 95.188749][ T9] usb 6-1: device descriptor read/64, error -71 [ 95.254453][ T36] audit: type=1400 audit(1809884205.570:357): avc: denied { getopt } for pid=1705 comm="syz.1.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.494381][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 95.593207][ T1709] fuse: Bad value for 'fd' [ 95.597823][ T36] audit: type=1400 audit(1809884205.884:358): avc: denied { mounton } for pid=1708 comm="syz.2.407" path="/118/file0" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.654773][ T9] usb 6-1: device descriptor read/64, error -71 [ 95.705510][ T1711] FAULT_INJECTION: forcing a failure. [ 95.705510][ T1711] name failslab, interval 1, probability 0, space 0, times 0 [ 95.757210][ T1711] CPU: 1 UID: 0 PID: 1711 Comm: syz.0.408 Not tainted syzkaller #0 b337f5a91fe3fd607f319abe4015f181b3f4c6c0 [ 95.757253][ T1711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 95.757271][ T1711] Call Trace: [ 95.757282][ T1711] [ 95.757294][ T1711] __dump_stack+0x21/0x30 [ 95.757336][ T1711] dump_stack_lvl+0x140/0x1c0 [ 95.757374][ T1711] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.757412][ T1711] ? __rb_reserve_next+0x794/0xd90 [ 95.757440][ T1711] dump_stack+0x19/0x20 [ 95.757476][ T1711] should_fail_ex+0x3c2/0x510 [ 95.757502][ T1711] ? __se_sys_futex_waitv+0x20d/0x720 [ 95.757530][ T1711] should_failslab+0xac/0x100 [ 95.757556][ T1711] __kmalloc_noprof+0x69/0x510 [ 95.757591][ T1711] ? rb_commit+0x753/0x7b0 [ 95.757624][ T1711] ? __se_sys_futex_waitv+0x20d/0x720 [ 95.757662][ T1711] __se_sys_futex_waitv+0x20d/0x720 [ 95.757690][ T1711] ? __x64_sys_futex_waitv+0xf0/0xf0 [ 95.757718][ T1711] ? trace_buffer_unlock_commit_regs+0x14a/0x600 [ 95.757755][ T1711] ? trace_event_buffer_commit+0x256/0x8f0 [ 95.757792][ T1711] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 95.757823][ T1711] __x64_sys_futex_waitv+0xc3/0xf0 [ 95.757851][ T1711] x64_sys_call+0x2dc4/0x2ee0 [ 95.757877][ T1711] do_syscall_64+0x57/0xf0 [ 95.757903][ T1711] ? clear_bhb_loop+0x50/0xa0 [ 95.757938][ T1711] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.757970][ T1711] RIP: 0033:0x7fd6f7b9f559 [ 95.757993][ T1711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.758015][ T1711] RSP: 002b:00007fd6f8987028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 95.758046][ T1711] RAX: ffffffffffffffda RBX: 00007fd6f7e25fa0 RCX: 00007fd6f7b9f559 [ 95.758067][ T1711] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000200000000640 [ 95.758085][ T1711] RBP: 00007fd6f7c36b20 R08: 0000000000000001 R09: 0000000000000000 [ 95.758103][ T1711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.758123][ T1711] R13: 00007fd6f7e26038 R14: 00007fd6f7e25fa0 R15: 00007ffebd6669d8 [ 95.758146][ T1711] [ 96.001528][ T9] usb 6-1: device descriptor read/64, error -71 [ 96.133433][ T9] usb usb6-port1: attempt power cycle [ 96.521730][ T9] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 96.588358][ T9] usb 6-1: device descriptor read/8, error -71 [ 96.750773][ T9] usb 6-1: device descriptor read/8, error -71 [ 96.944346][ T736] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 97.009360][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 97.032618][ T9] usb 6-1: device descriptor read/8, error -71 [ 97.141527][ T1731] overlayfs: failed to resolve './cgroup': -2 [ 97.146709][ T736] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 97.159126][ T736] usb 2-1: config 1 interface 0 has no altsetting 0 [ 97.177715][ T9] usb 6-1: device descriptor read/8, error -71 [ 97.185369][ T736] usb 2-1: string descriptor 0 read error: -22 [ 97.191926][ T736] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.40 [ 97.201135][ T736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.216766][ T1724] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 97.313146][ T9] usb usb6-port1: unable to enumerate USB device [ 97.681205][ T1724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.692326][ T1724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.706019][ T736] aureal 0003:0755:2626.000D: unknown main item tag 0xe [ 97.713393][ T736] aureal 0003:0755:2626.000D: unexpected long global item [ 97.720963][ T736] aureal 0003:0755:2626.000D: probe with driver aureal failed with error -22 [ 97.894200][ T1738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.418'. [ 97.931308][ T736] usb 2-1: USB disconnect, device number 31 [ 98.260813][ T1754] fuse: Bad value for 'fd' [ 98.531244][ T1756] mmap: syz.2.425 (1756) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.552226][ T1756] validate_nla: 55 callbacks suppressed [ 98.552253][ T1756] netlink: 'syz.2.425': attribute type 27 has an invalid length. [ 98.577911][ T1756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'. [ 98.611623][ T36] audit: type=1400 audit(1809884208.661:359): avc: denied { create } for pid=1760 comm="syz.5.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 98.700514][ T36] audit: type=1400 audit(1809884208.754:360): avc: denied { write } for pid=1774 comm="syz.5.431" name="/" dev="incremental-fs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.723764][ T36] audit: type=1400 audit(1809884208.754:361): avc: denied { add_name } for pid=1774 comm="syz.5.431" name="file1" dev="incremental-fs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.747872][ T36] audit: type=1400 audit(1809884208.754:362): avc: denied { link } for pid=1774 comm="syz.5.431" name="file1" dev="incremental-fs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.809478][ T1407] ------------[ cut here ]------------ [ 98.815186][ T1407] WARNING: CPU: 1 PID: 1407 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 98.817157][ T36] audit: type=1400 audit(1809884208.855:363): avc: denied { create } for pid=1780 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 98.826697][ T1407] Modules linked in: [ 98.848904][ T1779] fuse: Unknown parameter 'rootmde' [ 98.849269][ T1407] CPU: 1 UID: 0 PID: 1407 Comm: syz-executor Not tainted syzkaller #0 b337f5a91fe3fd607f319abe4015f181b3f4c6c0 [ 98.866560][ T1407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 98.876786][ T1407] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 98.882514][ T1407] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 9e 55 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0c d3 5f 03 cc e8 f6 c4 3d ff <0f> 0b e9 3e ff ff ff e8 ea c4 3d ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 98.902241][ T1407] RSP: 0018:ffffc9000fa5fb88 EFLAGS: 00010293 [ 98.908512][ T1407] RAX: ffffffff824b90da RBX: 0000000000000000 RCX: ffff888120bf3b40 [ 98.916539][ T1407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.924635][ T1407] RBP: ffffc9000fa5fbb0 R08: ffff88813882737f R09: 1ffff11027104e6f [ 98.932748][ T1407] R10: dffffc0000000000 R11: ffffed1027104e70 R12: 0000000000000000 [ 98.940815][ T1407] R13: dffffc0000000000 R14: ffff8881388272e0 R15: ffff888137bc2dd0 [ 98.948855][ T1407] FS: 0000555573491500(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 98.957932][ T1407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.964616][ T1407] CR2: 00005555734bc998 CR3: 0000000114c1e000 CR4: 00000000003526b0 [ 98.972746][ T1407] Call Trace: [ 98.976051][ T1407] [ 98.979017][ T1407] ovl_do_remove+0x824/0xd10 [ 98.983747][ T1407] ? ovl_set_redirect+0x780/0x780 [ 98.988812][ T1407] ? __cfi_down_write+0x10/0x10 [ 98.994008][ T1407] ovl_rmdir+0x1e/0x30 [ 98.998228][ T1407] vfs_rmdir+0x3de/0x560 [ 99.002512][ T1407] incfs_kill_sb+0x102/0x220 [ 99.007248][ T1407] deactivate_locked_super+0xd5/0x270 [ 99.012672][ T1407] deactivate_super+0xb8/0xe0 [ 99.017451][ T1407] cleanup_mnt+0x438/0x4d0 [ 99.021895][ T1407] __cleanup_mnt+0x1d/0x40 [ 99.026456][ T1407] task_work_run+0x1e8/0x260 [ 99.031099][ T1407] ? __cfi_task_work_run+0x10/0x10 [ 99.036419][ T1407] resume_user_mode_work+0x35/0x50 [ 99.041679][ T1407] syscall_exit_to_user_mode+0x63/0xb0 [ 99.047297][ T1407] do_syscall_64+0x63/0xf0 [ 99.051761][ T1407] ? clear_bhb_loop+0x50/0xa0 [ 99.056480][ T1407] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.062504][ T1407] RIP: 0033:0x7faca2da0797 [ 99.066974][ T1407] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 99.086801][ T1407] RSP: 002b:00007ffd4dd1d2a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 99.095318][ T1407] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007faca2da0797 [ 99.103428][ T1407] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4dd1d360 [ 99.111465][ T1407] RBP: 00007ffd4dd1d360 R08: 00007ffd4dd1e360 R09: 00000000ffffffff [ 99.119538][ T1407] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4dd1e3f0 [ 99.127625][ T1407] R13: 00007faca2e35f63 R14: 00000000000179f7 R15: 00007ffd4dd1e430 [ 99.135700][ T1407] [ 99.138792][ T1407] ---[ end trace 0000000000000000 ]--- [ 99.147198][ T1407] ------------[ cut here ]------------ [ 99.152744][ T1407] WARNING: CPU: 1 PID: 1407 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 99.162271][ T1407] Modules linked in: [ 99.166266][ T1407] CPU: 1 UID: 0 PID: 1407 Comm: syz-executor Tainted: G W syzkaller #0 b337f5a91fe3fd607f319abe4015f181b3f4c6c0 [ 99.179625][ T1407] Tainted: [W]=WARN [ 99.183476][ T1407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 99.193637][ T1407] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 99.199444][ T1407] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 9e 55 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0c d3 5f 03 cc e8 f6 c4 3d ff <0f> 0b e9 3e ff ff ff e8 ea c4 3d ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 99.219245][ T1407] RSP: 0018:ffffc9000fa5fb88 EFLAGS: 00010293 [ 99.225469][ T1407] RAX: ffffffff824b90da RBX: 0000000000000000 RCX: ffff888120bf3b40 [ 99.233546][ T1407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.241576][ T1407] RBP: ffffc9000fa5fbb0 R08: ffff88813882737f R09: 1ffff11027104e6f [ 99.249792][ T1407] R10: dffffc0000000000 R11: ffffed1027104e70 R12: 0000000000000000 [ 99.257869][ T1407] R13: dffffc0000000000 R14: ffff8881388272e0 R15: ffff888137bc2dd0 [ 99.265977][ T1407] FS: 0000555573491500(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 99.275007][ T1407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.281658][ T1407] CR2: 00005555734bc998 CR3: 0000000114c1e000 CR4: 00000000003526b0 [ 99.289758][ T1407] Call Trace: [ 99.293076][ T1407] [ 99.296093][ T1407] ovl_do_remove+0x824/0xd10 [ 99.300748][ T1407] ? ovl_set_redirect+0x780/0x780 [ 99.305938][ T1407] ? __cfi_down_write+0x10/0x10 [ 99.310963][ T1407] ovl_rmdir+0x1e/0x30 [ 99.315089][ T1407] vfs_rmdir+0x3de/0x560 [ 99.319478][ T1407] incfs_kill_sb+0x197/0x220 [ 99.324121][ T1407] deactivate_locked_super+0xd5/0x270 [ 99.329594][ T1407] deactivate_super+0xb8/0xe0 [ 99.334323][ T1407] cleanup_mnt+0x438/0x4d0 [ 99.338803][ T1407] __cleanup_mnt+0x1d/0x40 [ 99.343337][ T1407] task_work_run+0x1e8/0x260 [ 99.347988][ T1407] ? __cfi_task_work_run+0x10/0x10 [ 99.353203][ T1407] resume_user_mode_work+0x35/0x50 [ 99.358365][ T1407] syscall_exit_to_user_mode+0x63/0xb0 [ 99.363932][ T1407] do_syscall_64+0x63/0xf0 [ 99.368417][ T1407] ? clear_bhb_loop+0x50/0xa0 [ 99.373192][ T1407] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.379149][ T1407] RIP: 0033:0x7faca2da0797 [ 99.383653][ T1407] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 99.403368][ T1407] RSP: 002b:00007ffd4dd1d2a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 99.412032][ T1407] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007faca2da0797 [ 99.420120][ T1407] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd4dd1d360 [ 99.428210][ T1407] RBP: 00007ffd4dd1d360 R08: 00007ffd4dd1e360 R09: 00000000ffffffff [ 99.436240][ T1407] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4dd1e3f0 [ 99.444387][ T1407] R13: 00007faca2e35f63 R14: 00000000000179f7 R15: 00007ffd4dd1e430 [ 99.452471][ T1407] [ 99.455525][ T1407] ---[ end trace 0000000000000000 ]--- [ 99.481932][ T36] audit: type=1400 audit(1809884209.473:364): avc: denied { setattr } for pid=1788 comm="syz.5.433" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1