last executing test programs: 1m45.654527693s ago: executing program 1 (id=46): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @initdev}, &(0x7f0000000040)=0xc) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x1f, "97597dc9d0730193f7ac07c03e25e8b4a98c646c0e2aab875202cb2b7ff728"}, &(0x7f0000000180)=0x43) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000002c0)={r0, &(0x7f00000001c0)='&$:!)[^^\x00', 0x0, &(0x7f0000000200)={@align=0xffffffff, {0x4, 0x3, 0xf, 0x7fff}}, 0x3, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x101}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x3, 0x4, 0xffff1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000340)='wg0\x00', 0x4) io_submit(0x0, 0x5, &(0x7f0000002640)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x7, r1, &(0x7f0000000380)="577647adc436daf71c53e106a6", 0xd, 0x80000000, 0x0, 0x2, r1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000400)="01926e8fcd269c9fe6cb6214462457ac57282ebc2f711f488478dfdd1164e56fd2c94ad4eb66646bc18dd95558ac2dacfea02e29471091ee9308071f1b7e558e40647c43d7952d65a85d2eafae16890145f0d263308bbcc24b8f31748464cf4512e5af0618c66a28d65cb4937a203deaf81fa355010ca88dee3489692175e922cbb5171a4a0807e0ca45868651521993cbe2e2c50f1bff38bfa893a7d637ddbd8dd72787b48f779329a4798797d870dafddaf1998463a14bbb1a7adce9d7195b01976a", 0xc3, 0x2, 0x0, 0x2, r1}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x8, 0x8000, r1, &(0x7f0000000540)="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", 0x1000, 0x0, 0x0, 0x2, r0}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x4, 0x4, r0, &(0x7f0000001580)="c4", 0x1, 0x800, 0x0, 0x3, r1}, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x8, 0x6, r1, &(0x7f0000001600)="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", 0x1000, 0x4, 0x0, 0x3}]) ioctl$KVM_CAP_VM_TYPES(r1, 0x4068aea3, &(0x7f0000002680)) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000002700)=0xffffffffffffffff, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000002740)=0x2) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000002800)=[@text64={0x40, &(0x7f0000002780)="f267f2f2460f20410f20d835080000000f22d8b9ee020000b8987c0000ba000000000f30c462513a7bfdb9800000c00f3235010000000f30c7442400fcffffffc744240265990000c7442406000000000f011c24c7442400e8000000c7442402bd2f0000ff2c2436260f01c80f01f844700b", 0x72}], 0x1, 0x40, &(0x7f0000002840), 0x0) ioctl$KVM_TDX_FINALIZE_VM(r1, 0xc008aeba, &(0x7f0000002880)) read$FUSE(r1, &(0x7f00000028c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f0000004900)={0x0, 0x5, 0x4, @tid=r2}, &(0x7f0000004940)) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000004980)) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000049c0), &(0x7f0000004a00)=0x8) fcntl$addseals(r1, 0x409, 0x5) write$P9_RXATTRWALK(r1, &(0x7f0000004a40)={0xf, 0x1f, 0x2, 0x5}, 0xf) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000004a80)) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000004ac0)={0x2f, @local, 0x4e21, 0x2, 'lc\x00', 0x0, 0xfffffffd, 0x4d}, 0x2c) connect$inet6(r1, &(0x7f0000004b00)={0xa, 0x4e21, 0xe5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000004b40)={0xffff, 0x10}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000004b80)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x2, 0x2, 0x1, 0x1, 0xf, 0x7ff}, {0x6, 0x72b, 0x6, 0x4, 0x4, 0xff}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000004dc0)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000004ec0)=0xe8) sendmsg$nl_generic(r3, &(0x7f0000005000)={&(0x7f0000004d80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004fc0)={&(0x7f0000004f00)={0xc0, 0x42, 0x400, 0x70bd26, 0x25dfdbfb, {0x11}, [@generic="7773764217e4fbfd2e693c36402ee3fc7ef5b888d48adf2518c612c10c3d32781123cdf586b369da3363e03649f961a1ce417d65aff7955d4079b043f7603a9dc4e41eaa0086992b0206a933c1e2fce107e7df26f8bdbc433314904bb4a91a6e9666a8214314eb249e8a7297e9774de3f98d59359de165a33769c3747d4dac0c419e58226cf71a4636f646db1f59322d547eff28284d206c59", @typed={0x8, 0x61, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x107, 0x0, 0x0, @pid=r2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20008005}, 0x2404c005) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = openat(r1, &(0x7f0000005040)='./file0\x00', 0x41c101, 0x8) r6 = syz_open_dev$usbfs(&(0x7f0000005080), 0x40, 0x400) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000005140)={0x0, 0x1, r6, 0x2, 0x80000}) 1m45.598620424s ago: executing program 1 (id=47): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r0, &(0x7f0000000440), 0x0) 1m45.598211424s ago: executing program 1 (id=48): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) fcntl$setstatus(r2, 0x4, 0x4400) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ppoll(&(0x7f0000000380)=[{r4, 0x230}, {r4, 0x800}, {}], 0x3, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x1, 0x200000c, 0x50, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000003480)={0x0, 0x0}) recvmmsg$unix(r5, &(0x7f0000003380)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000002700)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/94, 0x5e}, {&(0x7f0000002540)=""/119, 0x77}, {&(0x7f00000025c0)=""/21, 0x15}, {&(0x7f0000002600)=""/125, 0x7d}, {&(0x7f0000002680)=""/78, 0x4e}], 0x6, &(0x7f0000002780)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000002880)=@abs, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002900)=""/89, 0x59}, {&(0x7f0000002980)=""/252, 0xfc}, {&(0x7f0000002a80)=""/197, 0xc5}, {&(0x7f0000002b80)=""/85, 0x55}, {&(0x7f0000002c00)=""/21, 0x15}, {&(0x7f0000002c40)=""/246, 0xf6}, {&(0x7f0000002d40)=""/47, 0x2f}], 0x7, &(0x7f0000002e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002e80), 0x6e, &(0x7f0000003080)=[{&(0x7f0000002f00)=""/91, 0x5b}, {&(0x7f0000002f80)=""/199, 0xc7}], 0x2, &(0x7f00000030c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000003140), 0x6e, &(0x7f00000032c0)=[{&(0x7f00000031c0)=""/224, 0xe0}], 0x1, &(0x7f0000003300)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}], 0x4, 0x10000, &(0x7f00000034c0)={r6, r7+60000000}) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x2f, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x80, 0x0, @in6={0xa, 0x4f24, 0x4, @loopback, 0x2}}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x4e23, @multicast2}}, @sadb_key={0x21, 0x8, 0x800, 0x0, "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"}]}, 0x178}, 0x1, 0x7}, 0x4) 1m44.69450925s ago: executing program 1 (id=51): setns(0xc9, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x10f00) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x195) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'ip6_vti0\x00', 0x2000}) ioctl$TUNSETPERSIST(r3, 0x400454cc, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r6 = syz_io_uring_setup(0x20ff, &(0x7f00000001c0)={0x0, 0x3dc, 0x2000, 0xffffffff, 0x2000cd, 0x0, r5}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) (async) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000002680)="adf45fd3", 0x4) (async) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000002680)="adf45fd3", 0x4) read$msr(r7, &(0x7f0000000580)=""/34, 0x22) (async) read$msr(r7, &(0x7f0000000580)=""/34, 0x22) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') (async) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x60, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002200000ffffffff00000000"}]}, 0x60}}, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x60, 0x12, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {}, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x14, 0x1, "0710100002200000ffffffff00000000"}]}, 0x60}}, 0x0) 1m44.668275455s ago: executing program 1 (id=53): r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x1d08, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x10000, 0x0, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0x0, 0x118000}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000300000/0x2000)=nil}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000040)={0x0, @aes128, 0x0, @desc2}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x30d700, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000169000/0x400000)=nil) r9 = syz_kvm_add_vcpu$x86(r8, &(0x7f0000000500)={0x0, 0x0}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r9, 0x4068aea3, &(0x7f0000000200)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x61b}]}) r10 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) iopl(0x3) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="650f340f3566b80d018ed00f00d8b805000000b9a00000590f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x30}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 1m44.604059577s ago: executing program 1 (id=54): r0 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='-\x00', 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000140)={@broadcast, @multicast2}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4c}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x24}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x54}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x521}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xd83}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xd}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6ab}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004040}, 0x48000) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x85) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r5 = add_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="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", 0x1000, r0) pipe2$watch_queue(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x15) sendmsg$AUDIT_USER(r6, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x68, 0x3ed, 0x200, 0x70bd2a, 0x25dfdbfb, "2e3c4639545c3ed5a7195b026393897fc26704fb460107250111df9a9d952cbf9255c6e3a5dee6d185aa8aee0384a5bfc379752a3bdc2472976283be5f20a15c4840b02c49c2d145af70e7b85c72b1bccb47d89efc67ab2e", ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x48004}, 0x8000) r7 = creat(&(0x7f0000001600)='./file0\x00', 0x84) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000001640)={{0x2, 0x4e22, @broadcast}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x2, {0x2, 0x4e24, @remote}, 'ip6_vti0\x00'}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000016c0)={r1, 0xda, 0x97}, &(0x7f0000001700)={'enc=', 'raw', ' hash=', {'sha256-mb\x00'}}, &(0x7f0000001780)="30c9f497a04741ed3de78b3e0291b2c5de548aa4bca95912a2cadd706219be73225f1dffdece7f49d368fe7d3268802c98fcd8aeb8233d437af19bc5b62caac8ae8dcb1350774b9d9f50d403cd83e3011a71b16d072f4110c4f734a5d6aafd4786bf313b39f3082975f545e4a9117eebc68178eb6385915b79ee1676082368c8c15ea177ca885b48bd472e35504e94a63ced125e25f2701ee354581794889897e25555665e96dd598f2e5f88fea15085fa6518df11303025472433329d9eb1029b99e40cc172ed1a903fce0f9428b6c37dd1a862019af950c3c6", &(0x7f0000001880)=""/151) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r7, 0x84) add_key(&(0x7f0000001940)='syzkaller\x00', &(0x7f0000001980)={'syz', 0x0}, &(0x7f00000019c0)="107ccdf52dbf497d000afabee0564843c43c9228dbafe48459ee2a58afefa548cbd6eb843d4cb10db216b0bf3ec7328c5049e837c5584c404437f9aa7ae0b37acd6a5b658fc0af61627b814d1e3ae105aa127e589a0c6f4201d4ca287bc9952f748a55b5eb0356d1e2da72facb40de9d7b2a6cd3b6455570f76918953ed21fb0b4329dd9ee9a4e962fd20a86fb514120097cc6cf5c4fe3493f14ebeb29d2fc7f682409984f04b5da02a2828b1c3ca219cfdc89d1b97d02", 0xb7, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000001a80), &(0x7f0000001ac0)={'syz', 0x0}, &(0x7f0000001b00)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffd) openat$kvm(0xffffffffffffff9c, &(0x7f0000001b80), 0x102c0, 0x0) flock(r6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001c00)={0x2, &(0x7f0000001bc0)=[{0x501, 0x7, 0xd9, 0x6}, {0x789, 0x2, 0xea, 0xc}]}) memfd_secret(0x80000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c80), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x30, r9, 0x10, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x7, 0xf7a, 0x0, 0x4}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20040800) getpid() sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}}, 0x48000) 1m44.537120781s ago: executing program 32 (id=54): r0 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='-\x00', 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000140)={@broadcast, @multicast2}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4c}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x24}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x54}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x521}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xd83}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xd}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6ab}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004040}, 0x48000) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x85) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r5 = add_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="19ececc1cbc0756f3b115e08ef63fd17674f606cd006100e5c9f1c720ca10f227a1ff59620a933ca930c3f30a84878620736b1cdae4853a72fdc950b59097e1fe97fae9617678b4da958a22b99e995d850724fbb96fa710e7c31e48c4ca7eec921f5b0882f87a9950dd5506e1e47ab2e8c74d0c01e4a1a2e56728d4ddbb95449aec9e0db432bbdde1cb93024115550926f4589e3640b413a73605cf59d43c2cc9b5e372398e35da0fafbc994cbfd400b200ae439f1d74cc2a30e1a0bcaa70edef0c6b63b2475800f6b4e055a64f15fa88d49759bf763ef000df9ab7a01df6ab72e36642f608a43b820acef4723ff06eaaae0885974d0a31159d3848d0d7b16a8e2b0fdc925aaf3aef2b3979852cc106ad4049342b7e9a5c59e4448cd15b8a051213d036f83ae49d83ba0703903a3f82e9646a317a0d740b8806ab1aeeb7964d256268c6b379bc61ce01bcc29d82c11f37bbc84df00f0c9496b3f6b7e6a12ffe62137edf197b3d7dcd15e1b767dd127229c61b650c2ee6a8665b69fb57a1cd8a01738e9d3d0e49075f81c122c4b368c557af6ffdbb0518d0e7ca71425c037221220714de33811a26298872d7a14a7acd1bf2f2ee4cec18bd02d5d4db5ca29f7d3c942cb1722aa60b1c2d2809f6007389e247ca21c522d3ffdb23956036927a4294de4fc55198261d461a752533a2d96cc207229dc5abb3a9dca762416d56befab249371f1889fea8d16ec557052ac4931f919a7658320ee15cbc686516148f5d2394f5edcdf0b46064bfc090f6469b445b9302d1b704356d6352456f0218191913238607290566cd730c90a31f6a1ecec02625f7ddad9108405f4ff91264f642be0677e50a0755f055bc9475ae2682a663682a4bdf7a8c1337cedd028188cf4a24192f8d6faf5b9fe93a5e648fef27edfd6c905981b248bbf528d286c36ca5675d5298c16423c9f36661ed3ad0f551073846f2ce4ddaa201f947d1479210271cec670b85e6c785799a57dcb6bfc765884489a02e9613cd8b7244f205b59b551e7680557e548100c5bb6e35e6859baba146ed6c761605abcd434bd9cf096fdfa322b5795c2c0b85c3499940af013167710b509cd63c9d4618d9b30f82018618b3af7af54cbdb03305963d021ea42c1f0831caeeb5640ce0b5400f7760aeecf20e37b1d5f8ea5b4fb7782246c7af0286c3b72ba91d4423467c6abb45618ac0d49cf9c002b8428cd8802379c8c525d36ba392f74aa353a463bfd49a4975d1382b94ba439f1286c4080fdd4ed27d3cb10bb8ae9e5a998ae3bae39684554d1c162c5d40563343d33e2406bdb1eb7009847bdd1325a098c060c860a75d19d3dc00e3c32ab7260c497b487f27daff3924a48240e307dc17b4dd6ffbd4f45334587d5166fbc326dd3cdf2b2d1d3367b6b92e50acbdd67e10837d51e8802cb081fa07bcdda86bbb9007303bd555c6238b09842ceb9615a3c64834c888992e64ad5190be940528120f00d2a8623601cd058275000afb69acca7f91a01e393bad48a12e7ea3e67190304d8a1a36dfc534ab138859b4155a5faba49df51c6eda73a41e6e0d390cfe3ac1a742dc17eb20025a9c4f63f42e94466aea516e353c9bdeeed9a5308f3888e508a40804c87f952b3fbc6c7c8737bd154626bc217b6212bde49555ca2edc349573aef1b13de0273764a72ae4ec73765e00e164466455fdbafdd50fd729e39b1aaa9026511e1d4bc2c7fa5eb7472b44f2f586c58e803e04dd80b1f3feb66a02853bc7106d59262358d313806b4ed38c2ca89f759b2045ffba3b135e95be0f5697d2344d60c84a7d5791875b1ee524ab2a097aa942251d271db59b30911942a1ab9a9dddbe52d075d52464b728f32da556a822ce6e1aa738077290e793868b50d8014b70676b8c6f2232d45cdfb59142f7a645f9576d82b9843e1ae32b7c799eb68ba72a614eb5af8974e585df189999c4775eed6bb5daeab213d0b4f3036f23e0f41b2d6704724eaa831af8bd725a173e591594cd54d7e705da2cae7aa4491db60fa16673a9adb8da5cf71c19814a8541e9a6f57e1be93598b2257bc7eebc862e908dc9e469ee2eb2d0d140a36a212e4e7e4ef3d635a856b1a40025f3719aca5789b99ed55bdf10721a31cdacad44b4ac102f71f403dd8b7074f93fddbba506dfffd6b38c48d2316fb3cf8f3ba8d3afef68330cae1815644133a26b1e39ac4ab76374c3286a001c50426a2d7184111eb950680dc9834723aa3da1c61e14c6447283874dfb8b4e1eeec0a0f194415cf9615b7ead68f7984cf11c3a812a78115ce2fee671cead23a6349db247cec1921d650ec06fa30a6d2a4cdb15a419d430aba8c559f75f91b797f03498e0bffe6d1bee6095cb4b90301f875bb1899c93e3ea578bd32fdbad1a0c9219527662900ea8b96a9da682d284116cf8baf445267f8546e92c730d594bfb8024f1896ff682f2e118f1fbff2105bd0d9c8611cfebf30636e27653cc55dad3967e007cbd2b3ea0108e35eb0a377e8cf507700bfc88d1ea385b01d0afe43b04e017afee2c5121f317c1641d27e2469d3f44b396b91f43fe4a8f9e941acb63e83c4b9269b2497eaf303e390343566eed9d123658d3eb96a65a7060c556ffb6a006cdbe0d04e1a0f2ed1209227e417af85a021f36af93a7f4dba5a8ef65a374ffee786749764f234b566da828a6dbc4416bcfde535111633db7f2dc7eb28370424eb1923e9747898753db93b80206c9cf1a912c2c674b4f452d39e10d26c7ff52525ba8814f3de6db909d752a8d5e56ae3aad0c8df2dc2eb52450850ef538821d96427e8a0ceec043fc95d68828e843fe0f50e9f49cdf1a73f70c4658f0616fa030188543841a03215f5c7743b8943cd0bdb32c8b20f638e4bfc1e4a984a7f058d9ec13999d371e13d3df408fec8919c3c7159367dcd8d75093958b58870601097e00856700da4d826c997374d9c312258c3c7185db4d03d628e9dd0e6f2266d107deefe2f628a032b689e264d9347b2714fffd8bc8b9f870e2c3c5856b5072eabc19814aef8333876d1eb247078b17c62380d385732289dabedb20c092a6e82483c5ed4fd772301c9e1ff0a60209b72a8fe077a0536d8c0c1adb299f334025b88fcb82b07dc434b0a0abd74a04bf14e07e8cecc309608ac9da771f33d7b1049b4bfcf4db4f94f983b3f4b038096252def8abe6986e4d8a7919469d3629e0703432a84199e2f9fb08d49cc781e93080f70be1a221d768045aad327c42e0d290defa10398f1b2faee24f4d68778c08c95d5194d068b01cbc550cf0424de92874a9f8c8af036e6fdbc87995818a798cc30e95f4225542f3e08464e2ed4fcaa4a6a8939ca92eb109fd24546ec4e745ddaf6be877dadc6bc802d88dc85a925904496b4ec4ee29ecfaad003246e0fd67b1eda22f7fb04a6a23718e16fba2cd027b634401b5ea85cef1c1ba18e7de7426f1948546ca2ec13b6e189a9d0ee547a5b8b9bdf83dfd8c91f450791e13fd97d0be487fba9f02324415c90066498b3cfd89aef368d5d663122cbbd12772afb61fac02605b1a5045fca2d2a186907372bb89a4a1908aea8defe7c4de44bd0e9f3cf3af9ac55ec4b8d5324f1832c5a9fe59e882d352a472e15fce4394f8226d09a13780db8c069e2c6b49e4d342d45c5da01e166fafd02eed578050b8fae3887b262d26840ad2bd3be288d3d2d4bfee81ebe93d03272b37b67f46154fd0ec26a5d40785646bb027da24e9feace64918598f362689480c01780379ebe6a7de48471b62c80070d22cbb02c44b4095cd9f77f378bb5bb2a4d6b124b7b5ee178a708c902490ff70834bc5d2d2c7eaa3e5f64d969dd29c5426ad14f9eba0cf148f73be8c10dfdebde5c9c6368a75434ce3a968e8539904994be9e1b587ad262f189092b8054fd2843c5b4985abf76aac5843426d07c08626486a37c83ccf60c17746758c62b42482182b3dfb7be3efb96e4c41ef62bc2f56580f427d19f2efb40a0faebd6ed901604f777c51ea881e1c076634baa5c2ccd870e1ddc164cda8c8030c65b002fd0f0b96688d2ad1f97a0f8819b25ba661592c4c6ca025dd81b87f9c41d7b27cd038f4d95d1f2e73a0c2725d3f177874e68f74954f32f9c3dc3dfa5eb094525883782e2874c184cfdef8e6fa1c217f900cb0c91fd59b1ade8cc4d627481904c687515fe50a29a5154c1ac104ca3b3146dd248c29a1fccfcff71c4978cd3c1b45f9cb043f0318ed0cb43e977f11ccb2c57c1e93ac0fa6b0e38aa79a3dd1011ad605b874498654153715b421c1e5a30e2b4951886ec22a3b575600528acc6a33f18d17505519a595d0c75c7fb6ceec2e4620ac628f94cd224be501f3b7062cf037d266be588a5368362a69294f46fd385c5231d736b289990dbbbf90bbcd75d0bd162de728c6de80940654393b85c7ef64a48d89e6145874ffb04e270e2756b5fb3136a7f0f541e264f5b47e198a9bc0455032dd67cabcdd6218a8f4ef56d04ef950628602c1aa7cde971f1246bc60b268b833484d05cc51e588c9dc6f75425e96140793864bc813feb15174c4b933f231c9ae7c979b797fca552d06e7aaae42b6ab38e4a3f3c6d6be6ced6551c25c7241df31c715a71692d8e36c0cdfb62d3f8ac5fcf0c067026b0c24207529a5d489d631c86d5afabb1bcb152d4ea25e85c79f1ac9d4d42494fd034209f658c862f8169dd13dfd6a038146afebdbf3754b0d0e14ee923c45db47979f31e59d1ffe80993c7ba2a84a4fdb056c4971c9e1fef2783ed67e3280482590786807d40e2a7da1434c7651508f0b4ff4d7cb8fa1023aa3993695b5241fc458df79bc735006b9621a879eb743726bd544a9ce7dc837fa9946b07254e41c97658024a05b24118611c628e367e0830f4a776f121eac6c63af77c3c9b0da309e5b5f8851f621c0f8cfef405400367195a5a720fdc6ac6bb0d26abe77d9b6b9fd209cd78a35ff232329361fde33e6ed9ab2fc573c15f614b4f5ca0d6a3be72be661c1ca66290125cd4c4b9f0cd65b71e0f7c10a57bd42aa9b012791ad67749fc057e5e63218dd8fcc94c396e386c0f464f42f8b72b384e3a8f1e1a210410657003585376afdb02800892ca88aa1d306bed24f296fb6ae3ac49641a0b538fc5f86e0c99e1b676ce02a4bc9c745306ccb9f8ba0caf2d44e322c0ab893918ff6f66fd2ac748e9a6bdf485b4ffbb63a72466bb95ac320c2a0503e9bd8d8e0190aabb8864e7de9057af0945cdb2df724ee7d1a532510e06dc104de9c4fad41aa466117159eb0aa97d69bd1083d01b9ee194f205ea98686794ce7cc2a068741594218d68b5a253a88526ca1010548264286942c05c981b6e1064e1c739bcc229fde63cc31c20eade886b88d7d39124a6ff849016f3b9e39db7b6fbbe153df15589e7f70a25945cf00f134ec64bfa42938e0f46a1584eccdecb7204667ddb84ae74da7a2c1e184ed451ff7258823b8b7b757992ff3a18217112affb2d6761d68e1b44e02e2f2b453158b2801065ebf0baff4082a9c1e083069ed348f3505ae9b79d569ced1959723cb374658b9ebf6910b93783d0fce886803e578ed6d49d2280c05c9edfaeb406030b130e96b177b812a68d5a124dfb047cb047d68d3234960777d141d92bb3cf4ee984ea621d8c5fea22951b11bfd6a305baa013f6a3ec2c6ddfddda80fc85609e6700649e6b1954e84cbadfe2b35289302c05d05f7b177ad0a5f2e09ac2a69dceaf28c6fd29c7f340322edbe4390e42d5a54ea580530f2c324a0969460e", 0x1000, r0) pipe2$watch_queue(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x15) sendmsg$AUDIT_USER(r6, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x68, 0x3ed, 0x200, 0x70bd2a, 0x25dfdbfb, "2e3c4639545c3ed5a7195b026393897fc26704fb460107250111df9a9d952cbf9255c6e3a5dee6d185aa8aee0384a5bfc379752a3bdc2472976283be5f20a15c4840b02c49c2d145af70e7b85c72b1bccb47d89efc67ab2e", ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x48004}, 0x8000) r7 = creat(&(0x7f0000001600)='./file0\x00', 0x84) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000001640)={{0x2, 0x4e22, @broadcast}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x2, {0x2, 0x4e24, @remote}, 'ip6_vti0\x00'}) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000016c0)={r1, 0xda, 0x97}, &(0x7f0000001700)={'enc=', 'raw', ' hash=', {'sha256-mb\x00'}}, &(0x7f0000001780)="30c9f497a04741ed3de78b3e0291b2c5de548aa4bca95912a2cadd706219be73225f1dffdece7f49d368fe7d3268802c98fcd8aeb8233d437af19bc5b62caac8ae8dcb1350774b9d9f50d403cd83e3011a71b16d072f4110c4f734a5d6aafd4786bf313b39f3082975f545e4a9117eebc68178eb6385915b79ee1676082368c8c15ea177ca885b48bd472e35504e94a63ced125e25f2701ee354581794889897e25555665e96dd598f2e5f88fea15085fa6518df11303025472433329d9eb1029b99e40cc172ed1a903fce0f9428b6c37dd1a862019af950c3c6", &(0x7f0000001880)=""/151) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r7, 0x84) add_key(&(0x7f0000001940)='syzkaller\x00', &(0x7f0000001980)={'syz', 0x0}, &(0x7f00000019c0)="107ccdf52dbf497d000afabee0564843c43c9228dbafe48459ee2a58afefa548cbd6eb843d4cb10db216b0bf3ec7328c5049e837c5584c404437f9aa7ae0b37acd6a5b658fc0af61627b814d1e3ae105aa127e589a0c6f4201d4ca287bc9952f748a55b5eb0356d1e2da72facb40de9d7b2a6cd3b6455570f76918953ed21fb0b4329dd9ee9a4e962fd20a86fb514120097cc6cf5c4fe3493f14ebeb29d2fc7f682409984f04b5da02a2828b1c3ca219cfdc89d1b97d02", 0xb7, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000001a80), &(0x7f0000001ac0)={'syz', 0x0}, &(0x7f0000001b00)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffd) openat$kvm(0xffffffffffffff9c, &(0x7f0000001b80), 0x102c0, 0x0) flock(r6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001c00)={0x2, &(0x7f0000001bc0)=[{0x501, 0x7, 0xd9, 0x6}, {0x789, 0x2, 0xea, 0xc}]}) memfd_secret(0x80000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c80), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x30, r9, 0x10, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x7, 0xf7a, 0x0, 0x4}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20040800) getpid() sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}}, 0x48000) 1m36.888374247s ago: executing program 3 (id=99): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='esdfs\x00', 0x900400, &(0x7f00000002c0)='.pending_reads\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x240801, 0x16) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x2a400, 0x1b4) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xffffffff, 0x0, 0x9a, 0x3, 0x1, 0xf, 0x0, 0x0, 0xf9, 0x1, 0x7f}, {0x94a0a44077550ca2, 0x2000, 0x3, 0x5, 0xc2, 0xbc, 0x9, 0x7, 0xc5, 0x7, 0x5, 0x44}, {0x1, 0xdddd1000, 0x3, 0x6, 0x9, 0x34, 0x10, 0x6, 0x3, 0x1c, 0x7, 0xff}, {0x8080000, 0x3000, 0x10, 0x58, 0x7d, 0x0, 0x0, 0xc, 0x7f, 0x5, 0x5, 0x1}, {0x504ce1cb89483871, 0xeeeca000, 0xa, 0x8f, 0x80, 0x0, 0x9, 0x1, 0x1, 0x7, 0x5, 0xfd}, {0x4000, 0x6000, 0x3, 0x2, 0x5, 0x7, 0x1, 0xb7, 0x2, 0x1, 0x7c, 0xd}, {0xffff1000, 0x80a0000, 0x8, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0x74000, 0xdddd0000, 0x3, 0x6, 0x0, 0x0, 0x9, 0x80, 0x9, 0x8f, 0x2e, 0x31}, {0x4000, 0x5a}, {0xffffffff, 0x6}, 0x10000, 0x0, 0x1, 0x151, 0x7, 0x1000, 0xdddd0000, [0x8, 0x3, 0xfff, 0x1]}) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) r7 = dup3(r5, r6, 0x80000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$FUSE(r7, &(0x7f00000001c0)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x1}) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0x100}, 0x2040) 1m36.836206247s ago: executing program 3 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x8002, 0x7ab7e3595e92b96c) write(r0, &(0x7f0000000000)='7', 0x1) setrlimit(0x40000000000008, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), &(0x7f0000000180)=@v2={0x2000000, [{0x7, 0x5}, {0x3, 0x9}]}, 0x14, 0x0) 1m36.780120528s ago: executing program 3 (id=104): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) pipe2$9p(&(0x7f0000000240), 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./tracing\x00', &(0x7f0000000180), 0x2004008, &(0x7f0000000640)=ANY=[]) syz_clone3(&(0x7f0000000080)={0x4000011, 0x0, 0x0, 0x0, {0x8000011}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket(0x28, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xf3, 0x4, @mcast1, 0x9}, 0x1c) r4 = dup2(r3, r3) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000080)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000003d40)=""/4052, 0xba8}, {&(0x7f00000007c0)=""/217, 0xd9}, {&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f00000011c0)=""/4099, 0x1003}, {&(0x7f00000009c0)=""/250, 0xfa}, {&(0x7f0000000380)=""/282, 0x11a}, {&(0x7f00000002c0)=""/70, 0x46}, {&(0x7f00000001c0)=""/231, 0xe7}, {&(0x7f0000000500)=""/145, 0x91}], 0x9}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x800}, {{0x0, 0x0, 0x0}, 0x1f75}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xe4f}, {{0x0, 0x0, 0x0}, 0x3}], 0x8, 0x0, 0x0) write$evdev(r4, &(0x7f00000000c0)=[{{}, 0x3, 0x5c0, 0x9}, {{}, 0x2, 0x2727, 0x2}], 0x30) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x80004, 0x6) lseek(r8, 0x0, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000001c0)={[0x10000000000002, 0x9, 0xfffffffffffffff9, 0x2, 0x401, 0x0, 0x4002004c4, 0x1004, 0x76, 0x4, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x90], 0xeeee8000, 0x2518d3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) read$FUSE(r4, &(0x7f0000001440)={0x2020}, 0x2020) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m35.705673626s ago: executing program 3 (id=108): syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) 1m35.12339019s ago: executing program 3 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x410000, 0x28) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x8002, 0x7ab7e3595e92b96c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10b643, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x0, 0xc0a) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="66b9200001c00f324f3066b9800000c00f326635008000000f300f01d72e363e0f01ca0fbb9d0e0066b9820000c00f32440f20c066350d000000440f22c03e3e0f01c4c1ef00", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write(r0, &(0x7f0000000000)='\x00', 0xffffffffffffffba) setrlimit(0x40000000000008, 0x0) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='proc\x00', 0x200000, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), &(0x7f0000000180)=@v2={0x2000000, [{0x7, 0x5}, {0x3, 0x9}]}, 0x14, 0x0) 1m34.827690687s ago: executing program 3 (id=118): pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x0) unshare(0x60040000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000200)=0x100000, 0x4) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4, 0x0, r1}, 0x10) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}, 0xfffffff6}], 0x1, 0x41, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) splice(r5, &(0x7f0000000040)=0x10, r0, 0x0, 0x807, 0x0) 1m19.633130189s ago: executing program 33 (id=118): pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x0) unshare(0x60040000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000200)=0x100000, 0x4) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4, 0x0, r1}, 0x10) recvmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}, 0xfffffff6}], 0x1, 0x41, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) splice(r5, &(0x7f0000000040)=0x10, r0, 0x0, 0x807, 0x0) 1m14.7904711s ago: executing program 5 (id=194): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) splice(r0, &(0x7f0000000000)=0x4, r1, &(0x7f00000000c0)=0x80000000, 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x26) write(r2, &(0x7f0000000080)='4', 0x1) 1m14.776149363s ago: executing program 5 (id=195): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80, r2}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@loopback={0x0, 0xffff64010100}, 0x80, r2}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) (async) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f00000001c0)) (async) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="8a0b8273c53f375955c2e64c111e14be9a91592014ae3cea66b4678ff0c98caeef48282a11e62ccffaf40fb8308a90723437eaf9509f4148c2a296e74bd0d827363d02aa04c566ba6e645ffc275255eee3822fd5bbbcf0f86d5670fdeb7a296271b46ee8949acf9f8cd035a708007a00", @ANYRES32=r0, @ANYBLOB="6201d58008002e009a3f57cc3072ff9a69ed9c705497f3e9bb1c82e9839f085cb9cf250000fe140dce5a5242adaa3b86", @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="a901118008003200", @ANYRES32=0x0, @ANYBLOB="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"], 0x29e0}, 0x1, 0x0, 0x0, 0x48000}, 0x840) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd, 0x0, 0xb3}) (async) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000040)={0x3, 0x4, 0x7f}) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000c40)=ANY=[], 0x378}, 0x1, 0x0, 0x0, 0x8000}, 0x8041) (async, rerun: 64) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20008040}, 0x4008081) (async, rerun: 64) sendto$inet(r5, &(0x7f0000000280)="eb9abc7b729f415eb7ca368645aea1b38dfd", 0x12, 0x8000, &(0x7f00000002c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) (async) lsm_set_self_attr(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="6500000000000000050000000000000021000500000000000100000000000000cf"], 0x21, 0x0) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x2000, 0x0, 0x10}, 0x18) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0), 0x2, 0x2) (async) faccessat(r9, &(0x7f0000000140)='./file0/file0/../file0\x00', 0x120) 1m14.695522858s ago: executing program 5 (id=196): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xd0, 0x2a, 0xab, 0x8, 0x174f, 0x8a12, 0xb4d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x19, 0x30, 0x6, "", [{{0x9, 0x4, 0x6, 0x4, 0x1, 0xe, 0x1, 0x0, 0x5, [], [{{0x9, 0x5, 0xb, 0x3, 0x41, 0xf, 0x3, 0x5}}]}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='lzo', 0x3) (async) fsopen(&(0x7f00000001c0)='binfmt_misc\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x400, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000850) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r3, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 1m11.642637941s ago: executing program 5 (id=238): rt_sigtimedwait(&(0x7f0000000500)={[0x93]}, &(0x7f0000000540), &(0x7f00000005c0)={0x77359400}, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000020201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c40000034000380140001"], 0xc8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x3090}], 0x1, &(0x7f0000000200), 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r2 = syz_usb_connect$uac1(0x0, 0x108, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf6, 0x3, 0x1, 0x3f, 0x10, 0xd, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x15ca, 0x1c}, [@extension_unit={0xc, 0x24, 0x8, 0x4, 0x7, 0x72, "b13070d2d6"}, @selector_unit={0x6, 0x24, 0x5, 0x9, 0x4, "8a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x401, 0x6, 0xed, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x81, 0x4, 0xb7, 0xd, "09b609"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x0, 0x3, 0x7b}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x13, 0x3, 0x0, 0x2, "d0fa6c97f1d6"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x1, 0x8, 0x6, "84fc7346f17093"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0xf8, 0x5, {0x7, 0x25, 0x1, 0x4, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xdcd8, 0x5, 0x40, "dce8a33172771842"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0x101, 0x4, "962e708a880a"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x79, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x3, 0x8, 0x9, "6ead", "9527"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x401, 0xba15, 0x0, 0xe6}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x3, 0x6, 0x0, "ca36d202"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xe6, 0x9, 0xa, {0x7, 0x25, 0x1, 0x0, 0x6, 0xd4}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x6, 0xf, 0x5f, 0x20, 0x7f}, 0x20, &(0x7f0000000180)=ANY=[], 0x5, [{0x83, &(0x7f00000001c0)=@string={0x83, 0x3, "7a130558b047fb5197313cb3b350eaccbb96c1d97f735230bee67ccce8a3c7abee492251107d305913b27b7a650ff2a5aeb59549f6c7abccdb286a95a3c6574d235f17f74cbc2ab0817dd3ed4a30783507f30b5afdf7007d435023c7ead37a37783affe9c220ce5725754c02557463b6d77ccc9a24e5dba9bc60baf746cde5d23b"}}, {0xf6, &(0x7f0000000280)=@string={0xf6, 0x3, "c75403a61a9475f070978b373089d2a025b0760452e5c1ca423a325a4e8a975483ab25fe991eb34297aaee5b4ddd1edaa7ec12df16e5a287610f927061916963b85270c112a7233c0872caf6e18586437cd2b8df1774bb9cd473f04bd72721cb114b38178fbcdb0a20e825c400409a862c8ebc229c17eed830f596c07832189205c5e7b5154cbe12f0fc7a88afa32bacb94ae46fb40e2556e5c261e5fdc9ca6f695b9b58d9e06ff7d8caa1b6173ffce73eedbae11ea0e72a60615ea6a785a1cbd4ca0861cfe0a4afe4ff8668f7d54e515dcf8104474c6dbcad4b329efe61b8ce20d295a401360754049c10118cae4a69eac2aefd"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x419}}, {0x73, &(0x7f00000003c0)=@string={0x73, 0x3, "751910044e40e85575658f6031d7f027e23d8b62d2609412baa66a8dabe3a877f1f9b346cfee78d000c6a9efbf256d4fefea3f55bcd1aad8534070dbdd20e77f9d022d3d0813c898fb6148a9948e9ae9cb99e4ee4692b7a82ffd37dfbdb773ff2d9085975984172224c73b0bef56e44a11"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x436}}]}) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x10, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) futex$unlock_pi_list64(&(0x7f0000000680)=0x4, 0x183, 0x5, &(0x7f00000006c0)={0x77359400}, &(0x7f0000000700)=0xc, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x80000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000640)={'pimreg1\x00', 0x800}) syz_usb_disconnect(r2) 1m8.667108329s ago: executing program 5 (id=258): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 64) sched_setattr(r0, &(0x7f0000000080)={0x38, 0x0, 0x19, 0x101, 0x7, 0xaca1, 0xf36, 0x6, 0x401, 0x5}, 0x0) (async, rerun: 64) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) (rerun: 32) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000000c0)="04", 0x1}], 0x1, 0x0, 0x50000000) (async) tkill(r1, 0x13) (async) tkill(r1, 0x12) waitid(0x1, r1, 0x0, 0x8, &(0x7f0000000340)) 1m8.462661779s ago: executing program 5 (id=259): r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000019d9dabe4debfa18283b78040f178398526cf2710e506a2f55c40840aac2f4d65120d4b5125fb9a9fd79ef8f89cbfa1026564fb7996f4c4b8625d3adc97e1f6ac045a86b59d5a74d1c736420ac9e7c4e993ff4fa6f290d6229fa3d41bb79f67eb6f9e60d0b1d209c84181539e88d1fc39e1f2ec0baee4b9481b9ad131a97327380ded4c27d6efb7ee72256781a5e7f9dad7cafe1", @ANYRES16=r3, @ANYBLOB="00082cbd7000fcdbdf252700000005002b000100000024003200fee01e2078df08879935f6456e23d9946061401ce0000000000000000000000005002b0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x101400, 0x100) creat(&(0x7f0000000280)='./file0\x00', 0x10) (async) read$watch_queue(r4, &(0x7f00000001c0)=""/178, 0xb2) 52.578956715s ago: executing program 34 (id=259): r0 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000019d9dabe4debfa18283b78040f178398526cf2710e506a2f55c40840aac2f4d65120d4b5125fb9a9fd79ef8f89cbfa1026564fb7996f4c4b8625d3adc97e1f6ac045a86b59d5a74d1c736420ac9e7c4e993ff4fa6f290d6229fa3d41bb79f67eb6f9e60d0b1d209c84181539e88d1fc39e1f2ec0baee4b9481b9ad131a97327380ded4c27d6efb7ee72256781a5e7f9dad7cafe1", @ANYRES16=r3, @ANYBLOB="00082cbd7000fcdbdf252700000005002b000100000024003200fee01e2078df08879935f6456e23d9946061401ce0000000000000000000000005002b0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x101400, 0x100) creat(&(0x7f0000000280)='./file0\x00', 0x10) (async) read$watch_queue(r4, &(0x7f00000001c0)=""/178, 0xb2) 25.797547368s ago: executing program 6 (id=614): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000040)=0x5, 0x4) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x1, 0x3, [@link_local, @local, @link_local]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000100)) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000400)={0x4, &(0x7f0000000380)=[{0xd, 0x9b, &(0x7f0000000140)="ea809ec4b3117625b3237056448a896a37c3ec40481e2a1d2dfcc4ad9dd3af1da92d2caacebaf8c3212f8d083e1fc6892c81d5207f6bdaef6b7465e01595dfc82412e9650ab89dc5f7032550bc1a01be3cc82f804d00b6286f3aab6c6ca2c09061c0cfc376394c7b84893634eac3e9ffc6c41431ab36b552f0da2cc7640c4d30579932b0cd20c9b5c8c2e36efa0dd554e4e567ff9cc2beb6a2bde1", 0x1, 0x1}, {0x80000001, 0x43, &(0x7f0000000200)="d2c2c62e107d5c71ca38987050356bda467841299f2d9b0fc57aa4fcdab5bf37d897549a786ae3af313ce0fda204dd6cf8e6f836672ce4a5334a0cc89344d48e47c1cc", 0x1, 0x1}, {0x1, 0x22, &(0x7f0000000280)="51dbe0cb9097dfc8a738e6d2ab6b1639238e5bc85303e671e795da60003dd512cc4c", 0x1, 0x1}, {0x6, 0xbf, &(0x7f00000002c0)="153aaa5cf7f1aed7332d63b989647eac11b6fb85cf82030787f734cf6721c44b3dc5f49bc0a1cc6a83a34c68a8448e73e15bb1f20a91eeba6a0718b0da904ffb48ad2b13eab21d859ff8045c370f80f1343fc8a88f72452812487c8149f672fb13f6c3e9076c9d10060303d1ebef10b7c382022f9d5d8ec8591ed8877eda961558e54ea3f4475c3322bda28f09dad26620d33ba9be8012ccaa722bae3714df663f5c99c33cd1e57a585d60b0c1869a146ab51b6577d70d43a3523c44657fa6", 0x0, 0x1}]}) syz_open_pts(r0, 0x4500) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000440)={{0x0, 0x2f, 0x100000001, 0x3, 0x7, 0xdf35, 0x5, 0x2, 0x7, 0x200, 0x80000000, 0x5, 0xb291, 0x4, 0x1e2f}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f00000004c0)={{r3, 0x40, 0x8000000000000000, 0x644e693e, 0xbc0, 0x6708, 0x7fffffff, 0x2, 0x1, 0x5, 0x8, 0x7, 0x7, 0x1, 0x873a}, 0x8, [0x0]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={r4, 0x1, 0x6, @multicast}, 0x10) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000005c0), &(0x7f0000000600), 0x2, 0x3) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0x100, 0x12, 0x200, 0x70bd2c, 0x25dfdbff, {0x6, 0x2, 0x0, 0x2, {0x4e21, 0x4e24, [0x6, 0x0, 0x6, 0x7fffffff], [0x6, 0x8, 0x3, 0x7d9], 0x0, [0x31, 0xffffffff]}, 0x7863}, [@INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "097d84c6275fc62410f7b12d5ab0c96e1748a308332052c5c7e8718ffd61ad9eca9f03d1fc676ffcb81cdee12aecc9db4e08f0c0903b2c2cc7e098dc50cc15f4bc51d640e858711607b7136bc181ffe301ff4052a844df968378a4af543eb627c8f875160e3e29c526c417ef95ca36fed46ac6a69a02c6baaacf61d015a45ffd93dd098c55e800370fe6e76b0210dfda25b885bacf2967e1bef6ade4ae63d97a9b6277de7d37ad50111b2a58d3"}]}, 0x100}, 0x1, 0x0, 0x0, 0x40810}, 0x8040) r5 = accept4$bt_l2cap(r0, &(0x7f0000000800)={0x1f, 0x0, @none}, &(0x7f0000000840)=0xe, 0x81800) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000880)=0x3) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r6, 0x228, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x49}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x7, 0x7ff, 0x0, 0x1, 0x7, 0x8]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}]}, 0x38}}, 0x10) r7 = accept4$bt_l2cap(r5, &(0x7f0000000a00)={0x1f, 0x0, @none}, &(0x7f0000000a40)=0xe, 0x40000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000a80)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000ac0)={0x1fb, 0x4, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000b00)=0x3) readv(r7, &(0x7f0000000f40)=[{&(0x7f0000000b40)=""/237, 0xed}, {&(0x7f0000000c40)=""/79, 0x4f}, {&(0x7f0000000cc0)=""/228, 0xe4}, {&(0x7f0000000dc0)=""/63, 0x3f}, {&(0x7f0000000e00)=""/207, 0xcf}, {&(0x7f0000000f00)=""/42, 0x2a}], 0x6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000fc0)={0x1, 'veth0_to_bridge\x00', 0x3}, 0x18) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000001000)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001040)={'veth0_to_team\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001080)=0x1, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000010c0), 0x0, 0x4000010, &(0x7f0000001100)={0x11, 0x1c, r4, 0x1, 0xfc, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 25.742571189s ago: executing program 6 (id=615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) setuid(0xee01) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001640)={0x14, r1, 0x1, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0x100, 0x3) r3 = socket$inet(0x2, 0x1, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000000)='./mnt\x00', r5, &(0x7f0000000200)='./file0\x00', 0x4) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r5, @ANYRES8=r5, @ANYRES8=r5]) 25.742140179s ago: executing program 6 (id=616): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0xfffffffffffffd23}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) landlock_create_ruleset(&(0x7f0000000240)={0x1ffe, 0x0, 0x1, 0x18200, 0x0, 0x2}, 0x30, 0x1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000a80)={'filter\x00', 0x104, 0x2, 0x3c8, 0x1f8, 0x0, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2}}}, {{@arp={@empty, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@local, @dev={0xac, 0x14, 0x14, 0xb}, @broadcast, 0x4, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@xino_on}], [], 0x2c}) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x100010, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4"], 0x1a4}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r7, 0x0, &(0x7f0000000480)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x3}, {0x20, 0x6}}, 0x24, 0x1) epoll_pwait(r7, 0x0, 0x0, 0x2, &(0x7f0000000280)={[0x90c]}, 0x8) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)='.U', 0x2, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup(r8) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) 25.63048461s ago: executing program 6 (id=617): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff2, 0xa, 0x5, 0xc, 0x1, 0x9, 0x3, 0x6, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0xfb, 0x72, 0xfb, 0x1, 0x3, 0x2}], 0x8}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x2284, &(0x7f0000000100)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3f) mount(&(0x7f00000000c0)=@filename='./mnt\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r1, 0x100040000c, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x2000000000, 0x1000000005, 0x20, 0x4, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380002, 0x2000008, 0x8, 0x8, 0x5, 0x8000], 0x50000, 0x3c4210}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffe}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x6, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x9b, 0x1, 0x40], [0x10000007, 0x40000009, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0x3, 0xaff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x7, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x1, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0x8, 0x202, 0x4, 0x5, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x0, 0x2, 0x5, 0x8, 0x4, 0x5, 0xffffffff, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x401, 0xac8, 0xbf, 0x4002, 0x3, 0x4f, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x9a06, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x2, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x20101, 0x10000, 0x9, 0x7fff, 0xffff, 0x5, 0x1, 0x78b, 0x81, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0x7, 0xaf, 0x6fcb, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1e, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3440, 0xfff]}, 0x45c) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x20800, 0x8) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000880)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005007e0500000603000003000000fcffffff05010905a10105091901290a150025017501950a8102950175068103c08dc20522f142694964ec1cb46636fd1902d082fa1715d70a8d4e4c29c845618a9e598cbe8468bd3d8c54880ced2ea6f50d11991b02e8c22de8238d4a585c2c8602"], 0x135) syz_usb_connect$midi(0x5, 0x2b, &(0x7f0000000480)=ANY=[@ANYBLOB="12010002000000088c0d0c004000010203010902"], 0x0) write$UHID_INPUT2(r6, &(0x7f00000006c0)={0xc, {0x7, "20004c5bf5728f"}}, 0xd) sendfile(r5, r5, 0x0, 0x2) 22.427905813s ago: executing program 6 (id=643): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2840, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setuid(0xee01) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, r4, 0x1, 0xfffffffb, 0x0, {{}, {0x0, 0x400b}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40) keyctl$session_to_parent(0x12) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x6a, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x6a, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffff4c, 0x0}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160006000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.344312159s ago: executing program 6 (id=644): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="89edee2c78daddb4", 0x8}], 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000007600"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x81fd, 0x4) 22.241002839s ago: executing program 35 (id=644): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="89edee2c78daddb4", 0x8}], 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000007600"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x81fd, 0x4) 9.720916501s ago: executing program 0 (id=679): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0x2, @remote, 0x2, 0x43, 'lblcr\x00', 0x2, 0x4, 0x62}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) getsockopt$inet_tcp_int(r0, 0x6, 0x2d, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x8, 0x7fffffff, 0x1, 0x9, 0x80000001, r2}) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340), &(0x7f00000000c0)=@v1={0x1000000, [{0x80, 0xffff}]}, 0xc, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0xf6ff) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x800, &(0x7f0000000200)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r3]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, 0x0, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, 0x0, 0x0) fcntl$setstatus(r7, 0x4, 0x800) waitid$P_PIDFD(0x3, r7, 0x0, 0x8, 0x0) mmap(&(0x7f0000a4d000/0x2000)=nil, 0x2000, 0x3000002, 0x20031, 0xffffffffffffffff, 0xffffe000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f00000013c0)={0x2020}, 0x2020) kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, r4, &(0x7f0000000180)={0xffffffffffffffff, r9, 0x80000000}) sched_setscheduler(r3, 0x1, &(0x7f0000000040)=0x8) write(r1, &(0x7f00000000c0)="3c00000058001f00032ae4f9002304000a04d65f080001000201000217d1ae3b70b0406700912deb5b859322340b0100000078f72e230a19fb2bcb1d", 0x3c) 9.720439651s ago: executing program 4 (id=680): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x200, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x6, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0xc62d71, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = socket$netlink(0x10, 0x3, 0x9) fadvise64(r0, 0x9, 0x8001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000020901010000000000000a0000040900010073797a3000000000100002000c000280050001002100"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)) lseek(r5, 0x8000000000000000, 0x1) read$FUSE(r5, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000000010101000000000000000002000002bdfe01800c00028005000100000000000d0002801400018008000100ac1414aa08000200e00000010c0002800500010000000000"], 0x48}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001900010000000000fbdbdf250a010900080012800400f88008001700", @ANYRES32, @ANYBLOB="f76849eb75094e32f7cfc291c51fa04eef37a6e1bdcca592474d9f93b0ef619400f787d1796aea19528e8caf500d916c63117661"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000340)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x8001) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xfffffefd, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x401, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x33, 0xe, 0x6, 0x7b, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x1ff, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x4, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x4, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac5, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0xb, 0xaf, 0x8, 0x6, 0x1, 0x2000005, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) 9.718622322s ago: executing program 2 (id=681): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x20) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)={0x14, 0x66, 0x31f, 0x70bd2a, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) (async) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000010000000000000000800060000000000100007000000000020"], 0x24, 0x0) 7.950456785s ago: executing program 0 (id=682): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40000, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x4442, 0x8c) (async) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r1, 0x0, r2, 0x0, 0x807, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82800, 0x0) (async, rerun: 64) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r4 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000140)=[{0x48, 0x0, 0xfe, 0xffeffffe}, {0x16}]}, 0x10) (async) sendto(r4, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x5b, 0x4000010, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x25) (async) r5 = gettid() (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x25, 0x3, @tid=r3}, &(0x7f0000000140)) (async, rerun: 64) r6 = socket$inet(0x2, 0x2, 0x0) (rerun: 64) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x3b8, '\x00'/952}, &(0x7f0000000400)=0x3e0) tkill(r5, 0x200002) r7 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000480)) (async, rerun: 32) r8 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) (async, rerun: 64) getsockopt$inet_buf(r9, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) (async, rerun: 64) fstat(r9, &(0x7f0000000180)) (async) sendmsg$inet6(r8, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb180000000000000029000000360000002b35d9"], 0x40}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, 0x0) (async) tkill(r3, 0x12) wait4(r3, 0x0, 0xa, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x2, 0x3, 0x4, 0x9, r3}) 7.950160685s ago: executing program 4 (id=683): r0 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x4000800) syz_usb_connect$uac3(0x1, 0xa9, &(0x7f0000002bc0)=ANY=[@ANYRES8=r0], &(0x7f00000003c0)={0x0, 0x0, 0xfffffffffffffebf, 0x0, 0x0, [{0x0, &(0x7f00000000c0)=@string={0x0, 0x3, "82d2c4284cf080cbd78e6fa9b60891b837bb8dd2817500d823cfefd837cfe4bc89bc0f44afe4e96f8ee0bd5368a63b1d88f6fdafa0b590"}}, {0x0, &(0x7f0000000100)=@lang_id={0x0, 0x3, 0x413}}, {0x0, &(0x7f00000001c0)=@lang_id={0x0, 0x3, 0x3801}}, {0x0, &(0x7f0000000200)=@string={0x0, 0x3, "7a34702f674eef1e38ce33cd5d9b077b12570e3bf70b40d885d4ddd73b35364cfea652ab237bd96acaa4f40871f39ca14e2d43a4978e076a428bc1f28d4b89e1fef7816acf1480f8cf9ba7db9fd505422e7921298ef7b1184b1c"}}]}) 7.950029975s ago: executing program 2 (id=684): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x240008c0, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @empty}, 0x1c) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20080058) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000010000c2000905", @ANYRES32], 0x0) 6.142503177s ago: executing program 0 (id=685): timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x280000, 0x0) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000280)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x582, 0x7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x9, 0xe0, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x23, 0x30, 0x4e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x6, 0x1, {0xa, 0x25, 0x25, 0x5, 0xb, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x4, 0x8, 0x4, {0xa, 0x25, 0x25, 0x3, 0x0, 0x1}}}}}}}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x7) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000440)="a9479c53ad543c058be2e8378b1fba96f4db802aae96c9510f2f518457942275bea4080af58c525655c2d07d9b805012712b5e897f35f9ee23f55cc454f8deafcad4bd7a80cf927d576691838ebff094e4dc64a5380e91f59f526614b507cccc7a18efa18539fa9fd263860c7f400835176b9985f27efa4f8f13b65348945b3ecc35b3bf166b6685fd7870cd464e8eddb246abe5f4b431ef7f676463aaf345285ca677af26dfc73424e9377e4a6f8c508529c00bb6851bd49fcf48d3b935a79c7fd704deb1b5d85c0bdd5e2d2dfaa1917d2e88b6556f2c008f554bdd485922c5de3585fc", 0xe4) (async) r3 = socket$unix(0x1, 0x1, 0x0) read(r3, &(0x7f0000000040)=""/32, 0x20) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) timer_gettime(r4, &(0x7f0000000180)) (async) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x2, 0x2, 0x800001fffffffffe}) r5 = fsmount(r2, 0x1, 0xb) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8c01) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, &(0x7f0000000080)=0x20000000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETSNDBUF(r8, 0x400454d4, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="b85b4afa660f23d80f21f835000000c00f23f80f01cb8fea5812400000537bdd362e67202b66ba4100ed64f30fc775003c0066baf80cb82852aa8fef66bafc0c66b848ae66ef0f224067f30fc236000000", 0x51}], 0x1, 0x64, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1, 0x3, 0x0, 0x3, 0x4}}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.142093477s ago: executing program 4 (id=686): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002cbd7000ffdbdf254100000008009f00020000000800a100910e00000800270002000000a400f5bca90fdd65c47c6bf2a2e8ae3b9082f4e369be06313a6bbf87d6da6fc9698440fb3ae3de1cf9ec601a547f8abacdb9288261d376f08055f59349f0bea1b7180923b07a7c54bc04c1b79ba62103c07252db1cfcfd8d86f0d49efb48679e4c6acf5b79a7a1d4584c386f25976c8ef400a3997f0d61c0bcf3d8b217bacee86f7989cba03a1282db9be80fccc37f4f76f4312d24ae904231bf54d41e19"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x5, r2, &(0x7f00000000c0), 0x7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002cbd7000ffdbdf254100000008009f00020000000800a100910e00000800270002000000a400f5bca90fdd65c47c6bf2a2e8ae3b9082f4e369be06313a6bbf87d6da6fc9698440fb3ae3de1cf9ec601a547f8abacdb9288261d376f08055f59349f0bea1b7180923b07a7c54bc04c1b79ba62103c07252db1cfcfd8d86f0d49efb48679e4c6acf5b79a7a1d4584c386f25976c8ef400a3997f0d61c0bcf3d8b217bacee86f7989cba03a1282db9be80fccc37f4f76f4312d24ae904231bf54d41e19"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r2) (async) ptrace$poke(0x5, r2, &(0x7f00000000c0), 0x7) (async) 6.141522867s ago: executing program 2 (id=687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x18, 0x15, 0x70bd2a, 0xfeffffff, "", [@typed={0xa, 0x2, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x8}]}]}, 0x28}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc8, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x8}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2040}, 0x20000000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x2000000000, 0x1000000005, 0x20, 0x4, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380002, 0x2000008, 0x8, 0x8, 0x5, 0x8000], 0x50000, 0x3c4210}) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x103481) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x1000008, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/tracing/events/kvm/enable\x00', 0x1, 0x0) write(r10, &(0x7f0000000140)='1', 0x1) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xc0, 0x0, 0xc00, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9c, 0x23}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x104}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x10}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}]}, 0xc0}}, 0x44) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) socket$inet6(0xa, 0x80002, 0x0) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e04, 0x20000, 0x6, 0x1015e, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4fa5, 0x8, 0x10000000, 0x148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90b, 0x1, 0x3, 0x0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x22, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x35e, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x1035, {0x0, 0x0, 0x0, 0x0, 0x5}}) r14 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_GET_CAPABILITIES(r14, 0x8004551a, &(0x7f0000001340)) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.199782894s ago: executing program 0 (id=688): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x3b, 0x100, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) read(r0, &(0x7f00000006c0)=""/219, 0xdb) syz_usb_connect$uac1(0x2, 0xa1, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1e6, 0x47f, 0xc010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8f, 0x3, 0x1, 0x8, 0x0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x15}, [@extension_unit={0xb, 0x24, 0x8, 0x2, 0x0, 0x9, "734d12e8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x3, 0x9, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x401, 0x4, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xd, 0xdf, 0x9, {0x7, 0x25, 0x1, 0xc, 0x5, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0xff, 0x5, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x87, 0x2, 0x5, 0x3, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0x7, 0x1, {0x7, 0x25, 0x1, 0xc, 0x73, 0xffff}}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x9, 0x3, 0x8, 0x0, 0x8}, 0x3b, &(0x7f0000000180)={0x5, 0xf, 0x3b, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x0, 0xf000, 0x2, [0x0, 0xf, 0x0, 0x0, 0xff3f00]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x2, 0x5a, 0x8001, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x51, 0x7f, 0x7, 0xfff7, 0xa7}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3009}}]}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7) 4.197623504s ago: executing program 4 (id=689): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername$inet6(r0, 0x0, &(0x7f0000001e80)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x2, {{0xa, 0x4e21, 0x80, @mcast1, 0x7}}, {{0xa, 0x4e22, 0x3, @remote, 0xe}}}, 0x108) 4.194906505s ago: executing program 2 (id=690): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4a) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a"], 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000140)={0x240, 0x80, 0x10}, 0x18) chdir(&(0x7f00000003c0)='./bus\x00') 2.11063713s ago: executing program 0 (id=691): lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x8, 0x1) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd, 0x0, 0xb3}) (async, rerun: 32) lsm_set_self_attr(0x66, &(0x7f0000000440)={0x65, 0x5, 0x21, 0x1, "cf"}, 0x21, 0x0) (async, rerun: 32) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0xf214f10d1c7b1c27}, 0x6) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000000)=0x2, 0x4) (async) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000162, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) (async) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r3 = open(&(0x7f0000000140)='./bus\x00', 0x10002, 0x190f4a91c2276e63) (async, rerun: 64) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0xffffffffffffffda, r5, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10, 0x85}}, 0x50) (async, rerun: 32) write$FUSE_INIT(r3, &(0x7f0000000400)={0x50, 0x0, r5, {0x7, 0x2d, 0x5, 0x10000, 0x4, 0x7, 0x1, 0x2, 0x0, 0x0, 0x10, 0x3}}, 0x50) (rerun: 32) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000100)=@sr0, r2, &(0x7f00000003c0)) (async) mount$incfs(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x200000, &(0x7f0000000700)=ANY=[@ANYBLOB='readahead=00000000000000000005,rlog_wakeup_cnt=00000000000000000001,rlog_pages=0']) 2.11040617s ago: executing program 4 (id=692): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x11d) fsopen(&(0x7f00000001c0)='rootfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) r0 = getpgrp(0x0) ptrace$pokeuser(0x6, r0, 0x3, 0x5) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x3, 0x20100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)={0x30, r3, 0x301, 0x70bd28, 0x0, {{}, {@val={0x8, 0x1, 0xa}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x802, 0x4}}}}}, 0x30}}, 0x44) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000001bc0)={&(0x7f0000000100), &(0x7f0000000bc0)=""/4096, 0x1000}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2.1100601s ago: executing program 2 (id=693): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_hsr\x00', &(0x7f0000000280)=@ethtool_rx_ntuple={0x35, {0x2, @tcp_ip4_spec={@local, @multicast1, 0x4e21, 0x4e21, 0x5}, @usr_ip4_spec={@broadcast, @remote, 0xfffffe00, 0x4, 0x1, 0xd}, 0x5, 0x1, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffe}}}) (async) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f00000000c0)='system_u:object_r:usbmon_device_t:s0\x00', 0x9, 0x2) (async) ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000740)={&(0x7f0000000000)=0x7ff, 0x9, &(0x7f0000000340)=[{}, {}, {}, {}, {}], &(0x7f0000000700)}) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) 1.21925ms ago: executing program 0 (id=694): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x240002, 0x1e8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4000000000000004) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x4, 0x90d, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x1a4}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) mprotect(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x0) syz_ublk_setup_queues(r0, r7, &(0x7f0000000200)={0x0, 0x14e1, 0x10, 0x3, 0xaf}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x8, 0x0, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x920b, 0x40, 0xfffffffe, 0x30d, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x0, 0x1, 0x35e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf6ad, 0x1, 0x0, 0x38e}}], 0x4, &(0x7f0000000540)={0x2e, 0x19, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r6, '\x00', {0x3, 0xc8b, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 201.71µs ago: executing program 4 (id=695): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000) socket$inet6_udp(0xa, 0x2, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x6, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140000006a002957"], 0x14}], 0x1}, 0x0) syz_pidfd_open(r3, 0x0) wait4(r3, &(0x7f0000000000), 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070000000000000000000c0000001c00038008000400001000000800020020000000080005007180bbda180001801400020073797a5f74756e"], 0x48}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f0000000040)={0x2c, 0xf, 0x0, 0x2, 0x4008, 0xaa, 0x5, 0x2, 0x1}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008c04) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008c04) 0s ago: executing program 2 (id=696): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_team\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3a}, 0x78, r5}) (async) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000)) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x421, 0x70bd2f, 0x25dfdbfe}, 0x14}}, 0x400d4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f0000000180)='devtmpfs\x00', 0x412, 0x0) (async) fspick(0xffffffffffffffff, 0x0, 0x0) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. [ 20.797132][ T36] audit: type=1400 audit(1791034885.199:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.798303][ T286] cgroup: Unknown subsys name 'net' [ 20.819788][ T36] audit: type=1400 audit(1791034885.199:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.847229][ T36] audit: type=1400 audit(1791034885.229:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.847474][ T286] cgroup: Unknown subsys name 'devices' [ 20.971906][ T286] cgroup: Unknown subsys name 'hugetlb' [ 20.977526][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.091073][ T36] audit: type=1400 audit(1791034885.499:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.114456][ T36] audit: type=1400 audit(1791034885.499:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.140070][ T36] audit: type=1400 audit(1791034885.499:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.171669][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.180504][ T36] audit: type=1400 audit(1791034885.589:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.206386][ T36] audit: type=1400 audit(1791034885.589:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.238443][ T36] audit: type=1400 audit(1791034885.639:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.239008][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.263967][ T36] audit: type=1400 audit(1791034885.639:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.057158][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.064498][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.071642][ T293] bridge_slave_0: entered allmulticast mode [ 22.077988][ T293] bridge_slave_0: entered promiscuous mode [ 22.085714][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.092801][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.099867][ T293] bridge_slave_1: entered allmulticast mode [ 22.106279][ T293] bridge_slave_1: entered promiscuous mode [ 22.197693][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.204796][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.212279][ T296] bridge_slave_0: entered allmulticast mode [ 22.218453][ T296] bridge_slave_0: entered promiscuous mode [ 22.232842][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.239914][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.247097][ T296] bridge_slave_1: entered allmulticast mode [ 22.253328][ T296] bridge_slave_1: entered promiscuous mode [ 22.276181][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.283278][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.290682][ T294] bridge_slave_0: entered allmulticast mode [ 22.296843][ T294] bridge_slave_0: entered promiscuous mode [ 22.315152][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.322850][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.330258][ T295] bridge_slave_0: entered allmulticast mode [ 22.336612][ T295] bridge_slave_0: entered promiscuous mode [ 22.343294][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.350359][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.357564][ T294] bridge_slave_1: entered allmulticast mode [ 22.363933][ T294] bridge_slave_1: entered promiscuous mode [ 22.381744][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.388973][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.396145][ T295] bridge_slave_1: entered allmulticast mode [ 22.402788][ T295] bridge_slave_1: entered promiscuous mode [ 22.504674][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.513958][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.521271][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.528310][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.557910][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.564990][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.572331][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.579908][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.606087][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.613172][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.620473][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.627495][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.638099][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.645182][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.652588][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.659655][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.694864][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.702445][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.709835][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.717298][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.724979][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.732288][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.739599][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.747023][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.756585][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.763768][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.781748][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.788879][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.796603][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.803858][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.811634][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.818692][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.839468][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.846557][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.854545][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.861600][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.883924][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.890985][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.898612][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.905668][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.958168][ T294] veth0_vlan: entered promiscuous mode [ 22.967176][ T296] veth0_vlan: entered promiscuous mode [ 22.977430][ T293] veth0_vlan: entered promiscuous mode [ 22.988821][ T295] veth0_vlan: entered promiscuous mode [ 23.003324][ T293] veth1_macvtap: entered promiscuous mode [ 23.012531][ T296] veth1_macvtap: entered promiscuous mode [ 23.029582][ T295] veth1_macvtap: entered promiscuous mode [ 23.044618][ T294] veth1_macvtap: entered promiscuous mode [ 23.094303][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.133266][ T318] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.164428][ T317] process 'syz.3.4' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 23.187106][ T325] ======================================================= [ 23.187106][ T325] WARNING: The mand mount option has been deprecated and [ 23.187106][ T325] and is ignored by this kernel. Remove the mand [ 23.187106][ T325] option from the mount to silence this warning. [ 23.187106][ T325] ======================================================= [ 23.224309][ T325] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 23.258711][ T343] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=343 comm=syz.1.6 [ 23.338063][ T349] capability: warning: `syz.0.9' uses deprecated v2 capabilities in a way that may be insecure [ 23.399034][ T349] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 23.890115][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.950063][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.040093][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 24.055776][ T31] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.067076][ T31] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.077052][ T31] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.090500][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 24.097337][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=5200, bcdDevice= 0.00 [ 24.106435][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.107320][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 24.115699][ T31] usb 2-1: config 0 descriptor?? [ 24.133011][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 24.142965][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.145358][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 24.150187][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.167555][ T376] bridge0: entered promiscuous mode [ 24.179043][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 24.194478][ T10] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 24.204610][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.212823][ T10] usb 3-1: Product: syz [ 24.225886][ T10] usb 3-1: Manufacturer: syz [ 24.230845][ T10] usb 3-1: SerialNumber: syz [ 24.239728][ T10] usb 3-1: config 0 descriptor?? [ 24.248033][ T10] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 24.270588][ T388] loop3: detected capacity change from 0 to 7 [ 24.278944][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 24.288895][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.298066][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 24.309134][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.318336][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 24.326797][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.335967][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 24.345549][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.355132][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 24.363158][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.372354][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 24.380569][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.380802][ T388] loop3: unable to read partition table [ 24.389718][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 24.390216][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 24.395770][ T388] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õÖ�˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 24.403505][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 24.445452][ T397] syzkaller1: entered promiscuous mode [ 24.455260][ T397] syzkaller1: entered allmulticast mode [ 24.464679][ T399] loop5: detected capacity change from 0 to 7 [ 24.539891][ T31] wacom 0003:056A:5200.0001: unknown main item tag 0x3 [ 24.547229][ T31] wacom 0003:056A:5200.0001: unknown main item tag 0x6 [ 24.555513][ T10] ums-isd200 3-1:0.0: probe with driver ums-isd200 failed with error -22 [ 24.556752][ T31] wacom 0003:056A:5200.0001: Unknown device_type for 'HID 056a:5200'. Ignoring. [ 24.608023][ T409] fuse: Bad value for 'fd' [ 24.616052][ T409] netlink: 32 bytes leftover after parsing attributes in process `syz.3.30'. [ 24.652480][ T10] usb 3-1: USB disconnect, device number 2 [ 24.670456][ T411] overlay: ./file0 is not a directory [ 24.679094][ T411] binder: Unknown parameter 'pcr' [ 24.749424][ T31] usb 2-1: USB disconnect, device number 2 [ 24.798477][ T423] bond_slave_0: entered promiscuous mode [ 25.070475][ T442] SELinux: Context system_u:object_r:hald_keymap_exec_t:s0 is not valid (left unmapped). [ 25.082206][ T442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=442 comm=syz.0.40 [ 25.303135][ T466] netlink: 'syz.1.48': attribute type 9 has an invalid length. [ 25.440063][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 25.450055][ T311] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.580104][ T311] usb 1-1: device descriptor read/64, error -71 [ 25.590079][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 25.596719][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 25.603397][ T31] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 25.612588][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.621679][ T31] usb 3-1: config 0 descriptor?? [ 25.800507][ T36] kauditd_printk_skb: 272 callbacks suppressed [ 25.800524][ T36] audit: type=1326 audit(1791034890.209:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=469 comm="syz.3.49" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734d15e98e code=0x7ffc0000 [ 25.820145][ T311] usb 1-1: device descriptor read/64, error -71 [ 25.840747][ T31] kye 0003:0458:5012.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 25.851276][ T36] audit: type=1326 audit(1791034890.239:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=469 comm="syz.3.49" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734d15e98e code=0x7ffc0000 [ 25.876511][ T31] kye 0003:0458:5012.0002: unknown main item tag 0x2 [ 25.883282][ T31] kye 0003:0458:5012.0002: unknown main item tag 0x6 [ 25.890052][ T31] kye 0003:0458:5012.0002: unknown main item tag 0x0 [ 25.896814][ T31] kye 0003:0458:5012.0002: ignoring exceeding usage max [ 25.902383][ T36] audit: type=1326 audit(1791034890.249:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=469 comm="syz.3.49" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734d15e98e code=0x7ffc0000 [ 25.914609][ T31] kye 0003:0458:5012.0002: hidraw0: USB HID vcc.5e Device [HID 0458:5012] on usb-dummy_hcd.2-1/input0 [ 25.929369][ T36] audit: type=1326 audit(1791034890.249:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=469 comm="syz.3.49" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734d15e98e code=0x7ffc0000 [ 25.946066][ T31] kye 0003:0458:5012.0002: tablet-enabling feature report not found [ 25.967338][ T36] audit: type=1326 audit(1791034890.249:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=469 comm="syz.3.49" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734d15e98e code=0x7ffc0000 [ 25.974549][ T31] kye 0003:0458:5012.0002: tablet enabling failed [ 26.017013][ T36] audit: type=1326 audit(1791034890.249:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=469 comm="syz.3.49" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734d15e98e code=0x7ffc0000 [ 26.054085][ T31] usb 3-1: USB disconnect, device number 3 [ 26.056731][ T36] audit: type=1326 audit(1791034890.249:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=469 comm="syz.3.49" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734d15e98e code=0x7ffc0000 [ 26.095092][ T36] audit: type=1326 audit(1791034890.249:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=469 comm="syz.3.49" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734d15e98e code=0x7ffc0000 [ 26.120173][ T311] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.129552][ T36] audit: type=1326 audit(1791034890.249:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=469 comm="syz.3.49" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734d15e98e code=0x7ffc0000 [ 26.171768][ T36] audit: type=1326 audit(1791034890.259:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=469 comm="syz.3.49" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f734d15e98e code=0x7ffc0000 [ 26.203308][ T514] SELinux: failed to load policy [ 26.220583][ T525] 9pnet_fd: Insufficient options for proto=fd [ 26.220583][ T521] 9pnet_fd: Insufficient options for proto=fd [ 26.290090][ T311] usb 1-1: device descriptor read/64, error -71 [ 26.325014][ T46] bridge_slave_1: left allmulticast mode [ 26.330926][ T46] bridge_slave_1: left promiscuous mode [ 26.337126][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.346132][ T46] bridge_slave_0: left allmulticast mode [ 26.360069][ T46] bridge_slave_0: left promiscuous mode [ 26.369406][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.431331][ T547] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.460204][ T549] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 26.482707][ T46] veth1_macvtap: left promiscuous mode [ 26.488276][ T46] veth0_vlan: left promiscuous mode [ 26.530114][ T311] usb 1-1: device descriptor read/64, error -71 [ 26.550323][ T553] netlink: 'syz.3.59': attribute type 12 has an invalid length. [ 26.594215][ T550] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.602561][ T550] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.610106][ T550] bridge_slave_0: entered allmulticast mode [ 26.621773][ T550] bridge_slave_0: entered promiscuous mode [ 26.628435][ T550] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.635769][ T550] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.643063][ T550] bridge_slave_1: entered allmulticast mode [ 26.649088][ T311] usb usb1-port1: attempt power cycle [ 26.650522][ T550] bridge_slave_1: entered promiscuous mode [ 26.680336][ T568] FAULT_INJECTION: forcing a failure. [ 26.680336][ T568] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 26.694434][ T568] CPU: 0 UID: 0 PID: 568 Comm: syz.3.62 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 26.694466][ T568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.694486][ T568] Call Trace: [ 26.694494][ T568] [ 26.694502][ T568] __dump_stack+0x21/0x30 [ 26.694545][ T568] dump_stack_lvl+0x140/0x1c0 [ 26.694572][ T568] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.694598][ T568] dump_stack+0x19/0x20 [ 26.694620][ T568] should_fail_ex+0x3c2/0x510 [ 26.694644][ T568] should_fail+0xf/0x20 [ 26.694663][ T568] should_fail_usercopy+0x1e/0x30 [ 26.694687][ T568] _copy_to_user+0x24/0xa0 [ 26.694713][ T568] do_pipe2+0xd5/0x190 [ 26.694733][ T568] ? xfd_validate_state+0x68/0x140 [ 26.694759][ T568] ? pipe_fcntl+0x520/0x520 [ 26.694779][ T568] __x64_sys_pipe2+0x5e/0x70 [ 26.694798][ T568] x64_sys_call+0x8be/0x2ee0 [ 26.694815][ T568] do_syscall_64+0x57/0xf0 [ 26.694834][ T568] ? clear_bhb_loop+0x50/0xa0 [ 26.694859][ T568] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.694882][ T568] RIP: 0033:0x7f734d19e159 [ 26.694905][ T568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.694922][ T568] RSP: 002b:00007f734bbe3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 26.694950][ T568] RAX: ffffffffffffffda RBX: 00007f734d425fa0 RCX: 00007f734d19e159 [ 26.694966][ T568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 26.694980][ T568] RBP: 00007f734d23506b R08: 0000000000000000 R09: 0000000000000000 [ 26.694993][ T568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.695005][ T568] R13: 00007f734d426038 R14: 00007f734d425fa0 R15: 00007fff83443798 [ 26.695022][ T568] [ 26.723122][ T550] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.885676][ T550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.892985][ T550] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.900061][ T550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.930836][ T572] overlayfs: workdir and upperdir must be separate subtrees [ 26.965245][ T550] veth0_vlan: entered promiscuous mode [ 26.978532][ T550] veth1_macvtap: entered promiscuous mode [ 26.990059][ T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 27.021163][ T311] usb 1-1: device descriptor read/8, error -71 [ 27.150076][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.151214][ T311] usb 1-1: device descriptor read/8, error -71 [ 27.260117][ T310] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.311132][ T31] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 27.321618][ T31] usb 4-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 27.332436][ T31] usb 4-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 27.346325][ T31] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 27.356507][ T31] usb 4-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 27.367414][ T31] usb 4-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 27.382077][ T31] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 27.391558][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.399584][ T31] usb 4-1: Product: syz [ 27.400243][ T311] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 27.404263][ T31] usb 4-1: Manufacturer: syz [ 27.413111][ T310] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 27.416211][ T31] usb 4-1: SerialNumber: syz [ 27.431189][ T311] usb 1-1: device descriptor read/8, error -71 [ 27.440907][ T310] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.450238][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.458372][ T310] usb 5-1: Product: syz [ 27.462747][ T310] usb 5-1: Manufacturer: syz [ 27.467347][ T310] usb 5-1: SerialNumber: syz [ 27.473824][ T310] cdc_ncm 5-1:1.0: skipping garbage [ 27.571335][ T311] usb 1-1: device descriptor read/8, error -71 [ 27.642910][ T31] usb 4-1: USB disconnect, device number 2 [ 27.680330][ T311] usb usb1-port1: unable to enumerate USB device [ 27.891045][ T586] overlay: ./file1 is not a directory [ 27.891057][ T585] overlay: ./file1 is not a directory [ 28.130072][ T310] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 28.136148][ T310] cdc_ncm 5-1:1.0: bind() failure [ 28.141869][ T310] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 28.148655][ T310] cdc_ncm 5-1:1.1: bind() failure [ 28.193522][ T591] FAULT_INJECTION: forcing a failure. [ 28.193522][ T591] name failslab, interval 1, probability 0, space 0, times 1 [ 28.206623][ T591] CPU: 1 UID: 0 PID: 591 Comm: syz.0.70 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 28.206644][ T591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.206652][ T591] Call Trace: [ 28.206655][ T591] [ 28.206661][ T591] __dump_stack+0x21/0x30 [ 28.206682][ T591] dump_stack_lvl+0x140/0x1c0 [ 28.206697][ T591] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.206716][ T591] dump_stack+0x19/0x20 [ 28.206729][ T591] should_fail_ex+0x3c2/0x510 [ 28.206742][ T591] should_failslab+0xac/0x100 [ 28.206755][ T591] __kmalloc_cache_noprof+0x41/0x470 [ 28.206767][ T591] ? __cfi_lookup_user_key_possessed+0x10/0x10 [ 28.206782][ T591] ? keyring_restrict+0xcd/0x420 [ 28.206793][ T591] ? __cfi_keyring_search_iterator+0x10/0x10 [ 28.206804][ T591] keyring_restrict+0xcd/0x420 [ 28.206815][ T591] keyctl_restrict_keyring+0x16c/0x240 [ 28.206830][ T591] ? __cfi_futex_wait+0x10/0x10 [ 28.206840][ T591] ? __cfi_keyctl_restrict_keyring+0x10/0x10 [ 28.206854][ T591] __se_sys_keyctl+0x2fb/0xe40 [ 28.206867][ T591] ? __x64_sys_keyctl+0xf0/0xf0 [ 28.206880][ T591] ? __cfi_do_futex+0x10/0x10 [ 28.206894][ T591] ? __se_sys_futex+0x13c/0x320 [ 28.206908][ T591] ? __x64_sys_futex+0x110/0x110 [ 28.206921][ T591] ? __x64_sys_pwritev+0x1dd/0x2c0 [ 28.206934][ T591] ? __kasan_check_write+0x18/0x20 [ 28.206944][ T591] ? fpregs_restore_userregs+0x11c/0x260 [ 28.206958][ T591] __x64_sys_keyctl+0xc3/0xf0 [ 28.206970][ T591] x64_sys_call+0x996/0x2ee0 [ 28.206980][ T591] do_syscall_64+0x57/0xf0 [ 28.206991][ T591] ? clear_bhb_loop+0x50/0xa0 [ 28.207005][ T591] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.207018][ T591] RIP: 0033:0x7fd62cd9e159 [ 28.207028][ T591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.207037][ T591] RSP: 002b:00007fd62dcc2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 28.207050][ T591] RAX: ffffffffffffffda RBX: 00007fd62d025fa0 RCX: 00007fd62cd9e159 [ 28.207058][ T591] RDX: 0000000000000000 RSI: 0000000005256614 RDI: 000000000000001d [ 28.207065][ T591] RBP: 00007fd62ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 28.207071][ T591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.207078][ T591] R13: 00007fd62d026038 R14: 00007fd62d025fa0 R15: 00007ffdcc1b94d8 [ 28.207087][ T591] [ 28.208130][ T591] netlink: 'syz.0.70': attribute type 49 has an invalid length. [ 28.420048][ T310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.491622][ T591] team_slave_1: entered promiscuous mode [ 28.497378][ T591] team_slave_1: entered allmulticast mode [ 28.620256][ T310] usb 4-1: Using ep0 maxpacket: 32 [ 28.626975][ T310] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.638260][ T310] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.653863][ T310] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 28.663294][ T310] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 28.672652][ T310] usb 4-1: Product: syz [ 28.676958][ T310] usb 4-1: Manufacturer: syz [ 28.684675][ T310] hub 4-1:4.0: USB hub found [ 28.793264][ T614] cgroup: fork rejected by pids controller in /syz2 [ 28.885252][ T310] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 28.910118][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 29.061233][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.072276][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.084251][ T31] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 29.093910][ T31] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 29.095473][ T707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.103096][ T31] usb 1-1: Manufacturer: syz [ 29.111986][ T707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.118399][ T31] usb 1-1: config 0 descriptor?? [ 29.230196][ T310] usb 4-1: USB disconnect, device number 3 [ 29.843359][ T715] FAULT_INJECTION: forcing a failure. [ 29.843359][ T715] name fail_futex, interval 1, probability 0, space 0, times 1 [ 29.856251][ T715] CPU: 0 UID: 0 PID: 715 Comm: syz.3.75 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 29.856285][ T715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 29.856294][ T715] Call Trace: [ 29.856299][ T715] [ 29.856304][ T715] __dump_stack+0x21/0x30 [ 29.856326][ T715] dump_stack_lvl+0x140/0x1c0 [ 29.856341][ T715] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.856363][ T715] ? find_vma+0xd3/0x120 [ 29.856384][ T715] dump_stack+0x19/0x20 [ 29.856409][ T715] should_fail_ex+0x3c2/0x510 [ 29.856433][ T715] should_fail+0xf/0x20 [ 29.856445][ T715] get_futex_key+0x178/0x940 [ 29.856458][ T715] ? __cfi___futex_wait+0x10/0x10 [ 29.856468][ T715] ? __cfi_get_futex_key+0x10/0x10 [ 29.856481][ T715] futex_wake+0x150/0x950 [ 29.856490][ T715] ? irqentry_exit+0x4a/0x60 [ 29.856512][ T715] ? exc_page_fault+0x65/0xc0 [ 29.856537][ T715] ? asm_exc_page_fault+0x2b/0x30 [ 29.856561][ T715] ? __cfi_futex_wake+0x10/0x10 [ 29.856578][ T715] ? strncpy_from_user+0x255/0x280 [ 29.856591][ T715] ? path_setxattr+0x1e3/0x5a0 [ 29.856603][ T715] do_futex+0x37d/0x510 [ 29.856616][ T715] ? __cfi_do_futex+0x10/0x10 [ 29.856630][ T715] __se_sys_futex+0x13c/0x320 [ 29.856649][ T715] ? __x64_sys_futex+0x110/0x110 [ 29.856674][ T715] ? _copy_from_user+0x3f/0xa0 [ 29.856703][ T715] __x64_sys_futex+0xe9/0x110 [ 29.856724][ T715] x64_sys_call+0x227f/0x2ee0 [ 29.856734][ T715] do_syscall_64+0x57/0xf0 [ 29.856744][ T715] ? clear_bhb_loop+0x50/0xa0 [ 29.856757][ T715] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.856770][ T715] RIP: 0033:0x7f734d19e159 [ 29.856781][ T715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.856805][ T715] RSP: 002b:00007f734bbe30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 29.856828][ T715] RAX: ffffffffffffffda RBX: 00007f734d425fa8 RCX: 00007f734d19e159 [ 29.856844][ T715] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f734d425fac [ 29.856857][ T715] RBP: 00007f734d425fa0 R08: 4000000000000000 R09: 0000000000000000 [ 29.856869][ T715] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 29.856882][ T715] R13: 00007f734d426038 R14: 00007fff834436b0 R15: 00007fff83443798 [ 29.856898][ T715] [ 29.935285][ T31] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71 [ 30.041434][ T310] usb 5-1: USB disconnect, device number 2 [ 30.048166][ T31] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 30.122617][ T31] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71 [ 30.130912][ T31] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 30.138405][ T31] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 30.154136][ T31] usb 1-1: USB disconnect, device number 6 [ 30.159084][ T719] 9pnet_virtio: no channels available for device 127.0.0.1 [ 30.229170][ T722] 8021q: VLANs not supported on lo [ 30.279036][ T725] exFAT-fs (rnullb0): invalid boot record signature [ 30.285742][ T725] exFAT-fs (rnullb0): failed to read boot sector [ 30.292949][ T725] exFAT-fs (rnullb0): failed to recognize exfat type [ 30.301651][ T729] exFAT-fs (rnullb0): invalid boot record signature [ 30.308410][ T729] exFAT-fs (rnullb0): failed to read boot sector [ 30.314841][ T580] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.315188][ T729] exFAT-fs (rnullb0): failed to recognize exfat type [ 30.380737][ T732] kvm: kvm [730]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 30.389703][ T732] kvm: kvm [730]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 30.400917][ T732] kvm: kvm [730]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 30.412193][ T732] kvm: kvm [730]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 30.421618][ T732] kvm: kvm [730]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 30.470140][ T580] usb 4-1: Using ep0 maxpacket: 16 [ 30.479466][ T580] usb 4-1: too many configurations: 197, using maximum allowed: 8 [ 30.488755][ T580] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 30.496410][ T580] usb 4-1: can't read configurations, error -61 [ 30.513134][ T739] FAULT_INJECTION: forcing a failure. [ 30.513134][ T739] name failslab, interval 1, probability 0, space 0, times 0 [ 30.526796][ T739] CPU: 1 UID: 0 PID: 739 Comm: syz.0.83 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 30.526830][ T739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.526842][ T739] Call Trace: [ 30.526847][ T739] [ 30.526854][ T739] __dump_stack+0x21/0x30 [ 30.526896][ T739] dump_stack_lvl+0x140/0x1c0 [ 30.526921][ T739] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.526946][ T739] dump_stack+0x19/0x20 [ 30.526967][ T739] should_fail_ex+0x3c2/0x510 [ 30.526993][ T739] should_failslab+0xac/0x100 [ 30.527018][ T739] __kmalloc_node_noprof+0x69/0x500 [ 30.527039][ T739] ? __kvmalloc_node_noprof+0x128/0x300 [ 30.527058][ T739] __kvmalloc_node_noprof+0x128/0x300 [ 30.527074][ T739] ? kasan_save_alloc_info+0x3a/0x50 [ 30.527093][ T739] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 30.527110][ T739] ? __kmalloc_cache_noprof+0x1f0/0x470 [ 30.527131][ T739] ? alloc_fdtable+0xd2/0x4f0 [ 30.527153][ T739] alloc_fdtable+0x18d/0x4f0 [ 30.527172][ T739] dup_fd+0x6af/0x9c0 [ 30.527190][ T739] ? copy_fs_struct+0x160/0x2d0 [ 30.527212][ T739] ksys_unshare+0x46a/0x920 [ 30.527246][ T739] ? fput+0x1a4/0x230 [ 30.527273][ T739] ? __cfi_ksys_unshare+0x10/0x10 [ 30.527300][ T739] ? __kasan_check_write+0x18/0x20 [ 30.527322][ T739] __x64_sys_unshare+0x3c/0x50 [ 30.527348][ T739] x64_sys_call+0x2998/0x2ee0 [ 30.527368][ T739] do_syscall_64+0x57/0xf0 [ 30.527388][ T739] ? clear_bhb_loop+0x50/0xa0 [ 30.527413][ T739] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.527439][ T739] RIP: 0033:0x7fd62cd9e159 [ 30.527468][ T739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.527486][ T739] RSP: 002b:00007fd62dcc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 30.527508][ T739] RAX: ffffffffffffffda RBX: 00007fd62d025fa0 RCX: 00007fd62cd9e159 [ 30.527523][ T739] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 30.527533][ T739] RBP: 00007fd62ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 30.527545][ T739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.527555][ T739] R13: 00007fd62d026038 R14: 00007fd62d025fa0 R15: 00007ffdcc1b94d8 [ 30.527572][ T739] [ 30.630086][ T580] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.633886][ T742] FAULT_INJECTION: forcing a failure. [ 30.633886][ T742] name failslab, interval 1, probability 0, space 0, times 0 [ 30.780293][ T580] usb 4-1: Using ep0 maxpacket: 16 [ 30.780832][ T742] CPU: 1 UID: 0 PID: 742 Comm: syz.4.84 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 30.780859][ T742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.780871][ T742] Call Trace: [ 30.780878][ T742] [ 30.780886][ T742] __dump_stack+0x21/0x30 [ 30.780918][ T742] dump_stack_lvl+0x140/0x1c0 [ 30.780945][ T742] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.780971][ T742] ? __cfi___futex_wait+0x10/0x10 [ 30.780990][ T742] dump_stack+0x19/0x20 [ 30.781014][ T742] should_fail_ex+0x3c2/0x510 [ 30.781037][ T742] should_failslab+0xac/0x100 [ 30.781060][ T742] kmem_cache_alloc_noprof+0x42/0x410 [ 30.781080][ T742] ? getname_flags+0xcc/0x6b0 [ 30.781100][ T742] ? futex_wait+0x2b8/0x7c0 [ 30.781118][ T742] getname_flags+0xcc/0x6b0 [ 30.781139][ T742] user_path_at+0x2b/0x60 [ 30.781160][ T742] path_setxattr+0x250/0x5a0 [ 30.781182][ T742] ? do_futex+0x32a/0x510 [ 30.781205][ T742] ? simple_xattrs_free+0x180/0x180 [ 30.781231][ T742] ? xfd_validate_state+0x68/0x140 [ 30.781256][ T742] ? __kasan_check_write+0x18/0x20 [ 30.781275][ T742] ? fpregs_restore_userregs+0x11c/0x260 [ 30.781297][ T742] __x64_sys_lsetxattr+0xc6/0xe0 [ 30.781317][ T742] x64_sys_call+0x2db8/0x2ee0 [ 30.781335][ T742] do_syscall_64+0x57/0xf0 [ 30.781354][ T742] ? clear_bhb_loop+0x50/0xa0 [ 30.781377][ T742] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.781401][ T742] RIP: 0033:0x7f778f99e159 [ 30.781417][ T742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.781433][ T742] RSP: 002b:00007f77908fa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 30.781454][ T742] RAX: ffffffffffffffda RBX: 00007f778fc25fa0 RCX: 00007f778f99e159 [ 30.781468][ T742] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 30.781480][ T742] RBP: 00007f778fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 30.781492][ T742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.781504][ T742] R13: 00007f778fc26038 R14: 00007f778fc25fa0 R15: 00007ffde24a5448 [ 30.781519][ T742] [ 31.001163][ T580] usb 4-1: too many configurations: 197, using maximum allowed: 8 [ 31.010085][ T580] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 31.017881][ T580] usb 4-1: can't read configurations, error -61 [ 31.024495][ T580] usb usb4-port1: attempt power cycle [ 31.092971][ T749] Zero length message leads to an empty skb [ 31.250093][ T45] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.360790][ T310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 31.370118][ T580] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 31.390478][ T580] usb 4-1: Using ep0 maxpacket: 16 [ 31.396567][ T580] usb 4-1: too many configurations: 197, using maximum allowed: 8 [ 31.405562][ T580] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 31.411161][ T45] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.413176][ T580] usb 4-1: can't read configurations, error -61 [ 31.424490][ T45] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.444058][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 31.450691][ T45] usb 5-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.00 [ 31.459845][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.468531][ T45] usb 5-1: config 0 descriptor?? [ 31.511207][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.522247][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.532077][ T310] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.544997][ T310] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.554063][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.562612][ T580] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 31.570360][ T310] usb 3-1: config 0 descriptor?? [ 31.590402][ T580] usb 4-1: Using ep0 maxpacket: 16 [ 31.595975][ T580] usb 4-1: too many configurations: 197, using maximum allowed: 8 [ 31.604916][ T580] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 31.612548][ T580] usb 4-1: can't read configurations, error -61 [ 31.619005][ T580] usb usb4-port1: unable to enumerate USB device [ 31.868018][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 31.868046][ T36] audit: type=1400 audit(1791034896.269:426): avc: denied { create } for pid=762 comm="syz.0.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.893898][ T45] hid (null): invalid report_size 1369260603 [ 31.901837][ T36] audit: type=1400 audit(1791034896.309:427): avc: denied { write } for pid=762 comm="syz.0.90" name="snmp6" dev="proc" ino=4026532632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 31.911673][ T45] logitech-djreceiver 0003:046D:C71E.0004: collection stack underflow [ 31.937620][ T45] logitech-djreceiver 0003:046D:C71E.0004: item 0 4 0 12 parsing failed [ 31.946634][ T45] logitech-djreceiver 0003:046D:C71E.0004: logi_dj_probe: parse failed [ 31.955891][ T45] logitech-djreceiver 0003:046D:C71E.0004: probe with driver logitech-djreceiver failed with error -22 [ 32.095238][ T744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.104640][ T744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.114594][ T744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.131002][ T775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.139545][ T744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.152025][ T775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.500109][ T580] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 32.651074][ T580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.662094][ T580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.672180][ T580] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.685129][ T580] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.694231][ T580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.702939][ T580] usb 1-1: config 0 descriptor?? [ 33.077821][ T790] rust_binder: Write failure EFAULT in pid:89 [ 33.289571][ T792] input: syz0 as /devices/virtual/input/input7 [ 33.302574][ T36] audit: type=1400 audit(1791034897.709:428): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=460 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.329356][ T793] rust_binder: 791:793 got transaction to invalid handle 3 [ 33.332127][ T36] audit: type=1400 audit(1791034897.709:429): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=460 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.338004][ T792] rust_binder: 791:792 got transaction to invalid handle 3 [ 33.359969][ T36] audit: type=1400 audit(1791034897.709:430): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=460 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.367705][ T793] rust_binder: 791:793 transaction async to 0:0 failed ENOENT, code 0 size 0-0 [ 33.392525][ T36] audit: type=1400 audit(1791034897.729:431): avc: denied { append } for pid=791 comm="syz.3.97" name="event3" dev="devtmpfs" ino=460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.423406][ T792] rust_binder: 791:792 transaction async to 0:0 failed ENOENT, code 0 size 0-0 [ 33.943718][ T36] audit: type=1400 audit(1791034898.349:432): avc: denied { read } for pid=797 comm="syz.3.98" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 33.966504][ T36] audit: type=1400 audit(1791034898.349:433): avc: denied { open } for pid=797 comm="syz.3.98" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 33.996150][ T36] audit: type=1400 audit(1791034898.399:434): avc: denied { read write } for pid=797 comm="syz.3.98" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 34.020475][ T36] audit: type=1400 audit(1791034898.399:435): avc: denied { open } for pid=797 comm="syz.3.98" path="/33/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 34.057470][ T9] usb 5-1: USB disconnect, device number 3 [ 34.072852][ T803] netlink: 'syz.4.100': attribute type 3 has an invalid length. [ 34.075959][ T805] FAULT_INJECTION: forcing a failure. [ 34.075959][ T805] name failslab, interval 1, probability 0, space 0, times 0 [ 34.094641][ T805] CPU: 1 UID: 0 PID: 805 Comm: syz.3.101 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 34.094680][ T805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.094694][ T805] Call Trace: [ 34.094701][ T805] [ 34.094710][ T805] __dump_stack+0x21/0x30 [ 34.094748][ T805] dump_stack_lvl+0x140/0x1c0 [ 34.094774][ T805] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.094805][ T805] dump_stack+0x19/0x20 [ 34.094832][ T805] should_fail_ex+0x3c2/0x510 [ 34.094859][ T805] should_failslab+0xac/0x100 [ 34.094905][ T805] __kmalloc_node_noprof+0x69/0x500 [ 34.094937][ T805] ? __kvmalloc_node_noprof+0x128/0x300 [ 34.094962][ T805] __kvmalloc_node_noprof+0x128/0x300 [ 34.094984][ T805] ? __cfi___check_object_size+0x10/0x10 [ 34.095010][ T805] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 34.095032][ T805] vmemdup_user+0x40/0x190 [ 34.095051][ T805] ? path_setxattr+0x19d/0x5a0 [ 34.095075][ T805] path_setxattr+0x207/0x5a0 [ 34.095099][ T805] ? do_futex+0x32a/0x510 [ 34.095129][ T805] ? simple_xattrs_free+0x180/0x180 [ 34.095157][ T805] ? xfd_validate_state+0x68/0x140 [ 34.095189][ T805] ? __kasan_check_write+0x18/0x20 [ 34.095212][ T805] ? fpregs_restore_userregs+0x11c/0x260 [ 34.095241][ T805] __x64_sys_lsetxattr+0xc6/0xe0 [ 34.095264][ T805] x64_sys_call+0x2db8/0x2ee0 [ 34.095286][ T805] do_syscall_64+0x57/0xf0 [ 34.095311][ T805] ? clear_bhb_loop+0x50/0xa0 [ 34.095340][ T805] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.095368][ T805] RIP: 0033:0x7f734d19e159 [ 34.095389][ T805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.095409][ T805] RSP: 002b:00007f734bbe3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 34.095432][ T805] RAX: ffffffffffffffda RBX: 00007f734d425fa0 RCX: 00007f734d19e159 [ 34.095450][ T805] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 34.095466][ T805] RBP: 00007f734d23506b R08: 0000000000000000 R09: 0000000000000000 [ 34.095480][ T805] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 34.095506][ T805] R13: 00007f734d426038 R14: 00007f734d425fa0 R15: 00007fff83443798 [ 34.095529][ T805] [ 34.105657][ T807] FAULT_INJECTION: forcing a failure. [ 34.105657][ T807] name failslab, interval 1, probability 0, space 0, times 0 [ 34.338081][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 34.340090][ T807] CPU: 1 UID: 0 PID: 807 Comm: syz.4.102 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 34.340122][ T807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.340134][ T807] Call Trace: [ 34.340140][ T807] [ 34.340147][ T807] __dump_stack+0x21/0x30 [ 34.340178][ T807] dump_stack_lvl+0x140/0x1c0 [ 34.340202][ T807] ? __cfi_dump_stack_lvl+0x10/0x10 [ 34.340228][ T807] dump_stack+0x19/0x20 [ 34.340250][ T807] should_fail_ex+0x3c2/0x510 [ 34.340274][ T807] should_failslab+0xac/0x100 [ 34.340297][ T807] kmem_cache_alloc_noprof+0x42/0x410 [ 34.340316][ T807] ? security_file_alloc+0x49/0x220 [ 34.340335][ T807] ? kasan_save_alloc_info+0x3a/0x50 [ 34.340358][ T807] security_file_alloc+0x49/0x220 [ 34.340376][ T807] init_file+0x9e/0x210 [ 34.340399][ T807] alloc_empty_file+0xd9/0x270 [ 34.340423][ T807] path_openat+0xf4/0x35a0 [ 34.340447][ T807] ? stack_depot_save_flags+0x38/0x800 [ 34.340470][ T807] ? try_to_wake_up+0x119e/0x1fd0 [ 34.340492][ T807] ? kasan_save_track+0x4f/0x80 [ 34.340512][ T807] ? kasan_save_track+0x3e/0x80 [ 34.340532][ T807] ? kasan_save_alloc_info+0x3a/0x50 [ 34.340548][ T807] ? __kasan_slab_alloc+0x73/0x90 [ 34.340570][ T807] ? getname+0x1b/0x30 [ 34.340589][ T807] ? do_sys_openat2+0xda/0x1d0 [ 34.340613][ T807] ? __x64_sys_openat+0x13a/0x170 [ 34.340638][ T807] ? x64_sys_call+0xe69/0x2ee0 [ 34.340655][ T807] ? do_syscall_64+0x57/0xf0 [ 34.340675][ T807] ? do_filp_open+0x440/0x440 [ 34.340701][ T807] do_filp_open+0x1f2/0x440 [ 34.340733][ T807] ? __cfi_do_filp_open+0x10/0x10 [ 34.340760][ T807] ? alloc_fd+0x4c1/0x570 [ 34.340782][ T807] do_sys_openat2+0x134/0x1d0 [ 34.340807][ T807] ? do_sys_open+0x100/0x100 [ 34.340833][ T807] __x64_sys_openat+0x13a/0x170 [ 34.340859][ T807] x64_sys_call+0xe69/0x2ee0 [ 34.340875][ T807] do_syscall_64+0x57/0xf0 [ 34.340893][ T807] ? clear_bhb_loop+0x50/0xa0 [ 34.340917][ T807] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 34.340939][ T807] RIP: 0033:0x7f778f95e98e [ 34.340956][ T807] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 34.340972][ T807] RSP: 002b:00007f77908f9f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 34.340993][ T807] RAX: ffffffffffffffda RBX: 00007f77908fa6c0 RCX: 00007f778f95e98e [ 34.341008][ T807] RDX: 0000000000000002 RSI: 00007f778fa34972 RDI: ffffffffffffff9c [ 34.341020][ T807] RBP: 00007f778fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 34.341032][ T807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.341044][ T807] R13: 00007f778fc26038 R14: 00007f778fc25fa0 R15: 00007ffde24a5448 [ 34.341060][ T807] [ 34.618078][ T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 34.628098][ T310] usb 3-1: USB disconnect, device number 4 [ 35.237340][ T833] can0: slcan on ttyS3. [ 35.284602][ T833] can0 (unregistered): slcan off ttyS3. [ 35.398826][ T580] usbhid 1-1:0.0: can't add hid device: -71 [ 35.410481][ T859] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.411833][ T580] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 35.412872][ T859] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.428832][ T855] ./dev/sda1: Can't lookup blockdev [ 35.429404][ T580] usb 1-1: USB disconnect, device number 7 [ 35.437950][ T858] rust_binder: 857:858 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 35.475725][ T859] rust_binder: 857:859 got transaction to invalid handle 1 [ 35.486342][ T859] rust_binder: 857:859 transaction async to 0:0 failed ENOENT, code 0 size 0-0 [ 35.520202][ T875] FAULT_INJECTION: forcing a failure. [ 35.520202][ T875] name failslab, interval 1, probability 0, space 0, times 0 [ 35.533872][ T875] CPU: 0 UID: 0 PID: 875 Comm: syz.4.114 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 35.533919][ T875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.533935][ T875] Call Trace: [ 35.533942][ T875] [ 35.533952][ T875] __dump_stack+0x21/0x30 [ 35.533990][ T875] dump_stack_lvl+0x140/0x1c0 [ 35.534021][ T875] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.534052][ T875] dump_stack+0x19/0x20 [ 35.534079][ T875] should_fail_ex+0x3c2/0x510 [ 35.534124][ T875] should_failslab+0xac/0x100 [ 35.534154][ T875] __kmalloc_node_noprof+0x69/0x500 [ 35.534180][ T875] ? __kvmalloc_node_noprof+0x128/0x300 [ 35.534203][ T875] __kvmalloc_node_noprof+0x128/0x300 [ 35.534225][ T875] ? __cfi___check_object_size+0x10/0x10 [ 35.534249][ T875] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 35.534269][ T875] vmemdup_user+0x40/0x190 [ 35.534290][ T875] ? path_setxattr+0x19d/0x5a0 [ 35.534314][ T875] path_setxattr+0x207/0x5a0 [ 35.534340][ T875] ? do_futex+0x32a/0x510 [ 35.534368][ T875] ? simple_xattrs_free+0x180/0x180 [ 35.534396][ T875] ? xfd_validate_state+0x68/0x140 [ 35.534425][ T875] ? __kasan_check_write+0x18/0x20 [ 35.534447][ T875] ? fpregs_restore_userregs+0x11c/0x260 [ 35.534475][ T875] __x64_sys_lsetxattr+0xc6/0xe0 [ 35.534496][ T875] x64_sys_call+0x2db8/0x2ee0 [ 35.534515][ T875] do_syscall_64+0x57/0xf0 [ 35.534538][ T875] ? clear_bhb_loop+0x50/0xa0 [ 35.534567][ T875] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.534595][ T875] RIP: 0033:0x7f778f99e159 [ 35.534615][ T875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.534635][ T875] RSP: 002b:00007f77908fa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 35.534661][ T875] RAX: ffffffffffffffda RBX: 00007f778fc25fa0 RCX: 00007f778f99e159 [ 35.534679][ T875] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 35.534696][ T875] RBP: 00007f778fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 35.534712][ T875] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 35.534727][ T875] R13: 00007f778fc26038 R14: 00007f778fc25fa0 R15: 00007ffde24a5448 [ 35.534747][ T875] [ 35.833291][ T887] kvm: kvm [886]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 35.858951][ T887] kvm: kvm [886]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 35.868448][ T887] kvm: kvm [886]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 35.878107][ T887] kvm: kvm [886]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 35.890812][ T887] kvm: kvm [886]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 35.900328][ T887] kvm: kvm [886]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 35.909559][ T887] kvm: kvm [886]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 35.924417][ T887] kvm: kvm [886]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 35.933960][ T887] kvm: kvm [886]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 35.943787][ T887] kvm: kvm [886]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 36.243634][ T9] rust_binder: 857: undelivered death notification, 0000000000000000 [ 36.850038][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 36.992629][ T939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 37.002199][ T939] overlayfs: failed to resolve './file0/file2': -2 [ 37.011257][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.022389][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.040088][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.054544][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.064042][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.075134][ T31] usb 1-1: config 0 descriptor?? [ 37.080561][ T943] FAULT_INJECTION: forcing a failure. [ 37.080561][ T943] name failslab, interval 1, probability 0, space 0, times 0 [ 37.093314][ T943] CPU: 0 UID: 0 PID: 943 Comm: syz.4.124 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 37.093351][ T943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.093363][ T943] Call Trace: [ 37.093370][ T943] [ 37.093378][ T943] __dump_stack+0x21/0x30 [ 37.093416][ T943] dump_stack_lvl+0x140/0x1c0 [ 37.093447][ T943] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.093476][ T943] dump_stack+0x19/0x20 [ 37.093506][ T943] should_fail_ex+0x3c2/0x510 [ 37.093535][ T943] should_failslab+0xac/0x100 [ 37.093564][ T943] __kmalloc_node_noprof+0x69/0x500 [ 37.093611][ T943] ? __kvmalloc_node_noprof+0x128/0x300 [ 37.093646][ T943] __kvmalloc_node_noprof+0x128/0x300 [ 37.093670][ T943] ? __cfi___check_object_size+0x10/0x10 [ 37.093696][ T943] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 37.093720][ T943] vmemdup_user+0x40/0x190 [ 37.093742][ T943] ? path_setxattr+0x19d/0x5a0 [ 37.093769][ T943] path_setxattr+0x207/0x5a0 [ 37.093794][ T943] ? do_futex+0x32a/0x510 [ 37.093824][ T943] ? simple_xattrs_free+0x180/0x180 [ 37.093855][ T943] ? xfd_validate_state+0x68/0x140 [ 37.093887][ T943] ? __kasan_check_write+0x18/0x20 [ 37.093911][ T943] ? fpregs_restore_userregs+0x11c/0x260 [ 37.093941][ T943] __x64_sys_lsetxattr+0xc6/0xe0 [ 37.093965][ T943] x64_sys_call+0x2db8/0x2ee0 [ 37.093988][ T943] do_syscall_64+0x57/0xf0 [ 37.094011][ T943] ? clear_bhb_loop+0x50/0xa0 [ 37.094042][ T943] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.094072][ T943] RIP: 0033:0x7f778f99e159 [ 37.094094][ T943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.094113][ T943] RSP: 002b:00007f77908fa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 37.094140][ T943] RAX: ffffffffffffffda RBX: 00007f778fc25fa0 RCX: 00007f778f99e159 [ 37.094158][ T943] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 37.094174][ T943] RBP: 00007f778fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 37.094190][ T943] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 37.094204][ T943] R13: 00007f778fc26038 R14: 00007f778fc25fa0 R15: 00007ffde24a5448 [ 37.094225][ T943] [ 37.570047][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 37.720050][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 37.726320][ T9] usb 5-1: config 0 has an invalid descriptor of length 73, skipping remainder of the config [ 37.736823][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 37.750827][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 37.760488][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.772935][ T9] usb 5-1: config 0 descriptor?? [ 37.780749][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 39.390878][ T971] capability: warning: `syz.2.128' uses 32-bit capabilities (legacy support in use) [ 39.619151][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 39.640075][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 39.652441][ T31] usb 1-1: USB disconnect, device number 8 [ 40.357847][ T9] usb 5-1: USB disconnect, device number 4 [ 40.389155][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 40.389172][ T36] audit: type=1400 audit(1791034904.789:459): avc: denied { create } for pid=995 comm="syz.4.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 40.650051][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 40.720066][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 40.801214][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.812294][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.822510][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.835891][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.845347][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.857296][ T31] usb 1-1: config 0 descriptor?? [ 40.890036][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 40.896286][ T9] usb 5-1: config 0 has an invalid interface number: 98 but max is 0 [ 40.920045][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.930212][ T9] usb 5-1: config 0 has no interface number 0 [ 40.936309][ T9] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 40.946177][ T9] usb 5-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 40.956122][ T9] usb 5-1: config 0 interface 98 has no altsetting 0 [ 40.965106][ T9] usb 5-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 40.974595][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.982820][ T9] usb 5-1: Product: syz [ 40.987000][ T9] usb 5-1: Manufacturer: syz [ 40.992020][ T9] usb 5-1: SerialNumber: syz [ 41.000632][ T9] usb 5-1: config 0 descriptor?? [ 41.005962][ T996] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 41.013468][ T996] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 41.221849][ T996] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 41.229746][ T996] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 42.040120][ T9] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 42.052228][ T9] asix 5-1:0.98 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 42.063832][ T9] asix 5-1:0.98: probe with driver asix failed with error -71 [ 42.075527][ T9] usb 5-1: USB disconnect, device number 5 [ 42.830059][ T45] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 42.991243][ T45] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 43.002614][ T45] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.012994][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 43.019730][ T45] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 43.029323][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.038402][ T45] usb 5-1: config 0 descriptor?? [ 43.357143][ T1008] bridge0: port 3(syz_tun) entered blocking state [ 43.363691][ T1008] bridge0: port 3(syz_tun) entered disabled state [ 43.370396][ T1008] syz_tun: entered allmulticast mode [ 43.376684][ T1008] syz_tun: entered promiscuous mode [ 43.382648][ T1008] bridge0: port 3(syz_tun) entered blocking state [ 43.389109][ T1008] bridge0: port 3(syz_tun) entered forwarding state [ 43.397118][ T1008] netlink: 'syz.2.142': attribute type 9 has an invalid length. [ 43.409970][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 43.416013][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 43.426575][ T1008] ./dev/sda1: Can't lookup blockdev [ 43.432087][ T36] audit: type=1400 audit(1791034907.829:460): avc: denied { map } for pid=1010 comm="syz.0.143" path="socket:[8992]" dev="sockfs" ino=8992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.474813][ T31] usb 1-1: USB disconnect, device number 9 [ 43.486146][ T45] hid-led 0003:0FC5:B080.0005: item fetching failed at offset 0/40 [ 43.505711][ T45] hid-led 0003:0FC5:B080.0005: probe with driver hid-led failed with error -22 [ 43.514964][ T36] audit: type=1400 audit(1791034907.829:461): avc: denied { read } for pid=1010 comm="syz.0.143" path="socket:[8992]" dev="sockfs" ino=8992 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.539651][ T36] audit: type=1400 audit(1791034907.829:462): avc: denied { setopt } for pid=1010 comm="syz.0.143" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.744152][ T1021] SELinux: Context system_u:object_r:fsadm_log_t:s0 is not valid (left unmapped). [ 43.754314][ T36] audit: type=1400 audit(1791034908.159:463): avc: denied { relabelto } for pid=1020 comm="syz.2.147" name="sys_mnt" dev="tmpfs" ino=230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_log_t:s0" [ 43.780962][ T36] audit: type=1400 audit(1791034908.159:464): avc: denied { associate } for pid=1020 comm="syz.2.147" name="sys_mnt" dev="tmpfs" ino=230 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_log_t:s0" [ 43.910050][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 44.062622][ T31] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 44.071809][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.080064][ T31] usb 1-1: Product: syz [ 44.084592][ T31] usb 1-1: Manufacturer: syz [ 44.089273][ T31] usb 1-1: SerialNumber: syz [ 44.097487][ T31] ums-karma 1-1:1.0: USB Mass Storage device detected [ 44.111993][ T31] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 44.111993][ T31] Please send a copy of this message to and [ 44.299228][ T1016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.308827][ T1016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.319510][ T1016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.329121][ T1016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.538514][ T31] scsi host1: usb-storage 1-1:1.0 [ 44.740920][ T31] usb 1-1: USB disconnect, device number 10 [ 45.264535][ T36] audit: type=1400 audit(1791034909.669:465): avc: denied { mount } for pid=1036 comm="syz.0.150" name="/" dev="ramfs" ino=9933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 45.540057][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 45.584655][ T45] usb 5-1: USB disconnect, device number 6 [ 45.701173][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.712685][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.722906][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.736210][ T31] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.745828][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.755272][ T31] usb 1-1: config 0 descriptor?? [ 45.970036][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 46.120045][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 46.127872][ T45] usb 5-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 46.137392][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.145692][ T45] usb 5-1: Product: syz [ 46.150222][ T45] usb 5-1: Manufacturer: syz [ 46.154922][ T45] usb 5-1: SerialNumber: syz [ 46.164165][ T45] usb 5-1: config 0 descriptor?? [ 46.173049][ T45] usb-storage 5-1:0.0: USB Mass Storage device detected [ 46.191510][ T45] usb-storage 5-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 46.199433][ T45] usb-storage 5-1:0.0: This device (054c,002e,0500 S 04 P 5c) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 46.199433][ T45] Please send a copy of this message to and [ 46.373675][ T580] usb 5-1: USB disconnect, device number 7 [ 47.013097][ T36] audit: type=1400 audit(1791034911.419:466): avc: denied { mounton } for pid=1056 comm="syz.4.155" path="/29/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 47.062498][ T1057] FAULT_INJECTION: forcing a failure. [ 47.062498][ T1057] name failslab, interval 1, probability 0, space 0, times 0 [ 47.076788][ T1057] CPU: 1 UID: 0 PID: 1057 Comm: syz.4.155 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 47.076828][ T1057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.076841][ T1057] Call Trace: [ 47.076848][ T1057] [ 47.076856][ T1057] __dump_stack+0x21/0x30 [ 47.076890][ T1057] dump_stack_lvl+0x140/0x1c0 [ 47.076916][ T1057] ? __cfi_dump_stack_lvl+0x10/0x10 [ 47.076944][ T1057] dump_stack+0x19/0x20 [ 47.076969][ T1057] should_fail_ex+0x3c2/0x510 [ 47.076995][ T1057] should_failslab+0xac/0x100 [ 47.077019][ T1057] __kmalloc_node_noprof+0x69/0x500 [ 47.077041][ T1057] ? __kvmalloc_node_noprof+0x128/0x300 [ 47.077062][ T1057] __kvmalloc_node_noprof+0x128/0x300 [ 47.077080][ T1057] ? __cfi___check_object_size+0x10/0x10 [ 47.077102][ T1057] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 47.077123][ T1057] vmemdup_user+0x40/0x190 [ 47.077140][ T1057] ? path_setxattr+0x19d/0x5a0 [ 47.077163][ T1057] path_setxattr+0x207/0x5a0 [ 47.077191][ T1057] ? do_futex+0x32a/0x510 [ 47.077219][ T1057] ? simple_xattrs_free+0x180/0x180 [ 47.077246][ T1057] ? __x64_sys_futex+0x110/0x110 [ 47.077272][ T1057] ? __kasan_check_write+0x18/0x20 [ 47.077292][ T1057] ? fpregs_restore_userregs+0x11c/0x260 [ 47.077318][ T1057] __x64_sys_lsetxattr+0xc6/0xe0 [ 47.077339][ T1057] x64_sys_call+0x2db8/0x2ee0 [ 47.077358][ T1057] do_syscall_64+0x57/0xf0 [ 47.077377][ T1057] ? clear_bhb_loop+0x50/0xa0 [ 47.077411][ T1057] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 47.077437][ T1057] RIP: 0033:0x7f778f99e159 [ 47.077455][ T1057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.077472][ T1057] RSP: 002b:00007f77908fa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 47.077495][ T1057] RAX: ffffffffffffffda RBX: 00007f778fc25fa0 RCX: 00007f778f99e159 [ 47.077511][ T1057] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 47.077525][ T1057] RBP: 00007f778fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 47.077538][ T1057] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 47.077551][ T1057] R13: 00007f778fc26038 R14: 00007f778fc25fa0 R15: 00007ffde24a5448 [ 47.077568][ T1057] [ 48.152404][ T36] audit: type=1326 audit(1791034912.559:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1058 comm="syz.2.156" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e0f9e159 code=0x7fc00000 [ 48.310324][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 48.321363][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 48.331589][ T1082] netlink: 96 bytes leftover after parsing attributes in process `syz.2.161'. [ 48.333671][ T31] usb 1-1: USB disconnect, device number 11 [ 48.350834][ T1082] netlink: 132 bytes leftover after parsing attributes in process `syz.2.161'. [ 48.378152][ T1083] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.390588][ T36] audit: type=1400 audit(1791034912.799:468): avc: denied { getopt } for pid=1081 comm="syz.0.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.190059][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 49.340047][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 49.346479][ T31] usb 1-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 49.359795][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 49.367120][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 49.376525][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.385528][ T31] usb 1-1: config 0 descriptor?? [ 49.396522][ T31] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 50.298705][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.305882][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.610069][ T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 50.771093][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.790081][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.805725][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.818996][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.828281][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.837270][ T31] usb 5-1: config 0 descriptor?? [ 51.426803][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.434015][ T1120] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.441161][ T1120] bridge_slave_0: entered allmulticast mode [ 51.447418][ T1120] bridge_slave_0: entered promiscuous mode [ 51.454149][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.461220][ T1120] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.468393][ T1120] bridge_slave_1: entered allmulticast mode [ 51.474767][ T1120] bridge_slave_1: entered promiscuous mode [ 51.484281][ T927] bridge_slave_1: left allmulticast mode [ 51.490164][ T927] bridge_slave_1: left promiscuous mode [ 51.495918][ T927] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.503448][ T927] bridge_slave_0: left allmulticast mode [ 51.509088][ T927] bridge_slave_0: left promiscuous mode [ 51.514756][ T927] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.601697][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.608761][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.616082][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.623213][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.632038][ T927] veth1_macvtap: left promiscuous mode [ 51.637563][ T927] veth0_vlan: left promiscuous mode [ 51.697215][ T928] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.704678][ T928] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.714810][ T925] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.721880][ T925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.731490][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.738544][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.766464][ T1120] veth0_vlan: entered promiscuous mode [ 51.776890][ T1120] veth1_macvtap: entered promiscuous mode [ 51.795890][ T36] audit: type=1400 audit(1791034916.199:469): avc: denied { mount } for pid=1120 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.819042][ T36] audit: type=1400 audit(1791034916.199:470): avc: denied { mounton } for pid=1120 comm="syz-executor" path="/root/syzkaller.HK9oWf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 51.855393][ T1126] FAULT_INJECTION: forcing a failure. [ 51.855393][ T1126] name failslab, interval 1, probability 0, space 0, times 0 [ 51.868163][ T1126] CPU: 1 UID: 0 PID: 1126 Comm: syz.5.166 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 51.868185][ T1126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 51.868192][ T1126] Call Trace: [ 51.868197][ T1126] [ 51.868202][ T1126] __dump_stack+0x21/0x30 [ 51.868228][ T1126] dump_stack_lvl+0x140/0x1c0 [ 51.868244][ T1126] ? __cfi_dump_stack_lvl+0x10/0x10 [ 51.868260][ T1126] dump_stack+0x19/0x20 [ 51.868274][ T1126] should_fail_ex+0x3c2/0x510 [ 51.868287][ T1126] should_failslab+0xac/0x100 [ 51.868301][ T1126] kmem_cache_alloc_noprof+0x42/0x410 [ 51.868312][ T1126] ? security_inode_alloc+0x51/0x230 [ 51.868327][ T1126] security_inode_alloc+0x51/0x230 [ 51.868340][ T1126] inode_init_always_gfp+0x756/0x9e0 [ 51.868353][ T1126] ? __cfi_sock_alloc_inode+0x10/0x10 [ 51.868365][ T1126] alloc_inode+0xc5/0x270 [ 51.868381][ T1126] ? bpf_lsm_socket_create+0xd/0x20 [ 51.868395][ T1126] new_inode_pseudo+0x19/0x40 [ 51.868409][ T1126] __sock_create+0x130/0x810 [ 51.868423][ T1126] __sys_socket+0xe1/0x1c0 [ 51.868435][ T1126] __x64_sys_socket+0x7e/0x90 [ 51.868449][ T1126] x64_sys_call+0x2608/0x2ee0 [ 51.868459][ T1126] do_syscall_64+0x57/0xf0 [ 51.868470][ T1126] ? clear_bhb_loop+0x50/0xa0 [ 51.868483][ T1126] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.868497][ T1126] RIP: 0033:0x7f487959e159 [ 51.868507][ T1126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.868517][ T1126] RSP: 002b:00007f487a3e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 51.868530][ T1126] RAX: ffffffffffffffda RBX: 00007f4879825fa0 RCX: 00007f487959e159 [ 51.868538][ T1126] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 51.868545][ T1126] RBP: 00007f487963506b R08: 0000000000000000 R09: 0000000000000000 [ 51.868552][ T1126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.868559][ T1126] R13: 00007f4879826038 R14: 00007f4879825fa0 R15: 00007ffe98c8a9e8 [ 51.868567][ T1126] [ 51.868600][ T1126] socket: no more sockets [ 51.967186][ T580] usb 1-1: USB disconnect, device number 12 [ 52.360235][ T45] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.510063][ T580] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 52.510063][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 52.524256][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.535241][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.545178][ T45] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 52.554323][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.563200][ T45] usb 6-1: config 0 descriptor?? [ 52.569100][ T45] hub 6-1:0.0: USB hub found [ 52.661169][ T580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.672167][ T580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.682012][ T580] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.695051][ T580] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.704128][ T580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.712846][ T580] usb 1-1: config 0 descriptor?? [ 52.769909][ T45] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 52.970356][ T36] audit: type=1400 audit(1791034917.379:471): avc: denied { read } for pid=1133 comm="syz.5.169" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 52.993050][ T36] audit: type=1400 audit(1791034917.379:472): avc: denied { open } for pid=1133 comm="syz.5.169" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 53.044778][ T45] usbhid 6-1:0.0: can't add hid device: -71 [ 53.051147][ T45] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 53.070464][ T45] usb 6-1: USB disconnect, device number 2 [ 53.375133][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 53.381625][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 53.393005][ T31] usb 5-1: USB disconnect, device number 8 [ 53.507717][ T1143] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(6.0.0), cmd(8) [ 54.382341][ T1174] incfs: Backing dir is not set, filesystem can't be mounted. [ 54.391751][ T1174] incfs: mount failed -2 [ 54.396633][ T1176] tc_dump_action: action bad kind [ 54.398948][ T1174] x_tables: duplicate underflow at hook 2 [ 54.403097][ T1177] veth1_to_bond: entered allmulticast mode [ 54.409255][ T1174] futex_wake_op: syz.2.178 tries to shift op by 32; fix this program [ 54.730050][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 54.881373][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 54.889555][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 54.900047][ T9] usb 6-1: string descriptor 0 read error: -22 [ 54.906313][ T9] usb 6-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 54.915409][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.925909][ T9] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 55.191196][ T9] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 55.204019][ T580] usbhid 1-1:0.0: can't add hid device: -71 [ 55.220110][ T580] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 55.230641][ T1175] veth1_to_bond: left allmulticast mode [ 55.250053][ T580] usb 1-1: USB disconnect, device number 13 [ 55.258394][ T36] audit: type=1400 audit(1791034919.659:473): avc: denied { bind } for pid=1187 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.289547][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 55.293450][ T503] udevd[503]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.301728][ T9] usb 6-1: USB disconnect, device number 3 [ 55.332995][ T1194] FAULT_INJECTION: forcing a failure. [ 55.332995][ T1194] name failslab, interval 1, probability 0, space 0, times 0 [ 55.346120][ T1194] CPU: 1 UID: 0 PID: 1194 Comm: syz.0.186 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 55.346154][ T1194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.346167][ T1194] Call Trace: [ 55.346173][ T1194] [ 55.346180][ T1194] __dump_stack+0x21/0x30 [ 55.346221][ T1194] dump_stack_lvl+0x140/0x1c0 [ 55.346246][ T1194] ? __cfi_dump_stack_lvl+0x10/0x10 [ 55.346272][ T1194] dump_stack+0x19/0x20 [ 55.346294][ T1194] should_fail_ex+0x3c2/0x510 [ 55.346316][ T1194] should_failslab+0xac/0x100 [ 55.346339][ T1194] __kmalloc_node_noprof+0x69/0x500 [ 55.346360][ T1194] ? __kvmalloc_node_noprof+0x128/0x300 [ 55.346379][ T1194] __kvmalloc_node_noprof+0x128/0x300 [ 55.346398][ T1194] ? __cfi___check_object_size+0x10/0x10 [ 55.346419][ T1194] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 55.346438][ T1194] vmemdup_user+0x40/0x190 [ 55.346454][ T1194] ? path_setxattr+0x19d/0x5a0 [ 55.346476][ T1194] path_setxattr+0x207/0x5a0 [ 55.346496][ T1194] ? do_futex+0x32a/0x510 [ 55.346519][ T1194] ? simple_xattrs_free+0x180/0x180 [ 55.346543][ T1194] ? xfd_validate_state+0x68/0x140 [ 55.346567][ T1194] ? __kasan_check_write+0x18/0x20 [ 55.346585][ T1194] ? fpregs_restore_userregs+0x11c/0x260 [ 55.346606][ T1194] __x64_sys_lsetxattr+0xc6/0xe0 [ 55.346626][ T1194] x64_sys_call+0x2db8/0x2ee0 [ 55.346645][ T1194] do_syscall_64+0x57/0xf0 [ 55.346664][ T1194] ? clear_bhb_loop+0x50/0xa0 [ 55.346751][ T1194] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 55.346776][ T1194] RIP: 0033:0x7fd62cd9e159 [ 55.346793][ T1194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.346812][ T1194] RSP: 002b:00007fd62dcc2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 55.346835][ T1194] RAX: ffffffffffffffda RBX: 00007fd62d025fa0 RCX: 00007fd62cd9e159 [ 55.346850][ T1194] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 55.346864][ T1194] RBP: 00007fd62ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 55.346877][ T1194] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 55.346889][ T1194] R13: 00007fd62d026038 R14: 00007fd62d025fa0 R15: 00007ffdcc1b94d8 [ 55.346905][ T1194] [ 55.700261][ T454] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 55.782561][ T1200] netlink: 'syz.5.189': attribute type 27 has an invalid length. [ 55.818400][ T36] audit: type=1400 audit(1791034920.219:474): avc: denied { search } for pid=1199 comm="syz.5.189" name="/" dev="configfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.840893][ T36] audit: type=1400 audit(1791034920.219:475): avc: denied { write } for pid=1199 comm="syz.5.189" name="usb_gadget" dev="configfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.841802][ T31] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 55.864140][ T36] audit: type=1400 audit(1791034920.219:476): avc: denied { add_name } for pid=1199 comm="syz.5.189" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 55.891585][ T36] audit: type=1400 audit(1791034920.219:477): avc: denied { create } for pid=1199 comm="syz.5.189" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 55.914358][ T36] audit: type=1400 audit(1791034920.229:478): avc: denied { create } for pid=1199 comm="syz.5.189" name="u" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 55.936612][ T454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.947809][ T454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.957767][ T454] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.970669][ T454] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.979768][ T454] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.988370][ T454] usb 5-1: config 0 descriptor?? [ 56.040066][ T31] usb 1-1: Invalid ep0 maxpacket: 32 [ 56.190371][ T31] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 56.245423][ T36] audit: type=1400 audit(1791034920.649:479): avc: denied { accept } for pid=1223 comm="syz.5.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 56.360048][ T31] usb 1-1: Invalid ep0 maxpacket: 32 [ 56.370071][ T31] usb usb1-port1: attempt power cycle [ 56.400343][ T454] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 56.409713][ T454] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 56.419608][ T454] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 56.480090][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 56.610707][ T9] usb 6-1: device descriptor read/64, error -71 [ 56.618915][ T454] usb 5-1: USB disconnect, device number 9 [ 56.720096][ T31] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 56.740661][ T31] usb 1-1: Invalid ep0 maxpacket: 32 [ 56.850129][ T9] usb 6-1: device descriptor read/64, error -71 [ 56.880335][ T31] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 56.910404][ T31] usb 1-1: Invalid ep0 maxpacket: 32 [ 56.915885][ T31] usb usb1-port1: unable to enumerate USB device [ 57.100116][ T9] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 57.230063][ T9] usb 6-1: device descriptor read/64, error -71 [ 57.370093][ T311] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 57.448004][ T1233] wireguard: wg1: Could not create IPv4 socket [ 57.470107][ T9] usb 6-1: device descriptor read/64, error -71 [ 57.521230][ T311] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.531412][ T311] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 57.540439][ T311] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.551551][ T311] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.563066][ T311] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 57.572177][ T311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.580273][ T311] usb 5-1: Product: syz [ 57.584543][ T9] usb usb6-port1: attempt power cycle [ 57.590015][ T311] usb 5-1: Manufacturer: syz [ 57.594612][ T311] usb 5-1: SerialNumber: syz [ 57.602323][ T311] usb 5-1: Found UVC 1.00 device syz (046d:0821) [ 57.608751][ T311] usb 5-1: No streaming interface found for terminal 2. [ 57.804756][ T36] audit: type=1400 audit(1791034922.209:480): avc: denied { ioctl } for pid=1230 comm="syz.4.197" path="socket:[12141]" dev="sockfs" ino=12141 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 57.866316][ T31] usb 5-1: USB disconnect, device number 10 [ 57.940065][ T9] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 57.962963][ T9] usb 6-1: device descriptor read/8, error -71 [ 58.041201][ T1254] netlink: 'syz.2.203': attribute type 28 has an invalid length. [ 58.090957][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 58.090974][ T36] audit: type=1400 audit(1791034922.499:482): avc: denied { audit_write } for pid=1389 comm="syz.2.205" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.091057][ T9] usb 6-1: device descriptor read/8, error -71 [ 58.307105][ T1409] incfs: Backing dir is not set, filesystem can't be mounted. [ 58.314688][ T1409] incfs: mount failed -2 [ 58.348941][ T1413] netlink: 'syz.2.212': attribute type 33 has an invalid length. [ 58.357423][ T1413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=1413 comm=syz.2.212 [ 58.370210][ T9] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 58.391808][ T36] audit: type=1400 audit(1791034922.799:483): avc: denied { setopt } for pid=1414 comm="syz.4.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.402735][ T9] usb 6-1: device descriptor read/8, error -71 [ 58.439540][ T36] audit: type=1326 audit(1791034922.839:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1422 comm="syz.4.216" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f778f99e159 code=0x0 [ 58.470643][ T1425] netlink: 'syz.2.217': attribute type 12 has an invalid length. [ 58.488111][ T36] audit: type=1400 audit(1791034922.889:485): avc: denied { bind } for pid=1426 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.565792][ T36] audit: type=1400 audit(1791034922.969:486): avc: denied { module_load } for pid=1422 comm="syz.4.216" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 58.566561][ T1433] kernel read not supported for file /policy (pid: 1433 comm: syz.4.216) [ 58.632925][ T9] usb 6-1: device descriptor read/8, error -71 [ 58.740162][ T9] usb usb6-port1: unable to enumerate USB device [ 58.783172][ T1454] mmap: syz.2.223 (1454) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.929135][ T1469] .N: renamed from veth0_to_bond (while UP) [ 59.008520][ T1478] overlayfs: unescaped trailing colons in lowerdir mount option. [ 59.025383][ T1480] vlan1: entered promiscuous mode [ 59.033437][ T1479] vlan1: left promiscuous mode [ 59.046803][ T36] audit: type=1400 audit(1791034923.449:487): avc: denied { bind } for pid=1481 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.066338][ T36] audit: type=1400 audit(1791034923.449:488): avc: denied { name_bind } for pid=1481 comm="syz.2.233" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 59.087205][ T36] audit: type=1400 audit(1791034923.449:489): avc: denied { node_bind } for pid=1481 comm="syz.2.233" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 59.093063][ T1484] overlayfs: failed to clone lowerpath [ 59.129674][ T1486] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.235'. [ 59.156249][ T1490] tipc: Started in network mode [ 59.161226][ T1490] tipc: Node identity ac1414aa, cluster identity 4711 [ 59.168113][ T1490] tipc: New replicast peer: 0.0.0.0 [ 59.173732][ T1490] tipc: Enabled bearer , priority 10 [ 59.302204][ T1495] netlink: 24 bytes leftover after parsing attributes in process `syz.5.238'. [ 59.520163][ T311] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 59.650053][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 59.657832][ T311] usb 5-1: device descriptor read/64, error -71 [ 59.780066][ T10] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 59.790088][ T9] usb 6-1: device descriptor read/64, error -71 [ 59.900109][ T311] usb 5-1: device descriptor read/64, error -71 [ 59.931792][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.942049][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 59.950974][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 59.965848][ T10] usb 1-1: string descriptor 0 read error: -22 [ 59.972156][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.981297][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.992864][ T10] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 59.999705][ T10] cdc_ncm 1-1:1.0: bind() failure [ 60.040095][ T9] usb 6-1: device descriptor read/64, error -71 [ 60.140068][ T311] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 60.226325][ T1509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 60.235529][ T1509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 60.261334][ T1513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.270032][ T311] usb 5-1: device descriptor read/64, error -71 [ 60.271905][ T1513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.282673][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 60.300040][ T31] tipc: Node number set to 2886997162 [ 60.430039][ T9] usb 6-1: device descriptor read/64, error -71 [ 60.461862][ T1517] veth0: mtu less than device minimum [ 60.510053][ T311] usb 5-1: device descriptor read/64, error -71 [ 60.620267][ T311] usb usb5-port1: attempt power cycle [ 60.680058][ T9] usb 6-1: device descriptor read/64, error -71 [ 60.790168][ T9] usb usb6-port1: attempt power cycle [ 60.960278][ T311] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 60.982522][ T1494] FAULT_INJECTION: forcing a failure. [ 60.982522][ T1494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.996508][ T1494] CPU: 0 UID: 0 PID: 1494 Comm: syz.4.239 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 60.996546][ T1494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.996560][ T1494] Call Trace: [ 60.996569][ T1494] [ 60.996578][ T1494] __dump_stack+0x21/0x30 [ 60.996638][ T1494] dump_stack_lvl+0x140/0x1c0 [ 60.996674][ T1494] ? __cfi_dump_stack_lvl+0x10/0x10 [ 60.996701][ T1494] ? __down_common+0x263/0x500 [ 60.996731][ T1494] ? check_stack_object+0x81/0x150 [ 60.996753][ T1494] ? __check_object_size+0x99/0x870 [ 60.996777][ T1494] dump_stack+0x19/0x20 [ 60.996805][ T1494] should_fail_ex+0x3c2/0x510 [ 60.996840][ T1494] should_fail+0xf/0x20 [ 60.996865][ T1494] should_fail_usercopy+0x1e/0x30 [ 60.996892][ T1494] _copy_to_user+0x24/0xa0 [ 60.996922][ T1494] raw_ioctl+0x2371/0x37a0 [ 60.996946][ T1494] ? __kasan_check_write+0x18/0x20 [ 60.996973][ T1494] ? _raw_spin_lock_irq+0x93/0x120 [ 60.996997][ T1494] ? __cfi_raw_ioctl+0x10/0x10 [ 60.997015][ T1494] ? selinux_file_ioctl+0x732/0x1480 [ 60.997050][ T1494] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 60.997075][ T1494] ? __hrtimer_run_queues+0x877/0x8e0 [ 60.997117][ T1494] ? kvm_sched_clock_read+0x15/0x30 [ 60.997146][ T1494] ? sched_clock_noinstr+0xd/0x30 [ 60.997173][ T1494] ? sched_clock+0x44/0x60 [ 60.997198][ T1494] ? sched_clock_cpu+0x75/0x400 [ 60.997227][ T1494] ? clockevents_program_event+0x254/0x350 [ 60.997250][ T1494] ? __cfi_sched_clock_cpu+0x10/0x10 [ 60.997279][ T1494] ? hrtimer_reprogram+0x336/0x3d0 [ 60.997308][ T1494] ? __fget_files+0x2bc/0x330 [ 60.997332][ T1494] ? bpf_lsm_file_ioctl+0xd/0x20 [ 60.997360][ T1494] ? security_file_ioctl+0x3e/0x110 [ 60.997380][ T1494] ? __cfi_raw_ioctl+0x10/0x10 [ 60.997399][ T1494] __se_sys_ioctl+0x126/0x1b0 [ 60.997425][ T1494] __x64_sys_ioctl+0x7f/0xa0 [ 60.997451][ T1494] x64_sys_call+0x1878/0x2ee0 [ 60.997470][ T1494] do_syscall_64+0x57/0xf0 [ 60.997492][ T1494] ? clear_bhb_loop+0x50/0xa0 [ 60.997518][ T1494] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 60.997544][ T1494] RIP: 0033:0x7f778f99ddeb [ 60.997564][ T1494] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 60.997583][ T1494] RSP: 002b:00007f77908f7f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.997606][ T1494] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f778f99ddeb [ 60.997622][ T1494] RDX: 00007f77908f8fd0 RSI: 0000000080085502 RDI: 0000000000000007 [ 60.997645][ T1494] RBP: 00007f77908f8fd0 R08: 0000000000000008 R09: 00007f77908f7fc8 [ 60.997660][ T1494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 60.997674][ T1494] R13: 0000000800000000 R14: 0000000000000008 R15: 00007f778fa539d4 [ 60.997692][ T1494] [ 61.282042][ T311] usb 5-1: device descriptor read/8, error -71 [ 61.340051][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 61.343667][ T1526] tmpfs: Unknown parameter '' [ 61.361229][ T9] usb 6-1: device descriptor read/8, error -71 [ 61.440179][ T311] usb 5-1: device descriptor read/8, error -71 [ 61.500993][ T9] usb 6-1: device descriptor read/8, error -71 [ 61.572179][ T36] audit: type=1400 audit(1791034925.979:490): avc: denied { setopt } for pid=1545 comm="syz.2.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.760827][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 61.791295][ T9] usb 6-1: device descriptor read/8, error -71 [ 61.842683][ T36] audit: type=1400 audit(1791034926.249:491): avc: denied { create } for pid=1570 comm="syz.4.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 61.931151][ T9] usb 6-1: device descriptor read/8, error -71 [ 62.040171][ T9] usb usb6-port1: unable to enumerate USB device [ 62.358175][ T1580] cgroup: fork rejected by pids controller in /syz5 [ 62.670366][ T45] usb 1-1: USB disconnect, device number 18 [ 63.020061][ T45] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 63.081644][ T1618] netlink: 216 bytes leftover after parsing attributes in process `syz.2.261'. [ 63.124034][ T1631] fuse: blksize only supported for fuseblk [ 63.130538][ T1631] incfs: Error accessing: ./file0. [ 63.135825][ T1631] incfs: mount failed -20 [ 63.170023][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 63.183542][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 63.200999][ T45] usb 1-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 63.212556][ T45] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.227682][ T45] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 63.237136][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.252648][ T45] usb 1-1: Product: syz [ 63.256883][ T45] usb 1-1: Manufacturer: syz [ 63.261759][ T45] usb 1-1: SerialNumber: syz [ 63.335963][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 63.335980][ T36] audit: type=1400 audit(1791034927.739:494): avc: denied { bind } for pid=1642 comm="syz.2.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.336422][ T1643] netlink: 1788 bytes leftover after parsing attributes in process `syz.2.269'. [ 63.350327][ T36] audit: type=1400 audit(1791034927.739:495): avc: denied { ioctl } for pid=1642 comm="syz.2.269" path="socket:[15694]" dev="sockfs" ino=15694 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.470689][ T45] usb 1-1: MIDIStreaming interface descriptor not found [ 63.482678][ T45] usb 1-1: USB disconnect, device number 19 [ 63.495215][ T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.000361][ T36] audit: type=1400 audit(1791034928.409:496): avc: denied { connect } for pid=1653 comm="syz.0.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.036260][ T36] audit: type=1400 audit(1791034928.439:497): avc: denied { mounton } for pid=1655 comm="syz.0.273" path="/52/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 64.670042][ T311] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 64.820033][ T311] usb 1-1: Invalid ep0 maxpacket: 64 [ 64.970041][ T311] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 65.140025][ T311] usb 1-1: Invalid ep0 maxpacket: 64 [ 65.145604][ T311] usb usb1-port1: attempt power cycle [ 65.490073][ T311] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 65.510408][ T311] usb 1-1: Invalid ep0 maxpacket: 64 [ 65.613734][ T36] audit: type=1400 audit(1791034930.019:498): avc: denied { read } for pid=1694 comm="syz.4.282" name="trace_pipe" dev="tracefs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 65.636772][ T1695] FAULT_INJECTION: forcing a failure. [ 65.636772][ T1695] name failslab, interval 1, probability 0, space 0, times 0 [ 65.649566][ T311] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 65.657201][ T1695] CPU: 0 UID: 0 PID: 1695 Comm: syz.4.282 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 65.657236][ T1695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.657250][ T1695] Call Trace: [ 65.657257][ T1695] [ 65.657265][ T1695] __dump_stack+0x21/0x30 [ 65.657300][ T1695] dump_stack_lvl+0x140/0x1c0 [ 65.657328][ T1695] ? __cfi_dump_stack_lvl+0x10/0x10 [ 65.657355][ T1695] ? plist_del+0x3f0/0x410 [ 65.657376][ T1695] dump_stack+0x19/0x20 [ 65.657402][ T1695] should_fail_ex+0x3c2/0x510 [ 65.657428][ T1695] should_failslab+0xac/0x100 [ 65.657453][ T1695] kmem_cache_alloc_noprof+0x42/0x410 [ 65.657475][ T1695] ? __check_object_size+0x54c/0x870 [ 65.657507][ T1695] ? getname_flags+0xcc/0x6b0 [ 65.657531][ T1695] getname_flags+0xcc/0x6b0 [ 65.657554][ T1695] ? _copy_from_user+0x87/0xa0 [ 65.657583][ T1695] user_path_at+0x2b/0x60 [ 65.657608][ T1695] path_setxattr+0x250/0x5a0 [ 65.657631][ T1695] ? do_futex+0x37d/0x510 [ 65.657664][ T1695] ? simple_xattrs_free+0x180/0x180 [ 65.657691][ T1695] ? xfd_validate_state+0x68/0x140 [ 65.657720][ T1695] ? __kasan_check_write+0x18/0x20 [ 65.657741][ T1695] ? fpregs_restore_userregs+0x11c/0x260 [ 65.657766][ T1695] __x64_sys_lsetxattr+0xc6/0xe0 [ 65.657787][ T1695] x64_sys_call+0x2db8/0x2ee0 [ 65.657806][ T1695] do_syscall_64+0x57/0xf0 [ 65.657827][ T1695] ? clear_bhb_loop+0x50/0xa0 [ 65.657852][ T1695] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 65.657882][ T1695] RIP: 0033:0x7f778f99e159 [ 65.657900][ T1695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.657918][ T1695] RSP: 002b:00007f77908fa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 65.657941][ T1695] RAX: ffffffffffffffda RBX: 00007f778fc25fa0 RCX: 00007f778f99e159 [ 65.657958][ T1695] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 65.657973][ T1695] RBP: 00007f778fa3506b R08: 0000000000000000 R09: 0000000000000000 [ 65.657985][ T1695] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 65.657998][ T1695] R13: 00007f778fc26038 R14: 00007f778fc25fa0 R15: 00007ffde24a5448 [ 65.658015][ T1695] [ 65.890361][ T311] usb 1-1: Invalid ep0 maxpacket: 64 [ 65.894734][ T1699] overlayfs: failed to clone upperpath [ 65.895850][ T311] usb usb1-port1: unable to enumerate USB device [ 65.902413][ T36] audit: type=1400 audit(1791034930.309:499): avc: denied { accept } for pid=1696 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 65.960391][ T36] audit: type=1400 audit(1791034930.339:500): avc: denied { write } for pid=1700 comm="syz.4.283" name="sda1" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.994220][ T36] audit: type=1400 audit(1791034930.369:501): avc: denied { write } for pid=1696 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.260030][ T454] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 66.410033][ T454] usb 5-1: Using ep0 maxpacket: 32 [ 66.416451][ T454] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 66.425216][ T454] usb 5-1: config 0 has no interface number 0 [ 66.431614][ T454] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 66.443441][ T454] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 66.453013][ T454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.461307][ T454] usb 5-1: Product: syz [ 66.465629][ T454] usb 5-1: Manufacturer: syz [ 66.470574][ T454] usb 5-1: SerialNumber: syz [ 66.476024][ T454] usb 5-1: config 0 descriptor?? [ 66.483639][ T1703] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 66.693651][ T454] asix 5-1:0.188: probe with driver asix failed with error -71 [ 66.705632][ T454] usb 5-1: USB disconnect, device number 15 [ 66.988841][ T1720] ./dev/sda1: Can't lookup blockdev [ 67.304780][ T36] audit: type=1400 audit(1791034931.689:502): avc: denied { remount } for pid=1722 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.440008][ T36] audit: type=1400 audit(1791034931.839:503): avc: denied { map } for pid=1731 comm="syz.4.293" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 67.640022][ T580] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 67.801066][ T580] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.820061][ T580] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 67.839347][ T580] usb 1-1: config 0 interface 0 altsetting 243 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 67.860527][ T580] usb 1-1: config 0 interface 0 has no altsetting 0 [ 67.876537][ T580] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 67.890008][ T580] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.890194][ T1753] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 67.908362][ T580] usb 1-1: Product: syz [ 67.912740][ T580] usb 1-1: Manufacturer: syz [ 67.917344][ T580] usb 1-1: SerialNumber: syz [ 67.936150][ T580] usb 1-1: config 0 descriptor?? [ 67.942521][ T1753] raw_sendmsg: syz.4.297 forgot to set AF_INET. Fix it! [ 68.137063][ T1762] ./dev/sda1: Can't lookup blockdev [ 68.158096][ T1726] FAULT_INJECTION: forcing a failure. [ 68.158096][ T1726] name failslab, interval 1, probability 0, space 0, times 0 [ 68.190164][ T1726] CPU: 0 UID: 0 PID: 1726 Comm: syz.0.291 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 68.190222][ T1726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.190235][ T1726] Call Trace: [ 68.190240][ T1726] [ 68.190248][ T1726] __dump_stack+0x21/0x30 [ 68.190278][ T1726] dump_stack_lvl+0x140/0x1c0 [ 68.190301][ T1726] ? __cfi_dump_stack_lvl+0x10/0x10 [ 68.190326][ T1726] dump_stack+0x19/0x20 [ 68.190346][ T1726] should_fail_ex+0x3c2/0x510 [ 68.190372][ T1726] should_failslab+0xac/0x100 [ 68.190395][ T1726] __kmalloc_node_noprof+0x69/0x500 [ 68.190414][ T1726] ? __kvmalloc_node_noprof+0x128/0x300 [ 68.190446][ T1726] __kvmalloc_node_noprof+0x128/0x300 [ 68.190463][ T1726] ? __cfi___check_object_size+0x10/0x10 [ 68.190483][ T1726] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 68.190502][ T1726] vmemdup_user+0x40/0x190 [ 68.190517][ T1726] ? path_setxattr+0x19d/0x5a0 [ 68.190536][ T1726] path_setxattr+0x207/0x5a0 [ 68.190556][ T1726] ? do_futex+0x32a/0x510 [ 68.190577][ T1726] ? simple_xattrs_free+0x180/0x180 [ 68.190600][ T1726] ? xfd_validate_state+0x68/0x140 [ 68.190623][ T1726] ? __kasan_check_write+0x18/0x20 [ 68.190641][ T1726] ? fpregs_restore_userregs+0x11c/0x260 [ 68.190663][ T1726] __x64_sys_lsetxattr+0xc6/0xe0 [ 68.190682][ T1726] x64_sys_call+0x2db8/0x2ee0 [ 68.190699][ T1726] do_syscall_64+0x57/0xf0 [ 68.190721][ T1726] ? clear_bhb_loop+0x50/0xa0 [ 68.190745][ T1726] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 68.190768][ T1726] RIP: 0033:0x7fd62cd9e159 [ 68.190785][ T1726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.190800][ T1726] RSP: 002b:00007fd62dcc2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 68.190823][ T1726] RAX: ffffffffffffffda RBX: 00007fd62d025fa0 RCX: 00007fd62cd9e159 [ 68.190837][ T1726] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 68.190849][ T1726] RBP: 00007fd62ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 68.190861][ T1726] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 68.190874][ T1726] R13: 00007fd62d026038 R14: 00007fd62d025fa0 R15: 00007ffdcc1b94d8 [ 68.190890][ T1726] [ 68.191891][ T580] usb 1-1: USB disconnect, device number 24 [ 68.219738][ T1770] tipc: Can't bind to reserved service type 0 [ 68.373499][ T1771] batadv_slave_1: entered promiscuous mode [ 68.449146][ T1773] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1773 comm=syz.2.305 [ 68.464471][ T1769] batadv_slave_1: left promiscuous mode [ 68.500023][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 68.500039][ T36] audit: type=1400 audit(1791034932.899:507): avc: denied { unmount } for pid=1777 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.536658][ T1780] netlink: 'syz.2.307': attribute type 3 has an invalid length. [ 68.555331][ T1780] netlink: 'syz.2.307': attribute type 3 has an invalid length. [ 68.803082][ T36] audit: type=1400 audit(1791034933.209:508): avc: denied { bind } for pid=1791 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.858190][ T1801] netlink: 'syz.0.313': attribute type 4 has an invalid length. [ 68.929273][ T311] smpboot: CPU 1 is now offline [ 68.937210][ T1803] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 68.968642][ T36] audit: type=1400 audit(1791034933.369:509): avc: denied { watch } for pid=1805 comm="syz.0.315" path="/61/file0" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.991201][ T36] audit: type=1400 audit(1791034933.379:510): avc: denied { connect } for pid=1805 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 69.073990][ T1810] ./dev/sda1: Can't lookup blockdev [ 69.230042][ T580] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 69.370021][ T580] usb 1-1: device descriptor read/64, error -71 [ 69.502696][ T1825] netlink: 'syz.2.319': attribute type 4 has an invalid length. [ 69.530563][ T1825] netlink: 'syz.2.319': attribute type 4 has an invalid length. [ 69.610235][ T580] usb 1-1: device descriptor read/64, error -71 [ 69.850015][ T580] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 69.990057][ T580] usb 1-1: device descriptor read/64, error -71 [ 70.240008][ T580] usb 1-1: device descriptor read/64, error -71 [ 70.350117][ T580] usb usb1-port1: attempt power cycle [ 70.700037][ T580] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 70.730934][ T580] usb 1-1: device descriptor read/8, error -71 [ 70.860909][ T580] usb 1-1: device descriptor read/8, error -71 [ 71.100018][ T580] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 71.140929][ T580] usb 1-1: device descriptor read/8, error -71 [ 71.270974][ T580] usb 1-1: device descriptor read/8, error -71 [ 71.380114][ T580] usb usb1-port1: unable to enumerate USB device [ 72.038459][ T36] audit: type=1400 audit(1791034936.439:511): avc: denied { setattr } for pid=1855 comm="syz.0.326" name="secretmem" dev="secretmem" ino=18494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 72.040515][ T1856] netlink: 388 bytes leftover after parsing attributes in process `syz.0.326'. [ 72.420016][ T580] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 72.560033][ T580] usb 1-1: device descriptor read/64, error -71 [ 72.592947][ T36] audit: type=1400 audit(1791034936.999:512): avc: denied { create } for pid=1860 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 72.665901][ T36] audit: type=1400 audit(1791034937.069:513): avc: denied { setattr } for pid=1865 comm="syz.2.330" name="RAWv6" dev="sockfs" ino=18532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.800039][ T580] usb 1-1: device descriptor read/64, error -71 [ 73.052177][ T580] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 73.201823][ T580] usb 1-1: device descriptor read/64, error -71 [ 73.458387][ T580] usb 1-1: device descriptor read/64, error -71 [ 73.560182][ T36] audit: type=1400 audit(1791034937.915:514): avc: denied { read } for pid=1878 comm="syz.4.335" name="/" dev="configfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.577408][ T580] usb usb1-port1: attempt power cycle [ 73.582105][ T36] audit: type=1400 audit(1791034937.915:515): avc: denied { open } for pid=1878 comm="syz.4.335" path="/" dev="configfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.971541][ T580] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 74.004574][ T580] usb 1-1: device descriptor read/8, error -71 [ 74.143526][ T580] usb 1-1: device descriptor read/8, error -71 [ 74.374822][ T1884] fuse: Bad value for 'fd' [ 74.385682][ T1884] tipc: Failed to remove unknown binding: 66,0,0/0:2636553357/2636553359 [ 74.399203][ T580] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 74.412169][ T1884] tipc: Failed to remove unknown binding: 66,0,0/0:2636553357/2636553358 [ 74.428918][ T1884] tipc: Failed to remove unknown binding: 66,0,0/0:2636553357/2636553359 [ 74.443481][ T580] usb 1-1: device descriptor read/8, error -71 [ 74.453130][ T1884] tipc: Failed to remove unknown binding: 66,0,0/0:2636553357/2636553358 [ 74.581998][ T580] usb 1-1: device descriptor read/8, error -71 [ 74.698603][ T580] usb usb1-port1: unable to enumerate USB device [ 75.509180][ T1897] SELinux: Context system_u:object_r:usbmon_device_t:s0 is not valid (left unmapped). [ 75.532651][ T36] audit: type=1400 audit(1791034939.767:516): avc: denied { relabelto } for pid=1895 comm="syz.4.341" name="73" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:usbmon_device_t:s0" [ 75.558951][ T36] audit: type=1400 audit(1791034939.767:517): avc: denied { associate } for pid=1895 comm="syz.4.341" name="73" dev="tmpfs" ino=437 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:usbmon_device_t:s0" [ 76.000016][ T36] audit: type=1400 audit(1791034940.198:518): avc: denied { create } for pid=1901 comm="syz.2.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 76.072871][ T36] audit: type=1400 audit(1791034940.263:519): avc: denied { watch } for pid=1901 comm="syz.2.343" path="/135/control" dev="tmpfs" ino=854 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.117749][ T36] audit: type=1400 audit(1791034940.310:520): avc: denied { read } for pid=1905 comm="syz.0.344" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.140214][ T36] audit: type=1400 audit(1791034940.310:521): avc: denied { open } for pid=1905 comm="syz.0.344" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.163451][ T36] audit: type=1400 audit(1791034940.310:522): avc: denied { ioctl } for pid=1905 comm="syz.0.344" path="/dev/ppp" dev="devtmpfs" ino=86 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.231313][ T36] audit: type=1400 audit(1791034940.413:523): avc: denied { create } for pid=1905 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 76.363591][ T1909] process '/newroot/74/file0' started with executable stack [ 77.079148][ T1929] tipc: Started in network mode [ 77.089730][ T1929] tipc: Node identity fc010000000000000000000000000001, cluster identity 4711 [ 77.107345][ T1929] tipc: Enabling of bearer rejected, failed to enable media [ 77.400884][ T1949] fuse: Bad value for 'fd' [ 77.479247][ T1957] netlink: 328 bytes leftover after parsing attributes in process `syz.4.361'. [ 77.563598][ T580] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 77.745322][ T580] usb 1-1: Using ep0 maxpacket: 32 [ 77.757017][ T580] usb 1-1: unable to get BOS descriptor or descriptor too short [ 77.765564][ T580] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.781607][ T580] usb 1-1: New USB device found, idVendor=0499, idProduct=105c, bcdDevice= 0.40 [ 77.794136][ T580] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.810654][ T580] usb 1-1: Product: syz [ 77.819420][ T580] usb 1-1: Manufacturer: syz [ 77.828605][ T580] usb 1-1: SerialNumber: syz [ 78.492004][ T1975] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.499315][ T1975] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.507025][ T1975] bridge_slave_0: entered allmulticast mode [ 78.513404][ T1975] bridge_slave_0: entered promiscuous mode [ 78.541386][ T1975] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.548485][ T1975] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.555568][ T1975] bridge_slave_1: entered allmulticast mode [ 78.562071][ T1975] bridge_slave_1: entered promiscuous mode [ 78.576139][ T1989] overlayfs: empty lowerdir [ 78.609954][ T580] usb 1-1: USB disconnect, device number 33 [ 78.648450][ T1975] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.655532][ T1975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.662825][ T1975] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.669878][ T1975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.690531][ T1743] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.699149][ T1743] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.709201][ T926] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.716292][ T926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.725783][ T1743] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.732892][ T1743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.761430][ T1975] veth0_vlan: entered promiscuous mode [ 78.772993][ T1975] veth1_macvtap: entered promiscuous mode [ 78.794058][ T923] bridge_slave_1: left allmulticast mode [ 78.799769][ T923] bridge_slave_1: left promiscuous mode [ 78.806021][ T923] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.813558][ T923] bridge_slave_0: left allmulticast mode [ 78.819406][ T923] bridge_slave_0: left promiscuous mode [ 78.825202][ T923] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.923244][ T923] veth1_macvtap: left promiscuous mode [ 78.928802][ T923] veth0_vlan: left promiscuous mode [ 79.111038][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 79.111055][ T36] audit: type=1400 audit(1791034943.107:533): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 79.142738][ T36] audit: type=1400 audit(1791034943.135:534): avc: denied { getopt } for pid=2002 comm="syz.0.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.552179][ T311] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 79.623156][ T36] audit: type=1400 audit(1791034943.584:535): avc: denied { block_suspend } for pid=2018 comm="syz.2.383" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 79.664938][ T2023] ./dev/sda1: Can't lookup blockdev [ 79.671383][ T2025] ./dev/sda1: Can't lookup blockdev [ 79.724816][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.735821][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.745604][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.758606][ T311] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.767685][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.776224][ T311] usb 1-1: config 0 descriptor?? [ 79.921130][ T2036] binder: Unknown parameter 'defcontext01777777777777777777777' [ 79.928967][ T36] audit: type=1400 audit(1791034943.865:536): avc: denied { remount } for pid=2035 comm="syz.6.388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.051183][ T36] audit: type=1400 audit(1791034943.986:537): avc: denied { accept } for pid=2040 comm="syz.4.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.067076][ T2043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.389'. [ 80.089694][ T36] audit: type=1400 audit(1791034943.995:538): avc: denied { create } for pid=2042 comm="syz.6.389" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 80.110490][ T36] audit: type=1400 audit(1791034943.995:539): avc: denied { read } for pid=2042 comm="syz.6.389" name="file2" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 80.132929][ T36] audit: type=1400 audit(1791034943.995:540): avc: denied { open } for pid=2042 comm="syz.6.389" path="/4/file2" dev="tmpfs" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 80.156091][ T36] audit: type=1400 audit(1791034943.995:541): avc: denied { ioctl } for pid=2042 comm="syz.6.389" path="/4/file2" dev="tmpfs" ino=41 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 80.641061][ T36] audit: type=1400 audit(1791034944.538:542): avc: denied { read } for pid=2074 comm="syz.4.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.670416][ T2077] ./dev/sda1: Can't lookup blockdev [ 81.778895][ T2089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 82.279798][ T2096] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 82.281465][ T2095] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 82.301704][ T2095] netlink: 'syz.6.411': attribute type 4 has an invalid length. [ 82.309405][ T2095] netlink: 17 bytes leftover after parsing attributes in process `syz.6.411'. [ 82.384498][ T2104] tipc: Started in network mode [ 82.389535][ T2104] tipc: Node identity ac14140f, cluster identity 4711 [ 82.396697][ T2104] tipc: New replicast peer: 255.255.255.255 [ 82.403013][ T2104] tipc: Enabled bearer , priority 10 [ 82.422340][ T2109] SELinux: Context is not valid (left unmapped). [ 82.464477][ T2116] netlink: 'syz.4.418': attribute type 29 has an invalid length. [ 82.522372][ T311] usbhid 1-1:0.0: can't add hid device: -71 [ 82.533614][ T2124] FAULT_INJECTION: forcing a failure. [ 82.533614][ T2124] name failslab, interval 1, probability 0, space 0, times 0 [ 82.547241][ T311] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 82.556170][ T311] usb 1-1: USB disconnect, device number 34 [ 82.562371][ T2124] CPU: 0 UID: 0 PID: 2124 Comm: syz.0.421 Not tainted syzkaller #0 60889c1c5e6bdc1f3cb1b6a230ba908545dccc71 [ 82.562393][ T2124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.562401][ T2124] Call Trace: [ 82.562406][ T2124] [ 82.562411][ T2124] __dump_stack+0x21/0x30 [ 82.562433][ T2124] dump_stack_lvl+0x140/0x1c0 [ 82.562449][ T2124] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.562465][ T2124] dump_stack+0x19/0x20 [ 82.562480][ T2124] should_fail_ex+0x3c2/0x510 [ 82.562493][ T2124] should_failslab+0xac/0x100 [ 82.562507][ T2124] kmem_cache_alloc_noprof+0x42/0x410 [ 82.562518][ T2124] ? vm_area_dup+0x3f/0x560 [ 82.562530][ T2124] vm_area_dup+0x3f/0x560 [ 82.562541][ T2124] ? __split_vma+0x1b8/0xc10 [ 82.562553][ T2124] __split_vma+0x1ce/0xc10 [ 82.562565][ T2124] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 82.562577][ T2124] ? __futex_queue+0x19f/0x350 [ 82.562594][ T2124] ? schedule+0xc5/0x240 [ 82.562607][ T2124] vma_modify+0x364/0x1540 [ 82.562619][ T2124] vma_modify_flags+0x182/0x1c0 [ 82.562632][ T2124] mlock_fixup+0x1c9/0x740 [ 82.562647][ T2124] apply_vma_lock_flags+0x28a/0x3b0 [ 82.562663][ T2124] ? do_mlock+0xa10/0xa10 [ 82.562678][ T2124] ? __cfi_down_write_killable+0x10/0x10 [ 82.562693][ T2124] ? __cfi_do_futex+0x10/0x10 [ 82.562706][ T2124] ? mutex_unlock+0x90/0x240 [ 82.562719][ T2124] do_mlock+0x71d/0xa10 [ 82.562734][ T2124] ? fput+0x1a4/0x230 [ 82.562747][ T2124] ? lru_gen_add_folio+0x880/0x880 [ 82.562763][ T2124] ? xfd_validate_state+0x68/0x140 [ 82.562781][ T2124] ? __kasan_check_write+0x18/0x20 [ 82.562792][ T2124] __x64_sys_mlock+0x64/0x80 [ 82.562808][ T2124] x64_sys_call+0x670/0x2ee0 [ 82.562824][ T2124] do_syscall_64+0x57/0xf0 [ 82.562841][ T2124] ? clear_bhb_loop+0x50/0xa0 [ 82.562866][ T2124] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 82.562889][ T2124] RIP: 0033:0x7fd62cd9e159 [ 82.562901][ T2124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.562911][ T2124] RSP: 002b:00007fd62dcc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 82.562925][ T2124] RAX: ffffffffffffffda RBX: 00007fd62d025fa0 RCX: 00007fd62cd9e159 [ 82.562934][ T2124] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000ffb000 [ 82.562947][ T2124] RBP: 00007fd62ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 82.562959][ T2124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.562970][ T2124] R13: 00007fd62d026038 R14: 00007fd62d025fa0 R15: 00007ffdcc1b94d8 [ 82.562987][ T2124] [ 82.840525][ T2128] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 82.854850][ T2128] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 83.357939][ T311] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 83.518276][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 83.525171][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.533837][ T311] usb 1-1: config 10 has an invalid interface number: 188 but max is 0 [ 83.542557][ T311] usb 1-1: config 10 has no interface number 0 [ 83.549007][ T311] usb 1-1: config 10 interface 188 altsetting 134 endpoint 0xA has an invalid bInterval 127, changing to 10 [ 83.560898][ T311] usb 1-1: config 10 interface 188 altsetting 134 endpoint 0xA has invalid maxpacket 18369, setting to 1024 [ 83.572546][ T9] tipc: Node number set to 2886997007 [ 83.578187][ T311] usb 1-1: config 10 interface 188 has no altsetting 0 [ 83.586840][ T311] usb 1-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=68.be [ 83.596370][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.610117][ T311] usb 1-1: Product: syz [ 83.617981][ T311] usb 1-1: Manufacturer: syz [ 83.622689][ T311] usb 1-1: SerialNumber: syz [ 83.628263][ T2142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.727316][ T2173] veth1_to_bond: entered allmulticast mode [ 83.733345][ T580] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 83.741014][ T2174] netlink: 148 bytes leftover after parsing attributes in process `syz.2.437'. [ 83.752759][ T2174] veth1_to_bond (unregistering): left allmulticast mode [ 83.806920][ T2176] fuse: Bad value for 'user_id' [ 83.811817][ T2176] fuse: Bad value for 'user_id' [ 83.841493][ T2180] netlink: 'syz.2.440': attribute type 15 has an invalid length. [ 83.849350][ T2180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.440'. [ 83.881755][ T580] usb 7-1: device descriptor read/64, error -71 [ 84.138336][ T580] usb 7-1: device descriptor read/64, error -71 [ 84.405607][ T580] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 84.544609][ T580] usb 7-1: device descriptor read/64, error -71 [ 84.774227][ T2191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.443'. [ 84.801152][ T580] usb 7-1: device descriptor read/64, error -71 [ 84.886090][ T2197] netlink: 104 bytes leftover after parsing attributes in process `syz.2.446'. [ 84.918910][ T580] usb usb7-port1: attempt power cycle [ 84.928589][ T36] kauditd_printk_skb: 268 callbacks suppressed [ 84.928604][ T36] audit: type=1400 audit(1791034948.551:811): avc: denied { getopt } for pid=2205 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.963935][ T2210] ./dev/sda1: Can't lookup blockdev [ 84.969814][ T2210] futex_wake_op: syz.2.448 tries to shift op by 144; fix this program [ 84.978821][ T2210] futex_wake_op: syz.2.448 tries to shift op by 144; fix this program [ 85.032400][ T36] audit: type=1400 audit(1791034948.644:812): avc: denied { execute } for pid=2215 comm="syz.2.451" dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.053564][ T36] audit: type=1400 audit(1791034948.644:813): avc: denied { execute_no_trans } for pid=2215 comm="syz.2.451" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.314333][ T580] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 85.347309][ T580] usb 7-1: device descriptor read/8, error -71 [ 85.486408][ T580] usb 7-1: device descriptor read/8, error -71 [ 85.604106][ T36] audit: type=1400 audit(1791034949.187:814): avc: denied { listen } for pid=2227 comm="syz.2.455" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 85.741957][ T580] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 85.764373][ T580] usb 7-1: device descriptor read/8, error -71 [ 85.903339][ T580] usb 7-1: device descriptor read/8, error -71 [ 86.019968][ T580] usb usb7-port1: unable to enumerate USB device [ 86.267908][ T311] usb 1-1: USB disconnect, device number 35 [ 86.276018][ T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:10.188/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.375071][ T2246] netlink: 'syz.0.462': attribute type 4 has an invalid length. [ 86.640340][ T2250] netlink: 'syz.6.464': attribute type 4 has an invalid length. [ 86.648028][ T2250] netlink: 'syz.6.464': attribute type 6 has an invalid length. [ 86.656005][ T2250] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.464'. [ 86.665836][ T2250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30843 sclass=netlink_route_socket pid=2250 comm=syz.6.464 [ 86.714781][ T311] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 86.876759][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 86.891295][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.908360][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.923131][ T311] usb 1-1: string descriptor 0 read error: -22 [ 86.931802][ T311] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 86.941173][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.951044][ T311] usb 1-1: selecting invalid altsetting 1 [ 86.956999][ T311] usb 1-1: unit 3 not found! [ 87.165377][ T36] audit: type=1400 audit(1791034950.646:815): avc: denied { map } for pid=2247 comm="syz.0.463" path="/dev/usbmon5" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.170121][ T311] usb 1-1: cannot request logical cluster ID: 0 (err: -32) [ 87.196832][ T311] usb 1-1: invalid MIXER UNIT descriptor 6 [ 87.204212][ T311] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -32 [ 87.206540][ T503] udevd[503]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 87.215161][ T311] usb 1-1: USB disconnect, device number 36 [ 87.997652][ T311] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 88.157992][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 88.164196][ T311] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 88.172433][ T311] usb 1-1: config 0 has no interface number 0 [ 88.179877][ T311] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 88.189053][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.197823][ T311] usb 1-1: Product: syz [ 88.202143][ T311] usb 1-1: Manufacturer: syz [ 88.206776][ T311] usb 1-1: SerialNumber: syz [ 88.212153][ T311] usb 1-1: config 0 descriptor?? [ 88.217901][ T311] smsc95xx v2.0.0 [ 88.758109][ T311] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 88.769474][ T311] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 88.900322][ T2285] /dev/loop0: Can't lookup blockdev [ 88.915371][ T2287] overlayfs: missing 'lowerdir' [ 89.464533][ T36] audit: type=1400 audit(1791034952.798:816): avc: denied { watch_reads } for pid=2288 comm="syz.2.477" path="/180" dev="tmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 89.464671][ T2289] /dev/loop2: Can't lookup blockdev [ 89.708450][ T311] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 89.727294][ T311] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 89.924408][ T311] usb 1-1: USB disconnect, device number 37 [ 89.946483][ T2372] mmap: syz.2.484 (2372): VmData 41795584 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data. [ 90.541251][ T36] audit: type=1400 audit(1791034953.798:817): avc: denied { write } for pid=2384 comm="syz.0.487" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.597270][ T36] audit: type=1400 audit(1791034953.855:818): avc: denied { wake_alarm } for pid=2384 comm="syz.0.487" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.767108][ T2390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.488'. [ 91.044574][ T2415] tc_dump_action: action bad kind [ 91.333118][ T45] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 91.435777][ T36] audit: type=1400 audit(1791034954.640:819): avc: denied { cmd } for pid=2418 comm="iou-wrk-2419" path="socket:[20612]" dev="sockfs" ino=20612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.494569][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.505656][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.515518][ T45] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.528798][ T45] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.537904][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.547733][ T36] audit: type=1400 audit(1791034954.743:820): avc: denied { bind } for pid=2421 comm="syz.2.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.550069][ T45] usb 7-1: config 0 descriptor?? [ 91.580736][ T36] audit: type=1400 audit(1791034954.781:821): avc: denied { mount } for pid=2423 comm="syz.2.500" name="/" dev="pstore" ino=2632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 91.678371][ T2428] overlayfs: failed to clone upperpath [ 91.687878][ T2428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.501'. [ 92.062536][ T2435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2435 comm=syz.4.502 [ 93.770421][ T2464] ./dev/sda1: Can't lookup blockdev [ 94.279240][ T45] usbhid 7-1:0.0: can't add hid device: -71 [ 94.285823][ T45] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 94.298132][ T45] usb 7-1: USB disconnect, device number 6 [ 94.311616][ T36] audit: type=1400 audit(1791034957.329:822): avc: denied { ioctl } for pid=2472 comm="syz.6.516" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 94.449200][ T36] audit: type=1400 audit(1791034957.460:823): avc: denied { create } for pid=2475 comm="syz.6.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 94.686662][ T2480] batadv_slave_1: entered promiscuous mode [ 94.703947][ T2480] batadv_slave_1: left promiscuous mode [ 95.000018][ T9] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 95.161109][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 95.169682][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.181001][ T9] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 95.190200][ T9] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 95.198723][ T9] usb 1-1: Product: syz [ 95.202942][ T9] usb 1-1: Manufacturer: syz [ 95.209601][ T9] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 95.423464][ T9] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 95.433145][ T9] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 95.442073][ T9] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 95.450752][ T9] usb 1-1: USB disconnect, device number 38 [ 96.348147][ T36] audit: type=1400 audit(1791034959.238:824): avc: denied { append } for pid=2510 comm="syz.6.525" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 96.817443][ T311] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 96.873346][ T2533] overlayfs: lower data-only dirs require metacopy support. [ 96.891085][ T36] audit: type=1400 audit(1791034959.733:825): avc: denied { write } for pid=2534 comm="syz.0.532" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.912766][ T36] audit: type=1400 audit(1791034959.733:826): avc: denied { remove_name } for pid=2534 comm="syz.0.532" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.935769][ T36] audit: type=1400 audit(1791034959.733:827): avc: denied { unlink } for pid=2534 comm="syz.0.532" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 96.976091][ T2545] netlink: 'syz.2.536': attribute type 49 has an invalid length. [ 96.986774][ T36] audit: type=1400 audit(1791034959.827:828): avc: denied { map } for pid=2536 comm="syz.0.533" path="socket:[21494]" dev="sockfs" ino=21494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 96.991988][ T311] usb 7-1: config 127 has an invalid interface number: 57 but max is 0 [ 97.010745][ T36] audit: type=1400 audit(1791034959.827:829): avc: denied { accept } for pid=2536 comm="syz.0.533" path="socket:[21494]" dev="sockfs" ino=21494 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 97.035935][ T311] usb 7-1: config 127 has no interface number 0 [ 97.080744][ T311] usb 7-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 97.105506][ T311] usb 7-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 97.118940][ T311] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.136530][ T311] usb 7-1: Product: syz [ 97.140819][ T311] usb 7-1: Manufacturer: syz [ 97.145447][ T311] usb 7-1: SerialNumber: syz [ 97.157035][ T2529] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 97.184475][ T2561] ./dev/sda1: Can't lookup blockdev [ 97.222658][ T36] audit: type=1400 audit(1791034960.051:830): avc: denied { read } for pid=2564 comm="syz.2.544" path="socket:[21548]" dev="sockfs" ino=21548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.287159][ T2568] netlink: 'syz.2.545': attribute type 58 has an invalid length. [ 97.309192][ T580] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 97.381262][ T311] asix 7-1:127.57: probe with driver asix failed with error -22 [ 97.391527][ T311] usb 7-1: USB disconnect, device number 7 [ 97.470616][ T580] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.484509][ T580] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.493703][ T580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 97.501820][ T580] usb 1-1: SerialNumber: syz [ 97.852214][ T2570] netlink: 'syz.2.546': attribute type 4 has an invalid length. [ 97.859991][ T2570] netlink: 17 bytes leftover after parsing attributes in process `syz.2.546'. [ 97.869480][ T2570] netlink: 'syz.2.546': attribute type 27 has an invalid length. [ 97.879008][ T2570] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 97.938575][ T36] audit: type=1400 audit(1791034960.716:831): avc: denied { create } for pid=2548 comm="syz.0.537" name="#9" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.951378][ T2575] x_tables: unsorted underflow at hook 3 [ 97.959128][ T36] audit: type=1400 audit(1791034960.716:832): avc: denied { link } for pid=2548 comm="syz.0.537" name="#9" dev="tmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.986503][ T36] audit: type=1400 audit(1791034960.716:833): avc: denied { rename } for pid=2548 comm="syz.0.537" name="#a" dev="tmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 98.150418][ T580] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 98.161045][ T580] usb 1-1: USB disconnect, device number 39 [ 98.185796][ T45] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 98.359206][ T45] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 98.368327][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.376327][ T45] usb 7-1: Product: syz [ 98.380530][ T45] usb 7-1: Manufacturer: syz [ 98.385128][ T45] usb 7-1: SerialNumber: syz [ 98.540218][ T2577] netlink: 92 bytes leftover after parsing attributes in process `syz.2.548'. [ 98.821569][ T45] usblp 7-1:245.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 99.036716][ C1] usblp0: nonzero write bulk status received: -71 [ 99.045619][ T45] usb 7-1: USB disconnect, device number 8 [ 99.052313][ T45] usblp0: removed [ 99.073159][ T580] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 99.233471][ T580] usb 1-1: Using ep0 maxpacket: 32 [ 99.239912][ T580] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 99.248090][ T580] usb 1-1: config 0 has no interface number 0 [ 99.255675][ T580] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 99.264733][ T580] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.272929][ T580] usb 1-1: Product: syz [ 99.277141][ T580] usb 1-1: Manufacturer: syz [ 99.281765][ T580] usb 1-1: SerialNumber: syz [ 99.287088][ T580] usb 1-1: config 0 descriptor?? [ 99.292829][ T580] smsc95xx v2.0.0 [ 99.721492][ T2585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.729955][ T580] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 99.746275][ T2585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.755919][ T580] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 100.045501][ T2601] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 100.207040][ T580] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 100.218277][ T580] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 100.227480][ T580] usb 1-1: USB disconnect, device number 40 [ 100.321324][ T2614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.564'. [ 100.375917][ T2615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2615 comm=syz.4.564 [ 100.398942][ T1044] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 100.432690][ T2628] netlink: 'syz.4.568': attribute type 4 has an invalid length. [ 100.442520][ T2628] netlink: 'syz.4.568': attribute type 4 has an invalid length. [ 100.451983][ T2628] netlink: 44 bytes leftover after parsing attributes in process `syz.4.568'. [ 100.560281][ T1044] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.571212][ T1044] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.581023][ T1044] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.594247][ T1044] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.603539][ T1044] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.612109][ T1044] usb 7-1: config 0 descriptor?? [ 100.789249][ T2636] tipc: Enabled bearer , priority 10 [ 101.150274][ T2659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.579'. [ 101.823471][ T2679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2679 comm=syz.2.585 [ 101.974843][ T2682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'. [ 101.991623][ T580] tipc: Node number set to 4227923969 [ 102.023304][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 102.023342][ T36] audit: type=1400 audit(1791035224.586:838): avc: denied { create } for pid=2685 comm="syz.4.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.430632][ T36] audit: type=1326 audit(1791035224.979:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2694 comm="syz.2.592" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3e0f9e159 code=0x0 [ 102.644656][ T2702] netlink: 116 bytes leftover after parsing attributes in process `syz.4.594'. [ 102.654651][ T36] audit: type=1400 audit(1791035225.194:840): avc: denied { execmem } for pid=2701 comm="syz.4.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 102.712009][ T36] audit: type=1326 audit(1791035225.241:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2701 comm="syz.4.594" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f778f99e159 code=0x0 [ 102.981831][ T2705] tmpfs: Invalid uid '0x00000000ffffffff' [ 102.995191][ T36] audit: type=1400 audit(1791035225.503:842): avc: denied { create } for pid=2704 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.015630][ T36] audit: type=1400 audit(1791035225.503:843): avc: denied { write } for pid=2704 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.035811][ T36] audit: type=1400 audit(1791035225.503:844): avc: denied { nlmsg_write } for pid=2704 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 103.061978][ T36] audit: type=1400 audit(1791035225.569:845): avc: denied { accept } for pid=2707 comm="syz.0.596" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.364927][ T1044] usbhid 7-1:0.0: can't add hid device: -71 [ 103.374672][ T1044] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 103.386619][ T1044] usb 7-1: USB disconnect, device number 9 [ 103.473398][ T2728] netlink: 'syz.6.603': attribute type 22 has an invalid length. [ 103.585013][ T580] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 103.757921][ T580] usb 1-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 103.767140][ T580] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.775341][ T580] usb 1-1: Product: syz [ 103.779667][ T580] usb 1-1: Manufacturer: syz [ 103.784348][ T580] usb 1-1: SerialNumber: syz [ 104.044236][ T311] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 104.205674][ T311] usb 7-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.217428][ T311] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 104.228694][ T311] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 104.238619][ T311] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 104.247869][ T311] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.474179][ T311] usb 7-1: string descriptor 0 read error: -71 [ 104.482832][ T311] hub 7-1:32.0: USB hub found [ 104.488199][ T311] hub 7-1:32.0: config failed, can't read hub descriptor (err -22) [ 104.517007][ T311] usb 7-1: USB disconnect, device number 10 [ 104.555197][ T580] usb 1-1: Can't get UAC3 power state for id 10 [ 104.566540][ T580] usb 1-1: BAAD SPEAKERPHONE c_chmask mismatch [ 104.575406][ T580] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 104.586228][ T580] usb 1-1: USB disconnect, device number 41 [ 104.597022][ T2749] udevd[2749]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.084254][ T2757] sd 0:0:1:0: PR command failed: 1026 [ 105.089777][ T2757] sd 0:0:1:0: Sense Key : 0x5 [current] [ 105.095469][ T2757] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 105.164248][ T2770] overlayfs: failed to resolve './file2': -2 [ 105.171519][ T2770] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 105.519562][ T580] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 105.658536][ T580] usb 7-1: device descriptor read/64, error -71 [ 105.669021][ T36] audit: type=1400 audit(1791035227.996:846): avc: denied { mount } for pid=2777 comm="syz.2.619" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 105.890183][ T2791] netlink: 'syz.4.621': attribute type 11 has an invalid length. [ 105.900282][ T2793] netlink: 'syz.4.621': attribute type 11 has an invalid length. [ 105.915106][ T580] usb 7-1: device descriptor read/64, error -71 [ 106.171708][ T580] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 106.215653][ T36] audit: type=1400 audit(1791035228.520:847): avc: denied { associate } for pid=2802 comm="syz.2.623" name="file1" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 106.310635][ T580] usb 7-1: device descriptor read/64, error -71 [ 106.578367][ T580] usb 7-1: device descriptor read/64, error -71 [ 106.695602][ T580] usb usb7-port1: attempt power cycle [ 106.867165][ T2816] 9pnet_fd: p9_fd_create_unix (2816): problem connecting socket: ./proc: -111 [ 107.059260][ T580] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 107.113433][ T580] usb 7-1: device descriptor read/8, error -71 [ 107.252414][ T580] usb 7-1: device descriptor read/8, error -71 [ 107.518700][ T580] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 107.551757][ T580] usb 7-1: device descriptor read/8, error -71 [ 107.701389][ T580] usb 7-1: device descriptor read/8, error -71 [ 107.839464][ T580] usb usb7-port1: unable to enumerate USB device [ 107.862813][ T2843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.639'. [ 107.871906][ T2844] netlink: 36 bytes leftover after parsing attributes in process `syz.2.639'. [ 107.881228][ T2843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.639'. [ 108.042551][ T311] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 108.202930][ T311] usb 1-1: Using ep0 maxpacket: 8 [ 108.209699][ T311] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.219466][ T311] usb 1-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 108.228582][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.236646][ T311] usb 1-1: Product: syz [ 108.240867][ T311] usb 1-1: Manufacturer: syz [ 108.245767][ T311] usb 1-1: SerialNumber: syz [ 108.440382][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 108.440399][ T36] audit: type=1400 audit(1791035230.597:849): avc: denied { connect } for pid=2848 comm="syz.2.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.469695][ T36] audit: type=1404 audit(1791035230.625:850): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 108.483506][ T2853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 108.488583][ T1975] audit: audit_backlog=65 > audit_backlog_limit=64 [ 108.491619][ T2852] audit: audit_backlog=66 > audit_backlog_limit=64 [ 108.503872][ T1975] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 108.505668][ T2837] audit: audit_backlog=66 > audit_backlog_limit=64 [ 108.512331][ T1975] audit: backlog limit exceeded [ 108.512526][ T1975] audit: audit_backlog=66 > audit_backlog_limit=64 [ 108.518961][ T2853] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 108.560010][ T311] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.571990][ T311] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 108.585037][ T903] bridge_slave_1: left allmulticast mode [ 108.590145][ T311] usb 1-1: USB disconnect, device number 42 [ 108.609582][ T903] bridge_slave_1: left promiscuous mode [ 108.634126][ T903] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.644081][ T903] bridge_slave_0: left allmulticast mode [ 108.649890][ T903] bridge_slave_0: left promiscuous mode [ 108.655881][ T903] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.771437][ T903] veth1_macvtap: left promiscuous mode [ 108.776944][ T903] veth0_vlan: left promiscuous mode [ 109.714622][ T2887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 113.794097][ T36] kauditd_printk_skb: 46870 callbacks suppressed [ 113.794115][ T36] audit: type=1400 audit(1791035235.610:47288): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 113.800285][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 113.800476][ T36] audit: type=1400 audit(1791035235.610:47289): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 113.821489][ T149] audit: audit_lost=148 audit_rate_limit=0 audit_backlog_limit=64 [ 113.828290][ T36] audit: type=1400 audit(1791035235.610:47290): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 113.848988][ T149] audit: backlog limit exceeded [ 113.849244][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 113.857222][ T36] audit: type=1400 audit(1791035235.610:47291): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 113.877979][ T149] audit: audit_lost=149 audit_rate_limit=0 audit_backlog_limit=64 [ 113.882993][ T36] audit: type=1400 audit(1791035235.610:47292): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 115.326249][ T2936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.667'. [ 115.354382][ T2935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.667'. [ 118.120018][ T2962] netlink: 'syz.4.676': attribute type 12 has an invalid length. [ 119.150457][ T36] kauditd_printk_skb: 63391 callbacks suppressed [ 119.150476][ T36] audit: type=1400 audit(1791035240.615:106477): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 119.156250][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.156931][ T36] audit: type=1400 audit(1791035240.624:106478): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 119.178077][ T149] audit: audit_lost=1552 audit_rate_limit=0 audit_backlog_limit=64 [ 119.184931][ T36] audit: type=1400 audit(1791035240.624:106479): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 119.205906][ T149] audit: backlog limit exceeded [ 119.213920][ T36] audit: type=1400 audit(1791035240.624:106480): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 119.235309][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.240212][ T36] audit: type=1400 audit(1791035240.624:106481): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 119.261144][ T149] audit: audit_lost=1553 audit_rate_limit=0 audit_backlog_limit=64 [ 121.241598][ T2979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.679'. [ 123.030909][ T2986] cgroup: fork rejected by pids controller in /syz0 [ 124.506110][ T36] kauditd_printk_skb: 59642 callbacks suppressed [ 124.506127][ T36] audit: type=1400 audit(1791035245.629:166123): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 124.512231][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.512489][ T36] audit: type=1400 audit(1791035245.629:166124): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 124.533585][ T149] audit: audit_lost=1554 audit_rate_limit=0 audit_backlog_limit=64 [ 124.540382][ T36] audit: type=1400 audit(1791035245.629:166125): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 124.561192][ T149] audit: backlog limit exceeded [ 124.561446][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 124.569417][ T36] audit: type=1400 audit(1791035245.629:166126): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 124.590263][ T149] audit: audit_lost=1555 audit_rate_limit=0 audit_backlog_limit=64 [ 124.595282][ T36] audit: type=1400 audit(1791035245.629:166127): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 129.862058][ T36] kauditd_printk_skb: 63635 callbacks suppressed [ 129.862075][ T36] audit: type=1400 audit(1791035250.633:226822): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 129.878031][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 129.889755][ T36] audit: type=1400 audit(1791035250.642:226823): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 129.896143][ T149] audit: audit_lost=2536 audit_rate_limit=0 audit_backlog_limit=64 [ 129.917363][ T36] audit: type=1400 audit(1791035250.642:226824): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 129.925166][ T149] audit: backlog limit exceeded [ 129.947280][ T36] audit: type=1400 audit(1791035250.642:226825): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 129.951750][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 129.972515][ T36] audit: type=1400 audit(1791035250.642:226826): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 129.978975][ T149] audit: audit_lost=2537 audit_rate_limit=0 audit_backlog_limit=64 [ 131.339479][ T1744] bridge_slave_1: left allmulticast mode [ 131.345166][ T1744] bridge_slave_1: left promiscuous mode [ 131.351393][ T1744] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.359312][ T1744] bridge_slave_0: left allmulticast mode [ 131.364965][ T1744] bridge_slave_0: left promiscuous mode [ 131.370842][ T1744] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.502692][ T1744] tipc: Disabling bearer [ 131.512081][ T1744] tipc: Left network mode [ 131.523222][ T1744] veth1_macvtap: left promiscuous mode [ 131.528779][ T1744] veth0_vlan: left promiscuous mode [ 131.630660][ T1009] bridge0: port 3(syz_tun) entered disabled state [ 131.640628][ T1009] syz_tun (unregistering): left allmulticast mode [ 131.647493][ T1009] syz_tun (unregistering): left promiscuous mode [ 131.653828][ T1009] bridge0: port 3(syz_tun) entered disabled state [ 131.851873][ T1744] bridge_slave_1: left allmulticast mode [ 131.857628][ T1744] bridge_slave_1: left promiscuous mode [ 131.863578][ T1744] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.871480][ T1744] bridge_slave_0: left allmulticast mode [ 131.877530][ T1744] bridge_slave_0: left promiscuous mode [ 131.883729][ T1744] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.892117][ T1744] bridge_slave_1: left allmulticast mode [ 131.898322][ T1744] bridge_slave_1: left promiscuous mode [ 131.904357][ T1744] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.912379][ T1744] bridge_slave_0: left allmulticast mode [ 131.918557][ T1744] bridge_slave_0: left promiscuous mode [ 131.924511][ T1744] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.111737][ T1744] tipc: Disabling bearer [ 132.117483][ T1744] tipc: Left network mode [ 132.122554][ T1744] tipc: Disabling bearer [ 132.128309][ T1744] tipc: Left network mode [ 132.135088][ T1744] veth1_macvtap: left promiscuous mode [ 132.141080][ T1744] veth0_vlan: left promiscuous mode [ 132.146928][ T1744] veth1_macvtap: left promiscuous mode [ 132.153805][ T1744] veth0_vlan: left promiscuous mode [ 135.218177][ T36] kauditd_printk_skb: 54928 callbacks suppressed [ 135.218196][ T36] audit: type=1400 audit(1791035255.647:281463): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.224256][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.224563][ T36] audit: type=1400 audit(1791035255.647:281464): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.245647][ T149] audit: audit_lost=2635 audit_rate_limit=0 audit_backlog_limit=64 [ 135.252441][ T36] audit: type=1400 audit(1791035255.647:281465): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.273334][ T149] audit: backlog limit exceeded [ 135.273595][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 135.281450][ T36] audit: type=1400 audit(1791035255.647:281466): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 135.302321][ T149] audit: audit_lost=2636 audit_rate_limit=0 audit_backlog_limit=64 [ 135.307402][ T36] audit: type=1400 audit(1791035255.647:281467): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.574072][ T36] kauditd_printk_skb: 64331 callbacks suppressed [ 140.574090][ T36] audit: type=1400 audit(1791035260.660:342915): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.580442][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 140.580460][ T149] audit: audit_lost=3598 audit_rate_limit=0 audit_backlog_limit=64 [ 140.602126][ T36] audit: type=1400 audit(1791035260.660:342916): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.609012][ T149] audit: backlog limit exceeded [ 140.617003][ T36] audit: type=1400 audit(1791035260.660:342917): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.638477][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 140.643161][ T36] audit: type=1400 audit(1791035260.660:342918): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 140.664708][ T149] audit: audit_lost=3599 audit_rate_limit=0 audit_backlog_limit=64 [ 140.671300][ T36] audit: type=1400 audit(1791035260.660:342919): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.930021][ T36] kauditd_printk_skb: 63867 callbacks suppressed [ 145.930038][ T36] audit: type=1400 audit(1791035265.665:405121): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.936055][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.936413][ T36] audit: type=1400 audit(1791035265.674:405122): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.957632][ T149] audit: audit_lost=4155 audit_rate_limit=0 audit_backlog_limit=64 [ 145.964570][ T36] audit: type=1400 audit(1791035265.674:405123): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 145.985419][ T149] audit: backlog limit exceeded [ 145.985698][ T149] audit: audit_backlog=65 > audit_backlog_limit=64 [ 145.993628][ T36] audit: type=1400 audit(1791035265.674:405124): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 146.014429][ T149] audit: audit_lost=4156 audit_rate_limit=0 audit_backlog_limit=64 [ 146.014446][ T149] audit: backlog limit exceeded